|
2010-05-14
|
|
Heaven Soft CMS 4.7 - 'photogallery_open.php' SQL Injection
|
25 |
WEB
|
CoBRa_21
|
|
2010-05-14
|
|
Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion
|
24 |
WEB
|
ALTBTA
|
|
2010-05-14
|
|
SelfComposer CMS - SQL Injection
|
27 |
WEB
|
Locu
|
|
2010-05-14
|
|
Joomla! Component JE Job 1.0 - Local File Inclusion
|
23 |
WEB
|
Valentin
|
|
2010-05-14
|
|
Heaven Soft CMS 4.7 - SQL Injection
|
23 |
WEB
|
PrinceofHacking
|
|
2010-05-14
|
|
JE Ajax Event Calendar - Local File Inclusion
|
26 |
WEB
|
Valentin
|
|
2010-05-14
|
|
Press Release Script - 'page.php?id' SQL Injection
|
21 |
WEB
|
R3d-D3V!L
|
|
2010-05-14
|
|
Link Bid Script - 'links.php' SQL Injection
|
21 |
WEB
|
R3d-D3V!L
|
|
2010-05-13
|
|
Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion
|
24 |
WEB
|
Chip d3 bi0s
|
|
2010-05-13
|
|
Joomla! Component com_sebercart - 'getPic.php' Local File Disclosure
|
22 |
WEB
|
AntiSecurity
|
|
2010-05-13
|
|
damianov.net Shoutbox - Cross-Site Scripting
|
24 |
WEB
|
Valentin Hoebel
|
|
2010-05-13
|
|
Joomla! Component aardvertiser 2.0 - Local File Inclusion
|
20 |
WEB
|
eidelweiss
|
|
2010-05-13
|
|
BlaB! Lite 0.5 - Remote File Inclusion
|
24 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-13
|
|
Joomla! Component Komento 1.0.0 - 'sid' SQL Injection
|
24 |
WEB
|
c4uR
|
|
2010-05-13
|
|
Invision Power Board 3.0.1 - SQL Injection
|
22 |
WEB
|
Cryptovirus
|
|
2010-05-12
|
|
4Images 1.7.7 - 'image_utils.php' Remote Command Execution
|
23 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-12
|
|
PolyPager 1.0rc10 - 'FCKeditor' Arbitrary File Upload
|
23 |
WEB
|
eidelweiss
|
|
2010-05-12
|
|
e-webtech - 'fixed_page.asp' SQL Injection
|
22 |
WEB
|
FL0RiX
|
|
2010-05-12
|
|
Joomla! Component com_PHP 0.1 - Local File Inclusion
|
21 |
WEB
|
Chip d3 bi0s
|
|
2010-05-11
|
|
Marinet CMS - SQL Injection / Cross-Site Scripting / HTML Injection
|
22 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
Woodall Creative - SQL Injection
|
22 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
Marinet CMS - SQL Injection
|
25 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
Joomla! Component mod_VisitorData 1.1 - Remote code Execution
|
22 |
WEB
|
Chip d3 bi0s
|
|
2010-05-11
|
|
Free Advertisment CMS - 'user_info.php' SQL Injection
|
26 |
WEB
|
XroGuE
|
|
2010-05-11
|
|
e-webtech - 'page.asp' SQL Injection
|
30 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
Uploader 0.1.5 - Multiple Vulnerabilities
|
26 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Fast Free Media 1.3 Adult Site - Arbitrary File Upload
|
23 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Digital College 1.0 - Arbitrary File Upload
|
21 |
WEB
|
indoushka
|
|
2010-05-11
|
|
Aqar Script 1.0 - Remote Bypass
|
21 |
WEB
|
indoushka
|
|
2010-05-11
|
|
724CMS Enterprise 4.59 - 'section.php' SQL Injection
|
25 |
WEB
|
CoBRa_21
|
|
2010-05-11
|
|
