Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-12-07   w3blabor CMS 3.0.5 - Arbitrary File Upload / Local File Inclusion 33 WEB DNX
2008-12-07   Product Sale Framework 0.1b - SQL Injection 30 WEB b3hz4d
2008-12-07   PayPal eStore - Admin Password Change 31 WEB G4N0K
2008-12-07   Bonza Cart 1.10 - Admin Password Changing 29 WEB G4N0K
2008-12-07   DL PayCart 1.34 - Admin Password Changing 31 WEB G4N0K
2008-12-07   IPNPro3 < 1.44 - Admin Password Changing 33 WEB G4N0K
2008-12-06   phpPgAdmin 4.2.1 - '_language' Local File Inclusion 31 WEB dun
2008-12-06   ASP PORTAL - Remote Database Disclosure 30 WEB ZoRLu
2008-12-06   ASP AutoDealer - Remote Database Disclosure 32 WEB ZoRLu
2008-12-05   ASPTicker 1.0 - Remote Database Disclosure 31 WEB ZoRLu
2008-12-05   ASP Portal - Multiple SQL Injections 31 WEB AlpHaNiX
2008-12-05   ASP AutoDealer - SQL Injection / File Disclosure 37 WEB AlpHaNiX
2008-12-05   Tizag Countdown Creator 3 - Insecure Upload 35 WEB ahmadbady
2008-12-05   Cold BBS - Remote Database Disclosure 32 WEB ahmadbady
2008-12-05   Merlix Teamworx Server - File Disclosure/Bypass 31 WEB ZoRLu
2008-12-05   nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure 33 WEB AlpHaNiX
2008-12-05   Rankem - Authentication Bypass 30 WEB AlpHaNiX
2008-12-05   RankEm - 'siteID' SQL Injection 32 WEB AlpHaNiX
2008-12-05   merlix educate servert - Authentication Bypass / File Disclosure 31 WEB ZoRLu
2008-12-05   Multiple Membership Script 2.5 - 'id' SQL Injection 31 WEB ViRuS_HaCkErS
2008-12-04   BNCwi 1.04 - Local File Inclusion 34 WEB dun
2008-12-04   Gravity GTD 0.4.5 - Local File Inclusion / Remote Code Execution 35 WEB dun
2008-12-04   Joomla! Component mydyngallery 1.4.2 - SQL Injection 29 WEB Khashayar Fereidani
2008-12-04   My Simple Forum 3.0 - Local File Inclusion 33 WEB cOndemned
2008-12-04   lcxbbportal 0.1 alpha 2 - Remote File Inclusion 33 WEB NoGe
2008-12-04   Easy News Content Management - Database Disclosure 29 WEB BeyazKurt
2008-12-04   template creature - SQL Injection / File Disclosure 30 WEB ZoRLu
2008-12-04   User Engine Lite ASP - 'users.mdb' Database Disclosure 28 WEB AlpHaNiX
2008-12-04   wbstreet 1.0 - SQL Injection / File Disclosure 31 WEB CWH Underground
2008-12-04   ccTiddly 1.7.4 - 'cct_base' Remote File Inclusion 30 WEB cOndemned
2008-12-03   Multi SEO phpBB 1.1.0 - Remote File Inclusion 30 WEB NoGe
2008-12-03   Rae Media Contact MS - Authentication Bypass 30 WEB b3hz4d
2008-12-03   ASP User Engine .NET - Remote Database Disclosure 33 WEB AlpHaNiX
2008-12-03   Joomla! Component JMovies 1.1 - 'id' SQL Injection 31 WEB StAkeR
2008-12-03   Check New 4.52 - SQL Injection 34 WEB CWH Underground
2008-12-03   Calendar MX Professional 2.0.0 - Blind SQL Injection 32 WEB R3d-D3V!L
2008-12-03   Gallery MX 2.0.0 - Blind SQL Injection 31 WEB R3d-D3V!L
2008-12-02   Codefixer MailingListPro - Database Disclosure 28 WEB AlpHaNiX
2008-12-02   Rapid Classified 3.1 - Database Disclosure 32 WEB CoBRa_21
2008-12-02   SunByte e-Flower - 'id' SQL Injection 33 WEB w4rl0ck
2008-12-02   CMS MAXSITE Component Guestbook - Remote Command Execution 33 WEB CWH Underground
2008-12-02   Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting 31 WEB Pouya_Server
