|
2010-01-06
|
|
SpawCMS Editor - Arbitrary File Upload
|
19 |
WEB
|
j4ck
|
|
2010-01-06
|
|
Roundcube Webmail - Multiple Vulnerabilities
|
16 |
WEB
|
j4ck & Globus
|
|
2010-01-06
|
|
Joomla! Component com_king - Blind SQL Injection
|
18 |
WEB
|
Pyske
|
|
2010-01-06
|
|
Joomla! Component com_kk - Blind SQL Injection
|
19 |
WEB
|
Pyske
|
|
2010-01-06
|
|
Milonic News - 'viewnews' SQL Injection
|
18 |
WEB
|
Err0R
|
|
2010-01-06
|
|
D-Link DKVM-IP8 - Cross-Site Scripting
|
19 |
WEB
|
POPCORN
|
|
2010-01-06
|
|
Docebo 3.6.0.2 (stable) - Local File Inclusion
|
18 |
WEB
|
Zer0 Thunder
|
|
2010-01-06
|
|
com_jembed - 'catid' Blind SQL Injection
|
21 |
WEB
|
FL0RiX
|
|
2010-01-06
|
|
AWCM - Database Disclosure
|
18 |
WEB
|
alnjm33
|
|
2010-01-06
|
|
Joomla! Component com_perchagallery - SQL Injection
|
18 |
WEB
|
FL0RiX
|
|
2010-01-06
|
|
Erolife AjxGaleri VT - Database Disclosure
|
20 |
WEB
|
LionTurk
|
|
2010-01-06
|
|
MobPartner Counter - Arbitrary File Upload
|
17 |
WEB
|
wlhaan hacker
|
|
2010-01-06
|
|
VP-ASP Shopping Cart 7.0 - Database Disclosure
|
18 |
WEB
|
indoushka
|
|
2010-01-06
|
|
PHPDug 2.0.0 - Cross-Site Scripting
|
16 |
WEB
|
indoushka
|
|
2010-01-06
|
|
Net Gitar Shop 1.0 - Database Disclosure
|
17 |
WEB
|
indoushka
|
|
2010-01-06
|
|
Lebi soft Ziyaretci Defteri 7.5 - Database Disclosure
|
19 |
WEB
|
indoushka
|
|
2010-01-06
|
|
Myuploader - Arbitrary File Upload
|
20 |
WEB
|
S2K9
|
|
2010-01-06
|
|
PHPDirector Game Edition 0.1 - Local File Inclusion / SQL Injection / Cross-Site Scripting
|
20 |
WEB
|
Zer0 Thunder
|
|
2010-01-06
|
|
ITaco Group ITaco.biz - 'view_news' SQL Injection
|
16 |
WEB
|
Err0R
|
|
2010-01-05
|
|
YP Portal MS-Pro Surumu 1.0 - Database Disclosure
|
22 |
WEB
|
indoushka
|
|
2010-01-04
|
|
KMSoft Guestbook 1.0 - Database Disclosure
|
20 |
WEB
|
LionTurk
|
|
2010-01-04
|
|
LightOpenCMS 0.1 - 'smarty.php' Remote File Inclusion
|
19 |
WEB
|
Zer0 Thunder
|
|
2010-01-04
|
|
ImagoScripts Deviant Art Clone - SQL Injection
|
20 |
WEB
|
alnjm33
|
|
2010-01-04
|
|
W-Agora 4.2.1 - Multiple Vulnerabilities
|
18 |
WEB
|
indoushka
|
|
2010-01-04
|
|
Ninja Blog 4.8 - Multiple Vulnerabilities
|
21 |
WEB
|
indoushka
|
|
2010-01-04
|
|
Joomla! Component com_j-projects - Blind SQL Injection
|
18 |
WEB
|
Pyske
|
|
2010-01-04
|
|
Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion
|
20 |
WEB
|
indoushka
|
|
2010-01-04
|
|
Joomla! Component com_cartikads 1.0 - Arbitrary File Upload
|
21 |
WEB
|
kaMtiEz
|
|
2010-01-04
|
|
Pay Per Minute Video Chat Script 2.0/2.1 - Multiple Vulnerabilities
|
20 |
WEB
|
R3d-D3V!L
|
|
2010-01-04
|
|
Smart Vision Script News - 'newsdetail.php' SQL Injection (2)
|
21 |
WEB
|
darkmasking
|
|
2010-01-03
|
|
Joomla! Component com_oziogallery2 / IMAGIN - Arbitrary File Write
|
21 |
WEB
|
