|
2007-12-31
|
|
ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection
|
36 |
WEB
|
Silentz
|
|
2007-12-31
|
|
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
|
35 |
WEB
|
x0kster
|
|
2007-12-31
|
|
IPTBB 0.5.4 - 'id' SQL Injection
|
35 |
WEB
|
MhZ91
|
|
2007-12-30
|
|
w-Agora 4.2.1 - 'cat' SQL Injection
|
36 |
WEB
|
IHTeam
|
|
2007-12-30
|
|
SanyBee Gallery 0.1.1 - 'p' Local File Inclusion
|
36 |
WEB
|
jackal
|
|
2007-12-30
|
|
matpo bilder galerie 1.1 - Remote File Inclusion
|
38 |
WEB
|
Crackers_Child
|
|
2007-12-30
|
|
Bitweaver R2 CMS - Arbitrary File Upload / Disclosure
|
35 |
WEB
|
BugReport.IR
|
|
2007-12-30
|
|
XCMS 1.83 - Remote Command Execution
|
36 |
WEB
|
x0kster
|
|
2007-12-30
|
|
Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure
|
42 |
WEB
|
GoLd_M
|
|
2007-12-30
|
|
kontakt formular 1.4 - Remote File Inclusion
|
33 |
WEB
|
bd0rk
|
|
2007-12-30
|
|
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
|
33 |
WEB
|
EgiX
|
|
2007-12-29
|
|
CCMS 3.1 Demo - SQL Injection
|
34 |
WEB
|
Pr0metheuS
|
|
2007-12-29
|
|
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
|
43 |
WEB
|
GoLd_M
|
|
2007-12-29
|
|
jPORTAL 2.3.1 & UserPatch - 'forum.php' Remote Code Execution
|
39 |
WEB
|
irk4z
|
|
2007-12-28
|
|
NoseRub 0.5.2 - Login SQL Injection
|
36 |
WEB
|
Felix Groebert
|
|
2007-12-28
|
|
Hot or Not Clone by Jnshosts.com - Database Backup Dump
|
35 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-28
|
|
XCMS 1.82 - Local/Remote File Inclusion
|
33 |
WEB
|
nexen
|
|
2007-12-28
|
|
xml2owl 0.1.1 - 'showcode.php' Remote Command Execution
|
32 |
WEB
|
MhZ91
|
|
2007-12-27
|
|
Joovili 3.0.6 - 'joovili.images.php' Remote File Disclosure
|
35 |
WEB
|
EcHoLL
|
|
2007-12-27
|
|
ZeusCMS 0.3 - Blind SQL Injection
|
36 |
WEB
|
EgiX
|
|
2007-12-26
|
|
PNPHPBB2 < 1.2i - 'PHPEx' Local File Inclusion
|
35 |
WEB
|
irk4z
|
|
2007-12-26
|
|
XZero Community Classifieds 4.95.11 - Remote File Inclusion
|
34 |
WEB
|
Kw3[R]Ln
|
|
2007-12-26
|
|
XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection
|
32 |
WEB
|
Kw3[R]Ln
|
|
2007-12-26
|
|
Blakord Portal Beta 1.3.A (All Modules) - SQL Injection
|
33 |
WEB
|
JosS
|
|
2007-12-26
|
|
RunCMS 1.6 - Blind SQL Injection (IDS Evasion)
|
37 |
WEB
|
sh2kerr
|
|
2007-12-25
|
|
eSyndiCat Link Exchange Script 2005-2006 - SQL Injection
|
32 |
WEB
|
EgiX
|
|
2007-12-25
|
|
RunCMS 1.6 - Multiple Vulnerabilities
|
36 |
WEB
|
DSecRG
|
|
2007-12-25
|
|
PMOS Help Desk 2.4 - Remote Command Execution
|
37 |
WEB
|
EgiX
|
|
2007-12-25
|
|
MailMachine Pro 2.2.4 - SQL Injection
|
33 |
WEB
|
MhZ91
|
|
2007-12-25
|
|
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
