|
2009-01-13
|
|
DMXReady Account List Manager 1.1 - Contents Change
|
15 |
WEB
|
ajann
|
|
2009-01-13
|
|
HSPell 1.1 - 'cilla.cgi' Remote Command Execution
|
13 |
WEB
|
ZeN
|
|
2009-01-13
|
|
DMXReady News Manager 1.1 - Arbitrary Category Change
|
17 |
WEB
|
ajann
|
|
2009-01-13
|
|
Joomla! Component gigCalendar 1.0 - SQL Injection
|
16 |
WEB
|
boom3rang
|
|
2009-01-13
|
|
Virtual Guestbook 2.1 - Remote Database Disclosure
|
17 |
WEB
|
Moudi
|
|
2009-01-12
|
|
Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion
|
17 |
WEB
|
ahmadbady
|
|
2009-01-12
|
|
dMx READ - Remote Database Disclosure
|
16 |
WEB
|
Cyber-Zone
|
|
2009-01-12
|
|
PWP Wiki Processor 1-5-1 - Arbitrary File Upload
|
18 |
WEB
|
ahmadbady
|
|
2009-01-12
|
|
WordPress Plugin WP-Forum 1.7.8 - SQL Injection
|
17 |
WEB
|
seomafia
|
|
2009-01-12
|
|
Comersus Shopping Cart 6.0 - Remote User Pass
|
16 |
WEB
|
ajann
|
|
2009-01-12
|
|
Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass
|
15 |
WEB
|
Xianur0
|
|
2009-01-12
|
|
Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection
|
18 |
WEB
|
H!tm@N
|
|
2009-01-11
|
|
Photobase 1.2 - 'Language' Local File Inclusion
|
16 |
WEB
|
Osirys
|
|
2009-01-11
|
|
Silentum Uploader 1.4.0 - Remote File Deletion
|
17 |
WEB
|
Danny Moules
|
|
2009-01-11
|
|
fttss 2.0 - Remote Command Execution
|
15 |
WEB
|
dun
|
|
2009-01-11
|
|
Social Engine - SQL Injection
|
16 |
WEB
|
snakespc
|
|
2009-01-11
|
|
PHP-Fusion Mod the_kroax - SQL Injection
|
16 |
WEB
|
FasTWORM
|
|
2009-01-11
|
|
Weight Loss Recipe Book 3.1 - Authentication Bypass
|
18 |
WEB
|
x0r
|
|
2009-01-11
|
|
BKWorks ProPHP 0.50b1 - Authentication Bypass
|
18 |
WEB
|
SirGod
|
|
2009-01-11
|
|
XOOPS Module tadbook2 - SQL Injection
|
14 |
WEB
|
stylextra
|
|
2009-01-11
|
|
phpMDJ 1.0.3 - 'id_animateur' Blind SQL Injection
|
17 |
WEB
|
darkjoker
|
|
2009-01-11
|
|
Seo4SMF for SMF forums - Multiple Vulnerabilities
|
14 |
WEB
|
WHK
|
|
2009-01-11
|
|
DZcms 3.1 - SQL Injection
|
16 |
WEB
|
Glafkos Charalambous
|
|
2009-01-11
|
|
Fast Guest Book - Authentication Bypass
|
14 |
WEB
|
Moudi
|
|
2009-01-11
|
|
Joomla! Component com_newsflash - 'id' SQL Injection
|
15 |
WEB
|
EcHoLL
|
|
2009-01-11
|
|
Joomla! Component com_jashowcase - 'catid' SQL Injection
|
17 |
WEB
|
EcHoLL
|
|
2009-01-11
|
|
Joomla! Component com_xevidmegahd - SQL Injection
|
16 |
WEB
|
EcHoLL
|
|
2009-01-09
|
|
Fast FAQs System - Authentication Bypass
|
14 |
WEB
|
x0r
|
|
2009-01-08
|
|
XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution
|
16 |
WEB
|
StAkeR
|
|
2009-01-08
|
|
Pizzis CMS 1.5.1 - Blind SQL Injection
|
17 |
WEB
|
darkjoker
|
|
2009-01-08
|
|
PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
|
16 |
WEB
|
Khashayar Fereidani
|
|
2009-01-08
|
|
CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution
|
14 |
WEB
|
StAkeR
|
|
2009-01-07
|
|
QuoteBook - Remote Configuration File Disclosure
|
14 |
WEB
|
Moudi
|
|
2009-01-07
|
|
PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection
|
16 |
WEB
|
Khashayar Fereidani
|
|
2009-01-07
|
|
PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection
|
16 |
WEB
|
Khashayar Fereidani
|
|
2009-01-07
|
|
Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal
|
13 |
WEB
|
irk4z
|
|
2009-01-06
|
|
PollHelper - Remote Configuration File Disclosure
|
17 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
BlogHelper - Remote Configuration File Disclosure
|
18 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
|
18 |
WEB
|
ahmadbady
|
|
2009-01-06
|
|
ItCMS 2.1a - Authentication Bypass
|
16 |
WEB
|
certaindeath
|
|
2009-01-06
|
|
Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection
|
16 |
WEB
|
darkjoker
|
|
2009-01-06
|
|
RiotPix 0.61 - Authentication Bypass
|
15 |
WEB
|
ZoRLu
|
|
2009-01-06
|
|
ezpack 4.2b2 - Cross-Site Scripting / SQL Injection
|
15 |
WEB
|
!-BUGJACK-!
