Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-05-29   Nukedit 4.9.6 - Unauthorized Admin Add 19 WEB FarhadKey
2006-05-29   Speedy ASP Forum - 'profileupdate.asp' User Pass Change 17 WEB ajann
2006-05-29   Fastpublish CMS 1.6.9 - config[fsBase] Remote File Inclusion 17 WEB Kacper
2006-05-28   CosmicShoppingCart - 'search.php' SQL Injection 21 WEB Vympel
2006-05-28   Blend Portal 1.2.0 - 'phpBB Mod' Remote File Inclusion 20 WEB nukedx
2006-05-28   ASPSitem 2.0 - SQL Injection / Database Disclosure 20 WEB nukedx
2006-05-28   Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion 20 WEB nukedx
2006-05-28   UBBCentral UBB.Threads 5.x/6.x - Multiple Remote File Inclusions 19 WEB nukedx
2006-05-28   EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation 19 WEB nukedx
2006-05-28   F@cile Interactive Web 0.8x - Remote File Inclusion / Cross-Site Scripting 19 WEB nukedx
2006-05-28   Enigma Haber 4.3 - Multiple SQL Injections 19 WEB nukedx
2006-05-28   tinyBB 0.3 - Remote File Inclusion / SQL Injection 20 WEB nukedx
2006-05-27   MiniNuke 2.x - SQL Injection (Add Admin) 20 WEB nukedx
2006-05-27   PrideForum 1.0 - 'forum.asp' SQL Injection 19 WEB ajann
2006-05-27   Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion 25 WEB Kacper
2006-05-26   Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities 22 WEB ajann
2006-05-26   qjForum - 'member.asp' SQL Injection 21 WEB ajann
2006-05-26   Plume CMS 1.0.3 - 'manager_path' Remote File Inclusion 19 WEB beford
2006-05-25   APC ActionApps CMS 2.8.1 - Remote File Inclusion 18 WEB Kacper
2006-05-25   DoceboLms 2.0.5 - 'help.php' Remote File Inclusion 18 WEB beford
2006-05-25   V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion 20 WEB beford
2006-05-25   Socketmail 2.2.6 - 'site_path' Remote File Inclusion 19 WEB Aesthetico
2006-05-25   Back-End CMS 0.7.2.2 - 'BE_config.php' Remote File Inclusion 19 WEB Kacper
2006-05-25   open-medium.CMS 0.25 - '404.php' Remote File Inclusion 20 WEB Kacper
2006-05-25   BASE 1.2.4 - melissa Snort Frontend Remote File Inclusion 19 WEB str0ke
2006-05-24   Drupal 4.7 - 'Attachment mod_mime' Remote Command Execution 17 WEB rgod
2006-05-23   phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection 16 WEB X0r_1
2006-05-23   Docebo 3.0.3 - Multiple Remote File Inclusions 23 WEB Kacper
2006-05-23   Nucleus CMS 3.22 - 'DIR_LIBS' Remote File Inclusion 18 WEB rgod
2006-05-22   UBBCentral UBB.Threads 6.4.x < 6.5.2 - 'thispath' Remote File Inclusion 17 WEB V4mu
2006-05-21   Fusion News 1.0 (fil_config) - Remote File Inclusion 18 WEB X0r_1
2006-05-21   XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution 20 WEB rgod
2006-05-20   Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection 20 WEB 666
2006-05-20   CaLogic Calendars 1.2.2 - 'CLPath' Remote File Inclusion 21 WEB Kacper
2006-05-19   phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion 20 WEB OLiBekaS
2006-05-19   Zix Forum 1.12 - 'layid' SQL Injection 18 WEB FarhadKey
2006-05-19   phpListPro 2.0.1 - 'Language' Remote Code Execution 20 WEB [Oo]
2006-05-19   phpBazar 2.1.0 - Remote File Inclusion / Authentication Bypass 20 WEB [Oo]
2006-05-17   ScozNews 1.2.1 - 'mainpath' Remote File Inclusion 21 WEB Kacper
2006-05-17   Quezza BB 1.0 - 'quezza_root_path' File Inclusion 19 WEB nukedx
2006-05-16   DeluxeBB 1.06 - 'Attachment mod_mime' Remote Command Execution 22 WEB rgod
