|
2013-12-30
|
|
CMS Afroditi - 'id' SQL Injection
|
28 |
WEB
|
projectzero labs
|
|
2015-12-10
|
|
Skybox Platform < 7.0.611 - Multiple Vulnerabilities
|
33 |
WEB
|
SEC Consult
|
|
2015-12-10
|
|
Gökhan Balbal Script 2.0 - Cross-Site Request Forgery
|
29 |
WEB
|
KnocKout
|
|
2015-12-10
|
|
iy10 Dizin Scripti - Multiple Vulnerabilities
|
25 |
WEB
|
KnocKout
|
|
2013-12-17
|
|
WordPress Core 2.0.11 - '/wp-admin/options-discussion.php' Script Cross-Site Request Forgery
|
25 |
WEB
|
MustLive
|
|
2013-12-25
|
|
AFCommerce - 'controlheader.php' Remote File Inclusion
|
28 |
WEB
|
NoGe
|
|
2013-12-25
|
|
AFCommerce - 'adminpassword.php' Remote File Inclusion
|
23 |
WEB
|
NoGe
|
|
2013-12-25
|
|
AFCommerce - 'adblock.php' Remote File Inclusion
|
24 |
WEB
|
NoGe
|
|
2013-12-26
|
|
JForum 'adminUsers' Module - Cross-Site Request Forgery
|
26 |
WEB
|
arno
|
|
2015-12-09
|
|
WordPress Plugin WP Easy Poll 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery
|
25 |
WEB
|
Mysticism
|
|
2015-12-09
|
|
WIMAX MT711x - Multiple Vulnerabilities
|
30 |
WEB
|
alimp5
|
|
2015-12-09
|
|
WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities
|
25 |
WEB
|
alimp5
|
|
2013-12-18
|
|
Leed - 'id' SQL Injection
|
23 |
WEB
|
Alexandre Herzog
|
|
2013-12-14
|
|
Osclass - Multiple Input Validation Vulnerabilities
|
24 |
WEB
|
R3d-D3V!L
|
|
2015-12-08
|
|
dotCMS 3.2.4 - Multiple Vulnerabilities
|
24 |
WEB
|
LiquidWorm
|
|
2015-12-08
|
|
WordPress Plugin Polls Widget 1.0.7 - SQL Injection
|
27 |
WEB
|
WICS
|
|
2015-12-08
|
|
PHP Utility Belt - Remote Code Execution
|
29 |
WEB
|
WICS
|
|
2015-12-08
|
|
OpenMRS 2.3 (1.11.4) - Local File Disclosure
|
30 |
WEB
|
LiquidWorm
|
|
2015-12-08
|
|
OpenMRS 2.3 (1.11.4) - Multiple Cross-Site Scripting Vulnerabilities
|
20 |
WEB
|
LiquidWorm
|
|
2015-12-08
|
|
OpenMRS 2.3 (1.11.4) - Expression Language Injection
|
21 |
WEB
|
LiquidWorm
|
|
2015-12-08
|
|
OpenMRS 2.3 (1.11.4) - XML External Entity Processing
|
35 |
WEB
|
LiquidWorm
|
|
2015-12-08
|
|
SIMOGEO FileManager 2.3.0 - Multiple Vulnerabilities
|
21 |
WEB
|
HaHwul
|
|
2013-12-15
|
|
iScripts AutoHoster - 'id' Local File Inclusion
|
18 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'fname' Local File Inclusion
|
21 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'tmpid' Local File Inclusion
|
22 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'main_smtp.php' Traversal
|
24 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'invno' SQL Injection
|
24 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'additionalsettings.php' SQL Injection
|
20 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'checktransferstatusbck.php' SQL Injection
|
26 |
WEB
|
i-Hmx
|
|
2013-12-15
|
|
iScripts AutoHoster - 'checktransferstatus.php' SQL Injection
|
26 |
WEB
|
i-Hmx
|
|
2013-12-13
|
|
Dynamic Biz Website Builder 'QuickWeb' 1.0 - '/login.asp' Multiple Field SQL Injections / Authentica
|
23 |
WEB
|
R3d-D3V!L
|
|
2013-12-13
|
|
Dynamic Biz Website Builder (QuickWeb) 1.0 - '/apps/news-events/newdetail.asp?id' SQL Injection
|
21 |
WEB
|
R3d-D3V!L
|
|
2013-12-17
|
|
Piwigo - 'admin.php' Cross-Site Request Forgery (User Creation)
|
21 |
WEB
|
sajith
|
|
2013-12-11
|
|
