|
2010-09-22
|
|
BSI Hotel Booking System Admin 1.4/2.0 - Authentication Bypass
|
7 |
WEB
|
K-159
|
|
2010-09-22
|
|
Skybluecanvas 1.1-r248 - Cross-Site Request Forgery
|
8 |
WEB
|
Sweet
|
|
2010-09-22
|
|
gausCMS - Multiple Vulnerabilities
|
7 |
WEB
|
Abysssec
|
|
2010-09-21
|
|
wpQuiz 2.7 - Authentication Bypass
|
7 |
WEB
|
KnocKout
|
|
2010-09-21
|
|
ibPhotohost 1.1.2 - SQL Injection
|
7 |
WEB
|
fred777
|
|
2010-09-21
|
|
Personal.Net Portal - Multiple Vulnerabilities
|
9 |
WEB
|
Abysssec
|
|
2010-09-20
|
|
primitive CMS 1.0.9 - Multiple Vulnerabilities
|
10 |
WEB
|
Stephan Sattler
|
|
2010-09-20
|
|
LightNEasy CMS 3.2.1 - Blind SQL Injection
|
8 |
WEB
|
Solidmedia
|
|
2010-09-20
|
|
VWD-CMS - Cross-Site Request Forgery
|
9 |
WEB
|
Abysssec
|
|
2010-09-19
|
|
Opencart 1.4.9.1 - Arbitrary File Upload
|
9 |
WEB
|
Net.Edit0r
|
|
2010-09-19
|
|
BoutikOne 1.0 - SQL Injection
|
11 |
WEB
|
BrOx-Dz
|
|
2010-09-19
|
|
Fashione E-Commerce Webshop - Multiple SQL Injections
|
10 |
WEB
|
secret
|
|
2010-09-19
|
|
jmd-cms - Multiple Vulnerabilities
|
10 |
WEB
|
Abysssec
|
|
2010-09-18
|
|
Maian Gallery 2 - Local File Download
|
8 |
WEB
|
mr_me
|
|
2010-09-18
|
|
Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities
|
9 |
WEB
|
Valentin
|
|
2010-09-18
|
|
xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection
|
10 |
WEB
|
secret
|
|
2010-09-18
|
|
CMSimple - Cross-Site Request Forgery
|
8 |
WEB
|
Abysssec
|
|
2010-09-17
|
|
phpMyFamily - Multiple Vulnerabilities
|
9 |
WEB
|
Abysssec
|
|
2010-09-16
|
|
mojoportal - Multiple Vulnerabilities
|
9 |
WEB
|
Abysssec
|
|
2010-09-15
|
|
PixelPost 1.7.3 - Multiple Vulnerabilities
|
10 |
WEB
|
Sweet
|
|
2010-09-15
|
|
PHP microcms 1.0.1 - Multiple Vulnerabilities
|
10 |
WEB
|
Abysssec
|
|
2010-09-15
|
|
eNdonesia 8.4 - SQL Injection
|
8 |
WEB
|
vYc0d
|
|
2010-09-14
|
|
E-Xoopport Samsara 3.1 (Sections Module) - Blind SQL Injection
|
10 |
WEB
|
_mRkZ_
|
|
2010-09-14
|
|
freediscussionforums 1.0 - Multiple Vulnerabilities
|
9 |
WEB
|
Abysssec
|
|
2010-09-14
|
|
Joomla! Component JGen 0.9.33 - SQL Injection
|
10 |
WEB
|
**RoAd_KiLlEr**
|
|
2010-09-13
|
|
UCenter Home 2.0 - SQL Injection
|
10 |
WEB
|
KnocKout
|
|
2010-09-13
|
|
Storyteller CMS - 'var' Local File Inclusion
|
9 |
WEB
|
h4ck3r
|
|
2010-09-13
|
|
Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload
|
10 |
WEB
|
jdc
|
|
2010-09-13
|
|
Luftguitar CMS - Upload Arbitrary File
|
10 |
WEB
|
Abysssec
|
|
2010-09-13
|
|
osDate - 'uploadvideos.php' Arbitrary File Upload
|
9 |
WEB
|
Xa7m3d
|
|
2010-09-13
|
|
Group Office 3.5.9 - SQL Injection
|
8 |
WEB
|
ViciOuS
|
|
2010-09-12
|
|
Alstrasoft AskMe Pro 2.1 - 'profile.php' SQL Injection
|
10 |
WEB
|
CoBRa_21
|
|
2010-09-12
|
|
