|
2015-05-11
|
|
ZTE F660 - Remote Configuration Download
|
27 |
WEB
|
Daniel Cisa
|
|
2012-03-11
|
|
CreateVision CMS - 'id' SQL Injection
|
23 |
WEB
|
Zwierzchowski Oskar
|
|
2012-03-18
|
|
WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure
|
26 |
WEB
|
Websecurity
|
|
2012-03-19
|
|
ClassifiedsGeek.com Vacation Packages - 'listing_search' SQL Injection
|
28 |
WEB
|
r45c4l
|
|
2012-03-20
|
|
WebGlimpse 2.14.1/2.18.8 - 'webglimpse.cgi' Remote Command Injection
|
29 |
WEB
|
Kevin Perry
|
|
2012-03-20
|
|
GNUBoard 4.34.20 - 'download.php' HTML Injection
|
27 |
WEB
|
wh1ant
|
|
2012-03-18
|
|
JavaBB 0.99 - 'userId' Cross-Site Scripting
|
32 |
WEB
|
sonyy
|
|
2012-03-16
|
|
JPM Article Script 6 - 'page2' SQL Injection
|
28 |
WEB
|
Vulnerability Research Laboratory
|
|
2012-03-14
|
|
Max's PHP Photo Album 1.0 - 'id' Local File Inclusion
|
30 |
WEB
|
n0tch
|
|
2012-03-14
|
|
Max's Guestbook 1.0 - Multiple Remote Vulnerabilities
|
29 |
WEB
|
n0tch
|
|
2012-03-13
|
|
Omnistar Live - Cross-Site Scripting / SQL Injection
|
28 |
WEB
|
sonyy
|
|
2015-05-08
|
|
Alienvault OSSIM/USM 4.14/4.15/5.0 - Multiple Vulnerabilities
|
32 |
WEB
|
Peter Lapp
|
|
2015-05-08
|
|
WordPress Plugin Ad Inserter 1.5.2 - Cross-Site Request Forgery
|
27 |
WEB
|
Kaustubh G. Padwad
|
|
2015-05-08
|
|
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery
|
26 |
WEB
|
Kaustubh G. Padwad
|
|
2015-05-08
|
|
WordPress Plugin ClickBank Ads 1.7 - Cross-Site Request Forgery
|
29 |
WEB
|
Kaustubh G. Padwad
|
|
2015-05-08
|
|
WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery
|
27 |
WEB
|
Kaustubh G. Padwad
|
|
2015-05-08
|
|
WordPress Plugin Yet Another Related Posts 4.2.4 - Cross-Site Request Forgery
|
25 |
WEB
|
Evex
|
|
2015-05-08
|
|
SynTail 1.5 Build 566 - Multiple Vulnerabilities
|
26 |
WEB
|
Marlow Tannhauser
|
|
2015-05-08
|
|
WordPress Plugin N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion
|
26 |
WEB
|
T3N38R15
|
|
2015-05-08
|
|
SynaMan 3.4 Build 1436 - Multiple Vulnerabilities
|
28 |
WEB
|
Marlow Tannhauser
|
|
2015-05-08
|
|
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities
|
30 |
WEB
|
Marlow Tannhauser
|
|
2015-05-08
|
|
Xeams 4.5 Build 5755 - Multiple Vulnerabilities
|
27 |
WEB
|
Marlow Tannhauser
|
|
2012-03-12
|
|
Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities
|
24 |
WEB
|
Stefan Schurtz
|
|
2012-03-12
|
|
Wikidforum 2.10 - Search Field Cross-Site Scripting
|
26 |
WEB
|
Stefan Schurtz
|
|
2012-03-12
|
|
Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections
|
31 |
WEB
|
Stefan Schurtz
|
|
2012-03-12
|
|
Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting
|
27 |
WEB
|
Simon Ganiere
|
|
2015-05-07
|
|
Album Streamer 2.0 iOS - Directory Traversal
|
26 |
WEB
|
Vulnerability-Lab
|
|
2015-05-07
|
|
WordPress Plugin Freshmail 1.5.8 - 'shortcode.php' SQL Injection
|
25 |
WEB
|
Felipe Molina
|
|
2015-05-07
|
|
IBM Websphere Portal - Persistent Cross-Site Scripting
|
30 |
WEB
|
Filippo Roncari
|
|
2015-05-07
|
|
Dell SonicWALL Secure Remote Access (SRA) Appliance - Cross-Site Request Forgery
|
32 |
WEB
|
Veit Hailperin
|
|
2012-03-11
|
|
EJBCA 4.0.7 - 'issuer' Cross-Site Scripting
|
29 |
WEB
|
MustLive
|
|
2012-03-11
|
|
Singapore 0.10.1 - 'gallery' Cross-Site Scripting
|
