Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2011-09-02   Mambo Component N-Skyrslur - Cross-Site Scripting 32 WEB CoBRa_21
2011-08-31   Web Professional - 'default.php' SQL Injection 31 WEB The_Exploited
2011-08-31   S9Y Serendipity 1.5.1 - 'research_display.php' SQL Injection 33 WEB The_Exploited
2011-08-31   TinyWebGallery 1.8.4 - Local File Inclusion / SQL Injection 33 WEB KedAns-Dz
2011-08-30   CS-Cart 2.2.1 - 'products.php' SQL Injection 38 WEB Net.Edit0r
2011-08-30   IBM Open Admin Tool 2.71 - Multiple Cross-Site Scripting Vulnerabilities 38 WEB Sumit Kumar Soni
2011-08-29   ClickCMS - Denial of Service / CAPTCHA Bypass 34 WEB MustLive
2015-02-16   eTouch SamePage 4.4.0.0.239 - Multiple Vulnerabilities 36 WEB Brandon Perry
2015-02-16   WordPress Plugin Fancybox 3.0.2 - Persistent Cross-Site Scripting 39 WEB NULLpOint7r
2015-02-16   WordPress Plugin WonderPlugin Audio Player 2.0 - Blind SQL Injection / Cross-Site Scripting 33 WEB Kacper Szurek
2011-08-27   phpWebSite 1.7.1 - 'mod.php' SQL Injection 33 WEB Ehsan_Hp200
2011-08-26   Mambo 4.6.5 - 'index.php' Cross-Site Request Forgery 34 WEB Caddy-Dz
2011-08-25   Simple Machines Forum (SMF) 1.1.14/2.0 - '[img]' BBCode Tag Cross-Site Request Forgery 35 WEB Christian Yerena
2011-08-25   Zazavi 1.2.1 - '/FileManager/Controller.php' Arbitrary File Upload 32 WEB KedAns-Dz
2011-08-24   VicBlog - 'tag' SQL Injection 36 WEB Eyup CELIK
2011-08-24   Tourismscripts Hotel Portal - 'hotel_city' HTML Injection 37 WEB Eyup CELIK
2011-08-24   CommodityRentals Real Estate Script - 'txtsearch' HTML Injection 31 WEB Eyup CELIK
2011-08-23   Open Classifieds 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Yassin Aboukir
2011-08-22   Concrete 5.4.1 1 - 'rcID' Cross-Site Scripting 34 WEB Aung Khant
2011-08-22   TotalShopUK 1.7.2 - 'index.php' SQL Injection 34 WEB Eyup CELIK
2011-08-22   Pandora FMS 3.x - 'index.php' Cross-Site Scripting 37 WEB mehdi boukazoula
2011-08-21   OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting 35 WEB mr.pr0n
2011-08-18   Mantis Bug Tracker 1.1.8 - Cross-Site Scripting / SQL Injection 38 WEB Net.Edit0r
2011-08-18   Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting 37 WEB G.R0b1n
2011-08-17   Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections 34 WEB L0rd CrusAd3r
2011-08-17   Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection 34 WEB Inj3ct0r
2011-08-17   Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection 34 WEB Inj3ct0r
2011-08-17   Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections 31 WEB L0rd CrusAd3r
2015-02-13   WordPress Plugin Webdorado Spider Event Calendar 1.4.9 - SQL Injection 31 WEB Mateusz Lach
2015-02-12   Exponent CMS 2.3.1 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Mayuresh Dani
2015-02-12   WordPress Plugin Video Gallery 2.7.0 - SQL Injection 36 WEB Claudio Viviani
2015-02-11   IBM Endpoint Manager - Persistent Cross-Site Scripting 36 WEB RedTeam Pentesting
2015-02-11   Pandora FMS 5.1 SP1 - SQL Injection 34 WEB Vulnerability-Lab
2015-02-11   WordPress Plugin Survey and Poll 1.1 - Blind SQL Injection 41 WEB Securely (Yoo Hee man)
2011-08-17   WordPress Plugin WP-Stats-Dashboard 2.6.5.1 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB High-Tech Bridge SA
2011-08-17   WordPress Plugin Fast Secure Contact Form 3.0.3.1 - 'index.php' Cross-Site Scripting 36 WEB High-Tech Bridge SA
2011-08-15   phpList 2.10.x - Security Bypass / Information Disclosure 32 WEB Davide Canali
2011-08-15   awiki 20100125 - Multiple Local File Inclusions 32 WEB muuratsalo
2011-08-17   phpWebSite - 'page_id' Cross-Site Scripting 36 WEB Ehsan_Hp200
2011-08-11   PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion 35 WEB RiRes Walid
