Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-02-10   Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion 38 WEB Vulnerability-Lab
2012-02-08   Cyberoam Central Console 2.00.2 - Remote File Inclusion 37 WEB Vulnerability-Lab
2012-02-08   Gazelle CMS 1.0 - Update Statement SQL Injection 39 WEB hackme
2012-02-07   Flyspray 0.9.9.6 - Cross-Site Request Forgery 35 WEB Vaibhav Gupta
2012-02-06   XRayCMS 1.1.1 - SQL Injection 36 WEB chap0
2012-02-06   Tube Ace (Adult PHP Tube Script) - SQL Injection 38 WEB Daniel Godoy
2012-02-06   BASE 1.4.5 - 'base_qry_main.php?t_view' SQL Injection 36 WEB a.kadir altan
2012-02-05   GAzie 5.20 - Cross-Site Request Forgery 36 WEB Giuseppe D'Inverno
2012-02-02   Achievo 1.4.3 - Multiple Web Vulnerabilities 38 WEB Vulnerability-Lab
2012-02-02   osCommerce 3.0.2 - Persistent Cross-Site Scripting 39 WEB Vulnerability-Lab
2012-02-02   Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities 43 WEB SecPod Research
2012-02-02   Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities 32 WEB SecPod Research
2012-01-13   MailEnable Webmail - Cross-Site Scripting 35 WEB Sajjad Pourali
2012-02-01   sit! support incident tracker 3.64 - Multiple Vulnerabilities 36 WEB High-Tech Bridge SA
2012-02-01   swDesk - Multiple Vulnerabilities 33 WEB Red Security TEAM
2012-01-31   Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection 35 WEB Cagri Tepebasili
2012-01-31   PragmaMX 1.2.10 - Persistent Cross-Site Scripting 32 WEB HauntIT
2012-01-31   Ez Album - Blind SQL Injection 37 WEB Red Security TEAM
2012-01-31   phpShowtime - Directory Traversal 39 WEB Red Security TEAM
2012-01-31   Snort Report 1.3.2 - SQL Injection 36 WEB a.kadir altan
2012-01-30   phux Download Manager - Blind SQL Injection 36 WEB Red Security TEAM
2012-01-30   Ajax Upload - Arbitrary File Upload 37 WEB Daniel Godoy
2012-01-30   Campaign Enterprise 11.0.421 - SQL Injection 37 WEB Craig Freyman
2012-01-30   4Images 1.7.6-9 - Cross-Site Request Forgery / PHP Code Injection 39 WEB Or4nG.M4N
2012-01-30   HostBill App 2.3 - Remote Code Injection 35 WEB Dr.DaShEr
2012-01-27   vBSEO 3.6.0 - 'proc_deutf()' Remote PHP Code Injection (Metasploit) 36 WEB EgiX
2012-01-26   Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections 36 WEB Cyber-Crystal
2012-01-26   phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting 37 WEB Cyber-Crystal
2012-01-26   VR GPub 4.0 - Cross-Site Request Forgery 40 WEB Cyber-Crystal
2012-01-25   WordPress Core 3.3.1 - Multiple Vulnerabilities 37 WEB Trustwave's SpiderLabs
2012-01-24   stoneware webnetwork6 - Multiple Vulnerabilities 37 WEB Jacob Holcomb
2012-01-23   SpamTitan Application 5.08x - SQL Injection 40 WEB Vulnerability-Lab
2012-01-23   WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload 43 WEB EgiX
2012-01-22   MiniCMS 1.0/2.0 - PHP Code Injection 36 WEB Or4nG.M4N
2012-01-22   WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload 35 WEB 6Scan
2012-01-21   ARYADAD - Multiple Vulnerabilities 31 WEB Red Security TEAM
2012-01-21   iSupport 1.x - Cross-Site Request Forgery / HTML Code Injection (Add Admin) 31 WEB Or4nG.M4N
2012-01-21   Nova CMS - Directory Traversal 37 WEB Red Security TEAM
2012-01-21   PHP iReport 1.0 - Remote Html Code Injection 37 WEB Or4nG.M4N
2012-01-20   WhatsApp - Remote Change Status 35 WEB emgent
2012-01-20   EasyPage - SQL Injection 36 WEB Red Security TEAM
