Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2005-07-04   XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (3) 8 WEB Mike Rifone
2005-07-04   XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Command Execution (2) 9 WEB dukenn
2005-07-04   XOOPS 2.0.11 - 'xmlrpc.php' SQL Injection 8 WEB RusH
2005-07-03   phpBB 2.0.15 - 'highlight' Database Authentication Details 8 WEB SecureD
2005-07-01   XML-RPC Library 1.3.0 - 'xmlrpc.php' Remote Code Injection 8 WEB ilo--
2005-06-30   WordPress Core 1.5.1.2 - 'xmlrpc' Interface SQL Injection 8 WEB GulfTech Security
2005-06-29   phpBB 2.0.15 - 'highlight' PHP Remote Code Execution 7 WEB rattle
2005-06-27   ASPNuke 0.80 - 'comment_post.asp' SQL Injection 8 WEB Alberto Trivero
2005-06-27   ASPNuke 0.80 - 'article.asp' SQL Injection 8 WEB mh_p0rtal
2005-06-25   UBBCentral UBB.Threads < 6.5.2 Beta - 'mailthread.php' SQL Injection 8 WEB mh_p0rtal
2005-06-25   PHP-Fusion 6.00.105 - Accessible Database Backups Download 8 WEB Easyex
2005-06-22   Cacti 0.8.6d - Remote Command Execution 8 WEB Alberto Trivero
2005-06-21   Mambo 4.5.2.1 - SQL Injection 8 WEB RusH
2005-06-21   Forum Russian Board 4.2 - Full Command Execution 8 WEB RusH
2005-06-21   WordPress Core 1.5.1.1 - 'add new admin' SQL Injection 8 WEB RusH
2005-06-21   MercuryBoard 1.1.4 - SQL Injection 7 WEB RusH
2005-06-21   Simple Machines Forum (SMF) 1.0.4 - 'modify' SQL Injection 8 WEB GulfTech Security
2005-06-19   Claroline E-Learning 1.6 - Remote Hash SQL Injection (2) 8 WEB K-C0d3r
2005-06-17   Claroline E-Learning 1.6 - Remote Hash SQL Injection (1) 8 WEB mh_p0rtal
2005-06-16   Ultimate PHP Board 1.9.6 GOLD - users.dat Password Decryptor 8 WEB Alberto Trivero
2005-06-15   PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password 8 WEB Alpha_Programmer
2005-06-15   Mambo 4.5.2.1 - Fetch Password Hash 9 WEB pokleyzz
2005-06-15   eXtropia Shopping Cart - 'web_store.cgi' Remote Command Execution 9 WEB Action Spider
2005-06-11   Webhints 1.03 - Remote Command Execution (Perl) (3) 8 WEB MadSheep
2005-06-11   Webhints 1.03 - Remote Command Execution (C) (2) 8 WEB Alpha_Programmer
2005-06-11   Webhints 1.03 - Remote Command Execution (Perl) (1) 8 WEB Alpha_Programmer
2005-06-08   Invision Power Board 1.3.1 - 'login.php' SQL Injection 8 WEB anonymous
2005-06-22   WordPress Core 1.5.1.1 - SQL Injection 8 WEB Alberto Trivero
2005-06-06   Portail PHP < 1.3 - SQL Injection 8 WEB Alberto Trivero
2005-06-05   PostNuke 0.750 - 'readpmsg.php' SQL Injection 8 WEB K-C0d3r
2005-05-31   MyBloggie 2.1.1 < 2.1.2 - SQL Injection 8 WEB Alberto Trivero
2005-05-31   MyBulletinBoard (MyBB) 1.00 RC4 - 'calendar.php' SQL Injection 8 WEB Alberto Trivero
2005-05-31   ZeroBoard 4.1 - 'preg_replace' Remote Nobody Shell 9 WEB n0gada
2005-05-30   phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (2) 8 WEB Nikyt0x
2005-05-30   phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (1) 7 WEB mh_p0rtal
2005-05-30   phpStat 1.5 - 'setup.php' Authentication Bypass 8 WEB Alpha_Programmer
2005-05-27   Hosting Controller 0.6.1 - User Registration (3) 8 WEB Soroush Dalili
2005-05-27   Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial) 8 WEB Danica Jones
