|
2006-04-21
|
|
Simplog 0.9.3 - 'tid' SQL Injection
|
3 |
WEB
|
nukedx
|
|
2006-04-21
|
|
CoreNews 2.0.1 - 'userid' SQL Injection
|
2 |
WEB
|
nukedx
|
|
2006-04-20
|
|
PHPSurveyor 0.995 - 'surveyid' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-04-19
|
|
ASPSitem 1.83 - 'Haberler.asp' SQL Injection
|
2 |
WEB
|
nukedx
|
|
2006-04-19
|
|
RechnungsZentrale V2 < 1.1.3 - Remote File Inclusion
|
2 |
WEB
|
GroundZero Security
|
|
2006-04-19
|
|
Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service
|
3 |
WEB
|
trueend5
|
|
2006-04-19
|
|
PCPIN Chat 5.0.4 - 'login/language' Remote Code Execution
|
4 |
WEB
|
rgod
|
|
2006-04-18
|
|
PHP Net Tools 2.7.1 - Remote Code Execution
|
4 |
WEB
|
FOX_MULDER
|
|
2006-04-18
|
|
Internet PhotoShow 1.3 - 'page' Remote File Inclusion
|
3 |
WEB
|
Hessam-x
|
|
2006-04-17
|
|
MyEvent 1.3 - 'event.php' Remote File Inclusion
|
4 |
WEB
|
botan
|
|
2006-04-17
|
|
FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass
|
3 |
WEB
|
Devil-00
|
|
2006-04-16
|
|
Blackorpheus ClanMemberSkript 1.0 - SQL Injection
|
3 |
WEB
|
snatcher
|
|
2006-04-16
|
|
Fuju News 1.0 - Authentication Bypass / SQL Injection
|
3 |
WEB
|
snatcher
|
|
2006-04-15
|
|
Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)
|
3 |
WEB
|
Nicob
|
|
2006-04-15
|
|
PHP Album 0.3.2.3 - Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-04-14
|
|
SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution
|
2 |
WEB
|
rgod
|
|
2006-04-14
|
|
osCommerce 2.2 - 'extras' Source Code Disclosure
|
2 |
WEB
|
rgod
|
|
2006-04-14
|
|
phpWebSite 0.10.2 - 'hub_dir' Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-04-13
|
|
PAJAX 0.5.1 - Remote Code Execution
|
4 |
WEB
|
Stoney
|
|
2006-04-13
|
|
quizz 1.01 - 'quizz.pl' Remote Command Execution
|
4 |
WEB
|
FOX_MULDER
|
|
2006-04-13
|
|
Censtore 7.3.x - 'censtore.cgi' Remote Command Execution
|
4 |
WEB
|
FOX_MULDER
|
|
2006-04-13
|
|
vBulletin ImpEx 1.74 - Remote Command Execution
|
4 |
WEB
|
ReZEN
|
|
2006-04-12
|
|
PHP121 Instant Messenger 1.4 - Remote Code Execution
|
4 |
WEB
|
rgod
|
|
2006-04-12
|
|
Sphider 1.3 - 'configset.php' Remote File Inclusion
|
3 |
WEB
|
rgod
|
|
2006-04-11
|
|
Simplog 0.9.2 - 's' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-04-10
|
|
Clansys 1.1 (showid) - SQL Injection
|
3 |
WEB
|
snatcher
|
|
2006-04-10
|
|
phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution
|
3 |
WEB
|
RusH
|
|
2006-04-10
|
|
Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit)
|
4 |
WEB
|
Inkubus
|
|
2006-04-10
|
|
phpList 2.10.2 - 'GLOBALS[]' Remote Code Execution
|
4 |
WEB
|
rgod
|
|
2006-04-09
|
|
Sire 2.0 - '/lire.php' Remote File Inclusion / Arbitrary File Upload
|
4 |
WEB
|
simo64
|
|
2006-04-09
|
|
XBrite Members 1.1 - 'id' SQL Injection
|
4 |
WEB
|
snatcher
|
|
2006-04-09
|
|
