Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2010-10-05   SPAW Editor 2.0.8.1 - Local File Inclusion 19 WEB soorakh kos
2010-10-05   CuteNews - 'page' Local File Inclusion 21 WEB eidelweiss
2010-10-04   Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion 21 WEB blake
2010-10-04   Aspect Ratio CMS - Blind SQL Injection 19 WEB Stephan Sattler
2010-10-04   DNET Live-Stats 0.8 - Local File Inclusion 21 WEB blake
2010-10-04   FAQMasterFlex 1.2 - SQL Injection 27 WEB cyb3r.anbu
2010-10-04   Cilem Haber 1.4.4 (Tr) - Database Disclosure 19 WEB ZoRLu
2010-10-03   Aprox CMS Engine 6.0 - Multiple Vulnerabilities 22 WEB Stephan Sattler
2010-10-03   TinyMCE MCFileManager 2.1.2 - Arbitrary File Upload 18 WEB Hackeri-AL
2010-10-02   TradeMC E-Ticaret - SQL Injection / Cross-Site Scripting 19 WEB KnocKout
2010-10-02   SmarterMail < 7.2.3925 - LDAP Injection 19 WEB sqlhacker
2010-10-02   SmarterMail < 7.2.3925 - Persistent Cross-Site Scripting 21 WEB sqlhacker
2010-10-02   Bka Haber 1.0 (Tr) - File Disclosure 19 WEB ZoRLu
2010-10-01   iGaming CMS 1.5 - Blind SQL Injection 18 WEB plucky
2010-10-01   Chipmunk Board 1.3 - 'index.php?forumID' SQL Injection 19 WEB Shamus
2010-10-01   Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities 17 WEB John Leitch
2010-10-01   phpMyShopping 1.0.1505 - Multiple Vulnerabilities 18 WEB Metropolis
2010-10-01   jCart 1.1 - Multiple Cross-Site Scripting / Cross-Site Request Forgery/Open Redirect Vulnerabilities 18 WEB p0deje
2010-10-01   Evaria Content Management System 1.1 - File Disclosure 19 WEB khayeye shotor
2010-10-01   Zen Cart 1.3.9f - 'typefilter' Local File Inclusion 17 WEB LiquidWorm
2010-10-01   zen cart 1.3.9f - Multiple Vulnerabilities 19 WEB LiquidWorm
2010-09-30   JomSocial 1.8.8 - Arbitrary File Upload 23 WEB Jeff Channell
2010-09-30   Joomla! Component JE Directory 1.0 - SQL Injection 18 WEB Easy Laster
2010-09-30   Joomla! Component JE Job - SQL Injection 18 WEB Easy Laster
2010-09-30   ASPMass Shopping Cart - Arbitrary File Upload / Cross-Site Request Forgery 19 WEB Abysssec
2010-09-30   Joomla! Component JE Guestbook 1.0 - Multiple Vulnerabilities 21 WEB Salvatore Fresta
2010-09-29   MyPhpAuction 2010 - 'id' SQL Injection 15 WEB h4ck3r
2010-09-29   Webspell 4.x - safe_query Bypass 23 WEB silent vapor
2010-09-29   Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection 22 WEB Easy Laster
2010-09-29   Webspell 4.2.1 - 'asearch.php' SQL Injection 20 WEB silent vapor
2010-09-28   Micro CMS 1.0 b1 - Persistent Cross-Site Scripting 18 WEB SecPod Research
2010-09-28   Achievo 1.4.3 - Cross-Site Request Forgery 21 WEB Pablo Milano
2010-09-28   Achievo 1.4.3 - Multiple Authorisation Vulnerabilities 24 WEB Pablo Milano
2010-09-28   Aleza Portal 1.6 - Insecure SQL Injection / Cookie Handling 17 WEB KnocKout
2010-09-28   e107 0.7.23 - SQL Injection 22 WEB High-Tech Bridge SA
2010-09-28   JE CMS 1.0.0 - Authentication Bypass 21 WEB Abysssec
2010-09-28   AtomatiCMS - Upload Arbitrary File 21 WEB Abysssec
2010-09-27   Car Portal 2.0 - Blind SQL Injection 23 WEB **RoAd_KiLlEr**
2010-09-27   Barracuda Networks Spam & Virus Firewall 4.1.1.021 - Remote Configuration Retrieval 18 WEB ShadowHatesYou
