Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-06-07   Angora Guestbook 1.5 Local File Inclusion 119 WEB AutoSec Tools
2011-06-07   Multiple WordPress Themes Cross Site Scripting 120 WEB Best wishes
2011-06-07   vBulletin 3.x vBExperience Cross Site Scripting 154 WEB Mr.ThieF
2011-06-07   vBulletin 4.1.3 Open Redirect 175 WEB Robert Gilbert
2011-06-07   Unu2 multimedia => SQL Injection 138 WEB Sideswipe
2011-06-07   SmartySolution Sql injection 182 WEB Anas
2011-06-07   Kleophatra v0.1.5 'TinyBrowser' File Upload Code Execution (meta) 136 WEB KedAns-Dz
2011-06-07   SpidaNews v1.0 (edit.php) SQL Injection Vulnerability 116 WEB KedAns-Dz
2011-06-07   Joomla Component (com_ccboard) Multiple Vulnerabilities 147 WEB KedAns-Dz
2011-06-07   PopScript Multiple Vulnerabilities 130 WEB NassRawI
2011-06-07   SmartySolution Admin Auth ByPass 182 WEB xConsoLe
2011-06-07   PHP-AddressBook v6.2.12 (view.php) SQL Injection Vulnerability 119 WEB KedAns-Dz
2011-06-07   Radiant Infotech Nepal 2.x.x Multiple Vulnerability 149 WEB Net.Edit0r
2011-06-07   WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Command Injection 143 WEB rgod
2011-06-07   Ushahidi 2.0.1 (range param) SQL Injection Vulnerability (post-auth) 139 WEB LiquidWorm
2011-06-03   discuz! X1.5 Get Shell 叉day[Alibaba后续修改与添加Get Shell代码] 248 WEB alibaba
2011-06-03   9959网店系统 v5.0 Blind SQL injection exploit 139 WEB 闷豆
2011-06-03   Vibrant Creations =>SQL Injection Vulnerability 117 WEB eXeSoul
2011-06-03   mWebnet Admin Auth ByPass 156 WEB xConsoLe
2011-06-03   Epop Studio News SQL Injection 214 WEB Codeine
2011-06-02   Discuz! X1-1.5 notify_credit.php Blind SQL injection exploit 223 WEB toby57
2011-06-02   Serendipity 1.5.5 Event Freetag Cross Site Scripting 164 WEB Stefan Schurtz
2011-06-02   Post Revolution 0.8.0c XSS / XSRF / Denial Of Service 141 WEB Javier Bassi
2011-06-02   A Really Simple Chat (ARSC) 3.3-rc2 XSS / SQL Injection 106 WEB expku
2011-06-02   Nagios 3.2.3 Cross Site Scripting 144 WEB Stefan Schurtz
2011-06-02   Netgear WNDAP350 Root Password Disclosure 196 WEB Juerd Waalboer
2011-06-02   MediaCluster (mcCMS) Arbitrary File Upload Vulnerability 88 WEB RoAd_KiLlEr
2011-06-02   Vibrant Creations =>SQL Injection Vulnerability 126 WEB eXeSoul
2011-06-02   Icinga 1.3.0 / 1.4.0 Cross Site Scripting 120 WEB Stefan Schurtz
2011-06-02   byTolinet Agencia <= Remote 'conexion.php' Disclosure Exploit 145 WEB KnocKout
2011-06-02   Innovative Web SQL Injection Vulnerability 138 WEB Kalashinkov3
2011-06-02   ROCKETMEDIA (index.php) Blind SQL-i Vulnerability 122 WEB Kalashinkov3
2011-06-02   World e Mart(news/event/page)=>SQL Injection Vulnerability 121 WEB eXeSoul
2011-06-02   WebC.be <= Remote 'db_login.php' Disclosure Exploit 150 WEB KnocKout
2011-06-02   Pika CMS <= 'showSource.php' Local File Inclusion 137 WEB KnocKout
2011-06-02   Pika CMS <= Remote 'baza_mysql.php' Disclosure Exploit 124 WEB KnocKout
2011-06-02   TEDE Simplificado <= (Versions) SQL Injection Vulnerability 122 WEB KnocKout
2011-06-02   Chiangmai Webdesign (webboardAnswer.php)<= Blind SQL injection Vulnerability 120 WEB Caddy-Dz
2011-06-02   xinha Arbitrary File Upload Vulnerability 192 WEB xConsoLe
2011-06-01   Joomla 1.6.x Administrator PHP Code Execution 101 WEB James Bercegay
2011-06-01   Joomla 1.6.0 SQL Injection 115 WEB James Bercegay
2011-06-01   Kentico CMS 5.5R2.23 Cross Site Scripting 125 WEB LiquidWorm
