Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2007-09-20   phpBB Plus 1.53 - 'phpbb_root_path' Remote File Inclusion 8 WEB Mehrad
2007-09-19   OneCMS 2.4 - 'abc' SQL Injection 8 WEB str0ke
2007-09-19   Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion 8 WEB BiNgZa
2007-09-18   phpBB Mod Ktauber.com StylesDemo - Blind SQL Injection 9 WEB nexen
2007-09-18   modifyform - 'modifyform.html' Remote File Inclusion 8 WEB mozi
2007-09-18   KwsPHP 1.0 sondages Module - SQL Injection 8 WEB Houssamix
2007-09-18   phpsyncml 0.1.2 - Remote File Inclusion 8 WEB S.W.A.T.
2007-09-17   Shop-Script FREE 2.0 - Remote Command Execution 8 WEB InATeam
2007-09-16   Omnistar Article Manager Software - 'article.php' SQL Injection 8 WEB Cold Zero
2007-09-16   SimpCMS - 'keyword' SQL Injection 7 WEB Cold Zero
2007-09-16   Joomla! Component joom12pic 1.0 - Remote File Inclusion 8 WEB Morgan
2007-09-15   Joomla! Component flash fun! 1.0 - Remote File Inclusion 8 WEB Morgan
2007-09-15   KwsPHP 1.0 stats Module - SQL Injection 8 WEB s4mi
2007-09-15   KwsPHP 1.0 Member_Space Module - SQL Injection 8 WEB s4mi
2007-09-15   KwsPHP 1.0 - 'login.php' SQL Injection 8 WEB s4mi
2007-09-15   Chupix CMS 0.2.3 - 'download.php' Remote File Disclosure 8 WEB GoLd_M
2007-09-14   Gelato - 'index.php?post' SQL Injection 8 WEB s0cratex
2007-09-14   JBlog 1.0 - 'index.php?id' SQL Injection 8 WEB s4mi
2007-09-14   PHP Webquest 2.5 - 'id_actividad' SQL Injection 8 WEB D4real_TeaM
2007-09-14   phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion 8 WEB Dj7xpl
2007-09-14   Ajax File Browser 3b - 'settings.inc.php?approot' Remote File Inclusion 8 WEB arfis project
2007-09-13   GForge < 4.6b2 - 'skill_delete' SQL Injection 8 WEB Sumit Siddharth
2007-09-13   Joomla! Component Joomlaradio 5.0 - Remote File Inclusion 8 WEB Morgan
2007-09-13   KwsPHP Module jeuxflash 1.0 - 'id' SQL Injection 8 WEB Houssamix
2007-09-14   WordPress Core 1.5.1.1 < 2.2.2 - Multiple Vulnerabilities 8 WEB Lance M. Havok
2007-09-11   X-Cart - Multiple Remote File Inclusions 8 WEB aLiiF
2007-09-11   NuclearBB Alpha 2 - 'ROOT_PATH' Remote File Inclusion 8 WEB Rootshell Security
2007-09-10   AuraCMS 2.1 - Remote File Attachment / Local File Inclusion 8 WEB k1tk4t
2007-09-10   phpRealty 0.02 - 'MGR' Multiple Remote File Inclusions 8 WEB QTRinux
2007-09-10   Sisfo Kampus 2006 - 'dwoprn.php?f' Arbitrary File Download 8 WEB k-one
2007-09-09   AuraCMS 1.5rc - Multiple SQL Injections 8 WEB k1tk4t
2007-09-08   WebED 0.8999a - Multiple Remote File Inclusions 8 WEB MhZ91
2007-09-08   Joomla! Component Restaurante - Arbitrary File Upload 8 WEB Cold Zero
2007-09-08   PHPress 0.2.0 - 'adisplay.php?lang' Local File Inclusion 8 WEB Nice Name Crew
2007-09-08   Txx CMS 0.2 - Multiple Remote File Inclusions 8 WEB Nice Name Crew
2007-09-08   Sisfo Kampus 2006 - 'blanko.preview.php' Local File Disclosure 8 WEB QTRinux
2007-09-08   Fuzzylime CMS 3.0 - Local File Inclusion 7 WEB not sec group
2007-09-08   Focus/SIS 1.0/2.2 - Remote File Inclusion 8 WEB ThE TiGeR
2007-09-08   TLM CMS 3.2 - Multiple SQL Injections 8 WEB k1tk4t
2007-09-07   Online Fantasy Football League (OFFL) 0.2.6 - Remote File Inclusion 8 WEB MhZ91
2007-09-07   RW::Download 2.0.3 lite - 'index.php?dlid' SQL Injection 9 WEB k1tk4t
2007-09-07   Webace-Linkscript 1.3 SE - 'start.php' SQL Injection 8 WEB k1tk4t
2007-09-06   PHPMytourney - 'menu.php' Remote File Inclusion 8 WEB S.W.A.T.
