|
2010-05-17
|
|
Abyss Web Server X1 - Cross-Site Request Forgery
|
4 |
WEB
|
John Leitch
|
|
2010-05-17
|
|
Joomla! Component com_event - SQL Injection
|
3 |
WEB
|
anonymous
|
|
2010-05-17
|
|
MyNews CMS 1.0 - SQL Injection / Local File Inclusion / Cross-Site Scripting
|
4 |
WEB
|
mr_me
|
|
2010-05-17
|
|
MidiCart PHP/ASP - Arbitrary File Upload
|
4 |
WEB
|
DigitALL
|
|
2010-05-17
|
|
PHP-Fusion 4.01 - SQL Injection
|
4 |
WEB
|
Ma3sTr0-Dz
|
|
2010-05-17
|
|
PHP Gamepage - SQL Injection
|
4 |
WEB
|
v4lc0m87
|
|
2010-05-17
|
|
Joomla! Component com_event - Multiple Vulnerabilities
|
4 |
WEB
|
ALTBTA
|
|
2010-05-17
|
|
Joomla! Component com_crowdsource - SQL Injection
|
4 |
WEB
|
ByEge
|
|
2010-05-17
|
|
Tainos Webdesign (All Scripts) - SQL Injection / Cross-Site Scripting / HTML Injection
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-16
|
|
I-Vision CMS - Cross-Site Scripting / SQL Injection
|
5 |
WEB
|
Ariko-Security
|
|
2010-05-16
|
|
Tainos - Multiple Vulnerabilities
|
4 |
WEB
|
XroGuE
|
|
2010-05-16
|
|
EgO 0.7b - 'FCKeditor' Arbitrary File Upload
|
5 |
WEB
|
ITSecTeam
|
|
2010-05-16
|
|
LinPHA 1.3.2 - 'rotate.php' Remote Command Execution
|
4 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-16
|
|
Joomla! Component simpledownload 0.9.5 - Local File Disclosure
|
4 |
WEB
|
ALTBTA
|
|
2010-05-16
|
|
The iceberg - 'Content Management System' SQL Injection
|
4 |
WEB
|
cyberlog
|
|
2010-05-16
|
|
Cybertek CMS - Local File Inclusion
|
5 |
WEB
|
XroGuE
|
|
2010-05-16
|
|
Joomla! Component simpledownload 0.9.5 - Local File Inclusion
|
4 |
WEB
|
Xr0b0t
|
|
2010-05-16
|
|
File Thingie 2.5.5 - File Security Bypass
|
4 |
WEB
|
Jeremiah Talamantes
|
|
2010-05-15
|
|
Joomla! Component com_camp - SQL Injection
|
4 |
WEB
|
Kernel Security Group
|
|
2010-05-15
|
|
CompactCMS 1.4.0 - 'tiny_mce' Arbitrary File Upload
|
4 |
WEB
|
ITSecTeam
|
|
2010-05-15
|
|
Alibaba Clone Platinum - 'about_us.php' SQL Injection
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-15
|
|
Joomla! Component MS Comment 0.8.0b - Local File Inclusion
|
4 |
WEB
|
Xr0b0t
|
|
2010-05-14
|
|
VMware View Portal 3.1 - Cross-Site Scripting
|
3 |
WEB
|
Alexey Sintsov
|
|
2010-05-14
|
|
Alibaba Clone Platinum - '/buyer/index.php' SQL Injection
|
3 |
WEB
|
GuN
|
|
2010-05-14
|
|
Heaven Soft CMS 4.7 - 'photogallery_open.php' SQL Injection
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-14
|
|
Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion
|
4 |
WEB
|
ALTBTA
|
|
2010-05-14
|
|
SelfComposer CMS - SQL Injection
|
5 |
WEB
|
Locu
|
|
2010-05-14
|
|
Joomla! Component JE Job 1.0 - Local File Inclusion
|
4 |
WEB
|
Valentin
|
|
2010-05-14
|
|
Heaven Soft CMS 4.7 - SQL Injection
|
4 |
WEB
|
PrinceofHacking
|
|
2010-05-14
|
|
JE Ajax Event Calendar - Local File Inclusion
|
4 |
WEB
|
Valentin
|
|
2010-05-14
|
|
Press Release Script - 'page.php?id' SQL Injection
|
2 |
WEB
|
R3d-D3V!L
|
|
2010-05-14
|
