|
2010-07-01
|
|
NinkoBB - Cross-Site Request Forgery
|
30 |
WEB
|
ADEO Security
|
|
2010-06-30
|
|
Ubiquity Nanostation5 (Air OS) - Remote Command Execution
|
32 |
WEB
|
emgent
|
|
2010-06-30
|
|
Golf Club Site - SQL Injection
|
30 |
WEB
|
JaMbA
|
|
2010-06-30
|
|
Specialist Bed and Breakfast Website - SQL Injection
|
29 |
WEB
|
JaMbA
|
|
2010-06-30
|
|
Oxygen2PHP 1.1.3 - 'member.php' SQL Injection
|
32 |
WEB
|
Dante90
|
|
2010-06-30
|
|
webERP 3.11.4 - Multiple Vulnerabilities
|
28 |
WEB
|
ADEO Security
|
|
2010-06-30
|
|
Joomla! Component com_wmtpic 1.0 - SQL Injection
|
26 |
WEB
|
RoAd_KiLlEr
|
|
2010-06-30
|
|
Joomla! Component Joomanager - SQL Injection
|
30 |
WEB
|
Sid3^effects
|
|
2010-06-30
|
|
Joomla! Component Gamesbox 1.0.2 - 'id' SQL Injection
|
29 |
WEB
|
v3n0m
|
|
2010-06-30
|
|
ShopCartDx 4.30 - 'products.php' Blind SQL Injection
|
31 |
WEB
|
Dante90
|
|
2010-06-30
|
|
PHP-Nuke 8.0 - SQL Injection
|
27 |
WEB
|
Dante90
|
|
2010-06-29
|
|
WebDM CMS - SQL Injection
|
31 |
WEB
|
Dr.0rYX & Cr3W-DZ
|
|
2010-06-29
|
|
LIOOSYS CMS - 'news.php' SQL Injection
|
31 |
WEB
|
GlaDiaT0R
|
|
2010-06-29
|
|
CubeCart PHP 4.3.x - 'shipkey' SQL Injection
|
36 |
WEB
|
Core Security
|
|
2010-06-29
|
|
Gekko CMS - SQL Injection
|
30 |
WEB
|
[]0iZy5
|
|
2010-06-29
|
|
PageDirector CMS - 'result.php' SQL Injection
|
29 |
WEB
|
v3n0m
|
|
2010-06-29
|
|
Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)
|
29 |
WEB
|
G0D-F4Th3r
|
|
2010-06-29
|
|
Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (1)
|
27 |
WEB
|
G0D-F4Th3r
|
|
2010-06-29
|
|
YPNinc PHP Realty Script - 'docID' SQL Injection
|
29 |
WEB
|
v3n0m
|
|
2010-06-29
|
|
YPNinc JokeScript - 'ypncat_id' SQL Injection
|
31 |
WEB
|
v3n0m
|
|
2010-06-29
|
|
PHPDirector 0.30 - 'videos.php' SQL Injection
|
29 |
WEB
|
Mr-AbdoX
|
|
2010-06-29
|
|
Ecomat CMS - SQL Injection
|
32 |
WEB
|
High-Tech Bridge SA
|
|
2010-06-28
|
|
Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting
|
36 |
WEB
|
EnableSecurity
|
|
2010-06-28
|
|
Subdreamer Pro 3.0.4 - CMS Upload
|
30 |
WEB
|
Battousai
|
|
2010-06-28
|
|
CMSQLite / CMySQLite 1.3 - Cross-Site Request Forgery
|
30 |
WEB
|
ADEO Security
|
|
2010-06-28
|
|
I-net Multi User Email Script - SQL Injection
|
26 |
WEB
|
Sid3^effects
|
|
2010-06-28
|
|
Netartmedia iBoutique.MALL - SQL Injection
|
37 |
WEB
|
Sid3^effects
|
|
2010-06-28
|
|
PageDirector CMS - Multiple Vulnerabilities
|
30 |
WEB
|
Tr0y-x
|
|
2010-06-28
|
|
PTCPay GEN4 - 'buyupg.php' SQL Injection
|
30 |
WEB
|
Dark.Man
|
|
2010-06-28
|
|
iNet Online Community - Blind SQL Injection
|
32 |
WEB
|
JaMbA
|
|
2010-06-27
|
|
Swoopo Clone 2010 - SQL Injection
|
33 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-27
|
|
I-Net MLM Script Engine - SQL Injection
|
27 |
WEB
|
Sid3^effects
|
|
2010-06-27
|
|
i-netsolution Job Search Engine - SQL Injection
|
29 |
WEB
|
Sid3^effects
|
|
2010-06-27
|
|
Bilder Upload Script Datei Upload 1.09 - Arbitrary File Upload
|
