|
2009-12-21
|
|
PDQ Script 1.0 - 'listingid' SQL Injection
|
10 |
WEB
|
SecurityRules
|
|
2009-12-13
|
|
Joomla! Component com_jcalpro 1.5.3.6 - Remote File Inclusion
|
14 |
WEB
|
kaMtiEz
|
|
2009-12-21
|
|
VideoCMS 3.1 - SQL Injection
|
11 |
WEB
|
kaMtiEz
|
|
2009-12-21
|
|
webCocoon's simpleCMS - SQL Injection
|
11 |
WEB
|
_ÝNFAZCI_
|
|
2009-12-21
|
|
PHPhotoalbum - Arbitrary File Upload
|
12 |
WEB
|
wlhaan hacker
|
|
2009-12-21
|
|
social Web CMS Beta 2 - Multiple Vulnerabilities
|
10 |
WEB
|
cp77fk4r
|
|
2009-12-21
|
|
Absolute Shopping Cart - SQL Injection
|
10 |
WEB
|
Gamoscu
|
|
2009-12-21
|
|
Ultimate Uploader 1.3 - Arbitrary File Upload
|
10 |
WEB
|
Master Mind
|
|
2009-12-21
|
|
Angelo-emlak 1.0 - Database Disclosure
|
11 |
WEB
|
LionTurk
|
|
2009-12-21
|
|
Drumbeat CMS 1.0 - SQL Injection
|
9 |
WEB
|
Sora
|
|
2009-12-20
|
|
phUploader 2 - Arbitrary File Upload
|
10 |
WEB
|
wlhaan-hacker
|
|
2009-12-20
|
|
8Pixel.net 2009. - Database Disclosure
|
10 |
WEB
|
LionTurk
|
|
2009-12-20
|
|
4Images 1.7.1 - SQL Injection
|
9 |
WEB
|
Master Mind
|
|
2009-12-20
|
|
PacketFence Network Access Controller - Cross-Site Scripting
|
10 |
WEB
|
K053
|
|
2009-12-20
|
|
Pandora FMS Monitoring Application 2.1.x /3.x - SQL Injection
|
10 |
WEB
|
Global-Evolution
|
|
2009-12-20
|
|
Ignition 1.2 - Multiple Local File Inclusions
|
10 |
WEB
|
cOndemned
|
|
2009-12-20
|
|
Simplicity oF Upload 1.3.2 - Arbitrary File Upload
|
9 |
WEB
|
Master Mind
|
|
2009-12-20
|
|
Advance Biz Limited 1.0 - Authentication Bypass
|
10 |
WEB
|
PaL-D3v1L
|
|
2009-12-20
|
|
Explorer 7.20 - Cross-Site Scripting
|
10 |
WEB
|
Metropolis
|
|
2009-12-19
|
|
Saurus CMS 4.6.4 - Multiple Remote File Inclusions
|
10 |
WEB
|
cr4wl3r
|
|
2009-12-19
|
|
Ptag 4.0.0 - Multiple Remote File Inclusions
|
9 |
WEB
|
cr4wl3r
|
|
2009-12-19
|
|
CFAGCMS - SQL Injection
|
9 |
WEB
|
cr4wl3r
|
|
2009-12-19
|
|
Lizard Cart - Multiple SQL Injections
|
9 |
WEB
|
cr4wl3r
|
|
2009-12-19
|
|
Toast Forums 1.8 - Database Disclosure
|
10 |
WEB
|
ViRuSMaN
|
|
2009-12-19
|
|
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities
|
10 |
WEB
|
Global-Evolution
|
|
2009-12-19
|
|
FestOs 2.2.1 - Multiple Remote File Inclusions
|
10 |
WEB
|
cr4wl3r
|
|
2009-12-18
|
|
Joomla! Component City Portal - Blind SQL Injection
|
9 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Joomla! Component Event Manager - Blind SQL Injection
|
12 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Joomla! Component com_zcalendar - Blind SQL Injection
|
9 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Joomla! Component com_acmisc - SQL Injection
|
10 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Joomla! Component com_digistore - SQL Injection
|
10 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Joomla! Component com_jbook - Blind SQL Injection
|
12 |
WEB
