Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-12-16   Seotoaster - SQL Injection 39 WEB Stefan Schurtz
2011-12-14   PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (2) (Metasploit) 38 WEB Metasploit
2011-12-13   Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit) 41 WEB Metasploit
2011-12-11   Pixie 1.04 - Blog Post Cross-Site Request Forgery 39 WEB hackme
2011-12-11   Xoops 2.5.4 - Blind SQL Injection 37 WEB blkhtc0rp
2011-12-11   FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities 48 WEB Ahmed Elhady Mohamed
2011-12-11   WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection 39 WEB Saif
2011-12-10   Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities 49 WEB Ahmed Elhady Mohamed
2011-12-09   Docebo Lms 4.0.4 - 'Messages' Remote Code Execution 41 WEB mr_me
2011-12-09   SePortal 2.5 - SQL Injection (1) 38 WEB Don
2011-12-08   Joomla! Component com_qcontacts 1.0.6 - SQL Injection 40 WEB Don
2011-12-08   SantriaCMS - SQL Injection 42 WEB Troy
2011-12-07   SourceBans 1.4.8 - SQL Injection / Local File Inclusion Injection 43 WEB Havok
2011-12-07   SMF 2.0.1 - SQL Injection / Privilege Escalation 37 WEB The:Paradox
2011-12-07   Traq 2.3 - Authentication Bypass / Remote Code Execution 36 WEB EgiX
2011-12-07   phpBB MyPage Plugin - SQL Injection 43 WEB CrazyMouse
2011-12-07   PHP City Portal Script Software - SQL Injection 41 WEB Don
2011-12-07   Family Connections CMS 2.7.1 - 'less.php' Remote Command Execution (Metasploit) 38 WEB Metasploit
2011-12-06   Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection 38 WEB Don
2011-12-05   Meditate Web Content Editor 'username_input' - SQL Injection 41 WEB Stefan Schurtz
2011-12-04   Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution 44 WEB mr_me
2011-12-02   WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities 42 WEB d3v1l
2011-12-02   Joomla! Component com_jobprofile - SQL Injection 41 WEB kaMtiEz
2011-12-01   Muster Render Farm Management System - Arbitrary File Download 43 WEB Nick Freeman
2011-11-30   WikkaWiki 1.3.2 - Multiple Vulnerabilities 44 WEB EgiX
2011-11-28   JQuery-Real-Person plugin - Bypass Captcha 39 WEB Alberto_García_Illera
2011-11-28   Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities 44 WEB Thomas Cannon
2011-11-25   PHP video script - SQL Injection 40 WEB longrifle0x
2011-11-24   Zabbix 1.8.4 - 'popup.php' SQL Injection 47 WEB Marcio Almeida
2011-11-24   LibLime Koha 4.2 - Local File Inclusion 42 WEB Akin Tosunlar
2011-11-24   Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution 39 WEB Adel SBM
2011-11-23   PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1) 45 WEB EgiX
2011-11-23   PHP-Nuke 8.1.0.3.5b - 'Downloads' Blind SQL Injection 40 WEB Dante90
2011-11-19   Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution 40 WEB EgiX
2011-11-19   ARASTAR - SQL Injection 38 WEB TH3_N3RD
2011-11-19   Blogs manager 1.101 - SQL Injection 41 WEB muuratsalo
2011-11-19   Valid tiny-erp 1.6 - SQL Injection 38 WEB muuratsalo
2011-11-19   Freelancer Calendar 1.01 - SQL Injection 36 WEB muuratsalo
2011-11-19   WordPress Plugin jetpack - 'sharedaddy.php' ID SQL Injection 38 WEB longrifle0x
2011-11-16   SonicWALL Aventail SSL-VPN - SQL Injection 39 WEB Asheesh kumar
2011-11-16   FreeWebShop 2.2.9 R2 - 'ajax_save_name.php' Remote Code Execution 39 WEB EgiX
2011-11-15   QuiXplorer 2.3 - Bugtraq Arbitrary File Upload 38 WEB PCA
