Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2012-03-21   Minify 2.1.x - 'g' Cross-Site Scripting 26 WEB Ayoub Aboukir
2015-05-13   PHPCollab 2.5 - 'deletetopics.php' SQL Injection 27 WEB Wadeek
2015-05-13   WordPress Plugin Booking Calendar Contact Form 1.0.2 - Multiple Vulnerabilities 29 WEB i0akiN SEC-LABORATORY
2012-03-21   Open Journal Systems (OJS) 2.3.6 - 'rfiles.php' Traversal Arbitrary File Manipulation 27 WEB High-Tech Bridge
2012-03-21   Open Journal Systems (OJS) 2.3.6 - Multiple Script Arbitrary File Upload 31 WEB High-Tech Bridge
2012-03-21   Open Journal Systems (OJS) 2.3.6 - '/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()' 27 WEB High-Tech Bridge
2012-03-21   Open Journal Systems (OJS) 2.3.6 - 'index.php?authors[][url]' Cross-Site Scripting 24 WEB High-Tech Bridge
2012-03-21   CMSimple 3.3 - 'index.php' Cross-Site Scripting 31 WEB Stefan Schurtz
2009-04-17   WebGlimpse 2.18.7 - 'DOC' Directory Traversal 29 WEB MustLive
2015-05-11   SQLBuddy 1.3.3 - Directory Traversal 28 WEB hyp3rlinx
2015-05-11   Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery (Add User) 29 WEB hyp3rlinx
2015-05-11   eFront 3.6.15 - PHP Object Injection 26 WEB Filippo Roncari
2015-05-11   eFront 3.6.15 - Directory Traversal 31 WEB Filippo Roncari
2015-05-11   eFront 3.6.15 - Multiple SQL Injections 30 WEB Filippo Roncari
2015-05-11   D-Link DSL-500B Gen 2 - URL Filter Configuration Panel Persistent Cross-Site Scripting 28 WEB XLabs Security
2015-05-11   D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting 34 WEB XLabs Security
2015-05-11   Pluck CMS 4.7 - Directory Traversal 33 WEB Wadeek
2015-05-11   WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2) 28 WEB Claudio Viviani & F17.c0de
2015-05-11   ZTE F660 - Remote Configuration Download 30 WEB Daniel Cisa
2012-03-11   CreateVision CMS - 'id' SQL Injection 28 WEB Zwierzchowski Oskar
2012-03-18   WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure 28 WEB Websecurity
2012-03-19   ClassifiedsGeek.com Vacation Packages - 'listing_search' SQL Injection 30 WEB r45c4l
2012-03-20   WebGlimpse 2.14.1/2.18.8 - 'webglimpse.cgi' Remote Command Injection 31 WEB Kevin Perry
2012-03-20   GNUBoard 4.34.20 - 'download.php' HTML Injection 29 WEB wh1ant
2012-03-18   JavaBB 0.99 - 'userId' Cross-Site Scripting 34 WEB sonyy
2012-03-16   JPM Article Script 6 - 'page2' SQL Injection 30 WEB Vulnerability Research Laboratory
2012-03-14   Max's PHP Photo Album 1.0 - 'id' Local File Inclusion 34 WEB n0tch
2012-03-14   Max's Guestbook 1.0 - Multiple Remote Vulnerabilities 31 WEB n0tch
2012-03-13   Omnistar Live - Cross-Site Scripting / SQL Injection 30 WEB sonyy
2015-05-08   Alienvault OSSIM/USM 4.14/4.15/5.0 - Multiple Vulnerabilities 35 WEB Peter Lapp
2015-05-08   WordPress Plugin Ad Inserter 1.5.2 - Cross-Site Request Forgery 29 WEB Kaustubh G. Padwad
2015-05-08   Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery 30 WEB Kaustubh G. Padwad
2015-05-08   WordPress Plugin ClickBank Ads 1.7 - Cross-Site Request Forgery 32 WEB Kaustubh G. Padwad
2015-05-08   WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery 29 WEB Kaustubh G. Padwad
2015-05-08   WordPress Plugin Yet Another Related Posts 4.2.4 - Cross-Site Request Forgery 27 WEB Evex
2015-05-08   SynTail 1.5 Build 566 - Multiple Vulnerabilities 28 WEB Marlow Tannhauser
2015-05-08   WordPress Plugin N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion 28 WEB T3N38R15
2015-05-08   SynaMan 3.4 Build 1436 - Multiple Vulnerabilities 30 WEB Marlow Tannhauser
2015-05-08   Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities 32 WEB Marlow Tannhauser
2015-05-08   Xeams 4.5 Build 5755 - Multiple Vulnerabilities 29 WEB Marlow Tannhauser
2012-03-12   Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities 26 WEB Stefan Schurtz
