Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-09-30   WordPress Theme RedLine 1.65 - 's' Cross-Site Scripting 18 WEB SiteWatch
2011-09-30   WordPress Theme Black-LetterHead 1.5 - 'index.php' Cross-Site Scripting 18 WEB SiteWatch
2011-09-30   WordPress Theme Morning Coffee 3.5 - 'index.php' Cross-Site Scripting 23 WEB SiteWatch
2011-09-29   WordPress Theme Pixiv Custom Theme 2.1.5 - 'cpage' Cross-Site Scripting 15 WEB SiteWatch
2011-09-24   WordPress Theme Web Minimalist 1.1 - 'index.php' Cross-Site Scripting 21 WEB SiteWatch
2011-09-24   WordPress Theme Cover WP 1.6.5 - 's' Cross-Site Scripting 20 WEB jabdah
2011-09-29   WordPress Theme EvoLve 1.2.5 - 's' Cross-Site Scripting 20 WEB SiteWatch
2011-09-29   WordPress Theme Elegant Grunge 1.0.3 - 's' Cross-Site Scripting 19 WEB SiteWatch
2011-09-24   WordPress Theme F8 Lite 4.2.1 - 's' Cross-Site Scripting 18 WEB SiteWatch
2011-09-24   WordPress Theme Hybrid 0.9 - 'cpage' Cross-Site Scripting 19 WEB SiteWatch
2011-09-29   WordPress Theme Atahualpa 3.6.7 - 's' Cross-Site Scripting 17 WEB SiteWatch
2011-09-29   Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities 22 WEB Stefan Schurtz
2011-09-29   Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities 21 WEB Aung Khant
2011-09-28   Traq 2.2 - Multiple SQL Injections / Cross-Site Scripting 20 WEB High-Tech Bridge SA
2011-09-27   Vanira CMS - 'vtpidshow' SQL Injection 19 WEB kurdish hackers team
2011-09-27   Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities 24 WEB MustLive
2011-09-26   Joomla! Component Biitatemplateshop - 'groups' SQL Injection 21 WEB BHG Security Group
2011-09-26   S9Y Serendipity Freetag-plugin 3.23 - 'serendipity[tagview]' Cross-Site Scripting 20 WEB Stefan Schurtz
2011-09-26   AdaptCMS 2.0.1 - Cross-Site Scripting / Information Disclosure 19 WEB Stefan Schurtz
2011-09-26   WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) - Regular 19 WEB knull
2011-09-24   IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing - Arbitrary File Disclosure 20 WEB David Kirkpatrick
2011-09-22   AWStats 6.95/7.0 - 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities 19 WEB MustLive
2011-09-22   TWiki 5.0.2 SlideShowPlugin - Slide Show Pages URI Cross-Site Scripting 20 WEB Mesut Timur
2011-09-22   TWiki 5.0.2 - '/bin/view/Main/Jump?newtopic' Cross-Site Scripting 21 WEB Mesut Timur
2015-02-23   WordPress Plugin Easy Social Icons 1.2.2 - Cross-Site Request Forgery 20 WEB Eric Flokstra
2015-02-23   phpBugTracker 1.6.0 - Multiple Vulnerabilities 17 WEB Steffen Rösemann
2015-02-23   Zeuscart 4.0 - Multiple Vulnerabilities 19 WEB Steffen Rösemann
2015-02-23   Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit) 18 WEB Pablo González
2015-02-23   Clipbucket 2.7 RC3 0.9 - Blind SQL Injection 21 WEB CWH Underground
2015-02-23   WeBid 1.1.1 - Unrestricted Arbitrary File Upload 18 WEB CWH Underground
2015-02-23   Beehive Forum 1.4.4 - Persistent Cross-Site Scripting 16 WEB Halil Dalabasmaz
2011-09-22   Zyncro 3.0.1.20 - Social Network Message Menu SQL Injection 19 WEB Ferran Pichel Llaquet
2011-09-22   Zyncro 3.0.1.20 - Multiple HTML Injection Vulnerabilities 19 WEB Ferran Pichel Llaquet
2011-09-21   OneCMS 2.6.4 - Multiple SQL Injections 20 WEB kurdish hackers team
2011-09-18   phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting 20 WEB iM4n
2011-09-06   Free Help Desk 1.1b - Multiple Input Validation Vulnerabilities 15 WEB High-Tech Bridge SA
2011-09-21   i-Gallery 3.4 - 'd' Cross-Site Scripting 17 WEB Kurd-Team
2011-09-19   Card sharj 1.0 - Multiple SQL Injections 22 WEB Net.Edit0r
2011-09-19   net4visions (Multiple Products) - 'dir' Multiple Cross-Site Scripting Vulnerabilities 18 WEB Gjoko Krstic
2011-09-19   Aspgwy Access 1.0 - 'matchword' Cross-Site Scripting 19 WEB kurdish hackers team
