Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-02-24   XGuestBook 2.0 - Authentication Bypass 8 WEB Fireshot
2009-02-23   MDPro Module My_eGallery - 'pid' SQL Injection 8 WEB StAkeR
2009-02-23   taifajobs 1.0 - 'jobid' SQL Injection 8 WEB K-159
2009-02-23   Pyrophobia 2.1.3.1 - Local File Inclusion Command Execution 8 WEB Osirys
2009-02-23   Free Arcade Script 1.0 - Local File Inclusion Command Execution 8 WEB Osirys
2009-02-23   pPIM 1.01 - 'notes.php' Remote Command Execution 9 WEB JosS
2009-02-23   zFeeder 1.6 - 'admin.php' Admin Bypass 8 WEB ahmadbady
2009-02-20   Graugon Forum 1 - 'id' Command Injection / SQL Injection 8 WEB Osirys
2009-02-20   Osmodia Bulletin Board 1.x - 'admin.txt' File Disclosure 8 WEB Pouya_Server
2009-02-20   i-dreams GB Server - 'admin.dat' File Disclosure 8 WEB Pouya_Server
2009-02-20   i-dreams GB 5.4 Final - 'admin.dat' File Disclosure 8 WEB Pouya_Server
2009-02-20   i-dreams Mailer 1.2 Final - 'admin.dat' File Disclosure 8 WEB Pouya_Server
2009-02-20   phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion 8 WEB Kacper
2009-02-18   smNews 1.0 - Authentication Bypass / Column Truncation 7 WEB x0r
2009-02-18   Firepack - '/admin/ref.php' Remote Code Execution 8 WEB Lidloses_Auge
2009-02-17   pHNews Alpha 1 - 'genbackup.php' Database Disclosure 8 WEB x0r
2009-02-17   pHNews Alpha 1 - 'mod' SQL Injection 8 WEB x0r
2009-02-17   S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete 9 WEB x0r
2009-02-17   SAS Hotel Management System - Arbitrary File Upload 8 WEB ZoRLu
2009-02-16   Grestul 1.x - Cookie Authentication Bypass 8 WEB x0r
2009-02-16   ravennuke 2.3.0 - Multiple Vulnerabilities 8 WEB waraxe
2009-02-16   YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion 8 WEB ahmadbady
2009-02-16   SAS Hotel Management System - 'id' SQL Injection 9 WEB Darkb0x
2009-02-16   MemHT Portal 4.0.1 - Delete All Private Messages 8 WEB StAkeR
2009-02-16   Novaboard 1.0.0 - Multiple Vulnerabilities 8 WEB brain[pillow]
2009-02-16   powermovielist 0.14b - SQL Injection / Cross-Site Scripting 9 WEB brain[pillow]
2009-02-16   simplePms CMS 0.1.4 - Local File Inclusion / Remote Command Execution 9 WEB Osirys
2009-02-16   Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload 10 WEB Sp3shial
2009-02-16   InselPhoto 1.1 - Cross-Site Scripting 8 WEB rAWjAW
2009-02-13   CmsFaethon 2.2.0 - 'item' SQL Injection 8 WEB Osirys
2009-02-13   BlogWrite 0.91 - Remote File Disclosure / SQL Injection 8 WEB Osirys
2009-02-13   ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion 8 WEB bd0rk
2009-02-13   Vlinks 1.1.6 - 'id' SQL Injection 9 WEB JIKO
2009-02-13   ideacart 0.02 - Local File Inclusion / SQL Injection 9 WEB nuclear
2009-02-12   Baran CMS 1.0 - 'Arbitrary '.ASP' File Upload / File Disclosure / SQL Injection / Cross-Site Scripti 8 WEB Aria-Security Team
2009-02-12   Free Joke Script 1.0 - Authentication Bypass 9 WEB Muhacir
2009-02-12   PHP Krazy Image Host Script 1.01 - 'id' SQL Injection 9 WEB x0r
2009-02-11   InselPhoto 1.1 - 'query' SQL Injection 9 WEB Osirys
2009-02-11   Den Dating 9.01 - 'txtlookgender' SQL Injection 8 WEB nuclear
2009-02-11   Bloggeruniverse 2.0 Beta - 'id' SQL Injection 9 WEB Osirys
2009-02-11   dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure 10 WEB Mehmet Ince
