Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2013-02-07   CubeCart 5.2.0 - 'cubecart.class.php' PHP Object Injection 34 WEB EgiX
2013-02-07   Netgear DGN1000B - Multiple Vulnerabilities 39 WEB m-1-k-3
2013-02-06   Hiverr 2.2 - Multiple Vulnerabilities 32 WEB xStarCode
2013-02-05   Glossword 1.8.3 - SQL Injection 33 WEB AkaStep
2013-02-05   glossword 1.8.12 - Multiple Vulnerabilities 36 WEB AkaStep
2013-02-05   Free Monthly Websites 2.0 - Multiple Vulnerabilities 32 WEB X-Cisadane
2013-02-05   D-Link DIR-600 / DIR-300 (Rev B) - Multiple Vulnerabilities 34 WEB m-1-k-3
2013-02-05   AdaptCMS 2.0.4 - 'config.php?question' SQL Injection 33 WEB kallimero
2013-02-05   ArrowChat 1.5.61 - Multiple Vulnerabilities 33 WEB kallimero
2013-02-05   Cisco Unity Express - Multiple Vulnerabilities 36 WEB Jacob Holcomb
2013-02-04   Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal 37 WEB NightlyDev
2013-01-31   Buffalo TeraStation TS-Series - Multiple Vulnerabilities 30 WEB Andrea Fabrizi
2013-01-31   D-Link DCS Cameras - Multiple Vulnerabilities 34 WEB Roberto Paleari
2013-01-31   Netgear SPH200D - Multiple Vulnerabilities 31 WEB m-1-k-3
2013-01-29   pfSense UTM Platform 2.0.1 - Cross-Site Scripting 32 WEB Dimitris Strevinas
2013-01-28   DataLife Engine 9.7 - 'preview.php' PHP Code Injection 36 WEB EgiX
2013-01-29   Kohana Framework 2.3.3 - Directory Traversal 34 WEB Vulnerability-Lab
2013-01-29   Fortinet FortiMail 400 IBE - Multiple Vulnerabilities 33 WEB Vulnerability-Lab
2013-01-28   PHP weby directory software 1.2 - Multiple Vulnerabilities 34 WEB AkaStep
2013-01-28   Microsoft Internet Explorer 8/9 - Steal Any Cookie 34 WEB Christian Haider
2004-09-01   phpWebSite 0.7.3/0.8.x/0.9.x Comment Module - 'CM_pid' Cross-Site Scripting 36 WEB GulfTech Security
2004-09-01   Newtelligence DasBlog 1.x - Request Log HTML Injection 31 WEB Dominick Baier
2004-09-01   Comersus Cart 5.0 - HTTP Response Splitting 38 WEB Maestro De-Seguridad
2004-08-31   Web Animations Password Protect - Multiple Input Validation Vulnerabilities 44 WEB Criolabs
2004-08-28   Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Scripting Vulnerabilities 38 WEB CyruxNET
2004-08-24   PHP Code Snippet Library 0.8 - Multiple Cross-Site Scripting Vulnerabilities 39 WEB Nikyt0x Argentina
2004-08-24   Web-APP.Org WebAPP 0.8/0.9.x - Directory Traversal 34 WEB Jerome Athias
2004-08-24   SWsoft Plesk Reloaded 7.1 - 'Login_name' Cross-Site Scripting 36 WEB sourvivor
2004-08-23   eGroupWare 1.0 Calendar Module - 'date' Cross-Site Scripting 34 WEB Joxean Koret
2004-08-23   Axis Network Camera 2.x And Video Server 1-3 - HTTP Authentication Bypass 32 WEB bashis
2004-08-23   Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal 33 WEB bashis
2004-08-23   Axis Network Camera 2.x And Video Server 1-3 - 'virtualinput.cgi' Arbitrary Command Execution 39 WEB bashis
2004-08-23   PhotoADay - 'Pad_selected' Cross-Site Scripting 37 WEB King Of Love
2004-08-23   Compulsive Media CNU5 - 'News.mdb' Database Disclosure 32 WEB Security .Net Information
2004-08-21   MyDms 1.4 - SQL Injection / Directory Traversal 38 WEB Jose Antonio
2004-08-21   Mantis Bug Tracker 0.x - New Account Signup Mass Emailing 38 WEB Jose Antonio
2004-08-21   Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Jose Antonio
2004-08-21   Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution 33 WEB Jose Antonio
2004-08-21   Sympa 4.x - New List HTML Injection 38 WEB Jose Antonio
2004-07-19   Zixforum - ZixForum.mdb Database Disclosure 35 WEB Security .Net Information
2004-07-18   PHP-Fusion Database Backup - Information Disclosure 36 WEB Ahmad Muammar
2004-07-17   Gallery 1.4.4 - Remote Server-Side Script Execution 34 WEB aCiDBiTS
