Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-01-13   Pragyan CMS 2.6.1 - Arbitrary File Upload 22 WEB Dr.KroOoZ
2012-01-13   Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities 22 WEB Vulnerability-Lab
2012-01-12   WordPress Plugin Count Per Day - Multiple Vulnerabilities 23 WEB 6Scan
2012-01-12   WordPress Plugin wp-autoyoutube - Blind SQL Injection 24 WEB longrifle0x
2012-01-12   Advanced Image Hosting Script - SQL Injection 23 WEB Robert Cooper
2012-01-10   WordPress Plugin Age Verification 0.4 - Open Redirect 27 WEB Gianluca Brindisi
2012-01-10   w-CMS 2.01 - Multiple Vulnerabilities 28 WEB th3.g4m3_0v3r
2012-01-10   Pragyan CMS 3.0 - Remote File Disclosure 24 WEB Or4nG.M4N
2012-01-10   RazorCMS 1.2 - Directory Traversal 22 WEB chap0
2012-01-09   Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure 26 WEB Todor Donev
2012-01-09   SAPID 1.2.3 Stable - Remote File Inclusion 23 WEB Opa Yong
2012-01-09   Clipbucket 2.6 - Multiple Vulnerabilities 21 WEB YaDoY666
2012-01-09   Paddelberg Topsite Script - Authentication Bypass 23 WEB Christian Inci
2012-01-08   phpMyDirectory.com 1.3.3 - SQL Injection 22 WEB Serseri
2012-01-08   MangosWeb - SQL Injection 23 WEB Hood3dRob1n
2012-01-06   WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities 21 WEB Gianluca Brindisi
2012-01-06   Apache Struts 2 < 2.3.1 - Multiple Vulnerabilities 22 WEB SEC Consult
2012-01-06   TinyWebGallery 1.8.3 - Remote Command Execution 26 WEB Expl0!Ts
2012-01-04   Posse Softball Director CMS - 'team.php' Blind SQL Injection 24 WEB Easy Laster
2012-01-04   Posse Softball Director CMS - SQL Injection 28 WEB H4ckCity Security Team
2012-01-04   Typo3 4.5 < 4.7 - Remote Code Execution / Local File Inclusion / Remote File Inclusion 23 WEB MaXe
2012-01-02   MyPHPDating 1.0 - SQL Injection 26 WEB ITTIHACK
2012-01-02   PHP-X-Links Script - SQL Injection 23 WEB H4ckCity Security Team
2012-01-02   WSN Links Script 2.3.4 - SQL Injection 25 WEB H4ckCity Security Team
2011-12-30   Akiva WebBoard 8.x - SQL Injection 24 WEB Alexander Fuchs
2011-12-30   Dede CMS - SQL Injection 23 WEB CWH & Nafsh
2011-12-29   Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting 24 WEB G13
2011-12-29   DIY-CMS blog mod - SQL Injection 25 WEB snup
2011-12-28   Joomla! Component Module Simple File Upload 1.3 - Remote Code Execution 22 WEB gmda
2011-12-26   Free Image Hosting Script - Arbitrary File Upload 23 WEB ySecurity
2011-12-26   WordPress Plugin Mailing List - Arbitrary File Download 24 WEB 6Scan
2011-12-25   OpenEMR 4 - Multiple Vulnerabilities 26 WEB Level
2011-12-23   Open Conference/Journal/Harvester Systems 2.3.x - Multiple Remote Code Execution Vulnerabilities 26 WEB mr_me
2011-12-22   Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection 21 WEB EgiX
2011-12-21   Plone and Zope - Remote Command Execution 25 WEB Nick Miles
2011-12-21   SpamTitan 5.08 - Multiple Vulnerabilities 24 WEB Vulnerability-Lab
2011-12-21   Barracuda Control Center 620 - Multiple Web Vulnerabilities 24 WEB Vulnerability-Lab
2011-12-21   Infoproject Business Hero - Multiple Vulnerabilities 22 WEB LiquidWorm
2011-12-19   Joomla! Component com_dshop - SQL Injection 23 WEB CoBRa_21
2011-12-19   DotA OpenStats 1.3.9 - SQL Injection 22 WEB HvM17
2011-12-19   appRain CMF 0.1.5 - Multiple Web Vulnerabilities 22 WEB Vulnerability-Lab
2011-12-16   mPDF 5.3 - File Disclosure 26 WEB ZadYree
