|
2012-01-02
|
|
FuseTalk Forums 3.2 - 'windowed' Cross-Site Scripting
|
6 |
WEB
|
sonyy
|
|
2011-01-01
|
|
PHPB2B 4.1 - 'q' Cross-Site Scripting
|
6 |
WEB
|
H4ckCity Security Team
|
|
2012-01-01
|
|
WordPress Plugin WP Live.php 1.2.1 - 's' Cross-Site Scripting
|
6 |
WEB
|
H4ckCity Security Team
|
|
2012-01-01
|
|
Siena CMS 1.242 - 'err' Cross-Site Scripting
|
6 |
WEB
|
Net.Edit0r
|
|
2011-12-31
|
|
WordPress Plugin TheCartPress 1.6 - 'OptionsPostsList.php' Cross-Site Scripting
|
6 |
WEB
|
6Scan
|
|
2015-03-24
|
|
WordPress Plugin InBoundio Marketing 1.0 - Arbitrary File Upload
|
6 |
WEB
|
KedAns-Dz
|
|
2011-12-21
|
|
epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-20
|
|
Cyberoam UTM 10 - 'tableid' SQL Injection
|
6 |
WEB
|
Benjamin Kunz Mejri
|
|
2011-12-20
|
|
Joomla! Component com_caproductprices - 'id' SQL Injection
|
6 |
WEB
|
CoBRa_21
|
|
2011-12-20
|
|
PHPShop CMS 3.4 - Multiple Cross-Site Scripting / SQL Injections
|
6 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-20
|
|
Tiki Wiki CMS Groupware 8.1 - 'show_errors' HTML Injection
|
6 |
WEB
|
Stefan Schurtz
|
|
2011-12-20
|
|
Joomla! Component com_tsonymf - 'idofitem' SQL Injection
|
5 |
WEB
|
CoBRa_21
|
|
2011-12-19
|
|
PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting
|
6 |
WEB
|
G13
|
|
2015-03-22
|
|
WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download
|
5 |
WEB
|
Kacper Szurek
|
|
2015-03-22
|
|
Joomla! Component Spider FAQ - SQL Injection
|
6 |
WEB
|
Manish Tanwar
|
|
2015-03-21
|
|
Telescope 0.9.2 - Markdown Persistent Cross-Site Scripting
|
7 |
WEB
|
shubs
|
|
2011-12-18
|
|
Video Community Portal - 'userID' SQL Injection
|
7 |
WEB
|
Lazmania61
|
|
2011-12-17
|
|
Social Network Community 2 - 'userID' SQL Injection
|
8 |
WEB
|
Lazmania61
|
|
2011-12-17
|
|
Flirt-Projekt 4.8 - 'rub' SQL Injection
|
7 |
WEB
|
Lazmania61
|
|
2011-12-15
|
|
Websense 7.6 Products - 'favorites.exe' Authentication Bypass
|
7 |
WEB
|
Ben Williams
|
|
2011-12-15
|
|
Websense 7.6 Triton - 'ws_irpt.exe' Remote Command Execution
|
7 |
WEB
|
Ben Williams
|
|
2011-12-15
|
|
Websense 7.6 - Triton Report Management Interface Cross-Site Scripting
|
7 |
WEB
|
Ben Williams
|
|
2011-12-15
|
|
Owl Intranet Engine 1.00 - 'userid' Authentication Bypass
|
7 |
WEB
|
RedTeam Pentesting GmbH
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - 'login[]' Cross-Site Scripting
|
7 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - 'clients.php' Cross-Site Scripting
|
8 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - 'framed' Cross-Site Scripting
|
8 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - URI Cross-Site Scripting
|
9 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - 'contact_id' SQL Injection
|
10 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
BrowserCRM 5.100.1 - 'parent_id' SQL Injection
|
8 |
WEB
|
High-Tech Bridge SA
|
|
2011-12-14
|
|
Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities
|
8 |
WEB
|
Avram Marius
|
|
2011-12-16
|
|
Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities
|
8 |
WEB
|
Avram Marius
|
|
2011-12-31
|
|
WordPress Plugin The Welcomizer 1.3.9.4 - 'twiz-index.php' Cross-Site Scripting
|
