Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-03-14   BPowerItaliano CSRF 98 WEB Jonturk75
2012-03-14   Ajax PHP Penny Auction CSRF 95 WEB Jonturk75
2012-03-14   Lowest Unique Bid Auction Scripts CSRF 117 WEB Jonturk75
2012-03-14   EbayAssist CSRF 100 WEB Jonturk75
2012-03-14   BlueSoft Auction CSRF 112 WEB Jonturk75
2012-03-14   OneFileCMS - Failure to Restrict URL Access 115 WEB Abhi M Balakrishnan
2012-03-14   4images - Image Gallery Management System - [CSRF] Change mail user or admin 102 WEB Dmar al3noOoz
2012-03-14   Cycade Gallery SQL Injection Exploit 106 WEB DownFall
2012-03-14   PBLang local file include vulnerability 115 WEB Number 7
2012-03-13   OpenShop - SQL Injection Vulnerability 216 WEB TheCyberNuxbie
2012-03-13   DotFlorence - SQL Injection Vulnerability 98 WEB TheCyberNuxbie
2012-03-13   LEDZ - SQL Injection Vulnerability 108 WEB TheCyberNuxbie
2012-03-13   E-Bay Clone Script -SEO CSRF 99 WEB Jonturk75
2012-03-13   Kubelance CSRF (add new admin) 111 WEB Jonturk75
2012-03-13   Softbiz Quick Ad Manager CSRF 108 WEB Jonturk75
2012-03-13   psPopper 3.0 CSRF (change password) 118 WEB Jonturk75
2012-03-13   idev-TextAds 3.0 CSRF (change e-mail address) 145 WEB Jonturk75
2012-03-13   Barracuda CSRF (change e-mail address) 123 WEB Jonturk75
2012-03-13   InfoExtreme - SQL Injection Vulnerability 127 WEB TheCyberNuxbie
2012-03-13   Saman Portal Local File Inclusion Vulnerability 108 WEB TMT
2012-03-13   Bintech Systems LLC Admin Auth Bypass Exploit 111 WEB BLACK BURN
2012-03-13   Paypal Affiliate Script CSRF 98 WEB Jonturk75
2012-03-13   JROX.COM Affiliate Manager CBFront CSRF 111 WEB Jonturk75
2012-03-13   CBFront CSRF 107 WEB Jonturk75
2012-03-13   Paid to Click Script CSRF 95 WEB Jonturk75
2012-03-13   Affiliate Pro CSRF (change e-mail address) 110 WEB Jonturk75
2012-03-12   Clic Page XSS and SQL Injection Vulnerability 113 WEB OruçReis
2012-03-12   dotBanner Banner Management System CSRF 87 WEB Jonturk75
2012-03-12   Inout PPC Engine XSRF (change e-mail address) 116 WEB Jonturk75
2012-03-12   Ad Manager Pro CSRF Vuln (add admin) 113 WEB Jonturk75
2012-03-12   A.M.Y CSRF (change admin password) 109 WEB Jonturk75
2012-03-12   Easy Banner Manager Pro [CSRF] / (change admin password) 95 WEB Jonturk75
2012-03-12   Acal calendar Multiple Vulns 101 WEB Number 7
2012-03-12   MTDCMS - SQL Injection Vulnerability 116 WEB the_cyber_nuxbie
2012-03-12   WFYCMS - SQL Injection Vulnerability 106 WEB the_cyber_nuxbie
2012-03-12   AlegroCart FredCK-Editor (ASPELL for WinSRV) Remote Command Exec p0c 186 WEB KedAns-Dz
2012-03-12   Cometik Catalogue - SQL Injection Vulnerability 226 WEB the_cyber_nuxbie
2012-03-12   PHP Address Book 6.2.12 Multiple security vulnerabilities 99 WEB Stefan Schurtz
2012-03-12   Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities 120 WEB LiquidWorm
2012-03-12   Aztek Forum 4.01 - SQL Injection Vulnerability 120 WEB the_cyber_nuxbie
2012-03-12   SRISMS - SQL Injection Vulnerability 112 WEB the_cyber_nuxbie
2012-03-12   Nor-Rec WebBasic - SQL Injection Vulnerability 110 WEB the_cyber_nuxbie
2012-03-12   CATSHOP Cart - SQL Injection Vulnerability 120 WEB the_cyber_nuxbie
2012-03-12   Pobol WebBasic - SQL Injection Vulnerability 101 WEB the_cyber_nuxbie
