|
2009-01-26
|
|
Wazzum Dating Software - 'userid' SQL Injection
|
4 |
WEB
|
nuclear
|
|
2009-01-26
|
|
PHP-CMS 1 - 'Username' Blind SQL Injection
|
5 |
WEB
|
darkjoker
|
|
2009-01-26
|
|
SHOP-INET 4 - 'grid' SQL Injection
|
4 |
WEB
|
FeDeReR
|
|
2009-01-26
|
|
Script Toko Online 5.01 - SQL Injection
|
4 |
WEB
|
k1n9k0ng
|
|
2009-01-26
|
|
E-ShopSystem - Authentication Bypass / SQL Injection
|
4 |
WEB
|
InjEctOr5
|
|
2009-01-26
|
|
ITLPoll 2.7 Stable2 - Blind SQL Injection
|
4 |
WEB
|
fuzion
|
|
2009-01-26
|
|
Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Uplo
|
4 |
WEB
|
Xianur0
|
|
2009-01-25
|
|
EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure
|
4 |
WEB
|
Pouya_Server
|
|
2009-01-25
|
|
OpenGoo 1.1 - Local File Inclusion
|
3 |
WEB
|
fuzion
|
|
2009-01-25
|
|
Flax Article Manager 1.1 - 'cat_id' SQL Injection
|
3 |
WEB
|
JIKO
|
|
2009-01-25
|
|
Web-Calendar Lite 1.0 - Authentication Bypass
|
4 |
WEB
|
ByALBAYX
|
|
2009-01-25
|
|
Mambo Component com_sim 0.8 - Blind SQL Injection
|
5 |
WEB
|
Mehmet Ince
|
|
2009-01-25
|
|
MemHT Portal 4.0.1 - Remote Code Execution
|
3 |
WEB
|
StAkeR
|
|
2009-01-22
|
|
Pardal CMS 0.2.0 - Blind SQL Injection
|
5 |
WEB
|
darkjoker
|
|
2009-01-22
|
|
asp-project 1.0 - Insecure Cookie Method
|
4 |
WEB
|
Khashayar Fereidani
|
|
2009-01-22
|
|
OwnRS Blog 1.2 - 'autor.php' SQL Injection
|
4 |
WEB
|
nuclear
|
|
2009-01-21
|
|
Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting
|
4 |
WEB
|
vds_s
|
|
2009-01-21
|
|
Joomla! Component com_pcchess - Blind SQL Injection
|
4 |
WEB
|
InjEctOr5
|
|
2009-01-21
|
|
Sad Raven's Click Counter 1.0 - 'passwd.dat' File Disclosure
|
3 |
WEB
|
Pouya_Server
|
|
2009-01-21
|
|
Mambo Component SOBI2 RC 2.8.2 - SQL Injection
|
4 |
WEB
|
Br1ght D@rk
|
|
2009-01-21
|
|
Joomla! Component Com BazaarBuilder Shopping Cart 5.0 - SQL Injection
|
5 |
WEB
|
XaDoS
|
|
2009-01-20
|
|
Dodo's Quiz Script 1.1 - Local File Inclusion
|
4 |
WEB
|
Stack
|
|
2009-01-20
|
|
LinPHA Photo Gallery 2.0 - Remote Command Execution
|
4 |
WEB
|
Osirys
|
|
2009-01-20
|
|
AJ Auction Pro OOPD 2.3 - 'id' SQL Injection
|
4 |
WEB
|
snakespc
|
|
2009-01-20
|
|
Max.Blog 1.0.6 - Arbitrary Delete Post
|
4 |
WEB
|
SirGod
|
|
2009-01-19
|
|
Ninja Blog 4.8 - Cross-Site Request Forgery/HTML Injection
|
3 |
WEB
|
Danny Moules
|
|
2009-01-19
|
|
Joomla! Component com_waticketsystem - Blind SQL Injection
|
3 |
WEB
|
InjEctOr5
|
|
2009-01-19
|
|
phpads 2.0 - Multiple Vulnerabilities
|
4 |
WEB
|
Danny Moules
|
|
2009-01-19
|
|
Ninja Blog 4.8 - Remote Information Disclosure
|
4 |
WEB
|
Danny Moules
|
|
2009-01-19
|
|
RCBlog 1.03 - Authentication Bypass
|
4 |
WEB
|
Danny Moules
|
|
2009-01-19
|
|
Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting
|
4 |
WEB
|
Osirys
|
|
2009-01-19
|
