Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-09-19   WordPress Plugin Mailing List 1.3.2 - Remote File Inclusion 7 WEB Ben Schmidt
2011-09-19   WordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion 5 WEB Ben Schmidt
2011-09-19   WordPress Plugin Livesig 0.4 - Remote File Inclusion 6 WEB Ben Schmidt
2011-09-19   WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion 7 WEB Ben Schmidt
2011-09-19   WordPress Plugin WPEasyStats 1.8 - Remote File Inclusion 7 WEB Ben Schmidt
2011-09-19   WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion 7 WEB Ben Schmidt
2011-09-19   WordPress Plugin TheCartPress 1.1.1 - Remote File Inclusion 8 WEB Ben Schmidt
2011-09-19   Toko Lite CMS 1.5.2 - 'edit.php' HTTP Response Splitting 8 WEB LiquidWorm
2011-09-19   WordPress Plugin Filedownload 0.1 - 'download.php' Remote File Disclosure 8 WEB Septemb0x
2011-09-18   WordPress Plugin Count per Day 2.17 - SQL Injection 8 WEB Miroslav Stampar
2011-09-17   iManager Plugin 1.2.8 - 'd' Arbitrary File Deletion 8 WEB LiquidWorm
2011-09-17   iManager Plugin 1.2.8 - 'lang' Local File Inclusion 8 WEB LiquidWorm
2011-09-17   iBrowser Plugin 1.4.1 - 'lang' Local File Inclusion 8 WEB LiquidWorm
2011-09-15   Nortel Contact Recording Centralized Archive 6.5.1 - SQL Injection 9 WEB rgod
2011-09-14   Cogent DataHub 7.1.1.63 - Source Disclosure 8 WEB Luigi Auriemma
2011-09-14   WordPress Plugin E-Commerce 3.8.6 - SQL Injection 10 WEB Miroslav Stampar
2011-09-13   dotProject 2.1.5 - SQL Injection 8 WEB sherl0ck_
2011-09-13   WordPress Plugin Forum Server 1.7 - SQL Injection 8 WEB Miroslav Stampar
2011-09-12   AstroCMS - Multiple Vulnerabilities 8 WEB brain[pillow]
2011-09-12   Slaed CMS - Code Execution 8 WEB brain[pillow]
2011-09-12   NetCat CMS - Multiple Vulnerabilities 8 WEB brain[pillow]
2011-09-12   PHP Support Tickets 2.2 - Code Execution 8 WEB brain[pillow]
2011-09-12   TomatoCart 1.1 - (Authenticated) Local File Inclusion 9 WEB brain[pillow]
2011-09-10   WordPress Plugin Tune Library 2.17 - SQL Injection 9 WEB Miroslav Stampar
2011-09-09   WordPress Plugin Event Registration 5.44 - SQL Injection 9 WEB serk
2011-09-09   Xataface WebAuction and Xataface Librarian DB - Multiple Vulnerabilities 9 WEB SecPod Research
2011-09-09   MYRE Real Estate Software - Multiple Vulnerabilities 9 WEB SecPod Research
2011-09-09   WordPress Plugin A to Z Category Listing 1.3 - SQL Injection 9 WEB Miroslav Stampar
2011-09-09   WordPress Plugin WP-Filebase Download Manager 0.2.9 - SQL Injection 7 WEB Miroslav Stampar
2011-09-08   OpenCart 1.5.1.2 - Blind SQL Injection 8 WEB RiRes Walid
2011-09-08   WordPress Plugin 1 Flash Gallery 1.30 < 1.5.7a - Arbitrary File Upload (Metasploit) 10 WEB Ben Schmidt
2011-09-08   AM4SS 1.2 - Cross-Site Request Forgery (Add Admin) 8 WEB red virus
2011-09-08   WordPress Plugin Community Events 1.2.1 - SQL Injection 8 WEB Miroslav Stampar
2011-09-08   WordPress Plugin Paid Downloads 2.01 - SQL Injection 9 WEB Miroslav Stampar
2011-09-07   WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection 8 WEB Miroslav Stampar
2011-09-07   WordPress Plugin SCORM Cloud 1.0.6.6 - SQL Injection 7 WEB Miroslav Stampar
2011-09-06   PlaySms 0.9.5.2 - Remote File Inclusion 8 WEB NoGe
2011-09-06   WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection 7 WEB Miroslav Stampar
2011-09-06   WordPress Plugin post highlights 2.2 - SQL Injection 6 WEB Miroslav Stampar
2011-09-06   WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection 8 WEB sherl0ck_
2011-09-05   Webmobo WB News System - Blind SQL Injection 9 WEB Eyup CELIK
