Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-09-17   luxcal 2.7.0 - Multiple Vulnerabilities 18 WEB L0n3ly-H34rT
2012-09-14   Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Reques 18 WEB modpr0be
2012-09-14   NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities 18 WEB Vulnerability-Lab
2012-09-14   ASTPP VoIP Billing (4cf207a) - Multiple Vulnerabilities 19 WEB Vulnerability-Lab
2002-03-04   ReBB 1.0 - Image Tag Cross-Agent Scripting 19 WEB skizzik
2002-02-27   Snitz Forums 2000 3.0/3.1/3.3 - Image Tag Cross-Agent Scripting 16 WEB Justin
2002-02-26   IkonBoard 2.17/3.0/3.1 - Image Tag Cross-Agent Scripting 20 WEB godminus
2002-02-25   OpenBB 1.0.x - Image Tag Cross-Agent Scripting 19 WEB skizzik
2002-02-22   XMB Forum 1.6 pre-beta - Image Tag Script Injection 17 WEB skizzik
2002-02-22   Powie PForum 1.1x - 'Username' Cross-Site Scripting 19 WEB Jens Liebchen
2002-02-04   Portix-PHP 0.4 - Cookie Manipulation 18 WEB frog
2002-02-04   Portix-PHP 0.4 - 'view.php' Directory Traversal 17 WEB frog
2002-02-04   Portix-PHP 0.4 - 'index.php' Directory Traversal 18 WEB frog
2012-09-12   Ezylog Photovoltaic Management Server - Multiple Vulnerabilities 16 WEB Roberto Paleari
2012-09-12   Knowledge Base Enterprise Edition 4.62.0 - SQL Injection 16 WEB Vulnerability-Lab
2012-09-12   Webify Photo Gallery - Arbitrary File Deletion 17 WEB JIKO
2012-09-12   Webify Business Directory - Arbitrary File Deletion 19 WEB JIKO
2012-09-12   Webify eDownloads Cart - Arbitrary File Deletion 19 WEB JIKO
2012-09-12   Subrion CMS 2.2.1 - Cross-Site Request Forgery (Add Admin) 20 WEB LiquidWorm
2002-01-29   AHG Search Engine 1.0 - 'search.cgi' Arbitrary Command Execution 23 WEB Aleksey Sintsov
2012-09-11   akcms 4.2.4 - Information Disclosure 26 WEB L0n3ly-H34rT
2012-09-11   Webify Blog - Arbitrary File Deletion 19 WEB JIKO
2002-01-02   WikkiTikkiTavi 0.x - Remote File Inclusion 19 WEB Scott Moonen
2002-01-18   PHP-Nuke 4.x/5.x - SQL_Debug Information Disclosure 18 WEB zataz.com
2002-01-16   PHP-Nuke 4.x/5.x - Arbitrary File Inclusion 20 WEB Handle Nopman
2012-09-10   SiteGo - Remote File Inclusion 18 WEB L0n3ly-H34rT
2012-09-10   Joomla! Component RokModule 1.1 - 'module' Blind SQL Injection 18 WEB Yarolinux
2012-09-10   VICIDIAL Call Center Suite 2.2.1-237 - Multiple Vulnerabilities 17 WEB Ertebat Gostar Co
2002-01-09   Ultimate Bulletin Board 5.4/6.0/6.2 - Cross-Agent Scripting 18 WEB Obscure
2002-01-09   YaBB 9.1.2000 - Cross-Agent Scripting 21 WEB Obscure
2002-01-06   PHP-Nuke AddOn PHPToNuke.php 1.0 - Cross-Site Scripting 22 WEB frog
2001-12-18   Aktivate 1.0 3 - Shopping Cart Cross-Site Scripting 21 WEB Tamer Sahin
2001-12-17   Agora.CGI 3.x/4.0 - Debug Mode Cross-Site Scripting 17 WEB Tamer Sahin
2001-12-01   EasyNews 1.5 - NewsDatabase/Template Modification 16 WEB markus arndt
2001-12-03   PHP-Nuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB Cabezon Aurélien
2001-12-03   PHP-Nuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x - 'user.php?uname' Cross-Site Scripting 18 WEB Cabezon Aurélien
2001-11-19   bharat Mediratta Gallery 1.1/1.2 - Directory Traversal 23 WEB Cabezon Aurelien
2012-09-08   Pinterest Clone Script - Multiple Vulnerabilities 22 WEB DaOne
2012-09-07   TestLink 1.9.3 - Cross-Site Request Forgery 22 WEB High-Tech Bridge SA
2012-09-07   Sitecom Home Storage Center - Authentication Bypass 17 WEB Mattijs van Ommeren
2012-09-07   Clipster Video - Persistent Cross-Site Scripting 17 WEB DaOne
