Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2008-01-09 Exploit Code Downloads   Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/account/findForSelect.jsp?resultsForm' Cross-Si 22 WEB Jan Fry & Adrian Pastor
2008-01-09 Exploit Code Downloads   Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/login.jsp' Multiple Cross-Site Scripting Vulner 20 WEB Jan Fry & Adrian Pastor
2008-01-09 Exploit Code Downloads   Omegasoft Insel 7 - Authentication Bypass / User Enumeration 22 WEB MC.Iglo
2008-01-08 Exploit Code Downloads   IceWarp Mail Server 9.1.1 - '/admin/index.html' Cross-Site Scripting 17 WEB Ekin0x
2008-01-08 Exploit Code Downloads   SysHotel On Line System - 'index.php' Local File Inclusion 19 WEB p4imi0
2008-01-07 Exploit Code Downloads   eTicket 1.5.5.2 - 'admin.php' Multiple SQL Injections 20 WEB L4teral
2008-01-07 Exploit Code Downloads   eTicket 1.5.5.2 - 'search.php' Multiple SQL Injections 19 WEB L4teral
2008-01-07 Exploit Code Downloads   eTicket 1.5.5.2 - 'view.php?s' Cross-Site Scripting 20 WEB L4teral
2008-01-07 Exploit Code Downloads   eTicket 1.5.5.2 - 'admin.php' Cross-Site Request Forgery 21 WEB L4teral
2008-01-07 Exploit Code Downloads   Snitz Forums 2000 3.4.5/3.4.6 - Multiple Cross-Site Scripting Vulnerabilities 17 WEB Doz
2008-01-07 Exploit Code Downloads   Strawberry 1.1.1 - 'html.php' Remote Code Execution 21 WEB Eugene Minaev
2008-01-03 Exploit Code Downloads   Rotabanner Local 2/3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 22 WEB MustLive
2008-01-04 Exploit Code Downloads   NetRisk 1.9.7 - 'index.php' Remote File Inclusion 20 WEB S.W.A.T.
2007-01-03 Exploit Code Downloads   eTicket 1.5.5 - 'newticket.php' Multiple Cross-Site Scripting Vulnerabilities 19 WEB Omer Singer
2008-01-03 Exploit Code Downloads   ExpressionEngine 1.2.1 - HTTP Response Splitting / Cross-Site Scripting 20 WEB MustLive
2008-01-03 Exploit Code Downloads   Nucleus CMS 3.0.1 - 'myid' SQL Injection 20 WEB MustLive
2008-01-03 Exploit Code Downloads   PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 23 WEB MustLive
2008-01-03 Exploit Code Downloads   AwesomeTemplateEngine 1 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB MustLive
2008-01-03 Exploit Code Downloads   WordPress Core 2.2.3 - '/wp-admin/edit.php?backup' Cross-Site Scripting 20 WEB 3APA3A
2008-01-03 Exploit Code Downloads   WordPress Core 2.2.3 - '/wp-admin/page-new.php?popuptitle' Cross-Site Scripting 20 WEB 3APA3A
2008-01-03 Exploit Code Downloads   WordPress Core 2.2.3 - '/wp-admin/post.php?popuptitle' Cross-Site Scripting 22 WEB 3APA3A
2008-01-03 Exploit Code Downloads   MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections 19 WEB The:Paradox
2008-01-03 Exploit Code Downloads   W3-mSQL - Error Page Cross-Site Scripting 17 WEB vivek_infosec
2008-01-02 Exploit Code Downloads   MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion 20 WEB AmnPardaz Security Research Team
2008-01-02 Exploit Code Downloads   MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure 22 WEB AmnPardaz Security Research Team
2007-12-31 Exploit Code Downloads   LiveCart 1.0.1 - 'email' Cross-Site Scripting 19 WEB Doz
2007-12-31 Exploit Code Downloads   LiveCart 1.0.1 - 'return' Cross-Site Scripting (2) 23 WEB Doz
2007-12-31 Exploit Code Downloads   LiveCart 1.0.1 - 'q' Cross-Site Scripting 17 WEB Doz
2007-12-31 Exploit Code Downloads   LiveCart 1.0.1 - 'return' Cross-Site Scripting (1) 19 WEB Doz
2007-12-31 Exploit Code Downloads   InstantSoftwares Dating Site - Login SQL Injection 21 WEB Aria-Security Team
2007-12-31 Exploit Code Downloads   MilliScripts - 'dir.php' Cross-Site Scripting 20 WEB Jose Luis Gangora Fernandez
2007-12-30 Exploit Code Downloads   MatPo.de Kontakt Formular 1.4 - 'function.php' Remote File Inclusion 18 WEB bd0rk
