Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2009-06-02 Exploit Code Downloads   PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting 23 WEB Schap Security
2014-04-25 Exploit Code Downloads   miSecureMessages 4.0.1 - Session Management / Authentication Bypass 23 WEB Jared Bird
2009-05-28 Exploit Code Downloads   Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities 30 WEB MaXe
2009-05-15 Exploit Code Downloads   Lussumo Vanilla 1.1.5/1.1.7 - 'updatecheck.php' Cross-Site Scripting 24 WEB Gerendi Sandor Attila
2009-05-27 Exploit Code Downloads   PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection 28 WEB Gerendi Sandor Attila
2009-05-22 Exploit Code Downloads   DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting 27 WEB ben hawkes
2009-05-22 Exploit Code Downloads   LxBlog - Multiple Cross-Site Scripting / SQL Injections 27 WEB Securitylab.ir
2014-04-24 Exploit Code Downloads   Alienvault 4.3.1 - SQL Injection / Cross-Site Scripting 24 WEB Sasha Zivojinovic
2014-04-24 Exploit Code Downloads   WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion 23 WEB SEC Consult
2014-04-24 Exploit Code Downloads   dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read 24 WEB Portcullis
2014-04-24 Exploit Code Downloads   WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload 21 WEB nopesled
2009-05-20 Exploit Code Downloads   Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass 21 WEB EnableSecurity
2009-05-20 Exploit Code Downloads   Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution 20 WEB inking
2009-05-15 Exploit Code Downloads   Cacti 0.8.7 - 'data_input.php' Cross-Site Scripting 22 WEB fgeek
2014-04-24 Exploit Code Downloads   Bonefire 0.7.1 - Reinstall Admin Account 20 WEB Mehmet Ince
2009-05-11 Exploit Code Downloads   Dacio's Image Gallery 1.6 - Multiple Remote Vulnerabilities 29 WEB ahmadbady
2009-05-08 Exploit Code Downloads   MagpieRSS 0.72 - Cross-Site Scripting / HTML Injection 23 WEB Justin Klein Keane
2009-05-08 Exploit Code Downloads   Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting 26 WEB Gerendi Sandor Attila
2014-04-23 Exploit Code Downloads   HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal 26 WEB @0x00string
2009-05-06 Exploit Code Downloads   Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities 24 WEB TEAMELITE
2009-05-05 Exploit Code Downloads   VerliAdmin 0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 24 WEB TEAMELITE
2009-05-05 Exploit Code Downloads   IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation 25 WEB RedTeam Pentesting GmbH
2009-05-05 Exploit Code Downloads   IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting 20 WEB RedTeam Pentesting GmbH
2014-04-22 Exploit Code Downloads   kitForm CRM Extension 0.43 - 'sorter.ph?sorter_value' SQL Injection 20 WEB chapp
2014-04-22 Exploit Code Downloads   No-CMS 0.6.6 rev 1 - Admin Account Hijacking / Remote Code Execution via Static Encryption Key 21 WEB Mehmet Ince
2014-04-22 Exploit Code Downloads   Sixnet Sixview 2.4.1 - Web Console Directory Traversal 27 WEB daniel svartman
2009-05-05 Exploit Code Downloads   IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting 21 WEB RedTeam Pentesting GmbH
2009-05-05 Exploit Code Downloads   IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections 21 WEB RedTeam Pentesting
2009-05-03 Exploit Code Downloads   MyBB 1.4.5 - Multiple Vulnerabilities 26 WEB Jacques Copeau
2009-04-29 Exploit Code Downloads   Coppermine Photo Gallery 1.4.21 - 'css' Cross-Site Scripting 24 WEB Gerendi Sandor Attila
