Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-09-28   Pilot Group eTraining - 'news_read.php' SQL Injection 13 WEB S.W.A.T.
2008-09-28   Pro Chat Rooms 3.0.3 - SQL Injection 11 WEB ~!Dok_tOR!~
2008-09-28   PHPcounter 1.3.2 - 'index.php' SQL Injection 11 WEB StAkeR
2008-09-28   ParsaWeb CMS - 'Search' SQL Injection 11 WEB BugReport.IR
2008-09-28   ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection 10 WEB Hussin X
2008-09-27   X7 Chat 2.0.1A1 - Local File Inclusion 10 WEB JIKO
2008-09-27   Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution 11 WEB dun
2008-09-27   PHP-Lance 1.52 - 'catid' SQL Injection 12 WEB InjEctOr5
2008-09-27   PowerPortal 2.0.13 - 'path' Local Directory Traversal 11 WEB r45c4l
2008-09-27   MyCard 1.0.2 - 'id' SQL Injection 10 WEB r45c4l
2008-09-27   PlugSpace 0.1 - 'navi' Local File Inclusion 9 WEB dun
2008-09-27   LnBlog 0.9.0 - 'plugin' Local File Inclusion 9 WEB dun
2008-09-27   Real Estate Manager 1.01 - 'cat_id' SQL Injection 9 WEB CraCkEr
2008-09-27   CoAST 0.95 - 'sections_file' Remote File Inclusion 10 WEB DaRkLiFe
2008-09-27   E-Uploader Pro 1.0 - Multiple SQL Injections 8 WEB ~!Dok_tOR!~
2008-09-27   Joovili 3.0 - Multiple SQL Injections 11 WEB ~!Dok_tOR!~
2008-09-27   Camera Life 2.6.2b4 - Arbitrary File Upload 12 WEB Mi4night
2008-09-27   Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection 10 WEB elusiven
2008-09-27   X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion 10 WEB NoGe
2008-09-27   RPG.Board 0.0.8Beta2 - Insecure Cookie Handling 13 WEB Stack
2008-09-27   ASPapp Knowledge Base - 'CatId' SQL Injection (2) 11 WEB Crackers_Child
2008-09-26   RPG.Board 0.0.8Beta2 - 'showtopic' SQL Injection 14 WEB 0x90
2008-09-26   The Gemini Portal 4.7 - 'lang' Remote File Inclusion 11 WEB ZoRLu
2008-09-26   Crux Gallery 1.32 - Insecure Cookie Handling 12 WEB Pepelux
2008-09-26   openEngine 2.0 beta2 - Remote File Inclusion 15 WEB Crackers_Child
2008-09-26   The Gemini Portal 4.7 - Insecure Cookie Handling 12 WEB Pepelux
2008-09-26   Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling 15 WEB ZoRLu
2008-09-26   Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling 13 WEB Stack
2008-09-26   Libra PHP File Manager 1.18 - Insecure Cookie Handling 13 WEB Stack
2008-09-26   212Cafe Board 0.07 - 'qID' SQL Injection 12 WEB CWH Underground
2008-09-26   PromoteWeb MySQL - 'id' SQL Injection 13 WEB CWH Underground
2008-09-26   Ultimate WebBoard 3.00 - 'Category' SQL Injection 13 WEB CWH Underground
2008-09-26   barcodegen 2.0.0 - 'class_dir' Remote File Inclusion 10 WEB Br0k3n H34rT
2008-09-26   Atomic Photo Album 1.1.0pre4 - Blind SQL Injection 10 WEB Stack
2008-09-25   LanSuite 3.3.2 - 'FCKeditor' Arbitrary File Upload 11 WEB Stack
2008-09-25   Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection 9 WEB d3v1l
2008-09-25   openEngine 2.0 beta4 - Remote File Inclusion 11 WEB dun
2008-09-25   Vikingboard 0.2 Beta - SQL Column Truncation 13 WEB StAkeR
2008-09-25   PHP infoBoard 7 - Plus Insecure Cookie Handling 12 WEB Stack
2008-09-25   Libra PHP File Manager 1.18/2.0 - Local File Inclusion 12 WEB Pepelux
2008-09-25   PHP infoboard 7 plus - Multiple Vulnerabilities 9 WEB CWH Underground
