Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-05-04   Qt QuickTeam - Multiple Remote File Inclusions 7 WEB ahmadbady
2009-05-04   BluSky CMS - 'news_id' SQL Injection 8 WEB snakespc
2009-05-04   AGTC MyShop 3.2 - Insecure Cookie Handling 8 WEB Mr.tro0oqy
2009-05-04   Winn ASP Guestbook 1.01b - Remote Database Disclosure 8 WEB ZoRLu
2009-05-01   pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion 9 WEB SirGod
2009-05-01   MiniTwitter 0.2b - Remote User Options Changer 8 WEB YEnH4ckEr
2009-05-01   MiniTwitter 0.2b - Multiple SQL Injections 8 WEB YEnH4ckEr
2009-05-01   Golabi CMS 1.0.1 - Session Poisoning 8 WEB CrazyAngel
2009-04-30   Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload 8 WEB YEnH4ckEr
2009-04-30   Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection 9 WEB YEnH4ckEr
2009-04-29   Tiger Dms - Authentication Bypass 8 WEB ThE g0bL!N
2009-04-29   Zubrag Smart File Download 1.3 - Arbitrary File Download 8 WEB Aodrulez
2009-04-29   S-CMS 1.1 Stable - 'page' Local File Inclusion 8 WEB ZoRLu
2009-04-29   ProjectCMS 1.0b - 'index.php?sn' SQL Injection 8 WEB YEnH4ckEr
2009-04-29   eLitius 1.0 - 'banner-details.php?id' SQL Injection 7 WEB snakespc
2009-04-28   webSPELL 4.2.0d (Linux) - Local File Disclosure 8 WEB StAkeR
2009-04-28   MIM: InfiniX 1.2.003 - Multiple SQL Injections 7 WEB YEnH4ckEr
2009-04-28   VisionLms 1.0 - 'changePW.php' Remote Password Change 8 WEB Mr.tro0oqy
2009-04-27   ABC Advertise 1.0 - Admin Password Disclosure 8 WEB SirGod
2009-04-27   Teraway LinkTracker 1.0 - Remote Password Change 8 WEB ThE g0bL!N
2009-04-27   Teraway LiveHelp 2.0 - Insecure Cookie Handling 8 WEB ThE g0bL!N
2009-04-27   Teraway FileStream 1.0 - Insecure Cookie Handling 8 WEB ThE g0bL!N
2009-04-27   Teraway LinkTracker 1.0 - Insecure Cookie Handling 8 WEB ThE g0bL!N
2009-04-27   Flatchat 3.0 - 'pmscript.php' Local File Inclusion 9 WEB SirGod
2009-04-27   ECShop 2.5.0 - 'order_sn' SQL Injection 8 WEB Securitylab.ir
2009-04-27   EZ-Blog Beta2 - 'category' SQL Injection 8 WEB YEnH4ckEr
2009-04-27   Thickbox Gallery 2 - 'index.php' Local File Inclusion 8 WEB SirGod
2009-04-27   Dew-NewPHPLinks 2.0 - Local File Inclusion / Cross-Site Scripting 8 WEB d3v1l
2009-04-27   LightBlog 9.9.2 - 'register.php' Remote Code Execution 8 WEB EgiX
2009-04-27   Opencart 1.1.8 - 'route' Local File Inclusion 8 WEB OoN_Boy
2009-04-27   Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure 8 WEB brain[pillow]
2009-04-24   Pragyan CMS 2.6.4 - Multiple SQL Injections 8 WEB Salvatore Fresta
2009-04-24   photo-rigma.biz 30 - SQL Injection / Cross-Site Scripting 8 WEB YEnH4ckEr
2009-04-24   Absolute Form Processor XE-V 1.5 - Remote Change Password 8 WEB ThE g0bL!N
2009-04-24   Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling 8 WEB ZoRLu
2009-04-23   fowlcms 1.1 - Authentication Bypass / Local File Inclusion / Arbitrary File Upload 8 WEB YEnH4ckEr
2009-04-22   Joomla! Component rsmonials - Cross-Site Scripting 8 WEB jdc
2009-04-22   WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions 8 WEB ahmadbady
2009-04-22   5 star Rating 1.2 - Authentication Bypass 8 WEB zer0day
2009-04-22   Elkagroup Image Gallery 1.0 - Arbitrary File Upload 7 WEB Securitylab.ir
2009-04-22   Dokeos Lms 1.8.5 - 'Include' Remote Code Execution 7 WEB StAkeR
