|
2009-05-27
|
|
Impact Software AdPeeps 8.5d1 - Cross-Site Scripting / HTML Injection
|
10 |
WEB
|
intern0t
|
|
2009-05-27
|
|
Evernew Free Joke Script 1.2 - 'cat_id' SQL Injection
|
13 |
WEB
|
taRentReXx
|
|
2009-05-27
|
|
SiteX 0.7.4.418 - 'THEME_FOLDER' Local File Inclusion
|
10 |
WEB
|
ahmadbady
|
|
2009-05-27
|
|
Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion
|
12 |
WEB
|
ThE g0bL!N
|
|
2009-05-27
|
|
Joomla! Component AgoraGroup 0.3.5.3 - Blind SQL Injection
|
10 |
WEB
|
Chip d3 bi0s
|
|
2009-05-27
|
|
Million Dollar Text Links 1.x - Insecure Cookie Handling
|
10 |
WEB
|
HxH
|
|
2009-05-26
|
|
Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion
|
10 |
WEB
|
Nine:Situations:Group
|
|
2009-05-26
|
|
Joomla! Component Com_Agora 3.0.0 RC1 - Arbitrary File Upload
|
11 |
WEB
|
ByALBAYX
|
|
2009-05-26
|
|
WebMember 1.0 - 'formID' SQL Injection
|
10 |
WEB
|
KIM
|
|
2009-05-26
|
|
ZeeCareers 2.0 - 'addAdminmembercode.php' Arbitrary Add Admin
|
10 |
WEB
|
x.CJP.x
|
|
2009-05-26
|
|
phpBugTracker 1.0.3 - Authentication Bypass
|
12 |
WEB
|
ByALBAYX
|
|
2009-05-26
|
|
ShaadiClone 2.0 - 'addAdminmembercode.php' Arbitrary Add Admin
|
10 |
WEB
|
x.CJP.x
|
|
2009-05-26
|
|
Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure
|
10 |
WEB
|
DarkbiteX
|
|
2009-05-26
|
|
MyForum 1.3 - Authentication Bypass
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-26
|
|
Kensei Board 2.0.0b - Multiple SQL Injections
|
10 |
WEB
|
cOndemned
|
|
2009-05-26
|
|
Joomla! Component com_rsgallery2 1.14.x/2.x - Remote Backdoor Access
|
10 |
WEB
|
Jan Van Niekerk
|
|
2009-05-26
|
|
roomphplanning 1.6 - Multiple Vulnerabilities
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-26
|
|
Gallarific - 'user.php' Arbirary Change Admin Information
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-26
|
|
Ultimate Media Script 2.0 - Remote Change Content
|
9 |
WEB
|
ThE g0bL!N
|
|
2009-05-26
|
|
eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities
|
9 |
WEB
|
sniper code
|
|
2009-05-26
|
|
Webradev Download Protect 1.0 - Remote File Inclusion
|
10 |
WEB
|
asL-Sabia
|
|
2009-05-26
|
|
WordPress Plugin Lytebox - 'wp-lytebox' Local File Inclusion
|
13 |
WEB
|
TurkGuvenligi
|
|
2009-05-26
|
|
CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion
|
11 |
WEB
|
StAkeR
|
|
2009-05-26
|
|
Mole Adult Portal Script - 'profile.php?user_id' SQL Injection
|
10 |
WEB
|
Qabandi
|
|
2009-05-26
|
|
MyFirstCMS 1.0.2 - Arbitrary File Delete
|
10 |
WEB
|
darkjoker
|
|
2009-05-26
|
|
Cute Editor ASP.NET - Remote File Disclosure
|
10 |
WEB
|
Securitylab.ir
|
|
2009-05-26
|
|
vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection
|
9 |
WEB
|
Cold Zero
|
|
2009-05-26
|
|
Dokuwiki 2009-02-14 - Local File Inclusion
|
11 |
WEB
|
girex
|
|
2009-05-26
|
|
Joomla! Component Boy Scout Advancement 0.3 - 'id' SQL Injection
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-26
|
|
minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting
|
11 |
WEB
|
YEnH4ckEr
|
|
2009-05-22
|
|
photovideotube 1.11 - Multiple Vulnerabilities
|
10 |
WEB
|
Hakxer
|
|
2009-05-22
|
|
Mole Group Restaurant Directory Script 3.0 - Change Admin Password
|
10 |
WEB
|
G4N0K
|
|
2009-05-22
|
|
Mole Group Sky Hunter/Bus Ticket Scripts - Change Admin Password
|
12 |
WEB
|
G4N0K
|
|
2009-05-22
|
|
ZaoCMS (PhpCommander) - Arbitrary File Upload
|
12 |
WEB
|
Qabandi
|
|
2009-05-22
|
|
ZaoCMS - 'user_updated.php' Remote Change Password
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-22
|
|
ZaoCMS - 'user_id' SQL Injection
|
10 |
WEB
|
Qabandi
|
|
2009-05-22
|
|
Tutorial Share 3.5.0 - Insecure Cookie Handling
|
10 |
WEB
|
Evil-Cod3r
|
|
2009-05-21
|
|
ZaoCMS - 'download.php' Remote File Disclosure
|
9 |
WEB
|
ThE g0bL!N
|
|
2009-05-21
|
|
ZaoCMS - Insecure Cookie Handling
|
9 |
WEB
|
ThE g0bL!N
|
|
2009-05-21
|
|
Article Directory - 'page.php' Blind SQL Injection
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-21
|
|
Article Directory - Authentication Bypass
|
8 |
WEB
|
Hakxer
|
|
2009-05-21
|
|
Flash Quiz Beta 2 - Multiple SQL Injections
|
8 |
WEB
|
YEnH4ckEr
|
|
2009-05-21
|
|
asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting
|
9 |
WEB
|
Bl@ckbe@rD
|
|
2009-05-21
|
|
VICIDIAL 2.0.5-173 - Authentication Bypass
|
9 |
WEB
|
Striker7
|
|
2009-05-20
|
|
Jorp 1.3.05.09 - Arbitrary Remove Projects/Tasks
|
9 |
WEB
|
YEnH4ckEr
|
|
2009-05-20
|
|
bSpeak 1.10 - 'forumid' Blind SQL Injection
|
8 |
WEB
|
snakespc
|
|
2009-05-20
|
|
PHP Article Publisher - Arbitrary Authentication Bypass
|
9 |
WEB
|
ThE g0bL!N
|
|
2009-05-20
|
|
DMXReady Registration Manager 1.1 - Arbitrary File Upload
|
12 |
WEB
|
Securitylab.ir
|
|
2009-05-20
|
|
Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection
|
9 |
WEB
|
ThE g0bL!N
|
|
2009-05-20
|
|
NC LinkList 1.3.1 - Remote Command Injection
|
11 |
WEB
|
ThE g0bL!N
|
|
2009-05-20
|
|
NC GBook 1.0 - Remote Command Injection
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-20
|
|
Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting
|
11 |
WEB
|
ByALBAYX
|
|
2009-05-20
|
|
Exjune Officer Message System 1 - Multiple Vulnerabilities
|
9 |
WEB
|
ByALBAYX
|
|
2009-05-20
|
|
Joomla! Component Casino 0.3.1 - Multiple SQL Injections s
|
9 |
WEB
|
ByALBAYX
|
|
2009-05-19
|
|
DM FileManager 3.9.2 - Authentication Bypass
|
9 |
WEB
|
snakespc
|
|
2009-05-19
|
|
Dog Pedigree Online Database 1.0.1b - Blind SQL Injection
|
9 |
WEB
|
YEnH4ckEr
|
|
2009-05-19
|
|
Dog Pedigree Online Database 1.0.1b - Insecure Cookie Handling
|
11 |
WEB
|
YEnH4ckEr
|
|
2009-05-19
|
|
Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-19
|
|
vidshare pro - SQL Injection / Cross-Site Scripting
|
8 |
WEB
|
snakespc
|
|
2009-05-19
|
|
Coppermine Photo Gallery 1.4.22 - SQL Injection
|
10 |
WEB
|
girex
|
|
2009-05-19
|
|
PAD Site Scripts 3.6 - Insecure Cookie Handling
|
10 |
WEB
