Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-12-24   File Upload Manager 1.0.6 - 'detail.asp' SQL Injection 35 WEB ajann
2006-12-23   Enthrallweb eNews 1.0 - Remote User Pass Change 35 WEB ajann
2006-12-23   Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change 35 WEB ajann
2006-12-23   Enthrallweb eClassifieds 1.0 - Remote User Pass Change 34 WEB ajann
2006-12-23   Calendar MX BASIC 1.0.2 - 'ID' SQL Injection 35 WEB ajann
2006-12-23   Dragon Business Directory 3.01.12 - 'ID' SQL Injection 37 WEB ajann
2006-12-23   Enthrallweb ePages - 'actualpic.asp' SQL Injection 38 WEB ajann
2006-12-23   Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection 35 WEB ajann
2006-12-23   Enthrallweb eCars 1.0 - 'types.asp' SQL Injection 35 WEB ajann
2006-12-23   Enthrallweb eJobs - 'newsdetail.asp' SQL Injection 33 WEB ajann
2006-12-23   Enthrallweb eHomes 1.0 - Multiple (SQL Injection / Cross-Site Scripting) Vulnerabilities 35 WEB ajann
2006-12-23   Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection 35 WEB ajann
2006-12-23   SH-News 0.93 - 'misc.php' Remote File Inclusion 34 WEB bd0rk
2006-12-23   b2 Blog 0.5 - 'b2verifauth.php' Remote File Inclusion 32 WEB mdx
2006-12-22   3editor CMS 0.42 - 'index.php' Local File Inclusion 33 WEB 3l3ctric-Cracker
2006-12-23   open NewsLetter 2.5 - Multiple Vulnerabilities (2) 34 WEB BlackHawk
2006-12-22   EternalMart Guestbook 1.10 - '/admin/auth.php' Remote File Inclusion 35 WEB mdx
2006-12-22   KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion 34 WEB mdx
2006-12-21   MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery 36 WEB Demential
2006-12-21   inertianews 0.02b - 'inertianews_main.php' Remote File Inclusion 38 WEB bd0rk
2006-12-21   Ixprim CMS 1.2 - Blind SQL Injection 33 WEB DarkFig
2006-12-21   PowerClan 1.14a - 'footer.inc.php' Remote File Inclusion 35 WEB nuffsaid
2006-12-21   PgmReloaded 0.8.5 - Multiple Remote File Inclusions 38 WEB nuffsaid
2006-12-21   Newxooper-PHP 0.9.1 - 'mapage.php' Remote File Inclusion 36 WEB 3l3ctric-Cracker
2006-12-21   PHP/Mysql Site Builder 0.0.2 - 'htm2PHP.php' File Disclosure 36 WEB the master
2006-12-20   PHP Advanced Transfer Manager 1.30 - Source Code Disclosure 38 WEB Kacper
2006-12-20   TextSend 1.5 - '/config/sender.php' Remote File Inclusion 35 WEB nuffsaid
2006-12-20   Valdersoft Shopping Cart 3.0 - Multiple Remote File Inclusions 37 WEB mdx
2006-12-19   cwmExplorer 1.0 - 'show_file' Source Code Disclosure 40 WEB ajann
2006-12-19   Burak Yilmaz Download Portal - 'down.asp' SQL Injection 36 WEB ShaFuck31
2006-12-19   cwmCounter 5.1.1 - 'statistic.php' Remote File Inclusion 35 WEB bd0rk
2006-12-19   cwmVote 1.0 - 'archive.php' Remote File Inclusion 35 WEB bd0rk
2006-12-19   PHPFanBase 2.x - 'protection.php' Remote File Inclusion 38 WEB Cold Zero
2006-12-19   phpProfiles 3.1.2b - Multiple Remote File Inclusions 35 WEB nuffsaid
2006-12-19   Paristemi 0.8.3b - 'buycd.php' Remote File Inclusion 35 WEB nuffsaid
2006-12-19   PHP-Update 2.7 - 'extract()' Authentication Bypass / Shell Injection 35 WEB rgod
2006-12-18   RateMe 1.3.2 - 'main.inc.php' Remote File Inclusion 35 WEB Al7ejaz Hacker
2006-12-18   Uploader & Downloader 3.0 - 'id_user' SQL Injection 33 WEB the master
2006-12-18   VerliAdmin 0.3 - 'index.php' Remote File Inclusion 49 WEB Kacper
2006-12-18   Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion 35 WEB nuffsaid
2006-12-16   mxBB Module Meeting 1.1.2 - Remote File Inclusion 36 WEB ajann
