|
2012-06-23
|
|
SilverStripe CMS Pixlr Image Editor - 'upload.php' Arbitrary File Upload
|
32 |
WEB
|
Sammy FORGIT
|
|
2012-06-23
|
|
Amazon S3 Uploadify Script - 'Uploadify.php' Arbitrary File Upload
|
32 |
WEB
|
Sammy FORGIT
|
|
2015-06-30
|
|
Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities
|
38 |
WEB
|
SEC Consult
|
|
2015-06-30
|
|
C2Box 4.0.0(r19171) - Cross-Site Request Forgery
|
35 |
WEB
|
Wissam Bashour
|
|
2015-06-30
|
|
Fiyo CMS 2.0_1.9.1 - SQL Injection
|
37 |
WEB
|
cfreer
|
|
2012-06-22
|
|
CMS Lokomedia - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
|
38 |
WEB
|
the_cyber_nuxbie
|
|
2012-06-22
|
|
Cotonti - 'admin.php' SQL Injection
|
39 |
WEB
|
AkaStep
|
|
2012-06-21
|
|
Joomla! Component com_szallasok - 'id' SQL Injection
|
34 |
WEB
|
CoBRa_21
|
|
2015-06-30
|
|
CollabNet Subversion Edge Management 4.0.11 - Local File Inclusion
|
38 |
WEB
|
otr
|
|
2015-06-30
|
|
WedgeOS 4.0.4 - Multiple Vulnerabilities
|
32 |
WEB
|
Security-Assessment.com
|
|
2015-06-30
|
|
Watchguard XCS 10.0 - Multiple Vulnerabilities
|
41 |
WEB
|
Security-Assessment.com
|
|
2015-06-30
|
|
Novius 5.0.1 - Multiple Vulnerabilities
|
39 |
WEB
|
hyp3rlinx
|
|
2012-06-21
|
|
Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting
|
35 |
WEB
|
Sooraj K.S
|
|
2012-06-20
|
|
Coppermine Photo Gallery - 'index.php' Script SQL Injection
|
35 |
WEB
|
Taurus Omar
|
|
2012-06-20
|
|
Commentics - 'index.php' Cross-Site Scripting
|
36 |
WEB
|
Jean Pascal Pereira
|
|
2012-06-20
|
|
web@all - Cross-Site Scripting
|
38 |
WEB
|
High-Tech Bridge
|
|
2012-06-19
|
|
e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
AdaptCMS 2.0.2 - 'index.php' Script Cross-Site Scripting
|
35 |
WEB
|
indoushka
|
|
2012-06-19
|
|
e107 Image Gallery Plugin - 'name' Remote File Disclosure
|
35 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
e107 Hupsi_fancybox Plugin - 'Uploadify.php' Arbitrary File Upload
|
40 |
WEB
|
Sammy FORGIT
|
|
2012-06-19
|
|
CMS Balitbang - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
|
37 |
WEB
|
TheCyberNuxbie
|
|
2015-06-29
|
|
Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Change
|
37 |
WEB
|
Fady Mohammed Osman
|
|
2015-06-29
|
|
Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Disclosure
|
36 |
WEB
|
Fady Mohammed Osman
|
|
2015-06-29
|
|
DeDeCMS < 5.7-sp1 - Remote File Inclusion
|
42 |
WEB
|
zise
|
|
2012-06-18
|
|
VANA CMS - 'index.php' Script SQL Injection
|
37 |
WEB
|
Black Hat Group
|
|
2012-06-18
|
|
WordPress Plugin Wp-ImageZoom - 'file' Remote File Disclosure
|
36 |
WEB
|
Sammy FORGIT
|
|
2012-06-18
|
|
WordPress Plugin LB Mixed Slideshow - 'upload.php' Arbitrary File Upload
|
34 |
WEB
|
Sammy FORGIT
|
|
2012-06-18
|
|
Multiple WordPress Themes - 'upload.php' Arbitrary File Upload
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
Squiz CMS - Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities
|
31 |
WEB
|
Nadeem Salim
|
|
2012-06-16
|
|
Webify (Multiple Products) - Multiple HTML Injection / Local File Inclusions
|
36 |
WEB
|
snup
|
|
2012-06-16
|
|
Simple Document Management System 1.1.5 - Multiple SQL Injections
|
35 |
WEB
|
JosS
|
|
2012-06-15
|
|
Joomla! Component JCal Pro Calendar - SQL Injection
|
35 |
WEB
|
Taurus Omar
|
|
2012-06-16
|
|
Joomla! Component Maian Media - 'uploadhandler.php' Arbitrary File Upload