|
Link Bid Script - 'links.php' SQL Injection
|
3 |
WEB
|
R3d-D3V!L
|
|
2010-05-13
|
|
Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion
|
3 |
WEB
|
Chip d3 bi0s
|
|
2010-05-13
|
|
Joomla! Component com_sebercart - 'getPic.php' Local File Disclosure
|
3 |
WEB
|
AntiSecurity
|
|
2010-05-13
|
|
damianov.net Shoutbox - Cross-Site Scripting
|
3 |
WEB
|
Valentin Hoebel
|
|
2010-05-13
|
|
Joomla! Component aardvertiser 2.0 - Local File Inclusion
|
4 |
WEB
|
eidelweiss
|
|
2010-05-13
|
|
BlaB! Lite 0.5 - Remote File Inclusion
|
4 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-13
|
|
Joomla! Component Komento 1.0.0 - 'sid' SQL Injection
|
4 |
WEB
|
c4uR
|
|
2010-05-13
|
|
Invision Power Board 3.0.1 - SQL Injection
|
4 |
WEB
|
Cryptovirus
|
|
2010-05-12
|
|
4Images 1.7.7 - 'image_utils.php' Remote Command Execution
|
4 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-12
|
|
PolyPager 1.0rc10 - 'FCKeditor' Arbitrary File Upload
|
4 |
WEB
|
eidelweiss
|
|
2010-05-12
|
|
e-webtech - 'fixed_page.asp' SQL Injection
|
4 |
WEB
|
FL0RiX
|
|
2010-05-12
|
|
Joomla! Component com_PHP 0.1 - Local File Inclusion
|
4 |
WEB
|
Chip d3 bi0s
|
|
2010-05-11
|
|
Marinet CMS - SQL Injection / Cross-Site Scripting / HTML Injection
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
Woodall Creative - SQL Injection
|
4 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
Marinet CMS - SQL Injection
|
4 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
Joomla! Component mod_VisitorData 1.1 - Remote code Execution
|
3 |
WEB
|
Chip d3 bi0s
|
|
2010-05-11
|
|
Free Advertisment CMS - 'user_info.php' SQL Injection
|
3 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
e-webtech - 'page.asp' SQL Injection
|
3 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
Uploader 0.1.5 - Multiple Vulnerabilities
|
3 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Fast Free Media 1.3 Adult Site - Arbitrary File Upload
|
3 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Digital College 1.0 - Arbitrary File Upload
|
3 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Aqar Script 1.0 - Remote Bypass
|
4 |
WEB
|
indoushka
|
|
2010-05-11
|
|
724CMS Enterprise 4.59 - 'section.php' SQL Injection
|
5 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
724CMS Enterprise 4.59 - 'section.php' Local File Inclusion
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
Fiomental & Coolsis Backoffice - Multiple Vulnerabilities
|
4 |
WEB
|
MasterGipy
|
|
2010-05-10
|
|
Waibrasil - Local/Remote File Inclusion
|
4 |
WEB
|
eXeSoul
|
|
2010-05-10
|
|
PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections
|
4 |
WEB
|
R3d-D3V!L
|
|
2010-05-10
|
|
724CMS Enterprise 4.59 - SQL Injection
|
4 |
WEB
|
cyberlog
|
|
2010-05-10
|
|
29o3 CMS - 'LibDir' Multiple Remote File Inclusions
|
4 |
WEB
|
eidelweiss
|
|
2010-05-10
|
|
family connections 2.2.3 - Multiple Vulnerabilities
|
4 |
WEB
|
