Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-06-25   WordPress Plugin Fancy Gallery 1.2.4 - Arbitrary File Upload 38 WEB Sammy FORGIT
2012-06-25   Parodia 6.8 - 'employer-profile.asp' SQL Injection 41 WEB Carlos Mario Penagos Hollmann
2012-06-24   UCCASS 1.8.1 - Blind SQL Injection 42 WEB dun
2012-06-23   SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution 41 WEB EgiX
2012-06-22   SoftPerfect Bandwidth Manager 2.9.10 - Authentication Bypass 40 WEB Gitsnik
2012-06-22   LimeSurvey 1.92+ build120620 - Multiple Vulnerabilities 37 WEB dun
2012-06-22   agora project 2.13.1 - Multiple Vulnerabilities 37 WEB Chris Russell
2012-06-21   Commentics 2.0 - Multiple Vulnerabilities 35 WEB Jean Pascal Pereira
2012-06-21   traq 2.3.5 - Multiple Vulnerabilities 45 WEB AkaStep
2012-06-21   IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities 42 WEB LiquidWorm
2012-06-20   WordPress Plugin Schreikasten 0.14.13 - Cross-Site Scripting 43 WEB Henry Hoggard
2012-06-19   iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities 39 WEB Vulnerability-Lab
2012-06-18   MyTickets 1.x < 2.0.8 - Blind SQL Injection 38 WEB al-swisre
2012-06-18   QNAP Turbo NAS 3.6.1 Build 0302T - Multiple Vulnerabilities 39 WEB Sense of Security
2012-06-16   iScripts EasyCreate 2.0 - Multiple Vulnerabilities 41 WEB Vulnerability-Lab
2012-06-16   Nuked Klan SP CMS 4.5 - SQL Injection 42 WEB Vulnerability-Lab
2012-06-16   WordPress Plugin Automatic 2.0.3 - SQL Injection 37 WEB nick58
2012-06-16   Huawei HG866 - Authentication Bypass 40 WEB hkm
2012-06-16   News Script PHP 1.2 - Multiple Vulnerabilities 44 WEB Vulnerability-Lab
2012-06-16   PHP Decoda 3.3.1 - Local File Inclusion 37 WEB Number 7
2012-06-16   webo site speedup 1.6.1 - Multiple Vulnerabilities 37 WEB dun
2012-06-15   Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution 45 WEB mr_me
2012-06-14   qdPM 7 - Arbitrary File upload 39 WEB loneferret
2012-06-14   Squirrelcart Cart Shop 3.3.4 - Multiple Web Vulnerabilities 41 WEB Vulnerability-Lab
2012-06-14   Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities 39 WEB Vulnerability-Lab
2012-06-14   Cells Blog CMS 1.1 - Multiple Web Vulnerabilities 39 WEB Vulnerability-Lab
2012-06-14   Myre Real Estate Mobile 2012 - Multiple Vulnerabilities 47 WEB Vulnerability-Lab
2012-06-13   WordPress Plugin Foxypress - 'Uploadify.php' Arbitrary Code Execution (Metasploit) 43 WEB Metasploit
2012-06-13   WordPress Plugin Foxypress - 'Uploadify.php' Arbitrary Code Execution (Metasploit) 38 WEB Metasploit
2012-06-12   Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit) 42 WEB Metasploit
2012-06-11   TheBlog 2.0 - Multiple Vulnerabilities 41 WEB WhiteCollarGroup
2012-06-11   Agora-Project 2.12.11 - Arbitrary File Upload 42 WEB Misa3l
2012-06-11   WordPress Plugin Custom Content Type Manager 0.9.5.13-pl - Arbitrary File Upload 43 WEB Adrien Thierry
2012-06-11   WordPress Plugin drag and drop file upload 0.1 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-11   WordPress Plugin Mac Photo Gallery 2.7 - Arbitrary File Upload 40 WEB Adrien Thierry
2012-06-11   WordPress Plugin Pica Photo Gallery 1.0 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-11   WordPress Plugin SfBrowser 1.4.5 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-11   WordPress Plugin Top Quark Architecture 2.10 - Arbitrary File Upload 39 WEB Adrien Thierry
2012-06-11   WordPress Plugin User Meta 1.1.1 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-11   ClanSuite 2.9 - Arbitrary File Upload 40 WEB Adrien Thierry
2012-06-11   WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload 36 WEB Adrien Thierry