|
34 |
WEB
|
Sammy FORGIT
|
|
2012-06-15
|
|
WordPress Plugin ORGanizer - Multiple Vulnerabilities
|
38 |
WEB
|
MustLive
|
|
2012-06-17
|
|
Joomla! Component hwdVideoShare - 'flash_upload.php' Arbitrary File Upload
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-14
|
|
NetArt Media Jobs Portal - SQL Injection
|
33 |
WEB
|
Ibrahim El-Sayed
|
|
2012-06-14
|
|
Simple Forum PHP - Multiple SQL Injections
|
35 |
WEB
|
Vulnerability Research Laboratory
|
|
2012-06-15
|
|
ADICO - 'index.php' Script SQL Injection
|
37 |
WEB
|
Ibrahim El-Sayed
|
|
2012-06-14
|
|
WordPress Plugin Zingiri Web Shop 2.4.3 - 'uploadfilexd.php' Arbitrary File Upload
|
42 |
WEB
|
Sammy FORGIT
|
|
2012-06-17
|
|
MediaWiki 1.x - 'uselang' Cross-Site Scripting
|
38 |
WEB
|
anonymous
|
|
2012-06-14
|
|
WordPress Plugin Invit0r - 'ofc_upload_image.php' Arbitrary File Upload
|
39 |
WEB
|
Sammy FORGIT
|
|
2012-01-14
|
|
WordPress Plugin Evarisk - 'uploadPhotoApres.php' Arbitrary File Upload
|
40 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
Zimplit CMS 3.0 - Local File Inclusion / Arbitrary File Upload
|
37 |
WEB
|
KedAns-Dz
|
|
2012-06-13
|
|
SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities
|
42 |
WEB
|
anonymous
|
|
2015-06-26
|
|
ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting
|
41 |
WEB
|
Suraj Krishnaswami
|
|
2015-06-26
|
|
Thycotic Secret Server 8.8.000004 - Persistent Cross-Site Scripting
|
39 |
WEB
|
Marco Delai
|
|
2015-06-26
|
|
Koha 3.20.1 - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
|
41 |
WEB
|
Raschin Tavakoli_ Bernhard Garn_ Peter Aufner & Di
|
|
2015-06-26
|
|
Koha 3.20.1 - Directory Traversal
|
39 |
WEB
|
Raschin Tavakoli_ Bernhard Garn_ Peter Aufner & Di
|
|
2015-06-26
|
|
Koha 3.20.1 - Multiple SQL Injections
|
40 |
WEB
|
Raschin Tavakoli_ Bernhard Garn_ Peter Aufner & Di
|
|
2012-06-12
|
|
Joomla! Component Easy Flash Uploader - 'helper.php' Arbitrary File Upload
|
41 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
Joomla! Component mod_jfancy - 'script.php' Arbitrary File Upload
|
44 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
Joomla! Component IDoEditor - 'image.php' Arbitrary File Upload
|
38 |
WEB
|
Sammy FORGIT
|
|
2012-06-12
|
|
Joomla! Component DentroVideo 1.2 - 'upload.php' Arbitrary File Upload
|
43 |
WEB
|
Sammy FORGIT
|
|
2012-06-12
|
|
Joomla! Component mod_artuploader - 'upload.php' Arbitrary File Upload
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-12
|
|
Joomla! Component com_simpleswfupload - 'uploadhandler.php' Arbitrary File Upload
|
38 |
WEB
|
Sammy FORGIT
|
|
2012-06-13
|
|
WordPress Plugin HD FLV Player - 'uploadVideo.php' Arbitrary File Upload
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-12
|
|
XOOPS Cube PROJECT FileManager - 'xupload.php' Arbitrary File Upload
|
40 |
WEB
|
KedAns-Dz
|
|
2012-06-11
|
|
Joomla! Component Joomsport - SQL Injection / Arbitrary File Upload
|
36 |
WEB
|
KedAns-Dz
|
|
2012-06-10
|
|
Joomla! Component com_alphacontent - 'limitstart' SQL Injection
|
37 |
WEB
|
xDarkSton3x
|
|
2012-06-12
|
|
WordPress Plugin Contus Video Gallery - 'upload1.php' Arbitrary File Upload
|
37 |
WEB
|
Sammy FORGIT
|
|
2012-06-11
|
|
BMC Identity Management - Cross-Site Request Forgery
|
38 |
WEB
|
Travis Lee
|
|
2012-06-03
|
|