2004-07-17   Merak Mail Server 7.4.5 - 'calendar.html?schedule' SQL Injection 36 WEB Criolabs
2004-07-17   Merak Mail Server 7.4.5 - address.html Full Path Disclosure 36 WEB Criolabs
2004-07-17   Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting 39 WEB Criolabs
2004-07-17   Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting 35 WEB Criolabs
2004-07-17   Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities 32 WEB Criolabs
2004-07-17   Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities 34 WEB Criolabs
2004-07-16   RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection 39 WEB Fernando Quintero
2004-07-16   PScript PForum 1.24/1.25 - User Profile HTML Injection 34 WEB Christoph Jeschke
2004-07-16   CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting 36 WEB Debasis Mohanty
2004-07-15   MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass 31 WEB anonymous
2004-07-15   MapInfo Discovery 1.0/1.1 - Cleartext Transmission Credential Disclosure 36 WEB anonymous
2004-07-15   MapInfo Discovery 1.0/1.1 - 'MapFrame.asp?mapname' Cross-Site Scripting 32 WEB anonymous
2004-07-15   MapInfo Discovery 1.0/1.1 - Remote Log File Access Information Disclosure 36 WEB anonymous
2004-08-11   IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities 34 WEB ShineShadow
2013-01-25   ImageCMS 4.0.0b - Multiple Vulnerabilities 34 WEB High-Tech Bridge SA
2013-01-25   WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery 34 WEB Junaid Hussain
2004-07-07   YaPiG 0.92 - Remote Server-Side Script Execution 36 WEB aCiDBiTS
2004-08-07   PluggedOut Blog 1.51/1.60 - 'Blog_Exec.php' Cross-Site Scripting 35 WEB befcake beefy
2004-08-16   Moodle 1.x - 'post.php' Cross-Site Scripting 37 WEB Javier Ubilla
2004-08-04   PHP-Nuke 0-7 - Delete God Admin Access Control Bypass 34 WEB Ahmad Muammar
2004-08-04   eNdonesia 8.3 - Search Form Cross-Site Scripting 34 WEB Ahmad Muammar
2004-08-04   Pete Stein GoScript 2.0 - Remote Command Execution 37 WEB Francisco Alisson
2004-07-30   Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution 37 WEB Joseph Moniz
2004-07-30   PowerPortal 1.1/1.3 - Private Message HTML Injection 32 WEB vampz
2004-07-29   Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection 34 WEB Fernando Quintero
2004-07-29   Verylost LostBook 1.1 - Message Entry HTML Injection 33 WEB Joseph Moniz
2004-07-29   Comersus Cart 5.0 - SQL Injection 35 WEB evol@ruiner.halo.nu
2004-07-28   Phorum 5.0.7 - Search Script Cross-Site Scripting 41 WEB vampz
2004-07-28   AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting 34 WEB Josh Gilmour
2004-07-28   AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections 31 WEB Josh Gilmour
2004-07-26   PostNuke 0.72/0.75 Reviews Module - Cross-Site Scripting 32 WEB DarkBicho
2013-01-24   SQLiteManager 1.2.4 - Remote PHP Code Injection 35 WEB RealGame
2004-07-26   XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure 34 WEB Ferruh Mavituna
2004-07-26   XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting 33 WEB Ferruh Mavituna
2004-07-26   XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting 30 WEB Ferruh Mavituna
2004-07-26   XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting 45 WEB Ferruh Mavituna
2004-07-26   XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting 32 WEB Ferruh Mavituna
2004-07-24   EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion 30 WEB Francisco Alisson
2004-07-24   PostNuke 0.7x - Install Script Administrator Password Disclosure 34 WEB hellsink
2004-07-23   EasyWeb 1.0 FileManager Module - Directory Traversal 33 WEB sullo@cirt.net
2004-07-21   Layton Technology HelpBox 3.0.1 - Multiple SQL Injections 32 WEB Noam Rathaus
