|
2008-05-07
|
|
Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions
|
38 |
WEB
|
Matrix86
|
|
2008-05-06
|
|
Sphider 1.3.4 - 'query' Cross-Site Scripting
|
36 |
WEB
|
Christian Holler
|
|
2008-05-06
|
|
QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload
|
42 |
WEB
|
CrAzY CrAcKeR
|
|
2008-05-06
|
|
RunCMS 1.6.1 - 'pm.class.php' Multiple SQL Injections
|
43 |
WEB
|
The:Paradox
|
|
2008-05-05
|
|
iGaming CMS 1.5 - 'poll_vote.php' SQL Injection
|
43 |
WEB
|
Cod3rZ
|
|
2008-05-05
|
|
BatmanPorTaL - 'profil.asp?id' SQL Injection
|
41 |
WEB
|
U238
|
|
2008-05-05
|
|
BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection
|
40 |
WEB
|
U238
|
|
2008-05-05
|
|
osCommerce 2.1/2.2 - Multiple Cross-Site Scripting Vulnerabilities
|
40 |
WEB
|
David Sopas Ferreira
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'header.php' Cross-Site Scripting
|
42 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'index.php' Cross-Site Scripting
|
41 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
Maian Uploader 4.0 - 'keywords' Cross-Site Scripting
|
41 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
LifeType 1.2.8 - 'admin.php' Cross-Site Scripting
|
40 |
WEB
|
Khashayar Fereidani
|
|
2008-05-05
|
|
TLM CMS 1.1 - 'index.php' Multiple SQL Injections
|
39 |
WEB
|
ZoRLu
|
|
2014-02-18
|
|
Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection
|
40 |
WEB
|
Dana James Traversie
|
|
2014-02-18
|
|
Concrete5 CMS 5.6.2.1 - 'index.php?cID' SQL Injection
|
40 |
WEB
|
killall-9
|
|
2014-02-18
|
|
Pina CMS - Multiple Vulnerabilities
|
44 |
WEB
|
Shadman Tanjim
|
|
2014-02-18
|
|
My PDF Creator & DE DM 1.4 iOS - Multiple Vulnerabilities
|
36 |
WEB
|
Vulnerability-Lab
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities
|
42 |
WEB
|
ZoRLu
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting
|
40 |
WEB
|
ZoRLu
|
|
2008-05-05
|
|
GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities
|
40 |
WEB
|
ZoRLu
|
|
2008-05-03
|
|
SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload
|
43 |
WEB
|
Hadi Kiamarsi
|
|
2008-05-02
|
|
Chicomas 2.0.4 - 'index.php' Cross-Site Scripting
|
42 |
WEB
|
Hadi Kiamarsi
|
|
2008-05-02
|
|
Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting
|
39 |
WEB
|
Ivan Sanchez
|
|
2008-05-02
|
|
Zen Cart 2008 - 'index.php?keyword' SQL Injection
|
40 |
WEB
|
Ivan Sanchez
|
|
2008-05-02
|
|
Alumni 1.0.8/1.0.9 - 'index.php?year' Cross-Site Scripting
|
38 |
WEB
|
hadihadi
|
|
2008-05-02
|
|
Alumni 1.0.8/1.0.9 - 'info.php?id' SQL Injection
|
43 |
WEB
|
hadihadi
|
|
2008-05-02
|
|
EJ3 BlackBook 1.0 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities
|
43 |
WEB
|
Khashayar Fereidani
|
|
2008-05-02
|
|
EJ3 BlackBook 1.0 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
|
42 |
WEB
|
Khashayar Fereidani
|
|
2008-05-02
|
|
QT-cute QuickTalk Guestbook 1.6 - Multiple Cross-Site Scripting Vulnerabilities
|
45 |
WEB
|
ZoRLu
|
|
2008-05-02
|
|
KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities
|
41 |
WEB
|
Cod3rZ
|
|
2008-05-01
|
|
MJGUEST 6.7 - 'QT 'mjguest.php' Cross-Site Scripting
|
45 |
WEB
|
Khashayar Fereidani