2009-04-27 Exploit Code Downloads   Invision Power Board (IP.Board) 3.0 - Multiple HTML Injection / Information Disclosure Vulnerabiliti 23 WEB brain[pillow]
2009-04-27 Exploit Code Downloads   MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities 20 WEB Am!r
2009-04-24 Exploit Code Downloads   PuterJam's Blog PJBlog3 3.0.6 - 'action.asp' SQL Injection 24 WEB anonymous
2009-04-23 Exploit Code Downloads   CS Whois Lookup - 'ip' Remote Command Execution 20 WEB SirGod
2009-04-22 Exploit Code Downloads   Flat Calendar 1.1 - 'add.php' HTML Injection 21 WEB ZoRLu
2009-04-22 Exploit Code Downloads   New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection 22 WEB zer0day
2014-04-20 Exploit Code Downloads   Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery 21 WEB Rakesh S
2014-04-19 Exploit Code Downloads   PTCeffect 4.6 - Local File Inclusion / SQL Injection 22 WEB walid naceri
2009-04-21 Exploit Code Downloads   Sun Java System Delegated Administrator 6.x - HTTP Response Splitting 20 WEB SCS team
2009-04-20 Exploit Code Downloads   Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting 18 WEB Vrs-hCk
2009-04-20 Exploit Code Downloads   Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting 22 WEB Vrs-hCk
2009-04-20 Exploit Code Downloads   Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting 23 WEB Vrs-hCk
2009-04-20 Exploit Code Downloads   Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting 20 WEB Vrs-hCk
2009-04-20 Exploit Code Downloads   Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting 24 WEB Vrs-hCk
2009-04-20 Exploit Code Downloads   Online Photo Pro 2.0 - 'section' Cross-Site Scripting 22 WEB Vrs-hCk
2014-04-18 Exploit Code Downloads   CMSimple 4.4/4.4.2 - Remote File Inclusion 25 WEB NoGe
2009-04-17 Exploit Code Downloads   Malleo 1.2.3 - 'admin.php' Local File Inclusion 20 WEB Drosophila
2009-04-16 Exploit Code Downloads   BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting 20 WEB Ken Millar
2009-04-16 Exploit Code Downloads   RazorCMS 0.3RC2 - Multiple Vulnerabilities 22 WEB Jeremi Gosney
2009-04-16 Exploit Code Downloads   Geeklog 1.5.2 - 'usersettings.php' SQL Injection 27 WEB Nine:Situations:Group::bookoo
2009-04-16 Exploit Code Downloads   Phorum 5.2 - 'versioncheck.php?upgrade_available' Cross-Site Scripting 27 WEB voodoo-labs
2009-04-16 Exploit Code Downloads   Phorum 5.2 - '/admin/users.php' Multiple Cross-Site Scripting Vulnerabilities 28 WEB voodoo-labs
2009-04-16 Exploit Code Downloads   Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting 26 WEB voodoo-labs
2009-04-16 Exploit Code Downloads   Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting 24 WEB voodoo-labs
2009-04-15 Exploit Code Downloads   Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities 28 WEB Michael Kirchner
2009-04-14 Exploit Code Downloads   IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting 27 WEB Abdul-Aziz Hariri
2009-04-13 Exploit Code Downloads   Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting 32 WEB Anthony de Almeida Lopes
2009-04-13 Exploit Code Downloads   People-Trak - Login SQL Injection 25 WEB Mormoroth.net
2009-04-09 Exploit Code Downloads   Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection 30 WEB ThE g0bL!N
2009-04-09 Exploit Code Downloads   Cisco Subscriber Edge Services Manager - Cross-Site Scripting / HTML Injection 29 WEB Usman Saeed
2009-04-09 Exploit Code Downloads   IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery 26 WEB Henri Lindberg