2012-03-12   ActivaDigital- SQL Injection Vulnerability 130 WEB the_cyber_nuxbie
2012-03-12   UEBBI - SQL Injection Vulnerability 100 WEB the_cyber_nuxbie
2012-03-12   LY Network Cart - SQL Injection Vulnerability 116 WEB the_cyber_nuxbie
2012-03-09   RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages) 128 WEB Ivano Binetti
2012-03-09   RazorCMS <= 1.2.1 STABLE File Upload Vulnerability 155 WEB i2sec_Hyo jun Oh
2012-03-09   Toenda CMS 1.6.2 Osaka Stable Local File Inclusion 118 WEB AkaStep
2012-03-08   SQLI Online Shop LeKommerce 118 WEB Mazt0r
2012-03-08   Iciniti Store SQL Injection - Security Advisory - SOS-12-003 119 WEB Lists
2012-03-08   Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities 113 WEB LiquidWorm
2012-03-08   WebfolioCMS <= 1.1.4 Multiple XSS 205 WEB Ivano Binetti
2012-03-08   Symfony 2 Unauthenticated Information Disclosure 133 WEB Phil Taylor
2012-03-08   Log1cms v2.1 Multiple XSRF File (Upload/Download) Vulnerabilities 137 WEB KedAns-Dz
2012-03-08   Zen Cart v.1.5.0 Remote Shell Upload 238 WEB Mr.ExiT
2012-03-06   Drupal CMS 7.12 (latest stable release) Multiple Vulnerabilities 115 WEB Ivano Binetti
2012-03-06   ForkCMS 3.2.5 Multiple Vulnerabilities 102 WEB Ivano Binetti
2012-03-06   lizard cart SQLi (search.php) 105 WEB Number 7
2012-03-06   Symfony2 Local File Disclosure - Security Advisory - SOS-12-002 120 WEB Lists
2012-03-06   EbizCare => SQL Injection Vulnerability 133 WEB dbx
2012-03-06   Open-Realty 2.5.8 Local File Inclusion 115 WEB Transparent
2012-03-06   BigDump Importer v0.32b RFU 160 WEB TeaM MosTa
2012-03-06   piwigo <== SQL Injector 108 WEB TeaM MosTa
2012-03-06   Multiple SQL injections in rivettracker <=1.03 103 WEB Ali Raheem
2012-03-06   CnnCMS 1.x SQL Injection Vulnerability 118 WEB X-Cisadane
2012-03-05   AneCMS v.2e2c583 LFI exploit 108 WEB I2sec-PJH
2012-03-05   deV!L`z Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability 147 WEB Easy Laster
2012-03-04   Timesheet Next Gen 1.5.2 Multiple SQLi 97 WEB G13
2012-03-04   Multiple SQL injection rivettracker <=1.03 125 WEB Ali Raheem
2012-03-03   Infoserve SQL Vulnerability 103 WEB Optimiz3r
2012-03-03   Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities 117 WEB expku
2012-03-03   Wpmanager version wpm 2.2.0 (FCKeditor) Remote File Upload 148 WEB T0x!c
2012-03-03   phxEventManager 2.0 beta 5 search.php search_terms SQL Injection 132 WEB skysbsb
2012-03-01   Wolf CMS v0.7.5 Multiple Vulnerabilities 117 WEB longrifle0x
2012-03-01   ImgPals Photo Host Version 1.0 Admin Account Disactivation 123 WEB CorryL
2012-03-01   Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability 130 WEB Narendra Shinde
2012-03-01   Topics Viewer CSRF Add Admin 121 WEB Green Hornet
2012-03-01   BrewBlogger v2.3.2 Multiple (XSRF/ShellUpload/SQLi) Vulnerabilities 110 WEB KedAns-Dz
2012-02-29   WebfolioCMS <= 1.1.4 CSRF (Add Admin/Modify Pages) 112 WEB Ivano Binetti
2012-02-28   Bitweaver v2.81 Local File Inclusion Vulnerability 112 WEB I2sec-PJH
2012-02-28   Dotclear 2.4.2 Arbitrary File Upload Vulnerability 105 WEB T0x!c
2012-02-28   ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article) 117 WEB Ivano Binetti
2012-02-27   YVS Image Gallery Sql Injection 117 WEB CorryL
