Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-10-11   6kbbs Multiple Vulnerabilities 103 WEB labs insight
2011-10-11   Filmis 0.2 Beta Multiple Vulnerabilities 84 WEB M.Jock3R
2011-10-11   KaiBB 2.0.1 SQL Injection vulnerability 103 WEB Stefan Schurtz
2011-10-11   openEngine 2.0 Multiple Blind SQL Injection vulnerabilities 99 WEB Stefan Schurtz
2011-10-11   myBB 1.6.4 Backdoor Exploit 148 WEB tdz
2011-10-11   Snortreport nmap.php and nbtscan.php Remote Command Execution 111 WEB Paul Rascagneres
2011-10-10   Sparhawk (shop) SQL Injection Vulnerability 234 WEB Kalashinkov3
2011-10-10   GotoCode Online Classifieds Multiple Vulnerabilities 99 WEB Nathaniel Carew
2011-10-09   JAK CONTENT MANAGEMENT SYSTEM PRO Persistent Cross-site Scripting 109 WEB Sid3^effects aKa HaRi
2011-10-09   Joomla Barter Site (com_listing) Multiple Vulnerabilites 121 WEB Sid3^effects aKa HaRi
2011-10-09   NexusPHP v1.5 SQL Injection 116 WEB flyh4t
2011-10-09   Joomla Component Time Returns (com_timereturns) SQL Injection 106 WEB kaMtiEz
2011-10-09   BOOKSolved 1.2.2 Remote File Disclosure 123 WEB bd0rk
2011-10-08   Feed on Feeds <= 0.5 Remote PHP Code Injection Exploit 315 WEB EgiX
2011-09-30   Typo3 File Disclosure 108 WEB Number 7
2011-09-29   Bintech Systems LLC Admin Auth Bypass Exploit 155 WEB Angel Injection
2011-09-29   SabadKharid Remote Arbitrary File Upload Exploit 129 WEB St493r
2011-09-29   TimeLive Time and Expense Tracking <= Multiple Vulnerabilities 114 WEB Nathaniel Carew
2011-09-29   E107 Persian Directory Traversal & Arbitrary File Download 135 WEB St493r
2011-09-29   Tajan System Arbitrary File Download Vulnerability 120 WEB St493r
2011-09-29   redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability 122 WEB Mbah_Semar
2011-09-29   Multiple Vulnerability in "Omnidocs" 131 WEB Sohil Garg
2011-09-29   TimeLive Time and Expense Tracking 4.1.1 Multiple Vulnerabilities 106 WEB Nathaniel Carew
2011-09-28   redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability 114 WEB Indonesian BlackCoder
2011-09-28   Multiple Vulnerability in Omnidocs 100 WEB Sohil Garg
2011-09-28   Jarida 1.0 Multiple Vulnerabilities 87 WEB Ptrace Security
2011-09-28   WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability 112 WEB Miroslav Stampar
2011-09-27   WordPress CevherShare Plugin 2.0 SQL Injection 238 WEB bd0rk
2011-09-21   NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF 105 WEB Sense of Security
2011-09-21   File disclosure via XEE in SharePoint 2007/2010 and DotNetNuke < 6 94 WEB Nicolas Gregoire
2011-09-20   Multiple Wordpress Plugin timthumb.php Vulnerabilites 221 WEB Ben Schmidt
2011-09-20   Cisco TelePresence Multiple Vulnerabilities - SOS-11-010 86 WEB Lists
2011-09-20   Wordpress Relocate Upload Plugin 0.14 Remote File Inclusion 91 WEB Ben Schmidt
2011-09-20   Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion 137 WEB Ben Schmidt
2011-09-20   Wordpress Zingiri Web Shop Plugin 2.2.0 Remote File Inclusion 151 WEB Ben Schmidt
2011-09-20   Wordpress Mailing List Plugin 1.3.2 Remote File Inclusion 125 WEB Ben Schmidt
2011-09-20   Wordpress Disclosure Policy Plugin 1.0 Remote File Inclusion 115 WEB Ben Schmidt
2011-09-20   Wordpress Livesig Plugin 0.4 Remote File Inclusion 100 WEB Ben Schmidt
2011-09-20   Wordpress Annonces Plugin 1.2.0.0 Remote File Inclusion 101 WEB Ben Schmidt
2011-09-20   Wordpress WPEasyStats Plugin 1.8 Remote File Inclusion 104 WEB Ben Schmidt
2011-09-20   Wordpress AllWebMenus Plugin 1.1.3 Remote File Inclusion 97 WEB Ben Schmidt
2011-09-20   Wordpress TheCartPress Plugin 1.1.1 Remote File Inclusion 119 WEB Ben Schmidt