724CMS Enterprise 4.59 - 'section.php' Local File Inclusion
|
24 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
Fiomental & Coolsis Backoffice - Multiple Vulnerabilities
|
24 |
WEB
|
MasterGipy
|
|
2010-05-10
|
|
Waibrasil - Local/Remote File Inclusion
|
25 |
WEB
|
eXeSoul
|
|
2010-05-10
|
|
PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections
|
20 |
WEB
|
R3d-D3V!L
|
|
2010-05-10
|
|
724CMS Enterprise 4.59 - SQL Injection
|
23 |
WEB
|
cyberlog
|
|
2010-05-10
|
|
29o3 CMS - 'LibDir' Multiple Remote File Inclusions
|
21 |
WEB
|
eidelweiss
|
|
2010-05-10
|
|
family connections 2.2.3 - Multiple Vulnerabilities
|
22 |
WEB
|
Salvatore Fresta
|
|
2010-05-10
|
|
Tadbir CMS - 'FCKeditor' Arbitrary File Upload
|
25 |
WEB
|
Pouya Daneshmand
|
|
2010-05-10
|
|
Dark Hart Portal - 'login.php' Remote File Inclusion
|
22 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
tekno.Portal 0.1b - 'makale.php?id' SQL Injection
|
23 |
WEB
|
CoBRa_21
|
|
2010-05-10
|
|
Spaceacre - Multiple SQL Injections
|
23 |
WEB
|
gendenk
|
|
2010-05-10
|
|
Netvidade engine 1.0 - Multiple Vulnerabilities
|
22 |
WEB
|
pwndomina
|
|
2010-05-10
|
|
e-webtech - 'new.asp?id=' SQL Injection
|
22 |
WEB
|
protocol
|
|
2010-05-09
|
|
phpscripte24 Live Shopping Multi Portal System - SQL Injection
|
24 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
Alibaba Clone Diamond Version - SQL Injection
|
22 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
Alibaba Clone 3.0 (Special) - SQL Injection
|
24 |
WEB
|
Easy Laster
|
|
2010-05-09
|
|
phpscripte24 Shop System - SQL Injection
|
22 |
WEB
|
Easy Laster
|
|
2010-05-08
|
|
Joomla! Component Article Factory Manager - Arbitrary File Upload
|
23 |
WEB
|
Sid3^effects
|
|
2010-05-08
|
|
phpscripte24 Countdown Standart Rückwärts Auktions System - SQL Injection
|
21 |
WEB
|
Easy Laster
|
|
2010-05-08
|
|
PHP Link Manager 1.7 - URL Redirection
|
23 |
WEB
|
ITSecTeam
|
|
2010-05-08
|
|
big.asp - SQL Injection
|
26 |
WEB
|
Ra3cH
|
|
2010-05-08
|
|
B2B Classic Trading Script - 'offers.php' SQL Injection
|
26 |
WEB
|
v3n0m
|
|
2010-05-07
|
|
ArticleLive (Interspire Website Publisher) - SQL Injection
|
23 |
WEB
|
Ra3cH
|
|
2010-05-07
|
|
PHP-Nuke - 'friend.php' Module SQL Injection
|
24 |
WEB
|
CMD
|
|
2010-05-06
|
|
REZERVI 3.0.2 - Remote Command Execution
|
24 |
WEB
|
JosS & eidelweiss
|
|
2010-05-06
|
|
WeBProdZ CMS - SQL Injection
|
22 |
WEB
|
MasterGipy
|
|
2010-05-06
|
|
Factux - Local File Inclusion
|
25 |
WEB
|
ALTBTA
|
|
2010-05-06
|
|
OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass
|
23 |
WEB
|
Nicolas DEROUET
|
|
2010-05-06
|
|
AV Arcade - 'Search' Cross-Site Scripting / HTML Injection
|
25 |
WEB
|
Vadim Toptunov
|
|
2010-05-06
|
|
Getsimple CMS 2.01 - Local File Inclusion
|
23 |
WEB
|
Batch
|
|
2010-05-05
|
|
Slooze PHP Web Photo Album 0.2.7 - Command Execution
|
29 |
WEB
|
Sn!pEr.S!Te Hacker
|
|
2010-05-05
|
|
PHP-Nuke 5.0 - Viewslink SQL Injection
