Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-12-11   Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities 21 WEB D4NB4R
2012-12-11   MyBB Bank- 3 Plugin - SQL Injection 25 WEB Red_Hat
2003-10-22   DansGuardian 2.2.x - Denied URL Cross-Site Scripting 23 WEB Richard Maudsley
2003-10-21   FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection 26 WEB Ezhilan
2003-10-21   Vivisimo Clustering Engine - Search Script Cross-Site Scripting 25 WEB ComSec
2003-10-20   Dansie Shopping Cart - Server Error Message Installation Full Path Disclosure 24 WEB Dr_Ponidi
2003-10-20   DeskPro 1.1 - Multiple SQL Injections 20 WEB Aviram Jenik
2003-10-20   Caucho Resin 2.0/2.1 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities 23 WEB Donnie Werner
2003-10-20   Bytehoard 0.7 - File Disclosure 21 WEB Ezhilan
2003-10-19   Geeklog 1.3.8 - Forgot Password SQL Injection 21 WEB Jouko Pynnonen
2003-10-18   GoldLink 3.0 - Cookie SQL Injection 23 WEB Weke
2003-10-15   Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting 25 WEB Lorenzo Hernandez Garcia-Hierro
2012-12-09   Achievo 1.4.5 - Multiple Vulnerabilities (2) 22 WEB High-Tech Bridge SA
2012-12-09   Clipbucket 2.6 Revision 738 - Multiple SQL Injections 26 WEB High-Tech Bridge SA
2012-12-09   Cisco DPC2420 - Multiples Vulnerabilities 26 WEB Facundo M. de la Cruz
2012-12-09   MyBB KingChat Plugin - Persistent Cross-Site Scripting 25 WEB VipVince
2003-10-14   WrenSoft Zoom Search Engine 2.0 Build: 1018 - Cross-Site Scripting 22 WEB Ezhilan
2003-10-11   Gallery 1.4 - 'index.php' Remote File Inclusion 23 WEB peter
2003-10-08   PHP-Nuke 6.6 - 'admin.php' SQL Injection 24 WEB 1dt.w0lf
2003-10-08   GeekLog 1.3.x - HTML Injection 20 WEB Jelmer
2003-10-08   PayPal Store Front 3.0 - 'index.php' Remote File Inclusion 27 WEB Zone-h Security Team
2003-10-05   GuppY 2.4 - Remote File Access 26 WEB frog
2003-10-05   GuppY 2.4 - Cross-Site Scripting 27 WEB frog
2003-10-04   EternalMart Mailing List Manager 1.32 - Remote File Inclusion 28 WEB frog
2003-10-03   Divine Content Server 5.0 - Error Page Cross-Site Scripting 28 WEB valgasu
2003-10-03   Sun Cobalt RaQ 1.1/2.0/3.0/4.0 - 'Message.cgi' Cross-Site Scripting 27 WEB Lorenzo Hernandez Garcia-Hierro
2003-10-03   WordPress Core 0.6/0.7 - 'Blog.header.php' SQL Injection 26 WEB Seth Woolley
2003-10-01   mpnews pro 2.1.0.18 - Directory Traversal Information Disclosure 22 WEB Gama Sec
2003-10-01   Atrise Everyfind 5.0.2 - search Cross-Site Scripting 24 WEB Ezhilan
2003-10-01   DCP-Portal 5.5 - 'lostpassword.php?email' SQL Injection 27 WEB Lifo Fifo
2003-10-01   DCP-Portal 5.5 - 'advertiser.php?Password' SQL Injection 30 WEB Lifo Fifo
2012-12-07   m0n0wall 1.33 - Multiple Cross-Site Request Forgery Vulnerabilities 26 WEB Yann CAM
2003-09-29   Alan Ward A-Cart 2.0 - MSG Cross-Site Scripting 27 WEB G00db0y
2003-09-29   Geeklog 1.3.x - Cross-Site Scripting 24 WEB Lorenzo Hernandez Garcia-Hierro
2003-09-29   Geeklog 1.3.x - SQL Injection 27 WEB Lorenzo Hernandez Garcia-Hierro
2003-09-29   GuppY 2.4 - HTML Injection 28 WEB David Suzanne
2003-09-25   Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage 28 WEB Phuong Nguyen
2012-12-06   Kordil EDms 2.2.60rc3 - SQL Injection 31 WEB Woody Hughes
2003-09-24   yMonda Thread-IT 1.6 - Multiple HTML Injections 25 WEB Bahaa Naamneh
2003-09-20   myPHPNuke 1.8.8 - 'auth.inc.php' SQL Injection 28 WEB Lifo Fifo
2003-09-19   Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure 28 WEB H Zero Seven
2003-09-18   Mambo Site Server 4.0.14 - 'contact.php' Unauthorized Mail Relay 22 WEB Lifo Fifo
2003-09-18   Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection 26 WEB Lifo Fifo