|
FL0RiX
|
|
2009-12-18
|
|
Schweizer NISADA Communication CMS - SQL Injection
|
10 |
WEB
|
Dr.0rYX & Cr3W-DZ
|
|
2009-12-18
|
|
E-Smart Cart - SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-18
|
|
gpEasy 1.5RC3 - Remote File Inclusion
|
10 |
WEB
|
cr4wl3r
|
|
2009-12-18
|
|
WordPress Plugin Pyrmont 2.x - SQL Injection
|
11 |
WEB
|
Gamoscu
|
|
2009-12-17
|
|
Rumba XM - Cross-Site Scripting
|
12 |
WEB
|
Hadi Kiamarsi
|
|
2009-12-17
|
|
VirtueMart - 'Product_ID' SQL Injection
|
10 |
WEB
|
Neo-GabrieL
|
|
2009-12-17
|
|
Piwik Open Flash Chart - Remote Code Execution
|
10 |
WEB
|
Braeden Thomas
|
|
2009-12-17
|
|
jCore CMS - Cross-Site Scripting
|
10 |
WEB
|
loneferret
|
|
2009-12-17
|
|
eWebquiz 8 - Blind SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
V.H.S. Booking - 'hotel_habitaciones.php?HotelID' SQL Injection
|
11 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
ReVou Software - SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
ActiveBuyandSell 6.2 - 'buyersend.asp?catid' Blind SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
Pre Jobo .NET - Authentication Bypass
|
9 |
WEB
|
bi0
|
|
2009-12-17
|
|
Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (1)
|
10 |
WEB
|
Stink
|
|
2009-12-17
|
|
Pre Job Board 1.0 - Authentication Bypass
|
10 |
WEB
|
bi0
|
|
2009-12-17
|
|
Active Auction House 3.6 - Blind SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
Matrimony Script - Cross-Site Request Forgery
|
9 |
WEB
|
bi0
|
|
2009-12-17
|
|
Jobscript4Web 3.5 - Multiple Cross-Site Request Forgery Vulnerabilities
|
9 |
WEB
|
bi0
|
|
2009-12-17
|
|
Basic PHP Events Lister 2 - Arbitrary Add Admin
|
9 |
WEB
|
RENO
|
|
2009-12-17
|
|
dblog - 'dblog.mdb' Remote Database Disclosure
|
11 |
WEB
|
AnTi SeCuRe
|
|
2009-12-17
|
|
Sitecore Staging Module 5.4.0 - Authentication Bypass / File Manipulation
|
9 |
WEB
|
L. Weichselbaum
|
|
2009-12-17
|
|
Horde 3.3.5 - 'PHP_SELF' Cross-Site Scripting
|
11 |
WEB
|
Juan Galiana Lara
|
|
2009-12-17
|
|
PHP F1 Upload - Arbitrary File Upload
|
11 |
WEB
|
wlhaan hacker
|
|
2009-12-17
|
|
Charon Cart 3.0 - 'ContentID' Blind SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-17
|
|
Multi-Lingual Application - Blind SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Smart ASPad - 'campaignEdit.asp?CCam' Blind SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
ASPGuest - 'edit.asp?ID' Blind SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Pre Hotels&Resorts Management System - Authentication Bypass
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Texas Rankem - 'player_id' SQL Injection
|
9 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Omnistar Affiliate - Authentication Bypass
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
eUploader PRO 3.1.1 - Cross-Site Request Forgery / Cross-Site Scripting
