Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-01-29   PLE CMS 1.0 Beta 4.2 - Blind SQL Injection 8 WEB darkjoker
2009-01-29   Netartmedia Car Portal 1.0 - Authentication Bypass 12 WEB Mehmet Ince
2009-01-29   GLPI 0.71.3 - Multiple SQL Injections Vulnerabilities 8 WEB Zigma
2009-01-29   Coppermine Photo Gallery 1.4.19 - Remote File Upload 8 WEB Michael Brooks
2009-01-29   Star Articles 6.0 - Remote Contents Change 8 WEB ByALBAYX
2009-01-29   Personal Site Manager 0.3 - Remote Command Execution 8 WEB darkjoker
2009-01-28   SmartSiteCMS 1.0 - Blind SQL Injection 8 WEB certaindeath
2009-01-28   Social Engine 3.06 - 'category_id' SQL Injection 8 WEB snakespc
2009-01-28   Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass 8 WEB Salvatore Fresta
2009-01-28   Max.Blog 1.0.6 - 'submit_post.php' SQL Injection 8 WEB Salvatore Fresta
2009-01-28   phpList 2.10.x - Remote Code Execution / Local File Inclusion 8 WEB mozi
2009-01-28   Lore 1.5.6 - 'article.php' Blind SQL Injection 8 WEB OzX
2009-01-28   Gazelle CMS 1.0 - 'template' Local File Inclusion 8 WEB fuzion
2009-01-28   Chipmunk Blog - (Authentication Bypass) Add Admin 8 WEB x0r
2009-01-28   gamescript 4.6 - Cross-Site Scripting / SQL Injection / Local File Inclusion 8 WEB Encrypt3d.M!nd
2009-01-28   Community CMS 0.4 - 'id' Blind SQL Injection 8 WEB darkjoker
2009-01-27   Pixie CMS 1.0 - Multiple Local File Inclusions 9 WEB DSecRG
2009-01-27   Max.Blog 1.0.6 - 'show_post.php' SQL Injection 8 WEB Salvatore Fresta
2009-01-27   Flax Article Manager 1.1 - Remote PHP Script Upload 8 WEB S.W.A.T.
2009-01-26   OpenX 2.6.3 - 'MAX_type' Local File Inclusion 8 WEB Charlie Briggs
2009-01-26   Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection 8 WEB TurkGuvenligi
2009-01-26   ClickAuction - Authentication Bypass 9 WEB R3d-D3V!L
2009-01-26   SiteXS CMS 0.1.1 - Local File Inclusion 9 WEB darkjoker
2009-01-26   Groone's GLink ORGanizer - 'index.php?cat' SQL Injection 9 WEB nuclear
2009-01-26   Wazzum Dating Software - 'userid' SQL Injection 9 WEB nuclear
2009-01-26   PHP-CMS 1 - 'Username' Blind SQL Injection 9 WEB darkjoker
2009-01-26   SHOP-INET 4 - 'grid' SQL Injection 9 WEB FeDeReR
2009-01-26   Script Toko Online 5.01 - SQL Injection 8 WEB k1n9k0ng
2009-01-26   E-ShopSystem - Authentication Bypass / SQL Injection 9 WEB InjEctOr5
2009-01-26   ITLPoll 2.7 Stable2 - Blind SQL Injection 8 WEB fuzion
2009-01-26   Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Uplo 8 WEB Xianur0
2009-01-25   EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure 8 WEB Pouya_Server
2009-01-25   OpenGoo 1.1 - Local File Inclusion 7 WEB fuzion
2009-01-25   Flax Article Manager 1.1 - 'cat_id' SQL Injection 7 WEB JIKO
2009-01-25   Web-Calendar Lite 1.0 - Authentication Bypass 8 WEB ByALBAYX
2009-01-25   Mambo Component com_sim 0.8 - Blind SQL Injection 8 WEB Mehmet Ince
2009-01-25   MemHT Portal 4.0.1 - Remote Code Execution 7 WEB StAkeR
2009-01-22   Pardal CMS 0.2.0 - Blind SQL Injection 9 WEB darkjoker
2009-01-22   asp-project 1.0 - Insecure Cookie Method 9 WEB Khashayar Fereidani
2009-01-22   OwnRS Blog 1.2 - 'autor.php' SQL Injection 8 WEB nuclear
2009-01-21   Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting 9 WEB vds_s
