|
2009-04-27
|
|
ECShop 2.5.0 - 'order_sn' SQL Injection
|
4 |
WEB
|
Securitylab.ir
|
|
2009-04-27
|
|
EZ-Blog Beta2 - 'category' SQL Injection
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-27
|
|
Thickbox Gallery 2 - 'index.php' Local File Inclusion
|
4 |
WEB
|
SirGod
|
|
2009-04-27
|
|
Dew-NewPHPLinks 2.0 - Local File Inclusion / Cross-Site Scripting
|
4 |
WEB
|
d3v1l
|
|
2009-04-27
|
|
LightBlog 9.9.2 - 'register.php' Remote Code Execution
|
4 |
WEB
|
EgiX
|
|
2009-04-27
|
|
Opencart 1.1.8 - 'route' Local File Inclusion
|
4 |
WEB
|
OoN_Boy
|
|
2009-04-27
|
|
Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure
|
4 |
WEB
|
brain[pillow]
|
|
2009-04-24
|
|
Pragyan CMS 2.6.4 - Multiple SQL Injections
|
3 |
WEB
|
Salvatore Fresta
|
|
2009-04-24
|
|
photo-rigma.biz 30 - SQL Injection / Cross-Site Scripting
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-24
|
|
Absolute Form Processor XE-V 1.5 - Remote Change Password
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-24
|
|
Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling
|
4 |
WEB
|
ZoRLu
|
|
2009-04-23
|
|
fowlcms 1.1 - Authentication Bypass / Local File Inclusion / Arbitrary File Upload
|
5 |
WEB
|
YEnH4ckEr
|
|
2009-04-22
|
|
Joomla! Component rsmonials - Cross-Site Scripting
|
4 |
WEB
|
jdc
|
|
2009-04-22
|
|
WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions
|
4 |
WEB
|
ahmadbady
|
|
2009-04-22
|
|
5 star Rating 1.2 - Authentication Bypass
|
4 |
WEB
|
zer0day
|
|
2009-04-22
|
|
Elkagroup Image Gallery 1.0 - Arbitrary File Upload
|
3 |
WEB
|
Securitylab.ir
|
|
2009-04-22
|
|
Dokeos Lms 1.8.5 - 'Include' Remote Code Execution
|
4 |
WEB
|
StAkeR
|
|
2009-04-21
|
|
mixedcms 1.0b - Local File Inclusion / Arbitrary File Upload / Authentication Bypass / File Disclosu
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-21
|
|
Studio Lounge Address Book 2.5 - Authentication Bypass
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-21
|
|
I-Rater Pro/Plantinum 4.0 - Authentication Bypass
|
4 |
WEB
|
Hakxer
|
|
2009-04-21
|
|
VS PANEL 7.3.6 - 'Cat_ID' SQL Injection
|
4 |
WEB
|
Player
|
|
2009-04-21
|
|
Quick.CMS.Lite 0.5 - 'id' SQL Injection
|
4 |
WEB
|
Player
|
|
2009-04-21
|
|
NotFTP 1.3.1 - 'newlang' Local File Inclusion
|
3 |
WEB
|
Kacper
|
|
2009-04-21
|
|
TotalCalendar 2.4 - 'Include' Local File Inclusion
|
3 |
WEB
|
SirGod
|
|
2009-04-21
|
|
pastelcms 0.8.0 - Local File Inclusion / SQL Injection
|
4 |
WEB
|
SirGod
|
|
2009-04-21
|
|
CRE Loaded 6.2 - 'products_id' SQL Injection
|
3 |
WEB
|
Player
|
|
2009-04-21
|
|
Dokeos Lms 1.8.5 - 'whoisonline.php' PHP Code Injection
|
4 |
WEB
|
EgiX
|
|
2009-04-20
|
|
eLitius 1.0 - Arbitrary Database Backup
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-20
|
|
Creasito E-Commerce 1.3.16 - Authentication Bypass
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-20
|
|
TotalCalendar 2.4 - Remote Password Change