2007-09-05   AnyInventory 2.0 - 'Environment.php' Remote File Inclusion 8 WEB ThE TiGeR
2007-09-04   PHPOF 20040226 - 'DB_adodb.class.php' Remote File Inclusion 8 WEB ThE TiGeR
2007-09-03   STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion 8 WEB leetsecurity
2007-09-03   eNetman 20050830 - 'index.php' Remote File Inclusion 8 WEB JaheeM
2007-09-02   Yvora CMS 1.0 - 'error_view.php?ID' SQL Injection 8 WEB k1tk4t
2007-09-02   Weblogicnet - 'files_dir' Multiple Remote File Inclusions 8 WEB bius
2007-09-01   Joomla! 1.5 Beta1/Beta2/RC1 - SQL Injection 8 WEB Silentz
2007-08-31   CKGold Shopping Cart 2.0 - 'category.php' Blind SQL Injection 8 WEB k1tk4t
2007-08-31   phpBB Links MOD 1.2.2 - SQL Injection 8 WEB Don
2007-08-30   Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload 8 WEB Don
2007-08-30   NMDeluxe 2.0.0 - 'id' SQL Injection 8 WEB not sec group
2007-08-29   Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion 8 WEB GoLd_M
2007-08-29   phpBG 0.9.1 - 'rootdir' Remote File Inclusion 8 WEB GoLd_M
2007-08-29   PHPNS 1.1 - 'shownews.php?id' SQL Injection 8 WEB SmOk3
2007-08-29   ABC estore 3.0 - 'cat_id' Blind SQL Injection 8 WEB k1tk4t
2007-08-29   xGB 2.0 - 'xGB.php' Remote Security Bypass 8 WEB DarkFuneral
2007-08-28   PHPNuke-Clan 4.2.0 - 'mvcw_conver.php' Remote File Inclusion 8 WEB DNX
2007-08-28   VWar 1.5.0 R15 - 'mvcw.php' Remote File Inclusion 8 WEB DNX
2007-08-28   DL PayCart 1.01 - 'viewitem.php?ItemID' Blind SQL Injection 8 WEB irvian
2007-08-28   ACG News 1.0 - 'aid'/'catid' SQL Injection 8 WEB SmOk3
2007-08-28   Micro CMS 3.5 - 'revert-content.php' SQL Injection 7 WEB not sec group
2007-08-27   WBB2-Addon: Acrotxt 1.0 - 'show' SQL Injection 6 WEB D4m14n
2007-08-27   Arcadem 2.01 - SQL Injection / Remote File Inclusion 7 WEB SmOk3
2007-08-27   SomeryC 0.2.4 - 'include.php?skindir' Remote File Inclusion 7 WEB Katatafish
2007-08-26   2532/Gigs 1.2.1 - 'activateuser.php' Local File Inclusion 8 WEB bd0rk
2007-08-25   SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection 8 WEB k1tk4t
2007-08-23   Joomla! Component BibTeX 1.3 - Blind SQL Injection 8 WEB ajann
2007-08-23   Joomla! Component EventList 0.8 - 'did' SQL Injection 8 WEB ajann
2007-08-23   Joomla! Component Nice Talk 0.9.3 - 'tagid' SQL Injection 8 WEB ajann
2007-08-23   Joomla! Component RSfiles 1.0.2 - 'path' File Download 8 WEB ajann
2007-08-23   Mambo Component Remository - 'cat' SQL Injection 8 WEB ajann
2007-08-23   Joomla! Component NeoRecruit 1.4 - 'id' SQL Injection 8 WEB ajann
2007-08-21   litecommerce 2004 - 'category_id' SQL Injection 7 WEB k1tk4t
2007-08-20   Mambo Component SimpleFAQ 2.11 - SQL Injection 8 WEB k1tk4t
2007-08-19   Squirrelcart 1.x - 'cart.php' Remote File Inclusion 8 WEB ShaiMagal
2007-08-16   GetMyOwnArcade - 'search.php?query' SQL Injection 8 WEB RoXur777
2007-08-14   IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection 8 WEB s4squatch
2007-08-13   Prozilla Webring Website Script - 'category.php?cat' SQL Injection 8 WEB t0pP8uZz
2007-08-13   SOTEeSKLEP 3.5RC9 - 'file' Remote File Disclosure 8 WEB dun
2007-08-10   Pixlie 1.7 - 'pixlie.php?root' Remote File Disclosure 8 WEB Rizgar
2007-08-10   PHP Blue Dragon CMS 3.0.0 - Remote Code Execution 8 WEB Kacper