2009-04-09 Exploit Code Downloads   IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scr 26 WEB Henri Lindberg
2009-04-09 Exploit Code Downloads   IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting 25 WEB Henri Lindberg
2009-04-02 Exploit Code Downloads   4CMS - SQL Injection / Local File Inclusion 27 WEB k1ll3r_null
2009-04-02 Exploit Code Downloads   Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting 28 WEB Patrick Webster
2009-04-02 Exploit Code Downloads   osCommerce 2.2/3.0 - 'oscid' Session Fixation 27 WEB laurent.desaulniers
2014-04-15 Exploit Code Downloads   Xerox DocuShare - SQL Injection 30 WEB Brandon Perry
2014-04-15 Exploit Code Downloads   Netgear WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities 29 WEB Santhosh Kumar
2009-04-02 Exploit Code Downloads   SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting 26 WEB Bugs NotHugs
2009-03-31 Exploit Code Downloads   Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting 26 WEB TEAMELITE
2009-03-25 Exploit Code Downloads   Comparison Engine Power 1.0 - 'product.comparision.php' SQL Injection 24 WEB SirGod
2009-04-01 Exploit Code Downloads   BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting 25 WEB sk
2009-03-17 Exploit Code Downloads   phpCMS 2008 - 'search_ajax.php' SQL Injection 30 WEB anonymous
2009-03-24 Exploit Code Downloads   PHPizabi 0.8 - 'notepad_body' SQL Injection 29 WEB Nine:Situations:Group::bookoo
2009-03-22 Exploit Code Downloads   ExpressionEngine 1.6 - Avtaar Name HTML Injection 28 WEB Adam Baldwin
2009-04-19 Exploit Code Downloads   AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures 23 WEB r0t
2014-04-14 Exploit Code Downloads   eScan Web Management Console - Command Injection (Metasploit) 31 WEB Metasploit
2014-04-14 Exploit Code Downloads   WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities 27 WEB Tom Adams
2014-04-14 Exploit Code Downloads   WordPress Plugin Quick Page/Post Redirect 5.0.3 - Multiple Vulnerabilities 29 WEB Tom Adams
2014-04-14 Exploit Code Downloads   PDF Album 1.7 iOS - Local File Inclusion 32 WEB Vulnerability-Lab
2009-05-20 Exploit Code Downloads   Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting 27 WEB SCS team
2009-05-20 Exploit Code Downloads   Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting 25 WEB SCS team
2009-03-31 Exploit Code Downloads   Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting 24 WEB SCS team
2014-04-14 Exploit Code Downloads   WordPress Theme LineNity 1.20 - Local File Inclusion 23 WEB felipe andrian
2014-04-14 Exploit Code Downloads   Sagem Fast 3304-V2 - Authentication Bypass (1) 18 WEB Yassin Aboukir
2009-03-17 Exploit Code Downloads   Sun Java System Messenger Express 6.3-0.15 - 'error' Cross-Site Scripting 21 WEB syniack
2009-03-12 Exploit Code Downloads   TikiWiki 2.2/3.0 - 'tiki-listpages.php' Cross-Site Scripting 23 WEB iliz
2009-03-12 Exploit Code Downloads   TikiWiki 2.2/3.0 - 'tiki-list_file_gallery.php' Cross-Site Scripting 20 WEB iliz
2009-03-12 Exploit Code Downloads   TikiWiki 2.2/3.0 - 'tiki-galleries.php' Cross-Site Scripting 20 WEB iliz
2009-03-10 Exploit Code Downloads   Nenriki CMS 0.5 - 'ID' Cookie SQL Injection 21 WEB x0r
2009-03-09 Exploit Code Downloads   PHORTAIL 1.2.1 - 'poster.php' Multiple HTML Injection Vulnerabilities 21 WEB Jonathan Salwan
2009-03-06 Exploit Code Downloads   TinXCMS 3.5 - 'rss.php' SQL Injection 20 WEB Dmitriy Evteev
2009-03-06 Exploit Code Downloads   UMI CMS 2.7 - 'fields_filter' Cross-Site Scripting 21 WEB Dmitriy Evteev
