Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-11-09   MoinMoin 1.5.8/1.9 - Cross-Site Scripting / Information Disclosure 26 WEB Xia Shing Zee
2008-11-07   TurnkeyForms Software Directory 1.0 - SQL Injection / Cross-Site Scripting 28 WEB G4N0K
2008-11-06   CuteNews aj-fork - 'path' Remote File Inclusion 27 WEB DeltahackingTEAM
2014-03-28   iStArtApp FileXChange 6.2 iOS - Multiple Vulnerabilities 31 WEB Vulnerability-Lab
2008-11-04   DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities 26 WEB Lostmon
2008-11-04   firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting 26 WEB Brad Antoniewicz
2008-11-02   YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection 24 WEB Hussin X
2014-03-27   Joomla! Component Kunena 3.0.4 - Persistent Cross-Site Scripting 27 WEB Qoppa
2014-03-27   LinEx - Password Reset 25 WEB N B Sri Harsha
2014-03-27   ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities 38 WEB Vulnerability-Lab
2014-03-27   Easy FileManager 1.1 iOS - Multiple Vulnerabilities 34 WEB Vulnerability-Lab
2014-03-27   Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities 31 WEB Vulnerability-Lab
2014-03-27   FTP Drive + HTTP 1.0.4 iOS - Code Execution 34 WEB Vulnerability-Lab
2014-03-27   Dell SonicWALL EMail Security Appliance Application 7.4.5 - Multiple Vulnerabilities 26 WEB Vulnerability-Lab
2008-10-31   SpitFire Photo Pro - 'pages.php' SQL Injection 29 WEB Beenu Arora
2008-10-31   phpWebSite 0.9.3 - 'links.php' SQL Injection 24 WEB Beenu Arora
2008-10-29   Dorsa CMS - 'Default_.aspx' Cross-Site Scripting 22 WEB Pouya_Server
2008-10-29   Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting 24 WEB ShockShadow
2014-03-26   IBM Tealeaf CX 8.8 - Remote OS Command Injection 26 WEB drone
2014-03-26   Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell 21 WEB Groundworks Technologies
2008-10-29   KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities 23 WEB cize0f
2008-10-28   KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting 27 WEB cize0f
2008-10-28   Elkagroup Image Gallery 1.0 - 'view.php' SQL Injection 21 WEB G4N0K
2008-10-28   H&H Solutions WebSoccer 2.80 - 'id' SQL Injection 29 WEB d3v1l
2008-10-28   H2O-CMS 3.4 - PHP Code Injection / Cookie Authentication Bypass 22 WEB StAkeR
2008-10-27   Microsoft Internet Explorer 6 - ' ' Address Bar URI Spoofing 27 WEB Amit Klein
2008-10-28   PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting 23 WEB Ehsan_Hp200
2008-10-27   All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection 23 WEB ExSploiters
2008-10-27   bcoos 1.0.13 - 'click.php' SQL Injection 23 WEB DeltahackingTEAM
2008-10-27   MyBB 1.4.2 - 'moderation.php' Cross-Site Scripting 24 WEB Kellanved
2008-10-27   Tandis CMS 2.5 - 'index.php' Multiple SQL Injections 27 WEB G4N0K
2008-10-27   bcoos 1.0.13 - 'common.php' Remote File Inclusion 22 WEB Cru3l.b0y
2008-10-27   phpMyAdmin 3.0.1 - 'pmd_pdf.php' Cross-Site Scripting 22 WEB Hadi Kiamarsi
2008-10-24   iPeGuestbook 1.7/2.0 - 'pg' Cross-Site Scripting 23 WEB Ghost Hacker
2008-10-23   Adam Wright HTMLTidy 0.5 - 'html-tidy-logic.php' Cross-Site Scripting 25 WEB ShockShadow
2008-10-23   ClipShare Pro 4.0 - 'fullscreen.php' Cross-Site Scripting 21 WEB ShockShadow
2008-10-23   Jetbox CMS 2.1 - 'liste' Cross-Site Scripting 23 WEB Omer Singer
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'announcements.php' SQL Injection 26 WEB xuanmumu
2008-10-23   UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection 20 WEB xuanmumu
2008-10-23   Osprey 1.0a4.1 - 'ListRecords.php' Multiple Remote File Inclusions 22 WEB BoZKuRTSeRDaR
2014-03-26   OpenCart 1.5.6.1 - 'openbay' Multiple SQL Injections 28 WEB Saadi Siddiqui
