Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-03-31   Landshop 0.9.2 - Multiple Web Vulnerabilities 3 WEB Vulnerability-Lab
2012-03-30   SyndeoCMS 3.0.01 - Persistent Cross-Site Scripting 4 WEB Ivano Binetti
2012-03-30   dalbum 144 build 174 - Cross-Site Request Forgery 3 WEB Ahmed Elhady Mohamed
2012-03-30   ArticleSetup - Multiple Persistence Cross-Site Scripting / SQL Injections 5 WEB SecPod Research
2012-03-30   coppermine 1.5.18 - Multiple Vulnerabilities 4 WEB waraxe
2012-03-28   BoastMachine 3.1 - Cross-Site Request Forgery (Add Admin) 4 WEB Dr.NaNo
2012-03-28   PicoPublisher 2.0 - SQL Injection 4 WEB ZeTH
2012-03-26   vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities 4 WEB ToiL
2012-03-26   Family CMS 2.9 - Multiple Vulnerabilities 4 WEB Ahmed Elhady Mohamed
2012-03-24   RIPS 0.53 - Multiple Local File Inclusions 4 WEB localh0t
2012-03-24   FreePBX 2.9.0/2.10.0 - 'callmenum' Remote Code Execution (Metasploit) 4 WEB Metasploit
2012-03-23   PHPFox 3.0.1 - 'ajax.php' Remote Command Execution 4 WEB EgiX
2012-03-23   Wolfcms 0.75 - Cross-Site Request Forgery / Cross-Site Scripting 5 WEB Ivano Binetti
2012-03-23   Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities 4 WEB Ivano Binetti
2012-03-23   FreePBX 2.10.0 / Elastix 2.2.0 - Remote Code Execution 4 WEB muts
2012-03-22   FreePBX 2.9.0/2.10.0 - Multiple Vulnerabilities 4 WEB Martin Tschirsich
2012-03-22   phpMoneyBooks 1.0.2 - Local File Inclusion 4 WEB Mark Stanislav
2012-03-22   PHP Grade Book 1.9.4 - SQL Database Export 3 WEB Mark Stanislav
2012-03-22   Cyberoam UTM - Multiple Vulnerabilities 4 WEB Saurabh Harit
2012-03-22   vBShout - Persistent Cross-Site Scripting 4 WEB ToiL
2012-03-21   phpList 2.10.17 - SQL Injection / Cross-Site Scripting 3 WEB LiquidWorm
2012-03-21   D-Link DIR-605 - Cross-Site Request Forgery 4 WEB iqzer0
2012-03-20   OneFileCMS - Failure to Restrict URL Access 4 WEB Abhi M Balakrishnan
2012-03-20   OneForum - 'topic.php' SQL Injection 4 WEB Red Security TEAM
2012-03-19   ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal 4 WEB rgod
2012-03-19   Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection 4 WEB A. Ramos
2012-03-18   Pre Printing Press - 'product_desc.php?pid' SQL Injection 4 WEB Easy Laster
2012-03-17   PRE PRINTING STUDIO - SQL Injection 4 WEB r45c4l
2012-03-17   ASP Classifieds - SQL Injection 5 WEB r45c4l
2012-03-16   FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities 4 WEB Ivano Binetti
2012-03-16   FlexCMS 3.2.1 - Persistent Cross-Site Scripting 4 WEB storm
2012-03-16   OneFileCMS 1.1.5 - Local File Inclusion 4 WEB mr.pr0n
2012-03-15   sockso 1.5 - Directory Traversal 4 WEB Luigi Auriemma
2012-03-14   TVersity 1.9.7 - Arbitrary File Download 4 WEB Luigi Auriemma
2012-03-14   asaanCart - Cross-Site Scripting / Local File Inclusion 4 WEB Number 7
2012-03-14   Encaps PHP Gallery - SQL Injection 4 WEB Daniel Godoy
2012-03-14   Sitecom WLM-2501 - Cross-Site Request Forgery 3 WEB Ivano Binetti
2012-03-14   Max Guestbook 1.0 - Multiple Vulnerabilities 4 WEB n0tch
2012-03-14   Simple Posting System - Multiple Vulnerabilities 3 WEB n0tch
2012-03-14   ModX 2.2.0 - Multiple Vulnerabilities 4 WEB n0tch
2012-03-13   4Images Image Gallery Management System - Cross-Site Request Forgery 4 WEB Dmar al3noOoz
2012-03-13   Cycade Gallery - SQL Injection 3 WEB -DownFall
