Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-12-15   Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting 8 WEB Juan Galiana Lara
2009-12-15   Horde 3.3.5 - Cross-Site Scripting 12 WEB Juan Galiana Lara
2009-12-14   phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting 9 WEB bi0
2009-12-14   Million Pixel Script 3 - 'pa' Cross-Site Scripting 10 WEB bi0
2009-12-14   Ez Cart - 'sid' Cross-Site Scripting 10 WEB anti-gov
2009-12-10   Zeeways ZeeJobsite - 'basic_search_result.php' Cross-Site Scripting 10 WEB bi0
2009-12-09   Invision Power Board (IP.Board) 3.0.3 - '.txt' MIME-Type Cross-Site Scripting 9 WEB Xacker
2009-12-04   Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting 11 WEB andresg888
2009-12-04   Joomla! Component YOOtheme Warp5 - 'yt_color' Cross-Site Scripting 11 WEB andresg888
2009-12-07   Advanced Image Hosting Script 2.x - 'search.php' Cross-Site Scripting 10 WEB aBo MoHaMeD
2009-12-04   WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting 11 WEB intern0t
2014-05-16   eGroupWare 1.8.006 - Multiple Vulnerabilities 9 WEB High-Tech Bridge SA
2009-12-01   phpMyFAQ < 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities 8 WEB Amol Naik
2009-11-30   Elxis - 'Filename' Directory Traversal 11 WEB cr4wl3r
2009-11-30   SmartMedia Module 0.85 Beta for XOOPS - 'categoryId' Cross-Site Scripting 10 WEB SoldierOfAllah
2009-11-30   Content Module 0.5 for XOOPS - 'id' SQL Injection 10 WEB s4r4d0
2008-02-16   Power Phlogger 2.2.x - Cross-Site Scripting 10 WEB MustLive
2009-11-23   Joomla! 1.5.x - 404 Error Page Cross-Site Scripting 10 WEB MustLive
2009-11-16   Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting 12 WEB MustLive
2009-11-24   klinza Professional CMS 5.0.1 - 'menulast.php' Local File Inclusion 11 WEB klinza
2009-11-24   Quick.Cart 3.4 / Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery 10 WEB Alice Kaerast
2009-11-21   Cacti 0.8.x - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities 9 WEB Moritz Naumann
2009-11-16   WordPress Plugin Subscribe to Comments 2.0 - Multiple Cross-Site Scripting Vulnerabilities 9 WEB MustLive
2009-11-13   WordPress Plugin Fuctweb CapCC 1.0 CAPTCHA - Security Bypass 10 WEB MustLive
2009-11-09   WordPress Plugin WP-Cumulus 1.x - 'tagcloud.swf' Cross-Site Scripting 13 WEB MustLive
2014-05-15   ElasticSearch - Remote Code Execution 11 WEB Jeff Geiger
2009-11-24   WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabili 11 WEB MustLive
2009-11-24   WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabili 11 WEB MustLive
2009-11-15   WordPress Plugin Trashbin 0.1 - 'mtb_undelete' Cross-Site Scripting 11 WEB MustLive
2009-11-29   WordPress Plugin WP-phpList 2.10.2 - 'unsubscribeemail' Cross-Site Scripting 10 WEB MustLive
2009-11-19   CubeCart 3.0.4/4.3.6 - 'ProductID' SQL Injection 9 WEB Sangte Amtham
2009-11-17   JiRo's (Multiple Products) - '/files/login.asp' Multiple SQL Injections 13 WEB blackenedsecurity
2009-11-16   PHD Help Desk 1.43 - 'caso_insert.php?URL' Cross-Site Scripting 11 WEB Amol Naik
2009-11-16   PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities 11 WEB Amol Naik
2009-11-16   PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting 9 WEB Amol Naik
2009-11-16   PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities 10 WEB Amol Naik
2009-11-16   PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting 9 WEB Amol Naik
2009-11-16   PHD Help Desk 1.43 - 'area.php' Multiple Cross-Site Scripting Vulnerabilities 11 WEB Amol Naik
2014-05-14   Broadcom PIPA C211 - Sensitive Information Disclosure 10 WEB Portcullis
2009-11-06   McAfee Network Security Manager 5.1.7 - Information Disclosure 10 WEB Daniel King