2011-12-16   Capexweb 1.1 - SQL Injection 22 WEB D1rt3 Dud3
2011-12-16   Seotoaster - SQL Injection 22 WEB Stefan Schurtz
2011-12-14   PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (2) (Metasploit) 24 WEB Metasploit
2011-12-13   Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit) 27 WEB Metasploit
2011-12-11   Pixie 1.04 - Blog Post Cross-Site Request Forgery 21 WEB hackme
2011-12-11   Xoops 2.5.4 - Blind SQL Injection 23 WEB blkhtc0rp
2011-12-11   FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities 29 WEB Ahmed Elhady Mohamed
2011-12-11   WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection 24 WEB Saif
2011-12-10   Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities 30 WEB Ahmed Elhady Mohamed
2011-12-09   Docebo Lms 4.0.4 - 'Messages' Remote Code Execution 25 WEB mr_me
2011-12-09   SePortal 2.5 - SQL Injection (1) 23 WEB Don
2011-12-08   Joomla! Component com_qcontacts 1.0.6 - SQL Injection 24 WEB Don
2011-12-08   SantriaCMS - SQL Injection 26 WEB Troy
2011-12-07   SourceBans 1.4.8 - SQL Injection / Local File Inclusion Injection 24 WEB Havok
2011-12-07   SMF 2.0.1 - SQL Injection / Privilege Escalation 21 WEB The:Paradox
2011-12-07   Traq 2.3 - Authentication Bypass / Remote Code Execution 22 WEB EgiX
2011-12-07   phpBB MyPage Plugin - SQL Injection 28 WEB CrazyMouse
2011-12-07   PHP City Portal Script Software - SQL Injection 28 WEB Don
2011-12-07   Family Connections CMS 2.7.1 - 'less.php' Remote Command Execution (Metasploit) 25 WEB Metasploit
2011-12-06   Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection 24 WEB Don
2011-12-05   Meditate Web Content Editor 'username_input' - SQL Injection 27 WEB Stefan Schurtz
2011-12-04   Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution 26 WEB mr_me
2011-12-02   WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities 24 WEB d3v1l
2011-12-02   Joomla! Component com_jobprofile - SQL Injection 25 WEB kaMtiEz
2011-12-01   Muster Render Farm Management System - Arbitrary File Download 23 WEB Nick Freeman
2011-11-30   WikkaWiki 1.3.2 - Multiple Vulnerabilities 25 WEB EgiX
2011-11-28   JQuery-Real-Person plugin - Bypass Captcha 23 WEB Alberto_García_Illera
2011-11-28   Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities 23 WEB Thomas Cannon
2011-11-25   PHP video script - SQL Injection 23 WEB longrifle0x
2011-11-24   Zabbix 1.8.4 - 'popup.php' SQL Injection 28 WEB Marcio Almeida
2011-11-24   LibLime Koha 4.2 - Local File Inclusion 24 WEB Akin Tosunlar
2011-11-24   Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution 22 WEB Adel SBM
2011-11-23   PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1) 25 WEB EgiX
2011-11-23   PHP-Nuke 8.1.0.3.5b - 'Downloads' Blind SQL Injection 23 WEB Dante90
2011-11-19   Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution 25 WEB EgiX
2011-11-19   ARASTAR - SQL Injection 24 WEB TH3_N3RD
2011-11-19   Blogs manager 1.101 - SQL Injection 26 WEB muuratsalo
2011-11-19   Valid tiny-erp 1.6 - SQL Injection 23 WEB muuratsalo
2011-11-19   Freelancer Calendar 1.01 - SQL Injection 22 WEB muuratsalo
2011-11-19   WordPress Plugin jetpack - 'sharedaddy.php' ID SQL Injection 21 WEB longrifle0x
2011-11-16   SonicWALL Aventail SSL-VPN - SQL Injection 24 WEB Asheesh kumar
2011-11-16   FreeWebShop 2.2.9 R2 - 'ajax_save_name.php' Remote Code Execution 24 WEB EgiX
2011-11-15   QuiXplorer 2.3 - Bugtraq Arbitrary File Upload 25 WEB PCA