|
|
2008-05-01
|
|
VWar 1.6.1 R2 - Multiple Remote Vulnerabilities
|
40 |
WEB
|
Darren McDonald
|
|
2008-04-30
|
|
C-News 1.0.1 - 'install.php' Cross-Site Scripting
|
39 |
WEB
|
ZoRLu
|
|
2008-04-26
|
|
Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion
|
40 |
WEB
|
Khashayar Fereidani
|
|
2008-04-26
|
|
Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
|
39 |
WEB
|
NoGe
|
|
2008-04-24
|
|
PHCDownload 1.1 - '/upload/install/index.php?step' Cross-Site Scripting
|
44 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection
|
47 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
Pixel Motion Blog - 'list_article.php' Cross-Site Scripting
|
41 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
PHP-Nuke DownloadsPlus Module - Arbitrary File Upload
|
39 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
Digital Hive 2.0 - 'base.php' Cross-Site Scripting
|
40 |
WEB
|
ZoRLu
|
|
2008-04-24
|
|
e107 CMS 0.7 - Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
ZoRLu
|
|
2008-04-23
|
|
Horde Webmail 1.0.6 - 'addevent.php' Cross-Site Scripting
|
41 |
WEB
|
Aria-Security Team
|
|
2014-02-16
|
|
File Hub 1.9.1 iOS - Multiple Vulnerabilities
|
46 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
mbDriveHD 1.0.7 iOS - Multiple Vulnerabilities
|
38 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
Office Assistant Pro 2.2.2 iOS - Local File Inclusion
|
43 |
WEB
|
Vulnerability-Lab
|
|
2014-02-16
|
|
Trendchip HG520 ADSL2+ Wireless Modem - Cross-Site Request Forgery
|
42 |
WEB
|
Dhruv Shah
|
|
2014-02-16
|
|
Dexter (CasinoLoader) Panel - SQL Injection
|
42 |
WEB
|
bwall
|
|
2008-04-22
|
|
S9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting
|
42 |
WEB
|
Hanno Boeck
|
|
2008-04-21
|
|
XOOPS 2.0.14 Article Module - 'article.php' SQL Injection
|
41 |
WEB
|
Cr@zy_King
|
|
2008-04-21
|
|
PortailPHP 2.0 - 'mod_search' Remote File Inclusion
|
39 |
WEB
|
ZoRLu
|
|
2008-04-21
|
|
SMF 1.1.4 - Audio CAPTCHA Security Bypass
|
38 |
WEB
|
Michael Brooks
|
|
2008-04-21
|
|
Advanced Electron Forum 1.0.6 - 'beg' Cross-Site Scripting
|
40 |
WEB
|
ZoRLu
|
|
2008-04-20
|
|
Host Directory PRO - Cookie Security Bypass
|
38 |
WEB
|
Crackers_Child
|
|
2008-04-19
|
|
XOOPS Recette 2.2 - 'detail.php' SQL Injection
|
38 |
WEB
|
S@BUN
|
|
2008-04-18
|
|
Azureus HTML WebUI 0.7.6 - Cross-Site Request Forgery
|
35 |
WEB
|
th3.r00k
|
|
2008-04-18
|
|
μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery
|
41 |
WEB
|
th3.r00k
|
|
2008-04-18
|
|
TorrentFlux 2.3 - 'admin.php' Cross-Site Request Forgery (Add Admin)
|
38 |
WEB
|
Michael Brooks
|
|
2008-04-18
|
|
WordPress Core 2.3.3 - 'cat' Directory Traversal
|
38 |
WEB
|
Gerendi Sandor Attila
|
|
2008-04-18
|
|
Wikepage Opus 13 2007.2 - 'wiki' Cross-Site Scripting
|
38 |
WEB
|
Gerendi Sandor Attila
|
|
2008-04-18
|
|
TLM CMS 3.1 - Multiple SQL Injections
|
38 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
Cobalt 2.0 - 'adminler.asp' SQL Injection
|
39 |
WEB
|
U238
|
|
2008-04-17
|
|
EsContacts 1.0 - 'search.php?msg' Cross-Site Scripting
|
37 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'login.php?msg' Cross-Site Scripting