2012-03-13   PBLang Bulletin Board System - Local File Inclusion 4 WEB Number 7
2012-03-12   Acal Calendar 2.2.6 - Cross-Site Request Forgery 4 WEB Number 7
2012-03-12   Saman Portal - Local File Inclusion 4 WEB TMT
2012-03-12   Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities 4 WEB LiquidWorm
2012-03-10   PHP Address Book 6.2.12 - Multiple Vulnerabilities 4 WEB Stefan Schurtz
2012-03-08   RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages) 4 WEB Ivano Binetti
2012-03-08   RazorCMS 1.2.1 STABLE - Arbitrary File Upload 4 WEB i2sec_Hyo jun Oh
2012-03-07   promise webpam 2.2.0.13 - Multiple Vulnerabilities 4 WEB LiquidWorm
2012-03-07   HomeSeer HS2 and HomeSeer PRO - Multiple Vulnerabilities 3 WEB Silent_Dream
2012-03-07   Iciniti Store - SQL Injection 4 WEB Sense of Security
2012-03-02   Drupal 7.12 - Multiple Vulnerabilities 4 WEB Ivano Binetti
2012-02-21   Fork CMS 3.2.5 - Multiple Vulnerabilities 4 WEB Ivano Binetti
2012-03-05   lizard cart - 'search.php' SQL Injection 4 WEB Number 7
2012-03-05   Symfony2 - Local File Disclosure 4 WEB Sense of Security
2012-03-04   AneCMS 2e2c583 - Local File Inclusion 4 WEB I2sec-Jong Hwan Park
2012-03-04   DZCP (deV!L_z Clanportal) Witze Addon 0.9 - SQL Injection 4 WEB Easy Laster
2012-03-03   Endian UTM Firewall 2.4.x < 2.5.0 - Multiple Web Vulnerabilities 4 WEB Vulnerability-Lab
2012-03-03   Timesheet Next Gen 1.5.2 - Multiple SQL Injections 4 WEB G13
2012-03-03   Rivettracker 1.03 - Multiple SQL Injections 4 WEB Ali Raheem
2012-03-02   phxEventManager 2.0 Beta 5 - 'search.php' search_terms SQL Injection 4 WEB skysbsb
2012-02-29   Wolf CMS 0.7.5 - Multiple Vulnerabilities 5 WEB longrifle0x
2012-02-29   ImgPals Photo Host 1.0 - Admin Account Disactivation 5 WEB CorryL
2012-02-29   Yealink VOIP Phone - Persistent Cross-Site Scripting 4 WEB Narendra Shinde
2012-02-28   WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add Admin/Modify Pages) 5 WEB Ivano Binetti
2012-02-26   ContaoCMS (aka TYPOlight) 2.11 - Cross-Site Request Forgery (Delete Admin / Delete Article) 4 WEB Ivano Binetti
2012-02-25   YVS Image Gallery - SQL Injection 4 WEB CorryL
2012-02-25   webgrind 1.0 - 'file' Local File Inclusion 4 WEB LiquidWorm
2012-02-25   cPassMan 1.82 - Remote Command Execution 4 WEB ls
2012-02-24   PHP Gift Registry 1.5.5 - SQL Injection 3 WEB G13
2012-02-23   The Uploader 2.0.4 (English/Italian) - Arbitrary File Upload / Remote Code Execution (Metasploit) 4 WEB Danny Moules
2012-02-23   Snom IP Phone - Privilege Escalation 4 WEB Sense of Security
2012-02-23   phpDenora 1.4.6 - Multiple SQL Injections 5 WEB Patrick de Brouwer
2012-02-22   DFLabs PTK 1.0.5 - Steal Authentication Credentials 4 WEB Ivano Binetti
2012-02-22   D-Link DSL-2640B ADSL Router - Authentication Bypass 4 WEB Ivano Binetti
2012-02-22   WebcamXP and webcam 7 - Directory Traversal 4 WEB Silent_Dream
2012-02-22   D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password) 3 WEB rigan
2012-02-22   LimeSurvey (PHPSurveyor 1.91+ stable) - Blind SQL Injection 4 WEB TorTukiTu
2012-02-22   Brim < 2.0.0 - SQL Injection 3 WEB ifnull
2012-02-22   Sagem F@ST 2604 ADSL Router - Cross-Site Request Forgery 4 WEB KinG Of PiraTeS
2012-02-21   Cisco Linksys WAG54GS - Cross-Site Request Forgery (Change Admin Password) 4 WEB Ivano Binetti
2012-02-20   Plume CMS 1.2.4 - Cross-Site Request Forgery 3 WEB Ivano Binetti
