|
2003-12-20
|
|
BES-CMS 0.4/0.5 - 'hacking.php' File Inclusion
|
13 |
WEB
|
frog
|
|
2003-12-20
|
|
BES-CMS 0.4/0.5 - 'folder.php' File Inclusion
|
12 |
WEB
|
frog
|
|
2003-12-20
|
|
BES-CMS 0.4/0.5 - 'start.php' File Inclusion
|
13 |
WEB
|
frog
|
|
2003-12-20
|
|
BES-CMS 0.4/0.5 - 'message.php' File Inclusion
|
13 |
WEB
|
frog
|
|
2003-12-20
|
|
BES-CMS 0.4/0.5 - '/members/index.inc.php' File Inclusion
|
15 |
WEB
|
frog
|
|
2003-12-20
|
|
BES-CMS 0.4/0.5 - 'index.inc.php' File Inclusion
|
11 |
WEB
|
frog
|
|
2012-12-17
|
|
PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities
|
10 |
WEB
|
aeon
|
|
2003-12-18
|
|
SiteInteractive Subscribe Me - 'Setup.pl' Arbitrary Command Execution
|
13 |
WEB
|
Paul Craig
|
|
2003-12-17
|
|
osCommerce 2.2 - 'osCsid' Cross-Site Scripting
|
14 |
WEB
|
JeiAr
|
|
2003-12-16
|
|
Aardvark Topsites 4.1 PHP - Multiple Vulnerabilities
|
11 |
WEB
|
JeiAr
|
|
2003-12-15
|
|
elektropost episerver 3/4 - Multiple Vulnerabilities
|
11 |
WEB
|
babbelbubbel
|
|
2003-12-13
|
|
osCommerce 2.2 - SQL Injection
|
13 |
WEB
|
GulfTech Security
|
|
2003-12-11
|
|
RemotelyAnywhere - Default.HTML Logout Message Injection
|
14 |
WEB
|
Oliver Karow
|
|
2003-12-10
|
|
Mambo Open Source 4.0.14 - 'PollBooth.php' Multiple SQL Injections
|
13 |
WEB
|
frog
|
|
2003-12-10
|
|
Mambo Open Source 4.0.14 Server - SQL Injection
|
12 |
WEB
|
Chintan Trivedi
|
|
2003-12-10
|
|
Mambo 4.5 Server - 'user.php' Script Unauthorized Access
|
11 |
WEB
|
frog
|
|
2012-12-16
|
|
MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting
|
12 |
WEB
|
limb0
|
|
2003-12-09
|
|
calacode @mail webmail system 3.52 - Multiple Vulnerabilities
|
10 |
WEB
|
Nick Gudov
|
|
2003-12-09
|
|
Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting
|
11 |
WEB
|
Justin Hagstrom
|
|
2003-12-08
|
|
Webgate WebEye - Information Disclosure
|
13 |
WEB
|
datapath
|
|
2003-12-06
|
|
Xoops 1.3.x/2.0.x - Multiple Vulnerabilities
|
11 |
WEB
|
frog
|
|
2003-12-05
|
|
Virtual Programming VP-ASP 4/5 - 'shopdisplayproducts.asp' Cross-Site Scripting
|
12 |
WEB
|
Xnuxer Research
|
|
2003-12-02
|
|
IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting
|
12 |
WEB
|
Oliver Karow
|
|
2003-12-01
|
|
Jason Maloney's Guestbook 3.0 - Remote Command Execution
|
11 |
WEB
|
shaun2k2
|
|
2003-12-01
|
|
Virtual Programming VP-ASP 4.00/5.00 - 'shopdisplayproducts.asp' SQL Injection
|
10 |
WEB
|
Nick Gudov
|
|
2003-12-01
|
|
Virtual Programming VP-ASP 4.00/5.00 - 'shopsearch.asp' SQL Injection
|
13 |
WEB
|
Nick Gudov
|
|
2003-12-01
|
|
CuteNews 1.3 - Debug Query Information Disclosure
|
13 |
WEB
|
scrap
|
|
2003-11-26
|
|
My_eGallery Module 3.1.1 - Remote File Inclusion Command Injection
|
9 |
WEB
|
Bojan Zdrnja
|
|
2003-11-26
|
|
Macromedia JRun 4.0 build 61650 - Administrative Interface Multiple Cross-Site Scripting Vulnerabili
|
10 |
WEB
|
dr_insane
|
|
2003-11-24
|
|
CommerceSQL Shopping Cart 2.2 - 'index.cgi' Directory Traversal
|
13 |
WEB
|
Mariusz Ciesla
|
|
2003-11-17
|
|
Justin Hagstrom Auto Directory Index 1.2.3 - Cross-Site Scripting