2008-09-25   Vikingboard 0.2 Beta - 'task' Local File Inclusion 13 WEB dun
2008-09-25   PHPOCS 0.1-beta3 - 'act' Local File Inclusion 11 WEB dun
2008-09-25   LanSuite 3.3.2 - 'design' Local File Inclusion 9 WEB dun
2008-09-25   AJ Auction Pro Platinum - 'seller_id' SQL Injection 13 WEB InjEctOr5
2008-09-24   Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities 12 WEB dun
2008-09-24   barcodegen 2.0.0 - Local File Inclusion 10 WEB dun
2008-09-24   ADN Forum 1.0b - Insecure Cookie Handling 11 WEB Pepelux
2008-09-24   webcp 0.5.7 - 'filelocation' Remote File Disclosure 11 WEB GoLd_M
2008-09-24   Jadu CMS for Government - 'recruit_details.php' SQL Injection 9 WEB r45c4l
2008-09-24   PHPcounter 1.3.2 - 'defs.php' Local File Inclusion 11 WEB dun
2008-09-24   mailwatch 1.0.4 - 'doc' Local File Inclusion 12 WEB dun
2008-09-24   emergecolab 1.0 - 'sitecode' Local File Inclusion 12 WEB dun
2008-09-24   AJ Auction Pro Platinum Skin - 'item_id' SQL Injection 11 WEB GoLd_M
2008-09-24   Jetik Emlak ESA 2.0 - Multiple SQL Injections 12 WEB ZoRLu
2008-09-24   Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection 12 WEB GoLd_M
2008-09-24   Rianxosencabos CMS 0.9 - Remote Add Admin 12 WEB ka0x
2008-09-24   HotScripts Clone - 'cid' SQL Injection 12 WEB Hussin X
2008-09-23   WebPortal CMS 0.7.4 - 'code' Remote Code Execution 12 WEB GoLd_M
2008-09-23   Ol BookMarks Manager 0.7.5 - Local File Inclusion 10 WEB dun
2008-09-23   JETIK-WEB Software - 'kat' SQL Injection 14 WEB d3v1l
2008-09-23   Galmeta Post CMS 0.2 - Remote Code Execution / Arbitrary File Upload 12 WEB GoLd_M
2008-09-23   iGaming CMS 1.5 - Multiple SQL Injections 13 WEB StAkeR
2008-09-23   Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion 13 WEB dun
2008-09-23   OpenRat 0.8-beta4 - 'tpl_dir' Remote File Inclusion 11 WEB dun
2008-09-22   CJ Ultra Plus 1.0.4 - Cookie SQL Injection 10 WEB -SmoG-
2008-09-22   Fez 1.3/2.0 RC1 - 'list.php' SQL Injection 13 WEB d3v1l
2008-09-22   basebuilder 2.0.1 - 'main.inc.php' Remote File Inclusion 15 WEB dun
2008-09-22   MyBlog 0.9.8 - Insecure Cookie Handling 13 WEB Pepelux
2008-09-22   OpenElec 3.01 - 'obj' Local File Inclusion 9 WEB dun
2008-09-22   WSN Links Free 4.0.34P - 'comments.php' Blind SQL Injection 10 WEB Stack
2008-09-22   WCMS 1.0b - 'news_detail.asp' SQL Injection 12 WEB CWH Underground
2008-09-22   BuzzyWall 1.3.1 - 'search' SQL Injection 11 WEB ~!Dok_tOR!~
2008-09-22   PHP iCalendar 2.24 - Insecure Cookie Handling 10 WEB Stack
2008-09-22   WSN Links 2.20 - 'comments.php' SQL Injection 10 WEB d3v1l
2008-09-22   WSN Links 2.22/2.23 - 'vote.php' SQL Injection 11 WEB d3v1l
2008-09-22   WCMS 1.0b - Arbitrary Add Admin 10 WEB CWH Underground
2008-09-21   AvailScript Article Script - 'view.php' SQL Injection 12 WEB Hussin X
2008-09-21   Rianxosencabos CMS 0.9 - Insecure Cookie Handling 12 WEB Stack
2008-09-21   6rbScript 3.3 - 'section.php' Local File Inclusion 12 WEB Stack
2008-09-21   PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload 11 WEB EgiX
2008-09-21   Netartmedia Real Estate Portal 1.2 - SQL Injection 12 WEB Encrypt3d.M!nd
2008-09-21   Netartmedia Jobs Portal 1.3 - Multiple SQL Injections 12 WEB Encrypt3d.M!nd