Veno File Manager - 'q' Arbitrary File Download
|
18 |
WEB
|
Daniel Godoy
|
|
2013-12-14
|
|
Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections
|
23 |
WEB
|
R3d-D3V!L
|
|
2013-12-16
|
|
C2C Forward Auction Creator - '/auction/casp/Admin.asp' SQL Injection (Admin Authentication Bypass)
|
21 |
WEB
|
R3d-D3V!L
|
|
2013-12-16
|
|
C2C Forward Auction Creator 2.0 - '/auction/asp/list.asp?pa' SQL Injection
|
19 |
WEB
|
R3d-D3V!L
|
|
2013-12-09
|
|
osCMax - Arbitrary File Upload / Full Path Information Disclosure
|
21 |
WEB
|
KedAns-Dz
|
|
2013-12-13
|
|
BoastMachine - 'blog' SQL Injection
|
23 |
WEB
|
Omar Kurt
|
|
2013-12-11
|
|
eduTrac - 'showmask' Directory Traversal
|
24 |
WEB
|
High-Tech Bridge
|
|
2013-12-08
|
|
WordPress Plugin PhotoSmash Galleries - 'bwbps-uploader.php' Arbitrary File Upload
|
20 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-12-06
|
|
WordPress Plugin Easy Career Openings - 'jobid' SQL Injection
|
20 |
WEB
|
Iranian_Dark_Coders_Team
|
|
2015-12-04
|
|
WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities
|
22 |
WEB
|
KedAns-Dz
|
|
2015-12-04
|
|
WordPress Plugin Sell Download 1.0.16 - Local File Disclosure
|
21 |
WEB
|
KedAns-Dz
|
|
2015-12-04
|
|
WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities
|
19 |
WEB
|
KedAns-Dz
|
|
2013-12-06
|
|
NeoBill 0.9-alpha - 'language' Local File Inclusion
|
20 |
WEB
|
KedAns-Dz
|
|
2013-12-06
|
|
NeoBill - '/install/include/solidstate.php' Multiple SQL Injections
|
19 |
WEB
|
KedAns-Dz
|
|
2013-12-06
|
|
NeoBill - '/modules/nullregistrar/PHPwhois/example.php?query' Remote Code Execution
|
22 |
WEB
|
KedAns-Dz
|
|
2013-12-06
|
|
Enorth Webpublisher CMS - 'thisday' SQL Injection
|
21 |
WEB
|
xin.wang
|
|
2015-12-03
|
|
WordPress Plugin Gwolle Guestbook 1.5.3 - Remote File Inclusion
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2015-12-03
|
|
WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting
|
21 |
WEB
|
Panagiotis Vagenas
|
|
2015-12-03
|
|
WordPress Plugin Users Ultra 1.5.50 - Blind SQL Injection
|
24 |
WEB
|
Panagiotis Vagenas
|
|
2013-12-02
|
|
D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure
|
23 |
WEB
|
tytusromekiatomek
|
|
2013-12-01
|
|
PHPThumb - 'PHPThumb.php' Arbitrary File Upload
|
26 |
WEB
|
DevilScreaM
|
|
2013-11-20
|
|
WordPress Theme Suco - 'themify-ajax.php' Arbitrary File Upload
|
29 |
WEB
|
DevilScreaM
|
|
2013-11-23
|
|
WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery
|
21 |
WEB
|
Haider Mahmood
|
|
2013-11-18
|
|
TomatoCart 1.1.8.2 - 'class' Local File Inclusion
|
22 |
WEB
|
Esac
|
|
2013-11-13
|
|
Testa OTMS - Multiple SQL Injections
|
18 |
WEB
|
Ashiyane Digital Security Team
|
|
2015-12-01
|
|
ZenPhoto 1.4.10 - Local File Inclusion
|
19 |
WEB
|
hyp3rlinx
|
|
2015-12-01
|
|
Belkin N150 Wireless Router F9K1009 v1 - Multiple Vulnerabilities
|
20 |
WEB
|
Rahul Pratap Singh
|
|
2015-12-01
|
|
Invision Power Board (IP.Board) 4.1.4.x - Persistent Cross-Site Scripting
|
19 |
WEB
|
Mehdi Alouache
|
|
2015-12-01
|
|
ntop-ng 2.0.151021 - Privilege Escalation
|
22 |
WEB
|
Dolev Farhi
|
|
2015-12-01
|
|
Kodi 15 - Web Interface Arbitrary File Access
|
21 |
WEB
|
Machiel Pronk
|
|
2015-11-30
|
|