|
Joomla! Component com_news - SQL Injection
|
5 |
WEB
|
snakespc
|
|
2009-01-19
|
|
Joomla! Component com_pccookbook - 'recipe_id' Blind SQL Injection
|
4 |
WEB
|
InjEctOr5
|
|
2009-01-19
|
|
Fhimage 1.2.1 - Remote Command Execution (mq = off)
|
4 |
WEB
|
Osirys
|
|
2009-01-19
|
|
Fhimage 1.2.1 - Remote Index Change
|
4 |
WEB
|
Osirys
|
|
2009-01-18
|
|
ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure
|
4 |
WEB
|
bd0rk
|
|
2009-01-18
|
|
SCMS 1 - Local File Inclusion
|
4 |
WEB
|
ahmadbady
|
|
2009-01-18
|
|
Click&Email - Authentication Bypass
|
4 |
WEB
|
SuB-ZeRo
|
|
2009-01-18
|
|
DS-IPN.NET Digital Sales IPN - Database Disclosure
|
4 |
WEB
|
Moudi
|
|
2009-01-18
|
|
Joomla! Component Gigcal 1.x - 'id' SQL Injection
|
4 |
WEB
|
Lanti-Net
|
|
2009-01-16
|
|
BibCiter 1.4 - Multiple SQL Injections
|
4 |
WEB
|
nuclear
|
|
2009-01-16
|
|
Simple PHP NewsLetter 1.5 - Local File Inclusion
|
4 |
WEB
|
ahmadbady
|
|
2009-01-16
|
|
Aj Classifieds For Sale 3.0 - Arbitrary File Upload
|
4 |
WEB
|
ZoRLu
|
|
2009-01-16
|
|
Aj Classifieds Personals 3.0 - Arbitrary File Upload
|
5 |
WEB
|
ZoRLu
|
|
2009-01-16
|
|
Aj Classifieds Real Estate 3.0 - Arbitrary File Upload
|
4 |
WEB
|
ZoRLu
|
|
2009-01-16
|
|
ASP ActionCalendar 1.3 - Authentication Bypass
|
5 |
WEB
|
SuB-ZeRo
|
|
2009-01-16
|
|
blogit! - SQL Injection / File Disclosure / Cross-Site Scripting
|
4 |
WEB
|
Pouya_Server
|
|
2009-01-16
|
|
Rankem - File Disclosure / Cross-Site Scripting / Cookie
|
4 |
WEB
|
Pouya_Server
|
|
2009-01-16
|
|
Ping IP - Authentication Bypass
|
4 |
WEB
|
ByALBAYX
|
|
2009-01-16
|
|
The Walking Club - Authentication Bypass
|
4 |
WEB
|
ByALBAYX
|
|
2009-01-16
|
|
eReservations - Authentication Bypass
|
4 |
WEB
|
ByALBAYX
|
|
2009-01-16
|
|
eFAQ - Authentication Bypass
|
4 |
WEB
|
ByALBAYX
|
|
2009-01-15
|
|
Free Bible Search PHP Script - SQL Injection
|
4 |
WEB
|
nuclear
|
|
2009-01-15
|
|
Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection
|
4 |
WEB
|
darkjoker
|
|
2009-01-15
|
|
MKPortal 1.2.1 - Multiple Vulnerabilities
|
4 |
WEB
|
waraxe
|
|
2009-01-15
|
|
Joomla! Component RD-Autos 1.5.5 - SQL Injection
|
4 |
WEB
|
H!tm@N
|
|
2009-01-15
|
|
Joomla! Component com_Eventing 1.6.x - Blind SQL Injection
|
5 |
WEB
|
InjEctOr5
|
|
2009-01-15
|
|
GNUBoard 4.31.03 (08.12.29) - Local File Inclusion
|
4 |
WEB
|
flyh4t
|
|
2009-01-15
|
|
DMXReady Billboard Manager 1.1 - Arbitrary File Upload
|
3 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady SDK 1.1 - Arbitrary File Download
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady BillboardManager 1.1 - Contents Change
|
4 |
WEB
|
x0r
|
|
2009-01-14
|
|
DMXReady Secure Document Library 1.1 - SQL Injection
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