2009-02-28 Exploit Code Downloads   CMSCart 1.04 - 'maindatafunctions.php' SQL Injection 20 WEB John Martinelli
2009-03-05 Exploit Code Downloads   Amoot Web Directory - Password Field SQL Injection 19 WEB Pouya_Server
2009-03-03 Exploit Code Downloads   Novaboard 1.0 - HTML Injection / Cross-Site Scripting 18 WEB Jose Luis Zayas
2009-03-02 Exploit Code Downloads   Blogsa 1.0 - 'Widgets.aspx' Cross-Site Scripting 18 WEB DJR
2014-04-13 Exploit Code Downloads   Microweber CMS 0.93 - Cross-Site Request Forgery 23 WEB sajith
2014-04-13 Exploit Code Downloads   CubeCart 5.2.8 - Session Fixation 23 WEB absane
2009-03-02 Exploit Code Downloads   Yektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities 23 WEB Isfahan
2009-03-02 Exploit Code Downloads   Afian - 'includer.php' Directory Traversal 21 WEB vnbrain.net
2009-02-27 Exploit Code Downloads   Irokez Blog 0.7.3.2 - Multiple Input Validation Vulnerabilities 22 WEB Corwin
2009-02-26 Exploit Code Downloads   APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting 21 WEB Digital Security Research Group
2009-02-26 Exploit Code Downloads   Parsi PHP CMS 2.0 - 'index.php' SQL Injection 20 WEB Cru3l.b0y
2009-02-25 Exploit Code Downloads   JOnAS 4.10.3 - 'select' Error Page Cross-Site Scripting 24 WEB Digital Security Research Group
2009-02-25 Exploit Code Downloads   Orooj CMS - 'news.php' SQL Injection 25 WEB Cru3l.b0y
2014-04-11 Exploit Code Downloads   Sendy 1.1.9.1 - SQL Injection 23 WEB delme
2009-02-24 Exploit Code Downloads   Magento 1.2 - 'downloader/index.php' Cross-Site Scripting 19 WEB Loukas Kalenderidis
2009-02-24 Exploit Code Downloads   Magento 1.2 - '/app/code/core/Mage/Adminhtml/controllers/IndexController.php?email' Cross-Site Scrip 22 WEB Loukas Kalenderidis
2009-02-24 Exploit Code Downloads   Magento 1.2 - '/app/code/core/Mage/Admin/Model/Session.php?login['Username']' Cross-Site Scripting 21 WEB Loukas Kalenderidis
2009-02-23 Exploit Code Downloads   Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection 18 WEB Salvatore Fresta
2009-02-22 Exploit Code Downloads   Blue Utopia - 'index.php' Local File Inclusion 21 WEB PLATEN
2009-02-20 Exploit Code Downloads   lastRSS autoposting bot MOD 0.1.3 - 'phpbb_root_path' Remote File Inclusion 23 WEB Kacper
2008-10-01 Exploit Code Downloads   A4Desk Event Calendar - 'eventid' SQL Injection 21 WEB r45c4l
2009-02-16 Exploit Code Downloads   Clipbucket 1.7 - 'dwnld.php' Directory Traversal 21 WEB JIKO
2009-02-10 Exploit Code Downloads   Banking@Home 2.1 - 'login.asp' Multiple SQL Injections 18 WEB Francesco Bianchino
2014-04-10 Exploit Code Downloads   Orbit Open Ad Server 1.1.0 - SQL Injection 20 WEB High-Tech Bridge SA
2014-04-10 Exploit Code Downloads   XCloner Standalone 3.5 - Cross-Site Request Forgery 22 WEB High-Tech Bridge SA
2009-02-09 Exploit Code Downloads   Bitrix Site Manager 6/7 - Multiple Input Validation Vulnerabilities 25 WEB aGGreSSor
2009-02-05 Exploit Code Downloads   glFusion 1.1 - Anonymous Comment 'Username' HTML Injection 21 WEB Bjarne Mathiesen Schacht
2009-02-09 Exploit Code Downloads   FotoWeb 6.0 - 'Grid.fwx?search' Cross-Site Scripting 19 WEB Stelios Tigkas
2009-02-09 Exploit Code Downloads   FotoWeb 6.0 - 'Login.fwx?s' Cross-Site Scripting 21 WEB Stelios Tigkas
2009-02-06 Exploit Code Downloads   Ilch CMS 1.1 - 'HTTP_X_FORWARDED_FOR' SQL Injection 22 WEB Gizmore
2009-02-04 Exploit Code Downloads   MetaBBS 0.11 - Administration Settings Authentication Bypass 20 WEB make0day
2009-02-03 Exploit Code Downloads   Simple Machines Forum (SMF) 1.1.7 - '[url]' Tag HTML Injection 21 WEB Xianur0