2012-01-20   ICTimeAttendance - Authentication Bypass 35 WEB v3n0m
2012-01-19   appRain CMF 0.1.5 - 'Uploadify.php' Unrestricted Arbitrary File Upload 36 WEB EgiX
2012-01-19   WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting 37 WEB Gianluca Brindisi
2012-01-19   Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting 35 WEB MaXe
2012-01-18   DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection 35 WEB Easy Laster
2012-01-18   DZCP (deV!L_z Clanportal) Gamebase Addon - SQL Injection 34 WEB Easy Laster
2012-01-18   PHPBridges Blog System - 'members.php' SQL Injection 36 WEB 3spi0n
2012-01-18   pGB 2.12 - 'kommentar.php' SQL Injection 35 WEB 3spi0n
2012-01-17   Joomla! Component com_discussions - SQL Injection 34 WEB Red Security TEAM
2012-01-16   PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities 35 WEB Or4nG.M4N
2012-01-15   Cloupia End-to-end FlexPod Management - Directory Traversal 39 WEB Chris Rock
2012-01-14   phpMyAdmin 3.3.x/3.4.x - Local File Inclusion via XML External Entity Injection (Metasploit) 40 WEB Marco Batista
2012-01-13   Pragyan CMS 2.6.1 - Arbitrary File Upload 33 WEB Dr.KroOoZ
2012-01-13   Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities 32 WEB Vulnerability-Lab
2012-01-12   WordPress Plugin Count Per Day - Multiple Vulnerabilities 34 WEB 6Scan
2012-01-12   WordPress Plugin wp-autoyoutube - Blind SQL Injection 34 WEB longrifle0x
2012-01-12   Advanced Image Hosting Script - SQL Injection 35 WEB Robert Cooper
2012-01-10   WordPress Plugin Age Verification 0.4 - Open Redirect 37 WEB Gianluca Brindisi
2012-01-10   w-CMS 2.01 - Multiple Vulnerabilities 38 WEB th3.g4m3_0v3r
2012-01-10   Pragyan CMS 3.0 - Remote File Disclosure 35 WEB Or4nG.M4N
2012-01-10   RazorCMS 1.2 - Directory Traversal 35 WEB chap0
2012-01-09   Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure 36 WEB Todor Donev
2012-01-09   SAPID 1.2.3 Stable - Remote File Inclusion 33 WEB Opa Yong
2012-01-09   Clipbucket 2.6 - Multiple Vulnerabilities 30 WEB YaDoY666
2012-01-09   Paddelberg Topsite Script - Authentication Bypass 33 WEB Christian Inci
2012-01-08   phpMyDirectory.com 1.3.3 - SQL Injection 33 WEB Serseri
2012-01-08   MangosWeb - SQL Injection 36 WEB Hood3dRob1n
2012-01-06   WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities 31 WEB Gianluca Brindisi
2012-01-06   Apache Struts 2 < 2.3.1 - Multiple Vulnerabilities 34 WEB SEC Consult
2012-01-06   TinyWebGallery 1.8.3 - Remote Command Execution 38 WEB Expl0!Ts
2012-01-04   Posse Softball Director CMS - 'team.php' Blind SQL Injection 35 WEB Easy Laster
2012-01-04   Posse Softball Director CMS - SQL Injection 37 WEB H4ckCity Security Team
2012-01-04   Typo3 4.5 < 4.7 - Remote Code Execution / Local File Inclusion / Remote File Inclusion 35 WEB MaXe
2012-01-02   MyPHPDating 1.0 - SQL Injection 37 WEB ITTIHACK
2012-01-02   PHP-X-Links Script - SQL Injection 34 WEB H4ckCity Security Team
2012-01-02   WSN Links Script 2.3.4 - SQL Injection 33 WEB H4ckCity Security Team
2011-12-30   Akiva WebBoard 8.x - SQL Injection 32 WEB Alexander Fuchs
2011-12-30   Dede CMS - SQL Injection 34 WEB CWH & Nafsh
2011-12-29   Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting 34 WEB G13
2011-12-29   DIY-CMS blog mod - SQL Injection 37 WEB snup
2011-12-28   Joomla! Component Module Simple File Upload 1.3 - Remote Code Execution 37 WEB gmda
2011-12-26   Free Image Hosting Script - Arbitrary File Upload 37 WEB ySecurity