PHP Photo Album 0.8b - 'preview' Local File Inclusion
|
4 |
WEB
|
Osirys
|
|
2009-01-14
|
|
DMXReady Registration Manager 1.1 - Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Photo Gallery Manager 1.1 - Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady PayPal Store Manager 1.1 - Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
phosheezy 2.0 - Remote Command Execution
|
4 |
WEB
|
Osirys
|
|
2009-01-14
|
|
phpList 2.10.8 - Local File Inclusion
|
5 |
WEB
|
BugReport.IR
|
|
2009-01-14
|
|
Joomla! Component Fantasytournament - SQL Injection
|
4 |
WEB
|
H!tm@N
|
|
2009-01-14
|
|
Joomla! Component Camelcitydb2 2.2 - SQL Injection
|
4 |
WEB
|
H!tm@N
|
|
2009-01-14
|
|
DMXReady Members Area Manager 1.2 - SQL Injection
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Member Directory Manager 1.1 - SQL Injection
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Links Manager 1.1 - Remote Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Job Listing 1.1 - Remote Contents Change
|
3 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Faqs Manager 1.1 - Remote Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Document Library Manager 1.1 - Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Contact Us Manager 1.1 - Remote Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Classified Listings Manager 1.1 - SQL Injection
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Catalog Manager 1.1 - Remote Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-14
|
|
DMXReady Blog Manager 1.1 - Remote File Delete
|
5 |
WEB
|
ajann
|
|
2009-01-14
|
|
Netvolution CMS 1.0 - Cross-Site Scripting / SQL Injection
|
4 |
WEB
|
Ellinas
|
|
2009-01-14
|
|
Syzygy CMS 0.3 - Authentication Bypass
|
4 |
WEB
|
darkjoker
|
|
2009-01-13
|
|
Dark Age CMS 0.2c Beta - Authentication Bypass
|
5 |
WEB
|
darkjoker
|
|
2009-01-13
|
|
DMXReady Account List Manager 1.1 - Contents Change
|
4 |
WEB
|
ajann
|
|
2009-01-13
|
|
HSPell 1.1 - 'cilla.cgi' Remote Command Execution
|
3 |
WEB
|
ZeN
|
|
2009-01-13
|
|
DMXReady News Manager 1.1 - Arbitrary Category Change
|
4 |
WEB
|
ajann
|
|
2009-01-13
|
|
Joomla! Component gigCalendar 1.0 - SQL Injection
|
4 |
WEB
|
boom3rang
|
|
2009-01-13
|
|
Virtual Guestbook 2.1 - Remote Database Disclosure
|
4 |
WEB
|
Moudi
|
|
2009-01-12
|
|
Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion
|
4 |
WEB
|
ahmadbady
|
|
2009-01-12
|
|
dMx READ - Remote Database Disclosure
|
3 |
WEB
|
Cyber-Zone
|
|
2009-01-12
|
|
PWP Wiki Processor 1-5-1 - Arbitrary File Upload
|
4 |
WEB
|
ahmadbady
|
|
2009-01-12
|
|
WordPress Plugin WP-Forum 1.7.8 - SQL Injection
|
4 |
WEB
|
seomafia
|
|
2009-01-12
|
|
Comersus Shopping Cart 6.0 - Remote User Pass
|
4 |
WEB
|
ajann
|
|
2009-01-12
|
|
Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass
|
3 |
WEB
|
Xianur0
|
|
2009-01-12
|
|
Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection
|
4 |
WEB
|
H!tm@N
|
|
2009-01-11
|
|
Photobase 1.2 - 'Language' Local File Inclusion
|
4 |
WEB
|
Osirys
|
|
2009-01-11
|
|
Silentum Uploader 1.4.0 - Remote File Deletion
|
4 |
WEB
|
Danny Moules
|
|
2009-01-11
|
|
fttss 2.0 - Remote Command Execution
|
4 |
WEB
|
dun
|
|
2009-01-11
|
|
Social Engine - SQL Injection
|
5 |
WEB
|
snakespc
|
|
2009-01-11
|
|
PHP-Fusion Mod the_kroax - SQL Injection
|
4 |
WEB
|
FasTWORM
|
|
2009-01-11
|
|
Weight Loss Recipe Book 3.1 - Authentication Bypass
|
5 |
WEB
|
x0r
|
|
2009-01-11
|
|
BKWorks ProPHP 0.50b1 - Authentication Bypass
|
5 |
WEB
|
SirGod
|
|
2009-01-11
|
|
XOOPS Module tadbook2 - SQL Injection
|
4 |
WEB
|
stylextra
|
|
2009-01-11
|
|
phpMDJ 1.0.3 - 'id_animateur' Blind SQL Injection
|
4 |
WEB
|
darkjoker
|
|
2009-01-11
|
|
Seo4SMF for SMF forums - Multiple Vulnerabilities
|
4 |
WEB
|
WHK
|
|
2009-01-11
|
|
DZcms 3.1 - SQL Injection
|
4 |
WEB
|
Glafkos Charalambous
|
|
2009-01-11
|
|
Fast Guest Book - Authentication Bypass
|
4 |
WEB
|
Moudi
|
|
2009-01-11
|
|
Joomla! Component com_newsflash - 'id' SQL Injection
|
4 |
WEB
|
EcHoLL
|
|
2009-01-11
|
|
Joomla! Component com_jashowcase - 'catid' SQL Injection
|
4 |
WEB
|
EcHoLL
|
|
2009-01-11
|
|
Joomla! Component com_xevidmegahd - SQL Injection
|
4 |
WEB
|
EcHoLL
|
|
2009-01-09
|
|
Fast FAQs System - Authentication Bypass
|
5 |
WEB
|
x0r
|
|
2009-01-08
|
|
XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution
|
5 |
WEB
|
StAkeR
|
|
2009-01-08
|
|
Pizzis CMS 1.5.1 - Blind SQL Injection
|
4 |
WEB
|
darkjoker
|
|
2009-01-08
|
|
PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
|
5 |
WEB
|
Khashayar Fereidani
|
|
2009-01-08
|
|
CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution
|
4 |
WEB
|
StAkeR
|
|
2009-01-07
|
|
QuoteBook - Remote Configuration File Disclosure
|
3 |
WEB
|
Moudi
|
|
2009-01-07
|
|
PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection
|
4 |
WEB
|
Khashayar Fereidani
|
|
2009-01-07
|
|
PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection
|
4 |
WEB
|
Khashayar Fereidani
|
|
2009-01-07
|
|
Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal
|
4 |
WEB
|
irk4z
|
|
2009-01-06
|
|
PollHelper - Remote Configuration File Disclosure
|
4 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
BlogHelper - Remote Configuration File Disclosure
|
4 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
|
4 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
ItCMS 2.1a - Authentication Bypass
|
4 |
WEB
|
certaindeath
|
|
2009-01-06
|
|
Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection
|
4 |
WEB
|
darkjoker
|
|
2009-01-06
|
|
RiotPix 0.61 - Authentication Bypass
|
4 |
WEB
|
ZoRLu
|