2014-03-26   InterWorx Control Panel 5.0.13 build 574 - 'xhr.php?i' SQL Injection 22 WEB Eric Flokstra
2014-03-25   qEngine CMS 6.0.0 - Multiple Vulnerabilities 22 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'qvc_init()' Cookie Poisoning CAPTCHA Bypass 25 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Database Backup Disclosure 22 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - 'task.php' Local File Inclusion 27 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - Remote Code Execution 25 WEB LiquidWorm
2014-03-25   Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure 21 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Database Backup Disclosure 25 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - 'task.php' Local File Inclusion 21 WEB LiquidWorm
2014-03-25   Cart Engine 3.0.0 - Remote Code Execution 27 WEB LiquidWorm
2014-03-25   Getsimple CMS 3.3.1 - Persistent Cross-Site Scripting 20 WEB Jeroen - IT Nerdbox
2008-10-21   Bahar Download Script 2.0 - 'aspkat.asp' SQL Injection 23 WEB CyberGrup Lojistik
2008-10-21   PHPhotoGallery 0.92 - 'index.php' SQL Injection 21 WEB KnocKout
2008-10-21   Dizi Portali - 'diziler.asp' SQL Injection 22 WEB CyberGrup Lojistik
2008-10-20   PHP-Nuke Sarkilar Module - 'id' SQL Injection 17 WEB r45c4l
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/nav.php?nav_id' SQL Injection 22 WEB Omer Singer
2008-10-20   Jetbox CMS 2.1 - '/admin/cms/images.php?orderby' SQL Injection 20 WEB Omer Singer
2008-10-17   FlashChat - 'connection.php' Role Filter Security Bypass 28 WEB eLiSiA
2008-10-16   Habari 0.5.1 - 'habari_username' Cross-Site Scripting 25 WEB faithlove
2008-10-14   SweetCMS 1.5.2 - 'index.php' SQL Injection 22 WEB Dapirates
2008-10-14   Elxis CMS 2008.1 - PHPSESSID Variable Session Fixation 21 WEB faithlove
2008-10-14   Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities 24 WEB faithlove
2008-10-14   Webscene eCommerce - 'productlist.php' SQL Injection 28 WEB Angela Chang
2008-10-13   ASP Indir Iltaweb Alisveris Sistemi - 'xurunler.asp' SQL Injection 21 WEB tRoot
2014-03-24   BigDump 0.35b - Arbitrary File Upload 24 WEB felipe andrian
2008-10-11   EEB-CMS 0.95 - 'index.php' Cross-Site Scripting 23 WEB d3v1l
2008-10-11   Joomla! Component com_jeux - 'id' SQL Injection 25 WEB H!tm@N
2008-10-08   DFFFrameworkAPI - 'DFF_config[dir_include]' Multiple Remote File Inclusions 25 WEB GoLd_M
2008-10-08   Opera Web Browser 8.51 - URI redirection Remote Code Execution 34 WEB MATASANOS
2008-10-06   PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion 25 WEB Pepelux
2008-10-06   PHP Web Explorer 0.99b - 'main.php?refer' Traversal Local File Inclusion 28 WEB Pepelux
2008-10-06   Simple Machines Forum (SMF) 1.1.6 - 'POST' Filter Security Bypass 26 WEB WHK
2008-10-03   AmpJuke 0.7.5 - 'index.php' SQL Injection 24 WEB S_DLA_S
2008-10-05   VeriSign Kontiki Delivery Management System 5.0 - 'action' Cross-Site Scripting 25 WEB Mazin Faour
2008-10-03   Website Directory - 'index.php' Cross-Site Scripting 26 WEB Ghost Hacker
2008-10-02   Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting 23 WEB Am!r
2008-10-01   WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities 29 WEB Omer Singer
2008-10-01   H-Sphere WebShell 4.3.10 - 'actions.php' Multiple Cross-Site Scripting Vulnerabilities 30 WEB C1c4Tr1Z
2008-10-01   Celoxis - Multiple Cross-Site Scripting Vulnerabilities 24 WEB teuquooch1seero
2008-09-30   A4Desk Event Calendar - 'v' Remote File Inclusion 26 WEB Lo$er
2008-09-29   WordPress MU 1.2/1.3 - '/wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities 22 WEB Juan Galiana Lara
2008-09-29   CAcert - 'analyse.php' Cross-Site Scripting 23 WEB Alexander Klink