2012-02-27   CreateVision CMS Database injection. 171 WEB Zwierzchowski Oskar
2012-02-27   webgrind 1.0 (file param) Local File Inclusion Vulnerability 183 WEB LiquidWorm
2012-02-27   cPassMan v1.82 Remote Command Execution Exploit 100 WEB ls
2012-02-27   PHP Gift Registry 1.5.5 SQL Injection 111 WEB G13
2012-02-24   Snom IP Phone Privilege Escalation - Security Advisory - SOS-12-001 105 WEB Lists
2012-02-24   phpDenora <= 1.4.6 Multiple SQL Injection Vulnerabilities 145 WEB KnickLighter
2012-02-24   The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution 123 WEB Danny Moules
2012-02-23   DFLabs PTK <= 1.0.5 Multiple Vulnerabilities (Steal Authentication Credentials) 115 WEB Ivano Binetti
2012-02-23   D-Link DSL-2640B Authentication Bypass 98 WEB Ivano Binetti
2012-02-23   WebcamXP and Webcam 7 Directory Traversal Vulnerability 131 WEB Silent Dream
2012-02-23   Dlink DCS series CSRF Change Admin Password 124 WEB rigan
2012-02-23   BRIM < 2.0.0 SQL Injection 111 WEB ifnull
2012-02-23   ForkCMS 3.2.5 Multiple Vulnerabilities 121 WEB Ivano Binetti
2012-02-23   Sagem F@ST 2604 CSRF Vulnerability (ADSL Router) 126 WEB KinG Of PiraTeS
2012-02-23   Limesurvey (PHPSurveyor v.1.91+ stable) Blind SQL Injection 111 WEB TorTukiTu
2012-02-23   VOXTRONIC Voxlog Professional 3.7.2.729 SQL Injection 331 WEB J. Greil
2012-02-23   TestLink SQL Injection Vulnerabilities 133 WEB Juan M. Natal
2012-02-23   Cisco Linksys WAG54GS (ADSL Router) change admin password 104 WEB Ivano Binetti
2012-02-23   MySQLDumper v1.2x.x SQL Injection/Execute Vulnerability 158 WEB KedAns-Dz
2012-02-23   Beats Website SQL Injection Vulnerability 119 WEB system k1ller
2012-02-22   Cisco Linksys WAG54GS CSRF Change Admin Password 136 WEB Ivano Binetti
2012-02-21   PlumeCMS <= 1.2.4 CSRF Vulnerability 96 WEB Ivano Binetti
2012-02-21   D-Link DSL-2640B (ADSL Router) CSRF Vulnerability 146 WEB Ivano Binetti
2012-02-21   Joomla com_etree Blind SQL-inj Vuln 118 WEB Mach1ne
2012-02-20   SyndeoCMS <= 3.0 CSRF Vulnerability 94 WEB Ivano Binetti
2012-02-20   4PSA CMS SQL Injection Vulnerabilities 88 WEB BHG Security Center
2012-02-20   almnzm 2.4 <= CSRF Vulnerability (Add Admin) 201 WEB HaNniBaL KsA
2012-02-20   Pandora FMS v4.0.1 - Local File Include Vulnerability 128 WEB Vulnerability-Lab
2012-02-20   Mitra Iranian CMS Remote File Upload 132 WEB Nitrojen90
2012-02-20   Joomla Component com_x-shop (idd) <= SQLi Vulnerability 101 WEB KedAns-Dz
2012-02-20   Joomla Component (com_xcomp) <= Local File Inclusion Vulnerability 105 WEB KedAns-Dz
2012-02-20   Joomla Component (com_xvs) <= Local File Inclusion Vulnerability 111 WEB KedAns-Dz
2012-02-20   CDPI Software SQL Injection Vulnerability 120 WEB ITTIHACK
2012-02-20   TopForm CMS SQL Injection Vulnerability 124 WEB faza02
2012-02-20   Solgens SQLInjection Vulnerability 100 WEB the_cyber_nuxbie
2012-02-20   Pirelli Discus DSL-DRGA112-07 Remote Change Password 105 WEB Daniel Godoy
2012-02-20   Telerom CMS SQLi Vulnerability 99 WEB ITTIHACK
2012-02-17   SocialCMS CSRF Vulnerability 122 WEB Ivano Binetti
2012-02-17   LEPTON 1.1.3 SQL Injection / XSS / Local File Inclusion 201 WEB expku
2012-02-17   BuyWebArt <<< SQL Injection Vulnerability 124 WEB Infamous