|
2011-03-06
|
|
N-13 News 4.0 - Cross-Site Request Forgery (Add Admin)
|
21 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2010-10-09
|
|
ContentKeeper Web - Remote Command Execution (Metasploit)
|
20 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
Dogfood CRM - 'spell.php' Remote Command Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
The Matt Wright Guestbook.pl - Arbitrary Command Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
phpMyAdmin - Config File Code Injection (Metasploit)
|
26 |
WEB
|
Metasploit
|
|
2010-11-24
|
|
Mambo - Cache_Lite Class MosConfig_absolute_path Remote File Inclusion (Metasploit)
|
21 |
WEB
|
Metasploit
|
|
2010-09-20
|
|
TikiWiki tiki-graph_formula - PHP Remote Code Execution (Metasploit)
|
23 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
Coppermine Photo Gallery 1.4.14 - 'picEditor.php' Command Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-07-14
|
|
Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-07-01
|
|
Google Appliance ProxyStyleSheet - Command Execution (Metasploit)
|
23 |
WEB
|
Metasploit
|
|
2010-06-15
|
|
Joomla! Plugin tinybrowser 1.5.12 - Arbitrary File Upload / Code Execution (Metasploit)
|
23 |
WEB
|
Metasploit
|
|
2009-12-26
|
|
AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)
|
29 |
WEB
|
Metasploit
|
|
2011-01-08
|
|
Fonality trixbox CE 2.6.1 - 'langChoice' Local File Inclusion (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2011-01-14
|
|
CakePHP 1.3.5/1.2.8 - Cache Corruption (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-04-30
|
|
PAJAX - Remote Command Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
osCommerce 2.2 - Arbitrary PHP Code Execution (Metasploit)
|
20 |
WEB
|
Metasploit
|
|
2010-11-24
|
|
BASE - 'base_qry_common' Remote File Inclusion (Metasploit)
|
21 |
WEB
|
Metasploit
|
|
2010-07-25
|
|
vBulletin - 'misc.php' Template Name Arbitrary Code Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
WordPress Core 1.5.1.3 - 'cache_lastpostdate' Arbitrary Code Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
TWiki - Search Function Arbitrary Command Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-04-30
|
|
Barracuda - IMG.pl Remote Command Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
TWiki History TWikiUsers - 'rev' Command Execution (Metasploit)
|
23 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2011-01-08
|
|
Redmine SCM Repository 0.9.x/1.0.x - Arbitrary Command Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2010-07-25
|
|
TikiWiki jhot - Remote Command Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-07-25
|
|
Simple PHP Blog 0.4.0 - Remote Command Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-25
|
|
XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-03
|
|
Cacti - 'graph_view.php' Remote Command Execution (Metasploit)
|
25 |
WEB
|
Metasploit
|
|
2010-10-18
|
|
RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)
|
23 |
WEB
|
Metasploit
|
|
2010-10-05
|
