|
2010-01-03
|
|
Service d'upload 1.0.0 - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
|
2010-01-02
|
|
X7CHAT 1.3.6b - Arbitrary Add Admin
|
3 |
WEB
|
d4rk-h4ck3r
|
|
2010-01-02
|
|
Left 4 Dead Stats 1.1 - SQL Injection
|
4 |
WEB
|
Sora
|
|
2010-01-02
|
|
WordPress Plugin Events - SQL Injection
|
4 |
WEB
|
Red-D3v1L
|
|
2010-01-02
|
|
Joomla! Component com_dailymeals - Local File Inclusion
|
4 |
WEB
|
FL0RiX
|
|
2010-01-02
|
|
AL-Athkat.2.0 - Cross-Site Scripting
|
3 |
WEB
|
indoushka
|
|
2010-01-02
|
|
superlink script 1.0 - 'id' SQL Injection
|
3 |
WEB
|
Red-D3v1L
|
|
2010-01-02
|
|
eazyPortal 1.0.0 - Multiple Vulnerabilities
|
4 |
WEB
|
Milos Zivanovic
|
|
2010-01-02
|
|
Proxyroll.com Clone PHP Script - Insecure Cookie Handling
|
4 |
WEB
|
DigitALL
|
|
2010-01-02
|
|
HLstatsX Community Edition 1.6.5 - Cross-Site Scripting
|
4 |
WEB
|
Sora
|
|
2010-01-02
|
|
DZOIC ClipHouse - Authentication Bypass
|
4 |
WEB
|
R3d-D3V!L
|
|
2010-01-01
|
|
Joomla! Component com_avosbillets - Blind SQL Injection
|
4 |
WEB
|
Pyske
|
|
2010-01-01
|
|
Mini-NUKE 2.3 Freehost - Multiple Vulnerabilities
|
4 |
WEB
|
LionTurk
|
|
2010-01-01
|
|
DZOIC Handshakes - Authentication Bypass
|
4 |
WEB
|
R3d-D3V!L
|
|
2010-01-01
|
|
XlentCMS 1.0.4 - 'downloads.php?cat' SQL Injection
|
4 |
WEB
|
Gamoscu
|
|
2010-01-01
|
|
WD-CMS 3.0 - Multiple Vulnerabilities
|
3 |
WEB
|
Sora
|
|
2010-01-01
|
|
UCStats 1.1 - SQL Injection
|
4 |
WEB
|
Sora
|
|
2010-01-01
|
|
DS CMS 1.0 - 'NewsId' SQL Injection
|
4 |
WEB
|
Palyo34
|
|
2010-01-01
|
|
Cype CMS - SQL Injection
|
4 |
WEB
|
Sora
|
|
2010-01-01
|
|
ArticleLive 1.7.1.2 - 'blogs.php?Id' SQL Injection
|
4 |
WEB
|
BAYBORA
|
|
2010-01-01
|
|
BlogWorx 1.0 Blog - Database Disclosure
|
4 |
WEB
|
LionTurk
|
|
2009-12-31
|
|
Kayako eSupport 3.04.10 - Cross-Site Scripting / Cross-Site Request Forgery
|
4 |
WEB
|
D3V!L FUCKER
|
|
2009-12-31
|
|
bbScript 1.1.2.1 - 'id' Blind SQL Injection
|
4 |
WEB
|
cOndemned
|
|
2009-12-31
|
|
Invision Power Board (Trial) 2.0.4 - Backup
|
3 |
WEB
|
indoushka
|
|
2009-12-31
|
|
PHP-AddressBook 3.1.5 - 'edit.php' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
PHP-MySQL-Quiz - SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Pre News Manager - 'nid' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
EasyGallery - 'catid' Blind SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Pre ADS Portal - 'cid' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Freewebscript'z Games - Authentication Bypass
|
3 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
PhotoDiary 1.3 - 'lng' Local File Inclusion
|
4 |
WEB
|
cOndemned
|
|
2009-12-31
|
|
Discuz 1.03 - SQL Injection
|
4 |
WEB
|
indoushka
|
|
2009-12-31
|
|
HLstatsX 1.65 - SQL Injection
|
4 |
WEB
|
bnc
|
|
2009-12-31
|
|
Joomla! Component com_mdigg - SQL Injection
|
4 |
WEB
|
wlhaan hacker
|
|
2009-12-31
|
|
Weatimages - Directory Traversal / Local File Inclusion
|
4 |
WEB
|
e.wiZz
|
|
2009-12-31
|
|
fileNice PHP file browser - Local/Remote File Inclusion
|
4 |
WEB
|
e.wiZz
|
|
2009-12-31
|
|
Joomla! Component com_portfol - SQL Injection
|
4 |
WEB
|
wlhaan hacker
|
|
2009-12-31
|
|
pL-PHP Beta 0.9 - Local File Inclusion
|
4 |
WEB
|
cr4wl3r
|
|
2009-12-31
|
|
Classified Ads Scrip - 'store_info.php?id' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
list Web - 'addlink.php?id' SQL Injection
|
3 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Quick Poll - 'code.php?id' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Elkagroup - 'pid' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Jax Calendar 1.34 - Remote Admin Access