System Shop - 'Module aktka' SQL Injection
|
9 |
WEB
|
secret
|
|
2010-09-12
|
|
eshtery CMS - SQL Injection
|
8 |
WEB
|
Abysssec
|
|
2010-09-12
|
|
MyHobbySite 1.01 - SQL Injection / Authentication Bypass
|
9 |
WEB
|
YuGj VN
|
|
2010-09-11
|
|
piwigo-2.1.2 - Multiple Vulnerabilities
|
8 |
WEB
|
Sweet
|
|
2010-09-11
|
|
ASP Nuke - SQL Injection
|
9 |
WEB
|
Abysssec
|
|
2010-09-10
|
|
symphony 2.0.7 - Multiple Vulnerabilities
|
9 |
WEB
|
JosS
|
|
2010-09-10
|
|
fcms 2.2.3 - Remote File Inclusion
|
9 |
WEB
|
LoSt.HaCkEr
|
|
2010-09-10
|
|
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
|
8 |
WEB
|
Chip d3 bi0s
|
|
2010-09-09
|
|
CS-Cart 1.3.3 - 'install.php' Cross-Site Scripting
|
9 |
WEB
|
crmpays
|
|
2010-09-09
|
|
ES Simple Download 1.0. - Local File Inclusion
|
10 |
WEB
|
Kazza
|
|
2010-09-09
|
|
aradblog - Multiple Vulnerabilities
|
10 |
WEB
|
Abysssec
|
|
2010-09-09
|
|
Visitors Google Map Lite 1.0.1 Free mod_visitorsgooglemap Module - SQL Injection
|
11 |
WEB
|
Chip d3 bi0s
|
|
2010-09-09
|
|
festos CMS 2.3b - Multiple Vulnerabilities
|
11 |
WEB
|
Abysssec
|
|
2010-09-08
|
|
sirang web-based d-control - Multiple Vulnerabilities
|
11 |
WEB
|
Abysssec
|
|
2010-09-07
|
|
1024 CMS 2.1.1 - Blind SQL Injection
|
10 |
WEB
|
Stephan Sattler
|
|
2010-09-07
|
|
ColdUserGroup 1.06 - Blind SQL Injection
|
8 |
WEB
|
mr_me
|
|
2010-09-07
|
|
ColdOfficeView 2.04 - Multiple Blind SQL Injections
|
10 |
WEB
|
mr_me
|
|
2010-09-07
|
|
ColdBookmarks 1.22 - SQL Injection
|
9 |
WEB
|
mr_me
|
|
2010-09-07
|
|
ColdCalendar 2.06 - SQL Injection
|
9 |
WEB
|
mr_me
|
|
2010-09-07
|
|
java Bridge 5.5 - Directory Traversal
|
10 |
WEB
|
Saxtor
|
|
2010-09-07
|
|
dynpage 1.0 - Multiple Vulnerabilities
|
8 |
WEB
|
Abysssec
|
|
2010-09-06
|
|
WordPress Plugin Events Manager Extended - Persistent Cross-Site Scripting
|
11 |
WEB
|
Craw
|
|
2010-09-06
|
|
Joomla! Component Aardvertiser 2.1 - Blind SQL Injection
|
10 |
WEB
|
Stephan Sattler
|
|
2010-09-06
|
|
Micronetsoft Rental Property Management Website - SQL Injection
|
8 |
WEB
|
L0rd CrusAd3r
|
|
2010-09-06
|
|
InterPhoto Gallery - Multiple Vulnerabilities
|
7 |
WEB
|
Abysssec
|
|
2010-09-06
|
|
Micronetsoft RV Dealer Website - SQL Injection
|
8 |
WEB
|
L0rd CrusAd3r
|
|
2010-09-06
|
|
DMXReady Members Area Manager - Persistent Cross-Site Scripting
|
8 |
WEB
|
L0rd CrusAd3r
|
|
2010-09-05
|
|
Joomla! Component Gantry 3.0.10 - Blind SQL Injection
|
8 |
WEB
|
jdc
|
|
2010-09-05
|
|
Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection
|
8 |
WEB
|
h4ck3r
|
|
2010-09-05
|
|
DMXready Polling Booth Manager - SQL Injection
|
8 |
WEB
|
L0rd CrusAd3r
|
|
2010-09-05
|
|
Joomla! Component Clantools 1.2.3 - Multiple Blind SQL Injections
|
10 |
WEB
|
Solidmedia
|
