|
2012-07-11
|
|
WordPress WP-Predict Plugin v1.0 Blind SQL Injection
|
141 |
WEB
|
Chris Kellum
|
|
2012-07-11
|
|
Netsweeper WebAdmin Portal Multiple Vulnerabilities
|
208 |
WEB
|
Jacob Holcomb
|
|
2012-07-10
|
|
Eclydre Web Manager Arbitrary File Upload Vulnerability
|
193 |
WEB
|
Sammy FORGIT
|
|
2012-07-09
|
|
WebsitePanel CMS Open Redirect
|
64 |
WEB
|
Anastasios Monachos
|
|
2012-07-09
|
|
Umbraco CMS Remote Command Execution
|
89 |
WEB
|
Toby Clarke
|
|
2012-07-09
|
|
Tiki Wiki <= 8.3 unserialize() PHP Code Execution
|
74 |
WEB
|
EgiX
|
|
2012-07-09
|
|
Basilic 1.5.14 diff.php Arbitrary Command Execution
|
69 |
WEB
|
sinn3r
|
|
2012-07-09
|
|
Elfchat 5.1.2 Pro Cross Site Scripting
|
89 |
WEB
|
Avatar Fearless
|
|
2012-07-06
|
|
CLscript CMS 3.0 SQL Injection / Cross Site Scripting
|
81 |
WEB
|
vulnerability-lab.com
|
|
2012-07-06
|
|
Freeside SelfService CGI|API 2.3.3 Cross Site Scripting / SQL Injection
|
55 |
WEB
|
Ibrahim El-Sayed
|
|
2012-07-06
|
|
Classifieds Ads Script PHP 1.1 SQL Injection
|
78 |
WEB
|
snup
|
|
2012-07-06
|
|
GuestBook Scripts PHP 1.5 Cross Site Scripting / SQL Injection
|
156 |
WEB
|
snup
|
|
2012-07-06
|
|
Event Script PHP CMS 1.1 SQL Injection
|
81 |
WEB
|
snup
|
|
2012-07-06
|
|
Tiki Wiki CMS Groupware 8.3 Code Execution
|
74 |
WEB
|
EgiX
|
|
2012-07-04
|
|
Sava’s Simple Upload Script / Delete Arbitrary File
|
92 |
WEB
|
Daniel Godoy
|
|
2012-07-04
|
|
Sava’s Simple Upload Script / Arbitrary File Upload
|
145 |
WEB
|
Daniel Godoy
|
|
2012-07-04
|
|
phpMyBackupPro <= 2.2 Local File Inclusion Vulnerability
|
67 |
WEB
|
dun
|
|
2012-07-04
|
|
CLscript Classified Script 3.0 SQL Injection
|
104 |
WEB
|
Daniel Godoy
|
|
2012-07-04
|
|
gp easy CMS Minishop 1.5 Plugin Persistent XSS
|
63 |
WEB
|
Carlos Mario Penagos Hollmann
|
|
2012-07-03
|
|
WordPress yet-another-photoblog plugin Full path disclosure Vulnerability
|
120 |
WEB
|
KinG Of PiraTeS
|
|
2012-07-03
|
|
Geswebs - SQL Injection Vulnerability
|
89 |
WEB
|
TheCyberNuxbie
|
|
2012-07-03
|
|
Global Pixel - SQL Injection Vulnerability
|
85 |
WEB
|
TAURUS OMAR
|
|
2012-07-03
|
|
vBulletin 3.x.x full path disclosure Vulnerability
|
95 |
WEB
|
Angel Injection
|
|
2012-07-03
|
|
BoutikOne CSRF Add User Vulnerability
|
93 |
WEB
|
GarA
|
|
2012-07-03
|
|
BoutikOne ByPass & Download Backup Vulnerability
|
83 |
WEB
|
GarA
|
|
2012-07-03
|
|
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
|
59 |
WEB
|
Dillon Beresford
|
|
2012-07-03
|
|
IIS Short File/Folder Name Disclosure
|
91 |
WEB
|
Soroush Dalili
|
|
2012-06-20
|
|
iBoutique eCommerce v4.0 Multiple Web Vulnerabilites
|
281 |
WEB
|
Vulnerability-Lab
|
|
2012-06-20
|
|
CMS Balitbang - CSRF/XSS Vulnerability
|
82 |
WEB
|
TheCyberNuxbie
|
|
2012-06-19
|
|
e107 Plugins - Image Gallery Remote File Disclosure Vulnerability
|
65 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsi fancybox Arbitrary File Upload Vulnerability
|
62 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Filemanager Arbitrary File Upload Vulnerability
|
50 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Radio Plan Arbitrary File Upload Vulnerability
|
105 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Tap Arbitrary File Upload Vulnerability