2009-02-11   Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass 8 WEB x0r
2009-02-11   SkaDate Online 7 - Arbitrary File Upload 8 WEB ZoRLu
2009-02-10   TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure 8 WEB Lolek
2009-02-10   Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution 9 WEB Osirys
2009-02-10   BlueBird Pre-Release - Authentication Bypass 9 WEB x0r
2009-02-10   Mynews 0.10 - Authentication Bypass 8 WEB x0r
2009-02-10   AuthPhp 1.0 - Authentication Bypass 8 WEB x0r
2009-02-10   Potato News 1.0.0 - Local File Inclusion 8 WEB x0r
2009-02-10   Q-News 2.0 - Remote Command Execution 8 WEB Fireshot
2009-02-10   Papoo CMS 3.x - 'pfadhier' Local File Inclusion 8 WEB SirGod
2009-02-10   Thyme 1.3 - 'export_to' Local File Inclusion 8 WEB cheverok
2009-02-09   Hedgehog-CMS 1.21 - Local File Inclusion / Remote Command Execution 8 WEB Osirys
2009-02-09   Gaeste 1.6 - 'gastbuch.php' Remote File Disclosure 9 WEB bd0rk
2009-02-09   WB News 2.1.1 - config[installdir] Remote File Inclusion 8 WEB ahmadbady
2009-02-09   webframe 0.76 - Multiple File Inclusions 9 WEB ahmadbady
2009-02-09   Yet Another NOCC 0.1.0 - Local File Inclusion 8 WEB Kacper
2009-02-09   ZeroBoardXE 1.1.5 (09.01.22) - Cross-Site Scripting 8 WEB make0day
2009-02-09   FlexCMS 2.5 - 'catId' SQL Injection 8 WEB MisterRichard
2009-02-09   SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion / Cross-Site Scripting 8 WEB RoMaNcYxHaCkEr
2009-02-09   AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion 9 WEB RoMaNcYxHaCkEr
2009-02-09   Hedgehog-CMS 1.21 - Remote Command Execution 8 WEB darkjoker
2009-02-09   PHP Director 0.21 - Remote Command Execution 8 WEB darkjoker
2009-02-09   A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection 8 WEB BackDoor
2009-02-09   BusinessSpace 1.2 - 'id' SQL Injection 8 WEB K-159
2009-02-09   w3bcms 3.5.0 - Multiple Vulnerabilities 8 WEB DNX
2009-02-09   IF-CMS 2.0 - 'id' Blind SQL Injection 8 WEB darkjoker
2009-02-09   Traidnt UP 1.0 - Arbitrary File Upload 8 WEB fantastic
2009-02-06   phpYabs 0.1.2 - 'Azione' Remote File Inclusion 8 WEB Arka69
2009-02-06   SilverNews 2.04 - Authentication Bypass / Local File Inclusion / Remote Code Execution 8 WEB x0r
2009-02-06   1024 CMS 1.4.4 - Remote Command Execution / Remote File Inclusion 8 WEB JosS
2009-02-06   CafeEngine - 'catid' SQL Injection 8 WEB SuNHouSe2
2009-02-06   Mailist 3.0 - Insecure Backup / Local File Inclusion 8 WEB SirGod
2009-02-06   Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities 8 WEB make0day
2009-02-06   Simple PHP News 1.0 - Remote Command Execution 8 WEB Osirys
2009-02-06   WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload 8 WEB ByALBAYX
2009-02-05   txtBB 1.0 RC3 - HTML/JS Injection / Arbitrary Add Admin Privileges 8 WEB cOndemned
2009-02-05   ClearBudget 0.6.1 - Insecure Database Disclosure 9 WEB Room-Hacker
2009-02-05   Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure 8 WEB RoMaNcYxHaCkEr
2009-02-05   ClearBudget 0.6.1 - Insecure Cookie Handling / Local File Inclusion 8 WEB SirGod
2009-02-04   GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup 8 WEB JosS
2009-02-04   gr blog 1.1.4 - Arbitrary File Upload / Authentication Bypass 7 WEB JosS
2009-02-04   YapBB 1.2 - 'forumID' Blind SQL Injection 8 WEB darkjoker