|
Alcatel-Lucent OmniPCX Enterprise - masterCGI Arbitrary Command Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-07-07
|
|
DD-WRT HTTPd Daemon/Service - Arbitrary Command Execution (Metasploit)
|
27 |
WEB
|
Metasploit
|
|
2010-11-24
|
|
ColdFusion 8.0.1 - Arbitrary File Upload / Execution (Metasploit)
|
24 |
WEB
|
Metasploit
|
|
2010-11-24
|
|
FreeNAS - 'exec_raw.php' Arbitrary Command Execution (Metasploit)
|
22 |
WEB
|
Metasploit
|
|
2011-03-05
|
|
BoutikOne - 'description.php' SQL Injection
|
30 |
WEB
|
IRAQ_JAGUAR
|
|
2011-03-05
|
|
vTiger CRM 5.0.4 - Local File Inclusion
|
22 |
WEB
|
TecR0c
|
|
2011-03-05
|
|
MySms 1.0 - Multiple Vulnerabilities
|
23 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-03-04
|
|
ADAN Neuronlabs - 'view.php' SQL Injection
|
24 |
WEB
|
IRAQ_JAGUAR
|
|
2011-03-04
|
|
JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution
|
22 |
WEB
|
kingcope
|
|
2011-03-04
|
|
WordPress Plugin PHP Speedy 0.5.2 - 'admin_container.php' Remote Code Execution
|
23 |
WEB
|
mr_me
|
|
2011-03-04
|
|
Limelight Software - 'article.php' SQL Injection
|
23 |
WEB
|
eXeSoul
|
|
2011-03-02
|
|
cChatBox for vBulletin 3.6.8/3.7.x - SQL Injection
|
26 |
WEB
|
DSecurity
|
|
2011-03-02
|
|
Bitweaver 2.8.0 - Multiple Vulnerabilities
|
26 |
WEB
|
lemlajt
|
|
2011-03-02
|
|
Quicktech - SQL Injection
|
27 |
WEB
|
eXeSoul
|
|
2011-03-02
|
|
Readmore Systems Script - SQL Injection
|
30 |
WEB
|
vBzone & Zooka & El3arby
|
|
2011-02-28
|
|
SnapProof - 'page.php' SQL Injection
|
23 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-02-28
|
|
DO-CMS - Multiple SQL Injections
|
26 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-02-26
|
|
Cisco Linksys WAG120N - Cross-Site Request Forgery
|
25 |
WEB
|
Khashayar Fereidani
|
|
2011-02-26
|
|
WordPress Plugin OPS Old Post Spinner 2.2.1 - Local File Inclusion
|
23 |
WEB
|
AutoSec Tools
|
|
2011-02-26
|
|
WordPress Plugin jQuery Mega Menu 1.0 - Local File Inclusion
|
24 |
WEB
|
AutoSec Tools
|
|
2011-02-26
|
|
phreebooks r30rc4 - Multiple Vulnerabilities
|
24 |
WEB
|
AutoSec Tools
|
|
2011-02-25
|
|
Pragyan CMS 3.0 - Multiple Vulnerabilities
|
24 |
WEB
|
Villy & Abhishek Lyall
|
|
2011-02-25
|
|
Joomla! Component com_xcloner-backupandrestore - Remote Command Execution
|
24 |
WEB
|
mr_me
|
|
2011-02-25
|
|
RaksoCT - Multiple SQL Injections
|
23 |
WEB
|
p0pc0rn
|
|
2011-02-24
|
|
WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities
|
23 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-24
|
|
WordPress Plugin Forum Server 1.6.5 - SQL Injection
|
23 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-24
|
|
WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting
|
26 |
WEB
|
Saif El-Sherei
|
|
2011-02-24
|
|
WordPress Plugin GigPress 2.1.10 - Persistent Cross-Site Scripting
|
27 |
WEB
|
Saif El-Sherei
|
|
2011-02-24
|
|
Alcassoft's SOPHIA CMS - SQL Injection
|
26 |
WEB
|
p0pc0rn
|
|
2011-02-23
|
|
VidiScript - SQL Injection
|
26 |
WEB
|
ThEtA.Nu
|
|
2011-02-23