2006-05-16   PHP-Fusion 6.00.306 - 'srch_where' SQL Injection 18 WEB rgod
2006-05-15   ezusermanager 1.6 - Remote File Inclusion 21 WEB OLiBekaS
2006-05-15   DeluxeBB 1.06 - 'name' SQL Injection (mq=off) 18 WEB KingOfSka
2006-05-15   Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion 20 WEB OLiBekaS
2006-05-15   TR Newsportal 0.36tr1 - 'poll.php' Remote File Inclusion 19 WEB Kacper
2006-05-14   Sugar Suite Open Source 4.2 - 'OptimisticLock' Command Execution 20 WEB rgod
2006-05-13   phpBB 2.0.20 - Admin/Restore DB/default_lang Remote Command Execution 16 WEB rgod
2006-05-12   PHP Blue Dragon CMS 2.9 - Remote File Inclusion 20 WEB Kacper
2006-05-12   Foing 0.7.0 - 'phpBB' Remote File Inclusion 17 WEB Kurdish Security
2006-05-11   Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion 19 WEB rgod
2006-05-09   pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion 17 WEB Darkfire
2006-05-09   phpRaid 3.0.b3 - 'phpBB'/'SMF' Remote File Inclusion 18 WEB Kurdish Security
2006-05-08   phpListPro 2.01 - Multiple Remote File Inclusions 19 WEB Aesthetico
2006-05-08   ActualAnalyzer Pro 6.88 - 'rf' Remote File Inclusion 19 WEB ReZEN
2006-05-08   ActualAnalyzer Server 8.23 - 'rf' Remote File Inclusion 22 WEB Aesthetico
2006-05-08   Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion 17 WEB beford
2006-05-08   Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion 21 WEB beford
2006-05-07   EQdkp 1.3.0 - 'dbal.php' Remote File Inclusion 21 WEB OLiBekaS
2006-05-07   ACal 2.2.6 - 'day.php' Remote File Inclusion 22 WEB PiNGuX
2006-05-07   Jetbox CMS 2.1 - 'relative_script_path' Remote File Inclusion 19 WEB beford
2006-05-07   PHP-Fusion 6.00.306 - Multiple Vulnerabilities 26 WEB rgod
2006-05-06   VP-ASP 6.00 - 'shopcurrency.asp' SQL Injection 22 WEB tracewar
2006-05-06   HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution 21 WEB [Oo]
2006-05-06   AWStats 6.5 - 'migrate' Remote Shell Command Injection 17 WEB redsand
2006-05-05   TotalCalendar 2.30 - 'inc' Remote File Inclusion 25 WEB Aesthetico
2006-05-05   StatIt 4 - 'statitpath' Remote File Inclusion 18 WEB IGNOR3
2006-05-05   Limbo CMS 1.0.4.2 - 'catid' SQL Injection 22 WEB [Oo]
2006-05-04   Auction 1.3m - 'phpbb_root_path' Remote File Inclusion 19 WEB webDEViL
2006-05-03   Albinator 2.0.6 - 'Config_rootdir' Remote File Inclusion 20 WEB webDEViL
2006-05-02   Fast Click 1.1.3/2.3.8 - 'show.php' Remote File Inclusion 21 WEB R@1D3N
2006-05-02   X7 Chat 2.0 - 'help_file' Remote Command Execution 19 WEB rgod
2006-05-01   Invision Power Board 2.1.5 - 'from_contact' SQL Injection 19 WEB Ykstortion Security
2006-04-30   Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion 18 WEB cijfer
2006-04-30   phpMyAgenda 3.0 Final - 'rootagenda' Remote File Inclusion 20 WEB Aesthetico
2006-04-30   Aardvark Topsites PHP 4.2.2 - 'path' Remote File Inclusion 20 WEB [Oo]
2006-04-29   Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion 18 WEB [Oo]
2006-04-29   Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion 17 WEB [Oo]
2006-04-29   openPHPNuke 2.3.3 - Remote File Inclusion 22 WEB [Oo]
2006-04-29   Invision Power Board 2.1.5 - 'search.php' Remote Code Execution 20 WEB Javier Olascoaga
2006-04-28   Advanced Guestbook 2.4.0 - 'phpBB' Remote File Inclusion 18 WEB n0m3rcy
2006-04-28   TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2) 19 WEB FOX_MULDER