2012-03-12   Wikidforum 2.10 - Search Field Cross-Site Scripting 30 WEB Stefan Schurtz
2012-03-12   Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections 34 WEB Stefan Schurtz
2012-03-12   Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting 30 WEB Simon Ganiere
2015-05-07   Album Streamer 2.0 iOS - Directory Traversal 28 WEB Vulnerability-Lab
2015-05-07   WordPress Plugin Freshmail 1.5.8 - 'shortcode.php' SQL Injection 29 WEB Felipe Molina
2015-05-07   IBM Websphere Portal - Persistent Cross-Site Scripting 32 WEB Filippo Roncari
2015-05-07   Dell SonicWALL Secure Remote Access (SRA) Appliance - Cross-Site Request Forgery 34 WEB Veit Hailperin
2012-03-11   EJBCA 4.0.7 - 'issuer' Cross-Site Scripting 31 WEB MustLive
2012-03-11   Singapore 0.10.1 - 'gallery' Cross-Site Scripting 30 WEB T0xic
2012-03-09   PHPMyVisites 2.4 - 'PHPmv2/index.php' Multiple Cross-Site Scripting Vulnerabilities 29 WEB AkaStep
2012-03-08   SAP Business Objects InfoView System - '/webi/webi_modify.aspx?id' Cross-Site Scripting 30 WEB vulns@dionach.com
2012-03-08   SAP Business Objects InfoView System - '/help/helpredir.aspx?guide' Cross-Site Scripting 31 WEB vulns@dionach.com
2012-03-08   SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting 30 WEB vulns@dionach.com
2015-05-07   WordPress Plugin Freshmail 1.5.8 - SQL Injection 30 WEB Felipe Molina
2012-03-08   Ilient SysAid 8.5.5 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 30 WEB Julien Ahrens
2012-03-08   ToendaCMS 1.6.2 - '/setup/index.php?site' Traversal Local File Inclusion 29 WEB AkaStep
2012-03-08   LeKommerce - 'id' SQL Injection 30 WEB Mazt0r
2015-05-06   elFinder 2 - Remote Command Execution (via File Creation) 30 WEB TUNISIAN CYBER
2015-05-06   PDF Converter & Editor 2.1 iOS - Local File Inclusion 37 WEB Vulnerability-Lab
2015-05-06   vPhoto-Album 4.2 iOS - Local File Inclusion 32 WEB Vulnerability-Lab
2012-03-07   OSClass 2.3.x - Directory Traversal / Arbitrary File Upload 34 WEB Filippo Cavallarin
2012-03-07   Exponent CMS 2.0 - 'src' SQL Injection 31 WEB Rob Miller
2012-03-06   Fork CMS 3.2.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 34 WEB Gjoko Krstic
2012-03-05   Joomla! 2.5.1 - 'redirect.php' Blind SQL Injection 29 WEB Colin Wong
2012-03-05   11in1 CMS 1.2.1 - 'admin/tps?id' SQL Injection 30 WEB Chokri B.A
2012-03-05   11in1 CMS 1.2.1 - 'admin/comments?topicID' SQL Injection 27 WEB Chokri B.A
2012-03-05   Open Realty 2.5.x - 'select_users_template' Local File Inclusion 34 WEB Aung Khant
2015-05-04   WordPress Plugin Ultimate Product Catalogue 3.1.2 - Multiple Persistent Cross-Site Scripting / Cross 35 WEB Felipe Molina
2015-05-04   PhotoWebsite 3.1 iOS - Local File Inclusion 31 WEB Vulnerability-Lab
2012-03-05   Etano 1.20/1.22 - 'photo_view.php?return' Cross-Site Scripting 25 WEB Aung Khant
2012-03-05   Etano 1.20/1.22 - 'photo_search.php' Multiple Cross-Site Scripting Vulnerabilities 26 WEB Aung Khant
2012-03-05   Etano 1.20/1.22 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities 33 WEB Aung Khant
2012-03-04   LastGuru ASP Guestbook - 'View.asp' SQL Injection 28 WEB demonalex
2012-03-02   starCMS - 'q' URI Cross-Site Scripting 31 WEB Am!r
2012-02-28   Fork CMS 3.x - '/backend/modules/error/actions/index.php?parse()' Multiple Error Display Cross-Site 33 WEB anonymous
2012-02-28   Fork CMS 3.x - '/private/en/locale/index?name' Cross-Site Scripting 36 WEB anonymous
2012-02-29   Traidnt Topics Viewer 2.0 - 'main.php' Cross-Site Request Forgery 32 WEB Green Hornet
2012-02-29   Dotclear 2.4.1.2 - '/admin/plugin.php?page' Cross-Site Scripting 33 WEB High-Tech Bridge SA
2012-02-29   Dotclear 2.4.1.2 - '/admin/comments.php' Multiple Cross-Site Scripting Vulnerabilities 33 WEB High-Tech Bridge SA
2012-02-29   Dotclear 2.4.1.2 - '/admin/blogs.php?nb' Cross-Site Scripting 31 WEB High-Tech Bridge SA