2006-12-16   mxbb module charts 1.0.0 - Remote File Inclusion 36 WEB ajann
2006-12-16   mxBB Module WebLinks 2.05 - Remote File Inclusion 35 WEB ajann
2006-12-16   Bandwebsite 1.5 - 'LOGIN' Remote Add Admin 34 WEB H0tTurk-
2006-12-16   extreme-fusion 4.02 - Remote Code Execution 39 WEB Kacper
2006-12-14   AR Memberscript - 'usercp_menu.php' Remote File Inclusion 36 WEB ex0
2006-12-14   yaplap 0.6.1b - 'ldap.php' Remote File Inclusion 34 WEB DeltahackingTEAM
2006-12-13   PHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion 33 WEB v1per-haCker
2006-12-12   mxBB Module newssuite 1.03 - Remote File Inclusion 35 WEB 3l3ctric-Cracker
2006-12-12   mxBB Module kb_mods 2.0.2 - Remote File Inclusion 35 WEB 3l3ctric-Cracker
2006-12-12   Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion 33 WEB HACKERS PAL
2006-12-12   mxBB Module mx_modsdb 1.0 - Remote File Inclusion 36 WEB Lu7k
2006-12-11   Barman 0.0.1r3 - 'Interface.php' Remote File Inclusion 33 WEB DeltahackingTEAM
2006-12-11   mxBB Module Activity Games 0.92 - Remote File Inclusion 34 WEB 3l3ctric-Cracker
2006-12-11   mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion 35 WEB bd0rk
2006-12-10   PHPAlbum 0.4.1 Beta 6 - 'language.php' Local File Inclusion 35 WEB Kacper
2006-12-09   HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass 35 WEB ajann
2006-12-09   Request For Travel 1.0 - 'product' SQL Injection 33 WEB ajann
2006-12-09   SpotLight CRM 1.0 - 'login.asp' SQL Injection 35 WEB ajann
2006-12-09   Fantastic News 2.1.4 - 'news.php' SQL Injection 34 WEB Bl0od3r
2006-12-09   Gizzar 03162002 - 'index.php' Remote File Inclusion 36 WEB DeltahackingTEAM
2006-12-09   mxBB Module Profile CP 0.91c - Remote File Inclusion 33 WEB bd0rk
2006-12-09   TorrentFlux 2.2 - 'maketorrent.php' Remote Command Execution 36 WEB r0ut3r
2006-12-09   TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure 33 WEB r0ut3r
2006-12-08   paFileDB 3.5.2/3.5.3 - Remote Authentication Bypass / SQL Injection 34 WEB koray
2006-12-08   ThinkEdit 1.9.2 - 'render.php' Remote File Inclusion 34 WEB r0ut3r
2006-12-08   CM68 News 12.02.06 - 'addpth' Remote File Inclusion 34 WEB Paul Bakoyiannis
2006-12-08   Tucows Client Code Suite (CSS) 1.2.1015 - Remote File Inclusion 32 WEB 3l3ctric-Cracker
2006-12-07   J-OWAMP Web Interface 2.1b - 'link' Remote File Inclusion 36 WEB 3l3ctric-Cracker
2006-12-06   Phorum 3.2.11 - 'common.php' Remote File Inclusion 32 WEB Mr-m07
2006-12-04   CuteNews aj-fork 167f - 'cutepath' Remote File Inclusion 39 WEB DeltahackingTEAM
2006-12-03   PHP-revista 1.1.2 - 'adodb' Multiple Remote File Inclusions 36 WEB Cold Zero
2006-12-03   QuickCart 2.0 - 'categories.php' Local File Inclusion 34 WEB r0ut3r
2006-12-03   Envolution 1.1.0 - 'PNSVlang' Remote Code Execution 36 WEB Kacper
2006-12-03   PHP Upload Center 2.0 - 'activate.php' File Inclusion 36 WEB GregStar
2006-12-02   mxBB Module mx_tinies 1.3.0 - Remote File Inclusion 38 WEB bd0rk
2006-12-02   awrate.com Message Board 1.0 - 'search.php' Remote File Inclusion 35 WEB DeltahackingTEAM
2006-12-02   simple file manager 0.24a - Multiple Vulnerabilities 37 WEB flame
2006-12-02   BBS E-Market Professional - Full Path Disclosure / File Inclusion 38 WEB y3dips
2006-12-01   Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure 34 WEB ajann
2006-12-01   ContentServ 4.x - '/admin/FileServer.php' File Disclosure 37 WEB qobaiashi
2006-12-01   Invision Community Blog Mod 1.2.4 - SQL Injection 35 WEB anonymous