26 |
WEB
|
Mr.Benladen
|
|
2010-06-27
|
|
2DayBiz Photo Sharing Script - SQL Injection (2)
|
28 |
WEB
|
Easy Laster
|
|
2010-06-27
|
|
2DayBiz ybiz Freelance Script - SQL Injection
|
25 |
WEB
|
Easy Laster
|
|
2010-06-27
|
|
2DayBiz ybiz Polls Script - SQL Injection
|
29 |
WEB
|
Easy Laster
|
|
2010-06-27
|
|
2DayBiz Matrimonial Script - 'smartresult.php' SQL Injection
|
28 |
WEB
|
Easy Laster
|
|
2010-06-26
|
|
Speedy 1.0 - Arbitrary File Upload
|
30 |
WEB
|
ViRuS Qalaa
|
|
2010-06-26
|
|
Joomla! Component jesectionfinder - Local File Inclusion
|
31 |
WEB
|
Sid3^effects
|
|
2010-06-26
|
|
Joomla! Component com_jejob - Local File Inclusion
|
31 |
WEB
|
Sid3^effects
|
|
2010-06-26
|
|
Joomla! Component jeeventcalendar - Local File Inclusion
|
30 |
WEB
|
Sid3^effects
|
|
2010-06-26
|
|
Joomla! Component JE Media Player - Local File Inclusion
|
30 |
WEB
|
Sid3^effects
|
|
2010-06-26
|
|
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting
|
29 |
WEB
|
Sid3^effects
|
|
2010-06-26
|
|
PHP-Nuke 8.2 - Arbitrary File Upload
|
29 |
WEB
|
Net.Edit0r
|
|
2010-06-26
|
|
WordPress Plugin Cimy Counter - Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Resp
|
27 |
WEB
|
sebug
|
|
2010-06-26
|
|
Clicker CMS - Blind SQL Injection
|
29 |
WEB
|
hacker@sr.gov.yu
|
|
2010-06-26
|
|
Joomla! Component com_sef - Remote File Inclusion
|
30 |
WEB
|
Li0n-PaL
|
|
2010-06-25
|
|
Joomla! Component jesubmit 1.4 - SQL Injection
|
28 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-25
|
|
snipe Gallery Script - SQL Injection
|
31 |
WEB
|
dev!l ghost
|
|
2010-06-25
|
|
2DayBiz B2B Portal Script - 'selling_buy_leads1.php' SQL Injection
|
32 |
WEB
|
r45c4l
|
|
2010-06-25
|
|
ARSC Really Simple Chat 3.3 - Remote File Inclusion / Cross-Site Scripting
|
30 |
WEB
|
Zer0 Thunder
|
|
2010-06-25
|
|
Allomani Songs & Clips 2.7.0 - Cross-Site Request Forgery (Add Admin)
|
29 |
WEB
|
G0D-F4Th3rG0D-F4Th3r
|
|
2010-06-25
|
|
2DayBiz - Multiple SQL Injections
|
32 |
WEB
|
Sangteamtham
|
|
2010-06-25
|
|
2DayBiz Matrimonial Script - SQL Injection / Cross-Site Scripting
|
29 |
WEB
|
Sangteamtham
|
|
2010-06-24
|
|
Big Forum - 'forum.php?id' SQL Injection
|
28 |
WEB
|
JaMbA
|
|
2010-06-24
|
|
Big Forum 5.2 - Arbitrary File Upload / Local File Inclusion
|
30 |
WEB
|
Zer0 Thunder
|
|
2010-06-24
|
|
PHPortal 1.2 - 'gunaysoft.php' Remote File Inclusion
|
26 |
WEB
|
Ma3sTr0-Dz
|
|
2010-06-24
|
|
2DayBiz B2B Portal Script - SQL Injection
|
27 |
WEB
|
JaMbA
|
|
2010-06-24
|
|
ActiveCollab 2.3.0 - Local File Inclusion / Directory Traversal
|
38 |
WEB
|
Jose Carlos de Arriba
|
|
2010-06-24
|
|
AbleDating script - SQL Injection
|
29 |
WEB
|
JaMbA
|
|
2010-06-24
|
|
2DayBiz Job Site Script - SQL Injection
|
29 |
WEB
|
Sangteamtham
|
|
2010-06-24
|
|
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
|
31 |
WEB
|
Sangteamtham
|
|
2010-06-24
|
|
2DayBiz Real Estate Portal - 'viewpropertydetails.php' SQL Injection
|
26 |
WEB
|
Sangteamtham
|
|
