|
2015-09-02
|
|
YesWiki 0.2 - 'squelette' Directory Traversal
|
6 |
WEB
|
HaHwul
|
|
2015-09-02
|
|
Mantis Bug Tracker 1.2.19 - Host Header
|
6 |
WEB
|
Pier-Luc Maltais
|
|
2015-09-02
|
|
Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 - Authentication Bypass
|
6 |
WEB
|
Orwelllabs
|
|
2012-11-29
|
|
WordPress Plugin Video Lead Form - 'errMsg' Cross-Site Scripting
|
7 |
WEB
|
Aditya Balapure
|
|
2012-11-27
|
|
WordPress Theme CStar Design - 'id' SQL Injection
|
8 |
WEB
|
Amirh03in
|
|
2012-11-26
|
|
WordPress Theme Wp-ImageZoom - 'id' SQL Injection
|
7 |
WEB
|
Amirh03in
|
|
2012-11-26
|
|
Forescout CounterACT - 'a' Open Redirection
|
6 |
WEB
|
Joseph Sheridan
|
|
2012-11-24
|
|
Beat Websites - 'id' SQL Injection
|
6 |
WEB
|
Metropolis
|
|
2012-11-26
|
|
WordPress Plugin Ads Box - 'count' SQL Injection
|
7 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-22
|
|
WordPress Theme Magazine Basic - 'id' SQL Injection
|
11 |
WEB
|
Novin hack
|
|
2015-09-01
|
|
Edimax BR6228nS/BR6228nC - Multiple Vulnerabilities
|
7 |
WEB
|
smash
|
|
2015-09-01
|
|
Bedita 3.5.1 - Cross-Site Scripting
|
8 |
WEB
|
Sébastien Morin
|
|
2012-11-22
|
|
WordPress Plugin Zarzadzonie Kontem - 'ajaxfilemanager.php' Script Arbitrary File Upload
|
10 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-22
|
|
WordPress Plugin Plg Novana - 'id' SQL Injection
|
9 |
WEB
|
sil3nt
|
|
2012-11-22
|
|
WordPress Plugin Webplayer - 'id' SQL Injection
|
8 |
WEB
|
Novin hack
|
|
2012-11-22
|
|
WordPress Plugin Zingiri Web Shop - 'path' Arbitrary File Upload
|
8 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-21
|
|
XiVO - Cross-Site Request Forgery
|
9 |
WEB
|
Francis Provencher
|
|
2012-11-21
|
|
Feng Office - Security Bypass / HTML Injection
|
8 |
WEB
|
Ur0b0r0x
|
|
2012-11-21
|
|
dotProject 2.1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
6 |
WEB
|
High-Tech Bridge
|
|
2012-11-21
|
|
dotProject 2.1.x - 'index.php' Multiple SQL Injections
|
8 |
WEB
|
High-Tech Bridge
|
|
2012-11-20
|
|
WordPress Theme Madebymilk - 'id' SQL Injection
|
7 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-16
|
|
ATutor 2.1 - 'tool_file' Local File Inclusion
|
8 |
WEB
|
Julian Horoszkiewicz
|
|
2012-11-20
|
|
openSIS 5.1 - 'ajax.php' Local File Inclusion
|
7 |
WEB
|
Julian Horoszkiewicz
|
|
2012-11-16
|
|
Open-Realty 2.5.8 - Cross-Site Request Forgery
|
6 |
WEB
|
Aung Khant
|
|
2015-08-31
|
|
Cyberoam Firewall CR500iNG-XP 10.6.2 MR-1 - Blind SQL Injection
|
8 |
WEB
|
Dharmendra Kumar Singh
|
|
2015-08-31
|
|
Ganglia Web Frontend < 3.5.1 - PHP Code Execution
|
8 |
WEB
|
Andrei Costin
|
|
2015-08-31
|
|
Edimax PS-1206MF - Web Admin Authentication Bypass
|
9 |
WEB
|
smash
|
|
2015-08-31
|
|
PhpWiki 1.5.4 - Multiple Vulnerabilities
|
9 |
WEB
|
smash
|
|
2012-11-16
|
|
Friends in War The FAQ Manager - 'question' SQL Injection
|
7 |
WEB
|
unsuprise
|
|
2012-11-19
|
|
Omni-Secure - 'dir' Multiple File Disclosure Vulnerabilities
|
7 |
WEB
|
HaCkeR_EgY
|
|
2012-07-19
|
|
WebKit Cross-Site Scripting Filter - 'Cross-Site ScriptingAuditor.cpp' Security Bypass
|
10 |
WEB
|
Tushar Dalvi
|
|
2012-11-16
|
|