|
2010-09-05
|
|
Joomla! Component Clantools 1.5 - Blind SQL Injection
|
8 |
WEB
|
Solidmedia
|
|
2010-09-05
|
|
ifnuke - Multiple Vulnerabilities
|
8 |
WEB
|
Abysssec
|
|
2010-09-05
|
|
ChillyCMS 1.1.3 - Multiple Vulnerabilities
|
7 |
WEB
|
AmnPardaz
|
|
2010-09-05
|
|
Joomla! Component iJoomla! Magazine 3.0.1 - Remote File Inclusion
|
8 |
WEB
|
LoSt.HaCkEr
|
|
2010-09-05
|
|
A-Blog 2.0 - '/sources/search.php' SQL Injection
|
8 |
WEB
|
Ptrace Security
|
|
2010-09-04
|
|
PHP Classifieds 7.3 - Remote File Inclusion
|
8 |
WEB
|
alsa7r
|
|
2010-09-04
|
|
PHP Classifieds ADS - 'sid' Blind SQL Injection
|
8 |
WEB
|
h4ck3r
|
|
2010-09-04
|
|
mBlogger 1.0.04 - 'addcomment.php' Persistent Cross-Site Scripting
|
8 |
WEB
|
Ptrace Security
|
|
2010-09-04
|
|
SyndeoCMS 2.8.02 - Multiple Vulnerabilities (1)
|
8 |
WEB
|
Abysssec
|
|
2010-09-03
|
|
smbind 0.4.7 - SQL Injection
|
8 |
WEB
|
r00t
|
|
2010-09-03
|
|
visinia 1.3 - Multiple Vulnerabilities
|
8 |
WEB
|
Abysssec
|
|
2010-09-02
|
|
Shop a la Cart - Multiple Vulnerabilities
|
7 |
WEB
|
Ariko-Security
|
|
2010-09-02
|
|
rainbowportal - Multiple Vulnerabilities
|
11 |
WEB
|
Abysssec
|
|
2010-09-02
|
|
vbShout 5.2.2 - Local/Remote File Inclusion
|
7 |
WEB
|
fred777
|
|
2010-09-01
|
|
PHP Joke Site Software - 'sbjoke_id' SQL Injection
|
8 |
WEB
|
h4ck3r
|
|
2010-09-01
|
|
Cpanel PHP - Restriction Bypass
|
8 |
WEB
|
Abysssec
|
|
2010-09-01
|
|
dompdf 0.6.0 beta1 - Remote File Inclusion
|
7 |
WEB
|
Andre_Corleone
|
|
2010-08-31
|
|
mBlogger 1.0.04 - 'viewpost.php' SQL Injection
|
7 |
WEB
|
Ptrace Security
|
|
2010-08-31
|
|
Web-Ideas Web Shop Standard - SQL Injection
|
7 |
WEB
|
Ariko-Security
|
|
2010-08-31
|
|
Joomla! Component JE FAQ Pro 1.5.0 - Multiple Blind SQL Injections
|
7 |
WEB
|
Chip d3 bi0s
|
|
2010-08-30
|
|
Joomla! Component PicSell 1.0 - Local File Disclosure
|
7 |
WEB
|
Craw
|
|
2010-08-30
|
|
seagull 0.6.7 - Remote File Inclusion
|
7 |
WEB
|
FoX HaCkEr
|
|
2010-08-29
|
|
GuestBookPlus - HTML Injection / Bypass Comments Limit
|
9 |
WEB
|
MiND C0re
|
|
2010-08-29
|
|
Seagull 0.6.7 - SQL Injection
|
9 |
WEB
|
Sweet
|
|
2010-08-29
|
|
CF Image Hosting Script 1.3.8 - Remote File Inclusion
|
8 |
WEB
|
FoX HaCkEr
|
|
2010-08-29
|
|
Multi-lingual E-Commerce System 0.2 - Multiple Remote File Inclusions
|
7 |
WEB
|
JosS
|
|
2010-08-29
|
|
Max's Guestbook - HTML Injection / Cross-Site Scripting
|
9 |
WEB
|
MiND C0re
|
|
2010-08-29
|
|
vBulletin 3.8.4/3.8.5 - Registration Bypass
|
9 |
WEB
|
Immortal Boy
|
|
2010-08-28
|
|
CF Image Hosting Script 1.3 - 'settings.cdb' Information Disclosure
|
9 |
WEB
|
Dr.$audi
|
|
2010-08-28
|
|
XOOPS 2.0.14 - 'article.php' SQL Injection
|
9 |
WEB
|
[]0iZy5
|
|
2010-08-28
|
|
Blogman 0.7.1 - 'profile.php' SQL Injection
