Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-12-14   Zabbix Agent < 1.6.7 - Remote Bypass 38 WEB Nicob
2009-12-14   NAS Uploader 1.0/1.5 - Arbitrary File Upload 35 WEB ViRuSMaN
2009-12-14   myPHPupload 0.5.1 - Arbitrary File Upload 36 WEB ViRuSMaN
2009-12-14   Maxs AJAX File Uploader - Arbitrary File Upload 35 WEB ViRuSMaN
2009-12-14   Digital Hive - Multiple Vulnerabilities 37 WEB ViRuSMaN
2009-12-14   [WS] upload - Arbitrary File Upload 38 WEB ViRuSMaN
2009-12-14   Quartz Concept Content Manager 3.00 - Authentication Bypass 33 WEB Mr.aFiR
2009-12-14   Redmine 0.8.6 - Cross-Site Request Forgery (Add Admin) 37 WEB p0deje
2009-12-14   eoCMS 0.9.03 - Remote File Inclusion 38 WEB 1nd0n3s14n l4m3r
2009-12-14   Automne.ws CMS 4.0.0rc2 - Multiple Remote File Inclusions 36 WEB 1nd0n3s14n l4m3r
2009-12-14   Ez Guestbook 1.0 - Multiple Vulnerabilities 36 WEB Milos Zivanovic
2009-12-13   Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities 42 WEB Milos Zivanovic
2009-12-13   Ele Medios CMS - SQL Injection 34 WEB Dr.0rYX & Cr3W-DZ
2009-12-13   Piwigo 2.0.6 - Multiple Vulnerabilities 35 WEB mr_me
2009-12-13   Frog CMS 0.9.5 - Cross-Site Request Forgery 40 WEB Milos Zivanovic
2009-12-13   Acc PHP eMail 1.1 - Cross-Site Request Forgery 36 WEB bi0
2009-12-10   phpLDAPadmin - Local File Inclusion 40 WEB ipsecs
2009-12-13   SpireCMS 2.0 - SQL Injection 36 WEB Dr.0rYX & Cr3W-DZ
2009-12-13   Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection 38 WEB SOA Crew
2009-12-13   AccStatistics 1.1 - Cross-Site Request Forgery (Change Admin Settings) 41 WEB Milos Zivanovic
2009-12-13   Interspire Shopping Cart - Full Path Disclosure 36 WEB Mr.aFiR
2009-12-13   Uploadscript 1.0 - Multiple Vulnerabilities 41 WEB Mr.aFiR
2009-12-13   Acc Auto Dealer Script 5.0 - Persistent Cross-Site Scripting / SQL Backup 38 WEB bi0
2009-12-12   ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting / Authentication Bypass) 39 WEB bi0
2009-12-12   Miniweb 2.0 - Full Path Disclosure 41 WEB Salvatore Fresta
2009-12-11   B2C Booking Centre Systems - SQL Injection 37 WEB Salvatore Fresta
2009-12-11   XAMPP 1.7.2 - Change Administrative Password 40 WEB bi0
2009-12-11   phpCollegeExchange 0.1.5c - Multiple SQL Injections 39 WEB Salvatore Fresta
2009-12-11   Illogator Shop - SQL Injection Bypass 39 WEB bi0
2009-12-11   Chipmunk NewsLetter - Cross-Site Request Forgery 38 WEB Milos Zivanovic
2005-05-07   Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities 40 WEB Thomas Liam Romanis
2009-12-11   E-Store - SQL Injection 42 WEB Salvatore Fresta
2009-12-11   Digital Scribe 1.4.1 - Multiple SQL Injections 35 WEB Salvatore Fresta
2009-12-11   oBlog - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Admin Brute Force 34 WEB Milos Zivanovic
2009-12-10   Nuggetz CMS 1.0 - Remote Code Execution 36 WEB Amol Naik
2009-12-11   Billwerx RC 3.1 - Multiple Vulnerabilities 39 WEB mr_me
2009-12-10   OPMANAGER - Blind SQL Injection / XPath Injection 37 WEB Asheesh kumar Mani Tripathi
2009-12-10   PHP Inventory 1.2 - Authentication Bypass 39 WEB mr_me
2009-12-10   Joomla! Component Mamboleto 2.0 RC3 - Remote File Inclusion 38 WEB Don Tukulesto
2009-12-10   Free ASP Upload - Arbitrary File Upload 40 WEB Mr.aFiR
2009-12-10   Joomla! Component com_jphoto - 'id' SQL Injection 35 WEB kaMtiEz
2009-12-10   Joomla! Component com_jsjobs 1.0.5.6 - SQL Injection 36 WEB kaMtiEz