|
4 |
WEB
|
Sora
|
|
2009-12-30
|
|
Classifieds Script - 'type' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
e-topbiz Slide Popups 1 PHP - Authentication Bypass
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
e-topbiz banner exchange PHP - Authentication Bypass
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Azadi Network - 'page' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
vBulletin ads_saed 1.5 - 'bnnr.php' SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
K-Rate - SQL Injection
|
5 |
WEB
|
e.wiZz
|
|
2009-12-30
|
|
UranyumSoft Ýlan Servisi - Database Disclosure
|
4 |
WEB
|
LionTurk
|
|
2009-12-30
|
|
Joomla! Component com_rd_download - Local File Disclosure
|
5 |
WEB
|
FL0RiX
|
|
2009-12-30
|
|
Wing FTP Server 3.2.4 - Cross-Site Request Forgery
|
4 |
WEB
|
Ams
|
|
2009-12-30
|
|
gallery_show.asp - GID Blind SQL Injection
|
4 |
WEB
|
R3d-D3V!L
|
|
2009-12-30
|
|
Joomla! Component com_airmonoblock - Blind SQL Injection
|
4 |
WEB
|
Pyske
|
|
2009-12-30
|
|
Aptgp.1.3.0c - Cross-Site Scripting
|
4 |
WEB
|
indoushka
|
|
2009-12-30
|
|
ArticleLive PHP 2005.0.0 - Cross-Site Scripting
|
4 |
WEB
|
indoushka
|
|
2009-12-30
|
|
WHOISCART - Scripting
|
3 |
WEB
|
HAQIQ20
|
|
2009-12-30
|
|
Joomla! Component com_intuit - Apache Directory listing Download
|
4 |
WEB
|
indoushka
|
|
2009-12-30
|
|
FlashChat 3.9.3.1 - PHP info
|
4 |
WEB
|
indoushka
|
|
2009-12-30
|
|
I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
|
4 |
WEB
|
R3d-D3V!L
|
|
2009-12-30
|
|
PHP-Fusion Mod avatar_studio - Local File Inclusion
|
4 |
WEB
|
bonobug
|
|
2009-12-30
|
|
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
|
4 |
WEB
|
Palyo34
|
|
2009-12-30
|
|
LiveZilla 3.1.8.3 - Cross-Site Scripting
|
4 |
WEB
|
MaXe
|
|
2009-12-30
|
|
Diesel Job Site 1.4 - Multiple Vulnerabilities
|
3 |
WEB
|
indoushka
|
|
2009-12-30
|
|
UBBCentral UBB.Threads 6.0 - Remote File Inclusion
|
3 |
WEB
|
indoushka
|
|
2009-12-30
|
|
PicMe 2.1.0 - Arbitrary File Upload
|
5 |
WEB
|
indoushka
|
|
2009-12-30
|
|
I-RATER Basic - Arbitrary File Upload
|
3 |
WEB
|
indoushka
|
|
2009-12-30
|
|
iDevAffiliate 4.0 - Backup
|
5 |
WEB
|
indoushka
|
|
2009-12-30
|
|
ezscheduler - Remote Database Disclosure
|
5 |
WEB
|
RENO
|
|
2009-12-30
|
|
ezguestbook - Remote Database Disclosure
|
4 |
WEB
|
RENO
|
|
2009-12-30
|
|
Web Calendar - Remote Database Disclosure
|
4 |
WEB
|
RENO
|
|
2009-12-30
|
|
RoseOnlineCMS 3 B1 - 'admin' Local File Inclusion
|
4 |
WEB
|
cr4wl3r
|
|
2009-12-30
|
|
My Book World Edition NAS - Multiple Vulnerabilities
|
4 |
WEB
|
emgent
|
|
2009-12-29
|
|
Joomla! Component com_kkcontent - Blind SQL Injection
|
3 |
WEB
|
Pyske
|
|
2009-12-29
|
|
Joomla! Component com_noticia - Cross-Site Scripting
|
4 |
WEB
|
Mr.tro0oqy
|
|
2009-12-29
|
|
Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection
|
4 |
WEB
|
kaMtiEz
|
|
2009-12-29
|
|
eStore 1.0.2 - SQL Injection
|
5 |
WEB
|
R3VAN_BASTARD
|
|
2009-12-29
|
|
ActiveKB - Remote File Inclusion
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
ASP Battle Blog - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
DirectAdmin 1.34.0 - Cross-Site Request Forgery (Add Admin)
|
4 |
WEB
|
SecurityRules
|
|
2009-12-29
|
|
makit news/blog poster 3.1 - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
Fully Functional ASP Forum 1.0 - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
