|
2008-03-19
|
|
Joomla! Component Alberghi 2.1.3 - 'id' SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-03-19
|
|
Joomla! Component joovideo 1.2.2 - 'id' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-19
|
|
ASPapp Knowledge Base - 'CatId' SQL Injection (1)
|
4 |
WEB
|
xcorpitx
|
|
2008-03-18
|
|
Easy-Clanpage 2.2 - 'id' SQL Injection
|
4 |
WEB
|
n3w7u
|
|
2008-03-18
|
|
KAPhotoservice - 'album.asp' SQL Injection
|
4 |
WEB
|
JosS
|
|
2008-03-18
|
|
Joomla! Component Acajoom 1.1.5 - SQL Injection
|
4 |
WEB
|
fataku
|
|
2008-03-17
|
|
XOOPS Module Dictionary 0.94 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-17
|
|
phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions
|
4 |
WEB
|
RoMaNcYxHaCkEr
|
|
2008-03-17
|
|
Exero CMS 1.0.1 - 'theme' Multiple Local File Inclusions
|
4 |
WEB
|
GoLd_M
|
|
2008-03-16
|
|
phpBP RC3 (2.204) FIX4 - SQL Injection
|
4 |
WEB
|
irk4z
|
|
2008-03-16
|
|
mutiple timesheets 5.0 - Multiple Vulnerabilities
|
4 |
WEB
|
JosS
|
|
2008-03-14
|
|
Fuzzylime CMS 3.01 - 'admindir' Remote File Inclusion
|
4 |
WEB
|
irk4z
|
|
2008-03-14
|
|
AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection
|
4 |
WEB
|
NTOS-Team
|
|
2008-03-14
|
|
eXV2 Module WebChat 1.60 - 'roomid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-14
|
|
eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-03-14
|
|
eXV2 Module eblog 1.2 - 'blog_id' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-14
|
|
eXV2 Module MyAnnonces - 'lid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-12
|
|
EasyGallery 5.0tr - Multiple Vulnerabilities
|
4 |
WEB
|
JosS
|
|
2008-03-12
|
|
EasyCalendar 4.0tr - Multiple Vulnerabilities
|
4 |
WEB
|
JosS
|
|
2008-03-12
|
|
XOOPS Module tutorials 2.1b - 'printpage.php' SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-03-12
|
|
eXV2 Module bamaGalerie 3.03 - SQL Injection
|
2 |
WEB
|
S@BUN
|
|
2008-03-12
|
|
Fully Modded phpBB - 'kb.php' SQL Injection
|
4 |
WEB
|
TurkishWarriorr
|
|
2008-03-12
|
|
XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-12
|
|
XOOPS Module Gallery 0.2.2 - 'gid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-12
|
|
QuickTalk Forum 1.6 - Blind SQL Injection
|
3 |
WEB
|
t0pP8uZz
|
|
2008-03-11
|
|
Danneo CMS 0.5.1 - Blind SQL Injection
|
4 |
WEB
|
InATeam
|
|
2008-03-11
|
|
Joomla! Component ProductShowcase 1.5 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-11
|
|
phpBB Mod FileBase 2.0 - 'id' SQL Injection
|
4 |
WEB
|
t0pP8uZz
|
|
2008-03-11
|
|
Bloo 1.00 - Multiple SQL Injections
|
3 |
WEB
|
MhZ91
|
|
2008-03-11
|
|
Mapbender 2.4.4 - 'gaz' SQL Injection
|
3 |
WEB
|
RedTeam Pentesting
|
|
2008-03-11
|
|
Mapbender 2.4.4 - 'mapFiler.php' Remote Code Execution
|
3 |
WEB
|
RedTeam Pentesting
|
|
2008-03-10
|
|
phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection
|
4 |
WEB
|
Charles Fol
|