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-16
|
|
Pre Hospital Management System - 'department.php?id' SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
File Share 1.0 - SQL Injection
|
10 |
WEB
|
TOP SAT 13
|
|
2009-12-16
|
|
Digiappz Freekot - Authentication Bypass
|
11 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
PhpLinkExchange 1.02 - Cross-Site Scripting / Upload
|
10 |
WEB
|
Stink'
|
|
2009-12-16
|
|
D-Tendencia Bt 2008 - SQL Injection
|
10 |
WEB
|
Dr.0rYX & Cr3W-DZ
|
|
2009-12-16
|
|
WHMCompleteSolution CMS - SQL Injection
|
10 |
WEB
|
Dr.0rYX & Cr3W-DZ
|
|
2009-12-16
|
|
Pre Hospital Management System - Authentication Bypass
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection
|
10 |
WEB
|
Juan Galiana Lara
|
|
2009-12-16
|
|
Drupal Module Sections - Cross-Site Scripting
|
10 |
WEB
|
Justin C. Klein Keane
|
|
2009-12-16
|
|
GuestBookPro Script - Remote Database Disclosure
|
10 |
WEB
|
ViRuSMaN
|
|
2009-12-16
|
|
Codefixer Membership - Remote Database Disclosure
|
10 |
WEB
|
ViRuSMaN
|
|
2009-12-16
|
|
OSSIM 2.1.5 - Arbitrary File Upload
|
10 |
WEB
|
Nahuel Grisolia
|
|
2009-12-16
|
|
OSSIM 2.1.5 - Remote Command Execution
|
11 |
WEB
|
Nahuel Grisolia
|
|
2009-12-16
|
|
OSSIM 2.1.5 - SQL Injection
|
10 |
WEB
|
Nahuel Grisolia
|
|
2009-12-16
|
|
iSupport 1.8 - Cross-Site Scripting / Local File Inclusion
|
12 |
WEB
|
Stink & Essandre
|
|
2009-12-16
|
|
RecipePal 1.0 - SQL Injection
|
11 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Article Directory - SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
V-SpacePal - SQL Injection
|
11 |
WEB
|
R3d-D3V!L
|
|
2009-12-16
|
|
Recipe Script 5.0 - Arbitrary File Upload / Cross-Site Request Forgery / Cross-Site Scripting
|
11 |
WEB
|
Milos Zivanovic
|
|
2009-12-16
|
|
JM CMS 1.0 - Authentication Bypass
|
10 |
WEB
|
Red-D3v1L
|
|
2009-12-16
|
|
family connections 2.1.3 - Multiple Vulnerabilities
|
10 |
WEB
|
Salvatore Fresta
|
|
2009-12-15
|
|
SitePal 1.1 - Authentication Bypass
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-15
|
|
GalleryPal FE 1.5 - Authentication Bypass
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-15
|
|
iGaming CMS 1.5 - Cross-Site Request Forgery
|
10 |
WEB
|
Nex
|
|
2009-12-15
|
|
DubSite CMS 1.0 - Cross-Site Request Forgery
|
10 |
WEB
|
Connection
|
|
2009-12-15
|
|
Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities
|
12 |
WEB
|
Milos Zivanovic
|
|
2009-12-15
|
|
Ez Blog 1.0 - Cross-Site Scripting / Cross-Site Request Forgery
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-15
|
|
LinkPal 1.0 - SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-15
|
|
ClickTrackerASP - 'sitedetails.asp?siteid' SQL Injection
|
10 |
WEB
|
R3d-D3V!L
|
|
2009-12-15
|
|
DesigNsbyjm CMS 1.0 - 'PageId' SQL Injection
|
10 |
WEB
|
Red-D3v1L
|
|
2009-12-15
|
|
Ez Faq Maker - Multiple Vulnerabilities