2009-02-04   team 1.x - File Disclosure / Cross-Site Scripting 8 WEB Pouya_Server
2009-02-04   Power System Of Article Management 3.0 - File Disclosure / Cross-Site Scripting 8 WEB Pouya_Server
2009-02-04   PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion 8 WEB Osirys
2009-02-04   GRBoard 1.8 - Multiple Remote File Inclusions 8 WEB make0day
2009-02-04   rgboard 4 5p1 (07.07.27) - Multiple Vulnerabilities 8 WEB make0day
2009-02-04   Syntax Desktop 2.7 - 'synTarget' Local File Inclusion 8 WEB ahmadbady
2009-02-04   Jaws 0.8.8 - Multiple Local File Inclusions 8 WEB fuzion
2009-02-03   OpenFiler 2.3 - (Authentication Bypass) Remote Password Change 8 WEB nonroot
2009-02-03   Flatnux 2009-01-27 - Remote File Inclusion 9 WEB Alfons Luja
2009-02-03   DreamPics Photo/Video Gallery - Blind SQL Injection 7 WEB Mehmet Ince
2009-02-03   TxtBlog 1.0 Alpha - Remote Command Execution 8 WEB Osirys
2009-02-03   Technote 7.2 - Remote File Inclusion 8 WEB make0day
2009-02-03   4Site CMS 2.6 - Multiple SQL Injections 8 WEB D.Mortalov
2009-02-03   MyDesing Sayac 2.0 - Authentication Bypass 9 WEB Kacak
2009-02-03   WEBalbum 2.4b - 'id' Blind SQL Injection 10 WEB Mehmet Ince
2009-02-03   AJA Modules Rapidshare 1.0.0 - Arbitrary File Upload 8 WEB Hussin X
2009-02-03   Simple Machines Forum (SMF) - 'BBCode' Cookie Stealing 8 WEB Xianur0
2009-02-03   Online Grades 3.2.4 - Authentication Bypass 8 WEB x0r
2009-02-03   groone's Guestbook 2.0 - Remote File Inclusion 8 WEB k3vin mitnick
2009-02-03   groone glinks 2.1 - Remote File Inclusion 8 WEB k3vin mitnick
2009-02-03   ClickCart 6.0 - Authentication Bypass 8 WEB R3d-D3V!L
2009-02-03   WholeHogSoftware Password Protect - Insecure Cookie Handling 8 WEB Stack
2009-02-03   WholeHogSoftware Ware Support - Insecure Cookie Handling 9 WEB Stack
2009-02-02   OpenHelpDesk 1.0.100 - 'eval()' Code Execution (Metasploit) 7 WEB LSO
2009-02-02   PHPSlash 0.8.1.1 - Remote Code Execution 8 WEB DarkFig
2009-02-02   eVision CMS 2.0 - Remote Code Execution 8 WEB Osirys
2009-02-02   sourdough 0.3.5 - Remote File Inclusion 8 WEB ahmadbady
2009-02-02   CMS Mini 0.2.2 - Remote Command Execution 8 WEB darkjoker
2009-02-02   phpBLASTER 1.0 RC1 - Blind SQL Injection 9 WEB darkjoker
2009-02-02   WholeHogSoftware Password Protect - Authentication Bypass 8 WEB ByALBAYX
2009-02-02   WholeHogSoftware Ware Support - Authentication Bypass 9 WEB ByALBAYX
2009-02-02   AJA Portal 1.2 (Windows) - Local File Inclusion 8 WEB ahmadbady
2009-02-02   Flatnux 2009-01-27 - Cross-Site Scripting / Iframe Injection 10 WEB Alfons Luja
2009-02-02   sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting 10 WEB ahmadbady
2009-01-30   eVision CMS 2.0 - SQL Injection 8 WEB darkjoker
2009-01-30   SkaLinks 1.5 - Authentication Bypass 8 WEB Dimi4
2009-01-30   Orca 2.0.2 - 'topic ' Cross-Site Scripting 8 WEB J-Hacker
2009-01-30   bpautosales 1.0.1 - Cross-Site Scripting / SQL Injection 8 WEB Mehmet Ince
2009-01-30   GNUBoard 4.31.04 (09.01.30) - Multiple Local/Remote Vulnerabilities 8 WEB make0day
2009-01-30   Revou Twitter Clone - Cross-Site Scripting / SQL Injection 8 WEB nuclear
2009-01-30   SalesCart - Authentication Bypass 8 WEB ByALBAYX
2009-01-29   Pligg CMS 9.9.5 - Cross-Site Request Forgery / Protection Bypass / Captcha Bypass 9 WEB Michael Brooks