Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-08-06   Multi Website 1.5 - 'search' HTML Injection 27 WEB 599eme Man
2010-09-15   ATutor 1.0 - Multiple 'cid' Cross-Site Scripting Vulnerabilities 31 WEB High-Tech Bridge SA
2010-09-15   AChecker 1.0 - 'URI' Cross-Site Scripting 25 WEB High-Tech Bridge SA
2010-09-15   AContent 1.0 - Cross-Site Scripting / HTML Injection 31 WEB High-Tech Bridge SA
2010-09-06   Santafox 2.0.2 - 'search' Cross-Site Scripting 27 WEB High-Tech Bridge SA
2014-09-11   ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting 23 WEB Vulnerability-Lab
2014-09-11   Photorange 1.0 iOS - Local File Inclusion 32 WEB Vulnerability-Lab
2014-09-11   Joomla! Component Spider Contacts 1.3.6 - 'contacts_id' SQL Injection 31 WEB Claudio Viviani
2014-09-11   OroCRM - Persistent Cross-Site Scripting 28 WEB Provensec
2010-09-14   PaysiteReviewCMS - 'image.php' Cross-Site Scripting 22 WEB Valentin Hoebel
2010-09-14   PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting 26 WEB Valentin Hoebel
2009-09-06   Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting 28 WEB MizoZ
2009-08-06   Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities 26 WEB Shadow
2009-08-13   Elkagroup Elkapax - 'q' Cross-Site Scripting 29 WEB Isfahan
2010-09-09   SmarterTools SmarterStats 5.3.3819 - 'frmHelp.aspx' Cross-Site Scripting 24 WEB David Hoyt
2010-09-07   ZenPhoto 1.3 - '/zp-core/admin.php' Multiple Cross-Site Scripting Vulnerabilities 24 WEB Bogdan Calin
2010-09-07   ZenPhoto 1.3 - '/zp-core/full-image.php?a' SQL Injection 25 WEB Bogdan Calin
2010-09-06   MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities 25 WEB Gjoko Krstic
2010-09-06   HeffnerCMS 1.22 - 'index.php' Local File Inclusion 26 WEB MiND C0re
2010-09-02   TBDev 2.0 - Remote File Inclusion / SQL Injection 27 WEB Inj3ct0r
2009-09-02   Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting 26 WEB Moudi
2010-09-06   Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting 22 WEB Moritz Naumann
2010-09-06   BlueCMS 1.6 - 'x-forwarded-for' Header SQL Injection 28 WEB cnryan
2009-09-11   Match Agency BiZ - 'report.php?pid' Cross-Site Scripting 23 WEB Moudi
2009-09-11   Match Agency BiZ - 'edit_profile.php?important' Cross-Site Scripting 21 WEB Moudi
2009-09-10   tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections 24 WEB Mr.SQL
2009-09-11   SZNews 2.7 - 'printnews.php3' Remote File Inclusion 24 WEB kurdish hackers team
2010-09-10   Datetopia Buy Dating Site - Cross-Site Scripting 30 WEB Moudi
2010-09-03   Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting 24 WEB Bogdan Calin
2014-09-09   Parallels Plesk Sitebuilder 9.5 - Multiple Vulnerabilities 30 WEB alieye
2014-09-09   WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities 30 WEB Fikri Fadzil
2014-09-08   Jenkins 1.578 - Multiple Vulnerabilities 28 WEB JoeV
2014-09-08   Mpay24 PrestaShop Payment Module 1.5 - Multiple Vulnerabilities 28 WEB Wireghoul
2014-09-08   Atmail Webmail 7.2 - Multiple Vulnerabilities 26 WEB smash
2014-09-08   TP-Link TL-WR841N / TL-WR841ND - Multiple Vulnerabilities 25 WEB smash
2014-09-08   TP-Link TL-WR340G / TL-WR340GD - Multiple Vulnerabilities 32 WEB smash
2014-09-08   osCommerce 2.3.4 - Multiple Vulnerabilities 24 WEB smash
2014-09-08   Zen Cart 1.5.3 - Multiple Vulnerabilities 27 WEB smash
2014-09-08   phpMyFAQ 2.8.x - Multiple Vulnerabilities 26 WEB smash
2014-09-08   vBulletin 5.1.x - Persistent Cross-Site Scripting 30 WEB smash
2014-09-08   WordPress Theme Acento - 'view-pdf.php?File' Arbitrary File Download 29 WEB alieye
2014-09-08   WordPress Plugin Bulk Delete Users by Email 1.0 - Cross-Site Request Forgery 29 WEB Fikri Fadzil