|
|
course registration management system 2.1 - Multiple Vulnerabilities
|
26 |
WEB
|
AutoSec Tools
|
|
2011-02-23
|
|
WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities
|
27 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-23
|
|
ProQuiz 2.0.0b - Arbitrary File Upload
|
22 |
WEB
|
AutoSec Tools
|
|
2011-02-23
|
|
WordPress Plugin Z-Vote 1.1 - SQL Injection
|
23 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-23
|
|
Bitweaver 2.8.1 - Persistent Cross-Site Scripting
|
23 |
WEB
|
lemlajt
|
|
2011-02-23
|
|
tplSoccerStats - 'player.php' SQL Injection
|
24 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-02-23
|
|
Hyena Cart - 'index.php' SQL Injection
|
22 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-02-22
|
|
dotProject 2.1.5 - Multiple Vulnerabilities
|
25 |
WEB
|
lemlajt
|
|
2011-02-22
|
|
Galilery 1.0 - Local File Inclusion
|
26 |
WEB
|
lemlajt
|
|
2011-02-22
|
|
DIY Web CMS - Multiple Vulnerabilities
|
24 |
WEB
|
p0pc0rn
|
|
2011-02-21
|
|
Woltlab Burning Board 2.3.6 Addon - 'hilfsmittel.php' SQL Injection
|
23 |
WEB
|
Crazyball
|
|
2011-02-20
|
|
JAKCMS 2.01 RC1 - Blind SQL Injection
|
22 |
WEB
|
mr_me
|
|
2011-02-20
|
|
JAKCMS 2.01 - Code Execution
|
24 |
WEB
|
mr_me
|
|
2011-02-20
|
|
Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting
|
25 |
WEB
|
Saif El-Sherei
|
|
2011-02-19
|
|
Independent Escort CMS - Blind SQL Injection
|
24 |
WEB
|
NoNameMT
|
|
2011-02-19
|
|
Escort Directory CMS - SQL Injection
|
26 |
WEB
|
NoNameMT
|
|
2011-02-19
|
|
eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting
|
24 |
WEB
|
Saif El-Sherei
|
|
2011-02-17
|
|
GAzie 5.10 - 'Login' Multiple Vulnerabilities
|
25 |
WEB
|
LiquidWorm
|
|
2011-02-17
|
|
WordPress Plugin User Photo Component - Arbitrary File Upload
|
28 |
WEB
|
ADVtools
|
|
2011-02-16
|
|
Rae Media Real Estate Multi Agent - SQL Injection
|
23 |
WEB
|
R4dc0re
|
|
2011-02-16
|
|
Rae Media Real Estate Single Agent - SQL Injection
|
26 |
WEB
|
R4dc0re
|
|
2011-02-15
|
|
Seo Panel 2.2.0 - SQL Injection
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-15
|
|
omegabill 1.0 build 6 - Multiple Vulnerabilities
|
25 |
WEB
|
AutoSec Tools
|
|
2011-02-15
|
|
Lingxia I.C.E CMS - Blind SQL Injection
|
26 |
WEB
|
mr_me
|
|
2011-02-15
|
|
phpMyBitTorrent 2.0.4 - SQL Injection
|
23 |
WEB
|
#forkbombers
|
|
2011-02-14
|
|
RunCMS 2.2.2 - Multiple Vulnerabilities
|
27 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-14
|
|
jSchool Advanced - SQL Injection
|
23 |
WEB
|
eXa.DisC
|
|
2011-02-14
|
|
AWCM 2.2 Final - Persistent Cross-Site Scripting
|
27 |
WEB
|
_84kur10_
|
|
2011-02-12
|
|
PixelPost 1.7.3 - Multiple POST SQL Injections
|
25 |
WEB
|
LiquidWorm
|
|
2011-02-12
|
|
Escort Agency CMS - Blind SQL Injection
|
25 |
WEB
|
NoNameMT
|
|
2011-02-12
|
|
TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities
|
32 |
WEB
|
LiquidWorm
|
|
2011-02-11
|
|
Openedit 5.1294 - Remote Code Execution
|
24 |
WEB
|
mr_me
|
|
2011-02-11
|
|
