Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2014-11-22   Netgear WNR500 Wireless Router - 'webproc?getpage' Traversal Arbitrary File Access 35 WEB LiquidWorm
2014-11-22   WordPress Plugin CM Download Manager 2.0.0 - Code Injection 35 WEB Phi Ngoc Le
2014-11-22   MyBB 1.8.2 - 'unset_globals()' Function Bypass / Remote Code Execution 35 WEB Taoguang Chen
2011-02-08   ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB High-Tech Bridge SA
2011-02-08   WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection 35 WEB High-Tech Bridge SA
2011-02-07   Escortservice 1.0 - 'custid' SQL Injection 31 WEB NoNameMT
2014-11-21   WordPress Plugin SP Client Document Manager 2.4.1 - SQL Injection 36 WEB ITAS Team
2011-02-03   Firebook - 'index.html' Cross-Site Scripting 34 WEB MustLive
2011-02-03   Octeth Oempro 3.6.4 - SQL Injection / Information Disclosure 38 WEB Ignacio Garrido
2011-03-23   Web Wiz Forums 9.5 - Multiple SQL Injections 34 WEB eXeSoul
2011-02-02   Betsy 4.0 - 'page' Local File Inclusion 36 WEB MizoZ
2011-01-31   All In One Control Panel 1.4.1 - 'cp_menu_data_file.php' SQL Injection 33 WEB AutoSec Tools
2011-02-02   TCExam 11.1.16 - 'user_password' Cross-Site Scripting 34 WEB AutoSec Tools
2011-02-01   ACollab - 't' SQL Injection 36 WEB AutoSec Tools
2014-11-19   WordPress Plugin Paid Memberships Pro 1.7.14.2 - Directory Traversal 39 WEB Kacper Szurek
2014-11-19   Snowfox CMS 1.0 - Cross-Site Request Forgery (Add Admin) 38 WEB LiquidWorm
2011-02-01   WordPress Plugin TagNinja 1.0 - 'id' Cross-Site Scripting 37 WEB AutoSec Tools
2011-02-01   TinyWebGallery 1.8.3 - Cross-Site Scripting / Local File Inclusion 34 WEB Yam Mesicka
2011-02-01   Moodle 2.0.1 - 'PHPCOVERAGE_HOME' Cross-Site Scripting 33 WEB AutoSec Tools
2011-01-30   eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting 34 WEB Avram Marius
2011-02-01   Joomla! Component com_frontenduseraccess - Local File Inclusion 34 WEB wishnusakti
2011-02-01   Joomla! Component com_clan_members - 'id' SQL Injection 36 WEB FL0RiX
2011-01-31   Joomla! Component com_virtuemart 1.1.6 - SQL Injection 36 WEB Andrea Fabrizi
2011-01-30   vBSEO 3.2.2/3.5.2 - Multiple Cross-Site Scripting Vulnerabilities 36 WEB MaXe
2011-01-27   Vanilla Forums 2.0.16 - 'Target' Cross-Site Scripting 35 WEB YGN Ethical Hacker Group
2011-01-26   SimpGB 1.49.2 - 'Guestbook.php' Multiple Cross-Site Scripting Vulnerabilities 37 WEB MustLive
2011-01-25   WordPress Plugin FCChat Widget 2.1.7 - 'path' Cross-Site Scripting 37 WEB AutoSec Tools
2011-01-24   WordPress Plugin oQey-Gallery 0.2 - 'tbpv_domain' Cross-Site Scripting 36 WEB AutoSec Tools
2011-01-24   WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - 'tbpv_username' Cross-Site Script 35 WEB AutoSec Tools
2011-01-25   WordPress Plugin BezahlCode Generator 1.0 - 'gen_name' Cross-Site Scripting 35 WEB AutoSec Tools
2011-01-24   WordPress Plugin Feature Slideshow 1.0.6 - 'src' Cross-Site Scripting 36 WEB AutoSec Tools
2014-11-17   Zoph 0.9.1 - Multiple Vulnerabilities 33 WEB Manuel García Cárdenas
2014-11-17   WebsiteBaker 2.8.3 - Multiple Vulnerabilities 36 WEB Manuel García Cárdenas
2014-11-17   ZTE ZXHN H108L - Authentication Bypass (2) 39 WEB Project Zero Labs
2014-11-17   Proticaret E-Commerce Script 3.0 - SQL Injection (2) 35 WEB BGA Security
2014-11-17   PHPFox - Persistent Cross-Site Scripting 33 WEB spyk2r
2014-11-17   ZTE ZXHN H108L - Authentication Bypass (1) 39 WEB Project Zero Labs
2014-11-17   Maarch LetterBox 2.8 - (Authentication Bypass) Insecure Cookies 35 WEB ZoRLu Bugrahan
2014-11-17   MyBB Forums 1.8.2 - Persistent Cross-Site Scripting 38 WEB Avinash Thapa
2011-01-25   WordPress Plugin Recip.ly 1.1.7 - 'uploadImage.php' Arbitrary File Upload 37 WEB AutoSec Tools
2011-01-25   WordPress Plugin Featured Content 0.0.1 - 'listid' Cross-Site Scripting 36 WEB AutoSec Tools