2008-09-21   e107 Plugin Image Gallery 0.9.6.2 - SQL Injection 11 WEB boom3rang
2008-09-21   AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload 13 WEB InjEctOr5
2008-09-21   Rianxosencabos CMS 0.9 - Arbitrary Add Admin 12 WEB CWH Underground
2008-09-21   Diesel Job Site - 'job_id' Blind SQL Injection 14 WEB Stack
2008-09-21   6rbScript 3.3 - 'singerid' SQL Injection 13 WEB Hussin X
2008-09-21   PHPKB 1.5 Professional - Multiple SQL Injections 10 WEB d3v1l
2008-09-21   TWiki 4.2.2 - 'action' Remote Code Execution 14 WEB webDEViL
2008-09-21   Basic PHP Events Lister 1.0 - SQL Injection 12 WEB 0x90
2008-09-21   Invision Power Board 2.3.5 - SQL Injection 13 WEB waraxe
2008-09-20   jPORTAL 2 - 'humor.php' SQL Injection 10 WEB r45c4l
2008-09-20   Oceandir 2.9 - 'show_vote.php' SQL Injection 12 WEB JEEN HACKER TEAM
2008-09-20   Plaincart 1.1.2 - 'p' SQL Injection 11 WEB r45c4l
2008-09-20   Diesel Pay Script - 'area' SQL Injection 11 WEB ZoRLu
2008-09-20   MyFWB 1.0 - 'index.php' SQL Injection 13 WEB 0x90
2008-09-20   Explay CMS 2.1 - Insecure Cookie Handling 9 WEB Stack
2008-09-20   Advanced Electron Forum 1.0.6 - Remote Code Execution 10 WEB GulfTech Security
2008-09-19   Explay CMS 2.1 - Persistent Cross-Site Scripting / Cross-Site Request Forgery 11 WEB hodik
2008-09-19   easyLink 1.1.0 - 'detail.php' SQL Injection 12 WEB Egypt Coder
2008-09-19   Pluck CMS 4.5.3 - 'update.php' Remote File Corruption 13 WEB Nine:Situations:Group
2008-09-18   AssetMan 2.5-b - SQL Injection using Session Fixation 12 WEB Neo Anderson
2008-09-18   ProActive CMS - 'template' Local File Inclusion 12 WEB r45c4l
2008-09-18   Diesel Joke Site - 'picture_category.php' SQL Injection 12 WEB SarBoT511
2008-09-18   CYASK 3.x - 'neturl' Local File Disclosure 11 WEB xy7
2008-09-18   ProArcadeScript 1.3 - 'random' SQL Injection 9 WEB SuNHouSe2
2008-09-18   addalink 4 - 'category_id' SQL Injection 13 WEB ka0x
2008-09-18   E-PHP CMS - 'article.php' SQL Injection 12 WEB HaCkeR_EgY
2008-09-17   addalink 4 Beta - Write Approved Links 15 WEB Pepelux
2008-09-17   X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion 12 WEB THUNDER
2008-09-17   Technote 7 - 'shop_this_skin_path' Remote File Inclusion 12 WEB webDEViL
2008-09-17   PHP Crawler 0.8 - Remote File Inclusion 9 WEB Piker
2008-09-17   phpRealty 0.3 - 'INC' Remote File Inclusion 13 WEB ka0x
2008-09-16   Hotel Reservation System - 'city.asp' Blind SQL Injection 10 WEB JosS
2008-09-16   Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection 12 WEB sl4xUz
2008-09-16   Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities 12 WEB K-159
2008-09-16   iScripts EasyIndex - 'produid' SQL Injection 11 WEB SirGod
2008-09-15   Link Bid Script 1.5 - Multiple SQL Injections 14 WEB SirGod
2008-09-15   Pre Real Estate Listings - 'search.php' SQL Injection 11 WEB JosS
2008-09-15   CzarNews 1.20 - Account Hijacking SQL Injection 13 WEB 0ut0fbound
2008-09-15   CzarNews 1.20 - 'cookie' SQL Injection 9 WEB StAkeR
2008-09-14   cPanel 11.x - 'Fantastico' Local File Inclusion 12 WEB joker_1
2008-09-14   Kasseler CMS 1.1.0/1.2.0 Lite - SQL Injection 10 WEB ~!Dok_tOR!~
2008-09-14   Free PHP VX Guestbook 1.06 - Insecure Cookie Handling 11 WEB Stack