|
2005-05-31
|
|
MyBloggie 2.1.1 < 2.1.2 - SQL Injection
|
4 |
WEB
|
Alberto Trivero
|
|
2005-05-31
|
|
MyBulletinBoard (MyBB) 1.00 RC4 - 'calendar.php' SQL Injection
|
4 |
WEB
|
Alberto Trivero
|
|
2005-05-31
|
|
ZeroBoard 4.1 - 'preg_replace' Remote Nobody Shell
|
4 |
WEB
|
n0gada
|
|
2005-05-30
|
|
phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (2)
|
4 |
WEB
|
Nikyt0x
|
|
2005-05-30
|
|
phpStat 1.5 - 'setup.php' Authentication Bypass (PHP) (1)
|
2 |
WEB
|
mh_p0rtal
|
|
2005-05-30
|
|
phpStat 1.5 - 'setup.php' Authentication Bypass
|
3 |
WEB
|
Alpha_Programmer
|
|
2005-05-27
|
|
Hosting Controller 0.6.1 - User Registration (3)
|
3 |
WEB
|
Soroush Dalili
|
|
2005-05-27
|
|
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
|
3 |
WEB
|
Danica Jones
|
|
2005-05-26
|
|
Invision Power Board 2.0.3 - 'login.php' SQL Injection
|
3 |
WEB
|
Petey Beege
|
|
2005-05-26
|
|
Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
|
3 |
WEB
|
Soroush Dalili
|
|
2005-05-26
|
|
Maxwebportal 1.36 - 'Password.asp' Change Password (2)
|
4 |
WEB
|
mh_p0rtal
|
|
2005-05-26
|
|
Maxwebportal 1.36 - 'Password.asp' Change Password (3)
|
4 |
WEB
|
Alpha_Programmer
|
|
2005-05-20
|
|
Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection
|
4 |
WEB
|
deluxe89
|
|
2005-05-20
|
|
WebAPP 0.9.9.2.1 - Remote Command Execution (1)
|
4 |
WEB
|
Alpha_Programmer
|
|
2005-05-20
|
|
WebAPP 0.9.9.2.1 - Remote Command Execution (2)
|
13 |
WEB
|
Nikyt0x
|
|
2005-05-20
|
|
Fusion SBX 1.2 - Remote Command Execution
|
4 |
WEB
|
Silentium
|
|
2005-05-17
|
|
ZPanel 2.5b10 - SQL Injection
|
4 |
WEB
|
RusH
|
|
2005-05-13
|
|
PhotoPost - Arbitrary Data Hash
|
4 |
WEB
|
basher13
|
|
2005-05-06
|
|
ZeroBoard - Worm Source Code
|
4 |
WEB
|
anonymous
|
|
2005-05-04
|
|
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
|
4 |
WEB
|
Jerome Athias
|
|
2005-04-25
|
|
E-Cart 1.1 - 'index.cgi' Remote Command Execution
|
4 |
WEB
|
z
|
|
2005-04-13
|
|
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
|
4 |
WEB
|
kre0n
|
|
2005-04-11
|
|
PunBB 1.2.4 - 'id' SQL Injection
|
4 |
WEB
|
Stefan Esser
|
|
2005-04-09
|
|
ACNews 1.0 - Authentication Bypass
|
2 |
WEB
|
LaMeR
|
|
2005-04-08
|
|
The Includer CGI 1.0 - Remote Command Execution (3)
|
4 |
WEB
|
K-C0d3r
|
|
2005-04-08
|
|
The Includer CGI 1.0 - Remote Command Execution (2)
|
3 |
WEB
|
GreenwooD
|
|
2005-04-07
|
|
PHP-Nuke 6.x < 7.6 Top module - SQL Injection
|
3 |
WEB
|
Fabrizi Andrea
|
|
2005-04-04
|
|
phpBB 2.0.13 - 'Calendar Pro' mod Get Hash
|
5 |
WEB
|
CereBrums
|
|
2005-04-02
|
|
phpBB 2.0.13 - 'downloads.php' mod Get Hash
|
4 |
WEB
|
CereBrums
|
|
2005-03-29
|
|
PunBB 1.2.2 - Authentication Bypass
|
4 |
WEB
|
RusH
|
|
2005-03-24
|
|
phpBB 2.0.12 - Change User Rights Authentication Bypass
|
5 |
WEB
|
str0ke
|
|
