Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-08-22   Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change (MSF) 66 WEB Kc57
2012-08-22   Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change 68 WEB Kc57
2012-08-15   MaxForum v1.0.0 Local File Inclusion Vulnerability 97 WEB ahwak2000
2012-08-14   Cyclope Employee Surveillance Solution 6 SQL Injection 84 WEB sinn3r
2012-08-14   TestLink 1.9.3 Arbitrary File Upload 162 WEB Brendan Coles
2012-08-10   Cyclope Employee Surveillance Solution 6.0 SQL Injection 59 WEB loneferret
2012-08-09   IBM Proventia Network Mail Security System 2.5 POST File Read 98 WEB muts
2012-08-07   Power Bulletin Board Bypass 64 WEB i-Hmx
2012-08-06   am4ss Support System 1.2 PHP Code Injection Exploit 107 WEB i-Hmx
2012-08-01   WebPageTest Arbitrary PHP File Upload 69 WEB sinn3r
2012-07-31   Scrutinizer NetFlow / sFlow Analyzer 9.0.1 XSS / Bypass / File Upload 71 WEB Plixer International
2012-07-31   Symantec Web Gateway 5.0.3.18 (deptUploads_data.php groupid parameter) Blind SQLi 112 WEB @_Kc57
2012-07-30   CuteFlow 2.11.2 Arbitrary File Upload 115 WEB Brendan Coles
2012-07-27   Redaxo 4.4 Cross Site Scripting Vulnerability 91 WEB High-Tech Bridge Security Research Lab
2012-07-27   PHP UnZIP v0.1 - Full Disclosure 89 WEB TAURUS OMAR
2012-07-27   Develoweb - Blind SQL Injection Vulnerability 52 WEB TAURUS OMAR
2012-07-27   Thelia 1.5.1 Cross Site Scripting 68 WEB HTTPCS
2012-07-26   Joomla com_odudeprofile V2.x Exploit 103 WEB Daniel Barragan "D4NB4R"
2012-07-25   Zabbix 2.0.1 and Earlier Session Extractor 0day 104 WEB muts
2012-07-25   WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload 69 WEB Chris Kellum
2012-07-25   phpProfiles 4.5.4 Beta XSS / RFI / SQL Injection 88 WEB L0n3ly-H34rT
2012-07-24   AlienVault OSSIM 3.1 Reflected XSS and Blind SQL Injection 70 WEB muts
2012-07-24   Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers 79 WEB muts
2012-07-24   Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection 75 WEB muts
2012-07-24   EGallery PHP File Upload Vulnerability 135 WEB juan
2012-07-23   Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE 79 WEB muts
2012-07-23   Dell SonicWALL Scrutinizer 9.0.1 (statusFilter.php q parameter) SQL Injection 81 WEB muts
2012-07-23   SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities 156 WEB muts
2012-07-20   Maian Survey 1.1 Local File Inclusion / Open Redirection 55 WEB PuN!Sh3r
2012-07-20   Joomla Hello Local File Inclusion 217 WEB Ajax Security Team
2012-07-18   MGB OpenSource Guestbook 0.6.9.1 Multiple security vulnerabilities 391 WEB Stefan Schurtz
2012-07-18   WordPress Plugin 'Count Per Day' 3.1.1 Multiple Cross-site scripting vulnerabilities 63 WEB Stefan Schurtz
2012-07-18   Forum Oxalis <= 0.1.2 SQL Injection Vulnerability 52 WEB Jean Pascal Pereira
2012-07-17   Wordpress Diary/Notebook Site5 Theme Email Spoofing 68 WEB bwallHatesTwits
2012-07-16   Shopware 3.5 SQL Injection 84 WEB Kataklysmos
2012-07-13   WordPress Generic plugins Arbitrary File Upload (Metasploit) 126 WEB KedAns-Dz
2012-07-13   Hastymail 2.1.1 RC1 Command Injection 162 WEB juan vazquez
2012-07-12   IE9, SharePoint, Lync toStaticHTML HTML Sanitizing Bypass 96 WEB Adi Cohen
2012-07-11   Joomla (makedown.php) Local File Inclusion/download 83 WEB Th3 Bl4Ck H4Ck3R
2012-07-11   BookNux 0.2 Cross Site Scripting / SQL Injection 79 WEB Jean Pascal Pereira
2012-07-11   Simrik Solutions Sql Injection Vulnerablity 93 WEB gilang
2012-07-11   Wordpress Plugins - leaflet maps marker Blind SQL Injection Vulnerability 89 WEB KinG Of PiraTeS