2009-11-06   McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities 11 WEB Daniel King
2009-11-10   CuteNews 1.4.6 editnews Module - doeditnews Action Admin Moderation Bypass 9 WEB Andrew Horton
2009-11-10   CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation) 9 WEB Andrew Horton
2009-11-10   CuteNews 1.4.6 - 'result' Cross-Site Scripting 8 WEB Andrew Horton
2009-11-10   CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities 11 WEB Andrew Horton
2009-11-10   CuteNews 1.4.6 - 'from_date_day' Full Path Disclosure 8 WEB Andrew Horton
2009-11-10   CuteNews 1.4.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 8 WEB Andrew Horton
2014-05-12   VM Turbo Operations Manager 4.5x - Directory Traversal 9 WEB Jamal Pecou
2014-05-12   SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting 10 WEB Dolev Farhi
2014-05-12   Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures 10 WEB Luigi Vezzoso
2009-11-02   TFTgallery 0.13 - 'sample' Cross-Site Scripting 10 WEB blake
2014-05-12   Alienvault Open Source SIEM (OSSIM) 4.6.1 - (Authenticated) SQL Injection (Metasploit) 10 WEB Chris Hebert
2009-10-26   TFTgallery 0.13 - 'album' Cross-Site Scripting 8 WEB blake
2009-10-27   Sahana 0.6.2 - 'mod' Local File Disclosure 11 WEB Greg Miernicki
2009-10-26   RunCMS - 'forum' SQL Injection 10 WEB Nine:Situations:Group::bookoo
2009-10-21   OpenDocMan 1.2.5 - 'view_file.php' Cross-Site Scripting 11 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'user.php' Cross-Site Scripting 10 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting 8 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting 10 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting 10 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting 11 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'category.php' Cross-Site Scripting 11 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting 10 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'index.php?last_message' Cross-Site Scripting 11 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities 11 WEB Amol Naik
2009-10-21   OpenDocMan 1.2.5 - 'add.php?last_message' Cross-Site Scripting 9 WEB Amol Naik
2009-10-19   TBmnetCMS 1.0 - Cross-Site Scripting 10 WEB drunken danish rednecks
2009-10-15   IBM Rational RequisitePro 7.10 - ReqWeb Help Feature 'ReqWebHelp/basic/searchView.jsp' Multiple Cros 9 WEB IBM
2009-10-15   IBM Rational RequisitePro 7.10 - 'ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp?Operation' 12 WEB IBM
2009-10-15   Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting 11 WEB Andrea Fabrizi
2009-10-15   Snitz Forums 2000 3.4.7 - 'pop_send_to_friend.asp?url' Cross-Site Scripting 11 WEB Andrea Fabrizi
2009-10-14   Zainu 1.0 - 'searchSongKeyword' Cross-Site Scripting 11 WEB drunken danish rednecks
2009-10-15   BloofoxCMS 0.3.5 - 'search' Cross-Site Scripting 9 WEB drunken danish rednecks
2009-10-14   Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting 11 WEB Michele Orru
2009-10-14   Pentaho BI 1.x - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities 11 WEB euronymous
2009-10-13   Dream Poll 3.1 - '/index.php' Cross-Site Scripting / SQL Injection 10 WEB infosecstuff
2009-10-13   Achievo 1.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 11 WEB Ryan Dewhurst
2009-10-06   AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities 10 WEB Sébastien Duquette
2009-10-06   X-Cart Email Subscription - 'email' Cross-Site Scripting 9 WEB Paulo Santos
2009-10-05   Joomla! Component CB Resume Builder - 'group_id' SQL Injection 10 WEB kaMtiEz
2009-09-29   Interspire Knowledge Manager 5 - 'p' Directory Traversal 11 WEB Infected Web
2009-09-28   e107 0.7.x - CAPTCHA Security Bypass / Cross-Site Scripting 8 WEB MustLive