2010-06-24
|
|
2DayBiz Video Community Portal - 'user-profile.php' SQL Injection
|
30 |
WEB
|
Sangteamtham
|
|
2010-06-24
|
|
Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion (2)
|
29 |
WEB
|
MISTERFRIBO
|
|
2010-06-24
|
|
AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion
|
27 |
WEB
|
v3n0m
|
|
2010-06-24
|
|
2DayBiz Photo Sharing Script - SQL Injection (1)
|
33 |
WEB
|
JaMbA
|
|
2010-06-24
|
|
OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities
|
28 |
WEB
|
David Shaw
|
|
2010-06-23
|
|
2DayBiz Freelance Script - SQL Injection
|
31 |
WEB
|
JaMbA
|
|
2010-06-23
|
|
2DayBiz Matrimonial Script - SQL Injection
|
34 |
WEB
|
JaMbA
|
|
2010-06-23
|
|
Custom Business Card script - SQL Injection
|
29 |
WEB
|
JaMbA
|
|
2010-06-23
|
|
2DayBiz MLM Script - SQL Injection
|
32 |
WEB
|
JaMbA
|
|
2010-06-23
|
|
Interscan Web Security 5.0 - Arbitrary File Upload / Privilege Escalation
|
42 |
WEB
|
Ivan Huertas
|
|
2010-06-23
|
|
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
|
27 |
WEB
|
Ivan Huertas
|
|
2010-06-23
|
|
PishBini Footbal - Cross-Site Scripting / SQL Injection
|
29 |
WEB
|
indoushka
|
|
2010-06-23
|
|
Software Index - Arbitrary File Upload
|
31 |
WEB
|
indoushka
|
|
2010-06-23
|
|
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
|
28 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-23
|
|
PreProject Multi-Vendor Shopping Malls - 'products.php?sid' SQL Injection
|
31 |
WEB
|
CoBRa_21
|
|
2010-06-23
|
|
Boat Classifieds - 'printdetail.asp?Id' SQL Injection
|
28 |
WEB
|
CoBRa_21
|
|
2010-06-22
|
|
K-Search - SQL Injection / Cross-Site Scripting
|
28 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
Pre PHP Classifieds - SQL Injection
|
26 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
Softbiz PHP FAQ Script - Blind SQL Injection
|
29 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
Boat Classifieds - SQL Injection
|
30 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
PHP Event Calendar 1.5 - Multiple Vulnerabilities
|
28 |
WEB
|
cp77fk4r
|
|
2010-06-22
|
|
PreProject Multi-Vendor Shopping Malls - SQL Injection
|
27 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
Softbiz Resource Repository Script - Blind SQL Injection
|
29 |
WEB
|
Sangteamtham
|
|
2010-06-22
|
|
Greeting card 1.1 - SQL Injection
|
29 |
WEB
|
Net.Edit0r
|
|
2010-06-22
|
|
Alpin CMS - 'e4700.asp?id' SQL Injection
|
29 |
WEB
|
CoBRa_21
|
|
2010-06-22
|
|
Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion
|
30 |
WEB
|
kaMtiEz
|
|
2010-06-22
|
|
Cornerstone CMS - SQL Injection
|
25 |
WEB
|
Th3 RDX
|
|
2010-06-22
|
|
Joomla! Component com_ybggal 1.0 - 'catid' SQL Injection
|
28 |
WEB
|
v3n0m
|
|
2010-06-22
|
|
Job Search Engine Script - SQL Injection
|
26 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Social Community Script - SQL Injection
|
26 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Top Sites Script - SQL Injection
|