2012-07-11   Vivotek Full Data Source CONFIG 73 WEB Alejandro Leon Morales
2012-07-11   WordPress WP-Predict Plugin v1.0 Blind SQL Injection 144 WEB Chris Kellum
2012-07-11   Netsweeper WebAdmin Portal Multiple Vulnerabilities 211 WEB Jacob Holcomb
2012-07-10   Eclydre Web Manager Arbitrary File Upload Vulnerability 196 WEB Sammy FORGIT
2012-07-09   WebsitePanel CMS Open Redirect 67 WEB Anastasios Monachos
2012-07-09   Umbraco CMS Remote Command Execution 91 WEB Toby Clarke
2012-07-09   Tiki Wiki <= 8.3 unserialize() PHP Code Execution 78 WEB EgiX
2012-07-09   Basilic 1.5.14 diff.php Arbitrary Command Execution 72 WEB sinn3r
2012-07-09   Elfchat 5.1.2 Pro Cross Site Scripting 91 WEB Avatar Fearless
2012-07-06   CLscript CMS 3.0 SQL Injection / Cross Site Scripting 84 WEB vulnerability-lab.com
2012-07-06   Freeside SelfService CGI|API 2.3.3 Cross Site Scripting / SQL Injection 58 WEB Ibrahim El-Sayed
2012-07-06   Classifieds Ads Script PHP 1.1 SQL Injection 81 WEB snup
2012-07-06   GuestBook Scripts PHP 1.5 Cross Site Scripting / SQL Injection 158 WEB snup
2012-07-06   Event Script PHP CMS 1.1 SQL Injection 83 WEB snup
2012-07-06   Tiki Wiki CMS Groupware 8.3 Code Execution 75 WEB EgiX
2012-07-04   Sava’s Simple Upload Script / Delete Arbitrary File 94 WEB Daniel Godoy
2012-07-04   Sava’s Simple Upload Script / Arbitrary File Upload 148 WEB Daniel Godoy
2012-07-04   phpMyBackupPro <= 2.2 Local File Inclusion Vulnerability 69 WEB dun
2012-07-04   CLscript Classified Script 3.0 SQL Injection 107 WEB Daniel Godoy
2012-07-04   gp easy CMS Minishop 1.5 Plugin Persistent XSS 66 WEB Carlos Mario Penagos Hollmann
2012-07-03   WordPress yet-another-photoblog plugin Full path disclosure Vulnerability 122 WEB KinG Of PiraTeS
2012-07-03   Geswebs - SQL Injection Vulnerability 91 WEB TheCyberNuxbie
2012-07-03   Global Pixel - SQL Injection Vulnerability 89 WEB TAURUS OMAR
2012-07-03   vBulletin 3.x.x full path disclosure Vulnerability 98 WEB Angel Injection
2012-07-03   BoutikOne CSRF Add User Vulnerability 96 WEB GarA
2012-07-03   BoutikOne ByPass & Download Backup Vulnerability 85 WEB GarA
2012-07-03   WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal 62 WEB Dillon Beresford
2012-07-03   IIS Short File/Folder Name Disclosure 93 WEB Soroush Dalili
2012-06-20   iBoutique eCommerce v4.0 Multiple Web Vulnerabilites 283 WEB Vulnerability-Lab
2012-06-20   CMS Balitbang - CSRF/XSS Vulnerability 84 WEB TheCyberNuxbie
2012-06-19   e107 Plugins - Image Gallery Remote File Disclosure Vulnerability 67 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Hupsi fancybox Arbitrary File Upload Vulnerability 64 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Filemanager Arbitrary File Upload Vulnerability 51 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Radio Plan Arbitrary File Upload Vulnerability 107 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Tap Arbitrary File Upload Vulnerability 50 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Hupsis Media Gallery Arbitrary File Upload Vulnerability 62 WEB Sammy FORGIT
2012-06-19   e107 Plugins - Hupsi Share Arbitrary File Upload Vulnerability 69 WEB Sammy FORGIT
2012-06-19   e107 Plugins - FilleDownload Plugin Multiple Vulnerability 93 WEB Sammy FORGIT
2012-06-19   proservice cms Sql Injection Vulnerablity 92 WEB cheki
2012-06-19   MyTickets 1 to 2.0.8 Blind SQL Injection 73 WEB al-swisre
2012-06-19   Nuked Klan SP CMS v4.5 SQL Injection Vulnerability 88 WEB Vulnerability-Lab
2012-06-15   qdPM v.7 Arbitrary File upload 94 WEB loneferret
