|
2009-08-28
|
|
Silurus Classifieds System - 'category.php' SQL Injection
|
26 |
WEB
|
Mr.SQL
|
|
2009-08-27
|
|
Uiga Church Portal - 'year' SQL Injection
|
25 |
WEB
|
Mr.SQL
|
|
2009-08-27
|
|
Joomla! Component com_digifolio 1.52 - 'id' SQL Injection
|
22 |
WEB
|
v3n0m
|
|
2009-08-26
|
|
PHPSANE 0.5.0 - 'save.php' Remote File Inclusion
|
23 |
WEB
|
CoBRa_21
|
|
2009-08-26
|
|
allomani 2007 - 'cat' SQL Injection
|
22 |
WEB
|
NeX HaCkEr
|
|
2009-08-26
|
|
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
|
23 |
WEB
|
Mr.SQL
|
|
2009-08-26
|
|
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities
|
21 |
WEB
|
Andrew Horton
|
|
2009-08-26
|
|
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
|
24 |
WEB
|
ZhaoHuAn
|
|
2009-08-26
|
|
Simple CMS Framework 1.0 - 'page' SQL Injection
|
22 |
WEB
|
Red-D3v1L
|
|
2009-08-26
|
|
Moa Gallery 1.2.0 - 'p_filename' Remote File Disclosure
|
22 |
WEB
|
GoLd_M
|
|
2009-08-26
|
|
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
|
22 |
WEB
|
Moudi
|
|
2009-08-26
|
|
Moa Gallery 1.2.0 - 'index.php?action' SQL Injection
|
24 |
WEB
|
Mr.SQL
|
|
2009-08-26
|
|
Moa Gallery 1.2.0 - Multiple Remote File Inclusions
|
26 |
WEB
|
cr4wl3r
|
|
2009-08-25
|
|
EMO Breader Manager - 'video.php?movie' SQL Injection
|
24 |
WEB
|
Mr.SQL
|
|
2009-08-25
|
|
TCPDB 3.8 - Remote Content Change Bypass
|
20 |
WEB
|
Securitylab.ir
|
|
2009-08-25
|
|
Turnkey Arcade Script - SQL Injection (2)
|
23 |
WEB
|
Red-D3v1L
|
|
2009-08-25
|
|
Joomla! Component com_siirler 1.2 - 'sid' SQL Injection
|
23 |
WEB
|
v3n0m
|
|
2009-08-24
|
|
Geeklog 1.6.0sr1 - Arbitrary File Upload
|
21 |
WEB
|
JaL0h
|
|
2009-08-24
|
|
Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection
|
24 |
WEB
|
Chip d3 bi0s
|
|
2009-08-24
|
|
Joomla! Component com_ninjamonial 1.1 - 'testimID' SQL Injection
|
22 |
WEB
|
Chip d3 bi0s
|
|
2009-08-24
|
|
New5starRating 1.0 - 'rating.php' SQL Injection
|
23 |
WEB
|
Bgh7
|
|
2009-08-24
|
|
ITechBids 8.0 - 'ProductID' Blind SQL Injection
|
25 |
WEB
|
Mr.SQL
|
|
2009-08-24
|
|
humanCMS - Authentication Bypass
|
27 |
WEB
|
next
|
|
2009-08-24
|
|
Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure
|
24 |
WEB
|
Septemb0x
|
|
2009-11-16
|
|
Dow Group - 'new.php' SQL Injection
|
23 |
WEB
|
ProF.Code
|
|
2009-08-24
|
|
Lanai Core 0.6 - Remote File Disclosure / Info Disclosure
|
24 |
WEB
|
Khashayar Fereidani
|
|
2009-08-24
|
|
Cuteflow 2.10.3 - 'edituser.php' Security Bypass
|
25 |
WEB
|
Hever Costa Rocha
|
|
2009-08-24
|
|
PHP Dir Submit - 'aid' SQL Injection
|
24 |
WEB
|
Mr.tro0oqy
|
|
2009-08-24
|
|
Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling
|
29 |
WEB
|
Mr.tro0oqy
|
|
2009-08-24
|
|
Moa Gallery 1.1.0 - 'gallery_id' SQL Injection
|
24 |
WEB
|
Mr.tro0oqy
|
|
2009-08-18
|
|
asaher pro 1.0.4 - Remote Database Backup
|
26 |
WEB
|
alnjm33
|
|
2009-08-18
|
|
Traidnt UP 2.0 - SQL Injection
|
22 |
WEB
|
