Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2006-02-25   Pentacle In-Out Board 6.03 - 'newsdetailsview' SQL Injection 8 WEB nukedx
2006-02-25   iGENUS WebMail 2.0.2 - 'config_inc.php' Remote Code Execution 8 WEB rgod
2006-02-24   Lansuite 2.1.0 Beta - 'fid' SQL Injection 7 WEB x128
2006-02-24   phpWebSite 0.10.0-full - 'topics.php' SQL Injection 8 WEB SnIpEr_SA
2006-02-23   VHCS 2.4.7.1 - Add User Authentication Bypass 7 WEB RoMaNSoFt
2006-02-23   PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection 7 WEB unitedbr
2006-02-23   NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution 8 WEB rgod
2006-02-22   Noahs Classifieds 1.3 - 'lowerTemplate' Remote Code Execution 8 WEB trueend5
2006-02-20   ilchClan 1.05g - 'tid' SQL Injection 9 WEB x128
2006-02-20   GeekLog 1.x - 'error.log' Remote Command Execution 8 WEB rgod
2006-02-19   MiniNuke 1.8.2b - 'pages.asp' SQL Injection 7 WEB nukedx
2006-02-19   BXCP 0.2.9.9 - 'tid' SQL Injection 7 WEB x128
2006-02-19   Admbook 1.2.2 - 'x-forwarded-for' Remote Command Execution 8 WEB rgod
2006-02-17   Coppermine Photo Gallery 1.4.3 - Remote Command Execution 8 WEB rgod
2006-02-17   Gravity Board X 1.1 - 'csscontent' Remote Code Execution 7 WEB RusH
2006-02-17   Zorum Forum 3.5 - 'rollid' SQL Injection 7 WEB RusH
2006-02-17   AWStats < 6.4 - 'referer' Remote Command Execution 7 WEB RusH
2006-02-16   YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution 9 WEB cijfer
2006-02-16   PHPKIT 1.6.1R2 - 'filecheck' Remote Command Execution 7 WEB rgod
2006-02-15   MyBulletinBoard (MyBB) 1.03 - Multiple SQL Injections 8 WEB HACKERS PAL
2006-02-14   webSPELL 4.01 - 'title_op' SQL Injection 7 WEB x128
2006-02-13   FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution 9 WEB rgod
2006-02-13   EnterpriseGS 1.0 rc4 - Remote Command Execution 8 WEB rgod
2006-02-13   Invision Power Board Army System Mod 2.1 - SQL Injection 8 WEB fRoGGz
2006-02-11   DocMGR 0.54.2 - 'file_exists' Remote Command Execution 7 WEB rgod
2006-02-09   RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion 7 WEB rgod
2006-02-09   FCKEditor 2.0 < 2.2 - 'FileManager connector.php' Arbitrary File Upload 7 WEB rgod
2006-02-08   SPIP 1.8.2g - Remote Command Execution 7 WEB rgod
2006-02-08   CPGNuke Dragonfly 9.0.6.1 - Remote Command Execution 9 WEB rgod
2006-02-06   ASPThai.Net Guestbook 5.5 - Authentication Bypass 7 WEB Zodiac
2006-02-06   MyQuiz 1.01 - 'PATH_INFO' Arbitrary Command Execution 8 WEB Hessam-x
2006-02-05   phpBB 2.0.19 - Style Changer/Demo Mod SQL Injection 7 WEB SkOd
2006-02-04   Clever Copy 3.0 - Admin Auth Details / SQL Injection 8 WEB rgod
2006-02-03   LoudBlog 0.4 - Remote File Inclusion 7 WEB rgod
2006-01-31   Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection 9 WEB SkOd
2006-01-30   xeCMS 1.0.0 RC 2 - 'cookie' Remote Command Execution 8 WEB cijfer
2006-01-29   phpBB 2.0.19 - Cross-Site Scripting Remote Cookie Disclosure 8 WEB threesixthousan
2006-01-25   Phpclanwebsite 1.23.1 - SQL Injection 7 WEB matrix_killer
2006-01-24   creLoaded 6.15 - 'HTMLAREA' Automated Perl 8 WEB kaneda
2006-01-22   EZDatabase 2.0 - 'db_id' Remote Command Execution 8 WEB cijfer
2006-01-14   MiniNuke 1.8.2 - 'hid' SQL Injection 7 WEB DetMyl
