|
2015-10-06
|
|
ZTE ZXHN H108N Router - Configuration Disclosure
|
19 |
WEB
|
Todor Donev
|
|
2013-03-23
|
|
Jaow CMS - 'add_ons' Cross-Site Scripting
|
23 |
WEB
|
Metropolis
|
|
2015-10-06
|
|
GLPI 0.85.5 - Arbitrary File Upload / Filter Bypass / Remote Code Execution
|
22 |
WEB
|
Raffaele Forte
|
|
2015-10-06
|
|
PHP-Fusion 7.02.07 - Blind SQL Injection
|
18 |
WEB
|
Manuel García Cárdenas
|
|
2015-10-05
|
|
Alienvault Open Source SIEM (OSSIM) 4.3 - Cross-Site Request Forgery
|
21 |
WEB
|
MohamadReza Mohajerani
|
|
2015-10-05
|
|
ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal
|
19 |
WEB
|
xistence
|
|
2013-03-19
|
|
WordPress Plugin Occasions - Cross-Site Request Forgery
|
20 |
WEB
|
m3tamantra
|
|
2013-03-14
|
|
Petite Annonce - Cross-Site Scripting
|
19 |
WEB
|
Metropolis
|
|
2013-03-11
|
|
PHPBoost - Arbitrary File Upload / Information Disclosure
|
21 |
WEB
|
KedAns-Dz
|
|
2013-03-11
|
|
KindEditor - Multiple Arbitrary File Upload Vulnerabilities
|
19 |
WEB
|
KedAns-Dz
|
|
2015-10-02
|
|
ElasticSearch 1.6.0 - Arbitrary File Download
|
18 |
WEB
|
Pedro Andujar
|
|
2015-10-02
|
|
FTGate 7 - Cross-Site Request Forgery
|
16 |
WEB
|
hyp3rlinx
|
|
2015-10-02
|
|
FTGate 2009 Build 6.4.00 - Multiple Vulnerabilities
|
18 |
WEB
|
hyp3rlinx
|
|
2013-03-11
|
|
Privoxy Proxy - Authentication Information Disclosure
|
15 |
WEB
|
Chris John Riley
|
|
2013-03-11
|
|
WordPress Plugin podPress - 'playerID' Cross-Site Scripting
|
20 |
WEB
|
hiphop
|
|
2013-03-10
|
|
Asteriskguru Queue Statistics - 'warning' Cross-Site Scripting
|
18 |
WEB
|
Manuel García Cárdenas
|
|
2013-03-10
|
|
SWFupload - Multiple Content Spoofing / Cross-Site Scripting Vulnerabilities
|
18 |
WEB
|
MustLive
|
|
2013-03-08
|
|
WordPress Plugin Terillion Reviews - Profile Id HTML Injection
|
18 |
WEB
|
Aditya Balapure
|
|
2013-03-01
|
|
Question2Answer - Cross-Site Request Forgery
|
19 |
WEB
|
MustLive
|
|
2015-10-01
|
|
Bosch Security Systems Dinion NBN-498 - Web Interface XML Injection
|
20 |
WEB
|
neom22
|
|
2013-03-08
|
|
Your Own Classifieds - Cross-Site Scripting
|
16 |
WEB
|
Rafay Baloch
|
|
2013-02-06
|
|
Verax NMS - Multiple Method Authentication Bypass
|
17 |
WEB
|
Andrew Brooks
|
|
2013-02-23
|
|
File Manager - HTML Injection / Local File Inclusion
|
21 |
WEB
|
Benjamin Kunz Mejri
|
|
2013-03-05
|
|
WordPress Plugin Count Per Day - 'daytoshow' Cross-Site Scripting
|
17 |
WEB
|
alejandr0.m0f0
|
|
2013-03-04
|
|
HP Intelligent Management Center - 'topoContent.jsf' Cross-Site Scripting
|
16 |
WEB
|
Julien Ahrens
|
|
2013-03-01
|
|
WordPress Plugin Uploader - 'blog' Cross-Site Scripting
|
20 |
WEB
|
CodeV
|
|
2013-03-02
|
|
Plogger - Multiple Input Validation Vulnerabilities
|
17 |
WEB
|
Saadat Ullah
|
|
2015-09-29
|
|
Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2)
|
27 |
WEB
|
Pedro Ribeiro
|
|
2015-09-29
|
|
Western Digital My Cloud 04.01.03-421/04.01.04-422 - Command Injection
|
17 |
WEB
|
absane
|
|
2015-09-28
|
|
vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution
|
22 |
WEB
|
Benjamin Daniel Mussler
|
|
2015-09-28
|
|
Photos in Wifi 1.0.1 iOS - Arbitrary File Upload
