Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-05-26   MyFirstCMS 1.0.2 - Arbitrary File Delete 35 WEB darkjoker
2009-05-26   Cute Editor ASP.NET - Remote File Disclosure 34 WEB Securitylab.ir
2009-05-26   vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection 30 WEB Cold Zero
2009-05-26   Dokuwiki 2009-02-14 - Local File Inclusion 36 WEB girex
2009-05-26   Joomla! Component Boy Scout Advancement 0.3 - 'id' SQL Injection 31 WEB YEnH4ckEr
2009-05-26   minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting 34 WEB YEnH4ckEr
2009-05-22   photovideotube 1.11 - Multiple Vulnerabilities 30 WEB Hakxer
2009-05-22   Mole Group Restaurant Directory Script 3.0 - Change Admin Password 35 WEB G4N0K
2009-05-22   Mole Group Sky Hunter/Bus Ticket Scripts - Change Admin Password 33 WEB G4N0K
2009-05-22   ZaoCMS (PhpCommander) - Arbitrary File Upload 33 WEB Qabandi
2009-05-22   ZaoCMS - 'user_updated.php' Remote Change Password 31 WEB ThE g0bL!N
2009-05-22   ZaoCMS - 'user_id' SQL Injection 29 WEB Qabandi
2009-05-22   Tutorial Share 3.5.0 - Insecure Cookie Handling 30 WEB Evil-Cod3r
2009-05-21   ZaoCMS - 'download.php' Remote File Disclosure 31 WEB ThE g0bL!N
2009-05-21   ZaoCMS - Insecure Cookie Handling 33 WEB ThE g0bL!N
2009-05-21   Article Directory - 'page.php' Blind SQL Injection 32 WEB ThE g0bL!N
2009-05-21   Article Directory - Authentication Bypass 31 WEB Hakxer
2009-05-21   Flash Quiz Beta 2 - Multiple SQL Injections 31 WEB YEnH4ckEr
2009-05-21   asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting 30 WEB Bl@ckbe@rD
2009-05-21   VICIDIAL 2.0.5-173 - Authentication Bypass 29 WEB Striker7
2009-05-20   Jorp 1.3.05.09 - Arbitrary Remove Projects/Tasks 32 WEB YEnH4ckEr
2009-05-20   bSpeak 1.10 - 'forumid' Blind SQL Injection 27 WEB snakespc
2009-05-20   PHP Article Publisher - Arbitrary Authentication Bypass 33 WEB ThE g0bL!N
2009-05-20   DMXReady Registration Manager 1.1 - Arbitrary File Upload 36 WEB Securitylab.ir
2009-05-20   Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection 35 WEB ThE g0bL!N
2009-05-20   NC LinkList 1.3.1 - Remote Command Injection 31 WEB ThE g0bL!N
2009-05-20   NC GBook 1.0 - Remote Command Injection 32 WEB ThE g0bL!N
2009-05-20   Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting 30 WEB ByALBAYX
2009-05-20   Exjune Officer Message System 1 - Multiple Vulnerabilities 31 WEB ByALBAYX
2009-05-20   Joomla! Component Casino 0.3.1 - Multiple SQL Injections s 33 WEB ByALBAYX
2009-05-19   DM FileManager 3.9.2 - Authentication Bypass 34 WEB snakespc
2009-05-19   Dog Pedigree Online Database 1.0.1b - Blind SQL Injection 31 WEB YEnH4ckEr
2009-05-19   Dog Pedigree Online Database 1.0.1b - Insecure Cookie Handling 32 WEB YEnH4ckEr
2009-05-19   Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections 29 WEB YEnH4ckEr
2009-05-19   vidshare pro - SQL Injection / Cross-Site Scripting 27 WEB snakespc
2009-05-19   Coppermine Photo Gallery 1.4.22 - SQL Injection 29 WEB girex
2009-05-19   PAD Site Scripts 3.6 - Insecure Cookie Handling 32 WEB Mr.tro0oqy
2009-05-19   Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure 34 WEB Securitylab.ir
2009-05-19   Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection 30 WEB InjEctOr5
2009-05-19   VidShare Pro - Arbitrary File Upload 31 WEB InjEctOr5
2009-05-18   PHP Article Publisher - Remote Change Admin Password 34 WEB ahmadbady
