Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-09-19   PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections 38 WEB Jan Van Niekerk
2008-09-19   Parallels H-Sphere 3.0/3.1 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities 29 WEB t0fx
2008-09-19   HyperStop WebHost Directory 1.2 - Database Disclosure 38 WEB r45c4l
2008-09-18   Sama Educational Management System - 'error.asp' Cross-Site Scripting 28 WEB Lagon666
2008-09-17   Add a link 4 - Security Bypass / SQL Injection 34 WEB JosS
2008-09-17   Quick Cart 3.1 - 'admin.php' Cross-Site Scripting 31 WEB John Cobb
2008-09-17   Cars & Vehicle - 'page.php' SQL Injection 31 WEB Hussin X
2008-09-16   Quick CMS Lite 2.1 - 'admin.php' Cross-Site Scripting 29 WEB John Cobb
2014-03-20   D-Link DIR-600L AX 1.00 - Cross-Site Request Forgery 28 WEB Dhruv Shah
2008-09-15   phpMyAdmin 3.2 - 'server_databases.php' Remote Command Execution 32 WEB Norman Hippert
2014-03-20   OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities 30 WEB //sToRm
2014-03-20   Wireless Drive 1.1.0 iOS - Multiple Web Vulnerabilities 31 WEB Vulnerability-Lab
2014-03-19   Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities 29 WEB xistence
2014-03-19   McAfee Asset Manager 6.6 - Multiple Vulnerabilities 28 WEB Brandon Perry
2008-09-12   QuicO - 'photo.php' SQL Injection 28 WEB Beenu Arora
2008-09-12   Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB Xylitol
2008-09-12   Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 31 WEB Xylitol
2008-09-11   Nooms 1.1 - 'search.php?q' Cross-Site Scripting 30 WEB Dr.Crash
2008-09-11   Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting 34 WEB Dr.Crash
2008-09-10   Hot Links SQL-PHP - 'news.php' SQL Injection 33 WEB r45c4l
2008-09-10   Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting 36 WEB Alexios Fakos
2008-09-10   Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting 33 WEB Alexios Fakos
2008-09-10   AvailScript Job Portal Script - 'applynow.php' SQL Injection 29 WEB InjEctOr5
2008-09-10   Jaw Portal 1.2 - 'index.php' Multiple Local File Inclusions 31 WEB SirGod
2008-09-02   UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection 26 WEB GulfTech Security
2008-09-07   E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection 35 WEB r45c4l
2008-09-08   eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection 32 WEB Omer Singer
2008-09-08   Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities 29 WEB sl4xUz
2008-09-07   phpAdultSite CMS - 'results_per_page' Cross-Site Scripting 32 WEB David Sopas
2008-09-06   Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities 31 WEB Maximiliano Soler
2008-09-03   CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting 38 WEB Xc0re
2014-03-17   Joomla! Component AJAX Shoutbox 1.6 - SQL Injection 30 WEB Ibrahim Raafat
2014-03-17   OpenSupports 2.0 - Blind SQL Injection 27 WEB indoushka
2008-09-04   XRms 1.99.2 - 'starting' Cross-Site Scripting 31 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'file_id' Cross-Site Scripting 36 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'case_title' Cross-Site Scripting 33 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting 38 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'campaign_title' Cross-Site Scripting 38 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'last_name' Cross-Site Scripting 27 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'company_name' Cross-Site Scripting 31 WEB Fabian Fingerle
2008-09-04   XRms 1.99.2 - 'title' Cross-Site Scripting 30 WEB Fabian Fingerle
2014-03-17   OpenSupports 2.x - Authentication Bypass / Cross-Site Request Forgery 30 WEB TN CYB3R
2008-09-04   XRms 1.99.2 - 'login.php?target' Cross-Site Scripting 29 WEB Fabian Fingerle
2008-09-03   @Mail 5.42 and @Mail WebMail 5.0.5 - Multiple Cross-Site Scripting Vulnerabilities 28 WEB C1c4Tr1Z
2008-09-03   eliteCMS 1.0 - 'page' SQL Injection 28 WEB e.wiZz!