|
2008-03-10
|
|
Mambo Component eWriting 1.2.1 - 'cat' SQL Injection
|
4 |
WEB
|
Don
|
|
2008-03-09
|
|
BM Classifieds 20080409 - Multiple SQL Injections
|
4 |
WEB
|
xcorpitx
|
|
2008-03-09
|
|
QuickTicket 1.5 - 'qti_usr.php' SQL Injection
|
4 |
WEB
|
croconile
|
|
2008-03-08
|
|
Joomla! Component Candle 1.0 - 'cid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-07
|
|
zKup CMS 2.0 < 2.3 - Arbitrary File Upload
|
4 |
WEB
|
Charles Fol
|
|
2008-03-07
|
|
zKup CMS 2.0 < 2.3 - Remote Add Admin
|
5 |
WEB
|
Charles Fol
|
|
2008-03-06
|
|
XOOPS Module wfdownloads - 'cid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-06
|
|
XOOPS Module Glossario 2.2 - 'sid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-03-04
|
|
Mitra Informatika Solusindo cart - SQL Injection
|
4 |
WEB
|
bius
|
|
2008-03-01
|
|
Dynamic photo Gallery 1.02 - 'albumID' SQL Injection
|
4 |
WEB
|
Aria-Security Team
|
|
2008-03-01
|
|
phpComasy 0.8 - 'mod_project_id' SQL Injection
|
4 |
WEB
|
Cr@zy_King
|
|
2008-03-01
|
|
phpArcadeScript 3.0RC2 - 'userid' SQL Injection
|
4 |
WEB
|
SoSo H H
|
|
2008-03-01
|
|
Mambo Component com_Musica - 'id' SQL Injection
|
4 |
WEB
|
Aria-Security Team
|
|
2008-02-29
|
|
Dream4 Koobi CMS 4.3.0 < 4.2.3 - 'categ' SQL Injection
|
5 |
WEB
|
JosS
|
|
2008-02-28
|
|
Centreon 1.4.2.3 - 'get_image.php' Remote File Disclosure
|
5 |
WEB
|
Julien CAYSSOL
|
|
2008-02-28
|
|
PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection
|
5 |
WEB
|
Aria-Security Team
|
|
2008-02-28
|
|
Barryvan Compo Manager 0.3 - Remote File Inclusion
|
5 |
WEB
|
MhZ91
|
|
2008-02-28
|
|
Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure
|
4 |
WEB
|
GoLd_M
|
|
2008-02-28
|
|
SiteBuilderElite 1.2 - Multiple Remote File Inclusions
|
5 |
WEB
|
MhZ91
|
|
2008-02-28
|
|
Dream4 Koobi Pro 5.7 - 'categ' SQL Injection
|
5 |
WEB
|
Cr@zy_King
|
|
2008-02-27
|
|
GROUP-E 1.6.41 - 'head_auth.php' Remote File Inclusion
|
5 |
WEB
|
CraCkEr
|
|
2008-02-27
|
|
eazyPortal 1.0 - 'cookie' SQL Injection
|
5 |
WEB
|
Iron
|
|
2008-02-27
|
|
Mambo Component SimpleBoard 1.0.3 - 'catid' SQL Injection
|
5 |
WEB
|
it's my
|
|
2008-02-26
|
|
WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Executi
|
4 |
WEB
|
NBBN
|
|
2008-02-26
|
|
Nukedit 4.9.x - Remote Create Admin
|
5 |
WEB
|
r3dm0v3
|
|
2008-02-25
|
|
DBHcms 1.1.4 - 'code' Remote File Inclusion
|
6 |
WEB
|
Iron
|
|
2008-02-25
|
|
MiniNuke 2.1 - 'uid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-25
|
|
PHP-Nuke Module Kose_Yazilari - 'artid' SQL Injection
|
5 |
WEB
|
xcorpitx
|
|
2008-02-25
|
|
PORAR WebBoard - 'question.asp' SQL Injection
|
5 |
WEB
|
xcorpitx
|
|
2008-02-24
|
|
PHP Download Manager 1.1 - Local File Inclusion
|
4 |
WEB
|
BeyazKurt
|
|
2008-02-24
|
|
Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities
|
4 |
WEB
|
GoLd_M
|
|
2008-02-24
|
|