2009-04-21   mixedcms 1.0b - Local File Inclusion / Arbitrary File Upload / Authentication Bypass / File Disclosu 8 WEB YEnH4ckEr
2009-04-21   Studio Lounge Address Book 2.5 - Authentication Bypass 8 WEB ThE g0bL!N
2009-04-21   I-Rater Pro/Plantinum 4.0 - Authentication Bypass 8 WEB Hakxer
2009-04-21   VS PANEL 7.3.6 - 'Cat_ID' SQL Injection 8 WEB Player
2009-04-21   Quick.CMS.Lite 0.5 - 'id' SQL Injection 8 WEB Player
2009-04-21   NotFTP 1.3.1 - 'newlang' Local File Inclusion 7 WEB Kacper
2009-04-21   TotalCalendar 2.4 - 'Include' Local File Inclusion 7 WEB SirGod
2009-04-21   pastelcms 0.8.0 - Local File Inclusion / SQL Injection 8 WEB SirGod
2009-04-21   CRE Loaded 6.2 - 'products_id' SQL Injection 7 WEB Player
2009-04-21   Dokeos Lms 1.8.5 - 'whoisonline.php' PHP Code Injection 8 WEB EgiX
2009-04-20   eLitius 1.0 - Arbitrary Database Backup 8 WEB ThE g0bL!N
2009-04-20   Creasito E-Commerce 1.3.16 - Authentication Bypass 8 WEB Salvatore Fresta
2009-04-20   TotalCalendar 2.4 - Remote Password Change 8 WEB ThE g0bL!N
2009-04-20   e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection 8 WEB StAkeR
2009-04-20   TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion 8 WEB DarKdewiL
2009-04-20   fungamez rc1 - Authentication Bypass / Local File Inclusion 8 WEB YEnH4ckEr
2009-04-20   WB News 2.1.2 - Insecure Cookie Handling 8 WEB ThE g0bL!N
2009-04-20   WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection 8 WEB YEnH4ckEr
2009-04-20   Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection 8 WEB Rohit Bansal
2009-04-20   EZ Webitor - Authentication Bypass 8 WEB snakespc
2009-04-20   webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling 8 WEB ThE g0bL!N
2009-04-20   Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure 8 WEB girex
2009-04-20   Seditio CMS Events Plugin - 'c' SQL Injection 8 WEB OoN_Boy
2009-04-20   Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload 8 WEB JosS
2009-04-20   multi-lingual E-Commerce system 0.2 - Multiple Vulnerabilities 8 WEB Salvatore Fresta
2009-04-17   Hot Project 7.0 - Authentication Bypass 8 WEB HCOCA_MAN
2009-04-17   Online Email Manager - Insecure Cookie Handling 8 WEB Hussin X
2009-04-17   Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection 8 WEB Hussin X
2009-04-17   e-cart.biz Shopping Cart - Arbitrary File Upload 8 WEB ahmadbady
2009-04-17   ClanTiger 1.1.1 - 'slug' Blind SQL Injection 8 WEB YEnH4ckEr
2009-04-17   ClanTiger 1.1.1 - Authentication Bypass 9 WEB YEnH4ckEr
2009-04-17   ClanTiger < 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities 8 WEB YEnH4ckEr
2009-04-17   Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation 8 WEB Alfons Luja
2009-04-17   Tiny Blogr 1.0.0 rc4 - Authentication Bypass 8 WEB Salvatore Fresta
2009-04-16   chCounter 3.1.3 - Authentication Bypass 8 WEB tmh
2009-04-16   SMA-DB 0.3.13 - Multiple Remote File Inclusions 8 WEB JosS
2009-04-16   eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password 9 WEB ThE g0bL!N
2009-04-16   NetHoteles 3.0 - 'ficha.php' SQL Injection 8 WEB snakespc
2009-04-16   CPCommerce 1.2.8 - 'id_document' Blind SQL Injection 8 WEB NoGe
2009-04-16   DNS Tools (PHP Digger) - Remote Command Execution 8 WEB SirGod
2009-04-16   webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing 8 WEB YEnH4ckEr
2009-04-16   Online Password Manager 4.1 - Insecure Cookie Handling 8 WEB ZoRLu