2005-03-21
|
|
phpMyFamily 1.4.0 - Authentication Bypass
|
4 |
WEB
|
kre0n
|
|
2005-03-21
|
|
phpBB 2.0.12 - Change User Rights Authentication Bypass
|
5 |
WEB
|
Kutas
|
|
2005-03-15
|
|
ZPanel 2.5 - SQL Injection
|
5 |
WEB
|
Mikhail
|
|
2005-03-11
|
|
phpDEV5 - Remote Default Insecure Users
|
4 |
WEB
|
Ali7
|
|
2005-03-11
|
|
SocialMPN - Arbitrary File Injection
|
4 |
WEB
|
y3dips
|
|
2005-03-11
|
|
phpBB 2.0.12 - Session Handling Authentication Bypass
|
4 |
WEB
|
Ali7
|
|
2005-03-10
|
|
Download Center Lite (DCL) 1.5 - Remote File Inclusion
|
4 |
WEB
|
Filip Groszynski
|
|
2005-03-08
|
|
paNews 2.0b4 - Remote Admin Creation SQL Injection
|
4 |
WEB
|
Silentium
|
|
2005-03-07
|
|
PHP mcNews 1.3 - 'skinfile' Remote File Inclusion
|
4 |
WEB
|
Filip Groszynski
|
|
2005-03-07
|
|
phpWebLog 0.5.3 - Arbitrary File Inclusion
|
4 |
WEB
|
Filip Groszynski
|
|
2005-03-07
|
|
The Includer CGI 1.0 - Remote Command Execution (1)
|
4 |
WEB
|
Francisco Alisson
|
|
2005-03-07
|
|
Aztek Forum 4.0 - 'myadmin.php' Database Dumper
|
4 |
WEB
|
sirius_black
|
|
2005-03-05
|
|
phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial)
|
5 |
WEB
|
PPC
|
|
2005-03-05
|
|
PHP Form Mail 2.3 - Arbitrary File Inclusion
|
5 |
WEB
|
Filip Groszynski
|
|
2005-03-02
|
|
AWStats 5.7 < 6.2 - Multiple Remote s
|
5 |
WEB
|
omin0us
|
|
2005-02-24
|
|
AWStats 5.7 < 6.2 - Multiple Remote
|
5 |
WEB
|
Silentium
|
|
2005-02-22
|
|
vBulletin 3.0.6 - PHP Code Injection
|
5 |
WEB
|
pokley
|
|
2005-02-15
|
|
vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (2)
|
4 |
WEB
|
AL3NDALEEB
|
|
2005-02-14
|
|
vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1)
|
5 |
WEB
|
AL3NDALEEB
|
|
2005-02-12
|
|
MercuryBoard 1.1.1 - SQL Injection
|
5 |
WEB
|
Zeelock
|
|
2005-02-10
|
|
Chipmunk Forums - SQL Injection
|
5 |
WEB
|
GHC
|
|
2005-02-10
|
|
CMScore - SQL Injection
|
5 |
WEB
|
GHC
|
|
2005-02-10
|
|
MyPHP Forum 1.0 - SQL Injection
|
5 |
WEB
|
GHC
|
|
2005-02-09
|
|
PHP-Nuke 7.4 - Admin
|
5 |
WEB
|
Silentium
|
|
2005-02-08
|
|
PostNuke PostWrap Module - Remote File Inclusion / Code Execution
|
5 |
WEB
|
ALBANIA SECURITY
|
|
2005-02-05
|
|
PerlDesk 1.x - SQL Injection
|
5 |
WEB
|
deluxe89
|
|
2005-02-04
|
|
LiteForum 2.1.1 - SQL Injection
|
4 |
WEB
|
RusH
|
|
2005-01-25
|
|
Siteman 1.1.10 - Remote Administrative Account Addition
|
5 |
WEB
|
Noam Rathaus
|
|
2005-01-25
|
|
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
|
4 |
WEB
|
GHC
|
|
2005-01-25
|
|
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
|
4 |
WEB
|
THUNDER
|
|
2005-01-13
|
|
ITA Forum 1.49 - SQL Injection
|
3 |
WEB
|
RusH
|
|
2005-01-04
|
|
phpBB 2.0.10 - 'ssh.D.Worm' Bot Install Altavista
|
5 |
WEB
|
Severino Honorato
|
|
2005-01-04
|
|
QwikiWiki - Directory Traversal
|
4 |
WEB
|
Madelman
|
|
2004-12-25
|
|
PHPInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion
|
4 |
WEB
|
anonymous
|
|
2004-12-25
|
|
Sanity.b - phpBB 2.0.10 Bot Install (AOL/Yahoo Search)
|
4 |
WEB
|
anonymous
|
|
2004-12-22
|
|
e107 - 'include()' Remote File Upload
|
4 |
WEB
|
sysbug
|
|
2004-12-22
|
|
phpMyChat 0.14.5 - Remote Improper File Permissions
|
4 |
WEB
|
sysbug
|
|
2004-12-22
|
|
phpBB < 2.0.10 - 'Santy.A Worm' 'highlight' Arbitrary File Upload
|
4 |
WEB
|
anonymous
|
|
2004-12-17
|
|
PHP 4.3.9 + phpBB 2.x - 'Unserialize()' Remote Information Leak
|
4 |
WEB
|
overdose
|
|
2004-12-05
|
|
phpBB 1.0.0/2.0.10 - 'admin_cash.php' Remote Code Execution
|
4 |
WEB
|
evilrabbi
|
|
2004-12-03
|
|
phpBB 2.0.10 - Remote Command Execution (CGI)
|
4 |
WEB
|
ZzagorR
|
|
2004-11-25
|
|
Alex Heiphetz Group eZshopper - 'loadpage.cgi' Directory Traversal
|
4 |
WEB
|
Zero X
|
|
2004-11-22
|
|
Invision Power Board 2.0.0 < 2.0.2 - SQL Injection
|
5 |
WEB
|
RusH
|
|
2004-11-22
|
|
phpBB 2.0.10 - Remote Command Execution
|
4 |
WEB
|
RusH
|
|
2004-11-21
|
|
GFHost PHP GMail - Remote Command Execution
|
3 |
WEB
|
spabam
|
|
2004-11-20
|
|
TWiki 20030201 - 'search.pm' Remote Command Execution
|
3 |
WEB
|
RoMaNSoFt
|
|
2004-11-16
|
|
MiniBB 1.7f - 'user' SQL Injection
|
4 |
WEB
|
anonymous
|
|
2004-11-15
|
|
vBulletin - 'LAST.php' SQL Injection
|
4 |
WEB
|
anonymous
|
|
2004-11-15
|
|
UBBCentral UBB.Threads 6.2.x < 6.3x - One Char Brute Force
|
4 |
WEB
|
RusH
|
|
2004-10-13
|
|
ocPortal 1.0.3 - Remote File Inclusion
|
4 |
WEB
|
Exoduks
|
|
2004-10-10
|
|
WordPress Core 1.2 - HTTP Splitting
|
4 |
WEB
|
Tenable NS
|
|
2004-09-30
|
|
Silent Storm Portal - Multiple Vulnerabilities
|
4 |
WEB
|
CHT Security Research
|
|
2004-09-28
|
|
S9Y Serendipity 0.7-beta1 - SQL Injection
|
4 |
WEB
|
aCiDBiTS
|
|
2004-09-16
|
|
PHP-Nuke - SQL Injection Edit/Save Messages
|
4 |
WEB
|
iko94
|
|
2004-09-13
|
|
Turbo Seek - Null Byte Error Discloses Files
|
4 |
WEB
|
durito
|
|
2004-09-08
|
|
PHP-Nuke 7.4 - Privilege Escalation
|
4 |
WEB
|
mantra
|
|
2004-09-01
|
|
TorrentTrader 1.0 RC2 - SQL Injection
|
4 |
WEB
|
aCiDBiTS
|
|
2004-08-21
|
|
AWStats 5.0 < 6.3 - 'logfile' File Inclusion / Command Execution
|
3 |
WEB
|
Johnathan Bat
|
|
2004-08-20
|
|
phpMyWebhosting - SQL Injection
|
4 |
WEB
|
Noam Rathaus
|
|
2004-08-08
|
|
PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass
|
4 |
WEB
|
VeNoMouS
|
|
2004-07-04
|
|
phpMyAdmin 2.5.7 - Remote code Injection
|
4 |
WEB
|
Nasir Simbolon
|
|
2001-03-04
|
|
sendtemp.pl - Read Access to Files
|
4 |
WEB
|
Tom Parker
|
|
2001-01-12
|
|
Fastgraf's whois.cgi - Remote Command Execution
|
4 |
WEB
|
Marco van Berkum
|
|
2000-11-17
|
|
UtilMind Mail List 1.7 - Users Can Execute Commands
|
4 |
WEB
|
teleh0r
|
|
2000-11-17
|
|
ListMail 112 - Command Execution
|
4 |