Jafer Al Zidjali
|
|
2009-08-18
|
|
Best Dating Script - Arbitrary File Upload
|
23 |
WEB
|
jetli007
|
|
2009-08-18
|
|
CBAuthority - ClickBank Affiliate Management SQL Injection
|
24 |
WEB
|
Angela Chang
|
|
2009-08-18
|
|
PHP Email Manager - 'remove.php?ID' SQL Injection
|
24 |
WEB
|
MuShTaQ
|
|
2009-08-18
|
|
Ultimate Fade-in Slideshow 1.51 - Arbitrary File Upload
|
22 |
WEB
|
NeX HaCkEr
|
|
2009-08-18
|
|
phpfreeBB 1.0 - Blind SQL Injection
|
23 |
WEB
|
Moudi
|
|
2009-08-18
|
|
Fotoshow PRO - 'category' SQL Injection
|
24 |
WEB
|
darkmasking
|
|
2009-08-18
|
|
Joomla! Component MisterEstate - Blind SQL Injection
|
22 |
WEB
|
jdc
|
|
2009-08-18
|
|
Infinity 2.x - 'options[style_dir]' Local File Disclosure
|
20 |
WEB
|
SwEET-DeViL
|
|
2009-08-18
|
|
E CMS 1.0 - 'index.php?s' SQL Injection
|
23 |
WEB
|
Red-D3v1L
|
|
2009-08-18
|
|
autonomous lan party 0.98.3 - Remote File Inclusion
|
22 |
WEB
|
cr4wl3r
|
|
2009-08-18
|
|
2WIRE Gateway - Authentication Bypass / Password Reset (2)
|
23 |
WEB
|
bugz
|
|
2009-08-18
|
|
Videos Broadcast Yourself 2 - 'UploadID' SQL Injection
|
22 |
WEB
|
Mr.SQL
|
|
2009-08-18
|
|
Arcadem Pro 2.8 - 'article' Blind SQL Injection
|
25 |
WEB
|
Mr.SQL
|
|
2009-08-18
|
|
DreamPics Builder - 'exhibition_id' SQL Injection
|
23 |
WEB
|
Mr.SQL
|
|
2009-08-18
|
|
vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross
|
26 |
WEB
|
USH
|
|
2009-08-18
|
|
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
|
24 |
WEB
|
Kernel_Panik
|
|
2009-08-18
|
|
AJ Auction Pro OOPD 2.x - 'id' SQL Injection
|
19 |
WEB
|
NoGe
|
|
2009-08-18
|
|
BaBB 2.8 - Remote Code Injection
|
23 |
WEB
|
Khashayar Fereidani
|
|
2009-08-18
|
|
PHP-Lance 1.52 - Multiple Local File Inclusions
|
23 |
WEB
|
jetli007
|
|
2009-08-14
|
|
MyWeight 1.0 - Arbitrary File Upload
|
23 |
WEB
|
Mr.tro0oqy
|
|
2009-08-14
|
|
DS CMS 1.0 - 'nFileId' SQL Injection
|
22 |
WEB
|
Mr.tro0oqy
|
|
2009-08-14
|
|
PHP Competition System 0.84 - 'competition' SQL Injection
|
23 |
WEB
|
Mr.SQL
|
|
2009-08-14
|
|
Ignition 1.2 - 'comment' Remote Code Injection
|
23 |
WEB
|
Khashayar Fereidani
|
|
2009-08-13
|
|
tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure
|
23 |
WEB
|
[]ViZiOn
|
|
2009-08-13
|
|
Gazelle CMS 1.0 - Arbitrary File Upload
|
22 |
WEB
|
RoMaNcYxHaCkEr
|
|
2009-08-27
|
|
WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution
|
26 |
WEB
|
Raz0r
|
|
2009-08-13
|
|
JBLOG 1.5.1 - SQL Table Backup
|
24 |
WEB
|
Ams
|
|
2009-08-12
|
|
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
|
23 |
WEB
|
IHTeam
|
|
2009-08-12
|
|
Plume CMS 1.2.3 - Multiple SQL Injections
|
21 |
WEB
|
Sense of Security
|
|
2009-08-12
|
|
Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category
|
24 |
WEB
|
ilker Kandemir
|
|
2009-08-12
|
|
Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling
|
24 |
WEB
|
Pedro Laguna
|
|
2009-08-11
|
|
OCS Inventory NG 1.2.1 - 'systemid' SQL Injection