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-20
|
|
e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection
|
4 |
WEB
|
StAkeR
|
|
2009-04-20
|
|
TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion
|
4 |
WEB
|
DarKdewiL
|
|
2009-04-20
|
|
fungamez rc1 - Authentication Bypass / Local File Inclusion
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-20
|
|
WB News 2.1.2 - Insecure Cookie Handling
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-20
|
|
WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-20
|
|
Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection
|
4 |
WEB
|
Rohit Bansal
|
|
2009-04-20
|
|
EZ Webitor - Authentication Bypass
|
4 |
WEB
|
snakespc
|
|
2009-04-20
|
|
webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-20
|
|
Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure
|
4 |
WEB
|
girex
|
|
2009-04-20
|
|
Seditio CMS Events Plugin - 'c' SQL Injection
|
4 |
WEB
|
OoN_Boy
|
|
2009-04-20
|
|
Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload
|
4 |
WEB
|
JosS
|
|
2009-04-20
|
|
multi-lingual E-Commerce system 0.2 - Multiple Vulnerabilities
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-17
|
|
Hot Project 7.0 - Authentication Bypass
|
4 |
WEB
|
HCOCA_MAN
|
|
2009-04-17
|
|
Online Email Manager - Insecure Cookie Handling
|
4 |
WEB
|
Hussin X
|
|
2009-04-17
|
|
Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
|
4 |
WEB
|
Hussin X
|
|
2009-04-17
|
|
e-cart.biz Shopping Cart - Arbitrary File Upload
|
4 |
WEB
|
ahmadbady
|
|
2009-04-17
|
|
ClanTiger 1.1.1 - 'slug' Blind SQL Injection
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-17
|
|
ClanTiger 1.1.1 - Authentication Bypass
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-17
|
|
ClanTiger < 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-17
|
|
Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation
|
4 |
WEB
|
Alfons Luja
|
|
2009-04-17
|
|
Tiny Blogr 1.0.0 rc4 - Authentication Bypass
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-16
|
|
chCounter 3.1.3 - Authentication Bypass
|
4 |
WEB
|
tmh
|
|
2009-04-16
|
|
SMA-DB 0.3.13 - Multiple Remote File Inclusions
|
4 |
WEB
|
JosS
|
|
2009-04-16
|
|
eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password
|
5 |
WEB
|
ThE g0bL!N
|
|
2009-04-16
|
|
NetHoteles 3.0 - 'ficha.php' SQL Injection
|
4 |
WEB
|
snakespc
|
|
2009-04-16
|
|
CPCommerce 1.2.8 - 'id_document' Blind SQL Injection
|
4 |
WEB
|
NoGe
|
|
2009-04-16
|
|
DNS Tools (PHP Digger) - Remote Command Execution
|
4 |
WEB
|
SirGod
|
|
2009-04-16
|
|
webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing
|
4 |
WEB
|
YEnH4ckEr
|
|
2009-04-16
|
|
Online Password Manager 4.1 - Insecure Cookie Handling
|
4 |
WEB
|
ZoRLu
|
|
2009-04-16
|
|
NetHoteles 2.0/3.0 - Authentication Bypass
|
3 |
WEB
|
Dns-Team
|
|
2009-04-16
|
|
Geeklog 1.5.2 - 'savepreferences()/*blocks[]' SQL Injection
|
4 |
WEB
|
Nine:Situations:Group
|