2011-09-19   Toko Lite CMS 1.5.2 - HTTP Response Splitting / Cross-Site Scripting 21 WEB Gjoko Krstic
2011-09-17   Ay Computer (Multiple Products) - Multiple SQL Injections 18 WEB m3rciL3Ss
2011-09-18   ASP Basit Haber Script 1.0 - 'id' SQL Injection 20 WEB m3rciL3Ss
2011-09-16   PunBB 1.3.5 - Multiple Cross-Site Scripting Vulnerabilities 18 WEB Piotr Duszynski
2011-09-15   StarDevelop LiveHelp 2.0 - 'index.php' Local File Inclusion 19 WEB KedAns-Dz
2011-09-14   WordPress Plugin Auctions 1.8.8 - 'wpa_id' SQL Injection 19 WEB sherl0ck_
2011-09-14   Microsoft SharePoint 2007/2010 - 'Source' Multiple Open Redirections 18 WEB Irene Abezgauz
2011-09-12   Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting 19 WEB Gustavo Roberto
2015-02-20   Pentaho < 4.5.0 - User Console XML Injection 20 WEB K.d Long
2011-09-12   Papoo CMS Light 4.0 - Multiple Cross-Site Scripting Vulnerabilities 16 WEB Stefan Schurtz
2011-09-08   Pluck CMS 4.7 - Multiple Local File Inclusion / File Disclosure Vulnerabilities 20 WEB Bl4k3
2015-02-19   Piwigo 2.7.3 - Multiple Vulnerabilities 21 WEB Steffen Rösemann
2015-02-19   CrushFTP 7.2.0 - Multiple Vulnerabilities 21 WEB Rehan Ahmed
2015-02-19   Piwigo 2.7.3 - SQL Injection 21 WEB Sven Schleier
2011-09-08   In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection 26 WEB SubhashDasyam
2011-09-08   SkaDate - 'blogs.php' Cross-Site Scripting 19 WEB sonyy
2011-09-05   Zikula Application Framework 1.2.7/1.3 - 'themename' Cross-Site Scripting 20 WEB High-Tech Bridge SA
2011-09-06   GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting / SQL Injections 21 WEB Yassin Aboukir
2011-09-06   Kisanji - 'gr' Cross-Site Scripting 19 WEB Bl4ck.Viper
2011-09-05   EasyGallery 5 - 'index.php' Multiple SQL Injections 17 WEB Eyup CELIK
2011-09-05   Advanced Image Hosting Script 2.3 - 'report.php' Cross-Site Scripting 20 WEB R3d-D3V!L
2015-02-18   WordPress Plugin Duplicator 0.5.8 - Privilege Escalation 18 WEB Kacper Szurek
2011-09-02   ACal 2.2.6 - 'calendar.php' Cross-Site Scripting 17 WEB T0xic
2011-09-02   Mambo Component N-Myndir - SQL Injection 21 WEB CoBRa_21
2011-09-02   Mambo Component N-Frettir - SQL Injection 20 WEB CoBRa_21
2011-09-02   KaiBB 2.0.1 - SQL Injection / Arbitrary File Upload 21 WEB KedAns-Dz
2011-09-02   Mambo Component N-Press - SQL Injection 18 WEB CoBRa_21
2015-02-18   D-Link DSL-2640B ADSL Router - 'ddnsmngr' Remote DNS Change 21 WEB Todor Donev
2011-09-02   Mambo Component Ahsshop - SQL Injection 17 WEB CoBRa_21
2011-09-02   Mambo Component N-Gallery - SQL Injection 16 WEB CoBRa_21
2015-02-17   GuppY CMS 5.0.9 < 5.00.10 - Multiple Cross-Site Request Forgery Vulnerabilities 19 WEB Brandon Murphy
2015-02-17   Guppy CMS 5.0.9/5.00.10 - Authentication Bypass/Change Email 21 WEB Brandon Murphy
2011-09-02   Mambo Component N-Skyrslur - Cross-Site Scripting 19 WEB CoBRa_21
2011-08-31   Web Professional - 'default.php' SQL Injection 18 WEB The_Exploited
2011-08-31   S9Y Serendipity 1.5.1 - 'research_display.php' SQL Injection 21 WEB The_Exploited
2011-08-31   TinyWebGallery 1.8.4 - Local File Inclusion / SQL Injection 21 WEB KedAns-Dz
2011-08-30   CS-Cart 2.2.1 - 'products.php' SQL Injection 25 WEB Net.Edit0r
2011-08-30   IBM Open Admin Tool 2.71 - Multiple Cross-Site Scripting Vulnerabilities 25 WEB Sumit Kumar Soni
2011-08-29   ClickCMS - Denial of Service / CAPTCHA Bypass 24 WEB MustLive
2015-02-16   eTouch SamePage 4.4.0.0.239 - Multiple Vulnerabilities 24 WEB Brandon Perry
2015-02-16   WordPress Plugin Fancybox 3.0.2 - Persistent Cross-Site Scripting 28 WEB NULLpOint7r
2015-02-16   WordPress Plugin WonderPlugin Audio Player 2.0 - Blind SQL Injection / Cross-Site Scripting 21 WEB Kacper Szurek
2011-08-27   phpWebSite 1.7.1 - 'mod.php' SQL Injection 20 WEB Ehsan_Hp200