28 |
WEB
|
T0xic
|
|
2012-03-09
|
|
PHPMyVisites 2.4 - 'PHPmv2/index.php' Multiple Cross-Site Scripting Vulnerabilities
|
27 |
WEB
|
AkaStep
|
|
2012-03-08
|
|
SAP Business Objects InfoView System - '/webi/webi_modify.aspx?id' Cross-Site Scripting
|
28 |
WEB
|
vulns@dionach.com
|
|
2012-03-08
|
|
SAP Business Objects InfoView System - '/help/helpredir.aspx?guide' Cross-Site Scripting
|
29 |
WEB
|
vulns@dionach.com
|
|
2012-03-08
|
|
SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting
|
28 |
WEB
|
vulns@dionach.com
|
|
2015-05-07
|
|
WordPress Plugin Freshmail 1.5.8 - SQL Injection
|
27 |
WEB
|
Felipe Molina
|
|
2012-03-08
|
|
Ilient SysAid 8.5.5 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
|
28 |
WEB
|
Julien Ahrens
|
|
2012-03-08
|
|
ToendaCMS 1.6.2 - '/setup/index.php?site' Traversal Local File Inclusion
|
27 |
WEB
|
AkaStep
|
|
2012-03-08
|
|
LeKommerce - 'id' SQL Injection
|
28 |
WEB
|
Mazt0r
|
|
2015-05-06
|
|
elFinder 2 - Remote Command Execution (via File Creation)
|
27 |
WEB
|
TUNISIAN CYBER
|
|
2015-05-06
|
|
PDF Converter & Editor 2.1 iOS - Local File Inclusion
|
33 |
WEB
|
Vulnerability-Lab
|
|
2015-05-06
|
|
vPhoto-Album 4.2 iOS - Local File Inclusion
|
29 |
WEB
|
Vulnerability-Lab
|
|
2012-03-07
|
|
OSClass 2.3.x - Directory Traversal / Arbitrary File Upload
|
32 |
WEB
|
Filippo Cavallarin
|
|
2012-03-07
|
|
Exponent CMS 2.0 - 'src' SQL Injection
|
29 |
WEB
|
Rob Miller
|
|
2012-03-06
|
|
Fork CMS 3.2.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
|
29 |
WEB
|
Gjoko Krstic
|
|
2012-03-05
|
|
Joomla! 2.5.1 - 'redirect.php' Blind SQL Injection
|
27 |
WEB
|
Colin Wong
|
|
2012-03-05
|
|
11in1 CMS 1.2.1 - 'admin/tps?id' SQL Injection
|
28 |
WEB
|
Chokri B.A
|
|
2012-03-05
|
|
11in1 CMS 1.2.1 - 'admin/comments?topicID' SQL Injection
|
24 |
WEB
|
Chokri B.A
|
|
2012-03-05
|
|
Open Realty 2.5.x - 'select_users_template' Local File Inclusion
|
32 |
WEB
|
Aung Khant
|
|
2015-05-04
|
|
WordPress Plugin Ultimate Product Catalogue 3.1.2 - Multiple Persistent Cross-Site Scripting / Cross
|
31 |
WEB
|
Felipe Molina
|
|
2015-05-04
|
|
PhotoWebsite 3.1 iOS - Local File Inclusion
|
28 |
WEB
|
Vulnerability-Lab
|
|
2012-03-05
|
|
Etano 1.20/1.22 - 'photo_view.php?return' Cross-Site Scripting
|
23 |
WEB
|
Aung Khant
|
|
2012-03-05
|
|
Etano 1.20/1.22 - 'photo_search.php' Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
Aung Khant
|
|
2012-03-05
|
|
Etano 1.20/1.22 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
Aung Khant
|
|
2012-03-04
|
|
LastGuru ASP Guestbook - 'View.asp' SQL Injection
|
26 |
WEB
|
demonalex
|
|
2012-03-02
|
|
starCMS - 'q' URI Cross-Site Scripting
|
27 |
WEB
|
Am!r
|
|
2012-02-28
|
|
Fork CMS 3.x - '/backend/modules/error/actions/index.php?parse()' Multiple Error Display Cross-Site
|
31 |
WEB
|
anonymous
|
|
2012-02-28
|
|
Fork CMS 3.x - '/private/en/locale/index?name' Cross-Site Scripting
|
34 |
WEB
|
anonymous
|
|
2012-02-29
|
|
Traidnt Topics Viewer 2.0 - 'main.php' Cross-Site Request Forgery
|
29 |
WEB
|
Green Hornet
|
|
2012-02-29
|
|
Dotclear 2.4.1.2 - '/admin/plugin.php?page' Cross-Site Scripting
|
31 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-29
|
|
Dotclear 2.4.1.2 - '/admin/comments.php' Multiple Cross-Site Scripting Vulnerabilities