|
49 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsis Media Gallery Arbitrary File Upload Vulnerability
|
61 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - Hupsi Share Arbitrary File Upload Vulnerability
|
66 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Plugins - FilleDownload Plugin Multiple Vulnerability
|
91 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
proservice cms Sql Injection Vulnerablity
|
90 |
WEB
|
cheki
|
|
2012-06-19
|
|
MyTickets 1 to 2.0.8 Blind SQL Injection
|
70 |
WEB
|
al-swisre
|
|
2012-06-19
|
|
Nuked Klan SP CMS v4.5 SQL Injection Vulnerability
|
86 |
WEB
|
Vulnerability-Lab
|
|
2012-06-15
|
|
qdPM v.7 Arbitrary File upload
|
91 |
WEB
|
loneferret
|
|
2012-06-14
|
|
Wordpress Plugins - Invit0r Arbitrary File Upload Vulnerability
|
78 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
Wordpress Plugins - Evarisk Arbitrary File Upload Vulnerability
|
76 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
RevolutionTechnologies - SQL Injection Vulnerability
|
55 |
WEB
|
TheCyberNuxbie
|
|
2012-06-14
|
|
PHP 5.4.3 (cli) code read vulnerability
|
70 |
WEB
|
cheki
|
|
2012-06-14
|
|
seoPLUSteam SQL Injection Vulnerability
|
55 |
WEB
|
Iranian_Dark_Coders_Team
|
|
2012-06-14
|
|
XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities
|
72 |
WEB
|
Sangteamtham
|
|
2012-06-14
|
|
WordPress plugin Foxypress uploadify.php Arbitrary Code Execution
|
63 |
WEB
|
patrick
|
|
2012-06-13
|
|
Edimax IC-3030iWn Authentication Bypass
|
65 |
WEB
|
y3dips
|
|
2012-06-13
|
|
Wordpress Plugins - Annonces Arbitrary File Upload Vulnerability
|
72 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection
|
63 |
WEB
|
juan vazquez
|
|
2012-06-12
|
|
[Spanish] Remote Command Execution through Local File Inclusion
|
94 |
WEB
|
JosS
|
|
2012-06-12
|
|
TheBlog <= 2.0 Multiple Vulnerabilities
|
87 |
WEB
|
WhiteCollarGroup
|
|
2012-06-12
|
|
Agora-Project 2.12.11 Arbitrary File Upload Vulnerability
|
79 |
WEB
|
Misa3l
|
|
2012-06-12
|
|
ClanSuite 2.9 Arbitrary File Upload Vulnerability
|
68 |
WEB
|
Adrien Thierry
|
|
2012-06-11
|
|
Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability
|
97 |
WEB
|
juan vazquez
|
|
2012-06-11
|
|
phpAcounts v.0.5.3 SQL Injection
|
79 |
WEB
|
loneferret
|
|
2012-06-11
|
|
Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload
|
54 |
WEB
|
Sammy FORGIT
|
|
2012-06-11
|
|
Wordpress RBX Gallery Plugin 2.1 Arbitrary File Upload
|
80 |
WEB
|
Sammy FORGIT
|
|
2012-06-08
|
|
Wordpress Omni Secure Files Plugin 0.1.13 Arbitrary File Upload
|
94 |
WEB
|
Adrien Thierry
|
|
2012-06-08
|
|
Wordpress Front End Upload 0.5.3 Arbitrary File Upload
|
76 |
WEB
|
Adrien Thierry
|
|
2012-06-08
|
|
PHPNet <= 1.8 (ler.php) SQL Injection
|
75 |
WEB
|
WhiteCollarGroup
|
|
2012-06-08
|
|
SN News <= 1.2 (/admin/loger.php) Admin Bypass SQL Injection
|
129 |
WEB
|
Pr0T3cT10n
|
|
2012-06-07
|
|
Vanilla kPoll Plugin 1.2 Stored XSS
|
74 |
WEB
|
Henry Hoggard
|
|
2012-06-07
|
|
SN News (visualiza.php) <= 1.2 SQL Injection
|
99 |
WEB
|
WhiteCollarGroup
|
|
2012-06-07
|
|
Wordpress Gallery Plugin 3.06 Arbitrary File Upload
|
85 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress MM Forms Community Plugin 2.2.6 Arbitrary File Upload