2009-04-16   NetHoteles 2.0/3.0 - Authentication Bypass 7 WEB Dns-Team
2009-04-16   Geeklog 1.5.2 - 'savepreferences()/*blocks[]' SQL Injection 8 WEB Nine:Situations:Group
2009-04-15   FreeWebShop.org 2.2.9 RC2 - 'lang_file' Local File Inclusion 7 WEB ahmadbady
2009-04-15   Job2C 4.2 - 'adtype' Local File Inclusion 8 WEB ZoRLu
2009-04-15   Job2C - 'conf.inc' Configuration File Disclosure 8 WEB InjEctOr5
2009-04-15   phpDatingClub - 'conf.inc' File Disclosure 8 WEB InjEctOr5
2009-04-15   phpAdBoardPro - 'config.inc' Configuration File Disclosure 8 WEB InjEctOr5
2009-04-15   W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure 8 WEB InjEctOr5
2009-04-15   phpGreetCards - Config File Disclosure 8 WEB InjEctOr5
2009-04-15   phpAdBoard - 'conf.inc' Remote Configuration File Disclosure 8 WEB InjEctOr5
2009-04-15   Job2C 4.2 - 'profile' Arbitrary File Upload 8 WEB InjEctOr5
2009-04-14   phpEmployment - 'conf.inc' File Disclosure 8 WEB InjEctOr5
2009-04-14   RQms (Rash) 1.2.2 - Multiple SQL Injections 8 WEB Dimi4
2009-04-14   Aqua CMS - 'Username' SQL Injection 8 WEB halkfild
2009-04-14   GuestCal 2.1 - 'index.php?lang' Local File Inclusion 8 WEB SirGod
2009-04-14   PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scrip 8 WEB SirDarckCat
2009-04-14   ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection 8 WEB DSecRG
2009-04-14   Jamroom 4.0.2 - 't' Local File Inclusion 8 WEB zxvf
2009-04-13   ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure 8 WEB AlpHaNiX
2009-04-13   e107 Plugin userjournals_menu - 'blog.id' SQL Injection 8 WEB boom3rang
2009-04-13   FreznoShop 1.3.0 - 'id' SQL Injection 8 WEB NoGe
2009-04-13   XEngineSoft PMS/MGS/NM/Ams 1.0 - Authentication Bypass 8 WEB Dr-HTmL
2009-04-13   Yellow Duck Weblog 2.1.0 - 'lang' Local File Inclusion 9 WEB ahmadbady
2009-04-13   X10media Mp3 Search Engine < 1.6.2 - Admin Access 8 WEB THUNDER
2009-04-13   Flatnuke 2.7.1 - 'level' Privilege Escalation 8 WEB StAkeR
2009-04-10   FunkyASP AD System 1.1 - Arbitrary File Upload 8 WEB ZoRLu
2009-04-10   w3bcms Gaestebuch 3.0.0 - Blind SQL Injection 8 WEB DNX
2009-04-10   RedaxScript 0.2.0 - 'Language' Local File Inclusion 8 WEB SirGod
2009-04-10   moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting 9 WEB SirGod
2009-04-10   Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection 8 WEB Salvatore Fresta
2009-04-10   PHP-Agenda 2.2.5 - Remote File Overwriting 8 WEB Salvatore Fresta
2009-04-09   dynamic flash forum 1.0 Beta - Multiple Vulnerabilities 8 WEB Salvatore Fresta
2009-04-09   Absolute Form Processor XE-V 1.5 - Authentication Bypass 8 WEB ThE g0bL!N
2009-04-09   My Dealer CMS 2.0 - Authentication Bypass 9 WEB ThE g0bL!N
2009-04-09   adaptbb 1.0b - Multiple Vulnerabilities 8 WEB Salvatore Fresta
2009-04-09   WebFileExplorer 3.1 - Authentication Bypass 8 WEB Osirys
2009-04-09   Simbas CMS 2.0 - Authentication Bypass 9 WEB ThE g0bL!N
2009-04-09   Back-End CMS 5.0 - 'main.asp?id' SQL Injection 8 WEB AnGeL25dZ
2009-04-09   Exjune Guestbook 2.0 - Remote Database Disclosure 8 WEB AlpHaNiX
2009-04-09   Geeklog 1.5.2 - 'SEC_authenticate()' SQL Injection 8 WEB Nine:Situations:Group
2009-04-08   WebFileExplorer 3.1 - 'db.mdb' Database Disclosure 8 WEB ByALBAYX
2009-04-08   Xplode CMS - 'wrap_script' SQL Injection 8 WEB PLATEN