2008-09-29   PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass 26 WEB Crackers_Child
2014-03-22   LifeSize UVC 1.2.6 - (Authenticated) Remote Code Execution 28 WEB Brandon Perry
2008-09-27   Recipe Script - 'search.php' Cross-Site Scripting 33 WEB Ghost Hacker
2008-09-27   Membership Script - Multiple Cross-Site Scripting Vulnerabilities 24 WEB Ghost Hacker
2008-09-27   ClickBank Portal - 'search.php' Cross-Site Scripting 22 WEB Ghost Hacker
2008-09-27   Lyrics Script - 'search_results.php' Cross-Site Scripting 26 WEB Ghost Hacker
2008-09-27   WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting 24 WEB Ghost Hacker
2008-09-26   Barcode Generator 2.0 - 'LSTable.php' Remote File Inclusion 28 WEB Br0k3n H34rT
2008-09-25   OpenNMS 1.5.x - 'filter' Cross-Site Scripting 24 WEB d2d
2008-09-25   OpenNMS 1.5.x - 'Username' Cross-Site Scripting 26 WEB d2d
2008-09-25   OpenNMS 1.5.x - 'j_username' Cross-Site Scripting 25 WEB d2d
2008-09-25   Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access 25 WEB StAkeR
2008-09-25   Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities 27 WEB Fabian Fingerle
2008-09-25   Libra File Manager 1.18/2.0 - 'fileadmin.php' Local File Inclusion 24 WEB Pepelux
2008-09-25   EasyRealtorPRO 2008 - 'site_search.php' Multiple SQL Injections 26 WEB David Sopas
2008-09-24   Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections 24 WEB Justin C. Klein Keane
2008-09-23   InterTech WCMS - 'etemplate.php' SQL Injection 23 WEB GeNiUs IrAQI
2008-09-23   Omnicom Content Platform - 'browser.asp' Directory Traversal 23 WEB AlbaniaN-[H]
2008-09-23   Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting 30 WEB Hadi Kiamarsi
2008-09-22   6rbScript - 'cat.php' SQL Injection 23 WEB Karar Alshami
2008-09-20   Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting 22 WEB Rohit Bansal
2008-09-21   BlueCUBE CMS - 'tienda.php' SQL Injection 21 WEB r45c4l
2008-09-22   BLUEPAGE CMS 2.5 - 'PHPSESSID' Session Fixation 24 WEB David Vieira-Kurz
2008-09-22   xt:Commerce 3.04 - 'XTCsid' Session Fixation 26 WEB David Vieira-Kurz
2008-09-22   xt:Commerce 3.04 - 'advanced_search_result.php?keywords' Cross-Site Scripting 23 WEB David Vieira-Kurz
2008-09-22   Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting 20 WEB Fabian Fingerle
2008-09-22   MapCal 0.1 - 'id' SQL Injection 28 WEB 0x90
2008-09-22   UNAK-CMS - Cookie Authentication Bypass 32 WEB Ciph3r
2008-09-22   rgb72 WCMS 1.0 - 'index.php' SQL Injection 22 WEB CWH Underground
2008-09-21   eXtrovert software Thyme 1.3 - 'add_calendars.php' Cross-Site Scripting 28 WEB DigiTrust Group
2008-09-19   PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections 33 WEB Jan Van Niekerk
2008-09-19   Parallels H-Sphere 3.0/3.1 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities 25 WEB t0fx
2008-09-19   HyperStop WebHost Directory 1.2 - Database Disclosure 34 WEB r45c4l
2008-09-18   Sama Educational Management System - 'error.asp' Cross-Site Scripting 21 WEB Lagon666
2008-09-17   Add a link 4 - Security Bypass / SQL Injection 29 WEB JosS
2008-09-17   Quick Cart 3.1 - 'admin.php' Cross-Site Scripting 27 WEB John Cobb
2008-09-17   Cars & Vehicle - 'page.php' SQL Injection 27 WEB Hussin X
2008-09-16   Quick CMS Lite 2.1 - 'admin.php' Cross-Site Scripting 21 WEB John Cobb
2014-03-20   D-Link DIR-600L AX 1.00 - Cross-Site Request Forgery 22 WEB Dhruv Shah
2008-09-15   phpMyAdmin 3.2 - 'server_databases.php' Remote Command Execution 26 WEB Norman Hippert
2014-03-20   OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities 26 WEB //sToRm
2014-03-20   Wireless Drive 1.1.0 iOS - Multiple Web Vulnerabilities 26 WEB Vulnerability-Lab