WordPress Plugin Tagged Albums - 'id' SQL Injection
|
9 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-16
|
|
WordPress Theme Dailyedition-mouss - 'id' SQL Injection
|
9 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-09
|
|
WordPress Plugin Eco-annu - 'eid' SQL Injection
|
11 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-09
|
|
WordPress Plugin PHP Event Calendar - 'cid' SQL Injection
|
8 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-09
|
|
WordPress Theme Kakao - 'ID' SQL Injection
|
10 |
WEB
|
sil3nt
|
|
2012-11-09
|
|
ESRI ArcGIS for Server - 'where' SQL Injection
|
10 |
WEB
|
anonymous
|
|
2012-11-08
|
|
AR Web Content Manager (AWCM) - 'cookie_gen.php' Arbitrary Cookie Generation
|
10 |
WEB
|
Sooel Son
|
|
2012-11-07
|
|
WordPress Plugin FLV Player - 'id' SQL Injection
|
15 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-11-07
|
|
OrangeHRM - 'sortField' SQL Injection
|
10 |
WEB
|
High-Tech Bridge
|
|
2012-11-06
|
|
VeriCentre - Multiple SQL Injections
|
10 |
WEB
|
Cory Eubanks
|
|
2012-11-04
|
|
AWAuctionScript CMS - Multiple Remote Vulnerabilities
|
12 |
WEB
|
X-Cisadane
|
|
2012-11-03
|
|
Joomla! Component Parcoauto - 'idVeicolo' SQL Injection
|
10 |
WEB
|
Andrea Bocchetti
|
|
2012-11-02
|
|
DCForum - 'auth_user_file.txt' File Multiple Information Disclosure Vulnerabilities
|
11 |
WEB
|
r45c4l
|
|
2012-10-31
|
|
BloofoxCMS 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
Canberk BOLAT
|
|
2015-08-29
|
|
Samsung SyncThruWeb 2.01.00.26 - SMB Hash Disclosure
|
11 |
WEB
|
Shad Malloy
|
|
2015-08-28
|
|
Pluck CMS 4.7.3 - Multiple Vulnerabilities
|
10 |
WEB
|
smash
|
|
2015-08-28
|
|
Wolf CMS - Arbitrary File Upload / Execution
|
10 |
WEB
|
Narendra Bhati
|
|
2015-08-28
|
|
Jenkins 1.626 - Cross-Site Request Forgery / Code Execution
|
8 |
WEB
|
smash
|
|
2015-08-28
|
|
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload
|
8 |
WEB
|
Arash Khazaei
|
|
2012-10-31
|
|
SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting
|
8 |
WEB
|
Anthony Trummer
|
|
2012-10-31
|
|
NetCat CMS - Multiple Cross-Site Scripting Vulnerabilities
|
8 |
WEB
|
Security Effect Team
|
|
2012-10-30
|
|
Joomla! Component com_quiz - SQL Injection
|
9 |
WEB
|
Daniel Barragan
|
|
2012-10-28
|
|
CorePlayer - 'callback' Cross-Site Scripting
|
8 |
WEB
|
MustLive
|
|
2012-10-16
|
|
WANem - Multiple Cross-Site Scripting Vulnerabilities
|
8 |
WEB
|
Brendan Coles
|
|
2015-08-27
|
|
Invision Power Board (IP.Board) 4.x - Persistent Cross-Site Scripting
|
9 |
WEB
|
snop
|
|
2012-10-26
|
|
EasyITSP - 'customers_edit.php' Authentication Bypass
|
6 |
WEB
|
Michal Blaszczak
|
|
2012-10-29
|
|
TP-Link TL-WR841N Router - Local File Inclusion
|
7 |
WEB
|
Matan Azugi
|
|
2012-10-26
|
|
VicBlog - Multiple SQL Injections
|
7 |
WEB
|
Geek
|
|
2012-10-25
|
|
Gramophone - 'rs' Cross-Site Scripting
|
7 |
WEB
|
G13
|
|
2015-08-26
|
|
Magento eCommerce - Remote Code Execution
|
9 |
WEB
|
Manish Tanwar
|
|
2012-10-26
|
|
Inventory - Multiple Cross-Site Scripting / SQL Injections
|
6 |
WEB
|
G13
|
|
2012-10-23
|
|
SMF - 'view' Cross-Site Scripting
|
6 |
WEB
|
Am!r
|
|
2012-10-22