2009-05-18   DGNews 3.0 Beta - 'id' SQL Injection 29 WEB Cyber-Zone
2009-05-18   MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection 30 WEB Securitylab.ir
2009-05-18   Jieqi CMS 1.5 - Remote Code Execution 32 WEB Securitylab.ir
2009-05-18   LightOpenCMS 0.1 - 'id' SQL Injection 33 WEB Mi4night
2009-05-18   Dana Portal - Remote Change Admin Password 30 WEB Abysssec
2009-05-18   douran portal 3.9.0.23 - Multiple Vulnerabilities 32 WEB Abysssec
2009-05-18   ClanWeb 1.4.2 - Remote Change Password / Add Admin 32 WEB ahmadbady
2009-05-18   Pluck CMS 4.6.2 - 'langpref' Local File Inclusion 33 WEB ahmadbady
2009-05-18   Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin 34 WEB ahmadbady
2009-05-18   coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities 32 WEB girex
2009-05-18   Online Rental Property Script 5.0 - 'pid' SQL Injection 30 WEB UnderTaker HaCkEr
2009-05-18   PHP Dir Submit - Authentication Bypass 32 WEB snakespc
2009-05-18   Pc4Uploader 9.0 - Blind SQL Injection 35 WEB Qabandi
2009-05-15   my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting 33 WEB YEnH4ckEr
2009-05-15   my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting 33 WEB YEnH4ckEr
2009-05-15   PHPenpals 1.1 - 'mail.php?ID' SQL Injection 30 WEB Br0ly
2009-05-15   DMXReady Registration Manager 1.1 - Database Disclosure 30 WEB S4S-T3rr0r!sT
2009-05-15   2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting 32 WEB snakespc
2009-05-15   Rama CMS 0.9.8 - 'download.php' File Disclosure 33 WEB Br0ly
2009-05-15   Harland Scripts 11 - Products Remote Command Execution 31 WEB G4N0K
2009-05-15   Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion 34 WEB iskorpitx
2009-05-14   MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling 31 WEB ThE g0bL!N
2009-05-14   MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling 31 WEB ThE g0bL!N
2009-05-14   2DayBiz Template Monster Clone - 'edituser.php' Change Pass 32 WEB TiGeR-Dz
2009-05-14   Easy Scripts Answer and Question Script - Multiple Vulnerabilities 33 WEB InjEctOr5
2009-05-14   2DayBiz Business Community Script - Multiple Vulnerabilities 30 WEB TiGeR-Dz
2009-05-14   MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling 27 WEB TiGeR-Dz
2009-05-14   MRCGIGUY The Ticket System 2.0 - Insecure Cookie Handling 32 WEB TiGeR-Dz
2009-05-14   MRCGIGUY Message Box 1.0 - Insecure Cookie Handling 30 WEB TiGeR-Dz
2009-05-14   MRCGIGUY Amazon Directory 1.0/2.0 - Insecure Cookie Handling 29 WEB TiGeR-Dz
2009-05-14   MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling 28 WEB TiGeR-Dz
2009-05-14   Submitter Script - Authentication Bypass 28 WEB ThE g0bL!N
2009-05-14   MRCGIGUY ClickBank Directory 1.0.1 - Insecure Cookie Handling 34 WEB TiGeR-Dz
2009-05-14   StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution 30 WEB [AVT]
2009-05-14   beLive 0.2.3 - 'arch.php?arch' Local File Inclusion 35 WEB Kacper
2009-05-14   Shutter 0.1.1 - Multiple SQL Injections 31 WEB YEnH4ckEr
2009-05-14   My Game Script 2.0 - Authentication Bypass 31 WEB ThE g0bL!N
2009-05-14   Ascad Networks 5 - Products Insecure Cookie Handling 30 WEB G4N0K
2009-05-13   Mlffat 2.1 - Cookie Authentication Bypass 30 WEB Qabandi
2009-05-13   MaxCMS 2.0 - 'm_username' Arbitrary Create Admin 30 WEB Securitylab.ir
2009-05-13   Family Connections CMS 1.9 - SQL Injection 34 WEB YEnH4ckEr
