|
2011-03-04
|
|
InterPhoto Image Gallery 2.4.2 - 'IPLANG' Local File Inclusion
|
29 |
WEB
|
AutoSec Tools
|
|
2011-03-03
|
|
Pragyan CMS 3.0 Beta - Multiple Cross-Site Scripting Vulnerabilities
|
28 |
WEB
|
High-Tech Bridge SA
|
|
2011-03-03
|
|
xtcModified 1.05 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
High-Tech Bridge SA
|
|
2011-03-03
|
|
phpWebSite 1.7.1 - 'local' Cross-Site Scripting
|
28 |
WEB
|
AutoSec Tools
|
|
2011-03-03
|
|
Support Incident Tracker (SiT!) 3.62 - Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
AutoSec Tools
|
|
2011-03-02
|
|
VidiScript - 'vp' Cross-Site Scripting
|
29 |
WEB
|
NassRawI
|
|
2011-03-02
|
|
Forritun - Multiple SQL Injections
|
26 |
WEB
|
eXeSoul
|
|
2011-02-28
|
|
SnapProof - 'retPageID' Cross-Site Scripting
|
28 |
WEB
|
difficult 511
|
|
2011-02-28
|
|
WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities
|
28 |
WEB
|
Danilo Massa
|
|
2011-02-23
|
|
Drupal Module Cumulus 5.x-1.1/6.x-1.4 - 'tagcloud' Cross-Site Scripting
|
27 |
WEB
|
MustLive
|
|
2014-11-28
|
|
xEpan 1.0.4 - Multiple Vulnerabilities
|
24 |
WEB
|
Parikesit _ Kurawa
|
|
2011-02-23
|
|
WordPress Plugin YT-Audio 1.7 - 'v' Cross-Site Scripting
|
29 |
WEB
|
AutoSec Tools
|
|
2011-02-23
|
|
WordPress Plugin ComicPress Manager 1.4.9 - 'lang' Cross-Site Scripting
|
22 |
WEB
|
AutoSec Tools
|
|
2011-02-23
|
|
WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting
|
24 |
WEB
|
AutoSec Tools
|
|
2011-02-25
|
|
glFusion 1.1.x/1.2.1 - 'users.php' SQL Injection
|
23 |
WEB
|
H3X
|
|
2011-02-25
|
|
phpShop 0.8.1 - 'page' Cross-Site Scripting
|
23 |
WEB
|
Aung Khant
|
|
2014-11-26
|
|
WordPress Plugin Slider REvolution 3.0.95 / Showbiz Pro 1.7.1 - Arbitrary File Upload
|
26 |
WEB
|
Simo Ben Youssef
|
|
2014-11-26
|
|
Device42 WAN Emulator 2.3 - Ping Command Injection (Metasploit)
|
23 |
WEB
|
Brandon Perry
|
|
2014-11-26
|
|
Device42 WAN Emulator 2.3 - Traceroute Command Injection (Metasploit)
|
26 |
WEB
|
Brandon Perry
|
|
2014-11-26
|
|
xEpan 1.0.1 - Cross-Site Request Forgery
|
24 |
WEB
|
High-Tech Bridge SA
|
|
2014-11-26
|
|
WordPress Plugin DB Backup - Arbitrary File Download
|
33 |
WEB
|
Ashiyane Digital Security Team
|
|
2011-02-16
|
|
mySeatXT 0.164 - 'lang' Local File Inclusion
|
26 |
WEB
|
AutoSec Tools
|
|
2011-02-22
|
|
Vanilla Forums 2.0.17.x - 'p' Cross-Site Scripting
|
26 |
WEB
|
Aung Khant
|
|
2011-02-22
|
|
IBM Lotus Sametime Server 8.0 - 'stcenter.nsf' Cross-Site Scripting
|
30 |
WEB
|
andrew
|
|
2011-02-22
|
|
WordPress Plugin GD Star Rating 1.9.7 - 'wpfn' Cross-Site Scripting
|
25 |
WEB
|
High-Tech Bridge SA
|
|
2014-11-25
|
|
Arris VAP2500 - Authentication Bypass
|
28 |
WEB
|
HeadlessZeke
|
|
2014-11-25
|
|
WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection
|
25 |
WEB
|
Kacper Szurek
|
|
2014-11-25
|
|
Crea8Social 1.3 - Persistent Cross-Site Scripting
|
24 |
WEB
|
Halil Dalabasmaz
|
|
2014-11-25
|
|
PHPMyRecipes 1.2.2 - 'dosearch.php?words_exact' SQL Injection
|
25 |
WEB
|
bard
|
|
2011-02-21
|
|
Batavi 1.0 - Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
AutoSec Tools
|
|
2011-02-18
|
|
WSN Guest 1.24 - 'wsnuser' Cookie SQL Injection
|
29 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2014-11-24
|
|
Advantech EKI-6340 - Command Injection
|
27 |
WEB
|
Core Security