2006-12-01   DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload 38 WEB Tim Weber
2006-11-30   LDU 8.x - 'polls.php' SQL Injection 36 WEB ajann
2006-11-30   S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion 39 WEB Kacper
2006-11-30   phpGraphy 0.9.12 - Privilege Escalation / Commands Execution 35 WEB rgod
2006-11-29   b2evolution 1.8.5 < 1.9b - 'import-mt.php' Remote File Inclusion 38 WEB tarkus
2006-11-29   kubix 0.7 - Multiple Vulnerabilities 37 WEB BlackHawk
2006-11-28   P-News 2.0 - 'user.txt' Remote Password Disclosure 33 WEB Lu7k
2006-11-28   Discuz! 4.x - SQL Injection / Admin Credentials Disclosure 39 WEB rgod
2006-11-26   SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection 36 WEB bolivar
2006-11-26   Mambo Component com_flyspray < 1.0.1 - Remote File Disclosure 35 WEB 3l3ctric-Cracker
2006-11-26   Hacks List phpBB Mod 1.21 - SQL Injection 35 WEB the master
2006-11-25   Exhibit Engine 1.22 - 'styles.php' Remote File Inclusion 33 WEB Kacper
2006-11-25   ASP-Nuke Community 1.5 - Cookie Privilege Escalation 35 WEB ajann
2006-11-25   Basic Forum 1.1 - 'edit.asp' SQL Injection 34 WEB bolivar
2006-11-25   Sisfo Kampus 0.8 - Remote File Inclusion / Download 36 WEB Wawan Firmansyah
2006-11-25   Liberum Help Desk 0.97.3 - SQL Injection 32 WEB ajann
2006-11-24   Cahier de texte 2.0 - Database Backup / Source Disclosure 30 WEB DarkFig
2006-11-24   PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion 35 WEB DeltahackingTEAM
2006-11-23   Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection 35 WEB rgod
2006-11-24   Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection 35 WEB rgod
2006-11-23   PEGames - 'index.php' Remote File Inclusion 36 WEB DeltahackingTEAM
2006-11-23   OWLLib 1.0 - 'OWLMemoryProperty.php' Remote File Inclusion 34 WEB DeltahackingTEAM
2006-11-23   HSRS 1.0 - 'addcode.php' Remote File Inclusion 33 WEB Cold Zero
2006-11-23   JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection 35 WEB ajann
2006-11-23   Wallpaper Complete Website 1.0.09 - SQL Injection 34 WEB GregStar
2006-11-23   Recipes Complete Website 1.1.14 - SQL Injection 35 WEB GregStar
2006-11-23   Site News - 'centre.php' Remote File Inclusion 34 WEB DaDIsS
2006-11-23   Messagerie Locale - 'centre.php' Remote File Inclusion 36 WEB DaDIsS
2006-11-22   a-ConMan 3.2b - 'common.inc.php' Remote File Inclusion 34 WEB Matdhule
2006-11-22   fipsForum 2.6 - 'default2.asp' SQL Injection 33 WEB ajann
2006-11-22   fipsGallery 1.5 - 'index1.asp' SQL Injection 33 WEB ajann
2006-11-22   FipsCMS 4.5 - 'index.asp' SQL Injection 33 WEB ajann
2006-11-21   phpPC 1.04 - Multiple Remote File Inclusions 35 WEB iss4m
2006-11-21   Pearl Forums 2.4 - Multiple Remote File Inclusions 35 WEB 3l3ctric-Cracker
2006-11-21   aBitWhizzy - 'abitwhizzy.php' Information Disclosure 36 WEB Security Access Point
2006-11-21   ContentNow 1.39 - 'pageid' SQL Injection 36 WEB Revenge
2006-11-21   Seditio 1.10 - avatarselect id SQL Injection 34 WEB nukedx
2006-11-21   LDU 8.x - avatarselect id SQL Injection 35 WEB nukedx
2006-11-21   e-Ark 1.0 - '/src/ark_inc.php' Remote File Inclusion 37 WEB DeltahackingTEAM
2006-11-21   Photo Cart 3.9 - 'adminprint.php' Remote File Inclusion 36 WEB irvian
2006-11-19   PHPQuickGallery 1.9 - 'textFile' Remote File Inclusion 35 WEB Al7ejaz Hacker
2006-11-19   ASPNuke 0.80 - 'register.asp' SQL Injection 34 WEB ajann
2006-11-18   PHP Easy Downloader 1.5 - 'save.php' Remote Code Execution 38 WEB nuffsaid