|
31 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-29
|
|
Dotclear 2.4.1.2 - '/admin/blogs.php?nb' Cross-Site Scripting
|
28 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-29
|
|
Dotclear 2.4.1.2 - '/admin/auth.php?login_data' Cross-Site Scripting
|
31 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-27
|
|
OSQA's CMS - Multiple HTML Injection Vulnerabilities
|
32 |
WEB
|
Ucha Gobejishvili
|
|
2012-02-27
|
|
Bontq - 'user/' URI Cross-Site Scripting
|
32 |
WEB
|
sonyy
|
|
2012-02-26
|
|
Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities
|
28 |
WEB
|
MustLive
|
|
2012-02-26
|
|
MyJobList 0.1.3 - 'eid' SQL Injection
|
28 |
WEB
|
Red Security TEAM
|
|
2012-02-23
|
|
Mobile Mp3 Search Script 2.0 - 'dl.php' HTTP Response Splitting
|
33 |
WEB
|
Corrado Liotta
|
|
2012-02-22
|
|
Oxwall 1.1.1 - 'plugin' Cross-Site Scripting
|
24 |
WEB
|
Ariko-Security
|
|
2012-02-22
|
|
Chyrp 2.1.2 - '/includes/error.php?body' Cross-Site Scripting
|
28 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-22
|
|
Chyrp 2.1.1 - 'ajax.php' HTML Injection
|
27 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-22
|
|
Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities
|
30 |
WEB
|
Benjamin Kunz Mejri
|
|
2012-02-22
|
|
ContentLion Alpha 1.3 - 'login.php' Cross-Site Scripting
|
26 |
WEB
|
Stefan Schurtz
|
|
2012-02-21
|
|
CPG Dragonfly CMS 9.3.3.0 - Multiple Multiple Cross-Site Scripting Vulnerabilities
|
30 |
WEB
|
Ariko-Security
|
|
2012-02-21
|
|
Xavi 7968 ADSL Router - '/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox' Cross-Sit
|
40 |
WEB
|
Busindre
|
|
2012-02-20
|
|
Joomla! Component Machine - Multiple SQL Injections
|
27 |
WEB
|
the_cyber_nuxbie
|
|
2015-04-29
|
|
OS Solution OSProperty 2.8.0 - SQL Injection
|
31 |
WEB
|
Brandon Perry
|
|
2015-04-29
|
|
Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities
|
26 |
WEB
|
hyp3rlinx
|
|
2015-04-29
|
|
WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities
|
26 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-18
|
|
Joomla! Component com_xvs - 'Controller' Local File Inclusion
|
30 |
WEB
|
KedAns-Dz
|
|
2012-02-21
|
|
Dolphin 7.0.x - 'explanation.php?explain' Cross-Site Scripting
|
29 |
WEB
|
Aung Khant
|
|
2012-02-21
|
|
Dolphin 7.0.x - 'viewFriends.php' Multiple Cross-Site Scripting Vulnerabilities
|
29 |
WEB
|
Aung Khant
|
|
2012-02-20
|
|
TestLink - Multiple SQL Injections
|
25 |
WEB
|
Juan M. Natal
|
|
2012-02-20
|
|
F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities
|
29 |
WEB
|
muuratsalo
|
|
2012-02-20
|
|
VOXTRONIC Voxlog Professional 3.7.x - 'userlogdetail.php?idclient' SQL Injection
|
28 |
WEB
|
J. Greil
|
|
2012-02-20
|
|
VOXTRONIC Voxlog Professional 3.7.x - 'get.php?v' Arbitrary File Access
|
23 |
WEB
|
J. Greil
|
|
2012-02-18
|
|
Tiki Wiki CMS Groupware - 'url' Open Redirection
|
24 |
WEB
|
sonyy
|
|
2015-04-27
|
|
WordPress Core 4.2 - Persistent Cross-Site Scripting
|
22 |
WEB
|
klikki
|
|
2015-04-27
|
|
OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting
|
24 |
WEB
|
Adam Ziaja
|
|
2012-02-18
|
|
Joomla! Component com_xcomp - Local File Inclusion
|
23 |
WEB
|
KedAns-Dz
|
|
2012-02-18
|
|
Joomla! Component com_x-shop - 'idd' SQL Injection
|
23 |
WEB
|
KedAns-Dz
|
|
2012-02-16
|