pigyard art Gallery - Multiple Vulnerabilities
|
4 |
WEB
|
ZoRLu
|
|
2008-02-24
|
|
PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion
|
4 |
WEB
|
CraCkEr
|
|
2008-02-23
|
|
PHPUserBase 1.3b - 'unverified.inc.php' Local File Inclusion
|
4 |
WEB
|
BeyazKurt
|
|
2008-02-23
|
|
Mambo Component garyscookbook 1.1.1 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-23
|
|
Joomla! Component simple shop 2.0 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-23
|
|
Quinsonnas Mail Checker 1.55 - 'footer.php' Remote File Inclusion
|
4 |
WEB
|
GoLd_M
|
|
2008-02-23
|
|
PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion
|
4 |
WEB
|
CraCkEr
|
|
2008-02-22
|
|
Quantum Game Library 0.7.2c - Remote File Inclusion
|
3 |
WEB
|
RoMaNcYxHaCkEr
|
|
2008-02-22
|
|
phpQLAdmin 2.2.7 - Multiple Remote File Inclusions
|
5 |
WEB
|
RoMaNcYxHaCkEr
|
|
2008-02-21
|
|
PHP-Nuke Module NukeC 2.1 - 'id_catg' SQL Injection
|
5 |
WEB
|
DamaR
|
|
2008-02-21
|
|
OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection
|
5 |
WEB
|
Marcin Kopec
|
|
2008-02-21
|
|
BeContent 031 - 'id' SQL Injection
|
4 |
WEB
|
Cr@zy_King
|
|
2008-02-21
|
|
PHP-Nuke Module Siir - 'id' SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-02-21
|
|
PHP-Nuke Modules Manuales 0.1 - 'cid' SQL Injection
|
5 |
WEB
|
Mehmet Ince
|
|
2008-02-20
|
|
MultiCart 2.0 - 'productdetails.php' SQL Injection
|
6 |
WEB
|
t0pP8uZz
|
|
2008-02-21
|
|
PunBB 1.2.16 - Blind Password Recovery
|
4 |
WEB
|
EpiBite
|
|
2008-02-20
|
|
Woltlab Burning Board 3.0.x - Blind SQL Injection
|
5 |
WEB
|
NBBN
|
|
2008-02-20
|
|
PHP-Nuke Module Inhalt - 'cid' SQL Injection
|
5 |
WEB
|
Crackers_Child
|
|
2008-02-20
|
|
Globsy 1.0 - 'file' Remote File Disclosure
|
5 |
WEB
|
GoLd_M
|
|
2008-02-20
|
|
PHP-Nuke Module Docum - 'artid' SQL Injection
|
5 |
WEB
|
DamaR
|
|
2008-02-20
|
|
Joomla! Component Highwood Design hwdVideoShare - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-20
|
|
PHP-Nuke Modules Okul 1.0 - 'okulid' SQL Injection
|
4 |
WEB
|
Mehmet Ince
|
|
2008-02-19
|
|
XOOPS Module Classifieds - 'cid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-19
|
|
XOOPS Module eEmpregos - 'cid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-19
|
|
RunCMS Module MyAnnonces - 'cid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-19
|
|
PHP-Nuke Module EasyContent - 'page_id' SQL Injection
|
5 |
WEB
|
Mehmet Ince
|
|
2008-02-19
|
|
PHP-Nuke Module Sections - 'artid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-18
|
|
sCssBoard (Multiple Versions) - 'pwnpack' Remote s
|
5 |
WEB
|
Inphex
|
|
2008-02-18
|
|
XOOPS Module myTopics - 'articleId' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-18
|
|
PHP-Nuke Module books SQL - 'cid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-18
|
|
Joomla! Component com_clasifier - 'cat_id' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-18
