Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-12-13   ASP-DEV XM Events Diary - 'cat' SQL Injection 12 WEB Pouya_Server
2008-12-01   Octeth Oempro 3.5.5 - Multiple SQL Injections 11 WEB security curmudgeon
2008-12-11   Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection 12 WEB 3d D3v!L
2008-12-09   Professional Download Assistant 0.1 - SQL Injection 12 WEB ZoRLu
2008-12-08   PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting 10 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'shop/Admin/shop_kunden_mgmt.php' Cross-Site Scripting 10 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'shop/kontakt.php' Cross-Site Scripting 10 WEB th3.r00k.ieatpork
2008-12-08   PHPepperShop 1.4 - 'index.php' Cross-Site Scripting 10 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - 'order.php?PATH_INFO' Cross-Site Scripting 11 WEB th3.r00k.ieatpork
2008-12-08   PrestaShop 1.1 - '/admin/login.php?PATH_INFO' Cross-Site Scripting 10 WEB th3.r00k.ieatpork
2008-12-06   TWiki 4.x - 'URLPARAM' Cross-Site Scripting 9 WEB Marc Schoenefeld
2008-12-06   TWiki 4.x - 'SEARCH' Remote Command Execution 10 WEB Troy Bollinge
2014-04-01   Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit) 10 WEB Brandon Perry
2008-12-04   PHPSTREET WebBoard 1.0 - 'show.php' SQL Injection 9 WEB CWH Underground
2008-12-04   RevSense 1.0 - SQL Injection / Cross-Site Scripting 10 WEB Pouya_Server
2008-12-03   Yappa-ng - Query String Cross-Site Scripting 9 WEB Pouya_Server
2008-12-03   Yappa-ng - 'index.php?album' Cross-Site Scripting 9 WEB Pouya_Server
2014-04-01   Horde Webmail 5.1 - Open Redirect 8 WEB felipe andrian
2008-12-02   Orkut Clone - 'profile_social.php?id' Cross-Site Scripting 9 WEB d3b4g
2008-12-02   Orkut Clone - 'profile_social.php?id' SQL Injection 8 WEB d3b4g
2008-12-02   Jbook - SQL Injection 8 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' Cross-Site Scripting 8 WEB Pouya_Server
2008-12-02   Z1Exchange 1.0 - 'id' SQL Injection 11 WEB Pouya_Server
2008-12-02   Fantastico - 'index.php' Local File Inclusion 9 WEB Super-Crystal
2008-12-01   IBM Rational ClearCase 7/8 - Cross-Site Scripting 9 WEB IBM
2008-12-01   Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting 11 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'default.asp' Query String Cross-Site Scripting 12 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting 10 WEB Pouya_Server
2008-12-01   ASP Forum Script - 'messages.asp?message_id' SQL Injection 11 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting 12 WEB Pouya_Server
2008-12-01   PHP JOBWEBSITE PRO - 'adname' SQL Injection 8 WEB Pouya_Server
2014-03-31   EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit) 9 WEB Brandon Perry
2014-03-31   WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion 10 WEB Glyn Wintle
2014-03-31   Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities 10 WEB Vulnerability-Lab
2014-03-31   PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities 8 WEB Vulnerability-Lab
2008-12-01   Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting 10 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting 10 WEB Pouya_Server
2008-12-01   Softbiz Classifieds Script - 'showcategory.php?radio' Cross-Site Scripting 9 WEB Pouya_Server
2008-12-01   CodeToad ASP Shopping Cart Script - Cross-Site Scripting 10 WEB Pouya_Server
2008-12-01   Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting 10 WEB Pouya_Server
2008-12-01   Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection 11 WEB Pouya_Server