autonomous lan party 0.98.1.0 - Remote File Inclusion
|
4 |
WEB
|
Codexploder
|
|
2006-04-09
|
|
dnGuestbook 2.0 - SQL Injection
|
4 |
WEB
|
snatcher
|
|
2006-04-09
|
|
ADODB < 4.70 (PHPOpenChat 3.0.x) - 'Server.php' SQL Injection
|
4 |
WEB
|
rgod
|
|
2006-04-07
|
|
Horde Help Viewer 3.1 - Remote Command Execution
|
4 |
WEB
|
deese
|
|
2006-04-06
|
|
phpMyChat 0.15.0dev - SYS enter Remote Code Execution
|
5 |
WEB
|
rgod
|
|
2006-04-05
|
|
phpMyChat 0.14.5 - SYS enter Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-04-04
|
|
Crafty Syntax Image Gallery 3.1g - Remote Code Execution
|
3 |
WEB
|
undefined1_
|
|
2006-04-04
|
|
INDEXU 5.0.1 - 'base_path' Remote File Inclusion
|
3 |
WEB
|
K-159
|
|
2006-04-04
|
|
AngelineCMS 0.8.1 - 'installpath' Remote File Inclusion
|
3 |
WEB
|
K-159
|
|
2006-04-02
|
|
VWar 1.5.0 R12 - Remote File Inclusion
|
4 |
WEB
|
uid0
|
|
2006-04-02
|
|
ReloadCMS 1.2.5 - Cross-Site Scripting / Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-04-01
|
|
PHPNuke-Clan 3.0.1 - 'vwar_root2' Remote File Inclusion
|
2 |
WEB
|
uid0
|
|
2006-04-01
|
|
SQuery 4.5 - 'libpath' Remote File Inclusion
|
3 |
WEB
|
uid0
|
|
2006-03-30
|
|
Claroline 1.7.4 - 'scormExport.inc.php' Remote Code Execution
|
2 |
WEB
|
rgod
|
|
2006-03-29
|
|
EzASPSite 2.0 RC3 - 'Scheme' SQL Injection
|
3 |
WEB
|
nukedx
|
|
2006-03-28
|
|
Plogger Beta 2.1 - Administrative Credentials Disclosure
|
3 |
WEB
|
rgod
|
|
2006-03-28
|
|
GreyMatter WebLog 1.21d - Remote Command Execution (2)
|
3 |
WEB
|
Hessam-x
|
|
2006-03-28
|
|
GreyMatter WebLog 1.21d - Remote Command Execution (1)
|
4 |
WEB
|
No_Face_King
|
|
2006-03-28
|
|
PHPCollab 2.x / NetOffice 2.x - 'sendpassword.php' SQL Injection
|
4 |
WEB
|
rgod
|
|
2006-03-26
|
|
Aztek Forum 4.0 - 'myadmin.php' User Privilege Escalation
|
4 |
WEB
|
Sparah
|
|
2006-03-26
|
|
CuteNews 1.4.1 - 'function.php' Local File Inclusion
|
4 |
WEB
|
Hamid Ebadi
|
|
2006-03-25
|
|
TFT Gallery 0.10 - Password Disclosure
|
4 |
WEB
|
undefined1_
|
|
2006-03-25
|
|
phpBookingCalendar 1.0c - 'details_view.php' SQL Injection
|
4 |
WEB
|
undefined1_
|
|
2006-03-25
|
|
PHP Ticket 0.71 - 'search.php' SQL Injection
|
3 |
WEB
|
undefined1_
|
|
2006-03-25
|
|
WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution
|
5 |
WEB
|
rgod
|
|
2006-03-22
|
|
XHP CMS 0.5 - 'upload' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-03-21
|
|
FreeWPS 2.11 - 'images.php' Remote Code Execution
|
3 |
WEB
|
x128
|
|
2006-03-20
|
|
ASPPortal 3.1.1 - 'downloadid' SQL Injection
|
4 |
WEB
|
nukedx
|
|
2006-03-20
|
|
gCards 1.45 - Multiple Vulnerabilities
|
4 |
WEB
|
rgod
|
|
2006-03-19
|
|
SoftBB 0.1 - 'mail' Blind SQL Injection
|
3 |
WEB
|
LOTFREE
|
|
2006-03-18
|
|
ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution
|
4 |
WEB
|
DarkFig
|
|
2006-03-18
|
|