2014-09-08   Joomla! Component Spider Calendar 3.2.6 - SQL Injection 29 WEB Claudio Viviani
2010-09-03   NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting 25 WEB Bogdan Calin
2010-09-02   CMS WebManager-Pro - 'c.php' SQL Injection 27 WEB MustLive
2010-09-02   OneCMS 2.6.1 - 'index.php' Cross-Site Scripting 26 WEB anT!-Tr0J4n
2009-10-14   AdaptBB 1.0 - 'q' Cross-Site Scripting 24 WEB drunken danish rednecks
2009-09-07   KingCMS 0.6 - 'CONFIG[AdminPath]' Remote File Inclusion 28 WEB Securitylab.ir
2010-09-01   ArtGK CMS - Cross-Site Scripting / HTML Injection 29 WEB High-Tech Bridge SA
2010-09-01   Rumba XML 2.4 - 'index.php' Multiple HTML Injection Vulnerabilities 24 WEB High-Tech Bridge SA
2010-09-01   Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities 29 WEB High-Tech Bridge SA
2014-09-07   PhpOnlineChat 3.0 - Cross-Site Scripting 26 WEB N0 Feel
2014-09-07   WordPress Plugin Like Dislike Counter 1.2.3 - SQL Injection 26 WEB Att4ck3r.ir
2014-09-07   LoadedCommerce7 - Systemic Query Factory 24 WEB Breaking.Technology
2014-09-07   Invision Power Board (IP.Board) 3.x - Cross-Site Request Forgery / Token Hjiacking 22 WEB Piotr S.
2009-09-10   Datemill - 'search.php?st' Cross-Site Scripting 27 WEB Moudi
2009-09-10   Datemill - 'photo_search.php?st' Cross-Site Scripting 28 WEB Moudi
2009-09-10   Datemill - 'photo_view.php?return' Cross-Site Scripting 31 WEB Moudi
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'custom.php?testmode' Cross-Site Scripting 32 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'globals.php?tabpage' Cross-Site Scripting 25 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting 28 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulner 30 WEB Mr Teatime
2010-08-31   HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting 26 WEB Mr Teatime
2010-08-29   WebsiteKit Gbplus - 'Name' / 'Body' HTML Injection 31 WEB MiND
2014-09-05   MyBB User Social Networks Plugin 1.2 - Persistent Cross-Site Scripting 28 WEB Fikri Fadzil
2014-09-05   WordPress Plugin Premium Gallery Manager - Configuration Access 29 WEB Hannaichi
2010-08-26   CompuCMS - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 25 WEB High-Tech Bridge SA
2010-08-26   Valarsoft WebMatic 3.0.5 - Multiple HTML Injection Vulnerabilities 28 WEB High-Tech Bridge SA
2010-08-26   TCMS - Multiple Input Validation Vulnerabilities 28 WEB High-Tech Bridge SA
2010-08-23   Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting 28 WEB High-Tech Bridge SA
2010-08-25   BlastChat Client 3.3 - Cross-Site Scripting 27 WEB Aung Khant
2010-08-25   Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution 28 WEB Kolor
2014-09-03   vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection 29 WEB D35m0nd142
2014-09-02   Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting 31 WEB Dolev Farhi
2014-09-02   WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection 32 WEB Claudio Viviani
2014-09-01   ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1) 28 WEB Hans-Martin Muench
2014-09-01   ManageEngine Desktop Central - Arbitrary File Upload / Remote Code Execution 24 WEB Pedro Ribeiro
2014-09-01   WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload 27 WEB Jesus Ramirez Pichardo
2014-09-01   Arachni Web Application Scanner Web UI - Persistent Cross-Site Scripting 26 WEB Prakhar Prasad
2014-09-01   Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download 29 WEB Hugo Santiago
2010-08-23   AneCMS 1.0/1.3 - 'register/next' SQL Injection 28 WEB Sweet
2010-08-19   Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting 28 WEB Marc Schoenefeld