Kunena < 1.5.13 / < 1.6.3 - SQL Injection
|
22 |
WEB
|
Red Matter
|
|
2011-02-11
|
|
Geomi CMS 1.2/3.0 - SQL Injection
|
25 |
WEB
|
ThunDEr HeaD
|
|
2011-02-11
|
|
Horde - Horde_Image::factory driver Argument Local File Inclusion
|
24 |
WEB
|
skysbsb
|
|
2011-02-10
|
|
LocatePC 1.05 (Ligatt Version + Others) - SQL Injection
|
22 |
WEB
|
anonymous
|
|
2011-02-09
|
|
SourceBans 1.4.7 - Cross-Site Scripting
|
27 |
WEB
|
Sw1tCh
|
|
2011-02-09
|
|
WordPress Plugin Enable Media Replace - Multiple Vulnerabilities
|
28 |
WEB
|
Ulf Harnhammar
|
|
2011-02-09
|
|
MihanTools Script 1.3.3 - SQL Injection
|
27 |
WEB
|
WHITE_DEVIL
|
|
2011-02-09
|
|
Web 2.0 Social Network Freunde Community - SQL Injection
|
21 |
WEB
|
NoNameMT
|
|
2011-02-09
|
|
Auto Database System 1.0 Infusion Addon - SQL Injection
|
24 |
WEB
|
Saif
|
|
2011-02-08
|
|
AIOCP 1.4.001 - Cross-Site Request Forgery
|
26 |
WEB
|
AutoSec Tools
|
|
2011-02-08
|
|
dotProject 2.1.5 - Cross-Site Request Forgery
|
25 |
WEB
|
AutoSec Tools
|
|
2011-02-08
|
|
Model Agentur Script - SQL Injection
|
26 |
WEB
|
NoNameMT
|
|
2011-02-07
|
|
SWFupload 2.5.0 Beta 3 - Arbitrary File Upload
|
28 |
WEB
|
Daniel Godoy
|
|
2011-02-07
|
|
MyMarket 1.71 - 'index.php' SQL Injection
|
26 |
WEB
|
ahmadso
|
|
2011-02-07
|
|
jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection
|
29 |
WEB
|
Saif El-Sherei
|
|
2011-02-07
|
|
T-Content Managment System - Multiple Vulnerabilities
|
24 |
WEB
|
Daniel Godoy
|
|
2011-02-06
|
|
Dew-NewPHPLinks 2.1b - 'index.php' SQL Injection
|
25 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2011-02-05
|
|
Escort und Begleitservice Agentur Script - SQL Injection
|
26 |
WEB
|
NoNameMT
|
|
2011-02-05
|
|
Qcodo Development Framework 0.3.3 - Full Information Disclosure
|
25 |
WEB
|
Daniel Godoy
|
|
2011-02-05
|
|
Chamilo 1.8.7 / Dokeos 1.8.6 - Remote File Disclosure
|
26 |
WEB
|
beford
|
|
2011-02-04
|
|
osCommerce - Authentication Bypass
|
25 |
WEB
|
Nicolas Krassas
|
|
2011-02-04
|
|
reos 2.0.5 - Multiple Vulnerabilities
|
28 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-04
|
|
Podcast Generator 1.3 - Multiple Vulnerabilities
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-03
|
|
OemPro 3.6.4 - Multiple Vulnerabilities
|
26 |
WEB
|
Ignacio Garrido
|
|
2011-02-03
|
|
Islam Sound IV2 - 'details.php' SQL Injection
|
27 |
WEB
|
ZxH-Labs
|
|
2011-02-02
|
|
Zikula CMS 1.2.4 - Cross-Site Request Forgery
|
24 |
WEB
|
Aung Khant
|
|
2011-02-02
|
|
RedaxScript 0.3.2 - Multiple Vulnerabilities
|
23 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-02
|
|
Raja Natarajan Guestbook 1.0 - Local File Inclusion
|
27 |
WEB
|
h0rd
|
|
2011-02-01
|
|
Joomla! 1.5/1.6 - JFilterInput Cross-Site Scripting Bypass
|
24 |
WEB
|
Jeff Channell
|
|
2011-02-01
|
|
TinyWebGallery 1.8.3 - Multiple Vulnerabilities
|
23 |
WEB
|
Yam Mesicka
|
|
2011-02-01
|
|
NetLink - Arbitrary File Upload
|
26 |
WEB
|
lumut--
|
|
2011-02-01
|
|
PMB Services 3.4.3 - SQL Injection
|
26 |
WEB
|
Luchador
|