2003-09-18   Mambo Site Server 4.0.14 - 'banners.php?bid' SQL Injection 24 WEB Lifo Fifo
2003-09-16   NetWin DBabble 2.5 i - Cross-Site Scripting 24 WEB dr_insane
2003-09-12   vbPortal 2.0 alpha 8.1 - (Authenticated) SQL Injection 25 WEB frog
2012-12-04   Advantech Studio 7.0 - SCADA/HMI Directory Traversal 26 WEB Nin3
2003-09-09   Invision Power Board (IP.Board) 1.x - 'index.php' showtopic Cross-Site Scripting 27 WEB Boy Bear
2003-09-09   Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure 24 WEB Bahaa Naamneh
2003-09-09   Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting 31 WEB Bahaa Naamneh
2003-09-08   phpBB 2.0.6 - URL BBCode HTML Injection 28 WEB keupon_ps2
2003-09-08   ICQ 2003 - Webfront Guestbook Cross-Site Scripting 22 WEB Donnie Werner
2012-12-03   FirePass SSL VPN - Local File Inclusion 26 WEB SEC Consult
2012-12-03   Symantec Messaging Gateway 9.5.3-3 - Arbitrary File Download 25 WEB Ben Williams
2012-12-03   Symantec Messaging Gateway 9.5.3-3 - Cross-Site Request Forgery 27 WEB Ben Williams
2012-12-03   SchoolCMS - Persistent Cross-Site Scripting 26 WEB VipVince
2012-12-03   MyBB KingChat Plugin - SQL Injection 26 WEB Red_Hat
2003-09-05   Digital Scribe 1.x - Error Function Cross-Site Scripting 28 WEB Secunia
2003-09-03   WebCalendar 0.9.x (Multiple Modules) - SQL Injection 25 WEB noconflic
2003-09-01   Sitebuilder 1.4 - 'sitebuilder.cgi' Directory Traversal 23 WEB Zero X
2003-09-01   TSguestbook 2.1 - 'Message' HTML Injection 24 WEB Trash-80
2003-09-01   Ezboard - 'invitefriends.php3' Cross-Site Scripting 23 WEB David F. Madrid
2003-08-27   eNdonesia 8.2/8.3 - 'Mod' Cross-Site Scripting 25 WEB Bahaa Naamneh
2003-08-27   AldWeb MiniPortail 1.9/2.x - 'LNG' Cross-Site Scripting 27 WEB Bahaa Naamneh
2003-08-26   Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access 31 WEB frog
2003-08-26   Py-Membres 4.x - 'Pass_done.php' SQL Injection 26 WEB frog
2003-08-26   Py-Membres 4.x - 'Secure.php' Unauthorized Access 28 WEB frog
2003-08-25   Netbula Anyboard 9.9.5 6 - Information Disclosure 26 WEB cyber talon
2003-08-25   newsPHP 216 - Authentication Bypass 27 WEB Officerrr
2003-08-25   newsPHP 216 - Remote File Inclusion 27 WEB Officerrr
2003-08-23   IdealBB 1.4.9 Beta - HTML Injection 26 WEB Scott M
2003-08-18   Fusion News 3.3 - Unauthorized Account Addition 27 WEB DarkKnight
2003-08-16   MatrikzGB Guestbook 2.0 - Administrative Privilege Escalation 27 WEB Stephan Sattler
2003-08-15   Poster 2.0 - Unauthorized Privileged User Access 26 WEB DarkKnight
2003-08-13   Clickcess ChitChat.NET - topic title Cross-Site Scripting 29 WEB G00db0y
2003-08-13   Clickcess ChitChat.NET - name Cross-Site Scripting 24 WEB G00db0y
2012-11-30   SilverStripe CMS 3.0.2 - (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forger 25 WEB Sense of Security
2012-11-30   SmartCMS - '/index.php?menuitem' SQL Injection / Cross-Site Scripting 28 WEB Yakir Wizman
2012-11-30   Free Hosting Manager 2.0 - 'id' SQL Injection 27 WEB Yakir Wizman
2003-08-13   HolaCMS 1.2.x - 'HTMLtags.php' Local File Inclusion 26 WEB Virginity Security
2003-08-13   Xoops 1.0/1.3.x - BBCode HTML Injection 28 WEB frog
2003-08-13   SurgeLDAP 1.0 d - 'User.cgi' Cross-Site Scripting 29 WEB Ziv Kamir
2003-08-12   Eudora WorldMail 2.0 - Search Cross-Site Scripting 32 WEB Donnie Werner
2003-08-12   HostAdmin - Full Path Disclosure 25 WEB G00db0y
2003-08-11   PHPOutsourcing Zorum 3.4 - Full Path Disclosure 25 WEB Zone-h Security Team