2005-05-26   Invision Power Board 2.0.3 - 'login.php' SQL Injection 8 WEB Petey Beege
2005-05-26   Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML) 8 WEB Soroush Dalili
2005-05-26   Maxwebportal 1.36 - 'Password.asp' Change Password (2) 8 WEB mh_p0rtal
2005-05-26   Maxwebportal 1.36 - 'Password.asp' Change Password (3) 8 WEB Alpha_Programmer
2005-05-20   Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection 8 WEB deluxe89
2005-05-20   WebAPP 0.9.9.2.1 - Remote Command Execution (1) 8 WEB Alpha_Programmer
2005-05-20   WebAPP 0.9.9.2.1 - Remote Command Execution (2) 17 WEB Nikyt0x
2005-05-20   Fusion SBX 1.2 - Remote Command Execution 8 WEB Silentium
2005-05-17   ZPanel 2.5b10 - SQL Injection 8 WEB RusH
2005-05-13   PhotoPost - Arbitrary Data Hash 8 WEB basher13
2005-05-06   ZeroBoard - Worm Source Code 8 WEB anonymous
2005-05-04   I-Mall Commerce - 'i-mall.cgi' Remote Command Execution 8 WEB Jerome Athias
2005-04-25   E-Cart 1.1 - 'index.cgi' Remote Command Execution 8 WEB z
2005-04-13   S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection 8 WEB kre0n
2005-04-11   PunBB 1.2.4 - 'id' SQL Injection 8 WEB Stefan Esser
2005-04-09   ACNews 1.0 - Authentication Bypass 6 WEB LaMeR
2005-04-08   The Includer CGI 1.0 - Remote Command Execution (3) 8 WEB K-C0d3r
2005-04-08   The Includer CGI 1.0 - Remote Command Execution (2) 8 WEB GreenwooD
2005-04-07   PHP-Nuke 6.x < 7.6 Top module - SQL Injection 8 WEB Fabrizi Andrea
2005-04-04   phpBB 2.0.13 - 'Calendar Pro' mod Get Hash 9 WEB CereBrums
2005-04-02   phpBB 2.0.13 - 'downloads.php' mod Get Hash 8 WEB CereBrums
2005-03-29   PunBB 1.2.2 - Authentication Bypass 8 WEB RusH
2005-03-24   phpBB 2.0.12 - Change User Rights Authentication Bypass 9 WEB str0ke
2005-03-21   phpMyFamily 1.4.0 - Authentication Bypass 9 WEB kre0n
2005-03-21   phpBB 2.0.12 - Change User Rights Authentication Bypass 9 WEB Kutas
2005-03-15   ZPanel 2.5 - SQL Injection 9 WEB Mikhail
2005-03-11   phpDEV5 - Remote Default Insecure Users 8 WEB Ali7
2005-03-11   SocialMPN - Arbitrary File Injection 8 WEB y3dips
2005-03-11   phpBB 2.0.12 - Session Handling Authentication Bypass 8 WEB Ali7
2005-03-10   Download Center Lite (DCL) 1.5 - Remote File Inclusion 8 WEB Filip Groszynski
2005-03-08   paNews 2.0b4 - Remote Admin Creation SQL Injection 8 WEB Silentium
2005-03-07   PHP mcNews 1.3 - 'skinfile' Remote File Inclusion 8 WEB Filip Groszynski
2005-03-07   phpWebLog 0.5.3 - Arbitrary File Inclusion 9 WEB Filip Groszynski
2005-03-07   The Includer CGI 1.0 - Remote Command Execution (1) 8 WEB Francisco Alisson
2005-03-07   Aztek Forum 4.0 - 'myadmin.php' Database Dumper 8 WEB sirius_black
2005-03-05   phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial) 9 WEB PPC
2005-03-05   PHP Form Mail 2.3 - Arbitrary File Inclusion 11 WEB Filip Groszynski
2005-03-02   AWStats 5.7 < 6.2 - Multiple Remote s 9 WEB omin0us
2005-02-24   AWStats 5.7 < 6.2 - Multiple Remote 9 WEB Silentium
2005-02-22   vBulletin 3.0.6 - PHP Code Injection 11 WEB pokley
2005-02-15   vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (2) 8 WEB AL3NDALEEB
2005-02-14   vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1) 9 WEB AL3NDALEEB
2005-02-12   MercuryBoard 1.1.1 - SQL Injection 10 WEB Zeelock
