Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2004-02-10   Maxwebportal 1.3x - 'down.asp' HTTP_REFERER Cross-Site Scripting 4 WEB Manuel Lopez
2012-12-26   Guru Auction 2.0 - Multiple SQL Injections 4 WEB v3n0m
2004-02-09   PHP-Nuke 6.x/7.x - Public Message SQL Injection 3 WEB Janek Vind
2004-02-09   PHP-Nuke 6.x/7.x 'Reviews' Module - Cross-Site Scripting 4 WEB Janek Vind
2004-02-09   PHP-Nuke 6.x/7.0 'News' Module - Cross-Site Scripting 4 WEB Janek Vind
2004-02-06   OpenJournal 2.0 - Authentication Bypassing 5 WEB Tri Huynh
2004-02-05   Mambo Open Source 4.6 - 'Itemid' Cross-Site Scripting 4 WEB David Sopas Ferreira
2004-02-05   Discuz! 2.0/3.0 - Cross-Site Scripting 5 WEB Cheng Peng Su
2004-02-04   RXGoogle.CGI 1.0/2.5 - Cross-Site Scripting 5 WEB Shaun Colley
2004-02-04   All Enthusiast ReviewPost PHP Pro 2.5 - 'showcat.php' SQL Injection 4 WEB G00db0y
2004-02-04   All Enthusiast ReviewPost PHP Pro 2.5 - 'showproduct.php' SQL Injection 4 WEB G00db0y
2004-02-03   PHPX 3.2.3 - Multiple Vulnerabilities 4 WEB Manuel L?pez
2004-02-03   phpMyAdmin 2.x - 'Export.php' File Disclosure 4 WEB Cedric Cochin
2004-02-03   Qualiteam X-Cart 3.x - Multiple Remote Information Disclosure Vulnerabilities 4 WEB Philip
2004-02-03   Qualiteam X-Cart 3.x - 'upgrade.php?perl_binary' Arbitrary Command Execution 5 WEB Philip
2004-02-03   Qualiteam X-Cart 3.x - 'general.php?perl_binary' Arbitrary Command Execution 4 WEB Philip
2004-02-02   Niti Telecom Caravan Business Server 2.00-03D - Directory Traversal 5 WEB dr_insane
2004-02-02   PHP-Nuke 6.x (Multiple Modules) - SQL Injection 3 WEB Security Corporation
2004-01-31   Aprox Portal 3.0 - File Disclosure 4 WEB Zero X
2004-01-31   Leif M. Wright Web Blog 1.1 - Remote Command Execution 4 WEB ActualMInd
2004-01-30   JBrowser 1.0/2.x - Unauthorized Admin Access 3 WEB Himeur Nourredine
2012-12-24   MyBB AwayList Plugin - 'index.php?id' SQL Injection 4 WEB Red_Hat
2012-12-24   MyBB HM My Country Flags - SQL Injection 5 WEB JoinSe7en
2012-12-24   City Directory Review and Rating Script - 'search.php' SQL Injection 4 WEB 3spi0n
2004-01-30   Laurent Adda Les Commentaires 2.0 - PHP Script 'admin.php' Remote File Inclusion 4 WEB Himeur Nourredine
2004-01-30   Laurent Adda Les Commentaires 2.0 - PHP Script 'derniers_commentaires.php' Remote File Inclusion 4 WEB Himeur Nourredine
2004-01-30   Laurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File Inclusion 4 WEB Himeur Nourredine
2004-01-30   JBrowser 1.0/2.x - 'browser.php' Directory Traversal 3 WEB Himeur Nourredine
2004-01-30   PHPGedView 2.x - '[GED_File]_conf.php' Remote File Inclusion 4 WEB Cedric Cochin
2004-01-30   PHPGedView 2.x - 'Editconfig_gedcom.php' Directory Traversal 4 WEB Cedric Cochin
2004-01-29   PJ CGI Neo Review - Directory Traversal 4 WEB Zone-h Security Team
2004-01-20   Leif M. Wright Web Blog 1.1 - File Disclosure 5 WEB Zone-h Security Team
2004-01-26   Kietu 2/3 - 'index.php' Remote File Inclusion 3 WEB Himeur Nourredine
2004-01-26   Xoops 2.0.x - 'viewtopic.php' Cross-Site Scripting 5 WEB Ben Drysdale
2004-01-26   Gallery 1.3.x/1.4 - Remote Global Variable Injection 4 WEB Bharat Mediratta
2012-12-21   Elite Bulletin Board 2.1.21 - Multiple SQL Injections 4 WEB High-Tech Bridge SA
2012-12-21   banana dance b.2.6 - Multiple Vulnerabilities 4 WEB High-Tech Bridge SA
2012-12-21   YeaLink IP Phone SIP-TxxP Firmware 9.70.0.100 - Multiple Vulnerabilities 5 WEB xistence
2012-12-21   SelectSurvey CMS - 'ASP.NET' Arbitrary File Upload 4 WEB 040
2004-01-20   DUware Software - Multiple Vulnerabilities 4 WEB Security Corporation
2004-01-20   PHPix 2.0.3 - Arbitrary Command Execution 4 WEB Max Stepanov