|
38 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'importer.php?msg' Cross-Site Scripting
|
41 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'groupes.php?msg' Cross-Site Scripting
|
40 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'contacts.php?msg' Cross-Site Scripting
|
39 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
EsContacts 1.0 - 'add_groupe.php?msg' Cross-Site Scripting
|
39 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
PHP-Stats 0.1.9.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
|
40 |
WEB
|
ZoRLu
|
|
2008-04-17
|
|
MyBoard 1.0.12 - 'rep.php' Cross-Site Scripting
|
40 |
WEB
|
ZoRLu
|
|
2008-04-15
|
|
Istant-Replay - 'read.php' Remote File Inclusion
|
36 |
WEB
|
THuGM4N
|
|
2008-04-15
|
|
W2B Online Banking - 'ilang' Remote File Inclusion
|
39 |
WEB
|
THuM4N
|
|
2008-04-15
|
|
amfPHP 1.2 - '/browser/details?class' Cross-Site Scripting
|
39 |
WEB
|
Alberto Cuesta Partida
|
|
2008-04-15
|
|
amfPHP 1.2 - '/browser/code.php' Multiple Cross-Site Scripting Vulnerabilities
|
35 |
WEB
|
Alberto Cuesta Partida
|
|
2008-04-15
|
|
amfPHP 1.2 - '/browser/methodTable.php?class' Cross-Site Scripting
|
36 |
WEB
|
Alberto Cuesta Partida
|
|
2008-04-14
|
|
Cezanne Software 6.5.1/7 - 'CFLogon.asp' Cross-Site Scripting
|
41 |
WEB
|
Juan de la Fuente Costa
|
|
2008-04-14
|
|
Cezanne 7 - '/CznCommon/CznCustomContainer.asp?FUNID' SQL Injection
|
43 |
WEB
|
Juan de la Fuente Costa
|
|
2008-04-14
|
|
Cezanne 7 - 'cflookup.asp?FUNID' SQL Injection
|
39 |
WEB
|
Juan de la Fuente Costa
|
|
2014-02-13
|
|
CA 2E Web Option 8.1.2 - Authentication Bypass
|
39 |
WEB
|
Mike Emery
|
|
2008-04-14
|
|
Cezanne 6.5.1/7 - 'home.asp?CFTARGET' Cross-Site Scripting
|
38 |
WEB
|
Juan de la Fuente Costa
|
|
2008-04-14
|
|
Cezanne 6.5.1/7 - 'CznCustomContainer.asp' Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Juan de la Fuente Costa
|
|
2008-04-14
|
|
Cezanne 6.5.1/7 - 'cflookup.asp' Multiple Cross-Site Scripting Vulnerabilities
|
38 |
WEB
|
Juan de la Fuente Costa
|
|
2008-04-14
|
|
Business Objects Infoview - 'cms' Cross-Site Scripting
|
38 |
WEB
|
Sebastien gioria
|
|
2008-04-13
|
|
osCommerce Poll Booth 2.0 AddOn - 'pollbooth.php' SQL Injection
|
40 |
WEB
|
S@BUN
|
|
2008-04-11
|
|
W2B Dating Club - 'browse.php' SQL Injection
|
39 |
WEB
|
The-0utl4w
|
|
2008-04-11
|
|
W2B PHPHotResources - 'cat.php' SQL Injection
|
42 |
WEB
|
The-0utl4w
|
|
2008-04-09
|
|
phpBB Fishing Cat Portal Addon - 'functions_portal.php' Remote File Inclusion
|
40 |
WEB
|
bd0rk
|
|
2008-04-09
|
|
Pragmatic Utopia PU Arcade 2.2 - 'gid' SQL Injection
|
39 |
WEB
|
MantiS
|
|
2008-04-08
|
|
Swiki 1.5 - HTML Injection / Cross-Site Scripting
|
42 |
WEB
|
Brad Antoniewicz
|
|
2008-04-05
|
|
Prozilla Software Index 1.1 - SQL Injection
|
43 |
WEB
|
t0pP8uZz
|
|
2008-04-05
|
|
Prozilla Gaming Directory 1.0 - SQL Injection
|
44 |
WEB
|
t0pP8uZz
|
|
2008-04-07
|
|
Wikepage Opus 13 2007.2 - 'index.php' Multiple Directory Traversal Vulnerabilities
|
40 |
WEB
|
A.nosrati
|
|
2008-04-07
|
|
URLStreet 1.0 - 'seeurl.php' Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