2008-11-28   RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure 11 WEB Charalambous Glafkos
2008-11-28   RakhiSoftware Shopping Cart - 'product.php' Multiple Cross-Site Scripting Vulnerabilities 10 WEB Charalambous Glafkos
2008-11-29   Basic-CMS - 'q' Cross-Site Scripting 11 WEB Pouya_Server
2008-11-29   Venalsur Booking Centre 2.01 - Multiple Cross-Site Scripting Vulnerabilities 9 WEB Pouya_Server
2008-11-29   ParsBlogger - 'blog.asp' Cross-Site Scripting 10 WEB Pouya_Server
2008-11-29   Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection 10 WEB Charalambous Glafkos
2008-11-29   Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection 10 WEB Charalambous Glafkos
2008-11-29   Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting 11 WEB Charalambous Glafkos
2008-11-27   AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting 13 WEB CWH Underground
2008-11-24   COms - 'dynamic.php' Cross-Site Scripting 12 WEB Pouya_Server
2008-11-23   Pilot Group PG Roommate Finder Solution - SQL Injection 13 WEB ZoRLu
2008-11-20   Softbiz Classifieds Script - Cross-Site Scripting 13 WEB Vahid Ezraeil
2008-11-19   Easyedit CMS - 'news.php?intPageID' SQL Injection 13 WEB d3v1l
2008-11-19   Easyedit CMS - 'page.php?intPageID' SQL Injection 13 WEB d3v1l
2008-11-19   Easyedit CMS - 'subcategory.php?intSubCategoryID' SQL Injection 14 WEB d3v1l
2008-11-18   Kimson CMS - 'id' Cross-Site Scripting 15 WEB md.r00t
2008-11-17   BoutikOne CMS - 'search_query' Cross-Site Scripting 12 WEB d3v1l
2014-03-29   ASP-Nuke 2.0.7 - 'gotourl.asp' Open Redirect 16 WEB felipe andrian
2008-11-11   Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities 15 WEB Richard Brain
2008-11-10   Dizi Portali - 'film.asp' SQL Injection 17 WEB Kaan KAMIS
2008-11-10   IBM Tivoli Netcool Service Quality Manager - Cross-Site Scripting / HTML Injection 13 WEB Francesco Bianchino
2008-11-08   Zeeways Shaadi Clone 2.0 - Authentication Bypass (2) 12 WEB G4N0K
2008-11-09   MoinMoin 1.5.8/1.9 - Cross-Site Scripting / Information Disclosure 16 WEB Xia Shing Zee
2008-11-07   TurnkeyForms Software Directory 1.0 - SQL Injection / Cross-Site Scripting 17 WEB G4N0K
2008-11-06   CuteNews aj-fork - 'path' Remote File Inclusion 18 WEB DeltahackingTEAM
2014-03-28   iStArtApp FileXChange 6.2 iOS - Multiple Vulnerabilities 14 WEB Vulnerability-Lab
2008-11-04   DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 15 WEB Lostmon
2008-11-04   firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting 13 WEB Brad Antoniewicz
2008-11-02   YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection 14 WEB Hussin X
2014-03-27   Joomla! Component Kunena 3.0.4 - Persistent Cross-Site Scripting 13 WEB Qoppa
2014-03-27   LinEx - Password Reset 11 WEB N B Sri Harsha
2014-03-27   ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities 17 WEB Vulnerability-Lab
2014-03-27   Easy FileManager 1.1 iOS - Multiple Vulnerabilities 14 WEB Vulnerability-Lab
2014-03-27   Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities 13 WEB Vulnerability-Lab
2014-03-27   FTP Drive + HTTP 1.0.4 iOS - Code Execution 11 WEB Vulnerability-Lab
2014-03-27   Dell SonicWALL EMail Security Appliance Application 7.4.5 - Multiple Vulnerabilities 14 WEB Vulnerability-Lab
2008-10-31   SpitFire Photo Pro - 'pages.php' SQL Injection 13 WEB Beenu Arora
2008-10-31   phpWebSite 0.9.3 - 'links.php' SQL Injection 14 WEB Beenu Arora
2008-10-29   Dorsa CMS - 'Default_.aspx' Cross-Site Scripting 11 WEB Pouya_Server