2009-01-21   Joomla! Component com_pcchess - Blind SQL Injection 8 WEB InjEctOr5
2009-01-21   Sad Raven's Click Counter 1.0 - 'passwd.dat' File Disclosure 8 WEB Pouya_Server
2009-01-21   Mambo Component SOBI2 RC 2.8.2 - SQL Injection 8 WEB Br1ght D@rk
2009-01-21   Joomla! Component Com BazaarBuilder Shopping Cart 5.0 - SQL Injection 9 WEB XaDoS
2009-01-20   Dodo's Quiz Script 1.1 - Local File Inclusion 8 WEB Stack
2009-01-20   LinPHA Photo Gallery 2.0 - Remote Command Execution 10 WEB Osirys
2009-01-20   AJ Auction Pro OOPD 2.3 - 'id' SQL Injection 8 WEB snakespc
2009-01-20   Max.Blog 1.0.6 - Arbitrary Delete Post 8 WEB SirGod
2009-01-19   Ninja Blog 4.8 - Cross-Site Request Forgery/HTML Injection 7 WEB Danny Moules
2009-01-19   Joomla! Component com_waticketsystem - Blind SQL Injection 7 WEB InjEctOr5
2009-01-19   phpads 2.0 - Multiple Vulnerabilities 8 WEB Danny Moules
2009-01-19   Ninja Blog 4.8 - Remote Information Disclosure 8 WEB Danny Moules
2009-01-19   RCBlog 1.03 - Authentication Bypass 8 WEB Danny Moules
2009-01-19   Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting 8 WEB Osirys
2009-01-19   Joomla! Component com_news - SQL Injection 9 WEB snakespc
2009-01-19   Joomla! Component com_pccookbook - 'recipe_id' Blind SQL Injection 8 WEB InjEctOr5
2009-01-19   Fhimage 1.2.1 - Remote Command Execution (mq = off) 8 WEB Osirys
2009-01-19   Fhimage 1.2.1 - Remote Index Change 8 WEB Osirys
2009-01-18   ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure 8 WEB bd0rk
2009-01-18   SCMS 1 - Local File Inclusion 8 WEB ahmadbady
2009-01-18   Click&Email - Authentication Bypass 8 WEB SuB-ZeRo
2009-01-18   DS-IPN.NET Digital Sales IPN - Database Disclosure 8 WEB Moudi
2009-01-18   Joomla! Component Gigcal 1.x - 'id' SQL Injection 8 WEB Lanti-Net
2009-01-16   BibCiter 1.4 - Multiple SQL Injections 8 WEB nuclear
2009-01-16   Simple PHP NewsLetter 1.5 - Local File Inclusion 7 WEB ahmadbady
2009-01-16   Aj Classifieds For Sale 3.0 - Arbitrary File Upload 7 WEB ZoRLu
2009-01-16   Aj Classifieds Personals 3.0 - Arbitrary File Upload 8 WEB ZoRLu
2009-01-16   Aj Classifieds Real Estate 3.0 - Arbitrary File Upload 8 WEB ZoRLu
2009-01-16   ASP ActionCalendar 1.3 - Authentication Bypass 10 WEB SuB-ZeRo
2009-01-16   blogit! - SQL Injection / File Disclosure / Cross-Site Scripting 8 WEB Pouya_Server
2009-01-16   Rankem - File Disclosure / Cross-Site Scripting / Cookie 9 WEB Pouya_Server
2009-01-16   Ping IP - Authentication Bypass 9 WEB ByALBAYX
2009-01-16   The Walking Club - Authentication Bypass 8 WEB ByALBAYX
2009-01-16   eReservations - Authentication Bypass 8 WEB ByALBAYX
2009-01-16   eFAQ - Authentication Bypass 8 WEB ByALBAYX
2009-01-15   Free Bible Search PHP Script - SQL Injection 8 WEB nuclear
2009-01-15   Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection 8 WEB darkjoker
2009-01-15   MKPortal 1.2.1 - Multiple Vulnerabilities 8 WEB waraxe
2009-01-15   Joomla! Component RD-Autos 1.5.5 - SQL Injection 8 WEB H!tm@N
2009-01-15   Joomla! Component com_Eventing 1.6.x - Blind SQL Injection 9 WEB InjEctOr5
2009-01-15   GNUBoard 4.31.03 (08.12.29) - Local File Inclusion 8 WEB flyh4t
2009-01-15   DMXReady Billboard Manager 1.1 - Arbitrary File Upload 8 WEB ajann