|
16 |
WEB
|
Vulnerability-Lab
|
|
2015-09-28
|
|
My.WiFi USB Drive 1.0 iOS - Local File Inclusion
|
19 |
WEB
|
Vulnerability-Lab
|
|
2015-09-28
|
|
Centreon 2.6.1 - Multiple Vulnerabilities
|
25 |
WEB
|
LiquidWorm
|
|
2015-09-28
|
|
Mango Automation 2.6.0 - Multiple Vulnerabilities
|
17 |
WEB
|
LiquidWorm
|
|
2013-02-27
|
|
Geeklog - Cross-Site Scripting
|
17 |
WEB
|
High-Tech Bridge
|
|
2013-02-26
|
|
JForum - 'jforum.page' Multiple Cross-Site Scripting Vulnerabilities
|
20 |
WEB
|
ZeroDayLab
|
|
2013-02-25
|
|
phpMyRecipes - Multiple HTML Injection Vulnerabilities
|
21 |
WEB
|
PDS
|
|
2013-03-01
|
|
Batavi - 'index.php' Cross-Site Scripting
|
18 |
WEB
|
Dognaedis
|
|
2013-02-25
|
|
WordPress Plugin Smart Flv - 'jwplayer.swf' Multiple Cross-Site Scripting Vulnerabilities
|
20 |
WEB
|
Henri Salo
|
|
2013-02-20
|
|
ZeroClipboard 1.9.x - 'id' Cross-Site Scripting
|
20 |
WEB
|
MustLive
|
|
2013-02-21
|
|
OpenEMR - 'site' Cross-Site Scripting
|
22 |
WEB
|
Gjoko Krstic
|
|
2013-02-21
|
|
PHPmyGallery 1.5 - Local File Disclosure / Cross-Site Scripting
|
19 |
WEB
|
TheMirkin
|
|
2013-02-20
|
|
ZenPhoto - 'index.php' SQL Injection
|
18 |
WEB
|
HosseinNsn
|
|
2013-02-20
|
|
WordPress Plugin Pretty Link - Cross-Site Scripting
|
23 |
WEB
|
hiphop
|
|
2015-09-25
|
|
X2Engine 4.2 - Arbitrary File Upload
|
18 |
WEB
|
Portcullis
|
|
2013-02-19
|
|
CKEditor - 'posteddata.php' Cross-Site Scripting
|
14 |
WEB
|
AkaStep
|
|
2015-09-25
|
|
X2Engine 4.2 - Cross-Site Request Forgery
|
17 |
WEB
|
Portcullis
|
|
2013-02-19
|
|
Squirrelcart - 'table' Cross-Site Scripting
|
20 |
WEB
|
Gjoko Krstic
|
|
2013-02-18
|
|
MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities
|
18 |
WEB
|
Anastasios Monachos
|
|
2015-09-25
|
|
FortiManager 5.2.2 - Persistent Cross-Site Scripting
|
18 |
WEB
|
hyp3rlinx
|
|
2013-02-12
|
|
Sonar - Multiple Cross-Site Scripting Vulnerabilities
|
19 |
WEB
|
DevilTeam
|
|
2013-02-14
|
|
WordPress Plugin NextGEN Gallery - Full Path Disclosure
|
19 |
WEB
|
Henrique Montenegro
|
|
2013-02-12
|
|
BlackNova Traders - 'news.php' SQL Injection
|
22 |
WEB
|
ITTIHACK
|
|
2013-02-12
|
|
osCommerce - Cross-Site Request Forgery
|
21 |
WEB
|
Jakub Galczyk
|
|
2015-09-24
|
|
SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration
|
17 |
WEB
|
Filippo Roncari
|
|
2013-02-09
|
|
WordPress Theme Pinboard - 'tab' Cross-Site Scripting
|
21 |
WEB
|
Henrique Montenegro
|
|
2013-01-31
|
|
WordPress Plugin Audio Player - 'playerID' Cross-Site Scripting
|
17 |
WEB
|
hiphop
|
|
2013-02-06
|
|
WordPress Plugin Wysija Newsletters - Multiple SQL Injections
|
16 |
WEB
|
High-Tech Bridge
|
|
2013-02-06
|
|
WordPress Plugin CommentLuv - '_ajax_nonce' Cross-Site Scripting
|
19 |
WEB
|
High-Tech Bridge
|
|
2013-02-06
|
|
ezStats for Battlefield 3 - '/ezStats2/compare.php' Multiple Cross-Site Scripting Vulnerabilities
|
16 |
WEB
|
L0n3ly-H34rT
|
|
2013-02-06
|
|
ezStats2 - 'style.php' Local File Inclusion
|
19 |
WEB
|
L0n3ly-H34rT
|
|
2015-09-23
|
|
refbase 0.9.6 - Multiple Vulnerabilities
|
19 |
WEB
|
Mohab Ali
|
|
2013-02-04
|
|
