Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-03-14   BPowerItaliano CSRF 97 WEB Jonturk75
2012-03-14   Ajax PHP Penny Auction CSRF 94 WEB Jonturk75
2012-03-14   Lowest Unique Bid Auction Scripts CSRF 116 WEB Jonturk75
2012-03-14   EbayAssist CSRF 99 WEB Jonturk75
2012-03-14   BlueSoft Auction CSRF 111 WEB Jonturk75
2012-03-14   OneFileCMS - Failure to Restrict URL Access 114 WEB Abhi M Balakrishnan
2012-03-14   4images - Image Gallery Management System - [CSRF] Change mail user or admin 101 WEB Dmar al3noOoz
2012-03-14   Cycade Gallery SQL Injection Exploit 105 WEB DownFall
2012-03-14   PBLang local file include vulnerability 113 WEB Number 7
2012-03-13   OpenShop - SQL Injection Vulnerability 215 WEB TheCyberNuxbie
2012-03-13   DotFlorence - SQL Injection Vulnerability 97 WEB TheCyberNuxbie
2012-03-13   LEDZ - SQL Injection Vulnerability 107 WEB TheCyberNuxbie
2012-03-13   E-Bay Clone Script -SEO CSRF 98 WEB Jonturk75
2012-03-13   Kubelance CSRF (add new admin) 110 WEB Jonturk75
2012-03-13   Softbiz Quick Ad Manager CSRF 106 WEB Jonturk75
2012-03-13   psPopper 3.0 CSRF (change password) 116 WEB Jonturk75
2012-03-13   idev-TextAds 3.0 CSRF (change e-mail address) 143 WEB Jonturk75
2012-03-13   Barracuda CSRF (change e-mail address) 121 WEB Jonturk75
2012-03-13   InfoExtreme - SQL Injection Vulnerability 125 WEB TheCyberNuxbie
2012-03-13   Saman Portal Local File Inclusion Vulnerability 106 WEB TMT
2012-03-13   Bintech Systems LLC Admin Auth Bypass Exploit 110 WEB BLACK BURN
2012-03-13   Paypal Affiliate Script CSRF 96 WEB Jonturk75
2012-03-13   JROX.COM Affiliate Manager CBFront CSRF 110 WEB Jonturk75
2012-03-13   CBFront CSRF 106 WEB Jonturk75
2012-03-13   Paid to Click Script CSRF 94 WEB Jonturk75
2012-03-13   Affiliate Pro CSRF (change e-mail address) 109 WEB Jonturk75
2012-03-12   Clic Page XSS and SQL Injection Vulnerability 112 WEB OruçReis
2012-03-12   dotBanner Banner Management System CSRF 86 WEB Jonturk75
2012-03-12   Inout PPC Engine XSRF (change e-mail address) 115 WEB Jonturk75
2012-03-12   Ad Manager Pro CSRF Vuln (add admin) 112 WEB Jonturk75
2012-03-12   A.M.Y CSRF (change admin password) 107 WEB Jonturk75
2012-03-12   Easy Banner Manager Pro [CSRF] / (change admin password) 94 WEB Jonturk75
2012-03-12   Acal calendar Multiple Vulns 100 WEB Number 7
2012-03-12   MTDCMS - SQL Injection Vulnerability 115 WEB the_cyber_nuxbie
2012-03-12   WFYCMS - SQL Injection Vulnerability 105 WEB the_cyber_nuxbie
2012-03-12   AlegroCart FredCK-Editor (ASPELL for WinSRV) Remote Command Exec p0c 186 WEB KedAns-Dz
2012-03-12   Cometik Catalogue - SQL Injection Vulnerability 225 WEB the_cyber_nuxbie
2012-03-12   PHP Address Book 6.2.12 Multiple security vulnerabilities 98 WEB Stefan Schurtz
2012-03-12   Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities 119 WEB LiquidWorm
2012-03-12   Aztek Forum 4.01 - SQL Injection Vulnerability 118 WEB the_cyber_nuxbie
2012-03-12   SRISMS - SQL Injection Vulnerability 111 WEB the_cyber_nuxbie
2012-03-12   Nor-Rec WebBasic - SQL Injection Vulnerability 109 WEB the_cyber_nuxbie
2012-03-12   CATSHOP Cart - SQL Injection Vulnerability 119 WEB the_cyber_nuxbie
2012-03-12   Pobol WebBasic - SQL Injection Vulnerability 100 WEB the_cyber_nuxbie