|
35 |
WEB
|
sh2kerr
|
|
2007-12-25
|
|
AuraCMS 2.2 - Remote Add Administrator
|
33 |
WEB
|
k1tk4t
|
|
2007-12-25
|
|
TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions
|
35 |
WEB
|
GoLd_M
|
|
2007-12-24
|
|
Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion
|
36 |
WEB
|
ShockShadow
|
|
2007-12-24
|
|
Agares phpAutoVideo 2.21 - Local/Remote File Inclusion
|
36 |
WEB
|
MhZ91
|
|
2007-12-24
|
|
Jupiter 1.1.5ex - Privilege Escalation
|
34 |
WEB
|
BugReport.IR
|
|
2007-12-24
|
|
ThemeSiteScript 1.0 - 'index.php?loadadminpage' Remote File Inclusion
|
35 |
WEB
|
Koller
|
|
2007-12-24
|
|
CuteNews 1.4.5 - Admin Password md5 Hash Fetching
|
32 |
WEB
|
waraxe
|
|
2007-12-24
|
|
MeGaCheatZ 1.1 - Multiple SQL Injections
|
36 |
WEB
|
MhZ91
|
|
2007-12-24
|
|
WebSihirbazi 5.1.1 - 'pageid' SQL Injection
|
34 |
WEB
|
bypass
|
|
2007-12-23
|
|
MMSLamp - 'idpro' SQL Injection
|
35 |
WEB
|
x0kster
|
|
2007-12-23
|
|
Adult Script 1.6.5 - Multiple SQL Injections
|
34 |
WEB
|
MhZ91
|
|
2007-12-23
|
|
PHP ZLink 0.3 - 'go.php' SQL Injection
|
34 |
WEB
|
DNX
|
|
2007-12-22
|
|
zBlog 1.2 - SQL Injection
|
35 |
WEB
|
Houssamix
|
|
2007-12-22
|
|
IP Reg 0.3 - Multiple SQL Injections
|
34 |
WEB
|
MhZ91
|
|
2007-12-22
|
|
Wallpaper Site 1.0.09 - 'category.php' SQL Injection
|
34 |
WEB
|
Koller
|
|
2007-12-21
|
|
Shadowed Portal 5.7d3 - 'POST' Remote File Inclusion
|
37 |
WEB
|
The:Paradox
|
|
2007-12-21
|
|
Shadowed Portal 5.7d3 - Remote Command Execution
|
36 |
WEB
|
The:Paradox
|
|
2007-12-21
|
|
Social Engine 2.0 - Multiple Local File Inclusions
|
34 |
WEB
|
MhZ91
|
|
2007-12-21
|
|
mBlog 1.2 - 'page' Remote File Disclosure
|
38 |
WEB
|
irk4z
|
|
2007-12-21
|
|
1024 CMS 1.3.1 - Local File Inclusion / SQL Injection
|
35 |
WEB
|
irk4z
|
|
2007-12-21
|
|
Arcadem LE 2.04 - 'loadadminpage' Remote File Inclusion
|
36 |
WEB
|
KnocKout
|
|
2007-12-21
|
|
NmnNewsletter 1.0.7 - 'output' Remote File Inclusion
|
43 |
WEB
|
CraCkEr
|
|
2007-12-21
|
|
nicLOR CMS - 'sezione_news.php' SQL Injection
|
36 |
WEB
|
x0kster
|
|
2007-12-19
|
|
xeCMS 1.x - 'view.php' Remote File Disclosure
|
34 |
WEB
|
p4imi0
|
|
2007-12-18
|
|
PhpMyDesktop/Arcade 1.0 Final - 'phpdns_basedir' Remote File Inclusion
|
37 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-18
|
|
Dokeos 1.8.4 - Arbitrary File Upload
|
37 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-18
|
|
PHPMyRealty 1.0.x - 'search.php' SQL Injection
|
35 |
WEB
|
Koller
|
|
2007-12-18
|
|
FreeWebShop 2.2.7 - 'cookie' Admin Password Grabber
|
39 |
WEB
|
k1tk4t
|
|
2007-12-18
|
|
MySpace Content Zone 3.x - Arbitrary File Upload
|
36 |
WEB
|
Don
|
|
2007-12-18