|
27 |
WEB
|
Guilherme Marinheiro
|
|
2009-08-11
|
|
Joomla! Component idoblog 1.1b30 (com_idoblog) - SQL Injection
|
23 |
WEB
|
kkr
|
|
2009-08-11
|
|
WordPress Core 2.8.3 - Remote Admin Reset Password
|
23 |
WEB
|
laurent gaffié
|
|
2009-08-10
|
|
Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection
|
24 |
WEB
|
ilker Kandemir
|
|
2009-08-10
|
|
CMS Made Simple 1.6.2 - Local File Disclosure
|
23 |
WEB
|
IHTeam
|
|
2009-08-10
|
|
Mini-CMS 1.0.1 - 'page.php' SQL Injection
|
24 |
WEB
|
Ins3t
|
|
2009-08-10
|
|
Papoo CMS 3.7.3 - (Authenticated) Arbitrary Code Execution
|
24 |
WEB
|
RedTeam Pentesting
|
|
2009-08-10
|
|
SmilieScript 1.0 - Authentication Bypass
|
27 |
WEB
|
Mr.tro0oqy
|
|
2009-08-07
|
|
logoshows bbs 2.0 - File Disclosure / Insecure Cookie Handling
|
25 |
WEB
|
ZoRLu
|
|
2009-08-07
|
|
Logoshows BBS 2.0 - Authentication Bypass
|
25 |
WEB
|
Dns-Team
|
|
2009-08-07
|
|
Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection
|
22 |
WEB
|
M4dhead
|
|
2009-08-07
|
|
IsolSoft Support Center 2.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
|
26 |
WEB
|
Moudi
|
|
2009-08-07
|
|
Facil Helpdesk - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
|
22 |
WEB
|
Moudi
|
|
2009-08-07
|
|
PHPCityPortal - Authentication Bypass
|
20 |
WEB
|
CoBRa_21
|
|
2009-08-07
|
|
Arab Portal 2.2 - Blind Cookie Authentication Bypass
|
19 |
WEB
|
Jafer Al Zidjali
|
|
2009-08-07
|
|
Typing Pal 1.0 - 'idTableProduit' SQL Injection
|
25 |
WEB
|
Red-D3v1L
|
|
2009-08-07
|
|
Logoshows BBS 2.0 - 'forumid' SQL Injection
|
24 |
WEB
|
Ruzgarin_Oglu
|
|
2009-08-07
|
|
Banner Exchange Script 1.0 - 'targetid' Blind SQL Injection
|
24 |
WEB
|
599eme Man
|
|
2009-08-07
|
|
PHotoLa Gallery 1.0 - Authentication Bypass
|
22 |
WEB
|
Red-D3v1L
|
|
2009-08-07
|
|
Alwasel 1.5 - Multiple SQL Injections
|
25 |
WEB
|
SwEET-DeViL
|
|
2009-08-06
|
|
LM Starmail 2.0 - SQL Injection / File Inclusion
|
24 |
WEB
|
int_main();
|
|
2009-08-06
|
|
TYPO3 CMS 4.0 - 'showUid' SQL Injection
|
28 |
WEB
|
Ro0T-MaFia
|
|
2009-08-06
|
|
PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting
|
22 |
WEB
|
int_main();
|
|
2009-08-05
|
|
Portel 2008 - 'decide.php?patron' Blind SQL Injection
|
27 |
WEB
|
Chip d3 bi0s
|
|
2009-08-05
|
|
opennews 1.0 - SQL Injection / Remote Code Execution
|
25 |
WEB
|
SirGod
|
|
2009-08-05
|
|
AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting
|
22 |
WEB
|
Moudi
|
|
2009-08-05
|
|
Irokez CMS 0.7.1 - SQL Injection
|
29 |
WEB
|
Ins3t
|
|
2009-08-05
|
|
tenrok 1.1.0 - File Disclosure / Remote Code Execution
|
23 |
WEB
|
SirGod
|
|
2009-08-05
|
|
mybackup 1.4.0 - File Download / Remote File Inclusion
|
23 |
WEB
|
SirGod
|
|
2009-08-04
|
|
In-portal 4.3.1 - 'index.php?env' Local File Inclusion
|
26 |
WEB
|
Angela Chang
|
|
2009-08-04
|
|
Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
|
27 |
WEB
|
Shadow
|
|
2009-08-04
|
|