2004-07-21   Polar Helpdesk 3.0 - Cookie Based Authentication Bypass 34 WEB Noam Rathaus
2004-07-21   Mensajeitor Tag Board 1.x - Authentication Bypass 34 WEB Jordi Corrales
2004-07-21   Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection 31 WEB Noam Rathaus
2004-07-21   NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection 38 WEB Noam Rathaus
2004-07-21   Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection 34 WEB Noam Rathaus
2004-07-20   Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion 34 WEB Radek Hulan
2013-01-22   Adult WebMaster Script - Password Disclosure 37 WEB Dshellnoi Unix
2013-01-22   WordPress Plugin Developer Formatter - Cross-Site Request Forgery 33 WEB Junaid Hussain
2004-07-19   Adam Ismay Print Topic Mod 1.0 - SQL Injection 32 WEB Bartek Nowotarski
2004-07-19   Outblaze Webmail - HTML Injection 34 WEB DarkBicho
2004-07-19   CuteNews 1.3 - Comment HTML Injection 35 WEB DarkBicho
2004-07-19   Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion 39 WEB Adam Simuntis
2004-07-15   BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting 37 WEB Alexander Antipov
2004-07-15   Gattaca Server 2003 - Cross-Site Scripting 30 WEB dr_insane
2004-07-15   Gattaca Server 2003 - 'Language' Path Exposure 33 WEB dr_insane
2004-07-15   Gattaca Server 2003 - Null Byte Full Path Disclosure 32 WEB dr_insane
2004-07-13   Moodle Help Script 1.x - Cross-Site Scripting 32 WEB morpheus[bd]
2004-07-12   phpBB 2.0.x - 'viewtopic.php' PHP Script Injection 32 WEB sasan hezarkhani
2013-01-21   NConf 1.3 - Arbitrary File Creation 33 WEB haidao
2013-01-21   NConf 1.3 - '/detail.php/detail_admin_items.php?id' SQL Injection 35 WEB haidao
2004-07-07   Comersus Open Technologies Comersus 5.0 - 'comersus_message.asp' Cross-Site Scripting 35 WEB Thomas Ryan
2004-07-07   Comersus Open Technologies Comersus 5.0 - 'comersus_gatewayPayPal.asp' Price Manipulation 34 WEB Thomas Ryan
2004-07-06   Jaws 0.2/0.3 - 'action' Cross-Site Scripting 34 WEB Fernando Quintero
2004-07-06   Jaws 0.2/0.3 - Cookie Manipulation Authentication Bypass 34 WEB Fernando Quintero
2004-07-06   Jaws 0.2/0.3 - 'gadget' Traversal Arbitrary File Access 33 WEB Fernando Quintero
2004-07-05   BasiliX Webmail 1.1 - Email Header HTML Injection 33 WEB Roman Medina-Heigl Hernandez
2004-07-05   Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal 32 WEB Andres Tarasco Acuna
2004-07-05   Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure 32 WEB Thomas Springer
2004-07-01   Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting 34 WEB vuln@hexview.com
2004-07-01   Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting 34 WEB vuln@hexview.com
2004-06-28   PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing 32 WEB DarkBicho
2004-06-28   CuteNews 0.88/1.3 - 'show_archives.php' Cross-Site Scripting 34 WEB DarkBicho
2004-06-28   CuteNews 0.88/1.3 - 'example2.php' Cross-Site Scripting 32 WEB DarkBicho
2004-06-28   CuteNews 0.88/1.3 - 'example1.php' Cross-Site Scripting 34 WEB DarkBicho
2004-06-28   CGIScript.net CSFAQ 1.0 Script - Full Path Disclosure 37 WEB DarkBicho
2004-06-28   McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting 33 WEB Dr.Ponidi Haryanto
2004-06-24   ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass 35 WEB GaMeS
2004-06-24   vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting 30 WEB Cheng Peng Su
2004-06-23   PHP-Nuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x - Multiple Vulnerabilities 33 WEB Janek Vind
2004-06-22   ArbitroWeb PHP Proxy 0.5/0.6 - Cross-Site Scripting 37 WEB Josh Gilmour
2013-01-19   WordPress Plugin Ripe HD FLV Player - SQL Injection 35 WEB Zikou-16
2013-01-19   Joomla! Component com_collector - Arbitrary File Upload 37 WEB Red Dragon_al