Ubik & er
|
|
2010-01-03
|
|
Elite Gaming Ladders 3.0 - SQL Injection
|
17 |
WEB
|
Sora
|
|
2010-01-03
|
|
Smart Vision Script News - 'newsdetail.php' SQL Injection (1)
|
18 |
WEB
|
Err0R
|
|
2010-01-03
|
|
WorldPay Script Shop - 'productdetail' SQL Injection
|
22 |
WEB
|
Err0R
|
|
2010-01-03
|
|
Simple Portal 2.0 - Authentication Bypass
|
22 |
WEB
|
Red-D3v1L
|
|
2010-01-03
|
|
Acidcat CMS 3.5 - Multiple Vulnerabilities
|
18 |
WEB
|
LionTurk
|
|
2010-01-03
|
|
Joomla! Component Bamboo Simpla Admin Template - SQL Injection
|
18 |
WEB
|
R3d-D3V!L
|
|
2010-01-03
|
|
portal modulnet 1.0 - 'id' SQL Injection
|
18 |
WEB
|
Red-D3v1L
|
|
2010-01-03
|
|
Rezervi 3.0.2 - 'mail.inc.php' Remote File Inclusion
|
22 |
WEB
|
r00t.h4x0r
|
|
2010-01-03
|
|
Joomla! Component com_otzivi - Blind SQL Injection
|
17 |
WEB
|
Cyber_945
|
|
2010-01-03
|
|
Joomla! Component com_doqment - 'cid' SQL Injection
|
18 |
WEB
|
Gamoscu
|
|
2010-01-03
|
|
Joomla! Component Bridge of Hope Template - SQL Injection
|
21 |
WEB
|
R3d-D3V!L
|
|
2010-01-03
|
|
Live TV Script - SQL Injection
|
18 |
WEB
|
R3d-D3V!L
|
|
2010-01-03
|
|
MasterWeb Script 1.0 - 'details&newsID' SQL Injection
|
19 |
WEB
|
Red-D3v1L
|
|
2010-01-03
|
|
Joomla! Component com_hotbrackets - Blind SQL Injection
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_alfresco - SQL Injection
|
17 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_tpjobs - Blind SQL Injection
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_countries - SQL Injection
|
22 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_abbrev - Local File Inclusion
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_bfsurvey - Local File Inclusion
|
19 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_bfsurvey_pro - 'catid' Blind SQL Injection
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_bfsurvey_basic - SQL Injection
|
21 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_biblestudy - Local File Inclusion
|
19 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_cartweberp - Local File Inclusion
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Joomla! Component com_aprice - Blind SQL Injection
|
18 |
WEB
|
FL0RiX
|
|
2010-01-03
|
|
Football Pool 3.1 - Database Disclosure
|
19 |
WEB
|
LionTurk
|
|
2010-01-03
|
|
Service d'upload 1.0.0 - Arbitrary File Upload
|
20 |
WEB
|
indoushka
|
|
2010-01-02
|
|
X7CHAT 1.3.6b - Arbitrary Add Admin
|
19 |
WEB
|
d4rk-h4ck3r
|
|
2010-01-02
|
|
Left 4 Dead Stats 1.1 - SQL Injection
|
17 |
WEB
|
Sora
|
|
2010-01-02
|
|
WordPress Plugin Events - SQL Injection
|
18 |
WEB
|
Red-D3v1L
|
|
2010-01-02
|
|
Joomla! Component com_dailymeals - Local File Inclusion
|
20 |
WEB
|
FL0RiX
|
|
2010-01-02
|
|
AL-Athkat.2.0 - Cross-Site Scripting
|
19 |
WEB
|
indoushka
|
|
2010-01-02
|