2012-02-29   Dotclear 2.4.1.2 - '/admin/auth.php?login_data' Cross-Site Scripting 34 WEB High-Tech Bridge SA
2012-02-27   OSQA's CMS - Multiple HTML Injection Vulnerabilities 34 WEB Ucha Gobejishvili
2012-02-27   Bontq - 'user/' URI Cross-Site Scripting 34 WEB sonyy
2012-02-26   Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities 30 WEB MustLive
2012-02-26   MyJobList 0.1.3 - 'eid' SQL Injection 31 WEB Red Security TEAM
2012-02-23   Mobile Mp3 Search Script 2.0 - 'dl.php' HTTP Response Splitting 35 WEB Corrado Liotta
2012-02-22   Oxwall 1.1.1 - 'plugin' Cross-Site Scripting 26 WEB Ariko-Security
2012-02-22   Chyrp 2.1.2 - '/includes/error.php?body' Cross-Site Scripting 30 WEB High-Tech Bridge SA
2012-02-22   Chyrp 2.1.1 - 'ajax.php' HTML Injection 30 WEB High-Tech Bridge SA
2012-02-22   Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities 33 WEB Benjamin Kunz Mejri
2012-02-22   ContentLion Alpha 1.3 - 'login.php' Cross-Site Scripting 30 WEB Stefan Schurtz
2012-02-21   CPG Dragonfly CMS 9.3.3.0 - Multiple Multiple Cross-Site Scripting Vulnerabilities 32 WEB Ariko-Security
2012-02-21   Xavi 7968 ADSL Router - '/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox' Cross-Sit 44 WEB Busindre
2012-02-20   Joomla! Component Machine - Multiple SQL Injections 29 WEB the_cyber_nuxbie
2015-04-29   OS Solution OSProperty 2.8.0 - SQL Injection 33 WEB Brandon Perry
2015-04-29   Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities 29 WEB hyp3rlinx
2015-04-29   WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities 28 WEB High-Tech Bridge SA
2012-02-18   Joomla! Component com_xvs - 'Controller' Local File Inclusion 33 WEB KedAns-Dz
2012-02-21   Dolphin 7.0.x - 'explanation.php?explain' Cross-Site Scripting 32 WEB Aung Khant
2012-02-21   Dolphin 7.0.x - 'viewFriends.php' Multiple Cross-Site Scripting Vulnerabilities 31 WEB Aung Khant
2012-02-20   TestLink - Multiple SQL Injections 27 WEB Juan M. Natal
2012-02-20   F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB muuratsalo
2012-02-20   VOXTRONIC Voxlog Professional 3.7.x - 'userlogdetail.php?idclient' SQL Injection 30 WEB J. Greil
2012-02-20   VOXTRONIC Voxlog Professional 3.7.x - 'get.php?v' Arbitrary File Access 25 WEB J. Greil
2012-02-18   Tiki Wiki CMS Groupware - 'url' Open Redirection 27 WEB sonyy
2015-04-27   WordPress Core 4.2 - Persistent Cross-Site Scripting 24 WEB klikki
2015-04-27   OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting 26 WEB Adam Ziaja
2012-02-18   Joomla! Component com_xcomp - Local File Inclusion 25 WEB KedAns-Dz
2012-02-18   Joomla! Component com_x-shop - 'idd' SQL Injection 27 WEB KedAns-Dz
2012-02-16   Impulsio CMS - 'id' SQL Injection 25 WEB sonyy
2012-02-17   JaWiki - 'versionNo' Cross-Site Scripting 27 WEB sonyy
2015-04-23   WordPress Plugin Ultimate Product Catalogue - SQL Injection (2) 27 WEB Felipe Molina
2015-04-23   WordPress Plugin Ultimate Product Catalogue - SQL Injection (1) 29 WEB Felipe Molina
2015-04-23   WebUI 1.5b6 - Remote Code Execution 28 WEB TUNISIAN CYBER
2015-04-22   Wolf CMS 0.8.2 - Arbitrary File Upload 29 WEB CWH Underground
2015-04-22   Open-Letters - Remote PHP Code Injection 27 WEB TUNISIAN CYBER
2015-04-21   BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File Retrieval/Deletion 29 WEB Portcullis
2015-04-21   GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection 31 WEB Chris McCurley
2015-04-21   WordPress Plugin Community Events 1.3.5 - SQL Injection 25 WEB Hannes Trunde
2015-04-21   MediaSuite CMS - Artibary File Disclosure 31 WEB KnocKout inj3ct0r
2015-04-21   WordPress Plugin Tune Library 1.5.4 - SQL Injection 29 WEB Hannes Trunde
2015-04-21   WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (2) 24 WEB dadou dz
2015-04-21   WordPress Plugin NEX-Forms < 3.0 - SQL Injection 26 WEB Claudio Viviani
2015-04-21   Photo Manager Pro 4.4.0 iOS - Code Execution 27 WEB Vulnerability-Lab