Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-08-18   Videos Broadcast Yourself 2 - 'UploadID' SQL Injection 38 WEB Mr.SQL
2009-08-18   Arcadem Pro 2.8 - 'article' Blind SQL Injection 39 WEB Mr.SQL
2009-08-18   DreamPics Builder - 'exhibition_id' SQL Injection 38 WEB Mr.SQL
2009-08-18   vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross 44 WEB USH
2009-08-18   SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File 39 WEB Kernel_Panik
2009-08-18   AJ Auction Pro OOPD 2.x - 'id' SQL Injection 38 WEB NoGe
2009-08-18   BaBB 2.8 - Remote Code Injection 37 WEB Khashayar Fereidani
2009-08-18   PHP-Lance 1.52 - Multiple Local File Inclusions 41 WEB jetli007
2009-08-14   MyWeight 1.0 - Arbitrary File Upload 38 WEB Mr.tro0oqy
2009-08-14   DS CMS 1.0 - 'nFileId' SQL Injection 35 WEB Mr.tro0oqy
2009-08-14   PHP Competition System 0.84 - 'competition' SQL Injection 40 WEB Mr.SQL
2009-08-14   Ignition 1.2 - 'comment' Remote Code Injection 42 WEB Khashayar Fereidani
2009-08-13   tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure 40 WEB []ViZiOn
2009-08-13   Gazelle CMS 1.0 - Arbitrary File Upload 39 WEB RoMaNcYxHaCkEr
2009-08-27   WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution 40 WEB Raz0r
2009-08-13   JBLOG 1.5.1 - SQL Table Backup 38 WEB Ams
2009-08-12   Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution 41 WEB IHTeam
2009-08-12   Plume CMS 1.2.3 - Multiple SQL Injections 39 WEB Sense of Security
2009-08-12   Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category 37 WEB ilker Kandemir
2009-08-12   Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling 37 WEB Pedro Laguna
2009-08-11   OCS Inventory NG 1.2.1 - 'systemid' SQL Injection 40 WEB Guilherme Marinheiro
2009-08-11   Joomla! Component idoblog 1.1b30 (com_idoblog) - SQL Injection 40 WEB kkr
2009-08-11   WordPress Core 2.8.3 - Remote Admin Reset Password 39 WEB laurent gaffié
2009-08-10   Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection 40 WEB ilker Kandemir
2009-08-10   CMS Made Simple 1.6.2 - Local File Disclosure 37 WEB IHTeam
2009-08-10   Mini-CMS 1.0.1 - 'page.php' SQL Injection 40 WEB Ins3t
2009-08-10   Papoo CMS 3.7.3 - (Authenticated) Arbitrary Code Execution 37 WEB RedTeam Pentesting
2009-08-10   SmilieScript 1.0 - Authentication Bypass 41 WEB Mr.tro0oqy
2009-08-07   logoshows bbs 2.0 - File Disclosure / Insecure Cookie Handling 42 WEB ZoRLu
2009-08-07   Logoshows BBS 2.0 - Authentication Bypass 40 WEB Dns-Team
2009-08-07   Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection 36 WEB M4dhead
2009-08-07   IsolSoft Support Center 2.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting 41 WEB Moudi
2009-08-07   Facil Helpdesk - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting 40 WEB Moudi
2009-08-07   PHPCityPortal - Authentication Bypass 38 WEB CoBRa_21
2009-08-07   Arab Portal 2.2 - Blind Cookie Authentication Bypass 37 WEB Jafer Al Zidjali
2009-08-07   Typing Pal 1.0 - 'idTableProduit' SQL Injection 39 WEB Red-D3v1L
2009-08-07   Logoshows BBS 2.0 - 'forumid' SQL Injection 38 WEB Ruzgarin_Oglu
2009-08-07   Banner Exchange Script 1.0 - 'targetid' Blind SQL Injection 42 WEB 599eme Man
2009-08-07   PHotoLa Gallery 1.0 - Authentication Bypass 38 WEB Red-D3v1L
2009-08-07   Alwasel 1.5 - Multiple SQL Injections 42 WEB SwEET-DeViL
2009-08-06   LM Starmail 2.0 - SQL Injection / File Inclusion 40 WEB int_main();