WEB
|
teleh0r
|
|
2000-11-15
|
|
News Update 1.1 - Change Admin Password
|
4 |
WEB
|
morpheus[bd]
|
|
2000-11-15
|
|
Poll It CGI 2.0 - Multiple Vulnerabilities
|
4 |
WEB
|
keelis
|
|
2003-12-21
|
|
PHP-Nuke 6.9 - 'cid' SQL Injection
|
3 |
WEB
|
RusH
|
|
2003-12-21
|
|
phpBB 2.0.6 - 'search_id' SQL Injection / MD5 Hash
|
3 |
WEB
|
RusH
|
|
2003-07-10
|
|
CCBILL CGI - 'ccbillx.c' 'whereami.cgi' Remote Code Execution
|
4 |
WEB
|
knight420
|
|
2003-06-30
|
|
phpBB 2.0.4 - PHP Remote File Inclusion
|
4 |
WEB
|
Spoofed
|
|
2003-06-20
|
|
phpBB 2.0.5 - SQL Injection Password Disclosure
|
5 |
WEB
|
Rick Patel
|
|
2006-05-25
|
|
WordPress Core 2.0.2 - 'cache' Remote Shell Injection
|
4 |
WEB
|
rgod
|
|
2021-03-12
|
|
Monitoring System (Dashboard) 1.0 - File Upload RCE (Authenticated)
|
1635 |
WEB
|
Richard Jones
|
|
2021-03-12
|
|
Atlassian JIRA 8.11.1 - User Enumeration
|
561 |
WEB
|
Dolev Farhi
|
|
2021-03-12
|
|
Joomla JCK Editor 6.4.4 - 'parent' SQL Injection
|
707 |
WEB
|
Nicholas Ferreira
|
|
2021-03-12
|
|
Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated)
|
651 |
WEB
|
Christian Vierschilling
|
|
2021-03-03
|
|
Zen Cart 1.5.7b - Remote Code Execution (Authenticated)
|
378 |
WEB
|
Mucahit Saratar
|
|
2021-03-03
|
|
Tiny Tiny RSS - Remote Code Execution
|
368 |
WEB
|
Daniel Neagaru
|
|
2021-03-03
|
|
Covid-19 Contact Tracing System 1.0 - Remote Code Execution (Unauthenticated)
|
319 |
WEB
|
Christian Vierschilling
|
|
2021-03-03
|
|
Online Catering Reservation System 1.0 - Remote Code Execution (Unauthenticated)
|
343 |
WEB
|
Christian Vierschilling
|
|
2021-03-03
|
|
FortiLogger 4.4.2.2 - Unauthenticated Arbitrary File Upload (Metasploit)
|
573 |
WEB
|
Berkan Er
|
|
2020-01-22
|
|
Centreon 19.04 - Authenticated Remote Code Execution (Metasploit)
|
751 |
WEB
|
TheCyberGeek
|
|
2019-01-04
|
|
Apache CouchDB 2.3.0 Cross Site Request Forgery
|
1038 |
WEB
|
Ozer Goker
|
|
2019-01-03
|
|
Vtiger CRM 7.1.0 Remote Code Execution
|
573 |
WEB
|
Ozkan Mustafa Akkus
|
|
2018-12-25
|
|
phpMyAdmin 4.8.4 - 'AllowArbitraryServer' Arbitrary File Read
|
1134 |
WEB
|
VulnSpy
|
|
2018-12-17
|
|
Huawei Router HG532e Command Execution
|
599 |
WEB
|
Rebellion
|
|
2018-12-12
|
|
ThinkPHP 5.x Remote Code Execution
|
1542 |
WEB
|
VulnSpy
|
|
2018-12-12
|
|
WordPress Snap Creek Duplicator Code Injection
|
623 |
WEB
|
Julien Legras
|
|
2018-12-12
|
|
PrestaShop 1.6.x / 1.7.x Remote Code Execution
|
371 |
WEB
|
farisv
|
|
2018-12-10
|
|
i-doit CMDB 1.11.2 - Remote Code Execution
|
278 |
WEB
|
AkkuS
|
|
2018-12-06
|
|
HasanMWB 1.0 SQL Injection
|
368 |
WEB
|
Ihsan Sencan
|
|
2018-12-05
|
|
NUUO NVRMini2 3.9.1 - Authenticated Command Injection
|
188 |
WEB
|
Artem Metla
|
|
2018-12-04
|
|
Apache Superset 0.23 - Remote Code Execution
|
251 |
WEB
|
David May
|