2015-02-10   WordPress Plugin WP EasyCart - Unrestricted Arbitrary File Upload (Metasploit) 31 WEB Metasploit
2015-02-10   LG DVR LE6016D - Remote File Disclosure 36 WEB Yakir Wizman
2015-02-09   Fork CMS 3.8.5 - SQL Injection 35 WEB Sven Schleier
2015-02-09   Chamilo LMS 1.9.8 - Blind SQL Injection 37 WEB Kacper Szurek
2011-08-10   WordPress Plugin eShop 6.2.8 - Multiple Cross-Site Scripting Vulnerabilities 40 WEB High-Tech Bridge SA
2011-08-08   BlueSoft Rate My Photo Site - 'ty' SQL Injection 35 WEB darkTR
2011-08-08   BlueSoft Banner Exchange - 'referer_id' SQL Injection 39 WEB darkTR
2011-08-09   OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities 34 WEB Houssam Sahli
2011-08-08   Search Network 2.0 - 'query' Cross-Site Scripting 35 WEB darkTR
2011-08-05   Softbiz Recipes Portal Script - Multiple Cross-Site Scripting Vulnerabilities 36 WEB Net.Edit0r
2015-02-09   StaMPi - Local File Inclusion 40 WEB e . V . E . L
2015-02-09   u5CMS 3.9.3 - Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilit 36 WEB LiquidWorm
2015-02-09   u5CMS 3.9.3 - 'thumb.php' Local File Inclusion 37 WEB LiquidWorm
2015-02-09   u5CMS 3.9.3 - Multiple SQL Injections 32 WEB LiquidWorm
2015-02-09   u5CMS 3.9.3 - 'deletefile.php' Arbitrary File Deletion 34 WEB LiquidWorm
2015-02-09   RedaxScript CMS 2.2.0 - SQL Injection 32 WEB ITAS Team
2011-08-04   Community Server 2007/2008 - 'TagSelector.aspx' Cross-Site Scripting 35 WEB PontoSec
2011-08-04   WordPress Plugin WP E-Commerce 3.8.6 - 'cart_messages[]' Cross-Site Scripting 33 WEB High-Tech Bridge SA
2011-08-03   HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB High-Tech Bridge SA
2011-08-03   Joomla! Component com_community - 'userid' SQL Injection 35 WEB Ne0 H4ck3R
2011-08-03   Joomla! Component com_xeslidegalfx - 'id' SQL Injection 36 WEB Ne0 H4ck3R
2011-08-03   Ataccan E-Ticaret Scripti - 'id' SQL Injection 33 WEB Err0R
2011-08-03   BESNI OKUL PORTAL - 'sayfa.asp' Cross-Site Scripting 34 WEB Err0R
2011-08-03   mt LinkDatenbank - 'b' Cross-Site Scripting 34 WEB Err0R
2011-07-11   Gilnet News - 'read_more.php' SQL Injection 34 WEB Err0R
2011-08-02   MyBB MyTabs Plugin - 'tab' SQL Injection 33 WEB AutoRUN & dR.sqL
2011-08-01   Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB Aung Khant
2014-12-12   IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution 32 WEB Jakub Palaczynski
2011-07-28   Sitecore CMS 6.4.1 - 'url' Open Redirection 32 WEB Tom Neaves
2011-07-28   HP Network Automation 9.10 - SQL Injection 34 WEB anonymous
2011-07-25   CobraScripts Trading Marketplace Script - 'cid' SQL Injection 30 WEB Ehsan_Hp200
2015-02-05   Magento Server MAGMI Plugin - Multiple Vulnerabilities 32 WEB SECUPENT
2015-02-04   Pragyan CMS 3.0 - SQL Injection 34 WEB Steffen Rösemann
2011-07-27   PHPJunkYard GBook 1.6/1.7 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB High-Tech Bridge SA
2011-07-27   MBoard 1.3 - 'url' Open Redirection 31 WEB High-Tech Bridge SA
2011-07-26   Support Incident Tracker (SiT!) 3.63 p1 - 'tasks.php?selected[]' SQL Injection 34 WEB Yuri Goltsev
2011-07-26   Support Incident Tracker (SiT!) 3.63 p1 - 'search.php?search_string' SQL Injection 32 WEB Yuri Goltsev
2011-07-26   Support Incident Tracker (SiT!) 3.63 p1 - 'billable_incidents.php?sites[]' SQL Injection 32 WEB Yuri Goltsev
2011-07-26   Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection 34 WEB Yuri Goltsev
2011-07-25   Joomla! Component com_virtualmoney 1.5 - SQL Injection 32 WEB FL0RiX
2015-02-03   Hewlett-Packard (HP) UCMDB - JMX-Console Authentication Bypass 37 WEB Hans-Martin Muench
2015-02-03   ManageEngine Desktop Central 9 Build 90087 - Cross-Site Request Forgery 36 WEB Mohamed Idris