|
|
WHMCompleteSolution (WHMCS) 4.5.2 - 'googlecheckout.php' SQL Injection
|
6 |
WEB
|
Starware Security Team
|
|
2012-10-18
|
|
WordPress Plugin Wordfence Security - Cross-Site Scripting
|
7 |
WEB
|
MustLive
|
|
2012-10-19
|
|
CMS Mini 0.2.2 - 'index.php' Script Cross-Site Scripting
|
7 |
WEB
|
Netsparker
|
|
2015-08-25
|
|
Keeper IP Camera 3.2.2.10 - Authentication Bypass
|
7 |
WEB
|
RAT - ThiefKing
|
|
2012-10-18
|
|
Amateur Photographer's Image Gallery - 'fullscreen.php?albumid' SQL Injection
|
6 |
WEB
|
cr4wl3r
|
|
2012-10-18
|
|
Amateur Photographer's Image Gallery - 'plist.php?albumid' Cross-Site Scripting
|
6 |
WEB
|
cr4wl3r
|
|
2012-10-18
|
|
Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection
|
6 |
WEB
|
cr4wl3r
|
|
2012-10-18
|
|
Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure
|
6 |
WEB
|
cr4wl3r
|
|
2012-10-18
|
|
BSW Gallery - 'uploadpic.php' Arbitrary File Upload
|
7 |
WEB
|
cr4wl3r
|
|
2015-08-24
|
|
WordPress Theme GeoPlaces3 - Arbitrary File Upload
|
7 |
WEB
|
Mdn_Newbie
|
|
2015-08-24
|
|
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
|
6 |
WEB
|
Arash Khazaei
|
|
2012-10-17
|
|
jCore - '/admin/index.php?path' Cross-Site Scripting
|
8 |
WEB
|
High-Tech Bridge
|
|
2012-10-17
|
|
WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities
|
8 |
WEB
|
waraxe
|
|
2012-10-15
|
|
WordPress Plugin Crayon Syntax Highlighter - 'wp_load' Remote File Inclusion
|
6 |
WEB
|
Charlie Eriksen
|
|
2012-10-15
|
|
SilverStripe CMS 2.4.x - 'BackURL' Open Redirection
|
7 |
WEB
|
Aung Khant
|
|
2012-06-16
|
|
vBSEO - 'u' Cross-Site Scripting
|
5 |
WEB
|
MegaMan
|
|
2012-10-20
|
|
WebTitan - 'logs-x.php' Directory Traversal
|
6 |
WEB
|
Richard Conner
|
|
2012-01-06
|
|
SenseSites CommonSense CMS - 'article.php?id' SQL Injection
|
6 |
WEB
|
H4ckCity Security Team
|
|
2012-01-06
|
|
SenseSites CommonSense CMS - 'special.php?id' SQL Injection
|
5 |
WEB
|
H4ckCity Security Team
|
|
2012-01-06
|
|
SenseSites CommonSense CMS - 'id' SQL Injection
|
5 |
WEB
|
H4ckCity Security Team
|
|
2012-08-11
|
|
FileContral - Local File Inclusion / Local File Disclosure
|
5 |
WEB
|
Ashiyane Digital Security Team
|
|
2012-10-10
|
|
OpenX 2.8.10 - 'plugin-index.php' Cross-Site Scripting
|
6 |
WEB
|
High-Tech Bridge
|
|
2012-10-06
|
|
Open Realty - 'select_users_lang' Local File Inclusion
|
6 |
WEB
|
L0n3ly-H34rT
|
|
2012-10-08
|
|
Interspire Email Marketer - Cross-Site Scripting / HTML Injection / SQL Injection
|
6 |
WEB
|
Ibrahim El-Sayed
|
|
2012-10-05
|
|
WordPress Plugin Shopp - Multiple Vulnerabilities
|
7 |
WEB
|
T0x!c
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Authentication Bypass (via New Profile Creation)
|
5 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Arbitrary File Upload / Execution
|
6 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 3.0.6 - Authentication Bypass
|
6 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.9 - Arbitrary File Upload / Execution
|
6 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - Authentication Bypass (via Disabling of IP Quarantine)
|
6 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.8 - SQL Injection / Authentication Bypass