2011-08-26   Mambo 4.6.5 - 'index.php' Cross-Site Request Forgery 20 WEB Caddy-Dz
2011-08-25   Simple Machines Forum (SMF) 1.1.14/2.0 - '[img]' BBCode Tag Cross-Site Request Forgery 21 WEB Christian Yerena
2011-08-25   Zazavi 1.2.1 - '/FileManager/Controller.php' Arbitrary File Upload 20 WEB KedAns-Dz
2011-08-24   VicBlog - 'tag' SQL Injection 24 WEB Eyup CELIK
2011-08-24   Tourismscripts Hotel Portal - 'hotel_city' HTML Injection 22 WEB Eyup CELIK
2011-08-24   CommodityRentals Real Estate Script - 'txtsearch' HTML Injection 19 WEB Eyup CELIK
2011-08-23   Open Classifieds 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities 20 WEB Yassin Aboukir
2011-08-22   Concrete 5.4.1 1 - 'rcID' Cross-Site Scripting 22 WEB Aung Khant
2011-08-22   TotalShopUK 1.7.2 - 'index.php' SQL Injection 21 WEB Eyup CELIK
2011-08-22   Pandora FMS 3.x - 'index.php' Cross-Site Scripting 24 WEB mehdi boukazoula
2011-08-21   OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting 23 WEB mr.pr0n
2011-08-18   Mantis Bug Tracker 1.1.8 - Cross-Site Scripting / SQL Injection 26 WEB Net.Edit0r
2011-08-18   Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting 24 WEB G.R0b1n
2011-08-17   Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections 23 WEB L0rd CrusAd3r
2011-08-17   Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection 21 WEB Inj3ct0r
2011-08-17   Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection 20 WEB Inj3ct0r
2011-08-17   Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections 18 WEB L0rd CrusAd3r
2015-02-13   WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection 17 WEB Mateusz Lach
2015-02-12   Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB Mayuresh Dani
2015-02-12   WordPress Plugin Video Gallery 2.7.0 - SQL Injection 22 WEB Claudio Viviani
2015-02-11   IBM Endpoint Manager - Persistent Cross-Site Scripting 24 WEB RedTeam Pentesting
2015-02-11   Pandora FMS 5.1 SP1 - SQL Injection 21 WEB Vulnerability-Lab
2015-02-11   WordPress Plugin Survey and Poll 1.1 - Blind SQL Injection 30 WEB Securely (Yoo Hee man)
2011-08-17   WordPress Plugin WP-Stats-Dashboard 2.6.5.1 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB High-Tech Bridge SA
2011-08-17   WordPress Plugin Fast Secure Contact Form 3.0.3.1 - 'index.php' Cross-Site Scripting 22 WEB High-Tech Bridge SA
2011-08-15   phpList 2.10.x - Security Bypass / Information Disclosure 21 WEB Davide Canali
2011-08-15   awiki 20100125 - Multiple Local File Inclusions 20 WEB muuratsalo
2011-08-17   phpWebSite - 'page_id' Cross-Site Scripting 23 WEB Ehsan_Hp200
2011-08-11   PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion 21 WEB RiRes Walid
2015-02-10   WordPress Plugin WP EasyCart - Unrestricted Arbitrary File Upload (Metasploit) 18 WEB Metasploit
2015-02-10   LG DVR LE6016D - Remote File Disclosure 23 WEB Yakir Wizman
2015-02-09   Fork CMS 3.8.5 - SQL Injection 21 WEB Sven Schleier
2015-02-09   Chamilo LMS 1.9.8 - Blind SQL Injection 22 WEB Kacper Szurek
2011-08-10   WordPress Plugin eShop 6.2.8 - Multiple Cross-Site Scripting Vulnerabilities 29 WEB High-Tech Bridge SA
2011-08-08   BlueSoft Rate My Photo Site - 'ty' SQL Injection 24 WEB darkTR
2011-08-08   BlueSoft Banner Exchange - 'referer_id' SQL Injection 26 WEB darkTR
2011-08-09   OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities 23 WEB Houssam Sahli
2011-08-08   Search Network 2.0 - 'query' Cross-Site Scripting 23 WEB darkTR
2011-08-05   Softbiz Recipes Portal Script - Multiple Cross-Site Scripting Vulnerabilities 24 WEB Net.Edit0r
2015-02-09   StaMPi - Local File Inclusion 28 WEB e . V . E . L
2015-02-09   u5CMS 3.9.3 - Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilit 24 WEB LiquidWorm
2015-02-09   u5CMS 3.9.3 - 'thumb.php' Local File Inclusion 23 WEB LiquidWorm