ShopMaker CMS 2.0 - Blind SQL Injection / Local File Inclusion
|
23 |
WEB
|
PLATEN
|
|
2009-08-04
|
|
elgg 1.5 - '/_css/js.php' Local File Inclusion
|
24 |
WEB
|
eLwaux
|
|
2009-08-04
|
|
MOC Designs PHP News 1.1 - Authentication Bypass
|
19 |
WEB
|
SirGod
|
|
2009-08-03
|
|
Payment Processor Script (PPScript) - 'shop.htm cid' SQL Injection
|
23 |
WEB
|
ZoRLu
|
|
2009-08-03
|
|
MAXcms 3.11.20b - Remote File Inclusion / File Disclosure
|
21 |
WEB
|
GoLd_M
|
|
2009-08-03
|
|
Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection
|
23 |
WEB
|
Salvatore Fresta
|
|
2009-08-03
|
|
Blink Blog System - Authentication Bypass
|
22 |
WEB
|
Salvatore Fresta
|
|
2009-08-03
|
|
Arab Portal 2.2 - 'mod.php' Local File Inclusion
|
23 |
WEB
|
Qabandi
|
|
2009-08-03
|
|
Multi Website 1.5 - index PHP action SQL Injection
|
23 |
WEB
|
SarBoT511
|
|
2009-08-03
|
|
elvin bts 1.2.2 - SQL Injection / Cross-Site Scripting
|
23 |
WEB
|
599eme Man
|
|
2009-08-03
|
|
Questions Answered 1.3 - Authentication Bypass
|
23 |
WEB
|
snakespc
|
|
2009-08-03
|
|
x10 media adult script 1.7 - Multiple Vulnerabilities
|
21 |
WEB
|
Moudi
|
|
2009-08-03
|
|
Miniweb 2.0 Module Survey Pro - Blind SQL Injection / Cross-Site Scripting
|
24 |
WEB
|
Moudi
|
|
2009-08-03
|
|
Miniweb 2.0 Module Publisher - Blind SQL Injection / Cross-Site Scripting
|
25 |
WEB
|
Moudi
|
|
2009-08-03
|
|
simplePHPWeb 0.2 - 'files.php' Authentication Bypass
|
24 |
WEB
|
SirGod
|
|
2009-08-03
|
|
SimpleLoginSys 0.5 - Authentication Bypass
|
27 |
WEB
|
SirGod
|
|
2009-08-03
|
|
TT Web Site Manager 0.5 - Authentication Bypass
|
26 |
WEB
|
SirGod
|
|
2009-08-03
|
|
QuickDev 4 - 'download.php' File Disclosure
|
23 |
WEB
|
SirGod
|
|
2009-08-03
|
|
Netpet CMS 1.9 - 'confirm.php?language' Local File Inclusion
|
21 |
WEB
|
SirGod
|
|
2009-08-03
|
|
Ajax Short URL Script - Authentication Bypass
|
23 |
WEB
|
Cicklow
|
|
2009-08-03
|
|
ProjectButler 1.5.0 - 'pda_projects.php?offset' Remote File Inclusion
|
24 |
WEB
|
cr4wl3r
|
|
2009-08-03
|
|
AW BannerAd - Authentication Bypass
|
22 |
WEB
|
Ro0T-MaFia
|
|
2009-08-01
|
|
Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection
|
23 |
WEB
|
SwEET-DeViL
|
|
2009-08-01
|
|
aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure
|
23 |
WEB
|
SirGod
|
|
2009-08-01
|
|
PortalXP Teacher Edition 1.2 - Multiple SQL Injections
|
23 |
WEB
|
SirGod
|
|
2009-08-01
|
|
Joomla! Component com_jfusion - 'itemID' Blind SQL Injection
|
24 |
WEB
|
Chip d3 bi0s
|
|
2009-08-01
|
|
MAXcms 3.11.20b - Multiple Remote File Inclusions
|
26 |
WEB
|
NoGe
|
|
2009-08-01
|
|
Arab Portal 2.x - 'forum.php' SQL Injection
|
22 |
WEB
|
rEcruit
|
|
2009-07-30
|
|
linkSpheric 0.74b6 - 'listID' SQL Injection
|
24 |
WEB
|
NoGe
|
|
2009-07-30
|
|
PunBB Reputation.php Mod 2.0.4 - Local File Inclusion
|
23 |
WEB
|
Dante90
|
|
2009-07-30
|
|
MUJE CMS 1.0.4.34 - Local File Inclusion
|
24 |
WEB
|
SirGod
|