31 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Webring Script - SQL Injection
|
27 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Hot or Not Picture Rating Script - SQL Injection
|
28 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Classifieds Script - 'rate' SQL Injection
|
28 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Video Community portal - SQL Injection / Cross-Site Scripting
|
29 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Job Search Script - SQL Injection
|
29 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
Online Classified System Script - SQL Injection / Cross-Site Scripting
|
27 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-22
|
|
The Uploader 2.0.4 - Remote File Disclosure
|
28 |
WEB
|
Xa7m3d
|
|
2010-06-21
|
|
Linker IMG 1.0 - Remote File Inclusion
|
25 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-06-21
|
|
Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities
|
32 |
WEB
|
jdc
|
|
2010-06-21
|
|
Alpin CMS 1.0 - SQL Injection
|
34 |
WEB
|
Th3 RDX
|
|
2010-06-21
|
|
PHPWCMS 1.4.5 r398 - Cross-Site Request Forgery
|
30 |
WEB
|
Jeremiah Talamantes
|
|
2010-06-21
|
|
myUPB 2.2.6 - Multiple Vulnerabilities
|
32 |
WEB
|
ALTBTA
|
|
2010-06-21
|
|
Joomla! Component com_jomestate - Remote File Inclusion
|
32 |
WEB
|
Sid3^effects
|
|
2010-06-21
|
|
Joomla! Component com_community - Persistent Cross-Site Scripting
|
30 |
WEB
|
Sid3^effects
|
|
2010-06-21
|
|
G.CMS Generator - SQL Injection
|
28 |
WEB
|
Sid3^effects
|
|
2010-06-21
|
|
Saffa Tunes CMS - 'news.php' SQL Injection
|
31 |
WEB
|
Th3 RDX
|
|
2010-06-20
|
|
Joomla! Component com_eportfolio - Arbitrary File Upload
|
27 |
WEB
|
Sid3^effects
|
|
2010-06-20
|
|
Shareasale Script - SQL Injection
|
33 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-20
|
|
OroHYIP - SQL Injection
|
32 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-20
|
|
PHP Calendars Script - SQL Injection
|
29 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-20
|
|
Overstock Script - SQL Injection
|
31 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-20
|
|
iBoutique - 'page' SQL Injection / Cross-Site Scripting
|
30 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-20
|
|
SimpleAssets - Authentication Bypass / Cross-Site Scripting
|
31 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-19
|
|
WebsiteBaker 2.8.1 - Cross-Site Request Forgery
|
28 |
WEB
|
Luis Santana
|
|
2010-06-19
|
|
SnowCade 3.0 - SQL Injection
|
33 |
WEB
|
ahwak2000
|
|
2010-06-19
|
|
Elite Gaming Ladders 3.5 - 'ladder[id]' SQL Injection
|
34 |
WEB
|
ahwak2000
|
|
2010-06-19
|
|
Joomla! Component RSComments 1.0.0 - Persistent Cross-Site Scripting
|
28 |
WEB
|
jdc
|
|
2010-06-19
|
|
UK One Media CMS - 'id' Error-Based SQL Injection
|
28 |
WEB
|
LiquidWorm
|
|
2010-06-18
|
|
KubeLance 1.7.6 - 'profile.php' SQL Injection
|
30 |
WEB
|
L0rd CrusAd3r
|
|
2010-06-18
|
|
Shopping Cart Script with Affiliate Program - SQL Injection
|
27 |
WEB
|
L0rd CrusAd3r
|