2012-06-14   Wordpress Plugins - Invit0r Arbitrary File Upload Vulnerability 83 WEB Sammy FORGIT
2012-06-14   Wordpress Plugins - Evarisk Arbitrary File Upload Vulnerability 80 WEB Sammy FORGIT
2012-06-14   RevolutionTechnologies - SQL Injection Vulnerability 57 WEB TheCyberNuxbie
2012-06-14   PHP 5.4.3 (cli) code read vulnerability 72 WEB cheki
2012-06-14   seoPLUSteam SQL Injection Vulnerability 57 WEB Iranian_Dark_Coders_Team
2012-06-14   XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities 75 WEB Sangteamtham
2012-06-14   WordPress plugin Foxypress uploadify.php Arbitrary Code Execution 66 WEB patrick
2012-06-13   Edimax IC-3030iWn Authentication Bypass 68 WEB y3dips
2012-06-13   Wordpress Plugins - Annonces Arbitrary File Upload Vulnerability 74 WEB Sammy FORGIT
2012-06-13   Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection 65 WEB juan vazquez
2012-06-12   [Spanish] Remote Command Execution through Local File Inclusion 95 WEB JosS
2012-06-12   TheBlog <= 2.0 Multiple Vulnerabilities 88 WEB WhiteCollarGroup
2012-06-12   Agora-Project 2.12.11 Arbitrary File Upload Vulnerability 80 WEB Misa3l
2012-06-12   ClanSuite 2.9 Arbitrary File Upload Vulnerability 71 WEB Adrien Thierry
2012-06-11   Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability 100 WEB juan vazquez
2012-06-11   phpAcounts v.0.5.3 SQL Injection 81 WEB loneferret
2012-06-11   Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload 56 WEB Sammy FORGIT
2012-06-11   Wordpress RBX Gallery Plugin 2.1 Arbitrary File Upload 82 WEB Sammy FORGIT
2012-06-08   Wordpress Omni Secure Files Plugin 0.1.13 Arbitrary File Upload 96 WEB Adrien Thierry
2012-06-08   Wordpress Front End Upload 0.5.3 Arbitrary File Upload 78 WEB Adrien Thierry
2012-06-08   PHPNet <= 1.8 (ler.php) SQL Injection 77 WEB WhiteCollarGroup
2012-06-08   SN News <= 1.2 (/admin/loger.php) Admin Bypass SQL Injection 131 WEB Pr0T3cT10n
2012-06-07   Vanilla kPoll Plugin 1.2 Stored XSS 76 WEB Henry Hoggard
2012-06-07   SN News (visualiza.php) <= 1.2 SQL Injection 102 WEB WhiteCollarGroup
2012-06-07   Wordpress Gallery Plugin 3.06 Arbitrary File Upload 87 WEB Sammy FORGIT
2012-06-07   Wordpress MM Forms Community Plugin 2.2.6 Arbitrary File Upload 88 WEB Sammy FORGIT
2012-06-07   Wordpress VideoWhisper Video Presentation Plugin 3.17 Arbitrary File Upload 78 WEB Sammy FORGIT
2012-06-07   Wordpress FCChat Widget 2.2.12.4 Arbitrary File Upload 90 WEB Sammy FORGIT
2012-06-07   Wordpress Font Uploader Plugin 1.2.4 Arbitrary File Upload 60 WEB Sammy FORGIT
2012-06-07   Evolutia Design - SQL Injection Vulnerability 86 WEB D0m12
2012-06-07   Bigware Shop SQL Injection Vulnerability 89 WEB expku
2012-06-06   Wordpress Asset Manager Plugin 0.2 Arbitrary File Upload 74 WEB Sammy FORGIT
2012-06-06   Wordpress Foxypress Plugin 0.4.1.1 - 0.4.2.1 Arbitrary File Upload 74 WEB Sammy FORGIT
2012-06-06   Wordpress HTML5 AV Manager Plugin 0.2.7 Arbitrary File Upload 89 WEB Sammy FORGIT
2012-06-06   Wordpress Google Maps via Store Locator Plugin Multiple Vulnerabilities 74 WEB Sammy FORGIT
2012-06-06   Wordpress WP Marketplace Plugin 1.5.0 - 1.6.1 Arbitrary File Upload 80 WEB Sammy FORGIT
2012-06-06   Wordpress WP-Property Plugin 1.35.0 Arbitrary File Upload 97 WEB Sammy FORGIT
2012-06-06   Mnews <= 1.1 (view.php) SQL Injection 66 WEB WhiteCollarGroup
2012-06-06   Hexamail Server <= 4.4.5 Persistent XSS Vulnerability 91 WEB modpr0be
2012-06-04   Log1 CMS writeInfo() PHP Code Injection 90 WEB sinn3r
2012-06-01   Supernews <= 2.6.1 (noticias.php cat) SQL Injection 56 WEB Pr0T3cT10n