2009-08-06   TYPO3 CMS 4.0 - 'showUid' SQL Injection 45 WEB Ro0T-MaFia
2009-08-06   PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting 38 WEB int_main();
2009-08-05   Portel 2008 - 'decide.php?patron' Blind SQL Injection 42 WEB Chip d3 bi0s
2009-08-05   opennews 1.0 - SQL Injection / Remote Code Execution 39 WEB SirGod
2009-08-05   AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting 42 WEB Moudi
2009-08-05   Irokez CMS 0.7.1 - SQL Injection 45 WEB Ins3t
2009-08-05   tenrok 1.1.0 - File Disclosure / Remote Code Execution 39 WEB SirGod
2009-08-05   mybackup 1.4.0 - File Download / Remote File Inclusion 43 WEB SirGod
2009-08-04   In-portal 4.3.1 - 'index.php?env' Local File Inclusion 42 WEB Angela Chang
2009-08-04   Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection 44 WEB Shadow
2009-08-04   ShopMaker CMS 2.0 - Blind SQL Injection / Local File Inclusion 37 WEB PLATEN
2009-08-04   elgg 1.5 - '/_css/js.php' Local File Inclusion 38 WEB eLwaux
2009-08-04   MOC Designs PHP News 1.1 - Authentication Bypass 40 WEB SirGod
2009-08-03   Payment Processor Script (PPScript) - 'shop.htm cid' SQL Injection 42 WEB ZoRLu
2009-08-03   MAXcms 3.11.20b - Remote File Inclusion / File Disclosure 40 WEB GoLd_M
2009-08-03   Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection 38 WEB Salvatore Fresta
2009-08-03   Blink Blog System - Authentication Bypass 37 WEB Salvatore Fresta
2009-08-03   Arab Portal 2.2 - 'mod.php' Local File Inclusion 42 WEB Qabandi
2009-08-03   Multi Website 1.5 - index PHP action SQL Injection 39 WEB SarBoT511
2009-08-03   elvin bts 1.2.2 - SQL Injection / Cross-Site Scripting 39 WEB 599eme Man
2009-08-03   Questions Answered 1.3 - Authentication Bypass 41 WEB snakespc
2009-08-03   x10 media adult script 1.7 - Multiple Vulnerabilities 42 WEB Moudi
2009-08-03   Miniweb 2.0 Module Survey Pro - Blind SQL Injection / Cross-Site Scripting 40 WEB Moudi
2009-08-03   Miniweb 2.0 Module Publisher - Blind SQL Injection / Cross-Site Scripting 41 WEB Moudi
2009-08-03   simplePHPWeb 0.2 - 'files.php' Authentication Bypass 38 WEB SirGod
2009-08-03   SimpleLoginSys 0.5 - Authentication Bypass 44 WEB SirGod
2009-08-03   TT Web Site Manager 0.5 - Authentication Bypass 40 WEB SirGod
2009-08-03   QuickDev 4 - 'download.php' File Disclosure 38 WEB SirGod
2009-08-03   Netpet CMS 1.9 - 'confirm.php?language' Local File Inclusion 36 WEB SirGod
2009-08-03   Ajax Short URL Script - Authentication Bypass 39 WEB Cicklow
2009-08-03   ProjectButler 1.5.0 - 'pda_projects.php?offset' Remote File Inclusion 40 WEB cr4wl3r
2009-08-03   AW BannerAd - Authentication Bypass 40 WEB Ro0T-MaFia
2009-08-01   Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection 40 WEB SwEET-DeViL
2009-08-01   aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure 36 WEB SirGod
2009-08-01   PortalXP Teacher Edition 1.2 - Multiple SQL Injections 37 WEB SirGod
2009-08-01   Joomla! Component com_jfusion - 'itemID' Blind SQL Injection 46 WEB Chip d3 bi0s
2009-08-01   MAXcms 3.11.20b - Multiple Remote File Inclusions 42 WEB NoGe
2009-08-01   Arab Portal 2.x - 'forum.php' SQL Injection 42 WEB rEcruit
2009-07-30   linkSpheric 0.74b6 - 'listID' SQL Injection 42 WEB NoGe
2009-07-30   PunBB Reputation.php Mod 2.0.4 - Local File Inclusion 85 WEB Dante90
2009-07-30   MUJE CMS 1.0.4.34 - Local File Inclusion 41 WEB SirGod
2009-07-30   Really Simple CMS 0.3a - 'PT' Local File Inclusion 41 WEB SirGod