2011-01-23   WordPress Plugin WP Publication Archive 2.0.1 - 'file' Information Disclosure 39 WEB AutoSec Tools
2011-01-23   WordPress Plugin WP Featured Post with Thumbnail 3.0 - 'src' Cross-Site Scripting 36 WEB AutoSec Tools
2011-01-23   WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting 37 WEB AutoSec Tools
2011-01-25   PivotX 2.2 - '/pivotx/includes/timwrapper.php?src' Cross-Site Scripting 31 WEB High-Tech Bridge SA
2011-01-25   PivotX 2.2 - '/pivotx/includes/blogroll.php?color' Cross-Site Scripting 34 WEB High-Tech Bridge SA
2011-01-23   WordPress Plugin Audio 0.5.1 - 'showfile' Cross-Site Scripting 34 WEB AutoSec Tools
2011-01-25   WordPress Plugin Videox7 UGC 2.5.3.2 - 'listid' Cross-Site Scripting 36 WEB AutoSec Tools
2011-01-25   ActiveWeb Professional 3.0 - Arbitrary File Upload 36 WEB StenoPlasma
2011-01-24   WordPress Plugin Uploader 1.0 - 'num' Cross-Site Scripting 37 WEB AutoSec Tools
2011-01-25   PivotX 2.2.2 - 'module_image.php' Cross-Site Scripting 34 WEB AutoSec Tools
2011-01-25   web@all 1.1 - 'url' Cross-Site Scripting 37 WEB AutoSec Tools
2011-01-20   Pixie CMS 1.0.4 - '/admin/index.php' SQL Injection 36 WEB High-Tech Bridge SA
2014-11-15   clientResponse Client Management 4.1 - Cross-Site Scripting 37 WEB Halil Dalabasmaz
2014-11-15   Joomla! Component com_hdflvplayer < 2.1.0.1 - Arbitrary File Download 34 WEB Claudio Viviani
2011-01-19   PHPAuctions - 'viewfaqs.php' SQL Injection 37 WEB h4ck3r
2011-01-17   phpCMS 2008 V2 - 'data.php' SQL Injection 37 WEB R3d-D3V!L
2014-11-14   Gogs - 'users'/'repos' '?q' SQL Injection 34 WEB Timo Schmid
2014-11-14   Gogs - 'label' SQL Injection 38 WEB Timo Schmid
2011-01-18   B-Cumulus - 'tagcloud' Multiple Cross-Site Scripting Vulnerabilities 34 WEB MustLive
2011-01-16   Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection 34 WEB ShivX
2011-01-15   CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2) 36 WEB Patrick de Brouwer
2011-01-14   Alguest 1.1c-patched - 'elimina' SQL Injection 33 WEB Aliaksandr Hartsuyeu
2014-11-13   MyBB 1.8.x - Multiple Vulnerabilities 34 WEB smash
2014-11-13   Digi Online Examination System 2.0 - Unrestricted Arbitrary File Upload 35 WEB Halil Dalabasmaz
2014-11-13   F5 BIG-IP 10.1.0 - Directory Traversal 36 WEB Anastasios Monachos
2014-11-13   Piwigo 2.6.0 - 'picture.php?rate' SQL Injection 37 WEB Manuel García Cárdenas
2014-11-13   Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection 36 WEB Claudio Viviani
2014-11-13   Proticaret E-Commerce Script 3.0 - SQL Injection (1) 35 WEB Onur Alanbel (BGA)
2014-11-12   WordPress Plugin SupportEzzy Ticket System 1.2.5 - Persistent Cross-Site Scripting 35 WEB Halil Dalabasmaz
2014-11-11   Subex Fms 7.4 - SQL Injection 38 WEB Anastasios Monachos
2014-11-10   WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities 37 WEB Larry W. Cashdollar
2014-11-10   Password Manager Pro / Pro MSP - Blind SQL Injection 46 WEB Pedro Ribeiro
2014-11-10   ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities 42 WEB Pedro Ribeiro
2014-11-10   Barracuda - Multiple Unauthentication Logfile Downloads 41 WEB 4CKnowLedge
2014-11-10   PHP-Fusion 7.02.07 - SQL Injection 41 WEB XLabs Security
2014-11-10   WordPress Plugin Another WordPress Classifieds Plugin - SQL Injection 43 WEB dill
2014-11-10   ZTE ZXDSL 831CII - Insecure Direct Object Reference 44 WEB Paulos Yibelo
2014-11-10   phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities 43 WEB Halil Dalabasmaz
2014-11-10   Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities 36 WEB Halil Dalabasmaz
2014-11-10   vldPersonals 2.7 - Multiple Vulnerabilities 36 WEB Mr T
2011-01-11   CMS Tovar - 'tovar.php' SQL Injection 31 WEB jos_ali_joe
2011-01-08   Joostina 1.3 - 'index.php' Cross-Site Scripting 37 WEB MustLive