BetaParticle Blog 6.0 - 'fldGalleryID' SQL Injection
|
3 |
WEB
|
nukedx
|
|
2006-03-18
|
|
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
|
3 |
WEB
|
rgod
|
|
2006-03-15
|
|
KnowledgebasePublisher 1.2 - 'Include' Remote Code Execution
|
3 |
WEB
|
uid0
|
|
2006-03-15
|
|
PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-03-15
|
|
PHP iCalendar 2.21 - 'cookie' Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-03-13
|
|
Simple PHP Blog 0.4.7.1 - Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-03-11
|
|
Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
Nomenumbra
|
|
2006-03-11
|
|
Guestbook Script 1.7 - 'include_files' Remote Code Execution
|
4 |
WEB
|
rgod
|
|
2006-03-09
|
|
JiRos Banner Experience 1.0 - Unauthorized Create Admin
|
5 |
WEB
|
nukedx
|
|
2006-03-09
|
|
Light Weight Calendar 1.x - 'date' Remote Code Execution
|
4 |
WEB
|
Hessam-x
|
|
2006-03-09
|
|
d2kBlog 1.0.3 - 'memName' SQL Injection
|
4 |
WEB
|
DevilBox
|
|
2006-03-08
|
|
RedBLoG 0.5 - 'cat_id' SQL Injection
|
3 |
WEB
|
x128
|
|
2006-03-08
|
|
Gallery 2.0.3 - 'stepOrder[]' Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-03-07
|
|
Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution (Metasploit)
|
4 |
WEB
|
sirh0t
|
|
2006-03-07
|
|
CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection
|
5 |
WEB
|
nukedx
|
|
2006-03-07
|
|
OWL Intranet Engine 0.82 - 'xrms_file_root' Code Execution
|
3 |
WEB
|
rgod
|
|
2006-03-06
|
|
D2-Shoutbox 4.2 IPB Mod - 'load' SQL Injection
|
3 |
WEB
|
SkOd
|
|
2006-03-04
|
|
Fantastic News 2.1.2 - 'script_path' Remote Code Execution
|
4 |
WEB
|
uid0
|
|
2006-03-04
|
|
TotalECommerce 1.0 - 'index.asp?id' SQL Injection
|
4 |
WEB
|
nukedx
|
|
2006-03-04
|
|
PHP-Stats 0.1.9.1 - Remote Commans Execution
|
4 |
WEB
|
rgod
|
|
2006-03-03
|
|
MyBulletinBoard (MyBB) 1.04 - 'misc.php' SQL Injection (2)
|
3 |
WEB
|
Devil-00
|
|
2006-03-02
|
|
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
|
3 |
WEB
|
lorenzo
|
|
2006-03-02
|
|
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)
|
4 |
WEB
|
cijfer
|
|
2006-03-01
|
|
Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection
|
5 |
WEB
|
nukedx
|
|
2006-03-01
|
|
vuBB 0.2 Final - 'cookie' SQL Injection
|
3 |
WEB
|
KingOfSka
|
|
2006-03-01
|
|
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1)
|
3 |
WEB
|
LorD
|
|
2006-03-01
|
|
Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution
|
4 |
WEB
|
str0ke
|
|
2006-02-28
|
|
MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection
|
4 |
WEB
|
Devil-00
|
|
2006-02-28
|
|
Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access
|
4 |
WEB
|
Hessam-x
|
|
2006-02-26
|
|
4Images 1.7.1 - Local File Inclusion / Remote Code Execution
|
4 |
WEB
|
rgod
|
|
2006-02-25
|
|
PwsPHP 1.2.3 - 'index.php' SQL Injection
|
3 |
WEB
|
papipsycho
|
|
2006-02-25
|
|