2010-09-27   Allpc 2.5 osCommerce - SQL Injection / Cross-Site Scripting 19 WEB **RoAd_KiLlEr**
2010-09-27   Entrans - SQL Injection 16 WEB keracker
2010-09-27   ndCMS - SQL Injection 22 WEB Abysssec
2010-09-27   pbboard 2.1.1 - Multiple Vulnerabilities 23 WEB JIKO
2010-09-26   Blue River Mura CMS - Directory Traversal 22 WEB mr_me
2010-09-26   PEEL Premium 5.71 - SQL Injection 23 WEB KnocKout
2010-09-26   gokhun asp stok 1.0 - Multiple Vulnerabilities 18 WEB KnocKout
2010-09-26   ZenPhoto - Config Update / Command Execution 22 WEB Abysssec
2010-09-25   E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection 20 WEB _mRkZ_
2010-09-25   VisualSite CMS 1.3 - Multiple Vulnerabilities 19 WEB Abysssec
2010-09-24   Traidnt UP - Cross-Site Request Forgery (Add Admin) 18 WEB John Johnz
2010-09-24   Joomla! Component Elite Experts - SQL Injection 23 WEB **RoAd_KiLlEr**
2010-09-24   FreePBX 2.8.0 - Recordings Interface Allows Remote Code Execution 22 WEB Trustwave's SpiderLabs
2010-09-24   Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions 18 WEB sh00t0ut
2010-09-23   OvBB 0.16a - Multiple Local File Inclusions 27 WEB cOndemned
2010-09-23   GeekLog 1.3.8 (filemgmt) - SQL Injection 21 WEB Gamoscu
2010-09-23   WAnewsletter 2.1.2 - SQL Injection 21 WEB BrOx-Dz
2010-09-22   Joomla! Component Joostina - SQL Injection 22 WEB Gamoscu
2010-09-22   Joomla! Component TimeTrack 1.2.4 - Multiple SQL Injections 22 WEB Salvatore Fresta
2010-09-22   BSI Hotel Booking System Admin 1.4/2.0 - Authentication Bypass 21 WEB K-159
2010-09-22   Skybluecanvas 1.1-r248 - Cross-Site Request Forgery 21 WEB Sweet
2010-09-22   gausCMS - Multiple Vulnerabilities 21 WEB Abysssec
2010-09-21   wpQuiz 2.7 - Authentication Bypass 17 WEB KnocKout
2010-09-21   ibPhotohost 1.1.2 - SQL Injection 20 WEB fred777
2010-09-21   Personal.Net Portal - Multiple Vulnerabilities 23 WEB Abysssec
2010-09-20   primitive CMS 1.0.9 - Multiple Vulnerabilities 22 WEB Stephan Sattler
2010-09-20   LightNEasy CMS 3.2.1 - Blind SQL Injection 21 WEB Solidmedia
2010-09-20   VWD-CMS - Cross-Site Request Forgery 22 WEB Abysssec
2010-09-19   Opencart 1.4.9.1 - Arbitrary File Upload 23 WEB Net.Edit0r
2010-09-19   BoutikOne 1.0 - SQL Injection 22 WEB BrOx-Dz
2010-09-19   Fashione E-Commerce Webshop - Multiple SQL Injections 22 WEB secret
2010-09-19   jmd-cms - Multiple Vulnerabilities 19 WEB Abysssec
2010-09-18   Maian Gallery 2 - Local File Download 17 WEB mr_me
2010-09-18   Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities 20 WEB Valentin
2010-09-18   xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection 25 WEB secret
2010-09-18   CMSimple - Cross-Site Request Forgery 18 WEB Abysssec
2010-09-17   phpMyFamily - Multiple Vulnerabilities 24 WEB Abysssec
2010-09-16   mojoportal - Multiple Vulnerabilities 18 WEB Abysssec
2010-09-15   PixelPost 1.7.3 - Multiple Vulnerabilities 23 WEB Sweet
2010-09-15   PHP microcms 1.0.1 - Multiple Vulnerabilities 21 WEB Abysssec
2010-09-15   eNdonesia 8.4 - SQL Injection 19 WEB vYc0d
2010-09-14   E-Xoopport Samsara 3.1 (Sections Module) - Blind SQL Injection 21 WEB _mRkZ_
2010-09-14   freediscussionforums 1.0 - Multiple Vulnerabilities 21 WEB Abysssec
2010-09-14   Joomla! Component JGen 0.9.33 - SQL Injection 26 WEB **RoAd_KiLlEr**