EasyITSP - 'voicemail.php' Directory Traversal
|
15 |
WEB
|
Michal Blaszczak
|
|
2013-02-02
|
|
WordPress Theme flashnews - Multiple Input Validation Vulnerabilities
|
18 |
WEB
|
MustLive
|
|
2015-09-22
|
|
SAP NetWeaver < 7.01 - XML External Entity Injection
|
20 |
WEB
|
Lukasz Miedzinski
|
|
2015-09-22
|
|
Air Drive Plus 2.4 - Arbitrary File Upload
|
16 |
WEB
|
Vulnerability-Lab
|
|
2015-09-22
|
|
h5ai < 0.25.0 - Unrestricted Arbitrary File Upload
|
17 |
WEB
|
rTheory
|
|
2015-09-22
|
|
Kirby CMS 2.1.0 - Authentication Bypass
|
20 |
WEB
|
Dawid Golunski
|
|
2013-01-24
|
|
WordPress Plugin WP-Table Reloaded - 'id' Cross-Site Scripting
|
20 |
WEB
|
hiphop
|
|
2013-01-25
|
|
iCart Pro - 'section' SQL Injection
|
21 |
WEB
|
n3tw0rk
|
|
2015-09-20
|
|
ADH-Web Server IP-Cameras - Multiple Vulnerabilities
|
18 |
WEB
|
Orwelllabs
|
|
2015-09-18
|
|
Pligg CMS 2.0.2 - 'load_data_for_search.php' SQL Injection
|
20 |
WEB
|
jsass
|
|
2013-01-25
|
|
PHPWeby Free Directory Script - 'contact.php' Multiple SQL Injections
|
20 |
WEB
|
AkaStep
|
|
2013-01-23
|
|
WordPress Theme Chocolate WP - Multiple Vulnerabilities
|
23 |
WEB
|
Eugene Dokukin
|
|
2013-01-23
|
|
gpEasy CMS - 'section' Cross-Site Scripting
|
19 |
WEB
|
High-Tech Bridge SA
|
|
2013-01-22
|
|
Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities
|
22 |
WEB
|
Christy Philip Mathew
|
|
2013-01-22
|
|
DigiLIBE - Execution-After-Redirect Information Disclosure
|
28 |
WEB
|
Robert Gilbert
|
|
2013-01-20
|
|
Scripts Genie Classified Ultra - SQL Injection / Cross-Site Scripting
|
19 |
WEB
|
3spi0n
|
|
2013-01-17
|
|
IP.Gallery - 'img' SQL Injection
|
23 |
WEB
|
Ashiyane Digital Security Team
|
|
2013-01-15
|
|
phpLiteAdmin - 'table' SQL Injection
|
29 |
WEB
|
KedAns-Dz
|
|
2015-09-17
|
|
ZeusCart 4.0 - SQL Injection
|
21 |
WEB
|
Curesec Research Team
|
|
2015-09-17
|
|
ZeusCart 4.0 - Cross-Site Request Forgery
|
17 |
WEB
|
Curesec Research Team
|
|
2015-09-16
|
|
FAROL - SQL Injection
|
21 |
WEB
|
Thierry Fernandes Faria
|
|
2015-09-22
|
|
Kirby CMS 2.1.0 - Cross-Site Request Forgery / Content Upload / PHP Script Execution
|
18 |
WEB
|
Dawid Golunski
|
|
2013-01-10
|
|
WordPress Plugin Gallery - 'filename_1' Arbitrary File Access
|
18 |
WEB
|
Beni_Vanda
|
|
2013-01-09
|
|
Quick.CMS / Quick.Cart - Cross-Site Scripting
|
22 |
WEB
|
High-Tech Bridge
|
|
2013-01-09
|
|
Prizm Content Connect - Arbitrary File Upload
|
20 |
WEB
|
Include Security Research
|
|
2015-09-15
|
|
Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities
|
20 |
WEB
|
Security-Assessment.com
|
|
2015-09-15
|
|
Openfire 3.10.2 - Cross-Site Request Forgery
|
22 |
WEB
|
hyp3rlinx
|
|
2015-09-15
|
|
Openfire 3.10.2 - Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
hyp3rlinx
|
|
2015-09-15
|
|
Openfire 3.10.2 - Privilege Escalation
|
17 |
WEB
|
hyp3rlinx
|
|
2015-09-15
|
|
Openfire 3.10.2 - Remote File Inclusion
|
20 |
WEB
|
hyp3rlinx
|
|
2015-09-15
|
|
Openfire 3.10.2 - Unrestricted Arbitrary File Upload
|
27 |
WEB
|
hyp3rlinx
|
|
2015-09-15
|
|
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection
|