2011-09-20   Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability 129 WEB LiquidWorm
2011-09-20   WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability 114 WEB Septemb0x
2011-09-16   StarDevelop.LiveHelp <= v2.0 (index.php) Local File Include Vulnerability 243 WEB KedAns-Dz
2011-09-16   Nortel Contact Recording Centralized Archive 6.5.1 SQL Injection Exploit 111 WEB rgod
2011-09-15   Cogent DataHub <= 7.1.1.63 Source Disclosure 138 WEB Luigi Auriemma
2011-09-15   WordPress Plugins (editormonkey-FCKe) Multiple File Upload Vulnerabilities 195 WEB KedAns-Dz
2011-09-15   WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability 122 WEB Miroslav Stampar
2011-09-09   OpenCart v1.5.1.2 / Blind SQL Vulnerability 162 WEB RiRes Walid
2011-09-09   MyAuth3 Blind SQL Injection 126 WEB Marcio Almeida
2011-09-09   Pluck 4.7 multiple vulnerabilities 117 WEB Bl4k3
2011-09-09   Wordpress 1 Flash Gallery Plugin Arbiraty File Upload Exploit (MSF) 254 WEB Ben Schmidt
2011-09-09   AM4SS 1.2 CSRF add admin Vulnerability 103 WEB red virus
2011-09-09   WordPress Community Events plugin <= 1.2.1 SQL Injection Vulnerability 138 WEB Miroslav Stampar
2011-09-09   WordPress Paid Downloads plugin <= 2.01 SQL Injection Vulnerability 119 WEB Miroslav Stampar
2011-09-08   WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection Vulnerability 146 WEB Miroslav Stampar
2011-09-08   WordPress SCORM Cloud plugin <= 1.0.6.6 SQL Injection Vulnerability 108 WEB Miroslav Stampar
2011-09-07   PlaySMS 0.9.5.2 <= Remote File Inclusion Vulnerability 124 WEB NoGe
2011-09-07   WordPress KNR Author List Widget plugin <= 2.0.0 SQL Injection Vulnerability 130 WEB Miroslav Stampar
2011-09-07   WordPress post highlights plugin <= 2.2 SQL Injection Vulnerability 104 WEB Miroslav Stampar
2011-09-07   WordPress Tweet Old Post plugin <= 3.2.5 SQL Injection Vulnerability 107 WEB sherl0ck_
2011-09-06   Webmobo WB News System Blind SQL Injection 144 WEB Eyup CELIK
2011-09-06   Elite Gaming Ladders v3.6 SQL Injection Vulnerability 158 WEB J.O
2011-09-06   WordPress oQey Gallery plugin <= 0.4.8 SQL Injection Vulnerability 106 WEB Miroslav Stampar
2011-09-05   Openads-2.0.11 Remote File inclusion Vulnerability 148 WEB HaCkErS eV!L
2011-08-30   WordPress iCopyright(R) Article Tools plugin <= 1.1.4 SQL Injection 139 WEB Miroslav Stampar
2011-08-30   WordPress SH Slideshow plugin <= 3.1.4 SQL Injection Vulnerability 128 WEB Miroslav Stampar
2011-08-29   cPanel Cross Site Request Forgery 134 WEB Net.Edit0r
2011-08-26   WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability 107 WEB evilsocket
2011-08-26   Mambo 4.6.5 CSRF Vuln (Change Admin Password) 126 WEB Caddy-Dz
2011-08-26   Zazavi <=1.2.1 Multiple (XSRF + Shell Upload) Vulnerabilities 134 WEB KedAns-Dz
2011-08-26   WordPress Yoast v4.1.3 Local File Disclosure Vulnerability 151 WEB Angel Injection
2011-08-25   Help Desk Software 1.1g XSRF (add admin) Vulnerability 130 WEB G13
2011-08-24   ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities 270 WEB LiquidWorm
2011-08-23   WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability 162 WEB Miroslav Stampar
2011-08-18   WordPress OdiHost Newsletter plugin <= 1.0 SQL Injection Vulnerability 99 WEB Miroslav Stampar
2011-08-18   WordPress Easy Contact Form Lite plugin <= 1.0.7 SQLi 103 WEB Miroslav Stampar
2011-08-18   WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability 127 WEB Miroslav Stampar
2011-08-18   WordPress Contus HD FLV Player plugin <= 1.3 SQL Injection Vulnerability 109 WEB Miroslav Stampar
2011-08-18   WordPress File Groups plugin <= 1.1.2 SQL Injection Vulnerability 101 WEB Miroslav Stampar