2004-01-19   YABB SE 1.x - 'SSI.php' ID_MEMBER SQL Injection 4 WEB BaCkSpAcE
2004-01-19   Mambo Open Source 4.5/4.6 - 'mod_mainmenu.php' Remote File Inclusion 4 WEB Yo_Soy
2004-01-16   MetaDot Portal Server 5.6.x - 'userchannel.pl?op' Cross-Site Scripting 4 WEB JeiAr
2004-01-16   MetaDot Portal Server 5.6.x - 'index.pl' Multiple Cross-Site Scripting Vulnerabilities 4 WEB JeiAr
2004-01-16   MetaDot Portal Server 5.6.x - index.pl Information Disclosure 4 WEB JeiAr
2004-01-16   MetaDot Portal Server 5.6.x - 'index.pl' Multiple SQL Injections 4 WEB JeiAr
2004-01-16   XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection 4 WEB posidron
2004-01-16   phpShop Web Shopping Cart 0.6.1 -b - Multiple Function Cross-Site Scripting Vulnerabilities 4 WEB JeiAr
2004-01-10   VisualShapers EZContents 1.4/2.0 - 'module.php' Remote Command Execution 4 WEB Zero X
2004-01-10   Andy's PHP Projects Man Page Lookup Script - Information Disclosure 4 WEB Cabezon Aurelien
2004-01-10   DansGuardian Webmin Module 0.x - 'edit.cgi' Directory Traversal 5 WEB FIST
2004-01-06   PhpGedView 2.61 - PHPInfo Information Disclosure 4 WEB Windak
2004-01-06   PhpGedView 2.61 - Search Script Cross-Site Scripting 5 WEB Windak
2004-01-06   PHPGedView 2.61 - Multiple Remote File Inclusions 5 WEB Windak
2004-01-04   FreznoShop 1.2.3/1.3 - Search Script Cross-Site Scripting 4 WEB David S. Ferreira
2004-01-05   HotNews 0.x - 'config[incdir]' Remote File Inclusion 4 WEB Officerrr
2004-01-05   HotNews 0.x - 'hotnews-engine.inc.php3?config[header]' Remote File Inclusion 4 WEB Officerrr
2004-01-04   ASP-Nuke 1.0/1.2/1.3 - Remote User Database Access 4 WEB Vietnamese Security Group
2004-01-04   ASPApp PortalApp - Remote User Database Access 4 WEB newbie6290
2004-01-02   Athena Web Registration - Remote Command Execution 5 WEB Peter Kieser
2004-01-02   EasyDynamicPages 1.0 - 'config_page.php' PHP Remote File Inclusion 4 WEB tsbeginnervn
2012-12-19   Enterpriser16 Load Balancer 7.1 - Multiple Cross-Site Scripting Vulnerabilities 4 WEB Vulnerability-Lab
2012-12-19   SonicWALL SonicOS 5.8.1.8 WAF - Cross-Site Scripting 4 WEB Vulnerability-Lab
2012-12-19   WordPress Theme Clockstone (and other CMSMasters Themes) - Arbitrary File Upload 4 WEB DigiP
2003-12-29   BulletScript MailList - bsml.pl Information Disclosure 4 WEB M0rf
2003-12-29   PHP-ping - 'Count' Command Execution 4 WEB ppp-design
2003-12-27   Private Message System 2.x - 'index.php?Page' Cross-Site Scripting 4 WEB David S. Ferreira
2003-12-26   L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities 4 WEB http-equiv
2003-12-27   PHP-Nuke 6.x/7.0 Survey Module - SQL Injection 5 WEB idtwolf@pisem.net
2003-12-27   OpenBB 1.0 - 'board.php' Cross-Site Scripting 4 WEB gr00vy
2003-12-24   Psychoblogger PB-beta1 - errormessage Cross-Site Scripting 5 WEB Andrew Smith
2003-12-24   Psychoblogger PB-beta1 - 'desc' Cross-Site Scripting 5 WEB Andrew Smith
2003-12-24   KnowledgeBuilder 2.0/2.1/3.0 - Remote File Inclusion 3 WEB Zero X
2003-12-23   phpBB 2.0.6 - 'privmsg.php' Cross-Site Scripting 4 WEB Ben Drysdale
2003-12-23   Webfroot Shoutbox 2.32 - 'Viewshoutbox.php' Cross-Site Scripting 4 WEB Ben Drysdale
2003-12-23   My Little Forum 1.3 - 'email.php' Cross-Site Scripting 4 WEB David S. Ferreira
2003-12-23   iSoft-Solutions QuikStore Shopping Cart 2.12 - 'template' Directory Traversal 4 WEB Dr Ponidi Haryanto
2003-12-23   iSoft-Solutions QuikStore Shopping Cart 2.12 - 'store' Full Path Disclosure 4 WEB Dr Ponidi Haryanto
2003-12-22   osCommerce 2.2 - 'manufacturers_id' Cross-Site Scripting 4 WEB JeiAr
2003-12-22   osCommerce 2.2 - 'products_id' SQL Injection 4 WEB JeiAr
2003-12-21   Xoops 2.0.5.1 - 'MyLinks Myheader.php' Cross-Site Scripting 4 WEB Chintan Trivedi