2006-04-28   Advanced Guestbook 2.4.0 - 'phpBB' File Inclusion 20 WEB [Oo]
2006-04-27   TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (1) 17 WEB [Oo]
2006-04-26   Invision Power Board 2.1.5 - 'lastdate' Remote Code Execution 17 WEB RusH
2006-04-24   BK Forum 4.0 - 'member.asp' SQL Injection 19 WEB n0m3rcy
2006-04-24   FlexBB 0.5.5 - '/function/showprofile.php' SQL Injection 18 WEB Devil-00
2006-04-23   Built2Go PHP Movie Review 2B - Remote File Inclusion 19 WEB Camille Myers
2006-04-23   Clansys 1.1 - 'index.php' PHP Code Insertion 17 WEB nukedx
2006-04-22   My Gaming Ladder Combo System 7.0 - Remote Code Execution 18 WEB nukedx
2006-04-21   dForum 1.5 - 'DFORUM_PATH' Multiple Remote File Inclusions 23 WEB nukedx
2006-04-21   Simplog 0.9.3 - 'tid' SQL Injection 21 WEB nukedx
2006-04-21   CoreNews 2.0.1 - 'userid' SQL Injection 18 WEB nukedx
2006-04-20   PHPSurveyor 0.995 - 'surveyid' Remote Command Execution 18 WEB rgod
2006-04-19   ASPSitem 1.83 - 'Haberler.asp' SQL Injection 19 WEB nukedx
2006-04-19   RechnungsZentrale V2 < 1.1.3 - Remote File Inclusion 18 WEB GroundZero Security
2006-04-19   Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service 21 WEB trueend5
2006-04-19   PCPIN Chat 5.0.4 - 'login/language' Remote Code Execution 19 WEB rgod
2006-04-18   PHP Net Tools 2.7.1 - Remote Code Execution 17 WEB FOX_MULDER
2006-04-18   Internet PhotoShow 1.3 - 'page' Remote File Inclusion 19 WEB Hessam-x
2006-04-17   MyEvent 1.3 - 'event.php' Remote File Inclusion 18 WEB botan
2006-04-17   FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass 18 WEB Devil-00
2006-04-16   Blackorpheus ClanMemberSkript 1.0 - SQL Injection 19 WEB snatcher
2006-04-16   Fuju News 1.0 - Authentication Bypass / SQL Injection 19 WEB snatcher
2006-04-15   Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit) 18 WEB Nicob
2006-04-15   PHP Album 0.3.2.3 - Remote Command Execution 21 WEB rgod
2006-04-14   SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution 17 WEB rgod
2006-04-14   osCommerce 2.2 - 'extras' Source Code Disclosure 18 WEB rgod
2006-04-14   phpWebSite 0.10.2 - 'hub_dir' Remote Command Execution 18 WEB rgod
2006-04-13   PAJAX 0.5.1 - Remote Code Execution 21 WEB Stoney
2006-04-13   quizz 1.01 - 'quizz.pl' Remote Command Execution 19 WEB FOX_MULDER
2006-04-13   Censtore 7.3.x - 'censtore.cgi' Remote Command Execution 20 WEB FOX_MULDER
2006-04-13   vBulletin ImpEx 1.74 - Remote Command Execution 22 WEB ReZEN
2006-04-12   PHP121 Instant Messenger 1.4 - Remote Code Execution 20 WEB rgod
2006-04-12   Sphider 1.3 - 'configset.php' Remote File Inclusion 21 WEB rgod
2006-04-11   Simplog 0.9.2 - 's' Remote Command Execution 20 WEB rgod
2006-04-10   Clansys 1.1 (showid) - SQL Injection 19 WEB snatcher
2006-04-10   phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution 20 WEB RusH
2006-04-10   Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit) 19 WEB Inkubus
2006-04-10   phpList 2.10.2 - 'GLOBALS[]' Remote Code Execution 18 WEB rgod
2006-04-09   Sire 2.0 - '/lire.php' Remote File Inclusion / Arbitrary File Upload 20 WEB simo64
2006-04-09   XBrite Members 1.1 - 'id' SQL Injection 21 WEB snatcher
2006-04-09   autonomous lan party 0.98.1.0 - Remote File Inclusion 20 WEB Codexploder
2006-04-09   dnGuestbook 2.0 - SQL Injection 22 WEB snatcher
2006-04-09   ADODB < 4.70 (PHPOpenChat 3.0.x) - 'Server.php' SQL Injection 17 WEB rgod