|
2009-04-15
|
|
FreeWebShop.org 2.2.9 RC2 - 'lang_file' Local File Inclusion
|
3 |
WEB
|
ahmadbady
|
|
2009-04-15
|
|
Job2C 4.2 - 'adtype' Local File Inclusion
|
4 |
WEB
|
ZoRLu
|
|
2009-04-15
|
|
Job2C - 'conf.inc' Configuration File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
phpDatingClub - 'conf.inc' File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
phpAdBoardPro - 'config.inc' Configuration File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
phpGreetCards - Config File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
phpAdBoard - 'conf.inc' Remote Configuration File Disclosure
|
3 |
WEB
|
InjEctOr5
|
|
2009-04-15
|
|
Job2C 4.2 - 'profile' Arbitrary File Upload
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-14
|
|
phpEmployment - 'conf.inc' File Disclosure
|
4 |
WEB
|
InjEctOr5
|
|
2009-04-14
|
|
RQms (Rash) 1.2.2 - Multiple SQL Injections
|
4 |
WEB
|
Dimi4
|
|
2009-04-14
|
|
Aqua CMS - 'Username' SQL Injection
|
4 |
WEB
|
halkfild
|
|
2009-04-14
|
|
GuestCal 2.1 - 'index.php?lang' Local File Inclusion
|
3 |
WEB
|
SirGod
|
|
2009-04-14
|
|
PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scrip
|
4 |
WEB
|
SirDarckCat
|
|
2009-04-14
|
|
ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection
|
4 |
WEB
|
DSecRG
|
|
2009-04-14
|
|
Jamroom 4.0.2 - 't' Local File Inclusion
|
4 |
WEB
|
zxvf
|
|
2009-04-13
|
|
ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
|
4 |
WEB
|
AlpHaNiX
|
|
2009-04-13
|
|
e107 Plugin userjournals_menu - 'blog.id' SQL Injection
|
4 |
WEB
|
boom3rang
|
|
2009-04-13
|
|
FreznoShop 1.3.0 - 'id' SQL Injection
|
4 |
WEB
|
NoGe
|
|
2009-04-13
|
|
XEngineSoft PMS/MGS/NM/Ams 1.0 - Authentication Bypass
|
4 |
WEB
|
Dr-HTmL
|
|
2009-04-13
|
|
Yellow Duck Weblog 2.1.0 - 'lang' Local File Inclusion
|
4 |
WEB
|
ahmadbady
|
|
2009-04-13
|
|
X10media Mp3 Search Engine < 1.6.2 - Admin Access
|
3 |
WEB
|
THUNDER
|
|
2009-04-13
|
|
Flatnuke 2.7.1 - 'level' Privilege Escalation
|
4 |
WEB
|
StAkeR
|
|
2009-04-10
|
|
FunkyASP AD System 1.1 - Arbitrary File Upload
|
4 |
WEB
|
ZoRLu
|
|
2009-04-10
|
|
w3bcms Gaestebuch 3.0.0 - Blind SQL Injection
|
4 |
WEB
|
DNX
|
|
2009-04-10
|
|
RedaxScript 0.2.0 - 'Language' Local File Inclusion
|
4 |
WEB
|
SirGod
|
|
2009-04-10
|
|
moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting
|
4 |
WEB
|
SirGod
|
|
2009-04-10
|
|
Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-10
|
|
PHP-Agenda 2.2.5 - Remote File Overwriting
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-09
|
|
dynamic flash forum 1.0 Beta - Multiple Vulnerabilities
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-09
|
|
Absolute Form Processor XE-V 1.5 - Authentication Bypass
|
4 |
WEB
|
ThE g0bL!N
|
|
2009-04-09
|
|
My Dealer CMS 2.0 - Authentication Bypass
|
5 |
WEB
|
ThE g0bL!N
|
|
2009-04-09
|
|
adaptbb 1.0b - Multiple Vulnerabilities
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-09