2003-12-20   BES-CMS 0.4/0.5 - 'hacking.php' File Inclusion 4 WEB frog
2003-12-20   BES-CMS 0.4/0.5 - 'folder.php' File Inclusion 4 WEB frog
2003-12-20   BES-CMS 0.4/0.5 - 'start.php' File Inclusion 4 WEB frog
2003-12-20   BES-CMS 0.4/0.5 - 'message.php' File Inclusion 4 WEB frog
2003-12-20   BES-CMS 0.4/0.5 - '/members/index.inc.php' File Inclusion 4 WEB frog
2003-12-20   BES-CMS 0.4/0.5 - 'index.inc.php' File Inclusion 4 WEB frog
2012-12-17   PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities 4 WEB aeon
2003-12-18   SiteInteractive Subscribe Me - 'Setup.pl' Arbitrary Command Execution 4 WEB Paul Craig
2003-12-17   osCommerce 2.2 - 'osCsid' Cross-Site Scripting 4 WEB JeiAr
2003-12-16   Aardvark Topsites 4.1 PHP - Multiple Vulnerabilities 4 WEB JeiAr
2003-12-15   elektropost episerver 3/4 - Multiple Vulnerabilities 4 WEB babbelbubbel
2003-12-13   osCommerce 2.2 - SQL Injection 4 WEB GulfTech Security
2003-12-11   RemotelyAnywhere - Default.HTML Logout Message Injection 4 WEB Oliver Karow
2003-12-10   Mambo Open Source 4.0.14 - 'PollBooth.php' Multiple SQL Injections 4 WEB frog
2003-12-10   Mambo Open Source 4.0.14 Server - SQL Injection 4 WEB Chintan Trivedi
2003-12-10   Mambo 4.5 Server - 'user.php' Script Unauthorized Access 5 WEB frog
2012-12-16   MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting 4 WEB limb0
2003-12-09   calacode @mail webmail system 3.52 - Multiple Vulnerabilities 4 WEB Nick Gudov
2003-12-09   Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting 4 WEB Justin Hagstrom
2003-12-08   Webgate WebEye - Information Disclosure 5 WEB datapath
2003-12-06   Xoops 1.3.x/2.0.x - Multiple Vulnerabilities 5 WEB frog
2003-12-05   Virtual Programming VP-ASP 4/5 - 'shopdisplayproducts.asp' Cross-Site Scripting 5 WEB Xnuxer Research
2003-12-02   IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting 4 WEB Oliver Karow
2003-12-01   Jason Maloney's Guestbook 3.0 - Remote Command Execution 4 WEB shaun2k2
2003-12-01   Virtual Programming VP-ASP 4.00/5.00 - 'shopdisplayproducts.asp' SQL Injection 4 WEB Nick Gudov
2003-12-01   Virtual Programming VP-ASP 4.00/5.00 - 'shopsearch.asp' SQL Injection 4 WEB Nick Gudov
2003-12-01   CuteNews 1.3 - Debug Query Information Disclosure 4 WEB scrap
2003-11-26   My_eGallery Module 3.1.1 - Remote File Inclusion Command Injection 4 WEB Bojan Zdrnja
2003-11-26   Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabili 4 WEB dr_insane
2003-11-24   CommerceSQL Shopping Cart 2.2 - 'index.cgi' Directory Traversal 5 WEB Mariusz Ciesla
2003-11-17   Justin Hagstrom Auto Directory Index 1.2.3 - Cross-Site Scripting 4 WEB David Sopas Ferreira
2003-11-17   Koch Roland Rolis Guestbook 1.0 - '$path' Remote File Inclusion 4 WEB RusH security team
2012-12-14   Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting 4 WEB s3m00t
2003-11-17   PHPWebFileManager 2.0 - 'index.php' Directory Traversal 5 WEB RusH security team
2003-11-11   PHP-Coolfile 1.4 - Unauthorized Administrative Access 4 WEB r00t@rsteam.ru
2003-11-10   ncube server manager 1.0 - Directory Traversal 4 WEB Beck Mr.R
2003-11-10   OnlineArts DailyDose 1.1 - 'dose.pl' Remote Command Execution 4 WEB Don_Huan
2003-11-08   phpBB 2.0.x - 'profile.php' SQL Injection 4 WEB JOCANOR
2012-12-13   Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection 4 WEB modpr0be
2012-12-13   MyBB DyMy User Agent Plugin - 'newreply.php' SQL Injection 4 WEB JoinSe7en
2012-12-13   WordPress Plugin Portable phpMyAdmin - Authentication Bypass 4 WEB Mark Stanislav
2012-12-13   Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting 3 WEB limb0
2012-12-13   MyBB AJAX Chat - Persistent Cross-Site Scripting 4 WEB Mr. P-teo