2011-07-25   Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection 36 WEB Lazmania61
2011-07-25   Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities 33 WEB Gjoko Krstic
2011-07-25   Godly Forums - 'id' SQL Injection 34 WEB 3spi0n
2011-07-21   Synergy Software - 'id' SQL Injection 34 WEB Ehsan_Hp200
2011-07-20   Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Patrick Webster
2011-07-20   Tiki Wiki CMS Groupware 7.2 - 'snarf_ajax.php' Cross-Site Scripting 32 WEB High-Tech Bridge SA
2011-07-20   Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities 36 WEB YGN Ethical Hacker Group
2015-02-02   Sefrengo CMS 1.6.1 - Multiple SQL Injections 36 WEB ITAS Team
2011-07-11   WordPress Plugin bSuite 4.0.7 - Multiple HTML Injection Vulnerabilities 33 WEB IHTeam
2011-07-17   BlueSoft Social Networking CMS - SQL Injection 34 WEB Lazmania61
2011-07-18   BlueSoft (Multiple Products) - Multiple SQL Injections 29 WEB Lazmania61
2011-07-15   AJ Classifieds - 'listingid' SQL Injection 42 WEB Lazmania61
2011-07-15   Joomla! Component com_newssearch - SQL Injection 31 WEB Robert Cooper
2011-07-15   Joomla! Component Controller - 'Itemid' SQL Injection 32 WEB SOLVER
2011-07-15   Joomla! Component com_hospital - SQL Injection 35 WEB SOLVER
2011-07-15   Joomla! Component Juicy Gallery - 'picId' SQL Injection 32 WEB SOLVER
2011-07-15   Joomla! Component Foto - 'id_categoria' SQL Injection 34 WEB SOLVER
2011-07-15   Easy Estate Rental - 's_location' SQL Injection 33 WEB Lazmania61
2011-07-15   Auto Web Toolbox - 'id' SQL Injection 34 WEB Lazmania61
2015-01-24   NPDS CMS REvolution-13 - SQL Injection 34 WEB Narendra Bhati
2011-07-29   Chyrp 2.x swfupload Extension - 'upload_handler.php' Arbitrary File Upload / Arbitrary PHP Code Exec 36 WEB Wireghoul
2011-07-29   Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access 30 WEB Wireghoul
2011-07-29   Chyrp 2.x - 'action' Traversal Local File Inclusion 35 WEB Wireghoul
2011-07-13   Chyrp 2.x - '/includes/JavaScript.php?action' Cross-Site Scripting 34 WEB Wireghoul
2011-07-13   Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities 34 WEB Wireghoul
2011-07-13   TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities 33 WEB Gjoko Krstic
2011-07-12   Flowplayer 3.2.7 - 'linkUrl' Cross-Site Scripting 32 WEB Szymon Gruszecki
2011-07-12   Sphider 1.3.x - Admin Panel Multiple SQL Injections 31 WEB Karthik R
2015-01-29   ManageEngine Firewall Analyzer 8.0 - Directory Traversal / Cross-Site Scripting 38 WEB Ertebat Gostar Co
2011-07-11   ICMusic 1.2 - 'music_id' SQL Injection 37 WEB kaMtiEz
2011-07-11   Prontus CMS - 'page' Cross-Site Scripting 33 WEB Zerial
2011-07-08   Joomla! Component com_voj - SQL Injection 33 WEB CoBRa_21
2011-07-05   Classified Script - c-BrowseClassified Cross-Site Scripting 33 WEB Raghavendra Karthik D
2011-07-03   eTAWASOL - 'id' SQL Injection 31 WEB Bl4ck.Viper
2011-07-02   Paliz Portal - Cross-Site Scripting / Multiple SQL Injections 35 WEB Net.Edit0r
2011-07-05   Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion 33 WEB FL0RiX
2014-11-11   WordPress Plugin Photo Gallery 1.2.5 - Unrestricted Arbitrary File Upload 33 WEB Kacper Szurek
2015-01-26   Symantec Data Center Security - Multiple Vulnerabilities 35 WEB SEC Consult
2015-01-26   ferretCMS 1.0.4-alpha - Multiple Vulnerabilities 37 WEB Steffen Rösemann
2015-01-26   jclassifiedsmanager - Multiple Vulnerabilities 38 WEB Sarath Nair
2015-01-26   ManageEngine EventLog Analyzer 9.0 - Directory Traversal / Cross-Site Scripting 47 WEB Ertebat Gostar Co
2015-01-26   SWFupload 2.5.0 - Cross Frame Scripting (XFS) 35 WEB MindCracker
2015-01-26   PHP Webquest 2.6 - SQL Injection 31 WEB jordan root