|
|
FreeWebShop 2.2.1 - Blind SQL Injection
|
36 |
WEB
|
k1tk4t
|
|
2007-12-18
|
|
MOG-WebShop - 'index.php?group' SQL Injection
|
39 |
WEB
|
k1tk4t
|
|
2007-12-18
|
|
gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion
|
33 |
WEB
|
MhZ91
|
|
2007-12-14
|
|
PHP Real Estate - 'fullnews.php?id' SQL Injection
|
38 |
WEB
|
t0pP8uZz
|
|
2007-12-14
|
|
Form Tools 1.5.0b - Multiple Remote File Inclusions
|
42 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-14
|
|
Oreon 1.4 / Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities
|
36 |
WEB
|
Michael Brooks
|
|
2007-12-14
|
|
Anon Proxy Server 0.1000 - Remote Command Execution
|
35 |
WEB
|
Michael Brooks
|
|
2007-12-14
|
|
123tkShop 0.9.1 - Remote Authentication Bypass
|
36 |
WEB
|
Michael Brooks
|
|
2007-12-13
|
|
Adult Script 1.6 - Unauthorized Administrative Access
|
36 |
WEB
|
Liz0ziM
|
|
2007-12-13
|
|
hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
|
38 |
WEB
|
BugReport.IR
|
|
2007-12-13
|
|
xml2owl 0.1.1 - 'filedownload.php' Remote File Disclosure
|
34 |
WEB
|
GoLd_M
|
|
2007-12-13
|
|
Mms Gallery PHP 1.0 - 'id' Remote File Disclosure
|
38 |
WEB
|
GoLd_M
|
|
2007-12-13
|
|
CMS Galaxie Software - 'category_id' SQL Injection
|
32 |
WEB
|
MurderSkillz
|
|
2007-12-13
|
|
CityWriter 0.9.7 - 'head.php' Remote File Inclusion
|
38 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-12
|
|
Fastpublish CMS 1.9999 - config[fsBase] Remote File Inclusion
|
36 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-11
|
|
ViArt CMS/Shop/Helpdesk 3.3.2 - Remote File Inclusion
|
35 |
WEB
|
RoMaNcYxHaCkEr
|
|
2007-12-11
|
|
WordPress Core 2.3.1 - Charset SQL Injection
|
32 |
WEB
|
Abel Cheung
|
|
2007-12-11
|
|
Mcms Easy Web Make - 'index.php?template' Local File Inclusion
|
35 |
WEB
|
MhZ91
|
|
2007-12-11
|
|
SquirrelMail G/PGP Encryption Plugin - 'deletekey()' Command Injection
|
32 |
WEB
|
Backdoored
|
|
2007-12-10
|
|
MonAlbum 0.87 - Arbitrary File Upload / Password Grabber
|
34 |
WEB
|
v0l4arrra
|
|
2007-12-10
|
|
falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting
|
37 |
WEB
|
MhZ91
|
|
2007-12-10
|
|
Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities
|
37 |
WEB
|
H-Security Labs
|
|
2007-12-10
|
|
Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection
|
40 |
WEB
|
Aria-Security Team
|
|
2007-12-09
|
|
SH-News 3.0 - 'comments.php' SQL Injection
|
36 |
WEB
|
hadihadi
|
|
2007-12-09
|
|
DWdirectory 2.1 - SQL Injection
|
35 |
WEB
|
t0pP8uZz
|
|
2007-12-09
|
|
Ace Image Hosting Script - 'id' SQL Injection
|
33 |
WEB
|
t0pP8uZz
|
|
2007-12-09
|
|
Content Injector 1.53 - 'index.php' SQL Injection
|
35 |
WEB
|
S.W.A.T.