2011-11-15   Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection 25 WEB Jose Carlos de Arriba
2011-11-14   Pixie CMS 1.01 < 1.04 - Blind SQL Injections 21 WEB Piranha
2011-11-14   WordPress Plugin AdRotate 3.6.6 - SQL Injection 24 WEB Miroslav Stampar
2011-11-13   WordPress Plugin Zingiri 2.2.3 - 'ajax_save_name.php' Remote Code Execution 22 WEB EgiX
2011-11-13   Mambo 4.x - 'Zorder' SQL Injection 24 WEB KraL BeNiM
2011-11-13   Support Incident Tracker 3.65 - Remote Command Execution (Metasploit) 23 WEB Metasploit
2011-11-09   COMTREND CT-5624 Router - Root/Support Password Disclosure/Change 21 WEB Todor Donev
2011-11-09   labwiki 1.1 - Multiple Vulnerabilities 21 WEB muuratsalo
2011-11-09   osCSS2 - '_ID' Local file Inclusion 27 WEB Stefan Schurtz
2011-11-08   11in1 CMS 1.0.1 - 'do.php' CRLF Injection 25 WEB LiquidWorm
2011-11-07   OrderSys 1.6.4 - SQL Injection 24 WEB muuratsalo
2011-11-07   LabStoRe 1.5.4 - SQL Injection 25 WEB muuratsalo
2011-11-07   WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities 22 WEB ZxH-Labs
2011-11-05   aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution 25 WEB EgiX
2011-11-05   PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution 26 WEB EgiX
2011-11-05   ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution 24 WEB EgiX
2011-11-04   WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure 29 WEB red virus
2011-11-04   HP Data Protector Media Operations 6.20 - Directory Traversal 22 WEB Luigi Auriemma
2011-11-04   Advanced Poll 2.02 - SQL Injection 24 WEB Yassin Aboukir
2011-11-04   Ajax File and Image Manager 1.0 Final - Remote Code Execution 22 WEB EgiX
2011-11-03   Web File Browser 0.4b14 - File Download 26 WEB Sangyun YOO
2011-11-03   Jara 1.6 - Multiple Vulnerabilities 24 WEB Or4nG.M4N
2011-11-02   CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion 24 WEB Rami Salama
2011-11-02   SetSeed CMS 5.8.20 - 'loggedInUser' SQL Injection 23 WEB LiquidWorm
2011-11-02   BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities 23 WEB CoBRa_21
2011-11-01   ZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple Vulnerabilities 20 WEB mehdi boukazoula
2011-10-31   Joomla! Component Alameda 1.0 - SQL Injection 22 WEB kaMtiEz
2011-10-31   jbShop e107 7 CMS Plugin - SQL Injection 23 WEB Robert Cooper
2011-10-31   WordPress Plugin Glossary - SQL Injection 26 WEB longrifle0x
2011-10-31   WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting 25 WEB Paul Loftness
2011-10-31   Joomla! Component HM Community - Multiple Vulnerabilities 21 WEB 599eme Man
2011-10-29   Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities 23 WEB Chris Russell
2011-10-29   Joomla! Component com_jeemasms 3.2 - Multiple Vulnerabilities 24 WEB Chris Russell
2011-10-29   Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities 21 WEB Chris Russell
2011-10-29   PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities 21 WEB BHG Security Center
2011-10-28   Joomla! Component Techfolio 1.0 - SQL Injection 26 WEB Chris Russell
2011-10-27   WordPress Plugin wptouch - SQL Injection 24 WEB longrifle0x
2011-10-26   phpScheduleIt 1.2.10 - 'reserve.php' Arbitrary Code Injection (Metasploit) 20 WEB Metasploit
2011-10-27   eFront 3.6.10 (build 11944) - Multiple Vulnerabilities 25 WEB EgiX
2011-10-26   Online Subtitles Workshop - Cross-Site Scripting 21 WEB M.Jock3R