|
85 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress VideoWhisper Video Presentation Plugin 3.17 Arbitrary File Upload
|
76 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress FCChat Widget 2.2.12.4 Arbitrary File Upload
|
89 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Wordpress Font Uploader Plugin 1.2.4 Arbitrary File Upload
|
59 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
Evolutia Design - SQL Injection Vulnerability
|
84 |
WEB
|
D0m12
|
|
2012-06-07
|
|
Bigware Shop SQL Injection Vulnerability
|
87 |
WEB
|
expku
|
|
2012-06-06
|
|
Wordpress Asset Manager Plugin 0.2 Arbitrary File Upload
|
72 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress Foxypress Plugin 0.4.1.1 - 0.4.2.1 Arbitrary File Upload
|
73 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress HTML5 AV Manager Plugin 0.2.7 Arbitrary File Upload
|
87 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress Google Maps via Store Locator Plugin Multiple Vulnerabilities
|
71 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress WP Marketplace Plugin 1.5.0 - 1.6.1 Arbitrary File Upload
|
76 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Wordpress WP-Property Plugin 1.35.0 Arbitrary File Upload
|
94 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
Mnews <= 1.1 (view.php) SQL Injection
|
64 |
WEB
|
WhiteCollarGroup
|
|
2012-06-06
|
|
Hexamail Server <= 4.4.5 Persistent XSS Vulnerability
|
87 |
WEB
|
modpr0be
|
|
2012-06-04
|
|
Log1 CMS writeInfo() PHP Code Injection
|
88 |
WEB
|
sinn3r
|
|
2012-06-01
|
|
Supernews <= 2.6.1 (noticias.php cat) SQL Injection
|
53 |
WEB
|
Pr0T3cT10n
|
|
2012-06-01
|
|
NewsAdd <= 1.0 (lerNoticia.php id) SQL Injection Vulnerability
|
62 |
WEB
|
Pr0T3cT10n
|
|
2012-06-01
|
|
Simple Web Content Management System 1.1 Multiple SQL Injection
|
83 |
WEB
|
loneferret
|
|
2012-06-01
|
|
4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities
|
76 |
WEB
|
Aboud-el
|
|
2012-05-31
|
|
PHP Volunteer Management System v1.0.2 Arbitrary File Upload
|
90 |
WEB
|
sinn3r
|
|
2012-05-31
|
|
StyleDesign - Multiple SQL Injection Vulnerability
|
73 |
WEB
|
TheCyberNuxbie
|
|
2012-05-31
|
|
Ibaguenet - SQL Injection Vulnerability
|
75 |
WEB
|
TheCyberNuxbie
|
|
2012-05-31
|
|
Ganesha Digital Library 4.0 Multiple Vulnerabilities
|
58 |
WEB
|
X-Cisadane
|
|
2012-05-31
|
|
NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities
|
98 |
WEB
|
WhiteCollarGroup
|
|
2012-05-31
|
|
WHMCS 5 Multiple CSRF (Add Admin) and XSS Vulnerability
|
87 |
WEB
|
Shadman Tanjim
|
|
2012-05-30
|
|
VAMCart-InternetShop v0.9 (TinyBrowser) File Upload Code Execution
|
132 |
WEB
|
KedAns-Dz
|
|
2012-05-30
|
|
VAMCart-InternetShop v0.9 (XSRF/FileUpload) Vulnerabilities
|
62 |
WEB
|
KedAns-Dz
|
|
2012-05-30
|
|
PBBoard v2.1.4 Multiple SQL Injection Vulnerabilities
|
76 |
WEB
|
loneferret
|
|
2012-05-30
|
|
PBBoard 2.1.4 Local File Inclusion
|
82 |
WEB
|
n4ss1m
|
|
2012-05-30
|
|
Darby Communications - SQL Injection Vulnerability
|
73 |
WEB
|
D0m12
|
|
2012-05-30
|
|
PBBoard v2.1.4 (CSRF) Arbitrary File Upload and Command Execution (MSF)
|
91 |
WEB
|
KedAns-Dz
|
|
2012-05-29
|
|
PHP Volunteer Management System v 1.0.2 multiple SQLi Vuln.