Salvatore Fresta
|
|
2010-05-10
|
|
Tadbir CMS - 'FCKeditor' Arbitrary File Upload
|
4 |
WEB
|
Pouya Daneshmand
|
|
2010-05-10
|
|
Dark Hart Portal - 'login.php' Remote File Inclusion
|
3 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
tekno.Portal 0.1b - 'makale.php?id' SQL Injection
|
4 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
Spaceacre - Multiple SQL Injections
|
4 |
WEB
|
gendenk
|
|
2010-05-10
|
|
Netvidade engine 1.0 - Multiple Vulnerabilities
|
4 |
WEB
|
pwndomina
|
|
2010-05-10
|
|
e-webtech - 'new.asp?id=' SQL Injection
|
4 |
WEB
|
protocol
|
|
2010-05-09
|
|
phpscripte24 Live Shopping Multi Portal System - SQL Injection
|
3 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
Alibaba Clone Diamond Version - SQL Injection
|
4 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
Alibaba Clone 3.0 (Special) - SQL Injection
|
5 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
phpscripte24 Shop System - SQL Injection
|
5 |
WEB
|
Easy Laster
|
|
2010-05-08
|
|
Joomla! Component Article Factory Manager - Arbitrary File Upload
|
4 |
WEB
|
Sid3^effects
|
|
2010-05-08
|
|
phpscripte24 Countdown Standart Rückwärts Auktions System - SQL Injection
|
4 |
WEB
|
Easy Laster
|
|
2010-05-08
|
|
PHP Link Manager 1.7 - URL Redirection
|
4 |
WEB
|
ITSecTeam
|
|
2010-05-08
|
|
big.asp - SQL Injection
|
5 |
WEB
|
Ra3cH
|
|
2010-05-08
|
|
B2B Classic Trading Script - 'offers.php' SQL Injection
|
4 |
WEB
|
v3n0m
|
|
2010-05-07
|
|
ArticleLive (Interspire Website Publisher) - SQL Injection
|
4 |
WEB
|
Ra3cH
|
|
2010-05-07
|
|
PHP-Nuke - 'friend.php' Module SQL Injection
|
4 |
WEB
|
CMD
|
|
2010-05-06
|
|
REZERVI 3.0.2 - Remote Command Execution
|
4 |
WEB
|
JosS & eidelweiss
|
|
2010-05-06
|
|
WeBProdZ CMS - SQL Injection
|
4 |
WEB
|
MasterGipy
|
|
2010-05-06
|
|
Factux - Local File Inclusion
|
4 |
WEB
|
ALTBTA
|
|
2010-05-06
|
|
OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass
|
4 |
WEB
|
Nicolas DEROUET
|
|
2010-05-06
|
|
AV Arcade - 'Search' Cross-Site Scripting / HTML Injection
|
4 |
WEB
|
Vadim Toptunov
|
|
2010-05-06
|
|
Getsimple CMS 2.01 - Local File Inclusion
|
4 |
WEB
|
Batch
|
|
2010-05-05
|
|
Slooze PHP Web Photo Album 0.2.7 - Command Execution
|
4 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-05
|
|
PHP-Nuke 5.0 - Viewslink SQL Injection
|
3 |
WEB
|
CMD
|
|
2010-05-05
|
|
PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
|
4 |
WEB
|
Michael Brooks
|
|
2010-05-04
|
|
SmartCMS 2 - SQL Injection
|
4 |
WEB
|
Ariko-Security
|
|
2010-05-04
|
|
Knowledgeroot (fckeditor) - Arbitrary File Upload
|
4 |
WEB
|
eidelweiss
|
|
2010-05-04
|
|
thEngine 0.1 - Local File Inclusion
|
4 |
WEB
|
team_elite
|
|
2010-05-04
|
|
Clicksor - SQL Injection
|
4 |
WEB
|
JM511
|
|
2010-05-04
|
|
DBHcms 1.1.4 - Persistent Cross-Site Scripting
|
4 |
WEB
|
ITSecTeam
|
|
2010-05-03
|
|
KubeBlog - Cross-Site Request Forgery
|
4 |
WEB
|
The.Morpheus
|
|
2010-05-03
|