|
12 |
WEB
|
David Sopas Ferreira
|
|
2003-11-17
|
|
Koch Roland Rolis Guestbook 1.0 - '$path' Remote File Inclusion
|
11 |
WEB
|
RusH security team
|
|
2012-12-14
|
|
Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting
|
12 |
WEB
|
s3m00t
|
|
2003-11-17
|
|
PHPWebFileManager 2.0 - 'index.php' Directory Traversal
|
11 |
WEB
|
RusH security team
|
|
2003-11-11
|
|
PHP-Coolfile 1.4 - Unauthorized Administrative Access
|
12 |
WEB
|
r00t@rsteam.ru
|
|
2003-11-10
|
|
ncube server manager 1.0 - Directory Traversal
|
10 |
WEB
|
Beck Mr.R
|
|
2003-11-10
|
|
OnlineArts DailyDose 1.1 - 'dose.pl' Remote Command Execution
|
13 |
WEB
|
Don_Huan
|
|
2003-11-08
|
|
phpBB 2.0.x - 'profile.php' SQL Injection
|
15 |
WEB
|
JOCANOR
|
|
2012-12-13
|
|
Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection
|
16 |
WEB
|
modpr0be
|
|
2012-12-13
|
|
MyBB DyMy User Agent Plugin - 'newreply.php' SQL Injection
|
13 |
WEB
|
JoinSe7en
|
|
2012-12-13
|
|
WordPress Plugin Portable phpMyAdmin - Authentication Bypass
|
15 |
WEB
|
Mark Stanislav
|
|
2012-12-13
|
|
Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting
|
10 |
WEB
|
limb0
|
|
2012-12-13
|
|
MyBB AJAX Chat - Persistent Cross-Site Scripting
|
11 |
WEB
|
Mr. P-teo
|
|
2012-12-13
|
|
MyYoutube MyBB Plugin 1.0 - SQL Injection
|
12 |
WEB
|
Zixem
|
|
2003-11-04
|
|
John Beatty Easy PHP Photo Album 1.0 - 'dir' HTML Injection
|
14 |
WEB
|
nimber@designer.ru
|
|
2003-11-04
|
|
OpenAutoClassifieds 1.0 - 'Listing' Cross-Site Scripting
|
11 |
WEB
|
David Sopas Ferreira
|
|
2003-11-03
|
|
VieNuke VieBoard 2.6 - SQL Injection
|
13 |
WEB
|
ekerazha@yahoo.it
|
|
2003-11-02
|
|
PHPKit 1.6 - 'Include.php' Cross-Site Scripting
|
10 |
WEB
|
ben.moeckel@badwebmasters.net
|
|
2003-11-03
|
|
MPM Guestbook 1.2 - Cross-Site Scripting
|
11 |
WEB
|
David Ferreira
|
|
2003-11-03
|
|
Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access
|
9 |
WEB
|
Alexander Antipov
|
|
2003-11-03
|
|
Synthetic Reality SymPoll 1.5 - Cross-Site Scripting
|
15 |
WEB
|
Michael Frame
|
|
2003-11-01
|
|
http commander 4.0 - Directory Traversal
|
12 |
WEB
|
Zero X
|
|
2012-12-12
|
|
Axway Secure Transport 5.1 SP2 - Directory Traversal
|
11 |
WEB
|
Sebastian Perez
|
|
2012-12-12
|
|
TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities
|
19 |
WEB
|
VipVince
|
|
2003-10-31
|
|
Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access
|
13 |
WEB
|
Virginity Security
|
|
2003-10-31
|
|
BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting
|
11 |
WEB
|
Corsaire Limited
|
|
2003-10-30
|
|
Ledscripts LedForums - Multiple HTML Injections
|
11 |
WEB
|
ProXy
|
|
2003-10-27
|
|
Les Visiteurs 2.0 - Remote File Inclusion
|
11 |
WEB
|
Matthieu Peschaud
|
|
2003-10-27
|
|
Chi Kien Uong Guestbook 1.51 - Cross-Site Scripting
|
11 |
WEB
|
Joshua P. Miller
|
|
2012-12-11
|
|
PHP-Nuke 8.2.4 - Cross-Site Request Forgery
|
11 |
WEB
|
sajith
|
|
2012-12-11
|
|
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
|
10 |
WEB
|
Zixem
|
|
2012-12-11
|
|
Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities
|
11 |
WEB
|
D4NB4R
|
|
2012-12-11
|
|
MyBB Bank- 3 Plugin - SQL Injection
|
11 |
WEB
|
Red_Hat
|
|
2003-10-22
|
|
DansGuardian 2.2.x - Denied URL Cross-Site Scripting
|
11 |
WEB
|
Richard Maudsley
|
|
2003-10-21
|
|
FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection
|
13 |
WEB
|
Ezhilan
|
|
2003-10-21
|
|
Vivisimo Clustering Engine - Search Script Cross-Site Scripting
|
15 |
WEB
|
ComSec
|
|
2003-10-20
|
|
Dansie Shopping Cart - Server Error Message Installation Full Path Disclosure
|
13 |
WEB
|
Dr_Ponidi
|
|
2003-10-20
|
|
DeskPro 1.1 - Multiple SQL Injections
|
11 |
WEB
|
Aviram Jenik
|
|
2003-10-20
|
|
Caucho Resin 2.0/2.1 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
Donnie Werner
|
|
2003-10-20
|
|
Bytehoard 0.7 - File Disclosure
|
12 |
WEB
|
Ezhilan
|
|
2003-10-19
|
|
Geeklog 1.3.8 - Forgot Password SQL Injection
|
10 |
WEB
|
Jouko Pynnonen
|
|
2003-10-18
|
|
GoldLink 3.0 - Cookie SQL Injection
|
14 |
WEB
|
Weke
|
|
2003-10-15
|
|
Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting
|
14 |
WEB
|
Lorenzo Hernandez Garcia-Hierro
|
|
2012-12-09
|
|
Achievo 1.4.5 - Multiple Vulnerabilities (2)
|
11 |
WEB
|
High-Tech Bridge SA
|
|
2012-12-09
|
|
Clipbucket 2.6 Revision 738 - Multiple SQL Injections
|
10 |
WEB
|
High-Tech Bridge SA
|
|
2012-12-09
|
|
Cisco DPC2420 - Multiples Vulnerabilities
|
13 |
WEB
|
Facundo M. de la Cruz
|
|
2012-12-09
|
|
MyBB KingChat Plugin - Persistent Cross-Site Scripting
|
14 |
WEB
|
VipVince
|
|
2003-10-14
|
|
WrenSoft Zoom Search Engine 2.0 Build: 1018 - Cross-Site Scripting
|
12 |
WEB
|
Ezhilan
|
|
2003-10-11
|
|
Gallery 1.4 - 'index.php' Remote File Inclusion
|
13 |
WEB
|
peter
|
|
2003-10-08
|
|
PHP-Nuke 6.6 - 'admin.php' SQL Injection
|
14 |
WEB
|
1dt.w0lf
|
|
2003-10-08
|
|
GeekLog 1.3.x - HTML Injection
|
13 |
WEB
|
Jelmer
|
|
2003-10-08
|
|
PayPal Store Front 3.0 - 'index.php' Remote File Inclusion
|
13 |
WEB
|
Zone-h Security Team
|
|
2003-10-05
|
|
GuppY 2.4 - Remote File Access
|
13 |
WEB
|
frog
|
|
2003-10-05
|
|
GuppY 2.4 - Cross-Site Scripting
|
14 |
WEB
|
frog
|
|
2003-10-04
|
|
EternalMart Mailing List Manager 1.32 - Remote File Inclusion
|
18 |
WEB
|
frog
|
|
2003-10-03
|
|
Divine Content Server 5.0 - Error Page Cross-Site Scripting
|
16 |
WEB
|
valgasu
|
|
2003-10-03
|
|
Sun Cobalt RaQ 1.1/2.0/3.0/4.0 - 'Message.cgi' Cross-Site Scripting
|
16 |
WEB
|
Lorenzo Hernandez Garcia-Hierro
|
|
2003-10-03
|
|
WordPress Core 0.6/0.7 - 'Blog.header.php' SQL Injection
|
13 |
WEB
|
Seth Woolley
|
|
2003-10-01
|
|
mpnews pro 2.1.0.18 - Directory Traversal Information Disclosure
|
12 |
WEB
|
Gama Sec
|
|
2003-10-01
|
|
Atrise Everyfind 5.0.2 - search Cross-Site Scripting
|
15 |
WEB
|
Ezhilan
|
|
2003-10-01
|
|
DCP-Portal 5.5 - 'lostpassword.php?email' SQL Injection
|
13 |
WEB
|
Lifo Fifo
|
|
2003-10-01
|
|
DCP-Portal 5.5 - 'advertiser.php?Password' SQL Injection
|
18 |
WEB
|
Lifo Fifo
|
|
2012-12-07
|
|
m0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities
|
13 |
WEB
|
Yann CAM
|
|
2003-09-29