|
superlink script 1.0 - 'id' SQL Injection
|
19 |
WEB
|
Red-D3v1L
|
|
2010-01-02
|
|
eazyPortal 1.0.0 - Multiple Vulnerabilities
|
21 |
WEB
|
Milos Zivanovic
|
|
2010-01-02
|
|
Proxyroll.com Clone PHP Script - Insecure Cookie Handling
|
24 |
WEB
|
DigitALL
|
|
2010-01-02
|
|
HLstatsX Community Edition 1.6.5 - Cross-Site Scripting
|
18 |
WEB
|
Sora
|
|
2010-01-02
|
|
DZOIC ClipHouse - Authentication Bypass
|
15 |
WEB
|
R3d-D3V!L
|
|
2010-01-01
|
|
Joomla! Component com_avosbillets - Blind SQL Injection
|
16 |
WEB
|
Pyske
|
|
2010-01-01
|
|
Mini-NUKE 2.3 Freehost - Multiple Vulnerabilities
|
19 |
WEB
|
LionTurk
|
|
2010-01-01
|
|
DZOIC Handshakes - Authentication Bypass
|
19 |
WEB
|
R3d-D3V!L
|
|
2010-01-01
|
|
XlentCMS 1.0.4 - 'downloads.php?cat' SQL Injection
|
19 |
WEB
|
Gamoscu
|
|
2010-01-01
|
|
WD-CMS 3.0 - Multiple Vulnerabilities
|
19 |
WEB
|
Sora
|
|
2010-01-01
|
|
UCStats 1.1 - SQL Injection
|
20 |
WEB
|
Sora
|
|
2010-01-01
|
|
DS CMS 1.0 - 'NewsId' SQL Injection
|
18 |
WEB
|
Palyo34
|
|
2010-01-01
|
|
Cype CMS - SQL Injection
|
20 |
WEB
|
Sora
|
|
2010-01-01
|
|
ArticleLive 1.7.1.2 - 'blogs.php?Id' SQL Injection
|
15 |
WEB
|
BAYBORA
|
|
2010-01-01
|
|
BlogWorx 1.0 Blog - Database Disclosure
|
19 |
WEB
|
LionTurk
|
|
2009-12-31
|
|
Kayako eSupport 3.04.10 - Cross-Site Scripting / Cross-Site Request Forgery
|
18 |
WEB
|
D3V!L FUCKER
|
|
2009-12-31
|
|
bbScript 1.1.2.1 - 'id' Blind SQL Injection
|
16 |
WEB
|
cOndemned
|
|
2009-12-31
|
|
Invision Power Board (Trial) 2.0.4 - Backup
|
15 |
WEB
|
indoushka
|
|
2009-12-31
|
|
PHP-AddressBook 3.1.5 - 'edit.php' SQL Injection
|
17 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
PHP-MySQL-Quiz - SQL Injection
|
17 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Pre News Manager - 'nid' SQL Injection
|
18 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
EasyGallery - 'catid' Blind SQL Injection
|
19 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Pre ADS Portal - 'cid' SQL Injection
|
19 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Freewebscript'z Games - Authentication Bypass
|
17 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
PhotoDiary 1.3 - 'lng' Local File Inclusion
|
19 |
WEB
|
cOndemned
|
|
2009-12-31
|
|
Discuz 1.03 - SQL Injection
|
19 |
WEB
|
indoushka
|
|
2009-12-31
|
|
HLstatsX 1.65 - SQL Injection
|
19 |
WEB
|
bnc
|
|
2009-12-31
|
|
Joomla! Component com_mdigg - SQL Injection
|
20 |
WEB
|
wlhaan hacker
|
|
2009-12-31
|
|
Weatimages - Directory Traversal / Local File Inclusion
|
18 |
WEB
|
e.wiZz
|
|
2009-12-31
|
|
fileNice PHP file browser - Local/Remote File Inclusion
|
18 |
WEB
|
e.wiZz
|
|
2009-12-31
|
|
Joomla! Component com_portfol - SQL Injection
|
19 |
WEB
|
wlhaan hacker
|
|
2009-12-31
|
|
pL-PHP Beta 0.9 - Local File Inclusion