2009-12-09   TestLink Test Management and Execution System - Multiple Cross-Site Scripting / Injection Vulnerabil 37 WEB Core Security
2009-12-09   Real Estate Portal X.0 - Authentication Bypass 39 WEB AnTi SeCuRe
2009-12-08   AlefMentor 2.0 < 5.0 - 'id' SQL Injection 37 WEB Red-D3v1L
2009-12-08   Alqatari group 1.0 < 5.0 - 'id' SQL Injection 37 WEB Red-D3v1L
2009-12-08   Joomla! Component com_job - 'showMoreUse' SQL Injection 40 WEB Palyo34
2009-12-08   Viscacha 0.8 Gold - Persistent Cross-Site Scripting 40 WEB mr_me
2009-12-07   MarieCMS 0.9 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting 36 WEB Amol Naik
2009-12-08   IRAN N.E.T E-Commerce Group - SQL Injection 37 WEB Dr.0rYX & Cr3W-DZ
2009-12-07   Barracuda IMFirewall 620 - Multiple Vulnerabilities 35 WEB Global-Evolution
2009-12-07   SiSplet CMS 2008-01-24 - Multiple Remote File Inclusions 38 WEB cr4wl3r
2009-12-07   Chipmunk NewsLetter - Persistent Cross-Site Scripting 41 WEB mr_me
2009-12-06   iWeb HTTP Server - Directory Traversal 39 WEB mr_me
2009-12-06   Elkagroup - SQL Injection 39 WEB SadHaCkEr
2009-12-06   AROUNDMe 1.1 - 'language_path' Remote File Inclusion 39 WEB cr4wl3r
2009-12-05   WordPress Plugin Image Manager - Arbitrary File Upload 39 WEB DigitALL
2009-12-05   phpShop 0.8.1 - Multiple Vulnerabilities 39 WEB Andrea Fabrizi
2009-12-04   Joomla! Component yt_color YOOOtheme - Cross-Site Scripting / Cookie Stealing 38 WEB andresg888
2009-12-04   BM Classifieds Ads - SQL Injection 38 WEB Dr.0rYX & Cr3W-DZ
2009-12-04   Joomla! Component com_joomgallery 1.5.x - &func Incorrect Flood Filter 42 WEB Jbyte
2009-12-04   Achievo 1.4.2 - Persistent Cross-Site Scripting 35 WEB Nahuel Grisolia
2009-12-04   Achievo 1.4.2 - Arbitrary File Upload 38 WEB Nahuel Grisolia
2009-12-04   UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions 37 WEB R3VAN_BASTARD
2009-12-04   Invision Power Board 2.3.6/3.0.4 - Local File Inclusion / SQL Injection 42 WEB Dawid Golunski
2009-12-04   427BB 2.3.2 - SQL Injection 36 WEB cr4wl3r
2009-12-04   GeN3 forum 1.3 - SQL Injection 40 WEB Dr.0rYX & Cr3W-DZ
2009-12-03   Vivid Ads Shopping Cart - 'prodid' SQL Injection 36 WEB Yakir Wizman
2009-11-24   OSI Codes PHP Live! Support 3.1 - Remote File Inclusion 35 WEB Don Tukulesto
2009-11-27   PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection 39 WEB K053
2009-12-01   Apache Tomcat 3.2.1 - 404 Error Page Cross-Site Scripting 37 WEB MustLive
2009-12-01   Joomla! Component ProofReader 1.0 RC6 - Cross-Site Scripting 35 WEB MustLive
2009-12-03   Theeta CMS - Multiple Vulnerabilities 40 WEB c0dy
2009-11-25   Power BB 1.8.3 - Remote File Inclusions 40 WEB DigitALL
2009-12-03   SAPID SHOP 1.3 - Remote File Inclusion 34 WEB cr4wl3r
2009-09-07   MundiMail 0.8.2 - Remote Code Execution 38 WEB Dedalo
2009-11-25   OpenCSP - Multiple Remote File Inclusions 35 WEB EANgel
2009-12-01   Public Media Manager - Remote File Inclusion 36 WEB cr4wl3r
2009-11-30   ita-forum 5.1.32 - SQL Injection 38 WEB BAYBORA
2009-12-03   Thatware 0.5.3 - Multiple Remote File Inclusions 35 WEB cr4wl3r
2009-12-03   Huawei MT882 Modem/Router - Multiple Vulnerabilities 41 WEB DecodeX01
2009-12-02   Kide Shoutbox 0.4.6 - Cross-Site Scripting / AXFR 36 WEB andresg888
2009-12-02   Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities 38 WEB SimpleAudit Team