2012-03-12   ActivaDigital- SQL Injection Vulnerability 129 WEB the_cyber_nuxbie
2012-03-12   UEBBI - SQL Injection Vulnerability 99 WEB the_cyber_nuxbie
2012-03-12   LY Network Cart - SQL Injection Vulnerability 115 WEB the_cyber_nuxbie
2012-03-09   RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages) 126 WEB Ivano Binetti
2012-03-09   RazorCMS <= 1.2.1 STABLE File Upload Vulnerability 153 WEB i2sec_Hyo jun Oh
2012-03-09   Toenda CMS 1.6.2 Osaka Stable Local File Inclusion 116 WEB AkaStep
2012-03-08   SQLI Online Shop LeKommerce 115 WEB Mazt0r
2012-03-08   Iciniti Store SQL Injection - Security Advisory - SOS-12-003 115 WEB Lists
2012-03-08   Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities 111 WEB LiquidWorm
2012-03-08   WebfolioCMS <= 1.1.4 Multiple XSS 203 WEB Ivano Binetti
2012-03-08   Symfony 2 Unauthenticated Information Disclosure 132 WEB Phil Taylor
2012-03-08   Log1cms v2.1 Multiple XSRF File (Upload/Download) Vulnerabilities 134 WEB KedAns-Dz
2012-03-08   Zen Cart v.1.5.0 Remote Shell Upload 237 WEB Mr.ExiT
2012-03-06   Drupal CMS 7.12 (latest stable release) Multiple Vulnerabilities 113 WEB Ivano Binetti
2012-03-06   ForkCMS 3.2.5 Multiple Vulnerabilities 97 WEB Ivano Binetti
2012-03-06   lizard cart SQLi (search.php) 103 WEB Number 7
2012-03-06   Symfony2 Local File Disclosure - Security Advisory - SOS-12-002 119 WEB Lists
2012-03-06   EbizCare => SQL Injection Vulnerability 131 WEB dbx
2012-03-06   Open-Realty 2.5.8 Local File Inclusion 114 WEB Transparent
2012-03-06   BigDump Importer v0.32b RFU 159 WEB TeaM MosTa
2012-03-06   piwigo <== SQL Injector 107 WEB TeaM MosTa
2012-03-06   Multiple SQL injections in rivettracker <=1.03 102 WEB Ali Raheem
2012-03-06   CnnCMS 1.x SQL Injection Vulnerability 116 WEB X-Cisadane
2012-03-05   AneCMS v.2e2c583 LFI exploit 108 WEB I2sec-PJH
2012-03-05   deV!L`z Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability 145 WEB Easy Laster
2012-03-04   Timesheet Next Gen 1.5.2 Multiple SQLi 96 WEB G13
2012-03-04   Multiple SQL injection rivettracker <=1.03 124 WEB Ali Raheem
2012-03-03   Infoserve SQL Vulnerability 102 WEB Optimiz3r
2012-03-03   Endian UTM Firewall v2.4.x & v2.5.0 - Multiple Web Vulnerabilities 115 WEB expku
2012-03-03   Wpmanager version wpm 2.2.0 (FCKeditor) Remote File Upload 147 WEB T0x!c
2012-03-03   phxEventManager 2.0 beta 5 search.php search_terms SQL Injection 131 WEB skysbsb
2012-03-01   Wolf CMS v0.7.5 Multiple Vulnerabilities 114 WEB longrifle0x
2012-03-01   ImgPals Photo Host Version 1.0 Admin Account Disactivation 120 WEB CorryL
2012-03-01   Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability 127 WEB Narendra Shinde
2012-03-01   Topics Viewer CSRF Add Admin 117 WEB Green Hornet
2012-03-01   BrewBlogger v2.3.2 Multiple (XSRF/ShellUpload/SQLi) Vulnerabilities 106 WEB KedAns-Dz
2012-02-29   WebfolioCMS <= 1.1.4 CSRF (Add Admin/Modify Pages) 109 WEB Ivano Binetti
2012-02-28   Bitweaver v2.81 Local File Inclusion Vulnerability 110 WEB I2sec-PJH
2012-02-28   Dotclear 2.4.2 Arbitrary File Upload Vulnerability 104 WEB T0x!c
2012-02-28   ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article) 116 WEB Ivano Binetti
2012-02-27   YVS Image Gallery Sql Injection 116 WEB CorryL