|
21 |
WEB
|
cr4wl3r
|
|
2009-12-31
|
|
Classified Ads Scrip - 'store_info.php?id' SQL Injection
|
17 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
list Web - 'addlink.php?id' SQL Injection
|
19 |
WEB
|
Hussin X
|
|
2009-12-31
|
|
Quick Poll - 'code.php?id' SQL Injection
|
20 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Elkagroup - 'pid' SQL Injection
|
18 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Jax Calendar 1.34 - Remote Admin Access
|
19 |
WEB
|
Sora
|
|
2009-12-30
|
|
Classifieds Script - 'type' SQL Injection
|
16 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
e-topbiz Slide Popups 1 PHP - Authentication Bypass
|
18 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
e-topbiz banner exchange PHP - Authentication Bypass
|
18 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
Azadi Network - 'page' SQL Injection
|
20 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
vBulletin ads_saed 1.5 - 'bnnr.php' SQL Injection
|
16 |
WEB
|
Hussin X
|
|
2009-12-30
|
|
K-Rate - SQL Injection
|
19 |
WEB
|
e.wiZz
|
|
2009-12-30
|
|
UranyumSoft Ýlan Servisi - Database Disclosure
|
18 |
WEB
|
LionTurk
|
|
2009-12-30
|
|
Joomla! Component com_rd_download - Local File Disclosure
|
20 |
WEB
|
FL0RiX
|
|
2009-12-30
|
|
Wing FTP Server 3.2.4 - Cross-Site Request Forgery
|
20 |
WEB
|
Ams
|
|
2009-12-30
|
|
gallery_show.asp - GID Blind SQL Injection
|
19 |
WEB
|
R3d-D3V!L
|
|
2009-12-30
|
|
Joomla! Component com_airmonoblock - Blind SQL Injection
|
16 |
WEB
|
Pyske
|
|
2009-12-30
|
|
Aptgp.1.3.0c - Cross-Site Scripting
|
18 |
WEB
|
indoushka
|
|
2009-12-30
|
|
ArticleLive PHP 2005.0.0 - Cross-Site Scripting
|
20 |
WEB
|
indoushka
|
|
2009-12-30
|
|
WHOISCART - Scripting
|
20 |
WEB
|
HAQIQ20
|
|
2009-12-30
|
|
Joomla! Component com_intuit - Apache Directory listing Download
|
19 |
WEB
|
indoushka
|
|
2009-12-30
|
|
FlashChat 3.9.3.1 - PHP info
|
20 |
WEB
|
indoushka
|
|
2009-12-30
|
|
I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
|
17 |
WEB
|
R3d-D3V!L
|
|
2009-12-30
|
|
PHP-Fusion Mod avatar_studio - Local File Inclusion
|
18 |
WEB
|
bonobug
|
|
2009-12-30
|
|
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
|
17 |
WEB
|
Palyo34
|
|
2009-12-30
|
|
LiveZilla 3.1.8.3 - Cross-Site Scripting
|
19 |
WEB
|
MaXe
|
|
2009-12-30
|
|
Diesel Job Site 1.4 - Multiple Vulnerabilities
|
18 |
WEB
|
indoushka
|
|
2009-12-30
|
|
UBBCentral UBB.Threads 6.0 - Remote File Inclusion
|
17 |
WEB
|
indoushka
|
|
2009-12-30
|
|
PicMe 2.1.0 - Arbitrary File Upload
|
22 |
WEB
|
indoushka
|
|
2009-12-30
|
|
I-RATER Basic - Arbitrary File Upload
|
19 |
WEB
|
indoushka
|
|
2009-12-30
|
|
iDevAffiliate 4.0 - Backup
|
20 |
WEB
|
indoushka
|
|
2009-12-30
|
|
ezscheduler - Remote Database Disclosure
|
18 |
WEB
|
RENO
|