2009-12-01   Joomla! Component MojoBlog 0.15 - Multiple Remote File Inclusions 37 WEB kaMtiEz
2009-12-01   Joomla! Component Joaktree 1.0 - SQL Injection 36 WEB Don Tukulesto
2009-12-01   Quate CMS 0.3.5 - Local/Remote File Inclusion 36 WEB cr4wl3r
2009-12-01   ISPworker 1.23 - Remote File Disclosure 34 WEB cr4wl3r
2009-12-01   dotDefender 3.8-5 - Remote Command Execution 37 WEB John Dos
2009-12-01   Robert Zimmerman PHP / MySQL Scripts - Authentication Bypass 35 WEB DUNDEE
2009-12-01   Ciamos CMS 0.9.5 - 'module_path' Remote File Inclusion 39 WEB cr4wl3r
2009-11-30   WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter 34 WEB Jbyte
2009-11-30   Xxasp 3.3.2 - SQL Injection 42 WEB Secu_lab_ir
2009-11-30   Eshopbuilde CMS - SQL Injection 41 WEB Isfahan
2009-11-30   Joomla! Component Quick News - SQL Injection 37 WEB Don Tukulesto
2009-11-30   Joomla! Component MusicGallery - SQL Injection 37 WEB Don Tukulesto
2009-11-29   AdaptCMS Lite 1.5 - Remote File Inclusion 37 WEB v3n0m
2009-11-29   Sugar CRM 5.5.0.rc2/5.2.0j - Multiple Vulnerabilities 39 WEB waraxe
2009-11-27   Micronet SP1910 Data Access Controller UI - Cross-Site Scripting / HTML Code Injection 38 WEB K053
2009-11-29   SweetRice 0.5.3 - Remote File Inclusion 35 WEB cr4wl3r
2009-11-28   phpBazar 2.1.1fix - 'cid' SQL Injection 36 WEB MizoZ
2009-11-28   Uploaderr 1.0 File Hosting Script - Arbitrary File Upload 37 WEB DigitALL
2009-11-28   Joomla! Component com_lyftenbloggie 1.04 - SQL Injection 36 WEB kaMtiEz
2009-11-26   Flashden - Multiple Arbitrary File Uploads 35 WEB DigitALL
2009-11-26   Cacti 0.8.7e - Multiple Vulnerabilities 41 WEB Moritz Naumann
2009-11-25   phpBazar-2.1.1fix - Remote Administration-Panel 39 WEB kurdish hackers team
2009-11-25   Joomla! Component com_gcalendar 1.1.2 - 'gcid' SQL Injection 39 WEB Yogyacarderlink Crew
2009-11-25   Radio istek scripti 2.5 - Remote Configuration Disclosure 36 WEB kurdish hackers team
2009-11-25   Fake Hit Generator 2.2 - Arbitrary File Upload 41 WEB DigitALL
2009-11-25   WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting 36 WEB MustLive
2009-11-25   Joomla! Component com_mygallery - 'cid' SQL Injection 35 WEB S@BUN
2006-05-26   MDaemon WebAdmin 2.0.x - SQL Injection 36 WEB KOUSULIN
2009-11-24   Quick.Cart 3.4 / Quick.CMS 2.4 - Cross-Site Request Forgery 35 WEB Alice Kaerast
2009-11-24   W3infotech - Authentication Bypass 40 WEB ViRuS_HiMa
2009-11-24   pointcomma 3.8b2 - Remote File Inclusion 35 WEB cr4wl3r
2009-11-24   phptraverse 0.8.0 - Remote File Inclusion 36 WEB cr4wl3r
2009-11-24   outreach project tool 1.2.6 - Remote File Inclusion 35 WEB cr4wl3r
2009-11-24   NukeHall 0.3 - Multiple Remote File Inclusions 35 WEB cr4wl3r
2009-11-24   kr-web 1.1b2 - Remote File Inclusion 37 WEB cr4wl3r
2009-11-23   Joomla! Component mygallery - 'farbinform_krell' SQL Injection 41 WEB Manas58 BAYBORA
2009-10-14   Everfocus 1.4 - EDSR Remote Authentication Bypass 35 WEB Andrea Fabrizi
2009-11-21   Joomla! Component Com_Joomclip - 'cat' SQL Injection 37 WEB 599eme Man
2009-11-21   Betsy CMS versions 3.5 - Local File Inclusion 36 WEB MizoZ
2009-11-19   Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload) 41 WEB daath
2005-06-15   Bitrix Site Manager 4.0.5 - Remote File Inclusion 38 WEB Don Tukulesto
2009-11-16   Simplog 0.9.3.2 - Multiple Vulnerabilities 38 WEB Amol Naik