2008-08-28   OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting 26 WEB C1c4Tr1Z
2008-08-28   OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting 29 WEB C1c4Tr1Z
2008-08-28   OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting 27 WEB C1c4Tr1Z
2008-09-02   IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting 29 WEB Am!r
2008-08-29   Full PHP Emlak Script - 'landsee.php' SQL Injection 25 WEB Hussin X
2008-09-01   GenPortal - 'buscarCat.php' Cross-Site Scripting 27 WEB sl4xUz
2008-09-01   vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities 32 WEB Fabian Fingerle
2008-08-29   dotProject 2.1.2 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 28 WEB C1c4Tr1Z
2008-08-27   AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting 25 WEB Bug Researchers Group
2008-08-26   Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting 24 WEB JoCk3r
2008-08-26   MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting 27 WEB Sam Georgiou
2008-08-26   HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting 26 WEB Luca Carettoni
2008-08-26   Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting 29 WEB Bug Researchers Group
2008-08-25   Bluemoon inc. PopnupBlog 3.30 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 23 WEB Lostmon
2008-08-25   PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities 28 WEB t0pP8uZz
2008-08-23   One-News - Multiple Input Validation Vulnerabilities 30 WEB suN8Hclf
2008-08-22   PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting 28 WEB Tyler Trioxide
2008-08-22   Accellion File Transfer - Multiple Cross-Site Scripting Vulnerabilities 26 WEB Eric Beaulieu
2008-08-21   TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities 27 WEB Doz
2008-08-21   FAR-PHP 1.0 - 'index.php' Local File Inclusion 27 WEB Beenu Arora
2008-08-20   vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting 27 WEB Core Security
2008-08-21   Simasy CMS - 'id' SQL Injection 25 WEB r45c4l
2008-08-21   Scripts4Profit DXShopCart 4.30 - 'pid' SQL Injection 27 WEB Hussin X
2014-03-15   Church Edit - Blind SQL Injection 25 WEB ThatIcyChill
2008-06-19   Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure 26 WEB Charalambous Glafkos
2008-08-20   YourFreeWorld Ad-Exchange Script - 'id' SQL Injection 28 WEB Hussin X
2008-08-19   Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting 29 WEB GulfTech Security
2008-08-18   K Web CMS - 'sayfala.asp' SQL Injection 27 WEB baltazar
2008-08-18   itMedia - Multiple SQL Injections 23 WEB baltazar
2014-03-14   Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection 28 WEB Michael Wisniewski
2008-08-18   Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting 25 WEB ThE dE@Th
2008-08-18   NewsHOWLER 1.03 - Cookie Data SQL Injection 31 WEB Khashayar Fereidani
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File 37 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusi 27 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion 24 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion 27 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Loc 30 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local 24 WEB Digital Security Research Group
2008-08-18   Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion 25 WEB Digital Security Research Group
2014-03-14   Fonality trixbox - 'mac' Remote Code Injection 27 WEB i-Hmx
2008-08-18   Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion 31 WEB Digital Security Research Group
2008-08-18   AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting 24 WEB Morgan Todd
2008-08-15   PromoProducts - 'view_product.php' Multiple SQL Injections 23 WEB baltazar
2008-08-15   FipsCMS 2.1 - 'neu.asp' SQL Injection 32 WEB U238
2008-08-15   FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting 31 WEB Dr.Crash
2008-08-15   Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scr 28 WEB Khashayar Fereidani
2008-08-15   Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Script 26 WEB Khashayar Fereidani
2008-08-15   PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion 31 WEB Lostmon
2008-08-15   mUnky 0.01 - 'index.php' Remote Code Execution 25 WEB Khashayar Fereidani
2008-08-14   Openfire 3.5.2 - 'login.jsp' Cross-Site Scripting 25 WEB Daniel Henninger
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion 27 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion 33 WEB CraCkEr
2008-08-13   Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting 30 WEB CraCkEr
2008-08-13   YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion 32 WEB CraCkEr
2008-08-13   Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass 30 WEB Ciph3r
2008-08-13   PHP-Fusion 4.01 - 'readmore.php' SQL Injection 31 WEB Rake
2008-08-13   PHP Realty - 'dpage.php' SQL Injection 28 WEB CraCkEr
2008-08-13   Freeway 1.4.1 - Multiple Input Validation Vulnerabilities 28 WEB Digital Security Research Group
2014-03-13   Fonality trixbox - SQL Injection 28 WEB Sc4nX
2014-03-13   Ubee EVW3200 - Cross-Site Request Forgery 31 WEB Jeroen - IT Nerdbox
2014-03-13   Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities 28 WEB Jeroen - IT Nerdbox
2008-08-13   Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion 31 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion 33 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion 29 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion 29 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'ManagerResource.class.php?root_path' Remote File Inclusion 27 WEB Rakesh S
2008-08-13   Meet#Web 0.8 - 'modules.php?root_path' Remote File Inclusion 30 WEB Rakesh S
2008-08-12   IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 26 WEB sl4xUz
2008-08-12   Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting 33 WEB Bug Researchers Group
2008-08-12   Datafeed Studio - 'patch.php' Remote File Inclusion 25 WEB Bug Researchers Group
2008-08-11   Kayako SupportSuite 3.x - '/staff/index.php?customfieldlinkid' SQL Injection 33 WEB GulfTech Security
2008-08-11   Kayako SupportSuite 3.x - 'index.php?filter' Cross-Site Scripting 32 WEB GulfTech Security
2008-08-11   Kayako SupportSuite 3.x - '/visitor/index.php?sessionid' Cross-Site Scripting 32 WEB GulfTech Security
2008-08-11   Domain Group Network GooCMS 1.02 - 'index.php' Cross-Site Scripting 32 WEB ahmadbaby
2008-08-08   Linkspider 1.08 - Multiple Remote File Inclusions 28 WEB Rohit Bansal
2008-08-09   RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting 30 WEB Lostmon
2008-08-09   RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting 31 WEB Lostmon
2014-03-12   FreePBX 2.11.0 - Remote Command Execution 27 WEB @0x00string
2014-03-12   vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion 35 WEB Portcullis
2014-03-12   Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection 27 WEB Portcullis