|
|
Alan Ward A-Cart 2.0 - MSG Cross-Site Scripting
|
13 |
WEB
|
G00db0y
|
|
2003-09-29
|
|
Geeklog 1.3.x - Cross-Site Scripting
|
15 |
WEB
|
Lorenzo Hernandez Garcia-Hierro
|
|
2003-09-29
|
|
Geeklog 1.3.x - SQL Injection
|
17 |
WEB
|
Lorenzo Hernandez Garcia-Hierro
|
|
2003-09-29
|
|
GuppY 2.4 - HTML Injection
|
14 |
WEB
|
David Suzanne
|
|
2003-09-25
|
|
Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage
|
12 |
WEB
|
Phuong Nguyen
|
|
2012-12-06
|
|
Kordil EDms 2.2.60rc3 - SQL Injection
|
14 |
WEB
|
Woody Hughes
|
|
2003-09-24
|
|
yMonda Thread-IT 1.6 - Multiple HTML Injections
|
13 |
WEB
|
Bahaa Naamneh
|
|
2003-09-20
|
|
myPHPNuke 1.8.8 - 'auth.inc.php' SQL Injection
|
15 |
WEB
|
Lifo Fifo
|
|
2003-09-19
|
|
Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure
|
15 |
WEB
|
H Zero Seven
|
|
2003-09-18
|
|
Mambo Site Server 4.0.14 - 'contact.php' Unauthorized Mail Relay
|
11 |
WEB
|
Lifo Fifo
|
|
2003-09-18
|
|
Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection
|
15 |
WEB
|
Lifo Fifo
|
|
2003-09-18
|
|
Mambo Site Server 4.0.14 - 'banners.php?bid' SQL Injection
|
13 |
WEB
|
Lifo Fifo
|
|
2003-09-16
|
|
NetWin DBabble 2.5 i - Cross-Site Scripting
|
12 |
WEB
|
dr_insane
|
|
2003-09-12
|
|
vbPortal 2.0 alpha 8.1 - (Authenticated) SQL Injection
|
14 |
WEB
|
frog
|
|
2012-12-04
|
|
Advantech Studio 7.0 - SCADA/HMI Directory Traversal
|
16 |
WEB
|
Nin3
|
|
2003-09-09
|
|
Invision Power Board (IP.Board) 1.x - 'index.php' showtopic Cross-Site Scripting
|
14 |
WEB
|
Boy Bear
|
|
2003-09-09
|
|
Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure
|
14 |
WEB
|
Bahaa Naamneh
|
|
2003-09-09
|
|
Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting
|
17 |
WEB
|
Bahaa Naamneh
|
|
2003-09-08
|
|
phpBB 2.0.6 - URL BBCode HTML Injection
|
17 |
WEB
|
keupon_ps2
|
|
2003-09-08
|
|
ICQ 2003 - Webfront Guestbook Cross-Site Scripting
|
13 |
WEB
|
Donnie Werner
|
|
2012-12-03
|
|
FirePass SSL VPN - Local File Inclusion
|
14 |
WEB
|
SEC Consult
|
|
2012-12-03
|
|
Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download
|
12 |
WEB
|
Ben Williams
|
|
2012-12-03
|
|
Symantec Messaging Gateway 9.5.3-3 - Cross-Site Request Forgery
|
14 |
WEB
|
Ben Williams
|
|
2012-12-03
|
|
SchoolCMS - Persistent Cross-Site Scripting
|
15 |
WEB
|
VipVince
|
|
2012-12-03
|
|
MyBB KingChat Plugin - SQL Injection
|
15 |
WEB
|
Red_Hat
|
|
2003-09-05
|
|
Digital Scribe 1.x - Error Function Cross-Site Scripting
|
18 |
WEB
|
Secunia
|
|
2003-09-03
|
|
WebCalendar 0.9.x (Multiple Modules) - SQL Injection
|
16 |
WEB
|
noconflic
|
|
2003-09-01
|
|
Sitebuilder 1.4 - 'sitebuilder.cgi' Directory Traversal
|
12 |
WEB
|
Zero X
|
|
2003-09-01
|
|
TSguestbook 2.1 - 'Message' HTML Injection
|
12 |
WEB
|
Trash-80
|
|
2003-09-01
|
|
Ezboard - 'invitefriends.php3' Cross-Site Scripting
|
12 |
WEB
|
David F. Madrid
|
|
2003-08-27
|
|
eNdonesia 8.2/8.3 - 'Mod' Cross-Site Scripting
|
13 |
WEB
|
Bahaa Naamneh
|
|
2003-08-27
|
|
AldWeb MiniPortail 1.9/2.x - 'LNG' Cross-Site Scripting
|
13 |
WEB
|
Bahaa Naamneh
|