2011-09-05   Elite Gaming Ladders 3.6 - SQL Injection 8 WEB J.O
2011-09-05   WordPress Plugin oQey Gallery 0.4.8 - SQL Injection 11 WEB Miroslav Stampar
2011-09-04   WordPress Plugin Zotpress 4.4 - SQL Injection 8 WEB Miroslav Stampar
2011-09-03   openads-2.0.11 - Remote File Inclusion 8 WEB HaCkErS eV!L
2011-09-03   WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection 10 WEB Miroslav Stampar
2011-09-02   WordPress Plugin VideoWhisper Video Presentation 1.1 - SQL Injection 9 WEB Miroslav Stampar
2011-09-01   WordPress Plugin SearchAutocomplete 1.0.8 - SQL Injection 9 WEB Miroslav Stampar
2011-09-01   NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities 8 WEB Narendra Shinde
2011-09-01   WordPress Plugin Bannerize 2.8.6 - SQL Injection 7 WEB Miroslav Stampar
2011-09-01   WordPress Plugin Donation 1.0 - SQL Injection 8 WEB Miroslav Stampar
2011-08-31   WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities 8 WEB Hrvoje Spoljar
2011-08-31   WordPress Plugin grapefile 1.1 - Arbitrary File Upload 8 WEB Hrvoje Spoljar
2011-08-30   WordPress Plugin Couponer 1.2 - SQL Injection 8 WEB Miroslav Stampar
2011-08-30   WordPress Plugin PureHTML 1.0.0 - SQL Injection 7 WEB Miroslav Stampar
2011-08-30   WordPress Plugin yolink Search 1.1.4 - SQL Injection 8 WEB Miroslav Stampar
2011-08-30   WordPress Plugin Audio Gallery Playlist 0.12 - SQL Injection 8 WEB Miroslav Stampar
2011-08-30   WordPress Plugin Crawl Rate Tracker 2.0.2 - SQL Injection 10 WEB Miroslav Stampar
2011-08-30   FileBox File Hosting & Sharing Script 1.5 - SQL Injection 8 WEB SubhashDasyam
2011-08-30   vAuthenticate 3.0.1 - Authentication Bypass 8 WEB bd0rk
2011-08-30   WordPress Plugin Event Registration 5.4.3 - SQL Injection 6 WEB Miroslav Stampar
2011-08-30   WordPress Plugin Advertizer 1.0 - SQL Injection 5 WEB Miroslav Stampar
2011-08-29   WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection 8 WEB Miroslav Stampar
2011-08-29   WordPress Plugin SH Slideshow 3.1.4 - SQL Injection 8 WEB Miroslav Stampar
2011-08-28   LifeSize Room - Command Injection (Metasploit) 9 WEB Spencer McIntyre
2011-08-28   Omnistar Mailer - Multiple Vulnerabilities 8 WEB Sid3^effects
2011-08-28   WordPress Plugin mySTAT 2.6 - SQL Injection 7 WEB Miroslav Stampar
2011-08-28   WordPress Plugin Profiles 2.0 RC1 - SQL Injection 7 WEB Miroslav Stampar
2011-08-28   WordPress Plugin Evarisk 5.1.3.6 - SQL Injection 7 WEB Miroslav Stampar
2011-08-28   WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection 7 WEB Miroslav Stampar
2011-08-28   Joomla! Component mod_simpleFileLister 1.0 - Directory Traversal 9 WEB evilsocket
2011-08-28   Joomla! Component joomlacontenteditor 2.0.10 - Multiple Vulnerabilities 9 WEB AmnPardaz
2011-08-28   Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities 9 WEB AmnPardaz
2011-08-27   WordPress Plugin Photoracer 1.0 - Multiple Vulnerabilities 9 WEB Yakir Wizman
2011-08-27   WordPress Plugin oQey Headers 0.3 - SQL Injection 9 WEB Miroslav Stampar
2011-08-27   WordPress Plugin Collision Testimonials 3.0 - SQL Injection 8 WEB Miroslav Stampar
2011-08-27   WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection 9 WEB Miroslav Stampar
2011-08-27   WordPress Plugin MM Forms Community 1.2.3 - SQL Injection 9 WEB Miroslav Stampar
2011-08-27   WordPress Plugin Js-appointment 1.5 - SQL Injection 8 WEB Miroslav Stampar
2011-08-26   Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit) 8 WEB Aung Khant
2011-08-26   WordPress Plugin Photoracer 1.0 - SQL Injection 8 WEB evilsocket
2011-08-25   WordPress Plugin SendIt 1.5.9 - Blind SQL Injection 9 WEB evilsocket