2008-12-01   PacPoll 4.0 - Database Disclosure 32 WEB AlpHaNiX
2008-12-01   bcoos 1.0.13 - 'viewcat.php' SQL Injection 31 WEB CWH Underground
2008-12-01   ASPPortal 3.2.5 - Database Disclosure 31 WEB CWH Underground
2008-12-01   E.Z. Poll 2 - Authentication Bypass 34 WEB t0fx
2008-12-01   Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload 33 WEB CWH Underground
2008-12-01   z1exchange 1.0 - 'site' SQL Injection 33 WEB JIKO
2008-11-30   Broadcast Machine 0.1 - Multiple Remote File Inclusions 33 WEB NoGe
2008-11-30   CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite / Authentication Bypass 31 WEB girex
2008-11-30   minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass 33 WEB NoGe
2008-11-30   KTP Computer Customer Database CMS 1.0 - Blind SQL Injection 29 WEB CWH Underground
2008-11-30   KTP Computer Customer Database CMS 1.0 - Local File Inclusion 33 WEB CWH Underground
2008-11-30   Quick Tree View .NET 3.1 - Database Disclosure 33 WEB Cyber-Zone
2008-11-30   Active Business Directory 2 - Blind SQL Injection 30 WEB AlpHaNiX
2008-11-30   Active Time Billing 3.2 - Authentication Bypass 31 WEB AlpHaNiX
2008-11-30   Active Photo Gallery 6.2 - Authentication Bypass 32 WEB R3d-D3V!L
2008-11-30   Active Web Helpdesk 2 - 'categoryId' Blind SQL Injection 31 WEB Cyber-Zone
2008-11-29   Active Test 2.1 - 'QuizID' Blind SQL Injection 33 WEB R3d-D3V!L
2008-11-29   Lito Lite CMS - 'cid' SQL Injection 32 WEB CWH Underground
2008-11-29   Active Web Helpdesk 2 - Authentication Bypass 31 WEB Cyber-Zone
2008-11-29   ASPThai.Net Forum 8.5 - Remote Database Disclosure 33 WEB CWH Underground
2008-11-29   OpenForum 0.66 Beta - Remote Reset Admin Password 34 WEB CWH Underground
2008-11-29   Active Bids 3.5 - 'itemID' Blind SQL Injection 33 WEB Stack
2008-11-30   Active Price Comparison 4 - 'ProductID' Blind SQL Injection 30 WEB R3d-D3V!L
2008-11-29   Active Web Mail 4 - Blind SQL Injection 27 WEB R3d-D3V!L
2008-11-29   ActiveVotes 2.2 - 'AccountID' Blind SQL Injection 32 WEB R3d-D3V!L
2008-11-29   OraMon 2.0.1 - Remote Configuration File Disclosure 31 WEB ahmadbady
2008-11-29   CMS Made Simple 1.4.1 - Local File Inclusion 29 WEB M4ck-h@cK
2008-11-29   PHP TV Portal 2.0 - 'mid' SQL Injection 32 WEB Cyber-Zone
2008-11-29   Active Price Comparison 4 - Authentication Bypass 34 WEB R3d-D3V!L
2008-11-29   Active Trade 2 - Authentication Bypass 29 WEB R3d-D3V!L
2008-11-29   Active Web Mail 4 - Authentication Bypass 31 WEB R3d-D3V!L
2008-11-29   Active NewsLetter 4.3 - Authentication Bypass 33 WEB R3d-D3V!L
2008-11-29   eWebquiz 8 - Authentication Bypass 32 WEB R3d-D3V!L
2008-11-29   Active Membership 2 - Authentication Bypass 30 WEB R3d-D3V!L
2008-11-29   Active Websurvey 9.1 - Authentication Bypass 27 WEB R3d-D3V!L
2008-11-29   Active Test 2.1 - Authentication Bypass 30 WEB R3d-D3V!L
2008-11-29   ActiveVotes 2.2 - Authentication Bypass 29 WEB R3d-D3V!L
2008-11-29   ASPReferral 5.3 - 'AccountID' Blind SQL Injection 29 WEB R3d-D3V!L
2008-11-29   Active Force Matrix 2 - Authentication Bypass 30 WEB R3d-D3V!L
2008-11-28   Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection 30 WEB Stack
2008-11-28   ReVou Twitter Clone - Authentication Bypass 31 WEB R3d-D3V!L