|
|
2011-02-15
|
|
Getsimple CMS 2.03 - 'upload-ajax.php' Arbitrary File Upload
|
26 |
WEB
|
s3rg3770 & Chuzz
|
|
2011-02-15
|
|
Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-15
|
|
Wikipad 1.6.0 - Cross-Site Scripting / HTML Injection / Information Disclosure
|
22 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-15
|
|
Gollos 2.8 - Multiple Cross-Site Scripting Vulnerabilities
|
27 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-15
|
|
MG2 0.5.1 - Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
LiquidWorm
|
|
2011-02-12
|
|
Dokeos 1.8.6 2 - 'style' Cross-Site Scripting
|
30 |
WEB
|
AutoSec Tools
|
|
2014-11-24
|
|
WordPress Plugin DukaPress 2.5.2 - Directory Traversal
|
34 |
WEB
|
Kacper Szurek
|
|
2014-11-24
|
|
RobotStats 1.0 - 'robot' SQL Injection
|
23 |
WEB
|
ZoRLu Bugrahan
|
|
2011-02-09
|
|
Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection
|
25 |
WEB
|
jonieske
|
|
2014-11-24
|
|
WordPress Plugin wpDataTables 1.5.3 - Arbitrary File Upload
|
26 |
WEB
|
Claudio Viviani
|
|
2014-11-24
|
|
WordPress Plugin wpDataTables 1.5.3 - SQL Injection
|
22 |
WEB
|
Claudio Viviani
|
|
2011-02-12
|
|
TaskFreak! 0.6.4 - 'rss.php' HTTP Referer Header Cross-Site Scripting
|
25 |
WEB
|
LiquidWorm
|
|
2011-02-12
|
|
TaskFreak! 0.6.4 - 'print_list.php' Multiple Cross-Site Scripting Vulnerabilities
|
25 |
WEB
|
LiquidWorm
|
|
2011-02-12
|
|
TaskFreak! 0.6.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
|
23 |
WEB
|
LiquidWorm
|
|
2011-02-11
|
|
Drupal Module CAPTCHA - Security Bypass
|
22 |
WEB
|
anonymous
|
|
2011-02-10
|
|
RunCMS 2.2.2 - 'register.php' SQL Injection
|
21 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-10
|
|
webERP 4.0.1 - 'InputSerialItemsFile.php' Arbitrary File Upload
|
23 |
WEB
|
AutoSec Tools
|
|
2011-02-10
|
|
Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities
|
28 |
WEB
|
AutoSec Tools
|
|
2011-02-10
|
|
ManageEngine ADSelfService Plus 4.4 - 'EmployeeSearch.cc' Multiple Cross-Site Scripting Vulnerabilit
|
21 |
WEB
|
Core Security
|
|
2011-02-10
|
|
ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question
|
24 |
WEB
|
Core Security
|
|
2011-02-09
|
|
PHPXref 0.7 - 'nav.html' Cross-Site Scripting
|
22 |
WEB
|
MustLive
|
|
2011-02-08
|
|
UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities
|
20 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-08
|
|
CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities
|
22 |
WEB
|
AutoSec Tools
|
|
2014-11-22
|
|
Netgear WNR500 Wireless Router - 'webproc?getpage' Traversal Arbitrary File Access
|
23 |
WEB
|
LiquidWorm
|
|
2014-11-22
|
|
WordPress Plugin CM Download Manager 2.0.0 - Code Injection
|
22 |
WEB
|
Phi Ngoc Le
|
|
2014-11-22
|
|
MyBB 1.8.2 - 'unset_globals()' Function Bypass / Remote Code Execution
|
24 |
WEB
|
Taoguang Chen
|
|
2011-02-08
|
|
ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities
|
19 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-08
|
|
WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection
|
23 |
WEB
|
High-Tech Bridge SA
|
|
2011-02-07
|
|
Escortservice 1.0 - 'custid' SQL Injection
|
21 |
WEB
|
NoNameMT
|
|
2014-11-21
|
|
WordPress Plugin SP Client Document Manager 2.4.1 - SQL Injection
|
24 |
WEB
|
ITAS Team
|
|
2011-02-03
|
|