HumHub 0.11.2/0.20.0-beta.2 - SQL Injection
|
22 |
WEB
|
LSE Leading Security Experts GmbH
|
|
2015-11-30
|
|
MyCustomers CMS 1.3.873 - SQL Injection
|
24 |
WEB
|
Persian Hack Team
|
|
2013-11-17
|
|
Limonade Framework - 'limonade.php' Local File Disclosure
|
30 |
WEB
|
Yashar shahinzadeh
|
|
2015-11-28
|
|
SysAid Help Desk Software 14.4.32 b25 - SQL Injection (Metasploit)
|
21 |
WEB
|
hland
|
|
2013-11-01
|
|
WordPress Theme This Way - 'upload_settings_image.php' Arbitrary File Upload
|
29 |
WEB
|
Bet0
|
|
2013-10-21
|
|
Course Registration Management System - Cross-Site Scripting / SQL Injection
|
29 |
WEB
|
Omar Kurt
|
|
2013-10-25
|
|
JReport - 'dealSchedules.jsp' Cross-Site Request Forgery
|
31 |
WEB
|
Poonam Singh
|
|
2013-10-20
|
|
Joomla! Component Maian15 - 'name' Arbitrary File Upload
|
24 |
WEB
|
SultanHaikal
|
|
2013-10-23
|
|
WordPress Theme Daily Deal - Arbitrary File Upload
|
24 |
WEB
|
DevilScreaM
|
|
2013-10-08
|
|
WordPress Plugin WP-Realty - 'listing_id' SQL Injection
|
22 |
WEB
|
Napsterakos
|
|
2013-10-09
|
|
Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
|
23 |
WEB
|
Mateusz Goik
|
|
2013-10-09
|
|
Bugzilla - 'editflagtypes.cgi' Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
Mateusz Goik
|
|
2015-11-24
|
|
WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting
|
27 |
WEB
|
Pier-Luc Maltais
|
|
2013-09-27
|
|
FreeSMS - '/pages/crc_handler.php' Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
Sarahma Security
|
|
2013-09-27
|
|
FreeSMS - '/pages/crc_handler.php?scheduleid' SQL Injection
|
22 |
WEB
|
Sarahma Security
|
|
2013-10-11
|
|
Bilboplanet - 'auth.php' SQL Injection
|
23 |
WEB
|
Omar Kurt
|
|
2015-11-23
|
|
vBulletin 5.x - Remote Code Execution
|
23 |
WEB
|
Mohammad Reza Espargham
|
|
2013-10-10
|
|
Ziteman CMS - Login Page SQL Injection
|
20 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-10-13
|
|
vBulletin 4.1.x - '/install/upgrade.php' Security Bypass
|
22 |
WEB
|
Joshua Rogers
|
|
2013-10-08
|
|
Alienvault Open Source SIEM (OSSIM) - 'Timestamp' Directory Traversal
|
22 |
WEB
|
Ding Yu-Chi
|
|
2013-10-07
|
|
WordPress Plugin Woopra Analytics - 'ofc_upload_image.php' Arbitrary PHP Code Execution
|
22 |
WEB
|
wantexz
|
|
2013-10-03
|
|
WordPress Plugin SEO Watcher - 'ofc_upload_image.php' Arbitrary PHP Code Execution
|
19 |
WEB
|
wantexz
|
|
2013-10-02
|
|
Alienvault Open Source SIEM (OSSIM) 3.1 - 'date_from' Multiple SQL Injections
|
20 |
WEB
|
Yu-Chi Ding
|
|
2013-09-23
|
|
SilverStripe CMS - Multiple HTML Injection Vulnerabilities
|
24 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-09-21
|
|
Joomla! Component JVideoClip 1.5.1 - 'uid' SQL Injection
|
23 |
WEB
|
SixP4ck3r
|
|
2015-11-20
|
|
Cambium ePMP 1000 - Multiple Vulnerabilities
|
23 |
WEB
|
Karn Ganeshen
|
|
2015-11-20
|
|
ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities
|
26 |
WEB
|
Karn Ganeshen
|
|
2015-11-20
|
|
ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities
|
22 |
WEB
|
Karn Ganeshen
|
|
2013-09-20
|
|
MentalJS - Sandbox Security Bypass
|
24 |
WEB
|
Rafay Baloch
|
|
2013-09-20
|
|
Monstra CMS 1.2.0 - 'login' SQL Injection
|
22 |
WEB
|
linc0ln.dll
|
|
2013-09-19
|
|
WordPress Plugin RokMicroNews - 'thumb.php' Multiple Vulnerabilities