|
|
2009-01-06
|
|
RiotPix 0.61 - 'forumid' Blind SQL Injection
|
17 |
WEB
|
cOndemned
|
|
2009-01-06
|
|
PHPAuctionSystem - Multiple Remote File Inclusions
|
14 |
WEB
|
darkmasking
|
|
2009-01-05
|
|
PHPAuctionSystem - Insecure Cookie Handling
|
17 |
WEB
|
ZoRLu
|
|
2009-01-05
|
|
PHPAuctionSystem - Cross-Site Scripting / SQL Injection
|
15 |
WEB
|
x0r
|
|
2009-01-05
|
|
Joomla! Component com_phocadocumentation - 'id' SQL Injection
|
15 |
WEB
|
EcHoLL
|
|
2009-01-05
|
|
Joomla! Component com_na_newsdescription - 'newsid' SQL Injection
|
15 |
WEB
|
EcHoLL
|
|
2009-01-05
|
|
Cybershade CMS 0.2b - 'index.php' Remote File Inclusion
|
16 |
WEB
|
JosS
|
|
2009-01-05
|
|
Joomla! Component simple_review 1.x - SQL Injection
|
15 |
WEB
|
EcHoLL
|
|
2009-01-05
|
|
Ayemsis Emlak Pro - Authentication Bypass
|
14 |
WEB
|
ByALBAYX
|
|
2009-01-05
|
|
Ayemsis Emlak Pro - 'acc.mdb' Database Disclosure
|
16 |
WEB
|
ByALBAYX
|
|
2009-01-04
|
|
The Rat CMS Alpha 2 - Blind SQL Injection
|
17 |
WEB
|
darkjoker
|
|
2009-01-04
|
|
plxAutoReminder 3.7 - 'id' SQL Injection
|
15 |
WEB
|
ZoRLu
|
|
2009-01-04
|
|
PHPMesFilms 1.0 - 'index.php?id' SQL Injection
|
14 |
WEB
|
SuB-ZeRo
|
|
2009-01-04
|
|
WSN Guest 1.23 - 'Search' SQL Injection
|
15 |
WEB
|
DaiMon
|
|
2009-01-04
|
|
PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions
|
11 |
WEB
|
StAkeR
|
|
2009-01-04
|
|
webSPELL 4.01.02 - 'id' Remote Edit Topics
|
16 |
WEB
|
StAkeR
|
|
2009-01-03
|
|
webSPELL 4 - Authentication Bypass
|
13 |
WEB
|
anonymous
|
|
2009-01-03
|
|
Lito Lite CMS - Multiple Cross-Site Scripting / Blind SQL Injection Vulnerabilities
|
16 |
WEB
|
darkjoker
|
|
2009-01-02
|
|
phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
|
18 |
WEB
|
ahmadbady
|
|
2009-01-02
|
|
Built2Go PHP Rate My Photo 1.46.4 - Arbitrary File Upload
|
15 |
WEB
|
ZoRLu
|
|
2009-01-02
|
|
Built2Go PHP Link Portal 1.95.1 - Arbitrary File Upload
|
16 |
WEB
|
ZoRLu
|
|
2009-01-01
|