WordPress Plugin Picturesurf Gallery - 'upload.php' Arbitrary File Upload
|
39 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
WordPress Plugin FCChat Widget 2.2.x - 'upload.php' Arbitrary File Upload
|
43 |
WEB
|
Sammy FORGIT
|
|
2015-06-24
|
|
Vesta Control Panel 0.9.8 - OS Command Injection
|
41 |
WEB
|
High-Tech Bridge SA
|
|
2015-06-24
|
|
Joomla! Component com_simpleimageupload - Arbitrary File Upload
|
42 |
WEB
|
CrashBandicot
|
|
2015-06-24
|
|
GeniXCMS 0.0.3 - 'register.php' SQL Injection
|
47 |
WEB
|
cfreer
|
|
2015-06-24
|
|
WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities
|
46 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2015-06-24
|
|
GeniXCMS 0.0.3 - Cross-Site Scripting
|
41 |
WEB
|
hyp3rlinx
|
|
2012-06-07
|
|
WordPress Plugin VideoWhisper Video Presentation 3.17 - 'vw_upload.php' Arbitrary File Upload
|
46 |
WEB
|
Sammy FORGIT
|
|
2012-06-07
|
|
WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure
|
41 |
WEB
|
Sammy FORGIT
|
|
2012-06-06
|
|
MyBB 1.6.8 - 'member.php' SQL Injection
|
44 |
WEB
|
MR.XpR
|
|
2012-06-05
|
|
Bigware Shop 2.1x - 'main_bigware_54.php' SQL Injection
|
43 |
WEB
|
rwenzel
|
|
2015-06-05
|
|
WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - 'doupload.php' Arbitrary File Upload
|
43 |
WEB
|
Sammy FORGIT
|
|
2012-06-03
|
|
Ignite Solutions CMS - 'car-details.php' SQL Injection
|
39 |
WEB
|
Am!r
|
|
2012-06-03
|
|
AdaptCMS 2.0.2 TinyURL Plugin - 'admin.php' Multiple SQL Injections
|
38 |
WEB
|
KedAns-Dz
|
|
2012-06-03
|
|
AdaptCMS 2.0.2 TinyURL Plugin - 'index.php?id' SQL Injection
|
37 |
WEB
|
KedAns-Dz
|
|
2012-06-03
|
|
TinyCMS 1.3 - '/admin/admin.php?do' Traversal Local File Inclusion
|
38 |
WEB
|
KedAns-Dz
|
|
2012-06-03
|
|
TinyCMS 1.3 - 'index.php?page' Traversal Local File Inclusion
|
36 |
WEB
|
KedAns-Dz
|
|
2012-06-03
|
|
TinyCMS 1.3 - Arbitrary File Upload / Cross-Site Request Forgery
|
35 |
WEB
|
KedAns-Dz
|
|
2012-06-01
|
|
VoipNow Professional 2.5.3 - 'nsextt' Cross-Site Scripting
|
36 |
WEB
|
Aboud-el
|
|
2012-05-31
|
|
WHMCompleteSolution (WHMCS) 5.0 - 'KnowledgeBase.php?search' Cross-Site Scripting
|
38 |
WEB
|
Shadman Tanjim
|
|
2012-05-31
|
|
WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)
|
37 |
WEB
|
Shadman Tanjim
|
|
2012-05-29
|
|
WHMCompleteSolution (WHMCS) - 'boleto_bb.php' SQL Injection
|
35 |
WEB
|
dex
|
|
2012-05-28
|
|
Yamamah Photo Gallery 1.1 - Database Information Disclosure
|
35 |
WEB
|
L3b-r1'z
|
|
2012-05-27
|
|
Nilehoster Topics Viewer 2.3 - Multiple SQL Injections / Local File Inclusion
|
35 |
WEB
|
n4ss1m
|
|
2012-05-26
|
|
Small-Cms - 'hostname' Remote PHP Code Injection
|
36 |
WEB
|
L3b-r1'z
|
|
2015-06-19
|
|
Lively Cart - SQL Injection
|
37 |
WEB
|
Manish Tanwar
|
|
2015-06-19
|
|
ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete
|
36 |
WEB
|
Vulnerability-Lab
|
|
2015-06-19
|
|
ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities
|
35 |
WEB
|
Vulnerability-Lab
|
|
2012-05-25
|
|
DynPage 1.0 - 'ckfinder' Multiple Arbitrary File Upload Vulnerabilities
|
39 |
WEB
|
KedAns-Dz
|
|
2015-06-19
|
|
Tango FTP 1.0 (Build 136) - Activex HeapSpray
|
35 |
WEB
|
metacom
|
|
2015-06-19
|
|
Tango DropBox 3.1.5 + PRO - Activex HeapSpray
|
41 |
WEB
|
metacom
|
|
2012-05-26
|
|
phpList 2.10.9 - 'Sajax.php' PHP Code Injection
|
33 |
WEB
|