2012-09-07   Cannonbolt Portfolio Manager 1.0 - Multiple Vulnerabilities 19 WEB LiquidWorm
2001-10-13   PostNuke 0.6 - User Login 18 WEB anonymous
2012-09-05   Ektron CMS 8.5.0 - Multiple Vulnerabilities 19 WEB Sense of Security
2012-09-05   ES Job Search Engine 3.0 - SQL Injection 20 WEB Vulnerability-Lab
2011-12-18   novell sentinel log manager 1.2.0.1 - Directory Traversal 21 WEB Andrea Fabrizi
2012-09-05   QNAP Turbo NAS TS-1279U-RP - Multiple Path Injections 21 WEB Andrea Fabrizi
2012-09-05   MobileCartly 1.0 - Arbitrary File Creation (Metasploit) 23 WEB Metasploit
2001-07-31   phpBB 1.x - Page Header Arbitrary Command Execution 23 WEB UnderSpell
2012-09-04   Group Office Calendar - '/calendar/json.php' SQL Injection 17 WEB Chris Cooper
2012-09-04   Support4Arabs Pages 2.0 - SQL Injection 20 WEB L0n3ly-H34rT
2012-09-04   Splunk 4.3.3 - Arbitrary File Read 20 WEB Marcio Almeida
2012-09-04   jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities 20 WEB Hoyt LLC Research
2001-08-03   phpBB 1.4 - SQL Query Manipulation 21 WEB kill-9
2001-07-27   PHP-Nuke 5.0 - 'user.php' Form Element Substitution 16 WEB dinopio
2012-09-03   Sitecom Home Storage Center - Directory Traversal 21 WEB Mattijs van Ommeren
2012-09-03   Conceptronic Grab'n'Go Network Storage - Directory Traversal 21 WEB Mattijs van Ommeren
2001-07-21   PHPLib Team PHPLIB 7.2 - Remote Script Execution 21 WEB giancarlo pinerolo
2012-09-02   AV Arcade Free Edition - 'add_rating.php?id' Blind SQL Injection 17 WEB DaOne
2012-09-02   Admidio 2.3.5 - Multiple Vulnerabilities 21 WEB Stefan Schurtz
2001-07-06   Basilix Webmail 1.0 - File Disclosure 22 WEB karol _
2001-07-05   Cobalt Qube Webmail 1.0 - Directory Traversal 18 WEB kf
2001-07-02   Citrix Nfuse 1.51 - Webroot Disclosure 21 WEB sween
2012-09-01   Joomla! Component Spider Calendar - SQL Injection 17 WEB D4NB4R
2012-09-01   SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities 20 WEB Brendan Coles
2012-08-31   OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting 24 WEB Mike Eduard
2012-08-31   vBulletin Yet Another Awards System 4.0.2 - SQL Injection 22 WEB Backsl@sh/Dan
2012-08-30   Booking System Pro - Cross-Site Request Forgery 19 WEB DaOne
2001-06-13   SiteWare 2.5/3.0/3.1 Editor Desktop - Directory Traversal 18 WEB Foundstone Labs
2012-08-29   WordPress Plugin HD Webplayer 1.1 - SQL Injection 21 WEB JoinSe7en
2012-08-29   Disqus Blog Comments - Blind SQL Injection 20 WEB Spy_w4r3
2012-08-28   Conceptronic Grab'n'Go and Sitecom Storage Center - Password Disclosure 21 WEB Mattijs van Ommeren
2012-08-28   RV Shopping Cart - Cross-Site Request Forgery 21 WEB DaOne
2012-08-28   RV Article Publisher - Cross-Site Request Forgery 17 WEB DaOne
2012-08-28   mieric AddressBook 1.0 - SQL Injection 19 WEB Jean Pascal Pereira
2012-08-28   CommPort 1.01 - Multiple Vulnerabilities 20 WEB Jean Pascal Pereira
2012-08-27   aoop CMS 0.3.6 - Multiple Vulnerabilities 19 WEB Julien Ahrens
2012-08-27   Elcom CMS 7.4.10 - Community Manager Insecure Arbitrary File Upload 25 WEB Sense of Security
2012-08-27   xt:Commerce VEYTON 4.0.15 - 'products_name_de' Script Insertion 19 WEB LiquidWorm
2012-08-27   WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting 22 WEB Crim3R
2012-08-27   Vlinks 2.0.3 - 'id' SQL Injection 21 WEB JIKO
2012-08-27   web@all CMS 2.0 - Multiple Vulnerabilities 23 WEB LiquidWorm
2012-08-27   XWiki 4.2-milestone-2 - Multiple Persistent Cross-Site Scripting Vulnerabilities 20 WEB Shai rod
2012-08-27   Wiki Web Help 0.3.9 - Multiple Persistent Cross-Site Scripting Vulnerabilities 19 WEB Shai rod