2009-09-23   IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting 10 WEB IBM
2014-05-08   Cobbler 2.4.x < 2.6.x - Local File Inclusion 9 WEB Dolev Farhi
2014-05-08   Collabtive 1.2 - Persistent Cross-Site Scripting 7 WEB Deepak Rathore
2014-05-08   Collabtive 1.2 - SQL Injection 9 WEB Deepak Rathore
2014-05-08   OpenFiler 2.99.1 - Multiple Persistent Cross-Site Scripting Vulnerabilities 8 WEB Dolev Farhi
2014-05-08   OpenFiler 2.99.1 - Arbitrary Code Execution 10 WEB Dolev Farhi
2009-09-23   Vastal I-Tech Agent Zone - 'view_listing.php' SQL Injection 10 WEB OoN_Boy
2009-09-22   Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting 9 WEB OoN_Boy
2009-09-22   Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection 10 WEB OoN_Boy
2009-09-22   Vastal I-Tech Cosmetics Zone - 'view_products.php' SQL Injection 9 WEB OoN_Boy
2009-09-22   Joomla! Component JoomlaFacebook - SQL Injection 8 WEB kaMtiEz
2009-09-22   Joomla! Component SportFusion 0.2.x - SQL Injection 8 WEB kaMtiEz
2009-09-22   Maxwebportal 1.365 - 'forum.asp' SQL Injection 10 WEB OoN_Boy
2009-09-19   MyBB 1.4.8 - 'search.php' SQL Injection 8 WEB $qL_DoCt0r
2009-09-18   Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities 7 WEB pagvac
2009-09-16   TuttoPHP Morris Guestbook - 'view.php' Cross-Site Scripting 9 WEB Moudi
2009-09-16   Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting 9 WEB Moudi
2009-09-11   Planet 2.0 - HTML Injection 8 WEB Steve Kemp
2009-09-11   Joomla! Component com_mediaalert - 'id' SQL Injection 9 WEB Moudi
2009-09-10   Joomla! Component com_pressrelease - 'id' SQL Injection 8 WEB Moudi
2009-09-04   DvBBS 2.0 - 'boardrule.php' SQL Injection 8 WEB Securitylab.ir
2009-09-03   Adobe RoboHelp Server 8 - Authentication Bypass 8 WEB Intevydis
2009-08-31   MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities 10 WEB Inj3ct0r
2009-08-31   MKPortal 1.x (Multiple Modules) - Cross-Site Scripting 8 WEB Inj3ct0r
2009-09-09   phpAuction 3.2 - 'lan' Remote File Inclusion 8 WEB Beenu Arora
2009-07-27   68 Classifieds 4.1 - 'viewmember.php' Cross-Site Scripting 8 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'viewlisting.php' Cross-Site Scripting 10 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'toplistings.php' Cross-Site Scripting 8 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting 9 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'login.php' Cross-Site Scripting 8 WEB Moudi
2009-07-27   68 Classifieds 4.1 - 'category.php' Cross-Site Scripting 9 WEB Moudi
2014-05-05   TeamHelpdesk Customer Web Service (CWS) 8.3.5 & Technician Web Access (TWA) 8.3.5 - Remote User Cred 9 WEB bhamb
2009-08-28   FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection 9 WEB Inj3ct0r
2009-08-25   OpenAutoClassifieds 1.5.9 - SQL Injection 7 WEB Andrew Horton
2009-08-26   PHP-Fusion 6.1.18 - Multiple Information Disclosure Vulnerabilities 8 WEB Inj3ct0r
2009-08-26   VideoGirls - 'view.php?p' Cross-Site Scripting 9 WEB Moudi
2009-08-26   VideoGirls - 'profile.php?profile_name' Cross-Site Scripting 8 WEB Moudi
2009-08-26   VideoGirls - 'forum.php?t' Cross-Site Scripting 8 WEB Moudi
2009-06-08   Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass 8 WEB Arshan Dabirsiaghi
2009-08-19   Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting 9 WEB Adam Bixby
2009-06-08   Computer Associates SiteMinder - '%00' Cross-Site Scripting Protection Security Bypass 8 WEB Arshan Dabirsiaghi
2009-08-17   DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass 7 WEB spymeta
2009-08-17   Adobe ColdFusion Server 8.0.1 - '/administrator/enter.cfm' Query String Cross-Site Scripting 8 WEB Alexander Polyakov