2010-08-19   Syntax Highlighter 3.0.83 - 'index.html' HTML Injection 26 WEB indoushka
2009-08-10   Hitron Soft Answer Me - 'answers.php' Cross-Site Scripting 25 WEB Moudi
2009-08-10   ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting 27 WEB Moudi
2009-08-10   ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting 28 WEB Moudi
2009-08-10   ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting 29 WEB Moudi
2009-08-10   ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting 31 WEB Moudi
2009-08-10   ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting 30 WEB Moudi
2009-08-10   ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting 31 WEB Moudi
2009-08-03   Payment Processor Script (PPScript) - 'shop.htm' SQL Injection 29 WEB MizoZ
2009-08-10   Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities 26 WEB Moudi
2009-08-07   Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting 28 WEB Moudi
2009-10-19   phpCMS 2008 - 'download.php' Information Disclosure 31 WEB Securitylab.ir
2009-10-14   FreeSchool - 'key_words' Cross-Site Scripting 28 WEB drunken danish rednecks
2010-08-18   Joomla! Component com_dirfrm - Multiple SQL Injections 26 WEB Hieuneo
2010-08-10   Nasim Guest Book - 'page' Cross-Site Scripting 27 WEB Moudi
2009-08-10   TurnkeyForms Yahoo Answers Clone - 'questiondetail.php' Cross-Site Scripting 27 WEB Moudi
2010-08-16   123 Flash Chat 7.8 - Multiple Vulnerabilities 29 WEB Lincoln
2010-08-16   CMSimple 3.3 - Cross-Site Scripting / Cross-Site Request Forgery 31 WEB High-Tech Bridge SA
2010-08-15   Joomla! Component com_fireboard - 'Itemid' SQL Injection 33 WEB ViRuS Qalaa
2010-08-15   Zomplog 3.9 - 'message' Cross-Site Scripting 31 WEB 10n1z3d
2010-08-15   Joomla! Component Weblinks - 'Itemid' SQL Injection 30 WEB ViRuS Qalaa
2009-09-01   Property Watch - 'login.php?redirect' Cross-Site Scripting 28 WEB Moudi
2009-09-01   Property Watch - 'email.php?videoid' Cross-Site Scripting 31 WEB Moudi
2009-09-01   PHPMass Real Estate - 'view_map.php' Cross-Site Scripting 31 WEB Moudi
2009-09-01   Beex - 'partneralle.php?navaction' Cross-Site Scripting 26 WEB Moudi
2009-09-01   Beex - 'news.php?navaction' Cross-Site Scripting 30 WEB Moudi
2010-08-10   Onyx - Multiple Cross-Site Scripting Vulnerabilities 36 WEB High-Tech Bridge SA
2010-08-10   Mystic 0.1.4 - Multiple Cross-Site Scripting Vulnerabilities 33 WEB High-Tech Bridge SA
2010-08-13   Edit-X PHP CMS - 'search_text' Cross-Site Scripting 28 WEB High-Tech Bridge SA
2010-08-13   CMS Source - Multiple Input Validation Vulnerabilities 30 WEB High-Tech Bridge SA
2010-08-10   SyntaxCMS - 'rows_per_page' SQL Injection 32 WEB High-Tech Bridge SA
2009-10-19   Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities 28 WEB Vladimir Vorontsov
2009-08-31   JBoard - Multiple Cross-Site Scripting / SQL Injections 25 WEB Inj3ct0r
2010-08-12   Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2) 29 WEB Affix
2009-09-16   PaoBacheca 2.1 - 'scrivi.php' URI Cross-Site Scripting 22 WEB Moudi
2009-09-16   PaoBacheca 2.1 - 'index.php' URI Cross-Site Scripting 25 WEB Moudi
2014-08-28   XRms - Blind SQL Injection / Command Execution 31 WEB Benjamin Harris
2014-08-28   PhpWiki - Remote Command Execution 29 WEB Benjamin Harris
2014-08-28   ActualAnalyzer Lite 2.81 - Command Execution 29 WEB Benjamin Harris
2014-08-28   ManageEngine DeviceExpert 5.9 - User Credential Disclosure 28 WEB Pedro Ribeiro
2014-08-28   Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload 28 WEB b0z
2009-08-31   LiveStreet 0.2 - '/include/ajax/blogInfo.php?asd' Cross-Site Scripting 26 WEB Inj3ct0r
2009-08-31   LiveStreet 0.2 - Comment Topic Header Cross-Site Scripting 27 WEB Inj3ct0r