2006-01-14   MiniNuke 1.8.2 - Multiple SQL Injections 7 WEB nukedx
2006-01-09   Magic News Plus 1.0.3 - Admin Pass Change 8 WEB cijfer
2006-01-04   FlatCMS 1.01 - 'file_editor.php' Remote Command Execution 7 WEB cijfer
2006-01-03   Valdersoft Shopping Cart 3.0 - Remote Command Execution 8 WEB cijfer
2006-01-01   CuteNews 1.4.1 - 'categories.mdu' Remote Command Execution 8 WEB cijfer
2005-12-30   WebWiz Products 1.0/3.06 - Authentication Bypass / SQL Injection 8 WEB DevilBox
2005-12-30   CubeCart 3.0.6 - Remote Command Execution 7 WEB cijfer
2005-12-29   phpDocumentor 1.3.0 rc4 - Remote Command Execution 8 WEB rgod
2005-12-24   phpBB 2.0.17 - 'signature_bbcode_uid' Remot Command 7 WEB RusH
2005-12-24   Dev Web Management System 1.5 - 'cat' SQL Injection 8 WEB rgod
2005-12-23   PHP-Fusion 6.00.3 - 'rating' SQL Injection 7 WEB krasza
2005-12-21   phpBB 2.0.18 - Cross-Site Scripting / Cookie Disclosure 8 WEB jet
2006-02-20   phpBB 2.0.18 - Remote Brute Force/Dictionary (2) 7 WEB DarkFig
2005-12-20   PHPGedView 3.3.7 - Remote Code Execution 8 WEB rgod
2005-12-14   Limbo 1.0.4.2 - '_SERVER[REMOTE_ADDR]' Remote Command Execution 7 WEB rgod
2005-12-12   phpCOIN 1.2.2 - 'phpcoinsessid' SQL Injection / Remote Code Execution 8 WEB rgod
2005-12-10   Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution 7 WEB rgod
2005-12-08   SugarSuite Open Source 4.0beta - Remote Code Execution (2) 7 WEB pointslash
2005-12-08   Website Baker 2.6.0 - Authentication Bypass / Remote Code Execution 8 WEB rgod
2005-12-07   SimpleBBS 1.1 - Remote Command Execution 8 WEB unitedasia
2005-12-07   SugarSuite Open Source 4.0beta - Remote Code Execution (1) 8 WEB rgod
2005-12-06   SimpleBBS 1.1 - Remote Command Execution 8 WEB rgod
2005-12-04   DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload 8 WEB rgod
2005-12-02   Zen Cart 1.2.6d - 'password_forgotten.php' SQL Injection 9 WEB rgod
2005-11-28   Guppy 4.5.9 - 'REMOTE_ADDR' Remote Command Execution 8 WEB rgod
2005-11-25   eFiction 2.0 - Fake '.GIF' Arbitrary File Upload 8 WEB rgod
2005-11-22   Mambo 4.5.2 - Globals Overwrite / Remote Command Execution 7 WEB rgod
2005-11-17   EkinBoard 1.0.3 - '/config.php' SQL Injection / Command Execution 8 WEB rgod
2005-11-16   PHP-Nuke 7.8 Search Module - SQL Injection 8 WEB anonymous
2005-11-16   PHPWebThings 1.4 - 'forum' SQL Injection 8 WEB AhLam
2005-11-16   PHPWebThings 1.4 - 'msg'/'forum' SQL Injection 8 WEB rgod
2005-11-14   Wizz Forum 1.20 - 'TopicID' SQL Injection 10 WEB HACKERS PAL
2005-11-14   Cyphor 0.19 - 'show.php?id' SQL Injection 9 WEB HACKERS PAL
2005-11-14   Arki-DB 1.0 - 'catid' SQL Injection 7 WEB Devil-00
2005-11-14   Unclassified NewsBoard 1.5.3 Patch 3 - Blind SQL Injection 9 WEB rgod
2005-11-13   Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection 7 WEB DiGiTAL_MiDWAY
2005-11-12   XOOPS (wfdownloads) 2.05 Module - Multiple Vulnerabilities 7 WEB rgod
2005-11-10   Moodle 1.6dev - SQL Injection / Command Execution 8 WEB rgod
2005-11-07   ATutor 1.5.1pl2 - SQL Injection / Command Execution 8 WEB rgod
2005-11-06   ibProArcade 2.x - module 'vBulletin/IPB' SQL Injection 7 WEB B~HFH
2005-11-03   CuteNews 1.4.1 - Shell Injection / Remote Command Execution 8 WEB rgod
2005-11-02   VuBB Forum RC1 - 'm' SQL Injection 9 WEB Devil-00