2012-06-10   Symantec Web Gateway 5.0.2.8 - Arbitrary '.PHP' File Upload (Metasploit) 38 WEB Metasploit
2012-06-10   WordPress Plugin Content Flow 3D 1.0.0 - Arbitrary File Upload 41 WEB g11tch
2012-06-10   freepost 0.1 r1 - Multiple Vulnerabilities 38 WEB ThE g0bL!N
2012-06-10   Webspell dailyinput Movie Addon 4.2.x - SQL Injection 38 WEB Easy Laster
2012-06-08   phpAcounts 0.5.3 - SQL Injection 37 WEB loneferret
2012-06-08   WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload 38 WEB Sammy FORGIT
2012-06-08   WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 - Remote File Disclosure 38 WEB Sammy FORGIT
2012-06-08   WordPress Plugin Thinkun Remind 1.1.3 - Remote File Disclosure 38 WEB Sammy FORGIT
2012-06-08   WordPress Plugin Simple Download Button ShortCode 1.0 - Remote File Disclosure 35 WEB Sammy FORGIT
2012-06-08   WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload 35 WEB Sammy FORGIT
2012-06-08   WordPress Plugin NewsLetter 1.5 - Remote File Disclosure 39 WEB Sammy FORGIT
2012-06-08   WordPress Plugin PICA Photo Gallery 1.0 - Remote File Disclosure 34 WEB Sammy FORGIT
2012-06-08   WordPress Plugin Easy Contact Forms Export 1.1.0 - Information Disclosure 38 WEB Sammy FORGIT
2012-06-08   WordPress Plugin Front File Manager 0.1 - Arbitrary File Upload 35 WEB Adrien Thierry
2012-06-08   Webspell FIRSTBORN Movie-Addon - Blind SQL Injection 36 WEB Easy Laster
2012-06-07   WordPress Plugin Omni Secure Files 0.1.13 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-07   WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload 38 WEB Adrien Thierry
2012-06-07   PHPNet 1.8 - 'ler.php' SQL Injection 36 WEB WhiteCollarGroup
2012-06-07   SN News 1.2 - '/admin/loger.php' Authentication Bypass 41 WEB Yakir Wizman
2012-06-06   vanilla kpoll plugin 1.2 - Persistent Cross-Site Scripting 38 WEB Henry Hoggard
2012-06-06   SN News 1.2 - 'visualiza.php' SQL Injection 37 WEB WhiteCollarGroup
2012-06-06   WordPress Plugin Gallery 3.06 - Arbitrary File Upload 37 WEB Sammy FORGIT
2012-06-06   WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload 37 WEB Sammy FORGIT
2012-06-06   WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload 36 WEB Sammy FORGIT
2012-06-05   WordPress Plugin Asset Manager 0.2 - Arbitrary File Upload 36 WEB Sammy FORGIT
2012-06-05   WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload 36 WEB Sammy FORGIT
2012-06-05   WordPress Plugin HTML5 AV Manager 0.2.7 - Arbitrary File Upload 36 WEB Sammy FORGIT
2012-06-05   WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities 49 WEB Sammy FORGIT
2012-06-05   WordPress Plugin Marketplace Plugin 1.5.0 < 1.6.1 - Arbitrary File Upload 39 WEB Sammy FORGIT
2012-06-05   WordPress Plugin WP-Property 1.35.0 - Arbitrary File Upload 42 WEB Sammy FORGIT
2012-06-05   pyrocms 2.1.1 - Multiple Vulnerabilities 45 WEB LiquidWorm
2012-06-04   Mnews 1.1 - 'view.php' SQL Injection 40 WEB WhiteCollarGroup
2012-06-04   Hexamail Server 4.4.5 - Persistent Cross-Site Scripting 41 WEB modpr0be
2012-06-03   Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting 38 WEB Henry Hoggard
2012-06-03   vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting 37 WEB Henry Hoggard
2012-06-03   Log1 CMS - 'writeInfo()' PHP Code Injection (Metasploit) 35 WEB Metasploit
2012-06-02   Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting 37 WEB Henry Hoggard
2012-06-01   Membris 2.0.1 - Multiple Vulnerabilities 40 WEB Dr.abolalh
2012-06-01   4PSA VoIPNow Professional 2.5.3 - Multiple Vulnerabilities 35 WEB Aboud-el
2012-05-31   Supernews 2.6.1 - 'noticias.php?cat' SQL Injection 36 WEB Yakir Wizman
2012-05-31   NewsAdd 1.0 - 'lerNoticia.php?id' SQL Injection 40 WEB Yakir Wizman