2007-08-10   PHP blue dragon CMS 3.0.0 - Remote File Inclusion 8 WEB Kacper
2007-08-10   PHP Blue Dragon CMS 3.0.0 - SQL Injection 8 WEB Kacper
2007-08-09   Ncaster 1.7.2 - 'archive.php' Remote File Inclusion 8 WEB k1n9k0ng
2007-08-08   FishCart 3.2 RC2 - 'fc_example.php' Remote File Inclusion 9 WEB k1n9k0ng
2007-08-07   FrontAccounting 1.12 build 31 - Remote File Inclusion 8 WEB kezzap66345
2007-08-07   PHPNews 0.93 - 'format_menue' Remote File Inclusion 8 WEB kezzap66345
2007-08-07   PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion 8 WEB K-159
2007-08-06   Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection 8 WEB t0pP8uZz
2007-08-06   Cartweaver 2.16.11 - 'ProdID' SQL Injection 9 WEB meoconx
2007-08-06   YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure 8 WEB GoLd_M
2007-08-06   Lanius CMS 1.2.14 - Multiple SQL Injections 8 WEB k1tk4t
2007-08-05   Envolution 1.1.0 - 'topic' SQL Injection 9 WEB k1tk4t
2007-08-05   AuraCMS Forum Module - SQL Injection 8 WEB k1tk4t
2007-08-02   paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection 8 WEB uimp
2007-07-31   Joomla! Component com_gmaps 1.00 - 'mapId' SQL Injection 7 WEB Mehmet Ince
2007-07-30   wolioCMS - Authentication Bypass / SQL Injection 7 WEB k1tk4t
2007-07-29   LinPHA 1.3.1 - 'new_images.php' Blind SQL Injection 7 WEB EgiX
2007-07-28   PHP123 Top Sites - 'category.php?cat' SQL Injection 6 WEB t0pP8uZz
2007-07-28   SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection 6 WEB g00ns
2007-07-27   Adult Directory - 'cat_id' SQL Injection 7 WEB t0pP8uZz
2007-07-27   Seditio CMS 121 - 'pfs.php' Arbitrary File Upload 8 WEB A.D.T
2007-07-25   IndexScript 2.8 - 'cat_id' SQL Injection 8 WEB xssvgamer
2007-07-25   Webyapar 2.0 - Multiple SQL Injections 9 WEB bypass
2007-07-24   Article Directory - 'index.php' Remote File Inclusion 8 WEB mozi
2007-07-24   Entertainment CMS - Local File Inclusion / Remote Command Execution 9 WEB Kw3[R]Ln
2007-07-24   Confixx Pro 3.3.1 - 'saveserver.php' Remote File Inclusion 9 WEB H4 / XPK
2007-07-22   bwired - 'index.php?newsID' SQL Injection 8 WEB g00ns
2007-07-22   Joomla! 1.5 Beta 2 - 'Search' Remote Code Execution 8 WEB Johannes Greil
2007-07-21   JBlog 1.0 - Create / Delete Admin Authentication Bypass 8 WEB s4mi
2007-07-21   RGameScript Pro - 'page.php?id' Remote File Inclusion 8 WEB Warpboy
2007-07-21   WSN Links Basic Edition - 'catid' SQL Injection 8 WEB t0pP8uZz
2007-07-20   Blog System 1.x - 'index.php?news_id' SQL Injection 9 WEB t0pP8uZz
2007-07-19   Joomla! Component Pony Gallery 1.5 - SQL Injection 8 WEB ajann
2007-07-18   Md-Pro 1.0.8x - Topics topicid SQL Injection 9 WEB anonymous
2007-07-18   A-shop 0.70 - Remote File Deletion 8 WEB Timq
2007-07-18   phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion 8 WEB bd0rk
2007-07-18   BBS E-Market - 'postscript.php?p_mode' Remote File Inclusion 8 WEB mozi
2007-07-18   Joomla! Component Expose RC35 - Arbitrary File Upload 8 WEB Cold Zero
2007-07-18   QuickEStore 8.2 - 'insertorder.cfm' SQL Injection 8 WEB meoconx
2007-07-18   Vivvo CMS 3.4 - 'index.php' Blind SQL Injection 8 WEB ajann
2007-07-18   Pictures Rating - 'index.php?msgid' SQL Injection 8 WEB t0pP8uZz