2005-10-31   Subdreamer 2.2.1 - SQL Injection / Command Execution 8 WEB RusH
2005-10-26   TClanPortal 1.1.3 - 'id' SQL Injection 9 WEB Devil-00
2005-10-23   PHP-Nuke 7.8 - SQL Injection / Remote Command Execution 8 WEB rgod
2005-10-15   MuOnline Loopholes Web Server - 'pkok.asp' SQL Injection 8 WEB nukedx
2005-10-14   w-Agora 4.2.0 - 'quicklist.php' Remote Code Execution 8 WEB rgod
2005-10-10   versatileBulletinBoard 1.00 RC2 - Board Takeover (SQL Injection) 8 WEB rgod
2005-10-10   phpMyAdmin 2.6.4-pl1 - Directory Traversal 8 WEB cXIb8O3
2005-10-08   Cyphor 0.19 - Board Takeover (SQL Injection) 8 WEB rgod
2005-10-06   Utopia News Pro 1.1.3 - 'news.php' SQL Injection 8 WEB rgod
2005-09-28   PHP-Fusion 6.00.109 - 'msg_send' SQL Injection 8 WEB rgod
2005-09-27   Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit) 8 WEB Nicolas Gregoire
2005-09-24   MailGust 1.9 - Board Takeover (SQL Injection) 10 WEB rgod
2005-09-23   phpMyFAQ 1.5.1 - 'User-Agent' Remote Shell Injection 9 WEB rgod
2005-09-22   My Little Forum 1.5 - 'SearchString' SQL Injection 9 WEB rgod
2005-09-17   CuteNews 1.4.0 - Shell Injection / Remote Command Execution 8 WEB rgod
2005-09-16   PHP-Nuke 7.8 - 'modules.php' SQL Injection 8 WEB RusH
2005-09-15   phpWebSite 0.10.0 - 'module' SQL Injection 8 WEB RusH
2005-09-13   AzDGDatingLite 2.1.3 - Remote Code Execution 8 WEB rgod
2005-09-11   PhpTagCool 1.0.3 - SQL Injection 8 WEB Megabyte
2005-03-27   phpMyFamily 1.4.0 - SQL Injection 9 WEB basher13
2005-09-09   Class-1 Forum 0.24.4 - Remote Code Execution 9 WEB rgod
2005-09-07   PBLang 4.65 - Remote Command Execution (2) 8 WEB RusH
2005-09-07   PBLang 4.65 - Remote Command Execution (1) 9 WEB rgod
2005-09-04   man2web 0.88 - Multiple Remote Command Executions (2) 8 WEB tracewar
2005-09-01   Simple PHP Blog 0.4.0 - Multiple Remote s 9 WEB Kenneth Belva
2005-08-31   vBulletin 3.0.8 - Accessible Database Backup Searcher (3) 9 WEB str0ke
2005-08-22   MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection 8 WEB Alpha_Programmer
2005-08-10   WordPress Core 1.5.1.3 - Remote Code Execution (Metasploit) 8 WEB str0ke
2005-08-09   WordPress Core 1.5.1.3 - Remote Code Execution 8 WEB Kartoffelguru
2005-08-08   Flatnuke 2.5.5 - Remote Code Execution 8 WEB rgod
2005-08-05   PHP-Fusion 6.0.106 - BBCode IMG Tag Script Injection 8 WEB Easyex
2005-08-05   MySQL Eventum 1.5.5 - 'login.php' SQL Injection 9 WEB GulfTech Security
2005-08-03   vBulletin 3.0.6 - 'template' Command Execution (Metasploit) 8 WEB str0ke
2005-07-25   FtpLocate 2.02 - 'current' Remote Command Execution 7 WEB newbug
2005-07-19   phpBB 2.0.15 - PHP Remote Code Execution (Metasploit) 8 WEB str0ke
2005-07-18   Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota 8 WEB Soroush Dalili
2005-07-18   Open Bulletin Board 1.0.5 - SQL Injection 8 WEB RusH
2005-07-14   e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure 8 WEB warlord
2005-07-13   phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure (Cookie Grabber) 8 WEB Sjaak Rake
2005-07-11   BlogTorrent 0.92 - Remote Password Disclosure 8 WEB LazyCrs
2005-07-08   phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure 8 WEB D|ablo
2005-07-05   Drupal 4.5.3 < 4.6.1 - Comments PHP Injection 8 WEB dab