2011-08-18   SoftwareDEP Classified Script SQL Injection Vulnerability 115 WEB v3n0m
2011-08-18   Joomla JoomTouch Component Local File Inclusion Vulnerability 135 WEB NoGe
2011-08-18   Precision Technologies(page.php)sql Injection Vulnerability 118 WEB Angel Injection
2011-08-18   Contrexx Shopsystem Blind SQL Injection Exploit 246 WEB Penguin
2011-08-17   Elgg 1.8 beta2 and prior to 1.7.11 'container_guid' and 'owner_guid' 250 WEB Lostmon
2011-08-17   the GoNC Network(view.php)Blind Sql Injection Vulnerability 123 WEB Angel Injection
2011-08-17   The LAD Melbourne Cms Sql Injection Vulnerability 209 WEB Netrondoank Aka netron
2011-08-17   WordPress IP-Logger Plugin <= 3.0 SQL Injection Vulnerability 144 WEB Miroslav Stampar
2011-08-15   Contrexx Shopsystem <= 2.2 SP3 Blind SQL Injection 195 WEB Penguin
2011-08-15   Prediction Football 2.51 XRF / CSRF 105 WEB Smith Falcon
2011-08-15   WebsiteBaker 2.8.1 <= Multiple Vulnerabilities 166 WEB Aung Khant
2011-08-15   Mambo CMS 4.6.x (4.6.5) SQL Injection Vulnerability 239 WEB Aung Khant
2011-08-15   Kahf Poems V1.0 Multiple Vulnerabilities 124 WEB Yassin Aboukir
2011-08-15   videoDB <= 3.1.0 SQL Injection Vulnerability 140 WEB Andreas Gohr
2011-08-15   Allomani Songs & Clips 2.x (msg_id) Blind SQL Injection Exploit 158 WEB ahwak2000
2011-08-15   Bit-7 Informatics Auth Bypass Vulnerability 117 WEB Caddy-Dz
2011-08-15   PhpMyadmin XSRF Vuln (Execute SQL Query) 148 WEB Caddy-Dz
2011-08-15   Rfi PHP Flat File Guestbook 150 WEB RiRes Walid
2011-08-12   WordPress plugin St Newsletter (FCKeditor) File Upload 168 WEB failed_404
2011-08-12   cPanel 11.x Fantastico LFI Exploit Vulnerability Security Bypass 146 WEB ahwak2000
2011-08-12   Powered by Linesis(index.asp) sql-i Vulnerability 154 WEB Angel Injection
2011-08-12   Adobe RoboHelp 9 DOM Cross Site Scripting 154 WEB Roberto Suggi Liverani
2011-08-11   DEDECMS拿SHELL EXP 280 WEB expku
2011-08-11   FCKeditor all versian Arbitrary File Upload Vulnerability 124 WEB pentesters.ir
2011-08-05   DZYGroup CMS Portal Multiple SQL Injection Vulnerabilities 124 WEB Netrondoank
2011-08-05   Powered By Marc Merlin BAPPA ==> LFI Vulnerability 126 WEB Kalashinkov3
2011-08-05   am4ss v1.1 Remote Code Execution 118 WEB Or4nG.M4n
2011-08-04   Joomla Component (com_jdirectory) SQL Injection Vulnerability 115 WEB Caddy Dz
2011-08-04   WordPress TimThumb Plugin - Remote Code Execution 119 WEB MaXe
2011-08-04   cPanel 11.x (Fantastico) Local File Include / SM-b0x 212 WEB ZxH-Labs
2011-08-03   SiteGenius Blind SQL injection Vulnerability 111 WEB AutoRUN and dR.sqL
2011-08-03   CA Arcserve D2D GWT RPC Credential Information Disclosure 151 WEB bannedit
2011-08-03   Title Web Solutions Blind SQL-i Vulnerability 122 WEB Kalashinkov3
2011-08-02   MyBB 0day \ MyTabs (plugin) SQL injection vulnerability 151 WEB AutoRUN
2011-08-02   Zoneminder 1.24.3 Remote File Inclusion Vulnerability 125 WEB Iye
2011-08-02   CMSPro! 2.08 Cross Site Request Forgery (CSRF) Vulnerability 134 WEB Xadpritox
2011-08-01   cFTP <= 0.1 (r80) Arbitrary File Upload 145 WEB leviathan
2011-07-29   Joomla 1.5 com_virtuemart <= 1.1.7 Blind time-based SQL Injection (MSF) 220 WEB TecR0c
2011-07-29   Braden Fleischer..SQL injection Vulnerability 109 WEB k's0uR!
2011-07-28   Sagem 3304 Router PPPOE Password Retrieval 109 WEB securititracker
2011-07-28   Cross-Site Request Forgery in SWAT (Samba Web Administration Tool) 125 WEB Narendra Shinde
2011-07-25   ExtCalendar2 (Auth Bypass/Cookie) SQL Injection 144 WEB Lagripe-Dz
2011-07-22   Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability 121 WEB v3n0m
2011-07-22   Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day 81 WEB FB1H2S