2011-06-01   Websolutions SQL Injection Vulnerability 217 WEB Kalashinkov3
2011-06-01   GloDerWorks SQL Injection Vulnerability 142 WEB Kalashinkov3
2011-06-01   Mlffat 2.3 SQL Injection Vulnerability 168 WEB KinG Of PiraTeS
2011-06-01   Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities 122 WEB v3n0m
2011-06-01   Belkin G Wireless Router Admin Exploit 125 WEB Aodrulez
2011-06-01   eFront Educational <=XSRF (Add admin/change admin passwd) 159 WEB Caddy-Dz
2011-06-01   eFront Community++ <=XSRF (Add admin/change admin passwd) 132 WEB Caddy-Dz
2011-06-01   eFront enterprise <=XSRF (Add admin/change admin passwd) 115 WEB Caddy-Dz
2011-05-31   Callisto 821+ Cross Site Request Forgery / Cross Site Scripting 128 WEB MustLive
2011-05-31   Forticlient SSL VPN Symlink Overwrite 330 WEB expku
2011-05-31   TinyMCE AjaxFileManager Shell Upload 200 WEB Dr Trojan
2011-05-31   Apache Archiva 1.3.4 Cross Site Request Forgery 127 WEB expku
2011-05-31   Apache Archiva 1.3.4 Cross Site Scripting 110 WEB expku
2011-05-31   SQL Injection Vulnerbility in Dreamzsop 139 WEB lionaneesh
2011-05-31   PHP Inventory <= XSRF Vulnerabelity 114 WEB Caddy-Dz
2011-05-31   ApPHP Shopping Cart <= XSRF (Change Admin Password) 153 WEB Caddy-Dz
2011-05-31   Belkin G Wireless Router F5D7234-4 v5 Exploit 135 WEB Aodrulez
2011-05-31   Easy Media Script SQL Injection Vulnerability 103 WEB Lagripe-Dz
2011-05-31   w-Agora Forum 4.2.1 Arbitrary File Upload Exploit 110 WEB Treasure Priyamal
2011-05-30   风讯(FoosunCMS) SetNextOptions.asp注入漏洞利用 149 WEB expku
2011-05-30   Lil' HTTP Server 2.2 Cross Site Scripting 127 WEB expku
2011-05-30   Apache Archiva 1.3.4 Cross Site Request Forgery 115 WEB expku
2011-05-30   LilHTTP Source Code Disclosure/Download 125 WEB Treasure Priyamal
2011-05-30   AIDeX Mini-Webserver 1.4 integrated Chat Javascript 138 WEB wingthor
2011-05-30   WysGui <= 2.3 (FCKeditor) File Upload Code Execution (meta) 107 WEB KedAns-Dz
2011-05-30   Bitweaver 2.x (FCKeditor) File Upload Code Execution (meta) 103 WEB KedAns-Dz
2011-05-30   Cotonti <=0.9.2 Blind SQL Injection Vulnerability 108 WEB KedAns-Dz
2011-05-30   FineArtPost <= SQL injection Vulnerabelity 82 WEB Caddy-Dz
2011-05-30   Ishikatech <= SQL injection Vulnerabelity 138 WEB Caddy-Dz
2011-05-30   Andabate.com SQL Injection Vulnerability 150 WEB magret
2011-05-30   html_edit CMS <= 3.1.x Multiple (XSRF/CSRF) Vulnerabilites 108 WEB KedAns-Dz
2011-05-30   AlegroCart <= 1.2.x (category_next) Blind SQL Injection Vulnerability 151 WEB KedAns-Dz
2011-05-30   Cotonti <=0.9.2 Multiple Vulnerabilities 144 WEB KedAns-Dz
2011-05-30   Invisionix Roaming System Remote metasys 0.2 LFI Vulnerability 153 WEB Treasure Priyamal
2011-05-30   Puzzle Apps CMS 3.2 Local File Inclusion 175 WEB Treasure Priyamal
2011-05-30   Joomla Component com_joomnik SQL Injection Vulnerability 165 WEB SOLVER
2011-05-30   Joomla Component com_jmsfileseller Local File Inclusion Vulnerability 148 WEB Valentin
2011-05-30   Guru Penny Auction Pro V3 Blind SQL Injection Vulnerability 150 WEB v3n0m
2011-05-30   Duhok Forum 1.1 SQL Injection Vulnerability 134 WEB M.Jock3R
2011-05-30   cPanel < 11.25 CSRF - Add User php Script 181 WEB ninjashell
2011-05-30   HB Ecommerce SQL Injection Vulnerability 146 WEB takeshix
2011-05-27   Clipbucket 2.4 RC2 645 SQL Injection Vulnerability 257 WEB AutoSec Tools