|
|
2007-12-09
|
|
Flat PHP Board 1.2 - Multiple Vulnerabilities
|
35 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-12-08
|
|
PolDoc CMS 0.96 - 'download_file.php' File Disclosure
|
36 |
WEB
|
GoLd_M
|
|
2007-12-06
|
|
MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection
|
40 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-12-06
|
|
SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities
|
34 |
WEB
|
GoLd_M
|
|
2007-12-05
|
|
WordPress Plugin PictPress 0.91 - Remote File Disclosure
|
35 |
WEB
|
GoLd_M
|
|
2007-12-05
|
|
EZContents 1.4.5 - 'index.php?link' Remote File Disclosure
|
34 |
WEB
|
p4imi0
|
|
2007-12-05
|
|
SineCMS 2.3.4 - Calendar SQL Injection
|
34 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-12-05
|
|
Joomla! / Mambo Component rsgallery 2.0b5 - 'catid' SQL Injection
|
36 |
WEB
|
K-159
|
|
2007-12-03
|
|
Snitz Forums 2000 - 'Active.asp' SQL Injection
|
34 |
WEB
|
BugReport.IR
|
|
2007-12-03
|
|
phpBB Garage 1.2.0 Beta3 - SQL Injection
|
37 |
WEB
|
maku234
|
|
2007-12-01
|
|
Rayzz Script 2.0 - Local/Remote File Inclusion
|
35 |
WEB
|
Crackers_Child
|
|
2007-12-01
|
|
tellmatic 1.0.7 - Multiple Remote File Inclusions
|
33 |
WEB
|
ShAy6oOoN
|
|
2007-11-29
|
|
ftp Admin 0.1.0 - Local File Inclusion / Cross-Site Scripting / Authentication Bypass
|
35 |
WEB
|
Omni
|
|
2007-11-29
|
|
LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure
|
34 |
WEB
|
GoLd_M
|
|
2007-11-29
|
|
KML share 1.1 - 'region.php?layer' Remote File Disclosure
|
36 |
WEB
|
GoLd_M
|
|
2007-11-29
|
|
Seditio CMS 121 - SQL Injection
|
38 |
WEB
|
InATeam
|
|
2007-11-29
|
|
WebED 0.0.9 - 'index.php' Remote File Disclosure
|
34 |
WEB
|
GoLd_M
|
|
2007-11-29
|
|
Web-MeetMe 3.0.3 - 'play.php' Remote File Disclosure
|
35 |
WEB
|
Evil.Man
|
|
2007-11-28
|
|
NoAh 0.9 pre 1.2 - 'filepath' Remote File Disclosure
|
35 |
WEB
|
GoLd_M
|
|
2007-11-28
|
|
TuMusika Evolution 1.7R5 - Remote File Disclosure
|
34 |
WEB
|
GoLd_M
|
|
2007-11-28
|
|
Charrays CMS 0.9.3 - Multiple Remote File Inclusions
|
34 |
WEB
|
MhZ91
|
|
2007-11-28
|
|
EHCP 0.22.8 - Multiple Remote File Inclusions
|
38 |
WEB
|
MhZ91
|
|
2007-11-28
|
|
PHP-CON 1.3 - 'include.php' Remote File Inclusion
|
35 |
WEB
|
GoLd_M
|
|
2007-11-27
|
|
project alumni 1.0.9 - 'index.php?act' Local File Inclusion
|
37 |
WEB
|
tomplixsee
|
|
2007-11-27
|
|
wpQuiz 2.7 - Multiple SQL Injections
|
36 |
WEB
|
Kacper
|
|
2007-11-27
|
|
PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure
|
35 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-11-27
|
|
Eurologon CMS - 'files.php' Arbitrary File Download
|
34 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-11-27
|
|
Eurologon CMS - Multiple SQL Injections
|
36 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-11-26
|
|
Tilde CMS 4.x - 'aarstal' SQL Injection
|
35 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-11-26
|
|
DeluxeBB 1.09 - Remote Admin Email Change
|
39 |
WEB
|
nexen
|
|
2007-11-25
|
|
Softbiz Freelancers Script 1 - SQL Injection
|
36 |
WEB
|
Khashayar Fereidani
|
|
2007-11-25
|
|
IAPR COMMENCE 1.3 - Multiple Remote File Inclusions
|
33 |
WEB
|
ShAy6oOoN
|
|
2007-11-25
|
|
RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite
|
34 |
WEB
|
BugReport.IR
|
|
2007-11-24
|
|
RunCMS 1.6 - Local File Inclusion
|
36 |
WEB
|
BugReport.IR
|
|
2007-11-24
|
|
project alumni 1.0.9 - Cross-Site Scripting / SQL Injection
|
35 |
WEB
|
tomplixsee
|
|
2007-11-24
|
|
PBLang 4.99.17.q - Remote File Rewriting / Command Execution
|
40 |
WEB
|
KiNgOfThEwOrLd
|
|
2007-11-24
|
|
WorkingOnWeb 2.0.1400 - 'events.php' SQL Injection
|
36 |
WEB
|
ka0x
|
|
2007-11-24
|
|
Amber Script 1.0 - 'show_content.php?id' Local File Inclusion
|
39 |
WEB
|
Crackers_Child
|
|
2007-11-23
|
|
Mp3 ToolBox 1.0 Beta 5 - 'skin_file' Remote File Inclusion
|
35 |
WEB
|
Crackers_Child
|