|
11 |
WEB
|
Milos Zivanovic
|
|
2009-12-15
|
|
SitioOnline - SQL Injection
|
10 |
WEB
|
4lG3r14n0-t3r0
|
|
2009-12-15
|
|
Ez News Manager / Pro - Cross-Site Request Forgery (Change Admin Password)
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-15
|
|
Linkster - PHP/MySQL SQL Injection
|
12 |
WEB
|
Angela Zhang
|
|
2009-12-15
|
|
EEGshop 1.2 - SQL Injection
|
10 |
WEB
|
Securitylab.ir
|
|
2009-12-14
|
|
Oracle E-Business Suite - Multiple Vulnerabilities
|
10 |
WEB
|
Hacktics
|
|
2009-12-14
|
|
Traidnt Discovery - Cross-Site Request Forgery (Create Staff Account)
|
8 |
WEB
|
G0D-F4Th3r
|
|
2009-12-14
|
|
WSCreator 1.1 - Blind SQL Injection
|
10 |
WEB
|
Salvatore Fresta
|
|
2009-12-14
|
|
Tender System 0.9.5b - Local File Inclusion
|
10 |
WEB
|
Packetdeath
|
|
2009-12-14
|
|
mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-14
|
|
Text Exchange Pro - Cross-Site Request Forgery (Add Admin)
|
11 |
WEB
|
bi0
|
|
2009-12-14
|
|
Easy Banner Pro - Cross-Site Request Forgery (Add Admin)
|
10 |
WEB
|
bi0
|
|
2009-12-14
|
|
Ez Poll Hoster - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-14
|
|
AdManagerPro - Cross-Site Request Forgery (Add Admin)
|
12 |
WEB
|
bi0
|
|
2009-12-14
|
|
Smart PHP Subscriber - Multiple Disclosure Vulnerabilities
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-14
|
|
Link Up Gold - Cross-Site Request Forgery (Add Admin)
|
10 |
WEB
|
bi0
|
|
2009-12-14
|
|
Mail Manager Pro - Cross-Site Request Forgery (Change Admin Password)
|
9 |
WEB
|
Milos Zivanovic
|
|
2009-12-14
|
|
Zabbix Server - Multiple Vulnerabilities
|
9 |
WEB
|
Nicob
|
|
2009-12-14
|
|
Zabbix Agent < 1.6.7 - Remote Bypass
|
10 |
WEB
|
Nicob
|
|
2009-12-14
|
|
NAS Uploader 1.0/1.5 - Arbitrary File Upload
|
11 |
WEB
|
ViRuSMaN
|
|
2009-12-14
|
|
myPHPupload 0.5.1 - Arbitrary File Upload
|
9 |
WEB
|
ViRuSMaN
|
|
2009-12-14
|
|
Maxs AJAX File Uploader - Arbitrary File Upload
|
9 |
WEB
|
ViRuSMaN
|
|
2009-12-14
|
|
Digital Hive - Multiple Vulnerabilities
|
8 |
WEB
|
ViRuSMaN
|
|
2009-12-14
|
|
[WS] upload - Arbitrary File Upload
|
9 |
WEB
|
ViRuSMaN
|
|
2009-12-14
|
|
Quartz Concept Content Manager 3.00 - Authentication Bypass
|
8 |
WEB
|
Mr.aFiR
|
|
2009-12-14
|
|
Redmine 0.8.6 - Cross-Site Request Forgery (Add Admin)
|
9 |
WEB
|
p0deje
|
|
2009-12-14
|
|
eoCMS 0.9.03 - Remote File Inclusion
|
9 |
WEB
|
1nd0n3s14n l4m3r
|
|
2009-12-14
|
|
Automne.ws CMS 4.0.0rc2 - Multiple Remote File Inclusions
|
9 |
WEB
|
1nd0n3s14n l4m3r
|
|
2009-12-14
|
|
Ez Guestbook 1.0 - Multiple Vulnerabilities
|
11 |
WEB
|
Milos Zivanovic
|
|
2009-12-13
|
|
Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities
|
10 |
WEB
|
Milos Zivanovic
|
|
2009-12-13
|
|
Ele Medios CMS - SQL Injection
|
9 |
WEB
|
Dr.0rYX & Cr3W-DZ
|
|
2009-12-13
|
|
Piwigo 2.0.6 - Multiple Vulnerabilities
|
11 |
WEB
|
mr_me
|