2008-11-28   CMS little 0.0.1 - 'term' SQL Injection 30 WEB CWH Underground
2008-11-28   Bluo CMS 1.2 - Blind SQL Injection 31 WEB The_5p3ctrum
2008-11-28   SailPlanner 0.3a - Authentication Bypass 31 WEB JIKO
2008-11-28   All Club CMS 0.0.2 - Remote Database Configuration Retrieve 29 WEB StAkeR
2008-11-28   Web Calendar System 3.40 - Cross-Site Scripting / SQL Injection 31 WEB Bl@ckbe@rD
2008-11-28   Booking Centre 2.01 - Authentication Bypass 30 WEB MrDoug
2008-11-28   Basic-CMS - Blind SQL Injection 35 WEB CWH Underground
2008-11-28   Basic-CMS - Remote Database Disclosure 31 WEB Stack
2008-11-27   Comersus ASP Shopping Cart - File Disclosure / Cross-Site Scripting 32 WEB Bl@ckbe@rD
2008-11-27   Ocean12 FAQ Manager Pro - Database Disclosure 32 WEB Stack
2008-11-27   Turnkey Arcade Script - SQL Injection (1) 29 WEB The_5p3ctrum
2008-11-27   pagetree CMS 0.0.2 Beta 0001 - Remote File Inclusion 32 WEB NoGe
2008-11-27   Ocean12 Membership Manager Pro - Authentication Bypass 30 WEB Cyber-Zone
2008-11-27   Booking Centre 2.01 - 'HotelID' SQL Injection 32 WEB R3d-D3V!L
2008-11-27   Web Calendar 4.1 - Authentication Bypass 41 WEB Cyber-Zone
2008-11-27   Star Articles 6.0 - Arbitrary File Upload 31 WEB ZoRLu
2008-11-27   RakhiSoftware Shopping Cart - SQL Injection 31 WEB XaDoS
2008-11-27   Family Project 2.x - Authentication Bypass 30 WEB The_5p3ctrum
2008-11-27   Ocean12 Calendar Manager Gold - Database Disclosure 36 WEB Pouya_Server
2008-11-27   Ocean12 Poll Manager Pro - Database Disclosure 34 WEB Pouya_Server
2008-11-27   Ocean12 Membership Manager Pro - Database Disclosure 32 WEB Pouya_Server
2008-11-27   Ocean12 Contact Manager Pro - SQL Injection / Cross-Site Scripting / File Disclosure 32 WEB Pouya_Server
2008-11-27   Star Articles 6.0 - Blind SQL Injection (2) 36 WEB Stack
2008-11-27   Web Calendar System 3.12/3.30 - Multiple Vulnerabilities 29 WEB Bl@ckbe@rD
2008-11-27   TxtBlog 1.0 Alpha - Local File Inclusion 30 WEB CWH Underground
2008-11-26   Star Articles 6.0 - Blind SQL Injection (1) 34 WEB b3hz4d
2008-11-26   ParsBlogger - 'blog.asp' SQL Injection 34 WEB h4ck3r
2008-11-26   Post Affiliate Pro 3 - 'umprof_status' Blind SQL Injection 32 WEB XaDoS
2008-11-26   CMS Ortus 1.13 - SQL Injection 31 WEB otmorozok428
2008-11-25   Jamit Job Board 3.x - Blind SQL Injection 29 WEB XaDoS
2008-11-25   VideoGirls BiZ - Blind SQL Injection 30 WEB Cyber-Zone
2008-11-25   LoveCMS 1.6.2 Final (Download Manager 1.0) - Arbitrary File Upload 32 WEB cOndemned
2008-11-25   SimpleBlog 3.0 - Database Disclosure 29 WEB EL_MuHaMMeD
2008-11-25   Fuzzylime CMS 3.03 - 'track.php' Local File Inclusion 29 WEB Alfons Luja
2008-11-25   Clean CMS 1.5 - Blind SQL Injection 29 WEB JosS
2008-11-25   FAQ Manager 1.2 - 'header.php' Remote File Inclusion 34 WEB ZoRLu
2008-11-25   Clean CMS 1.5 - Blind SQL Injection / Cross-Site Scripting 34 WEB ZoRLu
2008-11-25   chipmunk topsites - Authentication Bypass / Cross-Site Scripting 33 WEB ZoRLu
2008-11-25   Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion 35 WEB ZoRLu
2008-11-25   FAQ Manager 1.2 - 'categorie.php' SQL Injection 29 WEB cOndemned
2008-11-25   WebStudio eCatalogue - Blind SQL Injection 32 WEB Hussin X
2008-11-25   WebStudio eHotel - Blind SQL Injection 32 WEB Hussin X