2001-04-15   PHPSlash 0.5.3 2/0.6.1 - URL Block Arbitrary File Disclosure 19 WEB tobozo tagada
2012-08-24   businesswiki 2.5rc3 - Persistent Cross-Site Scripting / Arbitrary file upload 19 WEB Shai rod
2012-08-24   Easy Banner Pro - 'index.php' Local File Inclusion 21 WEB Yakir Wizman
2012-08-24   AB Banner Exchange - 'index.php' Local File Inclusion 19 WEB Yakir Wizman
2012-08-24   Text Exchange Pro - 'index.php' Local File Inclusion 17 WEB Yakir Wizman
2012-08-24   Ad Manager Pro - Multiple Vulnerabilities 18 WEB Yakir Wizman
2012-08-24   webpa 1.1.0.1 - Multiple Vulnerabilities 22 WEB dun
2012-08-23   Ad Manager Pro 4 - Local File Inclusion 22 WEB CorryL
2012-08-23   op5 Monitoring 5.4.2 - VM Applicance Multiple Vulnerabilities 19 WEB loneferret
2012-08-23   letodms 3.3.6 - Multiple Vulnerabilities 19 WEB Shai rod
2001-04-02   PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change 19 WEB Juan Diego
2012-08-22   XODA 0.4.5 - Arbitrary '.PHP' File Upload (Metasploit) 18 WEB Metasploit
2012-08-22   E-Mail Security Virtual Appliance - 'learn-msg.cgi' Command Injection (Metasploit) 15 WEB Metasploit
2012-08-22   VamCart 0.9 - Cross-Site Request Forgery 19 WEB DaOne
2012-08-22   OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change) 20 WEB Shai rod
2012-08-21   Clipbucket 2.5 - Blind SQL Injection 18 WEB loneferret
2012-08-21   Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change 18 WEB Kc57
2012-08-21   Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit) 19 WEB Kc57
2012-08-21   Clipbucket 2.5 - Directory Traversal 21 WEB loneferret
2012-08-21   XODA Document Management System 0.4.5 - Cross-Site Scripting / Arbitrary File Upload 26 WEB Shai rod
2012-08-20   IOServer 1.0.18.0 - Directory Traversal 22 WEB hinge
2012-08-20   uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting 17 WEB Shai rod
2012-08-20   YourArcadeScript 2.4 - 'index.php?id' SQL Injection 19 WEB DaOne
2012-08-20   Hivemail Webmail - Multiple Persistent Cross-Site Scripting Vulnerabilities 22 WEB Shai rod
2012-08-20   PG Portal Pro - Cross-Site Request Forgery 19 WEB Noxious
2012-08-20   GWebmail 0.7.3 - Cross-Site Scripting / Local File Inclusion / Remote Code Execution 16 WEB Shai rod
2012-08-20   hupa webmail 0.0.2 - Persistent Cross-Site Scripting 23 WEB Shai rod
2012-08-20   Alpha Networks ADSL2/2+ Wireless Router ASL-26555 - Password Disclosure 22 WEB Alberto Ortega
2012-08-20   Clipbucket 2.5 - Cross-Site Request Forgery 21 WEB DaOne
2012-08-20   T-dah Webmail - Cross-Site Request Forgery / Persistent Cross-Site Scripting 22 WEB Yakir Wizman
2012-08-18   ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting 24 WEB loneferret
2012-08-18   IlohaMail Webmail - Persistent Cross-Site Scripting 20 WEB Shai rod
2012-08-17   Jaow CMS 2.3 - Blind SQL Injection 24 WEB loneferret
2000-01-06   Phorum 3.0.7 - 'auth.php3' Backdoor Access 25 WEB Max Vision
2000-01-01   Phorum 3.0.7 - 'violation.php3' Arbitrary Email Relay 24 WEB Max Vision
2000-01-06   Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change 22 WEB Max Vision
2012-08-17   webid 1.0.4 - Multiple Vulnerabilities 21 WEB dun
2012-08-17   T-dah Webmail Client - Multiple Persistent Cross-Site Scripting Vulnerabilities 28 WEB Shai rod
2012-08-17   hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting 23 WEB Shai rod
2012-08-17   Inferno vBShout 2.5.2 - SQL Injection 23 WEB Luit
2012-08-17   ManageEngine OpStor 7.4 - Multiple Vulnerabilities 20 WEB Vulnerability-Lab