2011-11-15   Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection 41 WEB Jose Carlos de Arriba
2011-11-14   Pixie CMS 1.01 < 1.04 - Blind SQL Injections 39 WEB Piranha
2011-11-14   WordPress Plugin AdRotate 3.6.6 - SQL Injection 39 WEB Miroslav Stampar
2011-11-13   WordPress Plugin Zingiri 2.2.3 - 'ajax_save_name.php' Remote Code Execution 39 WEB EgiX
2011-11-13   Mambo 4.x - 'Zorder' SQL Injection 40 WEB KraL BeNiM
2011-11-13   Support Incident Tracker 3.65 - Remote Command Execution (Metasploit) 41 WEB Metasploit
2011-11-09   COMTREND CT-5624 Router - Root/Support Password Disclosure/Change 38 WEB Todor Donev
2011-11-09   labwiki 1.1 - Multiple Vulnerabilities 37 WEB muuratsalo
2011-11-09   osCSS2 - '_ID' Local file Inclusion 42 WEB Stefan Schurtz
2011-11-08   11in1 CMS 1.0.1 - 'do.php' CRLF Injection 40 WEB LiquidWorm
2011-11-07   OrderSys 1.6.4 - SQL Injection 39 WEB muuratsalo
2011-11-07   LabStoRe 1.5.4 - SQL Injection 39 WEB muuratsalo
2011-11-07   WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities 37 WEB ZxH-Labs
2011-11-05   aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution 42 WEB EgiX
2011-11-05   PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution 39 WEB EgiX
2011-11-05   ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution 40 WEB EgiX
2011-11-04   WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure 43 WEB red virus
2011-11-04   HP Data Protector Media Operations 6.20 - Directory Traversal 39 WEB Luigi Auriemma
2011-11-04   Advanced Poll 2.02 - SQL Injection 38 WEB Yassin Aboukir
2011-11-04   Ajax File and Image Manager 1.0 Final - Remote Code Execution 38 WEB EgiX
2011-11-03   Web File Browser 0.4b14 - File Download 41 WEB Sangyun YOO
2011-11-03   Jara 1.6 - Multiple Vulnerabilities 39 WEB Or4nG.M4N
2011-11-02   CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion 42 WEB Rami Salama
2011-11-02   SetSeed CMS 5.8.20 - 'loggedInUser' SQL Injection 35 WEB LiquidWorm
2011-11-02   BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities 38 WEB CoBRa_21
2011-11-01   ZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple Vulnerabilities 38 WEB mehdi boukazoula
2011-10-31   Joomla! Component Alameda 1.0 - SQL Injection 35 WEB kaMtiEz
2011-10-31   jbShop e107 7 CMS Plugin - SQL Injection 37 WEB Robert Cooper
2011-10-31   WordPress Plugin Glossary - SQL Injection 40 WEB longrifle0x
2011-10-31   WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting 42 WEB Paul Loftness
2011-10-31   Joomla! Component HM Community - Multiple Vulnerabilities 37 WEB 599eme Man
2011-10-29   Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities 37 WEB Chris Russell
2011-10-29   Joomla! Component com_jeemasms 3.2 - Multiple Vulnerabilities 39 WEB Chris Russell
2011-10-29   Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities 41 WEB Chris Russell
2011-10-29   PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities 40 WEB BHG Security Center
2011-10-28   Joomla! Component Techfolio 1.0 - SQL Injection 44 WEB Chris Russell
2011-10-27   WordPress Plugin wptouch - SQL Injection 40 WEB longrifle0x
2011-10-26   phpScheduleIt 1.2.10 - 'reserve.php' Arbitrary Code Injection (Metasploit) 35 WEB Metasploit
2011-10-27   eFront 3.6.10 (build 11944) - Multiple Vulnerabilities 41 WEB EgiX
2011-10-26   Online Subtitles Workshop - Cross-Site Scripting 40 WEB M.Jock3R
2011-10-25   Joomla! Component com_yjcontactus - Local File Inclusion 36 WEB MeGo
2011-10-24   SAP Management Console - OSExecute Payload Execution (Metasploit) 35 WEB Metasploit