2011-08-24   Help Desk Software 1.1g - Cross-Site Request Forgery (Add Admin) 9 WEB G13
2011-08-23   ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities 8 WEB LiquidWorm
2011-08-22   Redlab CMS - Multiple SQL Injections 8 WEB tempe_mendoan
2011-08-22   DV Cart Shopping Cart software - SQL Injection 8 WEB Eyup CELIK
2011-08-22   Bonza Digital Cart Script - SQL Injection 7 WEB Eyup CELIK
2011-08-22   Web Solutions Wcs2u - SQL Injection 8 WEB tempe_mendoan
2011-08-22   WordPress Plugin MM Duplicate 1.2 - SQL Injection 8 WEB Miroslav Stampar
2011-08-21   OneFileCMS 1.1.1 - Multiple Vulnerabilities 8 WEB mr.pr0n
2011-08-21   EasySiteEdit - Remote File Inclusion 8 WEB koskesh jakesh
2011-08-20   WordPress Plugin UnGallery 1.5.8 - Local File Disclosure 8 WEB Miroslav Stampar
2011-08-20   Axis Commerce (E-Commerce System) - Persistent Cross-Site Scripting 8 WEB Eyup CELIK
2011-08-20   WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass 8 WEB Tiago Ferreira & Heyder Andrade
2011-08-19   Oracle Secure Backup - Authentication Bypass/Command Injection (Metasploit) 9 WEB Metasploit
2011-08-19   PHPMyRealty 1.0.7 - SQL Injection 8 WEB H4T$A
2011-08-19   network tracker .95 - Persistent Cross-Site Scripting 8 WEB G13
2011-08-18   WordPress Plugin Menu Creator 1.1.7 - SQL Injection 8 WEB Miroslav Stampar
2011-08-18   WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection 8 WEB Miroslav Stampar
2011-08-18   WordPress Plugin Global Content Blocks 1.2 - SQL Injection 6 WEB Miroslav Stampar
2011-08-18   WordPress Plugin Ajax Gallery 3.0 - SQL Injection 6 WEB Miroslav Stampar
2011-08-18   Elgg 1.7.10 - Multiple Vulnerabilities 7 WEB Aung Khant
2011-08-18   WordPress Plugin Forum 1.7.8 - SQL Injection 6 WEB Miroslav Stampar
2011-08-18   WordPress Plugin DS FAQ 1.3.2 - SQL Injection 7 WEB Miroslav Stampar
2011-08-17   Contrexx ShopSystem 2.2 SP3 - 'catId' Blind SQL Injection 7 WEB Penguin
2011-08-17   WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection 7 WEB Miroslav Stampar
2011-08-17   WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection 7 WEB Miroslav Stampar
2011-08-17   WordPress Plugin Symposium 0.64 - SQL Injection 8 WEB Miroslav Stampar
2011-08-17   WordPress Plugin Contus HD FLV Player 1.3 - SQL Injection 8 WEB Miroslav Stampar
2011-08-17   WordPress Plugin File Groups 1.1.2 - SQL Injection 8 WEB Miroslav Stampar
2011-08-17   SoftwareDEP Classified Script 2.5 - SQL Injection (1) 8 WEB v3n0m
2011-08-17   Joomla! Component JoomTouch 1.0.2 - Local File Inclusion 8 WEB NoGe
2011-08-16   WordPress Plugin IP-Logger 3.0 - SQL Injection 8 WEB Miroslav Stampar
2011-08-14   Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection 8 WEB Penguin
2011-08-14   Prediction Football 2.51 - Cross-Site Request Forgery 10 WEB Smith Falcon
2011-08-13   Mambo 4.6.x < 4.6.5 - SQL Injection 8 WEB Aung Khant
2011-08-13   Kahf Poems 1.0 - Multiple Vulnerabilities 8 WEB Yassin Aboukir
2011-08-13   VideoDB 3.1.0 - SQL Injection 9 WEB seceurityoverun
2011-08-11   Adobe RoboHelp 9 - DOM Cross-Site Scripting 9 WEB Roberto Suggi Liverani
2011-08-09   Joomla! Component Search 3.0.0 - SQL Injection 9 WEB NoGe
2011-08-09   FCKEditor Core - 'FileManager test.html' Arbitrary File Upload (2) 20 WEB pentesters.ir
2011-08-09   BlogPHP 2.0 - Persistent Cross-Site Scripting 7 WEB Paulzz
2011-08-08   XpressEngine 1.4.5.7 - Persistent Cross-Site Scripting 8 WEB v0nSch3lling
2011-08-07   Simple Machines Forum (SMF) 2.0 - Session Hijacking 9 WEB seth
2011-08-06   Cart Software - Multiple Vulnerabilities 10 WEB hosinn