L3b-r1'z
|
|
2012-05-27
|
|
AzDGDatingMedium 1.9.3 - Multiple Remote Vulnerabilities
|
38 |
WEB
|
AkaStep
|
|
2012-05-24
|
|
phpCollab 2.5 - Direct Request Multiple Protected Page Access
|
37 |
WEB
|
team ' & 1=1--
|
|
2012-05-24
|
|
PHPCollab 2.5 - 'uploadfile.php' Crafted Request Arbitrary Non-PHP File Upload
|
36 |
WEB
|
team ' & 1=1--
|
|
2012-05-23
|
|
Yellow Duck Framework 2.0 Beta1 - Local File Disclosure
|
40 |
WEB
|
L3b-r1'z
|
|
2012-05-23
|
|
pragmaMx 1.12.1 - '/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url' Cross-Site
|
42 |
WEB
|
High-Tech Bridge SA
|
|
2012-05-23
|
|
pragmaMx 1.12.1 - 'modules.php' URI Cross-Site Scripting
|
41 |
WEB
|
High-Tech Bridge SA
|
|
2012-05-23
|
|
Pligg CMS 1.x - 'module.php' Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
High-Tech Bridge SA
|
|
2012-05-23
|
|
Ajaxmint Gallery 1.0 - Local File Inclusion
|
38 |
WEB
|
AkaStep
|
|
2012-05-23
|
|
phpCollab 2.5 - Database Backup Information Disclosure
|
36 |
WEB
|
team ' & 1=1--
|
|
2012-05-23
|
|
Ruubikcms 1.1.x - Cross-Site Scripting / Information Disclosure / Directory Traversal
|
37 |
WEB
|
AkaStep
|
|
2012-05-21
|
|
PHPhq.Net phAlbum 1.5.1 - 'index.php' Cross-Site Scripting
|
38 |
WEB
|
Eyup CELIK
|
|
2012-05-22
|
|
Plogger Photo Gallery - SQL Injection
|
36 |
WEB
|
Eyup CELIK
|
|
2015-06-17
|
|
BlackCat CMS 1.1.1 - Arbitrary File Download
|
35 |
WEB
|
d4rkr0id
|
|
2015-06-16
|
|
E-Detective Lawful Interception System - Multiple Vulnerabilities
|
39 |
WEB
|
Mustafa Al-Bassam
|
|
2015-06-16
|
|
TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection
|
47 |
WEB
|
RedTeam Pentesting
|
|
2015-06-16
|
|
Apexis IP CAM - Information Disclosure
|
40 |
WEB
|
Sunplace Solutions
|
|
2015-06-16
|
|
Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery
|
41 |
WEB
|
Jerold Hoong
|
|
2015-06-15
|
|
Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass
|
41 |
WEB
|
walid naceri
|
|
2012-05-20
|
|
AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload
|
44 |
WEB
|
Eyup CELIK
|
|
2015-06-12
|
|
WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload
|
40 |
WEB
|
Larry W. Cashdollar
|
|
2015-06-12
|
|
WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal
|
38 |
WEB
|
Larry W. Cashdollar
|
|
2015-06-12
|
|
ZCMS 1.1 - Multiple Vulnerabilities
|
44 |
WEB
|
hyp3rlinx
|
|
2015-06-12
|
|
Opsview 4.6.2 - Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
Dolev Farhi
|
|
2015-06-12
|
|
Nakid CMS - Multiple Vulnerabilities
|
36 |
WEB
|
hyp3rlinx
|
|
2015-06-12
|
|
ClickHeat 1.14 - Cross-Site Request Forgery (Change Admin Password)
|
38 |
WEB
|
David Shanahan
|
|
2015-06-10
|
|
WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery
|
37 |
WEB
|
Nitin Venkatesh
|
|
2015-06-10
|
|
AnimaGallery 2.6 - Local File Inclusion
|
37 |
WEB
|
d4rkr0id
|
|
2015-06-10
|
|
Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery
|
38 |
WEB
|
RedTeam Pentesting
|
|
2015-06-10
|
|
Bonita BPM 6.5.1 - Multiple Vulnerabilities
|
37 |
WEB
|
High-Tech Bridge SA
|
|
2015-06-10
|
|
ISPConfig 3.0.5.4p6 - Multiple Vulnerabilities
|
35 |
WEB
|
High-Tech Bridge SA
|
|
2015-06-10
|
|
GeoVision (GeoHttpServer) Webcams - Remote File Disclosure
|
38 |
WEB
|
Viktor Minin
|
|
2015-06-10
|
|
FiverrScript - Cross-Site Request Forgery (Add Admin)
|
35 |
WEB
|
Mahmoud Gamal
|