|
Mr.tro0oqy
|
|
2009-05-19
|
|
Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure
|
13 |
WEB
|
Securitylab.ir
|
|
2009-05-19
|
|
Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection
|
9 |
WEB
|
InjEctOr5
|
|
2009-05-19
|
|
VidShare Pro - Arbitrary File Upload
|
9 |
WEB
|
InjEctOr5
|
|
2009-05-18
|
|
PHP Article Publisher - Remote Change Admin Password
|
10 |
WEB
|
ahmadbady
|
|
2009-05-18
|
|
DGNews 3.0 Beta - 'id' SQL Injection
|
9 |
WEB
|
Cyber-Zone
|
|
2009-05-18
|
|
MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection
|
10 |
WEB
|
Securitylab.ir
|
|
2009-05-18
|
|
Jieqi CMS 1.5 - Remote Code Execution
|
10 |
WEB
|
Securitylab.ir
|
|
2009-05-18
|
|
LightOpenCMS 0.1 - 'id' SQL Injection
|
10 |
WEB
|
Mi4night
|
|
2009-05-18
|
|
Dana Portal - Remote Change Admin Password
|
10 |
WEB
|
Abysssec
|
|
2009-05-18
|
|
douran portal 3.9.0.23 - Multiple Vulnerabilities
|
10 |
WEB
|
Abysssec
|
|
2009-05-18
|
|
ClanWeb 1.4.2 - Remote Change Password / Add Admin
|
10 |
WEB
|
ahmadbady
|
|
2009-05-18
|
|
Pluck CMS 4.6.2 - 'langpref' Local File Inclusion
|
10 |
WEB
|
ahmadbady
|
|
2009-05-18
|
|
Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin
|
10 |
WEB
|
ahmadbady
|
|
2009-05-18
|
|
coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities
|
10 |
WEB
|
girex
|
|
2009-05-18
|
|
Online Rental Property Script 5.0 - 'pid' SQL Injection
|
10 |
WEB
|
UnderTaker HaCkEr
|
|
2009-05-18
|
|
PHP Dir Submit - Authentication Bypass
|
10 |
WEB
|
snakespc
|
|
2009-05-18
|
|
Pc4Uploader 9.0 - Blind SQL Injection
|
10 |
WEB
|
Qabandi
|
|
2009-05-15
|
|
my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-15
|
|
my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-15
|
|
PHPenpals 1.1 - 'mail.php?ID' SQL Injection
|
10 |
WEB
|
Br0ly
|
|
2009-05-15
|
|
DMXReady Registration Manager 1.1 - Database Disclosure
|
10 |
WEB
|
S4S-T3rr0r!sT
|
|
2009-05-15
|
|
2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting
|
11 |
WEB
|
snakespc
|
|
2009-05-15
|
|
Rama CMS 0.9.8 - 'download.php' File Disclosure
|
10 |
WEB
|
Br0ly
|
|
2009-05-15
|
|
Harland Scripts 11 - Products Remote Command Execution
|
13 |
WEB
|
G4N0K
|
|
2009-05-15
|
|
Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion
|
10 |
WEB
|
iskorpitx
|
|
2009-05-14
|
|
MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-14
|
|
MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-14
|
|
2DayBiz Template Monster Clone - 'edituser.php' Change Pass
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
|
10 |
WEB
|
InjEctOr5
|
|
2009-05-14
|
|
2DayBiz Business Community Script - Multiple Vulnerabilities
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling
|
8 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
MRCGIGUY The Ticket System 2.0 - Insecure Cookie Handling
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
MRCGIGUY Message Box 1.0 - Insecure Cookie Handling
|
9 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