BaalASP 2.0 - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
Uguestbook - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
htmlArea 2.03 - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
Futility Forum 1.0 Revamp - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
AspBB - Active Server Page Bulletin Board Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
PSnews - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-29
|
|
jgbbs-3.0beta1 - Database Disclosure
|
4 |
WEB
|
indoushka
|
|
2009-12-28
|
|
Dren's PHP Uploader - Arbitrary File Upload
|
4 |
WEB
|
Cyb3r IntRue
|
|
2009-12-28
|
|
Sunbyte e-Flower - SQL Injection
|
4 |
WEB
|
Don Tukulesto
|
|
2009-12-28
|
|
Joomla! Component com_calendario - Blind SQL Injection
|
4 |
WEB
|
Mr.tro0oqy
|
|
2009-12-28
|
|
Calendar Express 2.0 - SQL Injection
|
4 |
WEB
|
BAYBORA
|
|
2009-12-28
|
|
PHP Forum ohne My SQL - Arbitrary File Upload
|
5 |
WEB
|
wlhaan hacker
|
|
2009-12-28
|
|
MySimpleFileUploader 1.6 - Arbitrary File Upload
|
4 |
WEB
|
FormatXformat
|
|
2009-12-28
|
|
egegen turkish script - SQL Injection
|
3 |
WEB
|
FormatXformat
|
|
2009-12-28
|
|
Joomla! Component com_if_nexus - Remote File Inclusion
|
4 |
WEB
|
FL0RiX
|
|
2009-12-28
|
|
ASP Simple Blog 3.0 - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
|
2009-12-28
|
|
Yonja - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
|
2009-12-27
|
|
Dream4 Koobi Pro 6.1 Gallery - 'img_id' SQL Injection
|
4 |
WEB
|
BILGE_KAGAN
|
|
2009-12-27
|
|
Mambo Component Material Suche 1.0 - SQL Injection
|
4 |
WEB
|
Gamoscu
|
|
2009-12-26
|
|
phPay 2.2a - Backup
|
4 |
WEB
|
indoushka
|
|
2009-12-27
|
|
Joomla! Component com_dhforum - SQL Injection
|
3 |
WEB
|
ViRuSMaN
|
|
2009-12-27
|
|
Cybershade CMS 0.2 - Remote File Inclusion
|
4 |
WEB
|
Mr.SeCreT
|
|
2009-12-27
|
|
Joomla! Component com_trabalhe_conosco - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
Joomla! Component com_oprykningspoint_mc - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
Joomla! Component com_qpersonel - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
Joomla! Component FacileForms - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
lineaCMS - Cross-Site Scripting
|
4 |
WEB
|
Phenom
|
|
2009-12-27
|
|
com_jm-recommend - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
Joomla! Component com_beeheard - Blind SQL Injection
|
4 |
WEB
|
FL0RiX
|
|
2009-12-27
|
|
com_webcamxp - Cross-Site Scripting
|
4 |
WEB
|
Pyske
|
|
2009-12-27
|
|
PHP upload - 'unijimpe' Arbitrary File Upload
|
4 |
WEB
|
wlhaan hacker
|
|
2009-12-27
|
|
Joomla! Component memorybook 1.2 - Multiple Vulnerabilities
|
4 |
WEB
|
jdc
|
|
2009-12-27
|
|
Joomla! Component com_intuit - Local File Inclusion
|
3 |
WEB
|
FL0RiX
|
|
2009-12-27
|
|
Joomla! Component com_adagency - Local File Inclusion
|
4 |
WEB
|
FL0RiX
|
|
2009-12-27
|
|
info fisier 1.0 - Multiple Vulnerabilities
|
4 |
WEB
|
kaozc9
|
|
2009-12-27
|
|
Smart PHP Uploader 1.0 - Arbitrary File Upload
|
4 |
WEB
|
Phenom
|
|
2009-12-27
|
|
Info Fisier 1.0 - SQL Injection
|
4 |
WEB
|
AnGrY BoY
|
|
2009-12-27
|
|
Nuke - SQL Injection
|
5 |
WEB
|
FormatXformat
|
|
2009-12-26
|
|
PHP Uploader Downloader 2.0 - Cross-Site Scripting
|
5 |
WEB
|
indoushka
|
|
2009-12-26
|
|
Nuked-klaN 1.7.7 - Remote File Inclusion
|
4 |
WEB
|
indoushka
|
|
2009-12-26
|
|
PHP Football 1.0 - Cross-Site Scripting
|
4 |
WEB
|
indoushka
|
|
2009-12-26
|
|
PHP Uploader Downloader 2.0 - Arbitrary File Upload
|
4 |
WEB
|
indoushka
|