|
20 |
WEB
|
MustLive
|
|
2013-09-19
|
|
WordPress Plugin RokIntroScroller - 'thumb.php' Multiple Vulnerabilities
|
28 |
WEB
|
MustLive
|
|
2015-11-19
|
|
Horde Groupware 5.2.10 - Cross-Site Request Forgery
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2015-11-19
|
|
Netwin SurgeFTP Sever 23d6 - Persistent Cross-Site Scripting
|
20 |
WEB
|
Un_N0n
|
|
2013-09-17
|
|
WordPress Plugin RokStories - 'thumb.php' Multiple Vulnerabilities
|
21 |
WEB
|
MustLive
|
|
2013-09-18
|
|
WordPress Plugin RokNewsPager - 'thumb.php' Multiple Vulnerabilities
|
23 |
WEB
|
MustLive
|
|
2013-09-13
|
|
WordPress Plugin mukioplayer4wp - 'cid' SQL Injection
|
25 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-09-10
|
|
eTransfer Lite - 'file name' HTML Injection
|
24 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-09-07
|
|
WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities
|
23 |
WEB
|
anonymous
|
|
2015-11-18
|
|
WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload
|
22 |
WEB
|
Panagiotis Vagenas
|
|
2013-09-03
|
|
Flo CMS - 'archivem' SQL Injection
|
29 |
WEB
|
ACC3SS
|
|
2013-09-03
|
|
dBlog CMS - 'm' SQL Injection
|
28 |
WEB
|
ACC3SS
|
|
2013-08-21
|
|
Xibo - Cross-Site Request Forgery
|
25 |
WEB
|
Jacob Holcomb
|
|
2013-08-21
|
|
Xibo - 'layout' HTML Injection
|
21 |
WEB
|
Jacob Holcomb
|
|
2013-08-29
|
|
appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities
|
23 |
WEB
|
Yashar shahinzadeh
|
|
2013-08-26
|
|
cm3 Acora CMS - 'top.aspx' Information Disclosure
|
21 |
WEB
|
Pedro Andujar
|
|
2013-08-23
|
|
SearchBlox - Multiple Information Disclosure Vulnerabilities
|
23 |
WEB
|
Ricky Roane Jr
|
|
2013-07-31
|
|
Plone - 'in_portal.py' < 4.1.3 Session Hijacking
|
36 |
WEB
|
Cyrill Bannwart
|
|
2013-08-21
|
|
Twilight CMS - DeWeS Web Server Directory Traversal
|
20 |
WEB
|
High-Tech Bridge
|
|
2015-11-16
|
|
ClipperCMS 1.3.0 - Multiple SQL Injections
|
24 |
WEB
|
Curesec Research Team
|
|
2015-11-16
|
|
AlegroCart 1.2.8 - Local/Remote File Inclusion
|
24 |
WEB
|
Curesec Research Team
|
|
2015-11-16
|
|
AlegroCart 1.2.8 - Multiple SQL Injections
|
25 |
WEB
|
Curesec Research Team
|
|
2013-08-20
|
|
Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection
|
22 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-07-16
|
|
MCImageManager - Multiple Vulnerabilities
|
25 |
WEB
|
MustLive
|
|
2015-11-16
|
|
D-Link DIR-816L Wireless Router - Cross-Site Request Forgery
|
24 |
WEB
|
Bhadresh Patel
|
|
2015-11-16
|
|
VideoLAN VLC Media Player Web Interface 2.2.1 - Metadata Title Cross-Site Scripting
|
23 |
WEB
|
Andrea Sindoni
|
|
2015-11-16
|
|
CF Image Host 1.65 - PHP Command Injection
|
25 |
WEB
|
hyp3rlinx
|
|
2015-11-16
|
|
CF Image Host 1.65 - Cross-Site Request Forgery
|
20 |
WEB
|
hyp3rlinx
|
|
2013-08-15
|
|
ACal 2.2.6 - 'view' Local File Inclusion
|
21 |
WEB
|
ICheer_No0M
|
|
2013-08-13
|
|
DotNetNuke 6.1.x - Cross-Site Scripting
|
22 |
WEB
|
Sajjad Pourali
|
|
2013-08-13
|
|
CakePHP 2.2.8/2.3.7 - AssetDispatcher Class Local File Inclusion
|
25 |
WEB
|
Takeshi Terada
|
|
2013-08-08
|
|
Advanced Guestbook - 'addentry.php' Arbitrary File Upload
|
27 |
WEB
|
Ashiyane Digital Security Team
|
