Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-04-08   photo graffix 3.4 - Multiple Vulnerabilities 9 WEB ahmadbady
2009-04-08   Joomla! Component Cmimarketplace - 'viewit' Directory Traversal 8 WEB H!tm@N
2009-04-08   Joomla! Component MailTo - 'article' SQL Injection 9 WEB H!tm@N
2009-04-08   Joomla! Component Maian Music 1.2.1 - 'category' SQL Injection 10 WEB H!tm@N
2009-04-08   saspcms 0.9 - Multiple Vulnerabilities 8 WEB BugReport.IR
2009-04-07   Lanius CMS 0.5.2 - Arbitrary File Upload 8 WEB EgiX
2009-04-07   Family Connections CMS 1.8.2 - Blind SQL Injection 9 WEB Salvatore Fresta
2009-04-06   iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion 8 WEB LOTFREE
2009-04-06   FlexCMS Calendar - 'itemID' Blind SQL Injection 8 WEB Lanti-Net
2009-04-06   Joomla! Component com_bookJoomlas 0.1 - SQL Injection 8 WEB Salvatore Fresta
2009-04-03   AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure 9 WEB StAkeR
2009-04-03   Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution 8 WEB brain[pillow]
2009-04-03   Family Connections 1.8.2 - Arbitrary File Upload 8 WEB Salvatore Fresta
2009-04-03   form2list - 'page.php?id' SQL Injection 8 WEB Cyber-Zone
2009-04-03   glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection 8 WEB Nine:Situations:Group
2009-04-03   ActiveKB KnowledgeBase - 'Panel' Local File Inclusion 8 WEB Angela Chang
2009-04-01   TinyPHPForum 3.61 - File Disclosure / Code Execution 8 WEB brain[pillow]
2009-04-01   MyioSoft Ajax Portal 3.0 - 'page' SQL Injection 8 WEB cOndemned
2009-04-01   Koschtit Image Gallery 1.82 - Multiple Local File Inclusions 8 WEB ahmadbady
2009-03-31   vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection 8 WEB Dimi4
2009-03-31   PHPRecipeBook 2.39 - 'course_id' SQL Injection 8 WEB DarKdewiL
2009-03-31   JobHut 1.2 - Remote Password Change/Delete/Activate User 7 WEB ThE g0bL!N
2009-03-31   webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion 8 WEB Salvatore Fresta
2009-03-31   virtuemart 1.1.2 - Multiple Vulnerabilities 8 WEB waraxe
2009-03-31   VirtueMart 1.1.2 - SQL Injection (Metasploit) 8 WEB waraxe
2009-03-31   Podcast Generator 1.1 - Remote Code Execution 8 WEB BlackHawk
2009-03-31   Community CMS 0.5 - Multiple SQL Injections 8 WEB Salvatore Fresta
2009-03-30   family connection 1.8.1 - Multiple Vulnerabilities 8 WEB Salvatore Fresta
2009-03-30   JobHut 1.2 - 'pk' SQL Injection 9 WEB K-159
2009-03-30   X-Forum 0.6.2 - Remote Command Execution 9 WEB Osirys
2009-03-30   gravy media CMS 1.07 - Multiple Vulnerabilities 9 WEB x0r
2009-03-30   BandSite CMS 1.1.4 - 'members.php' SQL Injection 8 WEB SirGod
2009-03-30   Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass 8 WEB AnGeL25dZ
2009-03-29   iWare CMS 5.0.4 - Multiple SQL Injections 8 WEB boom3rang
2009-03-29   Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling 8 WEB ZoRLu
2009-03-29   glFusion 1.1.2 - 'COM_applyFilter()/order' SQL Injection 8 WEB Nine:Situations:Group
2009-03-27   My Simple Forum 7.1 - Remote Command Execution 8 WEB Osirys
2009-03-27   Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure 8 WEB Christian J. Eibl
2009-03-27   Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting 10 WEB Anarchy Angel
2009-03-27   Free PHP Petition Signing Script - Authentication Bypass 8 WEB Qabandi
2009-03-27   Simply Classified 0.2 - 'category_id' SQL Injection 9 WEB G4N0K
2009-03-26   acute control panel 1.0.0 - SQL Injection / Remote File Inclusion 8 WEB SirGod
2009-03-26   blogplus 1.0 - Multiple Local File Inclusions 8 WEB ahmadbady
2009-03-26   PhotoStand 1.2.0 - Remote Command Execution 7 WEB Osirys
2009-03-25   WeBid 0.7.3 RC9 - 'upldgallery.php' Arbitrary File Upload 8 WEB Ahmad Pay
2009-03-25   PHPizabi 0.848b C1 HFP1-3 - Arbitrary File Upload 8 WEB EgiX
2009-03-24   SurfMyTV Script 1.0 - 'view.php?id' SQL Injection 8 WEB x0r
2009-03-24   PHPizabi 0.848b C1 HFP1 - Privilege Escalation 8 WEB Nine:Situations:Group
2009-03-24   Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion 8 WEB dun
2009-03-23   Free Arcade Script 1.0 - Authentication Bypass / Arbitrary File Upload 8 WEB Mr.Skonnie
2009-03-23   Syzygy CMS 0.3 - Local File Inclusion / SQL Injection 8 WEB Osirys
2009-03-23   Codice CMS 2 - Command Execution (via SQL Injection) 9 WEB darkjoker
2009-03-23   Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion 8 WEB Alfons Luja
2009-03-23   PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution 8 WEB YOUCODE
2009-03-23   X-BLC 0.2.0 - 'get_read.php?section' SQL Injection 8 WEB dun
2009-03-23   Supernews 1.5 - 'valor.php?noticia' SQL Injection 8 WEB p3s0k!