|
22 |
WEB
|
CMD
|
|
2010-05-05
|
|
PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
|
23 |
WEB
|
Michael Brooks
|
|
2010-05-04
|
|
SmartCMS 2 - SQL Injection
|
25 |
WEB
|
Ariko-Security
|
|
2010-05-04
|
|
Knowledgeroot (fckeditor) - Arbitrary File Upload
|
23 |
WEB
|
eidelweiss
|
|
2010-05-04
|
|
thEngine 0.1 - Local File Inclusion
|
24 |
WEB
|
team_elite
|
|
2010-05-04
|
|
Clicksor - SQL Injection
|
22 |
WEB
|
JM511
|
|
2010-05-04
|
|
DBHcms 1.1.4 - Persistent Cross-Site Scripting
|
24 |
WEB
|
ITSecTeam
|
|
2010-05-03
|
|
KubeBlog - Cross-Site Request Forgery
|
24 |
WEB
|
The.Morpheus
|
|
2010-05-03
|
|
Joomla! 1.6.0 Alpha2 - Cross-Site Scripting
|
24 |
WEB
|
mega-itec.com
|
|
2010-05-03
|
|
Gallo 0.1.0 - Remote File Inclusion
|
25 |
WEB
|
cr4wl3r
|
|
2010-05-02
|
|
Openannuaire Openmairie Annuaire 2.00 - Local File Inclusion / Remote File Inclusion
|
26 |
WEB
|
cr4wl3r
|
|
2010-05-02
|
|
Burning Board Lite 1.0.2 - Arbitrary File Upload
|
24 |
WEB
|
indoushka
|
|
2010-05-02
|
|
GuppY 4.5.18 - Blind SQL Injection / XPath Injection
|
22 |
WEB
|
indoushka
|
|
2010-05-02
|
|
WHMCompleteSolution (WHMCS) Control 2 - 'announcements.php' SQL Injection
|
24 |
WEB
|
Islam DefenDers
|
|
2010-05-02
|
|
Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload
|
25 |
WEB
|
Sid3^effects
|
|
2010-05-02
|
|
Mesut Manþet Haber 1.0 - Authentication Bypass
|
23 |
WEB
|
LionTurk
|
|
2010-05-01
|
|
Opencimetiere 2.01 - Multiple Remote File Inclusions
|
24 |
WEB
|
cr4wl3r
|
|
2010-05-01
|
|
Opencatalogue 1.024 - Local File Inclusion
|
23 |
WEB
|
cr4wl3r
|
|
2010-05-01
|
|
Joomla! Component Card View JX - Cross-Site Scripting
|
21 |
WEB
|
Valentin
|
|
2010-05-01
|
|
Joomla! Component Table JX - Cross-Site Scripting
|
23 |
WEB
|
Valentin
|
|
2010-05-01
|
|
CF Image Host 1.1 - Remote File Inclusion
|
24 |
WEB
|
The.Morpheus
|
|
2010-05-01
|
|
Comersus 8 Shopping Cart - SQL Injection / Cross-Site Request Forgery
|
23 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
Alibaba Clone Platinum - 'offers_buy.php' SQL Injection
|
23 |
WEB
|
v3n0m
|
|
2010-04-30
|
|
Webthaiapp - 'detail.php?cat' Blind SQL Injection
|
23 |
WEB
|
Xelenonz
|
|
2010-04-30
|
|
Puntal 2.1.0 - Remote File Inclusion
|
22 |
WEB
|
eidelweiss
|
|
2010-04-30
|
|
Joomla! Component Newsfeeds - SQL Injection
|
24 |
WEB
|
Archimonde
|
|
2010-04-30
|
|
ASPCode CMS 1.5.8 - Multiple Vulnerabilities
|
21 |
WEB
|
Dr. Alberto Fontanella
|
|
2010-04-30
|
|
New-CMS - Multiple Vulnerabilities
|
30 |
WEB
|
Dr. Alberto Fontanella
|
|
2010-04-30
|
|
AutoDealer 1.0/2.0 - MSSQL Injection
|
26 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
JobPost - SQL Injection
|
22 |
WEB
|
Sid3^effects
|
|
2010-04-30
|
|
B2B Gold Script - 'id' SQL Injection
|
22 |
WEB
|
v3n0m
|
|
2010-04-30
|
|
ec21 clone 3.0 - 'id' SQL Injection
|
24 |
WEB
|
v3n0m
|
|
2010-04-29
|
|
Scratcher - SQL Injection / Cross-Site Scripting
|
23 |
WEB
|