2009-07-30   d.net CMS - Local File Inclusion / SQL Injection 41 WEB SirGod
2009-07-30   cmsphp 0.21 - Local File Inclusion / Cross-Site Scripting 40 WEB SirGod
2009-07-30   dit.cms 1.3 - 'path/sitemap/relPath' Local File Inclusion 39 WEB SirGod
2009-07-30   Orbis CMS 1.0 - File Delete / Download File / Arbitrary File Upload / SQL Injection 40 WEB SirGod
2009-07-30   justVisual 1.2 - 'fs_jVroot' Remote File Inclusion 39 WEB SirGod
2009-07-30   Ultrize TimeSheet 1.2.2 - 'readfile()' Local File Disclosure 41 WEB GoLd_M
2009-07-28   ultrize timesheet 1.2.2 - Remote File Inclusion 41 WEB NoGe
2009-07-28   TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities 39 WEB Aung Khant
2009-07-28   PaoLiber 1.1 - 'login_ok' Authentication Bypass 39 WEB SirGod
2009-07-28   PaoBacheca Guestbook 2.1 - 'login_ok' Authentication Bypass 38 WEB SirGod
2009-07-28   PaoLink 1.0 - 'login_ok' Authentication Bypass 43 WEB SirGod
2009-07-28   In-portal 4.3.1 - Arbitrary File Upload 37 WEB Mr.tro0oqy
2009-07-28   PunBB Reputation.php Mod 2.0.4 - Blind SQL Injection 36 WEB Dante90
2009-07-28   phpArcadeScript 4.0 - 'id' SQL Injection 35 WEB MizoZ
2009-07-28   PHP Paid 4 Mail Script - 'paidbanner.php?ID' SQL Injection 39 WEB ThE g0bL!N
2009-07-27   SerWeb 2.1.0-dev1 2009-07-02 - Multiple Remote File Inclusions 38 WEB GoLd_M
2009-07-27   Magician Blog 1.0 - Authentication Bypass 40 WEB Evil-Cod3r
2009-07-27   Magician Blog 1.0 - 'ids' SQL Injection 38 WEB Evil-Cod3r
2009-07-27   Limny 1.01 - Authentication Bypass 44 WEB SirGod
2009-07-27   PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete 37 WEB Dante90
2009-07-27   PunBB Automatic Image Upload 1.3.5 - SQL Injection 39 WEB Dante90
2009-07-27   Joomla! Component IXXO Cart! Standalone and - SQL Injection 34 WEB sm0k3
2009-07-27   Allomani Movies & Clips 2.7.0 - Blind SQL Injection 40 WEB Qabandi
2009-07-27   Allomani Songs & Clips 2.7.0 - Blind SQL Injection 37 WEB Qabandi
2009-07-27   Allomani Mobile 2.5 - Blind SQL Injection 41 WEB Qabandi
2009-07-27   Inout Adserver - 'id' SQL Injection 36 WEB boom3rang
2009-07-27   Super Mod System 3.0 - 's' SQL Injection 41 WEB MizoZ
2009-07-27   PHP Paid 4 Mail Script - 'home.php' Remote File Inclusion 39 WEB int_main();
2009-07-27   VS PANEL 7.5.5 - 'Cat_ID' SQL Injection 38 WEB octopos
2009-07-27   iwiccle 1.01 - Local File Inclusion / SQL Injection 41 WEB SirGod
2009-07-27   URA 3.0 - 'cat' SQL Injection 38 WEB Chip d3 bi0s
2009-07-27   garagesalesjunkie - SQL Injection / Cross-Site Scripting 41 WEB Moudi
2009-07-27   XOOPS Celepar Module Qas - Blind SQL Injection / Cross-Site Scripting 40 WEB Moudi
2009-07-27   skadate dating - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting 40 WEB Moudi
2009-07-27   almond Classifieds ads - Blind SQL Injection / Cross-Site Scripting 35 WEB Moudi
2009-07-27   Joomla! Component Almond Classifieds com_aclassf 7.5 - Multiple Vulnerabilities 35 WEB Moudi
2009-07-24   Pixaria Gallery 2.3.5 - 'file' Remote File Disclosure 36 WEB Qabandi
2009-07-24   Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling 39 WEB Qabandi
2009-07-24   Clip Bucket 1.7.1 - Insecure Cookie Handling 41 WEB Qabandi
2009-07-24   PHP Live! 3.2.2 - 'questid' SQL Injection (2) 40 WEB skys
2009-07-24   Scripteen Free Image Hosting Script 2.3 - SQL Injection 34 WEB Coksnuss
2009-07-24   Deonixscripts Templates Management 1.3 - SQL Injection 36 WEB d3b4g