2009-03-23   WBB3 rGallery 1.2.3 - 'UserGallery' Blind SQL Injection 8 WEB Invisibility
2009-03-20   Pixie CMS - Cross-Site Scripting / SQL Injection 8 WEB Justin Keane
2009-03-19   Hannon Hill Cascade Server - (Authenticated) Command Execution 9 WEB Emory University
2009-03-19   Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass ) 9 WEB Fireshot
2009-03-19   Bloginator 1a - Cookie Bypass / SQL Injection 9 WEB Fireshot
2009-03-18   DeluxeBB 1.3 - 'qorder' SQL Injection 8 WEB girex
2009-03-18   Pivot 1.40.6 - Arbitrary File Deletion 8 WEB Alfons Luja
2009-03-18   Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection 8 WEB boom3rang
2009-03-18   Facil-CMS 0.1RC2 - Multiple Vulnerabilities 8 WEB any.zicky
2009-03-17   Mega File Hosting Script 1.2 - 'url' Remote File Inclusion 9 WEB Garry
2009-03-17   WordPress Plugin fMoblog 2.1 - 'id' SQL Injection 9 WEB strange kevin
2009-03-17   GDL 4.x - 'node' SQL Injection 8 WEB g4t3w4y
2009-03-17   PHPRunner 4.2 - 'SearchOption' Blind SQL Injection 8 WEB BugReport.IR
2009-03-16   phpComasy 0.9.1 - 'entry_id' SQL Injection 8 WEB boom3rang
2009-03-16   YAP 1.1.1 - Blind SQL Injection / SQL Injection 8 WEB SirGod
2009-03-16   Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection 8 WEB SirGod
2009-03-16   UBBCentral UBB.Threads 5.5.1 - 'message' SQL Injection 8 WEB s4squatch
2009-03-13   Kim Websites 1.0 - Authentication Bypass 8 WEB Virangar Security
2009-03-13   YAP 1.1.1 - 'index.php' Local File Inclusion 9 WEB Alkindiii
2009-03-12   phpmysport 1.4 - Cross-Site Scripting / SQL Injection 8 WEB XaDoS
2009-03-11   Traidnt up 2.0 - 'cookie' Add Extension Bypass 8 WEB SP4rT
2009-03-10   RoomPHPlanning 1.6 - 'userform.php' Create Admin User 10 WEB Jonathan Salwan
2009-03-10   Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting 8 WEB XaDoS
2009-03-10   WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting 8 WEB Juan Galiana Lara
2009-03-10   WeBid 0.7.3 RC9 - Multiple Remote File Inclusions 8 WEB K-159
2009-03-10   PHP-Fusion Mod Book Panel - 'course_id' SQL Injection 8 WEB SuB-ZeRo
2009-03-10   CMS WEBjump! - Multiple SQL Injections 8 WEB M3NW5
2009-03-09   PHP-Fusion Mod Book Panel - 'bookid' SQL Injection 8 WEB elusiven
2009-03-09   phpCommunity 2.1.8 - SQL Injection / Directory Traversal / Cross-Site Scripting 8 WEB Salvatore Fresta
2009-03-09   CS-Cart 2.0.0 Beta 3 - 'Product_ID' SQL Injection 8 WEB netsoul
2009-03-09   woltlab burning board 3.0.x - Multiple Vulnerabilities 8 WEB StAkeR
2009-03-09   PHPRecipeBook 2.24 - 'base_id' SQL Injection 8 WEB d3b4g
2009-03-09   PHP Director 0.21 - SQL Into Outfile 'eval()' Injection 8 WEB StAkeR
2009-03-09   cms s.builder 3.7 - Remote File Inclusion 8 WEB cr0w
2009-03-09   nForum 1.5 - Multiple SQL Injections 8 WEB Salvatore Fresta