2011-01-10   WikLink 0.1.3 - Multiple SQL Injections 41 WEB Aliaksandr Hartsuyeu
2011-01-04   WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting 37 WEB High-Tech Bridge SA
2014-11-06   Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities 38 WEB SEC Consult
2011-01-06   PHP MicroCMS 1.0.1 - 'page_text' Cross-Site Scripting 40 WEB High-Tech Bridge SA
2011-01-05   Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities 42 WEB Walikar Riyaz Ahemed Dawalmalik
2011-01-05   BlogEngine.NET 1.6 - Directory Traversal / Information Disclosure 41 WEB Deniz Cevik
2011-01-06   Joomla! 1.0.x - 'ordering' Cross-Site Scripting 38 WEB Aung Khant
2011-01-05   WikLink 0.1.3 - 'getURL.php' SQL Injection 39 WEB Aliaksandr Hartsuyeu
2014-11-05   Mouse Media Script 1.6 - Persistent Cross-Site Scripting 36 WEB Halil Dalabasmaz
2014-11-05   MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cr 37 WEB Narendra Bhati
2010-12-28   Coppermine Photo Gallery 1.5.10 - 'searchnew.php' Cross-Site Scripting 38 WEB waraxe
2010-12-28   Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting 38 WEB waraxe
2010-12-26   CruxCMS 3.0 - Multiple Input Validation Vulnerabilities 39 WEB ToXiC
2014-11-03   Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution) 41 WEB Stefan Horst
2010-12-27   LiveZilla 3.2.0.2 - 'Track' Module 'server.php' Cross-Site Scripting 36 WEB Ulisses Castro
2014-11-03   PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection 35 WEB Ryan King (Starfall)
2010-12-27   Pligg CMS 1.1.3 - 'range' SQL Injection 39 WEB Dr.NeT
2010-12-28   HotWeb Scripts HotWeb Rentals - 'PageId' SQL Injection 38 WEB non customers
2010-12-23   Social Share - 'search' Cross-Site Scripting 41 WEB Aliaksandr Hartsuyeu
2010-12-23   MyBB 1.6 - 'private.php?keywords' SQL Injection 39 WEB Aung Khant
2010-12-23   MyBB 1.6 - 'search.php?keywords' SQL Injection 36 WEB Aung Khant
2014-11-02   Esotalk CMS 1.0.0g4 - Cross-Site Scripting 37 WEB evi1m0
2010-12-10   Social Share - 'vote.php' HTTP Response Splitting 38 WEB Aliaksandr Hartsuyeu
2010-12-22   WordPress Plugin Accept Signups 0.1 - 'email' Cross-Site Scripting 39 WEB clshack
2010-12-22   Joomla! Component Classified - SQL Injection 41 WEB R4dc0re
2010-12-21   ImpressCMS 1.2.x - 'quicksearch_ContentContent' HTML Injection 39 WEB High-Tech Bridge SA
2010-12-21   WordPress Plugin Mediatricks Viva Thumbs - Multiple Information Disclosure Vulnerabilities 36 WEB Richard Brain
2010-12-21   Social Share - 'Username' SQL Injection 32 WEB Aliaksandr Hartsuyeu
2014-10-31   Who's Who Script - Cross-Site Request Forgery (Add Admin) 36 WEB ZoRLu Bugrahan
2014-10-31   ZTE Modem ZXDSL 531BIIV7.3.0f_D09_IN - Persistent Cross-Site Scripting 35 WEB Ravi Rajput
2014-10-31   Progress OpenEdge 11.2 - Directory Traversal 37 WEB XLabs Security
2010-12-21   Habari 0.6.5 - Multiple Cross-Site Scripting Vulnerabilities 38 WEB High-Tech Bridge SA
2010-12-21   OpenFiler - 'device' Cross-Site Scripting 40 WEB db.pub.mail
2010-12-21   FreeNAS 0.7.2.5543 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 38 WEB db.pub.mail
2010-12-20   Mafya Oyun Scrpti - 'profil.php' SQL Injection 37 WEB DeadLy DeMon
2010-12-20   Social Share - 'postid' SQL Injection 37 WEB Aliaksandr Hartsuyeu
2010-12-17   Social Share - Multiple Cross-Site Scripting Vulnerabilities 38 WEB Aliaksandr Hartsuyeu
2010-12-17   Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities 38 WEB Rodrigo Rubira Branco
2010-12-16   PHPRS - 'model-kits.php' SQL Injection 35 WEB KnocKout
2010-12-15   Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting 35 WEB High-Tech Bridge SA
2010-12-15   HP Insight Diagnostics Online Edition 8.4 - 'search.php' Cross-Site Scripting 39 WEB Richard Brain
2014-10-29   MAARCH 1.4 - SQL Injection 38 WEB Adrien Thierry