2012-02-20   D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery 4 WEB Ivano Binetti
2012-02-19   SyndeoCMS 3.0 - Cross-Site Request Forgery 4 WEB Ivano Binetti
2012-02-19   4PSA CMS - SQL Injection 4 WEB BHG Security Center
2012-02-18   almnzm 2.4 - Cross-Site Request Forgery (Add Admin) 4 WEB HaNniBaL KsA
2012-02-17   Pandora Fms 4.0.1 - Local File Inclusion 4 WEB Vulnerability-Lab
2012-02-16   SocialCMS 1.0.2 - Cross-Site Request Forgery 4 WEB Ivano Binetti
2012-02-12   Fork CMS 3.2.4 - Local File Inclusion / Cross-Site Scripting 4 WEB Avram Marius
2012-02-10   Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion 4 WEB Vulnerability-Lab
2012-02-08   Cyberoam Central Console 2.00.2 - Remote File Inclusion 4 WEB Vulnerability-Lab
2012-02-08   Gazelle CMS 1.0 - Update Statement SQL Injection 4 WEB hackme
2012-02-07   Flyspray 0.9.9.6 - Cross-Site Request Forgery 5 WEB Vaibhav Gupta
2012-02-06   XRayCMS 1.1.1 - SQL Injection 4 WEB chap0
2012-02-06   Tube Ace (Adult PHP Tube Script) - SQL Injection 4 WEB Daniel Godoy
2012-02-06   BASE 1.4.5 - 'base_qry_main.php?t_view' SQL Injection 4 WEB a.kadir altan
2012-02-05   GAzie 5.20 - Cross-Site Request Forgery 4 WEB Giuseppe D'Inverno
2012-02-02   Achievo 1.4.3 - Multiple Web Vulnerabilities 4 WEB Vulnerability-Lab
2012-02-02   osCommerce 3.0.2 - Persistent Cross-Site Scripting 4 WEB Vulnerability-Lab
2012-02-02   Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities 4 WEB SecPod Research
2012-02-02   Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities 4 WEB SecPod Research
2012-01-13   MailEnable Webmail - Cross-Site Scripting 4 WEB Sajjad Pourali
2012-02-01   sit! support incident tracker 3.64 - Multiple Vulnerabilities 4 WEB High-Tech Bridge SA
2012-02-01   swDesk - Multiple Vulnerabilities 4 WEB Red Security TEAM
2012-01-31   Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection 3 WEB Cagri Tepebasili
2012-01-31   PragmaMX 1.2.10 - Persistent Cross-Site Scripting 4 WEB HauntIT
2012-01-31   Ez Album - Blind SQL Injection 4 WEB Red Security TEAM
2012-01-31   phpShowtime - Directory Traversal 4 WEB Red Security TEAM
2012-01-31   Snort Report 1.3.2 - SQL Injection 4 WEB a.kadir altan
2012-01-30   phux Download Manager - Blind SQL Injection 4 WEB Red Security TEAM
2012-01-30   Ajax Upload - Arbitrary File Upload 4 WEB Daniel Godoy
2012-01-30   Campaign Enterprise 11.0.421 - SQL Injection 4 WEB Craig Freyman
2012-01-30   4Images 1.7.6-9 - Cross-Site Request Forgery / PHP Code Injection 4 WEB Or4nG.M4N
2012-01-30   HostBill App 2.3 - Remote Code Injection 4 WEB Dr.DaShEr
2012-01-27   vBSEO 3.6.0 - 'proc_deutf()' Remote PHP Code Injection (Metasploit) 4 WEB EgiX
2012-01-26   Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections 4 WEB Cyber-Crystal
2012-01-26   phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting 4 WEB Cyber-Crystal
2012-01-26   VR GPub 4.0 - Cross-Site Request Forgery 4 WEB Cyber-Crystal
2012-01-25   WordPress Core 3.3.1 - Multiple Vulnerabilities 4 WEB Trustwave's SpiderLabs
2012-01-24   stoneware webnetwork6 - Multiple Vulnerabilities 4 WEB Jacob Holcomb
2012-01-23   SpamTitan Application 5.08x - SQL Injection 4 WEB Vulnerability-Lab
2012-01-23   WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload 5 WEB EgiX
2012-01-22   MiniCMS 1.0/2.0 - PHP Code Injection 4 WEB Or4nG.M4N
2012-01-22   WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload 4 WEB 6Scan