2012-02-27   CreateVision CMS Database injection. 170 WEB Zwierzchowski Oskar
2012-02-27   webgrind 1.0 (file param) Local File Inclusion Vulnerability 182 WEB LiquidWorm
2012-02-27   cPassMan v1.82 Remote Command Execution Exploit 98 WEB ls
2012-02-27   PHP Gift Registry 1.5.5 SQL Injection 110 WEB G13
2012-02-24   Snom IP Phone Privilege Escalation - Security Advisory - SOS-12-001 102 WEB Lists
2012-02-24   phpDenora <= 1.4.6 Multiple SQL Injection Vulnerabilities 142 WEB KnickLighter
2012-02-24   The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution 122 WEB Danny Moules
2012-02-23   DFLabs PTK <= 1.0.5 Multiple Vulnerabilities (Steal Authentication Credentials) 113 WEB Ivano Binetti
2012-02-23   D-Link DSL-2640B Authentication Bypass 97 WEB Ivano Binetti
2012-02-23   WebcamXP and Webcam 7 Directory Traversal Vulnerability 130 WEB Silent Dream
2012-02-23   Dlink DCS series CSRF Change Admin Password 123 WEB rigan
2012-02-23   BRIM < 2.0.0 SQL Injection 110 WEB ifnull
2012-02-23   ForkCMS 3.2.5 Multiple Vulnerabilities 119 WEB Ivano Binetti
2012-02-23   Sagem F@ST 2604 CSRF Vulnerability (ADSL Router) 125 WEB KinG Of PiraTeS
2012-02-23   Limesurvey (PHPSurveyor v.1.91+ stable) Blind SQL Injection 111 WEB TorTukiTu
2012-02-23   VOXTRONIC Voxlog Professional 3.7.2.729 SQL Injection 330 WEB J. Greil
2012-02-23   TestLink SQL Injection Vulnerabilities 129 WEB Juan M. Natal
2012-02-23   Cisco Linksys WAG54GS (ADSL Router) change admin password 103 WEB Ivano Binetti
2012-02-23   MySQLDumper v1.2x.x SQL Injection/Execute Vulnerability 157 WEB KedAns-Dz
2012-02-23   Beats Website SQL Injection Vulnerability 118 WEB system k1ller
2012-02-22   Cisco Linksys WAG54GS CSRF Change Admin Password 134 WEB Ivano Binetti
2012-02-21   PlumeCMS <= 1.2.4 CSRF Vulnerability 95 WEB Ivano Binetti
2012-02-21   D-Link DSL-2640B (ADSL Router) CSRF Vulnerability 145 WEB Ivano Binetti
2012-02-21   Joomla com_etree Blind SQL-inj Vuln 117 WEB Mach1ne
2012-02-20   SyndeoCMS <= 3.0 CSRF Vulnerability 92 WEB Ivano Binetti
2012-02-20   4PSA CMS SQL Injection Vulnerabilities 85 WEB BHG Security Center
2012-02-20   almnzm 2.4 <= CSRF Vulnerability (Add Admin) 198 WEB HaNniBaL KsA
2012-02-20   Pandora FMS v4.0.1 - Local File Include Vulnerability 125 WEB Vulnerability-Lab
2012-02-20   Mitra Iranian CMS Remote File Upload 130 WEB Nitrojen90
2012-02-20   Joomla Component com_x-shop (idd) <= SQLi Vulnerability 99 WEB KedAns-Dz
2012-02-20   Joomla Component (com_xcomp) <= Local File Inclusion Vulnerability 104 WEB KedAns-Dz
2012-02-20   Joomla Component (com_xvs) <= Local File Inclusion Vulnerability 110 WEB KedAns-Dz
2012-02-20   CDPI Software SQL Injection Vulnerability 119 WEB ITTIHACK
2012-02-20   TopForm CMS SQL Injection Vulnerability 123 WEB faza02
2012-02-20   Solgens SQLInjection Vulnerability 99 WEB the_cyber_nuxbie
2012-02-20   Pirelli Discus DSL-DRGA112-07 Remote Change Password 104 WEB Daniel Godoy
2012-02-20   Telerom CMS SQLi Vulnerability 98 WEB ITTIHACK
2012-02-17   SocialCMS CSRF Vulnerability 119 WEB Ivano Binetti
2012-02-17   LEPTON 1.1.3 SQL Injection / XSS / Local File Inclusion 198 WEB expku
2012-02-17   BuyWebArt <<< SQL Injection Vulnerability 123 WEB Infamous