2012-05-31   PHP Volunteer Management System 1.0.2 - Arbitrary File Upload (Metasploit) 35 WEB Metasploit
2012-05-30   Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections 38 WEB loneferret
2012-05-30   Ganesha Digital Library 4.0 - Multiple Vulnerabilities 37 WEB X-Cisadane
2012-05-30   NewsAdd 1.0 - Multiple SQL Injections 39 WEB WhiteCollarGroup
2012-05-29   PBBoard 2.1.4 - Multiple SQL Injections 38 WEB loneferret
2012-05-28   PHP Volunteer Management System 1.0.2 - Multiple SQL Injections 37 WEB loneferret
2012-05-28   PHP Volunteer Management System 1.0.2 - Multiple Vulnerabilities 36 WEB Ashoo
2012-05-28   PBBoard 2.1.4 - Local File Inclusion 40 WEB n4ss1m
2012-05-27   b2ePms 1.0 - Multiple SQL Injection Vulnerabilities 35 WEB loneferret
2012-05-27   WeBid - 'converter.php' Remote PHP Code Injection (Metasploit) 37 WEB Metasploit
2012-05-26   Symantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution 40 WEB muts
2012-05-25   SocialEngine 4.2.2 - Multiple Vulnerabilities 37 WEB i4k
2012-05-25   appRain CMF - Arbitrary '.PHP' File Upload (Metasploit) 33 WEB Metasploit
2012-05-24   Jaow 2.4.5 - Blind SQL Injection 39 WEB kallimero
2012-05-21   Supernews 2.6.1 - SQL Injection 40 WEB WhiteCollarGroup
2012-05-21   Vanilla FirstLastNames 1.3.2 Plugin - Persistent Cross-Site Scripting 38 WEB Henry Hoggard
2012-05-21   Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting 39 WEB Henry Hoggard
2012-05-18   Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting 41 WEB Henry Hoggard
2012-05-19   FreeNAC 3.02 - SQL Injection / Cross-Site Scripting 38 WEB blake
2012-05-19   PHP Address Book 7.0.0 - Multiple Vulnerabilities 38 WEB Stefan Schurtz
2012-05-16   Artiphp CMS 5.5.0 - Database Backup Disclosure 37 WEB LiquidWorm
2012-01-03   OpenKM Document Management System 5.1.7 - Command Execution 48 WEB Cyrill Brunschwiler
2012-05-16   Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting 44 WEB Ivano Binetti
2012-05-08   S9Y Serendipity 1.6 - 'Backend' Cross-Site Scripting / SQL Injection 39 WEB Stefan Schurtz
2012-05-15   b2ePms 1.0 - Authentication Bypass 38 WEB Jean Pascal Pereira
2012-05-13   Liferay Portal 6.0.x < 6.1 - Privilege Escalation 40 WEB Jelmer Kuperus
2012-05-13   Galette - 'picture.php' SQL Injection 38 WEB sbz
2012-05-13   Free Realty 3.1-0.6 - Multiple Vulnerabilities 37 WEB Vulnerability-Lab
2012-05-13   Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities 36 WEB Vulnerability-Lab
2012-05-13   Proman Xpress 5.0.1 - Multiple Vulnerabilities 37 WEB Vulnerability-Lab
2012-05-13   Travelon Express CMS 6.2.2 - Multiple Vulnerabilities 37 WEB Vulnerability-Lab
2012-05-12   Sockso 1.51 - Persistent Cross-Site Scripting 37 WEB Ciaran McNally
2012-05-12   WikkaWiki 1.3.2 - Spam Logging PHP Injection (Metasploit) 35 WEB Metasploit
2012-05-11   Belkin N150 Wireless Router - Password Disclosure 41 WEB Avinash Tangirala
2012-05-10   eLearning server 4g - Multiple Vulnerabilities 40 WEB Andrey Komarov
2012-05-10   Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure 36 WEB Andrey Komarov
2012-05-09   X7 Chat 2.0.5.1 - Cross-Site Request Forgery (Add Admin) 35 WEB DennSpec
2012-05-07   PHP Agenda 2.2.8 - SQL Injection 36 WEB loneferret
2012-05-07   myCare2x CMS - Multiple Vulnerabilities 36 WEB Vulnerability-Lab
2012-05-07   Myre Real Estate Mobile 2012/2 - Multiple Vulnerabilities 39 WEB Vulnerability-Lab
2012-05-07   Genium CMS 2012/Q2 - Multiple Vulnerabilities 35 WEB Vulnerability-Lab
2012-05-07   Lynx Message Server - Multiple Vulnerabilities 38 WEB Mark Lachniet
2012-05-07   Fortinet FortiWeb Web Application Firewall - Policy Bypass 37 WEB Geffrey Velasquez