2008-10-29   Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting 12 WEB ShockShadow
2014-03-26   IBM Tealeaf CX 8.8 - Remote OS Command Injection 12 WEB drone
2014-03-26   Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell 11 WEB Groundworks Technologies
2008-10-29   KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities 12 WEB cize0f
2008-10-28   KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting 12 WEB cize0f
2008-10-28   Elkagroup Image Gallery 1.0 - 'view.php' SQL Injection 11 WEB G4N0K
2008-10-28   H&H Solutions WebSoccer 2.80 - 'id' SQL Injection 12 WEB d3v1l
2008-10-28   H2O-CMS 3.4 - PHP Code Injection / Cookie Authentication Bypass 10 WEB StAkeR
2008-10-27   Microsoft Internet Explorer 6 - ' ' Address Bar URI Spoofing 11 WEB Amit Klein
2008-10-28   PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting 13 WEB Ehsan_Hp200
2008-10-27   All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection 12 WEB ExSploiters
2008-10-27   bcoos 1.0.13 - 'click.php' SQL Injection 11 WEB DeltahackingTEAM
2008-10-27   MyBB 1.4.2 - 'moderation.php' Cross-Site Scripting 11 WEB Kellanved
2008-10-27   Tandis CMS 2.5 - 'index.php' Multiple SQL Injections 11 WEB G4N0K
2008-10-27   bcoos 1.0.13 - 'common.php' Remote File Inclusion 11 WEB Cru3l.b0y
2008-10-27   phpMyAdmin 3.0.1 - 'pmd_pdf.php' Cross-Site Scripting 11 WEB Hadi Kiamarsi
2008-10-24   iPeGuestbook 1.7/2.0 - 'pg' Cross-Site Scripting 11 WEB Ghost Hacker
2008-10-23   Adam Wright HTMLTidy 0.5 - 'html-tidy-logic.php' Cross-Site Scripting 12 WEB ShockShadow
2008-10-23   ClipShare Pro 4.0 - 'fullscreen.php' Cross-Site Scripting 10 WEB ShockShadow
2008-10-23   Jetbox CMS 2.1 - 'liste' Cross-Site Scripting 10 WEB Omer Singer
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'announcements.php' SQL Injection 12 WEB xuanmumu
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection 10 WEB xuanmumu
2008-10-23   Osprey 1.0a4.1 - 'ListRecords.php' Multiple Remote File Inclusions 10 WEB BoZKuRTSeRDaR
2014-03-26   OpenCart 1.5.6.1 - 'openbay' Multiple SQL Injections 12 WEB Saadi Siddiqui
2014-03-26   InterWorx Control Panel 5.0.13 build 574 - 'xhr.php?i' SQL Injection 11 WEB Eric Flokstra
2014-03-25   qEngine CMS 6.0.0 - Multiple Vulnerabilities 10 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'qvc_init()' Cookie Poisoning CAPTCHA Bypass 12 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Database Backup Disclosure 11 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'task.php' Local File Inclusion 11 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Remote Code Execution 12 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure 10 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Database Backup Disclosure 11 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - 'task.php' Local File Inclusion 11 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Remote Code Execution 15 WEB LiquidWorm
2014-03-25   Getsimple CMS 3.3.1 - Persistent Cross-Site Scripting 10 WEB Jeroen - IT Nerdbox
2008-10-21   Bahar Download Script 2.0 - 'aspkat.asp' SQL Injection 10 WEB CyberGrup Lojistik
2008-10-21   PHPhotoGallery 0.92 - 'index.php' SQL Injection 9 WEB KnocKout
2008-10-21   Dizi Portali - 'diziler.asp' SQL Injection 10 WEB CyberGrup Lojistik
2008-10-20   PHP-Nuke Sarkilar Module - 'id' SQL Injection 9 WEB r45c4l
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/nav.php?nav_id' SQL Injection 10 WEB Omer Singer
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/images.php?orderby' SQL Injection 10 WEB Omer Singer