|
70 |
WEB
|
loneferret
|
|
2012-05-29
|
|
PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities
|
82 |
WEB
|
Ashoo
|
|
2012-05-28
|
|
b2ePMS 1.0 multiple SQLi Vulnerabilities
|
64 |
WEB
|
loneferret
|
|
2012-05-28
|
|
WeBid converter.php Remote PHP Code Injection
|
94 |
WEB
|
EgiX
|
|
2012-05-25
|
|
Jaow <= 2.4.5 Blind SQL Injection
|
75 |
WEB
|
kallimero
|
|
2012-05-25
|
|
Social Engine 4.2.2 Multiples Vulnerabilities
|
130 |
WEB
|
expku
|
|
2012-05-24
|
|
appRain CMF Arbitrary PHP File Upload Vulnerability
|
85 |
WEB
|
EgiX
|
|
2012-05-22
|
|
Supernews <= 2.6.1 SQL Injection Exploit
|
93 |
WEB
|
WhiteCollarGroup
|
|
2012-05-22
|
|
Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS
|
78 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Vanilla Forums About Me Plugin Persistant XSS
|
84 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Vanilla Forums LatestComment 1.1 Plugin Persistent XSS
|
46 |
WEB
|
Henry Hoggard
|
|
2012-05-22
|
|
Aholattafun Creative Solutions SQL Injection Vulnerabilities
|
68 |
WEB
|
Becax
|
|
2012-05-18
|
|
Division 6 IT - SQLi/XSS Vulnerability
|
80 |
WEB
|
TheCyberNuxbie
|
|
2012-05-18
|
|
NACElink CS Manager - Persistent Web Vulnerability
|
54 |
WEB
|
expku
|
|
2012-05-18
|
|
Doorsweb SQL Injection Vulnerability
|
82 |
WEB
|
dr.nass3r
|
|
2012-05-18
|
|
Doll shopping store Kr/Jp [SQL injection Vulnerability]
|
90 |
WEB
|
Becax
|
|
2012-05-17
|
|
SMCWBR14-G2 PPPoE Data Disclosure (ADSL Router)
|
123 |
WEB
|
KinG Of PiraTeS
|
|
2012-05-17
|
|
LAN Messenger v1.2.28 - Persistent Software Vulnerability
|
86 |
WEB
|
expku
|
|
2012-05-17
|
|
MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities
|
126 |
WEB
|
expku
|
|
2012-05-17
|
|
CLscript CMS v3.0 - Multiple Web Vulnerabilities
|
70 |
WEB
|
expku
|
|
2012-05-17
|
|
Minnesota Premier Publications [SQL injection Vulnerability]
|
82 |
WEB
|
Becax
|
|
2012-05-17
|
|
Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities
|
78 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability
|
78 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability
|
75 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
Serendipity 1.6 Backend XSS And SQLi Vulnerability
|
46 |
WEB
|
Stefan Schurtz
|
|
2012-05-17
|
|
Artiphp CMS 5.5.0 Database Backup Disclosure Exploit
|
84 |
WEB
|
LiquidWorm
|
|
2012-05-17
|
|
OpenKM Document Management System 5.1.7 Command Execution
|
204 |
WEB
|
Cyrill Brunschwiler
|
|
2012-05-16
|
|
Axous 1.1.1 Multiple Vulnerabilities (CSRF - Persistent XSS)
|
177 |
WEB
|
Ivano Binetti
|