2009-03-06   OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion 8 WEB dun
2009-03-06   isiAJAX 1 - 'praises.php?id' SQL Injection 7 WEB dun
2009-03-06   Wili-CMS 0.4.0 - Local File Inclusion / Remote File Inclusion / Authentication Bypass 8 WEB Salvatore Fresta
2009-03-06   Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection 7 WEB ka0x
2009-03-05   Joomla! Component com_iJoomla_archive - Blind SQL Injection 8 WEB Stack
2009-03-05   celerbb 0.0.2 - Multiple Vulnerabilities 8 WEB Salvatore Fresta
2009-03-03   Jogjacamp JProfile Gold - 'id_news' SQL Injection 9 WEB kecemplungkalen
2009-03-03   Novaboard 1.0.1 - Cross-Site Scripting 9 WEB Pepelux
2009-03-03   tghostscripter Amazon Shop - Cross-Site Scripting / Directory Traversal / Remote File Inclusion 8 WEB d3b4g
2009-03-03   blindblog 1.3.1 - SQL Injection / Authentication Bypass / Local File Inclusion 9 WEB Salvatore Fresta
2009-03-03   Zabbix 1.6.2 Frontend - Multiple Vulnerabilities 7 WEB USH
2009-03-02   ritsblog 0.4.2 - Authentication Bypass / Cross-Site Scripting 9 WEB Salvatore Fresta
2009-03-02   Joomla! / Mambo Component eXtplorer - Code Execution 8 WEB Juan Galiana Lara
2009-03-02   Joomla! Component com_digistore - 'pid' Blind SQL Injection 8 WEB InjEctOr5
2009-03-02   Graugon PHP Article Publisher 1.0 - SQL Injection / Cookie Handling 8 WEB x0r
2009-03-02   Access2asp - 'imageLibrar' Arbitrary File Upload 8 WEB mr.al7rbi
2009-03-02   Digital Interchange Calendar 5.7.13 - Contents Change 7 WEB ByALBAYX
2009-03-02   Document Library 1.0.1 - Arbitrary Change Admin 8 WEB ByALBAYX
2009-03-02   EZ-Blog beta1 - Delete All Posts / SQL Injection 8 WEB Salvatore Fresta
2009-03-02   Blogman 0.45 - Multiple Vulnerabilities 9 WEB Salvatore Fresta
2009-02-27   Demium CMS 0.2.1b - Multiple Vulnerabilities 8 WEB Osirys
2009-02-27   irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection 8 WEB Corwin
2009-02-27   SkyPortal Downloads Manager 1.1 - Remote Contents Change 8 WEB ByALBAYX
2009-02-26   BannerManager 0.81 - Authentication Bypass 10 WEB rootzig
2009-02-26   Coppermine Photo Gallery 1.4.20 - 'IMG' Privilege Escalation 7 WEB Inphex
2009-02-26   Coppermine Photo Gallery 1.4.20 - BBCode IMG Privilege Escalation 8 WEB StAkeR
2009-02-26   DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass 8 WEB ByALBAYX
2009-02-26   Golabi CMS 1.0 - Remote File Inclusion 8 WEB CrazyAngel
2009-02-25   SkyPortal WebLinks 0.12 - Contents Change 8 WEB ByALBAYX
2009-02-25   SkyPortal Picture Manager 0.11 - Contents Change 9 WEB ByALBAYX
2009-02-25   SkyPortal Classifieds System 0.12 - Contents Change 7 WEB ByALBAYX
2009-02-25   PenPal 2.0 - Authentication Bypass 8 WEB ByALBAYX
2009-02-25   pPIM 1.0 - Multiple Vulnerabilities 8 WEB Justin Keane
2009-02-24   Qwerty CMS - 'id' SQL Injection 8 WEB b3