Firebook - 'index.html' Cross-Site Scripting
|
24 |
WEB
|
MustLive
|
|
2011-02-03
|
|
Octeth Oempro 3.6.4 - SQL Injection / Information Disclosure
|
25 |
WEB
|
Ignacio Garrido
|
|
2011-03-23
|
|
Web Wiz Forums 9.5 - Multiple SQL Injections
|
22 |
WEB
|
eXeSoul
|
|
2011-02-02
|
|
Betsy 4.0 - 'page' Local File Inclusion
|
25 |
WEB
|
MizoZ
|
|
2011-01-31
|
|
All In One Control Panel 1.4.1 - 'cp_menu_data_file.php' SQL Injection
|
23 |
WEB
|
AutoSec Tools
|
|
2011-02-02
|
|
TCExam 11.1.16 - 'user_password' Cross-Site Scripting
|
21 |
WEB
|
AutoSec Tools
|
|
2011-02-01
|
|
ACollab - 't' SQL Injection
|
24 |
WEB
|
AutoSec Tools
|
|
2014-11-19
|
|
WordPress Plugin Paid Memberships Pro 1.7.14.2 - Directory Traversal
|
25 |
WEB
|
Kacper Szurek
|
|
2014-11-19
|
|
Snowfox CMS 1.0 - Cross-Site Request Forgery (Add Admin)
|
27 |
WEB
|
LiquidWorm
|
|
2011-02-01
|
|
WordPress Plugin TagNinja 1.0 - 'id' Cross-Site Scripting
|
27 |
WEB
|
AutoSec Tools
|
|
2011-02-01
|
|
TinyWebGallery 1.8.3 - Cross-Site Scripting / Local File Inclusion
|
24 |
WEB
|
Yam Mesicka
|
|
2011-02-01
|
|
Moodle 2.0.1 - 'PHPCOVERAGE_HOME' Cross-Site Scripting
|
23 |
WEB
|
AutoSec Tools
|
|
2011-01-30
|
|
eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting
|
23 |
WEB
|
Avram Marius
|
|
2011-02-01
|
|
Joomla! Component com_frontenduseraccess - Local File Inclusion
|
22 |
WEB
|
wishnusakti
|
|
2011-02-01
|
|
Joomla! Component com_clan_members - 'id' SQL Injection
|
25 |
WEB
|
FL0RiX
|
|
2011-01-31
|
|
Joomla! Component com_virtuemart 1.1.6 - SQL Injection
|
27 |
WEB
|
Andrea Fabrizi
|
|
2011-01-30
|
|
vBSEO 3.2.2/3.5.2 - Multiple Cross-Site Scripting Vulnerabilities
|
26 |
WEB
|
MaXe
|
|
2011-01-27
|
|
Vanilla Forums 2.0.16 - 'Target' Cross-Site Scripting
|
22 |
WEB
|
YGN Ethical Hacker Group
|
|
2011-01-26
|
|
SimpGB 1.49.2 - 'Guestbook.php' Multiple Cross-Site Scripting Vulnerabilities
|
24 |
WEB
|
MustLive
|
|
2011-01-25
|
|
WordPress Plugin FCChat Widget 2.1.7 - 'path' Cross-Site Scripting
|
24 |
WEB
|
AutoSec Tools
|
|
2011-01-24
|
|
WordPress Plugin oQey-Gallery 0.2 - 'tbpv_domain' Cross-Site Scripting
|
25 |
WEB
|
AutoSec Tools
|
|
2011-01-24
|
|
WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - 'tbpv_username' Cross-Site Script
|
22 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
WordPress Plugin BezahlCode Generator 1.0 - 'gen_name' Cross-Site Scripting
|
25 |
WEB
|
AutoSec Tools
|
|
2011-01-24
|
|
WordPress Plugin Feature Slideshow 1.0.6 - 'src' Cross-Site Scripting
|
24 |
WEB
|
AutoSec Tools
|
|
2014-11-17
|
|
Zoph 0.9.1 - Multiple Vulnerabilities
|
20 |
WEB
|
Manuel García Cárdenas
|
|
2014-11-17
|
|
WebsiteBaker 2.8.3 - Multiple Vulnerabilities
|
26 |
WEB
|
Manuel García Cárdenas
|
|
2014-11-17
|
|
ZTE ZXHN H108L - Authentication Bypass (2)
|
28 |
WEB
|
Project Zero Labs
|
|
2014-11-17
|
|
Proticaret E-Commerce Script 3.0 - SQL Injection (2)
|
21 |
WEB
|
BGA Security
|
|
2014-11-17
|
|
PHPFox - Persistent Cross-Site Scripting
|
23 |
WEB
|
spyk2r
|
|
2014-11-17
|
|
ZTE ZXHN H108L - Authentication Bypass (1)
|
26 |
WEB
|
Project Zero Labs
|
|
2014-11-17
|
|
Maarch LetterBox 2.8 - (Authentication Bypass) Insecure Cookies
|
24 |
WEB
|
ZoRLu Bugrahan
|
|
2014-11-17
|
|
MyBB Forums 1.8.2 - Persistent Cross-Site Scripting
|
27 |
WEB
|
Avinash Thapa
|
|
2011-01-25