2010-09-13   UCenter Home 2.0 - SQL Injection 24 WEB KnocKout
2010-09-13   Storyteller CMS - 'var' Local File Inclusion 21 WEB h4ck3r
2010-09-13   Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload 28 WEB jdc
2010-09-13   Luftguitar CMS - Upload Arbitrary File 22 WEB Abysssec
2010-09-13   osDate - 'uploadvideos.php' Arbitrary File Upload 24 WEB Xa7m3d
2010-09-13   Group Office 3.5.9 - SQL Injection 19 WEB ViciOuS
2010-09-12   Alstrasoft AskMe Pro 2.1 - 'profile.php' SQL Injection 18 WEB CoBRa_21
2010-09-12   System Shop - 'Module aktka' SQL Injection 24 WEB secret
2010-09-12   eshtery CMS - SQL Injection 19 WEB Abysssec
2010-09-12   MyHobbySite 1.01 - SQL Injection / Authentication Bypass 19 WEB YuGj VN
2010-09-11   piwigo-2.1.2 - Multiple Vulnerabilities 21 WEB Sweet
2010-09-11   ASP Nuke - SQL Injection 20 WEB Abysssec
2010-09-10   symphony 2.0.7 - Multiple Vulnerabilities 19 WEB JosS
2010-09-10   fcms 2.2.3 - Remote File Inclusion 19 WEB LoSt.HaCkEr
2010-09-10   Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion 20 WEB Chip d3 bi0s
2010-09-09   CS-Cart 1.3.3 - 'install.php' Cross-Site Scripting 21 WEB crmpays
2010-09-09   ES Simple Download 1.0. - Local File Inclusion 22 WEB Kazza
2010-09-09   aradblog - Multiple Vulnerabilities 21 WEB Abysssec
2010-09-09   Visitors Google Map Lite 1.0.1 Free mod_visitorsgooglemap Module - SQL Injection 24 WEB Chip d3 bi0s
2010-09-09   festos CMS 2.3b - Multiple Vulnerabilities 23 WEB Abysssec
2010-09-08   sirang web-based d-control - Multiple Vulnerabilities 24 WEB Abysssec
2010-09-07   1024 CMS 2.1.1 - Blind SQL Injection 21 WEB Stephan Sattler
2010-09-07   ColdUserGroup 1.06 - Blind SQL Injection 19 WEB mr_me
2010-09-07   ColdOfficeView 2.04 - Multiple Blind SQL Injections 24 WEB mr_me
2010-09-07   ColdBookmarks 1.22 - SQL Injection 19 WEB mr_me
2010-09-07   ColdCalendar 2.06 - SQL Injection 21 WEB mr_me
2010-09-07   java Bridge 5.5 - Directory Traversal 21 WEB Saxtor
2010-09-07   dynpage 1.0 - Multiple Vulnerabilities 19 WEB Abysssec
2010-09-06   WordPress Plugin Events Manager Extended - Persistent Cross-Site Scripting 24 WEB Craw
2010-09-06   Joomla! Component Aardvertiser 2.1 - Blind SQL Injection 23 WEB Stephan Sattler
2010-09-06   Micronetsoft Rental Property Management Website - SQL Injection 20 WEB L0rd CrusAd3r
2010-09-06   InterPhoto Gallery - Multiple Vulnerabilities 21 WEB Abysssec
2010-09-06   Micronetsoft RV Dealer Website - SQL Injection 20 WEB L0rd CrusAd3r
2010-09-06   DMXReady Members Area Manager - Persistent Cross-Site Scripting 20 WEB L0rd CrusAd3r
2010-09-05   Joomla! Component Gantry 3.0.10 - Blind SQL Injection 26 WEB jdc
2010-09-05   Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection 21 WEB h4ck3r
2010-09-05   DMXready Polling Booth Manager - SQL Injection 21 WEB L0rd CrusAd3r
2010-09-05   Joomla! Component Clantools 1.2.3 - Multiple Blind SQL Injections 19 WEB Solidmedia
2010-09-05   Joomla! Component Clantools 1.5 - Blind SQL Injection 19 WEB Solidmedia
2010-09-05   ifnuke - Multiple Vulnerabilities 24 WEB Abysssec
2010-09-05   ChillyCMS 1.1.3 - Multiple Vulnerabilities 16 WEB AmnPardaz
2010-09-05   Joomla! Component iJoomla! Magazine 3.0.1 - Remote File Inclusion 18 WEB LoSt.HaCkEr