|
|
Joomla! Component com_pccookbook - 'user_id' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-18
|
|
LightBlog 9.6 - 'Username' Local File Inclusion
|
4 |
WEB
|
muuratsalo
|
|
2008-02-18
|
|
Mambo Component Portfolio Manager 1.0 - 'categoryId' SQL Injection
|
4 |
WEB
|
it's my
|
|
2008-02-18
|
|
Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection
|
4 |
WEB
|
ka0x
|
|
2008-02-17
|
|
XPWeb 3.3.2 - 'url' Remote File Disclosure
|
3 |
WEB
|
GoLd_M
|
|
2008-02-17
|
|
PHPizabi 0.848b C1 HFP1 - Arbitrary File Upload
|
4 |
WEB
|
ZoRLu
|
|
2008-02-16
|
|
WordPress Plugin Photo album - SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-02-16
|
|
Joomla! Component com_galeria - SQL Injection
|
2 |
WEB
|
S@BUN
|
|
2008-02-16
|
|
Mambo Component Ricette 1.0 - SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-02-16
|
|
Joomla! Component jooget 2.6.8 - SQL Injection
|
3 |
WEB
|
S@BUN
|
|
2008-02-16
|
|
Simple CMS 1.0.3 - 'area' SQL Injection
|
3 |
WEB
|
JosS
|
|
2008-02-16
|
|
AuraCMS 1.62 - Multiple SQL Injections
|
3 |
WEB
|
NTOS-Team
|
|
2008-02-16
|
|
TRUC 0.11.0 - 'download.php' Remote File Disclosure
|
3 |
WEB
|
GoLd_M
|
|
2008-02-15
|
|
Mambo Component Quran 1.1 - 'surano' SQL Injection
|
4 |
WEB
|
Don
|
|
2008-02-15
|
|
WordPress Plugin Simple Forum 1.10 < 1.11 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-15
|
|
WordPress Plugin Simple Forum 2.0 < 2.1 - SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-14
|
|
PHP Live! 3.2.2 - 'questid' SQL Injection (1)
|
4 |
WEB
|
Xar
|
|
2008-02-14
|
|
freePHPgallery 0.6 - Cookie Local File Inclusion
|
4 |
WEB
|
MhZ91
|
|
2008-02-14
|
|
Scribe 0.2 - 'index.php' Local File Inclusion
|
4 |
WEB
|
muuratsalo
|
|
2008-02-14
|
|
LookStrike Lan Manager 0.9 - Local/Remote File Inclusion
|
4 |
WEB
|
MhZ91
|
|
2008-02-14
|
|
Joomla! Component mediaslide - 'albumnum' Blind SQL Injection
|
3 |
WEB
|
Inphex
|
|
2008-02-14
|
|
Joomla! Component Quiz 0.81 - 'tid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-14
|
|
Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-14
|
|
Joomla! Component paxxgallery 0.2 - 'iid' SQL Injection
|
4 |
WEB
|
S@BUN
|
|
2008-02-14
|
|
artmedic weblog 1.0 - Multiple Local File Inclusions
|
3 |
WEB
|
muuratsalo
|
|
2008-02-14
|
|
nuBoard 0.5 - 'ssid' SQL Injection
|
4 |
WEB
|
Khashayar Fereidani
|
|
2008-02-14
|
|
Affiliate Market 0.1 Beta - Cross-Site Scripting / SQL Injection
|
4 |
WEB
|
Khashayar Fereidani
|
|
2008-02-13
|
|
jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities
|
4 |
WEB
|
BugSec LTD
|
|
2008-02-13
|
|
Joomla! Component xfaq 1.2 - 'aid' SQL Injection
|
5 |
WEB
|
S@BUN
|
|
2008-02-13
|
|
Affiliate Market 0.1 Beta - 'Language' Local File Inclusion
|
4 |
WEB
|
GoLd_M
|
|
2008-02-12
|
|
AuraCMS 2.2 - 'albums' Pramater SQL Injection
|
5 |
WEB
|
DNX
|