|
7 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 4.0.4 - SQL Injection
|
5 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
Netsweeper 2.6.29.8 - SQL Injection
|
5 |
WEB
|
Anastasios Monachos
|
|
2015-08-21
|
|
WordPress Plugin MDC Private Message 1.0.0 - Persistent Cross-Site Scripting
|
7 |
WEB
|
Chris Kellum
|
|
2015-08-21
|
|
WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting / Cross-Site Request Forgery
|
7 |
WEB
|
Ehsan Hosseini
|
|
2012-10-01
|
|
Omnistar Mailer - Multiple SQL Injections / HTML Injection Vulnerabilities
|
7 |
WEB
|
Vulnerability Laboratory
|
|
2012-10-02
|
|
ZenPhoto - 'admin-news-articles.php' Cross-Site Scripting
|
7 |
WEB
|
Scott Herbert
|
|
2012-10-01
|
|
WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities
|
6 |
WEB
|
Tapco Security
|
|
2012-09-30
|
|
AlamFifa CMS - 'user_name_cookie' SQL Injection
|
7 |
WEB
|
L0n3ly-H34rT
|
|
2012-10-02
|
|
Switchvox - Multiple HTML Injection Vulnerabilities
|
8 |
WEB
|
Ibrahim El-Sayed
|
|
2012-09-26
|
|
WordPress Plugin ABC Test - 'id' Cross-Site Scripting
|
9 |
WEB
|
Scott Herbert
|
|
2015-08-20
|
|
Pligg CMS 2.0.2 - Arbitrary Code Execution
|
9 |
WEB
|
Arash Khazaei
|
|
2015-08-20
|
|
Vifi Radio 1.0 - Cross-Site Request Forgery
|
7 |
WEB
|
KnocKout
|
|
2015-08-20
|
|
Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities
|
7 |
WEB
|
Itzik Chen
|
|
2015-08-19
|
|
up.time 7.5.0 - Upload and Execute
|
6 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Arbitrary File Disclose and Delete
|
7 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)
|
7 |
WEB
|
LiquidWorm
|
|
2015-08-19
|
|
up.time 7.5.0 - Superadmin Privilege Escalation
|
7 |
WEB
|
LiquidWorm
|
|
2011-12-30
|
|
Neturf eCommerce Shopping Cart - 'searchFor' Cross-Site Scripting
|
7 |
WEB
|
farbodmahini
|
|
2012-09-22
|
|
WordPress Plugin Sexy Add Template - Cross-Site Request Forgery
|
6 |
WEB
|
the_cyber_nuxbie
|
|
2012-09-25
|
|
WordPress Plugin Token Manager - 'tid' Cross-Site Scripting
|
6 |
WEB
|
TheCyberNuxbie
|
|
2012-09-22
|
|
WordPress Core 3.4.2 - Cross-Site Request Forgery
|
8 |
WEB
|
AkaStep
|
|
2012-09-21
|
|
YCommerce - Multiple SQL Injections
|
9 |
WEB
|
Ricardo Almeida
|
|
2012-09-24
|
|
ZEN Load Balancer - Multiple Vulnerabilities
|
6 |
WEB
|
Brendan Coles
|
|
2012-09-20
|
|
WordPress Plugin MF Gig Calendar - Cross-Site Scripting
|
6 |
WEB
|
Chris Cooper
|
|
2012-09-20
|
|
Poweradmin - 'index.php' Cross-Site Scripting
|
6 |
WEB
|
Siavash
|
|
2012-09-07
|
|
WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities
|
6 |
WEB
|
Matan Azugi
|
|
2012-09-18
|
|
WordPress Core 3.4.2 - Multiple Path Disclosure Vulnerabilities
|
5 |
WEB
|
AkaStep
|
|
2015-08-18
|
|
WordPress Plugin WP Symposium 15.1 - 'get_album_item.php' SQL Injection
|
6 |
WEB
|
PizzaHatHacker
|
|
2015-08-18
|
|
WordPress Plugin WP Symposium 15.1 - Blind SQL Injection
|
6 |
WEB
|
dxw
|
|
2015-08-18
|
|
BigTree CMS 4.2.3 - (Authenticated) SQL Injection
|
7 |
WEB
|
Curesec Research Team
|
|
2015-08-18
|
|
CodoForum 3.3.1 - Multiple SQL Injections
|
7 |
WEB
|
Curesec Research Team
|