2009-01-14   DMXReady SDK 1.1 - Arbitrary File Download 8 WEB ajann
2009-01-14   DMXReady BillboardManager 1.1 - Contents Change 8 WEB x0r
2009-01-14   DMXReady Secure Document Library 1.1 - SQL Injection 8 WEB ajann
2009-01-14   PHP Photo Album 0.8b - 'preview' Local File Inclusion 8 WEB Osirys
2009-01-14   DMXReady Registration Manager 1.1 - Contents Change 8 WEB ajann
2009-01-14   DMXReady Photo Gallery Manager 1.1 - Contents Change 8 WEB ajann
2009-01-14   DMXReady PayPal Store Manager 1.1 - Contents Change 8 WEB ajann
2009-01-14   phosheezy 2.0 - Remote Command Execution 8 WEB Osirys
2009-01-14   phpList 2.10.8 - Local File Inclusion 9 WEB BugReport.IR
2009-01-14   Joomla! Component Fantasytournament - SQL Injection 8 WEB H!tm@N
2009-01-14   Joomla! Component Camelcitydb2 2.2 - SQL Injection 8 WEB H!tm@N
2009-01-14   DMXReady Members Area Manager 1.2 - SQL Injection 8 WEB ajann
2009-01-14   DMXReady Member Directory Manager 1.1 - SQL Injection 8 WEB ajann
2009-01-14   DMXReady Links Manager 1.1 - Remote Contents Change 8 WEB ajann
2009-01-14   DMXReady Job Listing 1.1 - Remote Contents Change 7 WEB ajann
2009-01-14   DMXReady Faqs Manager 1.1 - Remote Contents Change 8 WEB ajann
2009-01-14   DMXReady Document Library Manager 1.1 - Contents Change 8 WEB ajann
2009-01-14   DMXReady Contact Us Manager 1.1 - Remote Contents Change 8 WEB ajann
2009-01-14   DMXReady Classified Listings Manager 1.1 - SQL Injection 8 WEB ajann
2009-01-14   DMXReady Catalog Manager 1.1 - Remote Contents Change 8 WEB ajann
2009-01-14   DMXReady Blog Manager 1.1 - Remote File Delete 8 WEB ajann
2009-01-14   Netvolution CMS 1.0 - Cross-Site Scripting / SQL Injection 8 WEB Ellinas
2009-01-14   Syzygy CMS 0.3 - Authentication Bypass 8 WEB darkjoker
2009-01-13   Dark Age CMS 0.2c Beta - Authentication Bypass 9 WEB darkjoker
2009-01-13   DMXReady Account List Manager 1.1 - Contents Change 8 WEB ajann
2009-01-13   HSPell 1.1 - 'cilla.cgi' Remote Command Execution 7 WEB ZeN
2009-01-13   DMXReady News Manager 1.1 - Arbitrary Category Change 8 WEB ajann
2009-01-13   Joomla! Component gigCalendar 1.0 - SQL Injection 8 WEB boom3rang
2009-01-13   Virtual Guestbook 2.1 - Remote Database Disclosure 9 WEB Moudi
2009-01-12   Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion 10 WEB ahmadbady
2009-01-12   dMx READ - Remote Database Disclosure 7 WEB Cyber-Zone
2009-01-12   PWP Wiki Processor 1-5-1 - Arbitrary File Upload 9 WEB ahmadbady
2009-01-12   WordPress Plugin WP-Forum 1.7.8 - SQL Injection 8 WEB seomafia
2009-01-12   Comersus Shopping Cart 6.0 - Remote User Pass 8 WEB ajann
2009-01-12   Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass 8 WEB Xianur0
2009-01-12   Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection 8 WEB H!tm@N
2009-01-11   Photobase 1.2 - 'Language' Local File Inclusion 8 WEB Osirys
2009-01-11   Silentum Uploader 1.4.0 - Remote File Deletion 8 WEB Danny Moules
2009-01-11   fttss 2.0 - Remote Command Execution 8 WEB dun
2009-01-11   Social Engine - SQL Injection 9 WEB snakespc
2009-01-11   PHP-Fusion Mod the_kroax - SQL Injection 8 WEB FasTWORM
2009-01-11   Weight Loss Recipe Book 3.1 - Authentication Bypass 9 WEB x0r