2003-08-11   phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 earch Module - 'PDA_limit' Cross-Site Scripting 28 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-11   phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 pagemaster Module - 'PAGE_id' Cross-Site Scripting 29 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-11   phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 fatcat Module - 'fatcat_id' Cross-Site Scripting 27 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-11   phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 Calendar Module - 'day' Cross-Site Scripting 28 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-11   PHP Website 0.7.3/0.8.2/0.8.3/0.9.2 Calendar Module - SQL Injection 31 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-11   News Wizard 2.0 - Full Path Disclosure 31 WEB G00db0y
2003-08-11   PHPOutSourcing Zorum 3.x - Cross-Site Scripting 28 WEB G00db0y
2003-08-11   Better Basket Pro 3.0 Store Builder - Full Path Disclosure 28 WEB G00db0y
2003-08-11   Stellar Docs 1.2 - Full Path Disclosure 29 WEB G00db0y
2003-08-11   DCForum+ 1.2 - 'Subject' HTML Injection 28 WEB G00db0y
2012-11-29   FCKEditor Core ASP 2.6.8 - Arbitrary File Upload Protection Bypass 23 WEB Soroush Dalili
2012-11-29   Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities 27 WEB LiquidWorm
2003-08-09   Invision Power Board (IP.Board) 1.0/1.1/1.2 - 'admin.php' Cross-Site Scripting 25 WEB Boy Bear
2003-08-09   geeeekShop 1.4 - Information Disclosure 27 WEB G00db0y
2003-08-08   PostNuke 0.6/0.7 web_links Module - TTitle Cross-Site Scripting 27 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-08   PostNuke 0.6/0.7 Downloads Module - TTitle Cross-Site Scripting 28 WEB Lorenzo Hernandez Garcia-Hierro
2003-08-08   C-Cart 1.0 - Full Path Disclosure 26 WEB G00db0y
2003-08-07   IdealBB 1.4.9 - 'error.asp' Cross-Site Scripting 26 WEB G00db0y
2003-08-06   vBulletin 3.0 - 'register.php' HTML Injection 24 WEB Ferruh Mavituna
2003-08-04   Macromedia Dreamweaver MX 6.0 - PHP User Authentication Suite Cross-Site Scripting 28 WEB Lorenzo Hernandez Garcia-Hierro
2003-07-31   MOD Guthabenhack 1.3 For Woltlab Burning Board - SQL Injection 24 WEB ben.moeckel@badwebmasters.net
2012-11-28   gleamtech filevista/fileultimate 4.6 - Directory Traversal 25 WEB Soroush Dalili
2003-07-28   Softshoe - Parse-file Cross-Site Scripting 29 WEB Bahaa Naamneh
2003-07-27   Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting 29 WEB Larry Nguyen
2003-07-28   PBLang 4.0/4.56 Bulletin Board System - IMG Tag HTML Injection 23 WEB Quan Van Truong
2003-07-25   e107 Website System 0.554 - HTML Injection 25 WEB Pete Foster
2003-07-24   e107 Website System 0.555 - 'db.php' Information Disclosure 27 WEB Artoor Petrovich
2003-07-24   PHP Arena paFileDB 1.1.3/2.1.1/3.0/3.1 - Arbitrary File Upload / Execution 24 WEB Martin Eiszner
2003-07-24   PHP-Gastebuch 1.60 - Information Disclosure 27 WEB Jim Pangalos
2003-07-21   MoreGroupWare 0.6.8 - WEBMAIL2_INC_DIR Remote File Inclusion 31 WEB phil dunn
2003-07-21   WebCalendar 0.9.x - Local File Inclusion Information Disclosure 26 WEB noconflic
2003-07-21   atomicboard 0.6.2 - Directory Traversal 25 WEB gr00vy
2003-07-21   Drupal 4.1/4.2 - Cross-Site Scripting 26 WEB Ferruh Mavituna
2012-11-26   PRADO PHP Framework 3.2.0 - Arbitrary File Read 23 WEB LiquidWorm
2012-11-26   SmartCMS - 'index.php?idx' SQL Injection 25 WEB NoGe
2012-11-26   BuyClassifiedScript - PHP Code Injection 26 WEB d3b4g
2003-07-18   SimpNews 2.0.1/2.13 - 'path_simpnews' Remote File Inclusion 28 WEB PUPET
2003-07-17   eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure 28 WEB Bosen
2003-07-16   Ultimate Bulletin Board 6.0/6.2 - UBBER Cookie HTML Injection 26 WEB anti_acid
2003-07-16   .netCART Settings.XML - Information Disclosure 25 WEB G00db0y