2011-05-27   Design Extensions (Admin) Auth Bypass/File Upload 151 WEB Kalashinkov3
2011-05-26   eGroupware 1.8.001.20110421 Multiple Vulnerabilities 157 WEB AutoSec Tools
2011-05-26   ExtCalendar 2.0b2 (cal_search.php) SQL Injection Vulnerability 136 WEB High-Tech Bridge SA
2011-05-26   i-doIT 0.9.9-4 LFI Vulnerability 118 WEB AutoSec Tools
2011-05-26   Tickets 2.13 SQL Injection Vulnerability 136 WEB AutoSec Tools
2011-05-26   Pixprod SQL Injection Vulnerability 149 WEB Kalashinkov3
2011-05-25   HP System Management Homepage Cross Site Scripting 187 WEB Secunia
2011-05-25   DH Softwares Auth Bypass Vulnerability 211 WEB Kalashinkov3
2011-05-25   MidiCMS-WB (2011) Multiple Vulnerabilities 190 WEB KedAns-Dz
2011-05-24   smart vision (newsdetail.php) SQL Injection Vulnerability 111 WEB Net.Edit0r
2011-05-24   Ciphertek Systems(snapshots.php)&(detail.php)=>SQL Injection Vulnerability 147 WEB eXeSoul
2011-05-24   Acuity CMS Vulnerable to Blind SQL Injection 166 WEB p0pc0rn
2011-05-24   Pligg CMS v1.1.4 Multiple (XSRF/CSRF) Vulnerabilities 123 WEB KedAns-Dz
2011-05-24   Homepages Admin (index.php)=>(Auth Bypass) Vulnerability 139 WEB eXeSoul
2011-05-24   PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability 158 WEB ^Xecuti0n3r
2011-05-24   MODx Revolution 2.0.8-pl CMS XSRF Vulnerability (Add new user) 135 WEB ^Xecuti0n3r
2011-05-24   MyLittleForum 2.2.7 CMS XSRF Vulnerability (Add new user) 217 WEB ^Xecuti0n3r
2011-05-24   Textpattern 4.3.0 CMS XSRF Vulnerability (Change Admin's Password) 136 WEB ^Xecuti0n3r
2011-05-24   Joomla Component maplocator SQL Injection Vulnerability 160 WEB Fl0riX
2011-05-24   PHPortfolio SQL Injection Vulnerbility 150 WEB lionaneesh
2011-05-23   xtcModified <= 1.05 (FCKeditor) Multiple Vulnerabilities 145 WEB KedAns-Dz
2011-05-23   Collabtive v065 Multiple (CSRF/XSRF) Vulnerabilities 146 WEB KedAns-Dz
2011-05-23   ChromeMedia SQL Injection Vulnerability 161 WEB Kalashinkov3
2011-05-23   werkform (index.php) <= SQL Injection Vulnerability 164 WEB Caddy-Dz
2011-05-23   chillyCMS v1.2.x (CSRF/FD/RFI) Multiple Vulnerabilities 114 WEB KedAns-Dz
2011-05-23   NucleusCMS v3.64 Multiple (CSRF) Vulnerabilities 140 WEB KedAns-Dz
2011-05-23   Mathew Callingham Associatess 3.x.x Multiple Vulnerability 146 WEB Net.Edit0r
2011-05-23   vBulletin 4.0.x => 4.1.2 (search.php) SQL Injection Vulnerability 166 WEB D4rkB1t
2011-05-23   ZabetAgahi SQLInjection Vulnerability 156 WEB 3H34N
2011-05-23   PHP Captcha / Securimage 2.0.2 - Authentication Bypass - SO-11-007 158 WEB Sense of Security
2011-05-23   E-Manage MySchool 7.02 SQL Injection Vulnerability 155 WEB az7rb
2011-05-23   Zen Cart <= v1.3.9h Multiple Vulnerabilities 147 WEB Alberto Fontanella
2011-05-23   Tugux CMS 1.2 Multiple Remote Vulnerabilities 205 WEB LiquidWorm
2011-05-23   Ultimate PHP Board 2.2.7 Broken Authentication and Session Management 147 WEB i2sec
2011-05-23   Easy Contact 0.1.2 WordPress Plugin Cross Site Scripting 147 WEB Websecurity
2011-05-20   Rootage 1.0.0.4 Alpha Directory Traversal 138 WEB AutoSec Tools
2011-05-20   Room Juice 0.3.3 Cross Site Scripting 114 WEB AutoSec Tools
2011-05-20   Aphpkb 0.95.4 PHP Execution 157 WEB AutoSec Tools
2011-05-20   Trade Line Web <= Remote 'id' Funcs SQL-i Vulnerabilities 225 WEB knockout
2011-05-19   TWiki 5.0.1 Cross Site Scripting 184 WEB Netsparker Advisories
2011-05-19   99ko <= 0.4b Multiple (CSRF/XSRF) Vulnerabilities 374 WEB KedAns-Dz