25 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2013-01-09
|
|
TinyBrowser - 'edit.php' Directory Listing
|
20 |
WEB
|
MustLive
|
|
2013-01-09
|
|
TinyBrowser - 'tinybrowser.php' Directory Listing
|
19 |
WEB
|
MustLive
|
|
2013-01-09
|
|
tinybrowser - 'type' Cross-Site Scripting
|
19 |
WEB
|
MustLive
|
|
2013-01-08
|
|
WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting
|
25 |
WEB
|
Am!r
|
|
2015-09-14
|
|
WordPress Plugin EZ SQL Reports < 4.11.37 - Multiple Vulnerabilities
|
22 |
WEB
|
Felipe Molina
|
|
2015-09-14
|
|
ManageEngine OpManager 11.5 - Multiple Vulnerabilities
|
18 |
WEB
|
xistence
|
|
2015-09-14
|
|
ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Execution
|
22 |
WEB
|
xistence
|
|
2013-01-08
|
|
Joomla! Component com_incapsula - Multiple Cross-Site Scripting Vulnerabilities
|
19 |
WEB
|
Gjoko Krstic
|
|
2013-01-06
|
|
Havalite CMS - 'comment' HTML Injection
|
20 |
WEB
|
Henri Salo
|
|
2013-01-04
|
|
TomatoCart - 'json.php' Security Bypass
|
17 |
WEB
|
Aung Khant
|
|
2013-01-04
|
|
Multiple WordPress WPScientist Themes - Arbitrary File Upload
|
18 |
WEB
|
JingoBD
|
|
2012-12-31
|
|
WHMCS 5.0 - Insecure Cookie Authentication Bypass
|
16 |
WEB
|
Agd_Scorp
|
|
2013-01-03
|
|
WordPress Plugin Uploader - Arbitrary File Upload
|
19 |
WEB
|
Sammy FORGIT
|
|
2013-01-02
|
|
osTicket - 'tickets.php?status' Cross-Site Scripting
|
18 |
WEB
|
AkaStep
|
|
2013-01-02
|
|
osTicket - 'l.php?url' Arbitrary Site Redirect
|
22 |
WEB
|
AkaStep
|
|
2013-01-01
|
|
WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/admi
|
19 |
WEB
|
Sammy FORGIT
|
|
2013-01-01
|
|
WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/admi
|
20 |
WEB
|
Sammy FORGIT
|
|
2013-01-01
|
|
WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/admi
|
17 |
WEB
|
Sammy FORGIT
|
|
2013-01-02
|
|
WordPress Plugin Xerte Online - 'save.php' Arbitrary File Upload
|
24 |
WEB
|
Sammy FORGIT
|
|
2012-12-26
|
|
cPanel - 'dir' Cross-Site Scripting
|
19 |
WEB
|
Rafay Baloch
|
|
2012-12-27
|
|
WHM - 'filtername' Cross-Site Scripting
|
20 |
WEB
|
Rafay Baloch
|
|
2012-12-27
|
|
cPanel - 'detailbw.html' Multiple Cross-Site Scripting Vulnerabilities
|
17 |
WEB
|
Christy Philip Mathew
|
|
2012-12-27
|
|
cPanel WebHost Manager (WHM) - '/webmail/x3/mail/clientconf.html?acct' Cross-Site Scripting
|
16 |
WEB
|
Christy Philip Mathew
|
|
2013-01-08
|
|
MotoCMS - 'admin/data/users.xml' Access Restriction / Information Disclosure
|
22 |
WEB
|
AkaStep
|
|
2015-09-11
|
|
Monsta FTP 1.6.2 - Multiple Vulnerabilities
|
23 |
WEB
|
hyp3rlinx
|
|
2012-12-22
|
|
City Reviewer - 'search.php' Script SQL Injection
|
21 |
WEB
|
3spi0n
|
|
2012-12-24
|
|
cPanel - 'account' Cross-Site Scripting
|
19 |
WEB
|
Rafay Baloch
|
|
2012-12-24
|
|
Hero Framework - users/login 'Username' Cross-Site Scripting
|
25 |
WEB
|
Stefan Schurtz
|
|
2012-12-24
|
|
Hero Framework - 'search?q' Cross-Site Scripting
|
26 |
WEB
|
Stefan Schurtz
|
|
2012-12-21
|
|
VoipNow Service Provider Edition - Arbitrary Command Execution
|
20 |
WEB
|
i-Hmx
|
|
2012-12-18
|
|
MyBB Transactions Plugin - 'transaction' SQL Injection
|
26 |
WEB
|
limb0
|