2009-05-13   Password Protector SD 1.3.1 - Insecure Cookie Handling 36 WEB Mr.tro0oqy
2009-05-13   TinyButStrong 3.4.0 - 'script' Local File Disclosure 31 WEB ahmadbady
2009-05-12   BigACE 2.5 - SQL Injection 29 WEB YEnH4ckEr
2009-05-12   Bitweaver 2.6 - 'saveFeed()' Remote Code Execution 28 WEB Nine:Situations:Group
2009-05-11   PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection 34 WEB scriptjunkie
2009-05-11   microTopic 1 - 'Rating' Blind SQL Injection 34 WEB YEnH4ckEr
2009-05-11   openWYSIWYG 1.4.7 - Local Directory Traversal 32 WEB StAkeR
2009-05-11   Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload 32 WEB ahmadbady
2009-05-11   EggBlog 4.1.1 - Local Directory Traversal 31 WEB StAkeR
2009-05-08   TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution 31 WEB EgiX
2009-05-08   RTWebalbum 1.0.462 - 'albumID' Blind SQL Injection 31 WEB YEnH4ckEr
2009-05-08   Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload 30 WEB Cyber-Zone
2009-05-08   Luxbum 0.5.5/stable - Authentication Bypass 31 WEB knxone
2009-05-08   Realty Web-Base 1.0 - Authentication Bypass 29 WEB ThE g0bL!N
2009-05-08   The Recipe Script 5 - Authentication Bypass / Database Backup 29 WEB TiGeR-Dz
2009-05-07   Job Script 2.0 - Arbitrary Change Admin Password 33 WEB TiGeR-Dz
2009-05-07   Simple Customer 1.3 - Arbitrary Change Admin Password 33 WEB ahmadbady
2009-05-07   ST-Gallery 0.1a - Multiple SQL Injections 34 WEB YEnH4ckEr
2009-05-07   VIDEOSCRIPT.us - Authentication Bypass 34 WEB snakespc
2009-05-07   T-Dreams Job Career Package 3.0 - Insecure Cookie Handling 32 WEB TiGeR-Dz
2009-05-07   TCPDB 3.8 - Arbitrary Add Admin Account 31 WEB Mr.tro0oqy
2009-05-07   webSPELL 4.2.0e - 'page' Blind SQL Injection 33 WEB DNX
2009-05-05   Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection 32 WEB InjEctOr5
2009-05-05   LinkBase 2.0 - Remote Cookie Grabber 32 WEB SirGod
2009-05-05   TemaTres 1.0.3 - Blind SQL Injection 30 WEB YEnH4ckEr
2009-05-05   TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting 35 WEB YEnH4ckEr
2009-05-04   Ublog access version - Arbitrary Database Disclosure 32 WEB Cyber-Zone
2009-05-04   Uguestbook 1.0b - 'Guestbook.mdb' Arbitrary Database Disclosure 35 WEB Cyber-Zone
2009-05-04   projectCMS 1.1b - Multiple Vulnerabilities 39 WEB YEnH4ckEr
2009-05-04   Million Dollar Text Links 1.0 - Arbitrary Authentication Bypass 32 WEB ThE g0bL!N
2009-05-04   PHP Site Lock 2.0 - Insecure Cookie Handling 33 WEB ThE g0bL!N
2009-05-04   eLitius 1.0 - Remote Command Execution 32 WEB G4N0K
2009-05-04   Qt QuickTeam - Multiple Remote File Inclusions 29 WEB ahmadbady
2009-05-04   BluSky CMS - 'news_id' SQL Injection 31 WEB snakespc
2009-05-04   AGTC MyShop 3.2 - Insecure Cookie Handling 31 WEB Mr.tro0oqy
2009-05-04   Winn ASP Guestbook 1.01b - Remote Database Disclosure 31 WEB ZoRLu
2009-05-01   pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion 33 WEB SirGod
2009-05-01   MiniTwitter 0.2b - Remote User Options Changer 30 WEB YEnH4ckEr
2009-05-01   MiniTwitter 0.2b - Multiple SQL Injections 30 WEB YEnH4ckEr
2009-05-01   Golabi CMS 1.0.1 - Session Poisoning 33 WEB CrazyAngel
2009-04-30   Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload 33 WEB YEnH4ckEr
2009-04-30   Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection 34 WEB YEnH4ckEr
2009-04-29   Tiger Dms - Authentication Bypass 34 WEB ThE g0bL!N