|
|
WebFileExplorer 3.1 - Authentication Bypass
|
4 |
WEB
|
Osirys
|
|
2009-04-09
|
|
Simbas CMS 2.0 - Authentication Bypass
|
5 |
WEB
|
ThE g0bL!N
|
|
2009-04-09
|
|
Back-End CMS 5.0 - 'main.asp?id' SQL Injection
|
4 |
WEB
|
AnGeL25dZ
|
|
2009-04-09
|
|
Exjune Guestbook 2.0 - Remote Database Disclosure
|
4 |
WEB
|
AlpHaNiX
|
|
2009-04-09
|
|
Geeklog 1.5.2 - 'SEC_authenticate()' SQL Injection
|
4 |
WEB
|
Nine:Situations:Group
|
|
2009-04-08
|
|
WebFileExplorer 3.1 - 'db.mdb' Database Disclosure
|
4 |
WEB
|
ByALBAYX
|
|
2009-04-08
|
|
Xplode CMS - 'wrap_script' SQL Injection
|
4 |
WEB
|
PLATEN
|
|
2009-04-08
|
|
photo graffix 3.4 - Multiple Vulnerabilities
|
4 |
WEB
|
ahmadbady
|
|
2009-04-08
|
|
Joomla! Component Cmimarketplace - 'viewit' Directory Traversal
|
4 |
WEB
|
H!tm@N
|
|
2009-04-08
|
|
Joomla! Component MailTo - 'article' SQL Injection
|
5 |
WEB
|
H!tm@N
|
|
2009-04-08
|
|
Joomla! Component Maian Music 1.2.1 - 'category' SQL Injection
|
4 |
WEB
|
H!tm@N
|
|
2009-04-08
|
|
saspcms 0.9 - Multiple Vulnerabilities
|
4 |
WEB
|
BugReport.IR
|
|
2009-04-07
|
|
Lanius CMS 0.5.2 - Arbitrary File Upload
|
4 |
WEB
|
EgiX
|
|
2009-04-07
|
|
Family Connections CMS 1.8.2 - Blind SQL Injection
|
5 |
WEB
|
Salvatore Fresta
|
|
2009-04-06
|
|
iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion
|
4 |
WEB
|
LOTFREE
|
|
2009-04-06
|
|
FlexCMS Calendar - 'itemID' Blind SQL Injection
|
4 |
WEB
|
Lanti-Net
|
|
2009-04-06
|
|
Joomla! Component com_bookJoomlas 0.1 - SQL Injection
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-03
|
|
AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure
|
5 |
WEB
|
StAkeR
|
|
2009-04-03
|
|
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
|
4 |
WEB
|
brain[pillow]
|
|
2009-04-03
|
|
Family Connections 1.8.2 - Arbitrary File Upload
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-04-03
|
|
form2list - 'page.php?id' SQL Injection
|
4 |
WEB
|
Cyber-Zone
|
|
2009-04-03
|
|
glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection
|
4 |
WEB
|
Nine:Situations:Group
|
|
2009-04-03
|
|
ActiveKB KnowledgeBase - 'Panel' Local File Inclusion
|
4 |
WEB
|
Angela Chang
|
|
2009-04-01
|
|
TinyPHPForum 3.61 - File Disclosure / Code Execution
|
4 |
WEB
|
brain[pillow]
|
|
2009-04-01
|
|
MyioSoft Ajax Portal 3.0 - 'page' SQL Injection
|
4 |
WEB
|
cOndemned
|
|
2009-04-01
|
|
Koschtit Image Gallery 1.82 - Multiple Local File Inclusions
|
4 |
WEB
|
ahmadbady
|
|
2009-03-31
|
|
vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection
|
4 |
WEB
|
Dimi4
|
|
2009-03-31
|
|
PHPRecipeBook 2.39 - 'course_id' SQL Injection
|
4 |
WEB
|
DarKdewiL
|
|
2009-03-31
|
|
JobHut 1.2 - Remote Password Change/Delete/Activate User
|
3 |
WEB
|
ThE g0bL!N
|
|
2009-03-31
|
|
webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion
|
4 |
WEB
|
Salvatore Fresta
|
|
2009-03-31
|
|
virtuemart 1.1.2 - Multiple Vulnerabilities
|
4 |
WEB
|
waraxe
|