|
PowerClan 1.14a - Authentication Bypass
|
15 |
WEB
|
Virangar Security
|
|
2009-01-01
|
|
PowerNews 2.5.4 - 'newsid' SQL Injection
|
15 |
WEB
|
Virangar Security
|
|
2009-01-01
|
|
w3blabor CMS 3.3.0 - Authentication Bypass
|
16 |
WEB
|
DNX
|
|
2009-01-01
|
|
phpScribe 0.9 - 'user.cfg' Remote Configuration Disclosure
|
15 |
WEB
|
ahmadbady
|
|
2009-01-01
|
|
Memberkit 1.0 - Arbitrary File Upload
|
14 |
WEB
|
Lo$er
|
|
2009-01-01
|
|
PHPFootball 1.6 - Remote Hash Disclosure
|
17 |
WEB
|
KinG-LioN
|
|
2009-01-01
|
|
ASPThai.Net WebBoard 6.0 - SQL Injection
|
16 |
WEB
|
DaiMon
|
|
2009-01-01
|
|
EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)
|
16 |
WEB
|
x0r
|
|
2009-01-01
|
|
2Capsule - SQL Injection
|
16 |
WEB
|
Zenith
|
|
2009-01-01
|
|
DDL-Speed Script - 'acp/backup' Admin Backup Bypass
|
15 |
WEB
|
tmh
|
|
2009-01-01
|
|
Viart shopping cart 3.5 - Multiple Vulnerabilities
|
18 |
WEB
|
Xia Shing Zee
|
|
2008-12-30
|
|
Pixel8 Web Photo Album 3.0 - SQL Injection
|
16 |
WEB
|
AlpHaNiX
|
|
2008-12-30
|
|
Mole Group Vacation Estate Listing Script - Blind SQL Injection
|
14 |
WEB
|
x0r
|
|
2008-12-30
|
|
CMScout 2.06 - SQL Injection / Local File Inclusion
|
17 |
WEB
|
SirGod
|
|
2008-12-30
|
|
Flexphpic 0.0.x - Authentication Bypass
|
15 |
WEB
|
S.W.A.T.
|
|
2008-12-29
|
|
Flexcustomer 0.0.6 - Admin Authentication Bypass / Possible PHP Code Writing
|
20 |
WEB
|
Osirys
|
|
2008-12-29
|
|
PHPAlumni - SQL Injection
|
17 |
WEB
|
Mr.SQL
|
|
2008-12-29
|
|
ThePortal 2.2 - Arbitrary File Upload
|
14 |
WEB
|
siurek22
|
|
2008-12-29
|
|
eDNews 2.0 - SQL Injection
|
13 |
WEB
|
Virangar Security
|
|
2008-12-29
|
|
Flexphplink 0.0.x - Authentication Bypass
|
16 |
WEB
|
x0r
|
|
2008-12-29
|
|
Flexphpsite 0.0.1 - Authentication Bypass
|
14 |
WEB
|
x0r
|
|
2008-12-29
|
|
FlexPHPDirectory 0.0.1 - Authentication Bypass
|
17 |
WEB
|
x0r
|
|
2008-12-29
|
|
Sepcity Classified - 'ID' SQL Injection
|
16 |
WEB
|
S.W.A.T.