|
Impulsio CMS - 'id' SQL Injection
|
23 |
WEB
|
sonyy
|
|
2012-02-17
|
|
JaWiki - 'versionNo' Cross-Site Scripting
|
25 |
WEB
|
sonyy
|
|
2015-04-23
|
|
WordPress Plugin Ultimate Product Catalogue - SQL Injection (2)
|
25 |
WEB
|
Felipe Molina
|
|
2015-04-23
|
|
WordPress Plugin Ultimate Product Catalogue - SQL Injection (1)
|
27 |
WEB
|
Felipe Molina
|
|
2015-04-23
|
|
WebUI 1.5b6 - Remote Code Execution
|
26 |
WEB
|
TUNISIAN CYBER
|
|
2015-04-22
|
|
Wolf CMS 0.8.2 - Arbitrary File Upload
|
27 |
WEB
|
CWH Underground
|
|
2015-04-22
|
|
Open-Letters - Remote PHP Code Injection
|
24 |
WEB
|
TUNISIAN CYBER
|
|
2015-04-21
|
|
BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File Retrieval/Deletion
|
26 |
WEB
|
Portcullis
|
|
2015-04-21
|
|
GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
|
29 |
WEB
|
Chris McCurley
|
|
2015-04-21
|
|
WordPress Plugin Community Events 1.3.5 - SQL Injection
|
23 |
WEB
|
Hannes Trunde
|
|
2015-04-21
|
|
MediaSuite CMS - Artibary File Disclosure
|
29 |
WEB
|
KnocKout inj3ct0r
|
|
2015-04-21
|
|
WordPress Plugin Tune Library 1.5.4 - SQL Injection
|
25 |
WEB
|
Hannes Trunde
|
|
2015-04-21
|
|
WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (2)
|
22 |
WEB
|
dadou dz
|
|
2015-04-21
|
|
WordPress Plugin NEX-Forms < 3.0 - SQL Injection
|
23 |
WEB
|
Claudio Viviani
|
|
2015-04-21
|
|
Photo Manager Pro 4.4.0 iOS - Code Execution
|
25 |
WEB
|
Vulnerability-Lab
|
|
2015-04-21
|
|
Mobile Drive HD 1.8 - Local File Inclusion
|
19 |
WEB
|
Vulnerability-Lab
|
|
2015-04-21
|
|
Photo Manager Pro 4.4.0 iOS - Local File Inclusion
|
26 |
WEB
|
Vulnerability-Lab
|
|
2015-04-21
|
|
Wifi Drive Pro 1.2 iOS - Local File Inclusion
|
23 |
WEB
|
Vulnerability-Lab
|
|
2015-04-21
|
|
SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities
|
23 |
WEB
|
Vulnerability-Lab
|
|
2012-02-17
|
|
ButorWiki 3.0 - 'service' Cross-Site Scripting
|
28 |
WEB
|
sonyy
|
|
2012-02-17
|
|
Pandora FMS 4.0.1 - 'sec2' Local File Inclusion
|
26 |
WEB
|
Ucha Gobejishvili
|
|
2012-02-16
|
|
CMS Faethon 1.3.4 - 'articles.php' Multiple SQL Injections
|
23 |
WEB
|
tempe_mendoan
|
|
2012-02-16
|
|
Tube Ace - 'q' Cross-Site Scripting
|
29 |
WEB
|
Daniel Godoy
|
|
2012-02-15
|
|
LEPTON 1.1.3 - Cross-Site Scripting
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-15
|
|
11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)
|
24 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-15
|
|
11in1 CMS 1.2.1 - '/admin/index.php?class' Traversal Local File Inclusion
|
29 |
WEB
|
High-Tech Bridge SA
|
|
2012-02-15
|
|
11in1 CMS 1.2.1 - 'index.php?class' Traversal Local File Inclusion
|
26 |
WEB
|
High-Tech Bridge SA
|
|
2015-04-16
|
|
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection
|
24 |
WEB
|
Claudio Viviani
|
|
2015-04-15
|
|
WordPress Plugin MiwoFTP 1.0.5 - Arbitrary File Download (1)
|
30 |
WEB
|
Necmettin COSKUN
|
|
2012-02-13
|
|
EditWrxLite CMS - 'wrx.cgi' Remote Command Execution
|
23 |
WEB
|
chippy1337
|
|
2012-02-13
|
|
STHS v2 Web Portal - 'team.php?team' SQL Injection
|
27 |
WEB
|
Liyan Oz
|
|
2012-02-13
|
|
STHS v2 Web Portal - 'prospect.php?team' SQL Injection
|
29 |
WEB
|
Liyan Oz
|
|
2012-02-13
|
|
STHS v2 Web Portal - 'prospects.php?team' SQL Injection
|
30 |
WEB
|
Liyan Oz
|