|
Joomla! 1.6.0 Alpha2 - Cross-Site Scripting
|
4 |
WEB
|
mega-itec.com
|
|
2010-05-03
|
|
Gallo 0.1.0 - Remote File Inclusion
|
4 |
WEB
|
cr4wl3r
|
|
2010-05-02
|
|
Openannuaire Openmairie Annuaire 2.00 - Local File Inclusion / Remote File Inclusion
|
4 |
WEB
|
cr4wl3r
|
|
2010-05-02
|
|
Burning Board Lite 1.0.2 - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
|
2010-05-02
|
|
GuppY 4.5.18 - Blind SQL Injection / XPath Injection
|
3 |
WEB
|
indoushka
|
|
2010-05-02
|
|
WHMCompleteSolution (WHMCS) Control 2 - 'announcements.php' SQL Injection
|
4 |
WEB
|
Islam DefenDers
|
|
2010-05-02
|
|
Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload
|
4 |
WEB
|
Sid3^effects
|
|
2010-05-02
|
|
Mesut Manþet Haber 1.0 - Authentication Bypass
|
4 |
WEB
|
LionTurk
|
|
2010-05-01
|
|
Opencimetiere 2.01 - Multiple Remote File Inclusions
|
4 |
WEB
|
cr4wl3r
|
|
2010-05-01
|
|
Opencatalogue 1.024 - Local File Inclusion
|
4 |
WEB
|
cr4wl3r
|
|
2010-05-01
|
|
Joomla! Component Card View JX - Cross-Site Scripting
|
2 |
WEB
|
Valentin
|
|
2010-05-01
|
|
Joomla! Component Table JX - Cross-Site Scripting
|
4 |
WEB
|
Valentin
|
|
2010-05-01
|
|
CF Image Host 1.1 - Remote File Inclusion
|
4 |
WEB
|
The.Morpheus
|
|
2010-05-01
|
|
Comersus 8 Shopping Cart - SQL Injection / Cross-Site Request Forgery
|
4 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
Alibaba Clone Platinum - 'offers_buy.php' SQL Injection
|
4 |
WEB
|
v3n0m
|
|
2010-04-30
|
|
Webthaiapp - 'detail.php?cat' Blind SQL Injection
|
4 |
WEB
|
Xelenonz
|
|
2010-04-30
|
|
Puntal 2.1.0 - Remote File Inclusion
|
4 |
WEB
|
eidelweiss
|
|
2010-04-30
|
|
Joomla! Component Newsfeeds - SQL Injection
|
4 |
WEB
|
Archimonde
|
|
2010-04-30
|
|
ASPCode CMS 1.5.8 - Multiple Vulnerabilities
|
3 |
WEB
|
Dr. Alberto Fontanella
|
|
2010-04-30
|
|
New-CMS - Multiple Vulnerabilities
|
3 |
WEB
|
Dr. Alberto Fontanella
|
|
2010-04-30
|
|
AutoDealer 1.0/2.0 - MSSQL Injection
|
3 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
JobPost - SQL Injection
|
3 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
B2B Gold Script - 'id' SQL Injection
|
4 |
WEB
|
v3n0m
|
|
2010-04-30
|
|
ec21 clone 3.0 - 'id' SQL Injection
|
4 |
WEB
|
v3n0m
|
|
2010-04-29
|
|
Scratcher - SQL Injection / Cross-Site Scripting
|
4 |
WEB
|
cr4wl3r
|
|
2010-04-29
|
|
chCounter - indirect SQL Injection / Cross-Site Scripting
|
4 |
WEB
|
Valentin
|
|
2010-04-29
|
|
Ucenter Projekt 2.0 - Insecure crossdomain (Cross-Site Scripting)
|
4 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Zyke CMS 1.0 - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Zyke CMS 1.1 - Bypass
|
4 |
WEB
|
indoushka
|
|
2010-04-29
|
|
TaskFreak 0.6.2 - SQL Injection
|
4 |
WEB
|
Justin C. Klein Keane
|
|
2010-04-29
|
|
iScripts VisualCaster - SQL Injection
|
4 |
WEB
|
Sid3^effects
|
|
2010-04-29
|
|
Microsoft SharePoint Server 2007 - Cross-Site Scripting
|
4 |
WEB
|
High-Tech Bridge SA
|