2011-12-26   WordPress Plugin Mailing List - Arbitrary File Download 35 WEB 6Scan
2011-12-25   OpenEMR 4 - Multiple Vulnerabilities 38 WEB Level
2011-12-23   Open Conference/Journal/Harvester Systems 2.3.x - Multiple Remote Code Execution Vulnerabilities 36 WEB mr_me
2011-12-22   Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection 32 WEB EgiX
2011-12-21   Plone and Zope - Remote Command Execution 35 WEB Nick Miles
2011-12-21   SpamTitan 5.08 - Multiple Vulnerabilities 36 WEB Vulnerability-Lab
2011-12-21   Barracuda Control Center 620 - Multiple Web Vulnerabilities 33 WEB Vulnerability-Lab
2011-12-21   Infoproject Business Hero - Multiple Vulnerabilities 35 WEB LiquidWorm
2011-12-19   Joomla! Component com_dshop - SQL Injection 35 WEB CoBRa_21
2011-12-19   DotA OpenStats 1.3.9 - SQL Injection 31 WEB HvM17
2011-12-19   appRain CMF 0.1.5 - Multiple Web Vulnerabilities 32 WEB Vulnerability-Lab
2011-12-16   mPDF 5.3 - File Disclosure 35 WEB ZadYree
2011-12-16   Capexweb 1.1 - SQL Injection 33 WEB D1rt3 Dud3
2011-12-16   Seotoaster - SQL Injection 35 WEB Stefan Schurtz
2011-12-14   PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (2) (Metasploit) 35 WEB Metasploit
2011-12-13   Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit) 37 WEB Metasploit
2011-12-11   Pixie 1.04 - Blog Post Cross-Site Request Forgery 36 WEB hackme
2011-12-11   Xoops 2.5.4 - Blind SQL Injection 34 WEB blkhtc0rp
2011-12-11   FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities 40 WEB Ahmed Elhady Mohamed
2011-12-11   WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection 35 WEB Saif
2011-12-10   Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities 42 WEB Ahmed Elhady Mohamed
2011-12-09   Docebo Lms 4.0.4 - 'Messages' Remote Code Execution 36 WEB mr_me
2011-12-09   SePortal 2.5 - SQL Injection (1) 33 WEB Don
2011-12-08   Joomla! Component com_qcontacts 1.0.6 - SQL Injection 34 WEB Don
2011-12-08   SantriaCMS - SQL Injection 38 WEB Troy
2011-12-07   SourceBans 1.4.8 - SQL Injection / Local File Inclusion Injection 37 WEB Havok
2011-12-07   SMF 2.0.1 - SQL Injection / Privilege Escalation 32 WEB The:Paradox
2011-12-07   Traq 2.3 - Authentication Bypass / Remote Code Execution 32 WEB EgiX
2011-12-07   phpBB MyPage Plugin - SQL Injection 39 WEB CrazyMouse
2011-12-07   PHP City Portal Script Software - SQL Injection 37 WEB Don
2011-12-07   Family Connections CMS 2.7.1 - 'less.php' Remote Command Execution (Metasploit) 34 WEB Metasploit
2011-12-06   Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection 33 WEB Don
2011-12-05   Meditate Web Content Editor 'username_input' - SQL Injection 37 WEB Stefan Schurtz
2011-12-04   Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution 35 WEB mr_me
2011-12-02   WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities 35 WEB d3v1l
2011-12-02   Joomla! Component com_jobprofile - SQL Injection 36 WEB kaMtiEz
2011-12-01   Muster Render Farm Management System - Arbitrary File Download 36 WEB Nick Freeman
2011-11-30   WikkaWiki 1.3.2 - Multiple Vulnerabilities 37 WEB EgiX
2011-11-28   JQuery-Real-Person plugin - Bypass Captcha 34 WEB Alberto_García_Illera
2011-11-28   Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities 36 WEB Thomas Cannon
2011-11-25   PHP video script - SQL Injection 34 WEB longrifle0x
2011-11-24   Zabbix 1.8.4 - 'popup.php' SQL Injection 37 WEB Marcio Almeida