2011-10-25   phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2) 42 WEB Metasploit
2011-10-23   InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin) 41 WEB EjRaM HaCkEr
2011-10-23   phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1) 38 WEB EgiX
2011-10-23   Jara 1.6 - SQL Injection 37 WEB muuratsalo
2011-10-21   SportsPHool 1.0 - Remote File Inclusion 42 WEB cr4wl3r
2011-10-20   Cyclope Internet Filtering Proxy 4.0 - Persistent Cross-Site Scripting 37 WEB loneferret
2011-10-20   Metasploit Web UI 4.1.0 - Persistent Cross-Site Scripting 36 WEB Stefan Schurtz
2011-10-20   Pre Studio Business Cards Designer - SQL Injection 39 WEB dr_zig
2011-10-20   OCS Inventory NG 2.0.1 - Persistent Cross-Site Scripting 43 WEB Nicolas DEROUET
2011-10-20   Simple Free PHP Forum Script - SQL Injection 44 WEB Skraps
2011-10-20   fims File Management System 1.2.1a - Multiple Vulnerabilities 41 WEB Skraps
2011-10-20   Uiga Personal Portal - Multiple Vulnerabilities 38 WEB Eyup CELIK
2011-10-20   CMS mini 0.2.2 - Local File Inclusion 40 WEB BeopSeong/I2Sec
2011-10-19   1024 CMS 1.1.0 Beta - 'force_download.php' Local File Inclusion 40 WEB Sangyun YOO
2011-10-19   WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure 42 WEB Lagripe-Dz & Mca-Crb
2011-10-19   Openemr-4.1.0 - SQL Injection 40 WEB I2sec-dae jin Oh
2011-10-19   Yet Another CMS 1.0 - SQL Injection / Cross-Site Scripting 42 WEB Stefan Schurtz
2011-10-18   Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities 49 WEB jdc
2011-10-18   Dolphin 7.0.7 - 'member_menu_queries.php' Remote PHP Code Injection 39 WEB EgiX
2011-10-17   GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection 40 WEB flyh4t
2011-10-17   Dominant Creature BBG/RPG Browser Game - Persistent Cross-Site Scripting 42 WEB M.Jock3R
2011-10-17   WordPress Plugin BackWPUp 2.1.4 - Code Execution 42 WEB Sense of Security
2011-10-16   Ruubikcms 1.1.0 - '/extra/image.php' Local File Inclusion 45 WEB Sangyun YOO
2011-10-15   WordPress Plugin Photo Album Plus 4.1.1 - SQL Injection 43 WEB Skraps
2011-10-14   WordPress Plugin Contact Form 2.7.5 - SQL Injection 41 WEB Skraps
2011-10-12   WordPress Plugin GD Star Rating 1.9.10 - SQL Injection 41 WEB Miroslav Stampar
2011-10-12   MyBB MyStatus 3.1 - SQL Injection 45 WEB Mario_Vs
2011-10-11   WordPress Plugin WP-SpamFree Spam Plugin - SQL Injection 38 WEB cheki
2011-10-10   MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection 39 WEB Mario_Vs
2011-10-10   MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection 41 WEB Mario_Vs
2011-10-10   POSH - Multiple Vulnerabilities 38 WEB Crashfr
2011-10-10   cotonti CMS 0.9.4 - Multiple Vulnerabilities 36 WEB LiquidWorm
2011-10-10   Roundcube Webmail 0.3.1 - Cross-Site Request Forgery / SQL Injection 41 WEB Smith Falcon
2011-10-10   6kbbs - Multiple Vulnerabilities 42 WEB labs insight
2011-10-10   Filmis 0.2 Beta - Multiple Vulnerabilities 38 WEB M.Jock3R
2011-10-10   KaiBB 2.0.1 - SQL Injection 36 WEB Stefan Schurtz
2011-10-10   openEngine 2.0 - Multiple Blind SQL Injection Vulnerabilities 46 WEB Stefan Schurtz
2011-10-09   GotoCode Online Classifieds - Multiple Vulnerabilities 46 WEB Nathaniel Carew
2011-10-09   MyBB 1.6.4 - Backdoor Access (Metasploit) 39 WEB Metasploit
2011-10-09   Snortreport - '/nmap.php' / 'nbtscan.php' Remote Command Execution (Metasploit) 42 WEB Metasploit
2011-10-08   NexusPHP 1.5 - SQL Injection 46 WEB flyh4t