ZoRLu
|
|
2008-04-07
|
|
Sun Java System Messenger Express 6.1-13-15 - 'sid' Cross-Site Scripting
|
40 |
WEB
|
syniack
|
|
2014-02-12
|
|
jDisk (stickto) 2.0.3 iOS - Multiple Vulnerabilities
|
39 |
WEB
|
Vulnerability-Lab
|
|
2014-02-12
|
|
Netgear DGN2200 N300 Wireless Router - Multiple Vulnerabilities
|
42 |
WEB
|
Andrew Horton
|
|
2008-04-04
|
|
Web Server Creator 0.1 - 'langfile' Remote File Inclusion
|
41 |
WEB
|
ZoRLu
|
|
2008-04-04
|
|
Tiny Portal 1.0 - 'shouts' Cross-Site Scripting
|
39 |
WEB
|
Y433r
|
|
2008-04-04
|
|
RobotStats 0.1 - 'robotstats.inc.php?DOCUMENT_ROOT' Remote File Inclusion
|
44 |
WEB
|
ZoRLu
|
|
2008-04-04
|
|
RobotStats 0.1 - 'graph.php?DOCUMENT_ROOT' Remote File Inclusion
|
42 |
WEB
|
ZoRLu
|
|
2008-04-04
|
|
Nuke ET 3.4 - 'mensaje' HTML Injection
|
39 |
WEB
|
Jose Luis Zayas
|
|
2008-04-04
|
|
KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting
|
41 |
WEB
|
H-T Team
|
|
2008-04-04
|
|
Glossaire 2.0 - 'glossaire.php' Cross-Site Scripting
|
39 |
WEB
|
ZoRLu
|
|
2008-04-04
|
|
Poplar Gedcom Viewer 2.0 - Search Page Multiple Cross-Site Scripting Vulnerabilities
|
41 |
WEB
|
ZoRLu
|
|
2008-04-03
|
|
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request For
|
38 |
WEB
|
poplix
|
|
2008-04-03
|
|
Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Reques
|
38 |
WEB
|
poplix
|
|
2008-04-03
|
|
mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting
|
41 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting
|
38 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
|
38 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting
|
39 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting
|
40 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting
|
37 |
WEB
|
K-9999
|
|
2008-04-03
|
|
mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting
|
39 |
WEB
|
K-9999
|
|
2008-04-03
|
|
Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection
|
39 |
WEB
|
The-0utl4w
|
|
2008-04-02
|
|
DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities
|
36 |
WEB
|
ZoRLu
|
|
2008-04-02
|
|
EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion
|
38 |
WEB
|
ZoRLu
|
|
2008-04-02
|
|
EasySite 2.0 - 'image_editor.php' Remote File Inclusion
|
40 |
WEB
|
ZoRLu
|
|
2008-04-02
|
|
EasySite 2.0 - 'browser.php' Remote File Inclusion
|
44 |
WEB
|
ZoRLu
|
|
2008-04-01
|
|
Terracotta - 'index.php' Local File Inclusion
|
38 |
WEB
|
Joseph Giron
|
|
2008-03-31
|
|
EfesTECH Video 5.0 - 'catID' SQL Injection
|
35 |
WEB
|
RMx
|
|
2008-03-31
|
|
PHPGKit 0.9 - 'connexion.php' Remote File Inclusion
|
38 |
WEB
|
ZoRLu
|
|
2008-03-31
|
|
Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting
|
35 |
WEB
|
ZoRLu
|
|
2014-02-11
|
|
Titan FTP Server 10.32 Build 1816 - Directory Traversal
|
36 |
WEB
|
Fara Rustein
|
|
2014-02-11
|
|
Tableau Server < 8.0.7 / < 8.1.2 - Blind SQL Injection
|
40 |
WEB
|
Trustwave's SpiderLabs
|
|
2014-02-11
|
|
WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities
|
38 |
WEB
|
Vulnerability-Lab
|
|
2014-02-11
|
|
WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation
|
40 |
WEB
|
Pietro Oliva
|