|
|
2008-12-29
|
|
Joomla! Component com_na_content 1.0 - Blind SQL Injection
|
15 |
WEB
|
Mehmet Ince
|
|
2008-12-29
|
|
CMS NetCat 3.0/3.12 - Blind SQL Injection
|
17 |
WEB
|
s4avrd0w
|
|
2008-12-29
|
|
Sepcity Lawyer Portal - SQL Injection
|
16 |
WEB
|
Osmanizim
|
|
2008-12-29
|
|
Sepcity Shopping Mall - SQL Injection
|
15 |
WEB
|
Osmanizim
|
|
2008-12-29
|
|
Ultimate PHP Board 2.2.1 - Privilege Escalation
|
17 |
WEB
|
StAkeR
|
|
2008-12-29
|
|
FubarForum 1.6 - Authentication Bypass Change User Password
|
19 |
WEB
|
R31P0l
|
|
2008-12-29
|
|
TaskDriver 1.3 - Remote Change Admin Password
|
14 |
WEB
|
cOndemned
|
|
2008-12-29
|
|
eDContainer 2.22 - Local File Inclusion
|
16 |
WEB
|
GoLd_M
|
|
2008-12-29
|
|
eDNews 2.0 - Local File Inclusion
|
16 |
WEB
|
GoLd_M
|
|
2008-12-29
|
|
webClassifieds 2005 - Authentication Bypass
|
15 |
WEB
|
AnGeL25dZ
|
|
2008-12-28
|
|
Silentum LoginSys 1.0.0 - Insecure Cookie Handling
|
19 |
WEB
|
Osirys
|
|
2008-12-28
|
|
Flexphplink Pro - Arbitrary File Upload
|
16 |
WEB
|
Osirys
|
|
2008-12-28
|
|
ForumApp 3.3 - Remote Database Disclosure
|
17 |
WEB
|
Cyber.Zer0
|
|
2008-12-28
|
|
PHP-Fusion Mod TI - 'id' SQL Injection
|
15 |
WEB
|
Khashayar Fereidani
|
|
2008-12-28
|
|
OwenPoll 1.0 - Insecure Cookie Handling
|
17 |
WEB
|
Osirys
|
|
2008-12-28
|
|
Alstrasoft Web Email Script Enterprise - 'id' SQL Injection
|
16 |
WEB
|
Bgh7
|
|
2008-12-28
|
|
FubarForum 1.6 - Arbitrary Authentication Bypass
|
18 |
WEB
|
k3yv4n
|
|
2008-12-28
|
|
DeluxeBB 1.2 - Blind SQL Injection
|
15 |
WEB
|
StAkeR
|
|
2008-12-28
|
|
Joomla! Component PAX Gallery 0.1 - Blind SQL Injection
|
14 |
WEB
|
XaDoS
|
|
2008-12-28
|
|
Miniweb 2.0 - Authentication Bypass
|
14 |
WEB
|
bizzit
|
|
2008-12-24
|
|
BloofoxCMS 0.3.4 - 'lang' Local File Inclusion
|
19 |
WEB
|
fuzion
|
|
2008-12-24
|
|
ClaSS 0.8.60 - 'export.php' Local File Inclusion
|
16 |
WEB
|
fuzion
|
|
2008-12-24
|
|
PHP-Fusion 7.0.2 - Blind SQL Injection
|
15 |
WEB
|
StAkeR
|
|
2008-12-24
|
|
Joomla! Component 5starhotels - SQL Injection
|
13 |
WEB
|
EcHoLL
|
|
2008-12-24
|
|
Joomla! Component mDigg 2.2.8 - 'category' SQL Injection
|
15 |
WEB
|
boom3rang
|
|
2008-12-24
|
|
Joomla! Component Live Ticker 1.0 - Blind SQL Injection
|
14 |
WEB
|
boom3rang
|
|
2008-12-24
|
|
Joomla! Component Ice Gallery 0.5b2 - 'catid' Blind SQL Injection
|
15 |
WEB
|
boom3rang
|
|
2008-12-24
|
|
ILIAS 3.7.4 - 'ref_id' Blind SQL Injection
|
15 |
WEB
|
Lidloses_Auge
|
|
2008-12-24
|
|
doop CMS 1.4.0b - Cross-Site Request Forgery / Arbitrary File Upload
|
18 |
WEB
|
x0r
|
|
2008-12-23
|
|
Joomla! Component com_allhotels - Blind SQL Injection
|
17 |
WEB
|
Hussin X
|
|
2008-12-23
|
|
Joomla! Component com_lowcosthotels - Blind SQL Injection
|
18 |
WEB
|
Hussin X
|
|
2008-12-23
|
|
StormBoard 1.0.1 - SQL Injection
|
17 |
WEB
|
Samir-M
|
|
2008-12-23
|
|
phpEmployment - 'PHP Upload' Arbitrary File Upload
|
18 |
WEB
|
ahmadbady
|
|
2008-12-23
|
|
PHPAdBoard - PHP uploads Arbitrary File Upload
|
15 |
WEB
|
ahmadbady
|
|
2008-12-23
|
|
phpGreetCards - Cross-Site Scripting / Arbitrary File Upload
|
19 |
WEB
|
ahmadbady
|
|
2008-12-23
|
|
CMS NetCat 3.12 - Multiple Vulnerabilities
|
15 |
WEB
|
s4avrd0w
|
|
2008-12-23
|
|
CMS NetCat 3.12 - 'password_recovery.php' Blind SQL Injection
|
18 |
WEB
|
s4avrd0w
|
|
2008-12-23
|
|
PHPLD 3.3 - Blind SQL Injection
|
18 |
WEB
|
fuzion
|