8 |
WEB
|
Am!r
|
|
2011-12-13
|
|
WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting
|
7 |
WEB
|
Am!r
|
|
2015-03-19
|
|
Citrix Nitro SDK - Command Injection
|
8 |
WEB
|
Han Sahin
|
|
2015-03-19
|
|
Citrix Command Center - Credential Disclosure
|
8 |
WEB
|
Han Sahin
|
|
2015-03-19
|
|
EMC M&R (Watch4net) - Directory Traversal
|
10 |
WEB
|
Han Sahin
|
|
2015-03-19
|
|
Joomla! Component ECommerce-WD 1.2.5 - SQL Injection
|
10 |
WEB
|
Brandon Perry
|
|
2015-03-19
|
|
EMC M&R (Watch4net) - Credential Disclosure
|
7 |
WEB
|
Han Sahin
|
|
2015-03-19
|
|
Chamilo LMS 1.9.10 - Multiple Vulnerabilities
|
7 |
WEB
|
Rehan Ahmed
|
|
2011-12-12
|
|
WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting
|
8 |
WEB
|
Am!r
|
|
2011-12-09
|
|
Pet Listing - 'preview.php' Cross-Site Scripting
|
8 |
WEB
|
Mr.PaPaRoSSe
|
|
2015-03-18
|
|
Websense Appliance Manager - Command Injection
|
7 |
WEB
|
Han Sahin
|
|
2015-03-17
|
|
Metasploit Project < 4.11.1 - Initial User Creation Cross-Site Request Forgery (Metasploit)
|
8 |
WEB
|
Mohamed Abdelbaset Elnoby
|
|
2015-03-17
|
|
Moodle 2.5.9/2.6.8/2.7.5/2.8.3 - Block Title Handler Cross-Site Scripting
|
8 |
WEB
|
LiquidWorm
|
|
2015-03-16
|
|
WordPress Plugin WPML 3.1.9 - Multiple Vulnerabilities
|
9 |
WEB
|
Jouko Pynnonen
|
|
2015-03-16
|
|
WordPress Plugin SEO by Yoast 1.7.3.3 - Blind SQL Injection
|
10 |
WEB
|
Ryan Dewhurst
|
|
2011-12-06
|
|
Simple Machines Forum (SMF) 1.1.15 - 'fckeditor' Arbitrary File Upload
|
9 |
WEB
|
HELLBOY
|
|
2011-12-06
|
|
WordPress Plugin Pretty Link 1.5.2 - 'pretty-bar.php' Cross-Site Scripting
|
9 |
WEB
|
Am!r
|
|
2011-12-05
|
|
Elxis CMS 2009 - 'administrator/index.php' URI Cross-Site Scripting
|
11 |
WEB
|
Ewerson Guimaraes
|
|
2011-12-05
|
|
Elxis CMS 2009 - 'index.php?task' Cross-Site Scripting
|
10 |
WEB
|
Ewerson Guimaraes
|
|
2011-12-01
|
|
Hero 3.69 - 'month' Cross-Site Scripting
|
9 |
WEB
|
Gjoko Krstic
|
|
2011-12-01
|
|
AtMail 1.04 - 'func' Multiple Cross-Site Scripting Vulnerabilities
|
10 |
WEB
|
Dognædis
|
|
2015-03-16
|
|
Smart PHP Poll - Authentication Bypass
|
8 |
WEB
|
Mr.tro0oqy yemen
|
|
2015-03-16
|
|
Joomla! Component com_simplephotogallery 1.0 - SQL Injection
|
8 |
WEB
|
Moneer Masoud
|
|
2011-11-30
|
|
SugarCRM Community Edition 6.3.0RC1 - 'index.php' Multiple SQL Injections
|
9 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-30
|
|
WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting
|
8 |
WEB
|
Am!r
|
|
2011-11-30
|
|
WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting
|
9 |
WEB
|
Am!r
|
|
2011-11-30
|
|
OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection
|
8 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-30
|
|
OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting
|
8 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-30
|
|
OrangeHRM 2.6.11 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
10 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-29
|
|
Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal
|
7 |
WEB
|
Nick Freeman
|
|
2015-03-08
|
|
WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload
|
7 |
WEB
|
CrashBandicot
|
|
2015-03-10
|
|