MRCGIGUY Amazon Directory 1.0/2.0 - Insecure Cookie Handling
|
11 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling
|
9 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
Submitter Script - Authentication Bypass
|
8 |
WEB
|
ThE g0bL!N
|
|
2009-05-14
|
|
MRCGIGUY ClickBank Directory 1.0.1 - Insecure Cookie Handling
|
11 |
WEB
|
TiGeR-Dz
|
|
2009-05-14
|
|
StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution
|
10 |
WEB
|
[AVT]
|
|
2009-05-14
|
|
beLive 0.2.3 - 'arch.php?arch' Local File Inclusion
|
10 |
WEB
|
Kacper
|
|
2009-05-14
|
|
Shutter 0.1.1 - Multiple SQL Injections
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-14
|
|
My Game Script 2.0 - Authentication Bypass
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-14
|
|
Ascad Networks 5 - Products Insecure Cookie Handling
|
10 |
WEB
|
G4N0K
|
|
2009-05-13
|
|
Mlffat 2.1 - Cookie Authentication Bypass
|
11 |
WEB
|
Qabandi
|
|
2009-05-13
|
|
MaxCMS 2.0 - 'm_username' Arbitrary Create Admin
|
10 |
WEB
|
Securitylab.ir
|
|
2009-05-13
|
|
Family Connections CMS 1.9 - SQL Injection
|
11 |
WEB
|
YEnH4ckEr
|
|
2009-05-13
|
|
Password Protector SD 1.3.1 - Insecure Cookie Handling
|
10 |
WEB
|
Mr.tro0oqy
|
|
2009-05-13
|
|
TinyButStrong 3.4.0 - 'script' Local File Disclosure
|
10 |
WEB
|
ahmadbady
|
|
2009-05-12
|
|
BigACE 2.5 - SQL Injection
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-12
|
|
Bitweaver 2.6 - 'saveFeed()' Remote Code Execution
|
9 |
WEB
|
Nine:Situations:Group
|
|
2009-05-11
|
|
PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection
|
12 |
WEB
|
scriptjunkie
|
|
2009-05-11
|
|
microTopic 1 - 'Rating' Blind SQL Injection
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-11
|
|
openWYSIWYG 1.4.7 - Local Directory Traversal
|
10 |
WEB
|
StAkeR
|
|
2009-05-11
|
|
Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload
|
10 |
WEB
|
ahmadbady
|
|
2009-05-11
|
|
EggBlog 4.1.1 - Local Directory Traversal
|
10 |
WEB
|
StAkeR
|
|
2009-05-08
|
|
TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution
|
10 |
WEB
|
EgiX
|
|
2009-05-08
|
|
RTWebalbum 1.0.462 - 'albumID' Blind SQL Injection
|
11 |
WEB
|
YEnH4ckEr
|
|
2009-05-08
|
|
Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload
|
10 |
WEB
|
Cyber-Zone
|
|
2009-05-08
|
|
Luxbum 0.5.5/stable - Authentication Bypass
|
10 |
WEB
|
knxone
|
|
2009-05-08
|
|
Realty Web-Base 1.0 - Authentication Bypass
|
10 |
WEB
|
ThE g0bL!N
|
|
2009-05-08
|
|
The Recipe Script 5 - Authentication Bypass / Database Backup
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-07
|
|
Job Script 2.0 - Arbitrary Change Admin Password
|
10 |
WEB
|
TiGeR-Dz
|
|
2009-05-07
|
|
Simple Customer 1.3 - Arbitrary Change Admin Password
|
13 |
WEB
|
ahmadbady
|
|
2009-05-07
|
|
ST-Gallery 0.1a - Multiple SQL Injections
|
10 |
WEB
|
YEnH4ckEr
|
|
2009-05-07
|
|
VIDEOSCRIPT.us - Authentication Bypass
|
12 |
WEB
|
snakespc
|