saPHP Lesson 2.0 - 'forumid' SQL Injection
|
3 |
WEB
|
SnIpEr_SA
|
|
2006-02-25
|
|
Pentacle In-Out Board 6.03 - 'login.asp' Remote Authentication Bypass
|
3 |
WEB
|
nukedx
|
|
2006-02-25
|
|
Pentacle In-Out Board 6.03 - 'newsdetailsview' SQL Injection
|
4 |
WEB
|
nukedx
|
|
2006-02-25
|
|
iGENUS WebMail 2.0.2 - 'config_inc.php' Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-02-24
|
|
Lansuite 2.1.0 Beta - 'fid' SQL Injection
|
2 |
WEB
|
x128
|
|
2006-02-24
|
|
phpWebSite 0.10.0-full - 'topics.php' SQL Injection
|
3 |
WEB
|
SnIpEr_SA
|
|
2006-02-23
|
|
VHCS 2.4.7.1 - Add User Authentication Bypass
|
2 |
WEB
|
RoMaNSoFt
|
|
2006-02-23
|
|
PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection
|
2 |
WEB
|
unitedbr
|
|
2006-02-23
|
|
NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution
|
3 |
WEB
|
rgod
|
|
2006-02-22
|
|
Noahs Classifieds 1.3 - 'lowerTemplate' Remote Code Execution
|
3 |
WEB
|
trueend5
|
|
2006-02-20
|
|
ilchClan 1.05g - 'tid' SQL Injection
|
5 |
WEB
|
x128
|
|
2006-02-20
|
|
GeekLog 1.x - 'error.log' Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-02-19
|
|
MiniNuke 1.8.2b - 'pages.asp' SQL Injection
|
2 |
WEB
|
nukedx
|
|
2006-02-19
|
|
BXCP 0.2.9.9 - 'tid' SQL Injection
|
2 |
WEB
|
x128
|
|
2006-02-19
|
|
Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-02-17
|
|
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-02-17
|
|
Gravity Board X 1.1 - 'csscontent' Remote Code Execution
|
2 |
WEB
|
RusH
|
|
2006-02-17
|
|
Zorum Forum 3.5 - 'rollid' SQL Injection
|
2 |
WEB
|
RusH
|
|
2006-02-17
|
|
AWStats < 6.4 - 'referer' Remote Command Execution
|
2 |
WEB
|
RusH
|
|
2006-02-16
|
|
YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution
|
5 |
WEB
|
cijfer
|
|
2006-02-16
|
|
PHPKIT 1.6.1R2 - 'filecheck' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-02-15
|
|
MyBulletinBoard (MyBB) 1.03 - Multiple SQL Injections
|
4 |
WEB
|
HACKERS PAL
|
|
2006-02-14
|
|
webSPELL 4.01 - 'title_op' SQL Injection
|
3 |
WEB
|
x128
|
|
2006-02-13
|
|
FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution
|
5 |
WEB
|
rgod
|
|
2006-02-13
|
|
EnterpriseGS 1.0 rc4 - Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-02-13
|
|
Invision Power Board Army System Mod 2.1 - SQL Injection
|
3 |
WEB
|
fRoGGz
|
|
2006-02-11
|
|
DocMGR 0.54.2 - 'file_exists' Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-02-09
|
|
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
|
3 |
WEB
|
rgod
|
|
2006-02-09
|
|
FCKEditor 2.0 < 2.2 - 'FileManager connector.php' Arbitrary File Upload
|
3 |
WEB
|
rgod
|
|
2006-02-08
|
|
SPIP 1.8.2g - Remote Command Execution
|
3 |
WEB
|
rgod
|
|
2006-02-08
|
|
CPGNuke Dragonfly 9.0.6.1 - Remote Command Execution
|
4 |
WEB
|
rgod
|
|
2006-02-06
|
|
ASPThai.Net Guestbook 5.5 - Authentication Bypass
|
3 |
WEB
|
Zodiac
|