Joomla! Component com_simplephotogallery 1.0 - Arbitrary File Upload
|
7 |
WEB
|
CrashBandicot
|
|
2015-03-04
|
|
WordPress Theme DesignFolio Plus 1.2 - Arbitrary File Upload
|
8 |
WEB
|
CrashBandicot
|
|
2015-03-12
|
|
Codiad 2.5.3 - Local File Inclusion
|
10 |
WEB
|
TUNISIAN CYBER
|
|
2015-03-12
|
|
Citrix Netscaler NS10.5 - WAF Bypass (Via HTTP Header Pollution)
|
8 |
WEB
|
BGA Security
|
|
2015-03-13
|
|
WoltLab Community Gallery - Persistent Cross-Site Scripting
|
8 |
WEB
|
ITAS Team
|
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access
|
7 |
WEB
|
LiquidWorm
|
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/admin_blocks.php?Filename' Traversal Arbitrary File Access
|
7 |
WEB
|
LiquidWorm
|
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php' Multiple Cross-
|
7 |
WEB
|
LiquidWorm
|
|
2011-11-28
|
|
Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php' Multiple Cross-Site
|
8 |
WEB
|
LiquidWorm
|
|
2011-11-28
|
|
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
|
7 |
WEB
|
Amir
|
|
2011-11-26
|
|
eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
|
9 |
WEB
|
d3v1l
|
|
2015-03-11
|
|
CS-Cart 4.2.4 - Cross-Site Request Forgery
|
9 |
WEB
|
Luis Santana
|
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting
|
11 |
WEB
|
anonymous
|
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting
|
8 |
WEB
|
anonymous
|
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting
|
7 |
WEB
|
anonymous
|
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scr
|
8 |
WEB
|
anonymous
|
|
2011-11-24
|
|
HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting
|
7 |
WEB
|
anonymous
|
|
2011-11-24
|
|
Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
|
11 |
WEB
|
X-Cisadane
|
|
2011-11-24
|
|
Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
|
10 |
WEB
|
X-Cisadane
|
|
2011-11-24
|
|
AdaptCMS 2.0 - SQL Injection
|
8 |
WEB
|
X-Cisadane
|
|
2011-11-23
|
|
Pro Clan Manager 0.4.2 - SQL Injection
|
10 |
WEB
|
anonymous
|
|
2011-11-22
|
|
Hastymail2 - 'rs' Cross-Site Scripting
|
9 |
WEB
|
HTrovao
|
|
2011-11-23
|
|
Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities
|
9 |
WEB
|
RPinto
|
|
2011-11-23
|
|
Prestashop 1.4.4.1 - 'displayImage.php' HTTP Response Splitting
|
9 |
WEB
|
RGouveia
|
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/admin/ajaxfilemanager/ajax_save_text.php' Multiple Cross-Site Scripting Vulne
|
10 |
WEB
|
Prestashop
|
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition' Cr
|
11 |
WEB
|
Prestashop
|
|
2011-11-23
|
|
PrestaShop 1.4.4.1 - '/modules/mondialrelay/googlemap.php' Multiple Cross-Site Scripting Vulnerabili
|
10 |
WEB
|
Prestashop
|
|
2011-11-23
|
|
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
Prestashop
|
|
2011-11-23
|
|
WordPress Plugin NewsLetter Meenews 5.1 - 'idnews' Cross-Site Scripting
|
11 |
WEB
|
Amir
|
|
2011-11-23
|
|
WordPress Plugin Featurific For WordPress 1.6.2 - 'snum' Cross-Site Scripting
|
9 |
WEB
|
Amir
|
|
2011-11-23
|
|
WordPress Plugin ClickDesk Live Support 2.0 - 'cdwidget' Cross-Site Scripting
|
12 |
WEB
|
Amir
|
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/admin/boxes.php?rowid' SQL Injection
|