|
8 |
WEB
|
Ptrace Security
|
|
2010-08-28
|
|
GaleriaSHQIP 1.0 - SQL Injection
|
8 |
WEB
|
Valentin
|
|
2010-08-28
|
|
textpattern CMS 4.2.0 - Remote File Inclusion
|
9 |
WEB
|
Sn!pEr.S!Te
|
|
2010-08-28
|
|
DIY-CMS 1.0 - Multiple Remote File Inclusions
|
9 |
WEB
|
LoSt.HaCkEr
|
|
2010-08-27
|
|
Shop Creator 4.0 - SQL Injection
|
7 |
WEB
|
Pouya_Server
|
|
2010-08-27
|
|
iGaming CMS - Multiple SQL Injections
|
8 |
WEB
|
Sweet
|
|
2010-08-27
|
|
Pc4Uploader 9.0 - Cross-Site Request Forgery
|
7 |
WEB
|
RENO
|
|
2010-08-27
|
|
McAfee LinuxShield 1.5.1 - Local/Remote File Inclusion / Remote Code Execution
|
8 |
WEB
|
Nikolas Sotiriu
|
|
2010-08-27
|
|
Esvon Classifieds 4.0 - Multiple Vulnerabilities
|
9 |
WEB
|
Sn!pEr.S!Te
|
|
2010-08-27
|
|
pecio CMS 2.0.5 - Multiple Remote File Inclusions
|
7 |
WEB
|
eidelweiss
|
|
2010-08-26
|
|
Joomla! Component com_remository - Arbitrary File Upload
|
7 |
WEB
|
J3yk0ob
|
|
2010-08-26
|
|
Gaestebuch 1.2 - Remote File Inclusion
|
8 |
WEB
|
bd0rk
|
|
2010-08-26
|
|
kontakt formular 1.1 - Remote File Inclusion
|
7 |
WEB
|
bd0rk
|
|
2010-08-26
|
|
Mini-CMS / News Script Light 1.0 - Remote File Inclusion
|
7 |
WEB
|
bd0rk
|
|
2010-08-26
|
|
Prometeo 1.0.65 - SQL Injection
|
7 |
WEB
|
Lord Tittis3000
|
|
2010-08-26
|
|
Hycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities
|
6 |
WEB
|
10n1z3d
|
|
2010-08-26
|
|
Atomic Photo Album 1.0.2 - Multiple Vulnerabilities
|
9 |
WEB
|
sh00t0ut
|
|
2010-08-26
|
|
osCommerce Online Merchant - Remote File Inclusion
|
10 |
WEB
|
LoSt.HaCkEr
|
|
2010-08-25
|
|
ClanSphere 2010 - Multiple Vulnerabilities
|
10 |
WEB
|
Sweet
|
|
2010-08-25
|
|
Simple Forum PHP - Multiple Vulnerabilities
|
10 |
WEB
|
arnab_s
|
|
2010-08-24
|
|
Joomla! 1.5 - URL Redirecting
|
8 |
WEB
|
Mr.MLL
|
|
2010-08-23
|
|
Joomla! Component com_zoomportfolio - SQL Injection
|
9 |
WEB
|
Chip d3 bi0s
|
|
2010-08-23
|
|
Link CMS - SQL Injection
|
7 |
WEB
|
hacker@sr.gov.yu
|
|
2010-08-23
|
|
AneCMS - '/registre/next' SQL Injection
|
8 |
WEB
|
Sweet
|
|
2010-08-23
|
|
Gazelle CMS - Multiple Vulnerabilities
|
8 |
WEB
|
Sweet
|
|
2010-08-23
|
|
4Images 1.7.8 - Remote File Inclusion
|
10 |
WEB
|
LoSt.HaCkEr
|
|
2010-08-22
|
|
netStartEnterprise 4.0 - SQL Injection
|
8 |
WEB
|
L1nK
|
|
2010-08-21
|
|
Joomla! Component Fabrik - SQL Injection
|
10 |
WEB
|
Mkr0x
|
|
2010-08-21
|
|
T-dreams Announcement Script - SQL Injection
|
9 |
WEB
|
Br0wn Sug4r
|
|
2010-08-21
|
|
Joomla! Component Biblioteca 1.0 Beta - Multiple SQL Injections
|
7 |
WEB
|
Salvatore Fresta
|
|
2010-08-21
|
|
Joomla! Component com_zina - SQL Injection
|
8 |
WEB
|
Th3 RDX
|
|
2010-08-20
|
|
Joomla! Component com_extcalendar - Blind SQL Injection
|
9 |
WEB
|
Lagripe-Dz
|