cr4wl3r
|
|
2010-04-29
|
|
chCounter - indirect SQL Injection / Cross-Site Scripting
|
25 |
WEB
|
Valentin
|
|
2010-04-29
|
|
Ucenter Projekt 2.0 - Insecure crossdomain (Cross-Site Scripting)
|
23 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Zyke CMS 1.0 - Arbitrary File Upload
|
23 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Zyke CMS 1.1 - Bypass
|
22 |
WEB
|
indoushka
|
|
2010-04-29
|
|
TaskFreak 0.6.2 - SQL Injection
|
22 |
WEB
|
Justin C. Klein Keane
|
|
2010-04-29
|
|
iScripts VisualCaster - SQL Injection
|
24 |
WEB
|
Sid3^effects
|
|
2010-04-29
|
|
Microsoft SharePoint Server 2007 - Cross-Site Scripting
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2010-04-29
|
|
DZCP (deV!L_z Clanportal) 1.5.3 - Multiple Vulnerabilities
|
21 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Socialware 2.2 - Upload / Cross-Site Scripting
|
22 |
WEB
|
Sid3^effects
|
|
2010-04-29
|
|
XT-Commerce 1.0 Beta 1 - Pass / Create and Download Backup
|
24 |
WEB
|
indoushka
|
|
2010-04-29
|
|
TR Forum 1.5 - Multiple Vulnerabilities
|
25 |
WEB
|
indoushka
|
|
2010-04-29
|
|
Articles Directory - Authentication Bypass
|
20 |
WEB
|
Sid3^effects
|
|
2010-04-28
|
|
PHP Video Battle - SQL Injection
|
25 |
WEB
|
v3n0m
|
|
2010-04-28
|
|
Modelbook - 'casting_view.php' SQL Injection
|
23 |
WEB
|
v3n0m
|
|
2010-04-28
|
|
GeneShop 5.1.1 - SQL Injection
|
22 |
WEB
|
41.w4r10r
|
|
2010-04-28
|
|
gpEasy 1.6.1 - Cross-Site Request Forgery (Add Admin)
|
26 |
WEB
|
Giuseppe 'giudinvx' D'Inverno
|
|
2010-04-28
|
|
Joomla! Component Wap4Joomla! - 'wapmain.php' SQL Injection
|
27 |
WEB
|
Manas58
|
|
2010-04-28
|
|
SoftBizScripts Hosting Script - SQL Injection
|
28 |
WEB
|
41.w4r10r
|
|
2010-04-28
|
|
SoftBizScripts Dating Script - SQL Injection
|
24 |
WEB
|
41.w4r10r
|
|
2010-04-28
|
|
Pligg CMS 1.0.4 - 'story.php' SQL Injection
|
24 |
WEB
|
Don Tukulesto
|
|
2010-04-01
|
|
Zabbix 1.8.1 - SQL Injection
|
22 |
WEB
|
Dawid Golunski
|
|
2010-04-28
|
|
NIBE heat pump - Local File Inclusion
|
23 |
WEB
|
Jelmer de Hen
|
|
2010-04-28
|
|
NIBE heat pump - Remote Code Execution
|
26 |
WEB
|
Jelmer de Hen
|
|
2010-04-28
|
|
Joomla! Component com_jesectionfinder - Arbitrary File Upload
|
23 |
WEB
|
Sid3^effects
|
|
2010-04-27
|
|
Joomla! Component Graphics 1.0.6 - Local File Inclusion
|
25 |
WEB
|
wishnusakti + inc0mp13te
|
|
2010-04-27
|
|
Joomla! Component ABC 1.1.7 - SQL Injection
|
24 |
WEB
|
AntiSecurity
|
|
2010-04-27
|
|
Joomla! Component SmartSite 1.0.0 - Local File Inclusion
|
22 |
WEB
|
AntiSecurity
|
|
2010-04-27
|
|
Joomla! Component NoticeBoard 1.3 - Local File Inclusion
|
22 |
WEB
|
AntiSecurity
|
|
2010-04-27
|
|
Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion
|
21 |
WEB
|
AntiSecurity
|
|
2010-04-27
|
|
Acart 2.0 Shopping Cart - Software Backup Dump
|
24 |
WEB
|
indoushka
|
|
2010-04-27
|
|
CLScript.com Classifieds Software - SQL Injection
|
24 |
WEB
|
41.w4r10
|