10 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/user/info.php?id' SQL Injection
|
13 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1.0 - '/user/index.php' Multiple SQL Injections
|
11 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-23
|
|
Dolibarr ERP/CRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-22
|
|
TA.CMS (TeachArabia) - 'lang' Traversal Local File Inclusion
|
13 |
WEB
|
CoBRa_21
|
|
2011-11-22
|
|
TA.CMS (TeachArabia) - 'index.php?id' SQL Injection
|
11 |
WEB
|
CoBRa_21
|
|
2011-11-21
|
|
WordPress Plugin Lanoba Social 1.0 - 'action' Cross-Site Scripting
|
12 |
WEB
|
Amir
|
|
2011-11-21
|
|
WordPress Plugin Adminimize 1.7.21 - 'page' Cross-Site Scripting
|
12 |
WEB
|
Am!r
|
|
2011-11-21
|
|
WordPress Plugin Advanced Text Widget 2.0 - 'page' Cross-Site Scripting
|
11 |
WEB
|
Amir
|
|
2011-11-21
|
|
WordPress Plugin Alert Before Your Post - 'name' Cross-Site Scripting
|
12 |
WEB
|
Am!r
|
|
2011-11-20
|
|
Digital Attic Foundation CMS - 'id' SQL Injection
|
10 |
WEB
|
tempe_mendoan
|
|
2015-03-10
|
|
GeniXCMS 0.0.1 - Multiple Vulnerabilities
|
11 |
WEB
|
LiquidWorm
|
|
2015-03-10
|
|
CodoForum 2.5.1 - Arbitrary File Download
|
11 |
WEB
|
Kacper Szurek
|
|
2011-11-17
|
|
WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting
|
10 |
WEB
|
Am!r
|
|
2011-11-17
|
|
ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting
|
13 |
WEB
|
James webb
|
|
2011-11-17
|
|
webERP 4.3.8 - '/reportwriter/FormMaker.php?ReportID' SQL Injection
|
12 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-17
|
|
webERP 4.3.8 - '/reportwriter/ReportMaker.php?reportid' SQL Injection
|
9 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-17
|
|
webERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities
|
9 |
WEB
|
High-Tech Bridge SA
|
|
2011-11-16
|
|
Webistry 1.6 - 'pid' SQL Injection
|
10 |
WEB
|
CoBRa_21
|
|
2011-11-13
|
|
Search Plugin for Hotaru CMS 1.4.2 - 'admin_index.php?site_name' Cross-Site Scripting
|
9 |
WEB
|
Gjoko Krstic
|
|
2015-03-06
|
|
PHP Betoffice (Betster) 1.0.4 - Authentication Bypass / SQL Injection
|
11 |
WEB
|
ZeQ3uL
|
|
2015-03-07
|
|
Elastix 2.x - Blind SQL Injection
|
10 |
WEB
|
Ahmed Aboul-Ela
|
|
2015-03-06
|
|
ProjectSend r561 - SQL Injection
|
12 |
WEB
|
ITAS Team
|
|
2011-11-14
|
|
Joomla! Component Content - 'year' SQL Injection
|
12 |
WEB
|
E.Shahmohamadi
|
|
2014-11-24
|
|
WordPress Plugin Download Manager 2.7.2 - Privilege Escalation
|
11 |
WEB
|
Kacper Szurek
|
|
2011-11-11
|
|
Infoblox NetMRI 6.2.1 - Admin Login Page Multiple Cross-Site Scripting Vulnerabilities
|
12 |
WEB
|
Jose Carlos de Arriba
|
|
2011-11-10
|
|
Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities
|
11 |
WEB
|
Jose Carlos de Arriba
|
|
2011-11-09
|
|
AShop - Open Redirection / Cross-Site Scripting
|
9 |
WEB
|
Infoserve Security Team
|
|
2011-11-08
|
|
PBCS Technology - 'articlenav.php' SQL Injection
|
9 |
WEB
|
Kalashinkov3
|
|
2011-11-04
|
|
Centreon 2.3.1 - 'command_name' Remote Command Execution
|
8 |
WEB
|
Christophe de la Fuente
|
|
2011-11-07
|
|
Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal
|
10 |
WEB
|
Buherátor
|
|
2011-11-07
|
|
Admin Bot - 'news.php' SQL Injection
|
11 |
WEB
|
baltazar
|