2005-02-10   Chipmunk Forums - SQL Injection 11 WEB GHC
2005-02-10   CMScore - SQL Injection 9 WEB GHC
2005-02-10   MyPHP Forum 1.0 - SQL Injection 10 WEB GHC
2005-02-09   PHP-Nuke 7.4 - Admin 9 WEB Silentium
2005-02-08   PostNuke PostWrap Module - Remote File Inclusion / Code Execution 10 WEB ALBANIA SECURITY
2005-02-05   PerlDesk 1.x - SQL Injection 9 WEB deluxe89
2005-02-04   LiteForum 2.1.1 - SQL Injection 8 WEB RusH
2005-01-25   Siteman 1.1.10 - Remote Administrative Account Addition 10 WEB Noam Rathaus
2005-01-25   AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution 8 WEB GHC
2005-01-25   AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution 8 WEB THUNDER
2005-01-13   ITA Forum 1.49 - SQL Injection 8 WEB RusH
2005-01-04   phpBB 2.0.10 - 'ssh.D.Worm' Bot Install Altavista 9 WEB Severino Honorato
2005-01-04   QwikiWiki - Directory Traversal 9 WEB Madelman
2004-12-25   PHPInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion 8 WEB anonymous
2004-12-25   Sanity.b - phpBB 2.0.10 Bot Install (AOL/Yahoo Search) 8 WEB anonymous
2004-12-22   e107 - 'include()' Remote File Upload 8 WEB sysbug
2004-12-22   phpMyChat 0.14.5 - Remote Improper File Permissions 8 WEB sysbug
2004-12-22   phpBB < 2.0.10 - 'Santy.A Worm' 'highlight' Arbitrary File Upload 8 WEB anonymous
2004-12-17   PHP 4.3.9 + phpBB 2.x - 'Unserialize()' Remote Information Leak 8 WEB overdose
2004-12-05   phpBB 1.0.0/2.0.10 - 'admin_cash.php' Remote Code Execution 8 WEB evilrabbi
2004-12-03   phpBB 2.0.10 - Remote Command Execution (CGI) 8 WEB ZzagorR
2004-11-25   Alex Heiphetz Group eZshopper - 'loadpage.cgi' Directory Traversal 9 WEB Zero X
2004-11-22   Invision Power Board 2.0.0 < 2.0.2 - SQL Injection 9 WEB RusH
2004-11-22   phpBB 2.0.10 - Remote Command Execution 8 WEB RusH
2004-11-21   GFHost PHP GMail - Remote Command Execution 8 WEB spabam
2004-11-20   TWiki 20030201 - 'search.pm' Remote Command Execution 8 WEB RoMaNSoFt
2004-11-16   MiniBB 1.7f - 'user' SQL Injection 8 WEB anonymous
2004-11-15   vBulletin - 'LAST.php' SQL Injection 9 WEB anonymous
2004-11-15   UBBCentral UBB.Threads 6.2.x < 6.3x - One Char Brute Force 8 WEB RusH
2004-10-13   ocPortal 1.0.3 - Remote File Inclusion 8 WEB Exoduks
2004-10-10   WordPress Core 1.2 - HTTP Splitting 8 WEB Tenable NS
2004-09-30   Silent Storm Portal - Multiple Vulnerabilities 8 WEB CHT Security Research
2004-09-28   S9Y Serendipity 0.7-beta1 - SQL Injection 8 WEB aCiDBiTS
2004-09-16   PHP-Nuke - SQL Injection Edit/Save Messages 8 WEB iko94
2004-09-13   Turbo Seek - Null Byte Error Discloses Files 8 WEB durito
2004-09-08   PHP-Nuke 7.4 - Privilege Escalation 8 WEB mantra
2004-09-01   TorrentTrader 1.0 RC2 - SQL Injection 8 WEB aCiDBiTS
2004-08-21   AWStats 5.0 < 6.3 - 'logfile' File Inclusion / Command Execution 9 WEB Johnathan Bat
2004-08-20   phpMyWebhosting - SQL Injection 8 WEB Noam Rathaus
2004-08-08   PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass 8 WEB VeNoMouS
2004-07-04   phpMyAdmin 2.5.7 - Remote code Injection 8 WEB Nasir Simbolon
2001-03-04   sendtemp.pl - Read Access to Files 8 WEB Tom Parker
2001-01-12   Fastgraf's whois.cgi - Remote Command Execution 8 WEB Marco van Berkum
2000-11-17   UtilMind Mail List 1.7 - Users Can Execute Commands 8 WEB teleh0r