|
|
WordPress Plugin Recip.ly 1.1.7 - 'uploadImage.php' Arbitrary File Upload
|
25 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
WordPress Plugin Featured Content 0.0.1 - 'listid' Cross-Site Scripting
|
23 |
WEB
|
AutoSec Tools
|
|
2011-01-23
|
|
WordPress Plugin WP Publication Archive 2.0.1 - 'file' Information Disclosure
|
27 |
WEB
|
AutoSec Tools
|
|
2011-01-23
|
|
WordPress Plugin WP Featured Post with Thumbnail 3.0 - 'src' Cross-Site Scripting
|
26 |
WEB
|
AutoSec Tools
|
|
2011-01-23
|
|
WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting
|
25 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
PivotX 2.2 - '/pivotx/includes/timwrapper.php?src' Cross-Site Scripting
|
21 |
WEB
|
High-Tech Bridge SA
|
|
2011-01-25
|
|
PivotX 2.2 - '/pivotx/includes/blogroll.php?color' Cross-Site Scripting
|
21 |
WEB
|
High-Tech Bridge SA
|
|
2011-01-23
|
|
WordPress Plugin Audio 0.5.1 - 'showfile' Cross-Site Scripting
|
24 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
WordPress Plugin Videox7 UGC 2.5.3.2 - 'listid' Cross-Site Scripting
|
21 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
ActiveWeb Professional 3.0 - Arbitrary File Upload
|
25 |
WEB
|
StenoPlasma
|
|
2011-01-24
|
|
WordPress Plugin Uploader 1.0 - 'num' Cross-Site Scripting
|
27 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
PivotX 2.2.2 - 'module_image.php' Cross-Site Scripting
|
22 |
WEB
|
AutoSec Tools
|
|
2011-01-25
|
|
web@all 1.1 - 'url' Cross-Site Scripting
|
28 |
WEB
|
AutoSec Tools
|
|
2011-01-20
|
|
Pixie CMS 1.0.4 - '/admin/index.php' SQL Injection
|
26 |
WEB
|
High-Tech Bridge SA
|
|
2014-11-15
|
|
clientResponse Client Management 4.1 - Cross-Site Scripting
|
26 |
WEB
|
Halil Dalabasmaz
|
|
2014-11-15
|
|
Joomla! Component com_hdflvplayer < 2.1.0.1 - Arbitrary File Download
|
21 |
WEB
|
Claudio Viviani
|
|
2011-01-19
|
|
PHPAuctions - 'viewfaqs.php' SQL Injection
|
25 |
WEB
|
h4ck3r
|
|
2011-01-17
|
|
phpCMS 2008 V2 - 'data.php' SQL Injection
|
23 |
WEB
|
R3d-D3V!L
|
|
2014-11-14
|
|
Gogs - 'users'/'repos' '?q' SQL Injection
|
23 |
WEB
|
Timo Schmid
|
|
2014-11-14
|
|
Gogs - 'label' SQL Injection
|
25 |
WEB
|
Timo Schmid
|
|
2011-01-18
|
|
B-Cumulus - 'tagcloud' Multiple Cross-Site Scripting Vulnerabilities
|
22 |
WEB
|
MustLive
|
|
2011-01-16
|
|
Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection
|
22 |
WEB
|
ShivX
|
|
2011-01-15
|
|
CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2)
|
23 |
WEB
|
Patrick de Brouwer
|
|
2011-01-14
|
|
Alguest 1.1c-patched - 'elimina' SQL Injection
|
23 |
WEB
|
Aliaksandr Hartsuyeu
|
|
2014-11-13
|
|
MyBB 1.8.x - Multiple Vulnerabilities
|
22 |
WEB
|
smash
|
|
2014-11-13
|
|
Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload
|
23 |
WEB
|
Halil Dalabasmaz
|
|
2014-11-13
|
|
F5 BIG-IP 10.1.0 - Directory Traversal
|
24 |
WEB
|
Anastasios Monachos
|
|
2014-11-13
|
|
Piwigo 2.6.0 - 'picture.php?rate' SQL Injection
|
26 |
WEB
|
Manuel García Cárdenas
|
|
2014-11-13
|
|
Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection
|
25 |
WEB
|
Claudio Viviani
|
|
2014-11-13
|
|
Proticaret E-Commerce Script 3.0 - SQL Injection (1)
|
24 |
WEB
|
Onur Alanbel (BGA)
|
|
2014-11-12
|
|
WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting
|
25 |
WEB
|
Halil Dalabasmaz
|