2007-12-29 Exploit Code Downloads   CustomCMS 3.1 - 'vars.php' SQL Injection 14 WEB Pr0metheuS
2007-12-29 Exploit Code Downloads   Makale Scripti - Cross-Site Scripting 19 WEB GeFORC3
2007-12-29 Exploit Code Downloads   PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting 19 WEB Lostmon
2007-12-29 Exploit Code Downloads   PHCDownload 1.1 - 'search.php?string' SQL Injection 21 WEB Lostmon
2014-01-15 Exploit Code Downloads   PHPJabbers Vacation Rental Script 3.0 - Multiple Vulnerabilities 22 WEB HackXBack
2014-01-15 Exploit Code Downloads   PHPJabbers Hotel Booking System 3.0 - Multiple Vulnerabilities 21 WEB HackXBack
2014-01-15 Exploit Code Downloads   PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities 20 WEB HackXBack
2014-01-15 Exploit Code Downloads   PHPJabbers Property Listing Script 2.0 - Cross-Site Request Forgery (Add Admin) 17 WEB HackXBack
2007-12-28 Exploit Code Downloads   OpenBiblio 0.x - 'theme_preview.php?themeName' Cross-Site Scripting 22 WEB Juan Galiana Lara
2014-01-15 Exploit Code Downloads   PHPJabbers Pet Listing Script 1.0 - Multiple Vulnerabilities 21 WEB HackXBack
2007-12-28 Exploit Code Downloads   OpenBiblio 0.x - 'theme_del_confirm.php?name' Cross-Site Scripting 20 WEB Juan Galiana Lara
2007-12-28 Exploit Code Downloads   OpenBiblio 0.x - 'staff_del_confirm.php' Multiple Cross-Site Scripting Vulnerabilities 21 WEB Juan Galiana Lara
2007-12-28 Exploit Code Downloads   NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection 23 WEB Juan Galiana Lara
2014-01-15 Exploit Code Downloads   Collabtive 1.1 - 'managetimetracker.php' SQL Injection 21 WEB Yogesh Phadtare
2007-12-28 Exploit Code Downloads   NetBizCity FaqMasterFlexPlus - 'faq.php' Cross-Site Scripting 19 WEB Juan Galiana Lara
2007-12-27 Exploit Code Downloads   IPortalX - 'blogs.asp?Date' Cross-Site Scripting 18 WEB Doz
2007-12-27 Exploit Code Downloads   IPortalX - '/forum/login_user.asp' Multiple Cross-Site Scripting Vulnerabilities 21 WEB Doz
2007-12-24 Exploit Code Downloads   Web Sihirbazi 5.1.1 - 'default.asp' Multiple SQL Injections 21 WEB bypass
2007-12-25 Exploit Code Downloads   Limbo CMS 1.0.4 - 'com_option' Cross-Site Scripting 19 WEB Omer Singer
2007-12-24 Exploit Code Downloads   Logaholic - 'profiles.php?newconfname' Cross-Site Scripting 17 WEB malibu.r
2007-12-24 Exploit Code Downloads   Logaholic - 'index.php?conf' Cross-Site Scripting 19 WEB malibu.r
2007-12-24 Exploit Code Downloads   Logaholic - 'index.php' SQL Injection 14 WEB malibu.r
2007-12-24 Exploit Code Downloads   Logaholic - 'update.php?page' SQL Injection 15 WEB malibu.r
2007-12-24 Exploit Code Downloads   Agares Media ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion 18 WEB Koller
2007-12-22 Exploit Code Downloads   Dokeos 1.x - '/work/work.php?display_upload_form Action origin' Cross-Site Scripting 17 WEB Doz
2007-12-22 Exploit Code Downloads   Dokeos 1.x - '/forum/viewforum.php?forum' Cross-Site Scripting 21 WEB Doz
2007-12-22 Exploit Code Downloads   Dokeos 1.x - '/forum/viewthread.php?forum' Cross-Site Scripting 18 WEB Doz
2007-12-22 Exploit Code Downloads   MyBlog 1.x - 'Games.php?ID' Remote File Inclusion 17 WEB Beenu Arora
2007-12-21 Exploit Code Downloads   MRBS 1.2.x - 'view_entry.php' SQL Injection 18 WEB root@hanicker.it
2007-12-20 Exploit Code Downloads   SiteScape Forum - 'dispatch.cgi' Tcl Command Injection 17 WEB niekt0
2007-12-20 Exploit Code Downloads   iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion 19 WEB JuMp-Er
2014-01-14 Exploit Code Downloads   Horizon QCMS 4.0 - Multiple Vulnerabilities 19 WEB High-Tech Bridge SA
2014-01-14 Exploit Code Downloads   Burden 1.8 - Authentication Bypass 16 WEB High-Tech Bridge SA
2014-01-14 Exploit Code Downloads   Conceptronic Wireless Pan & Tilt Network Camera - Cross-Site Request Forgery 22 WEB Felipe Molina
2014-01-14 Exploit Code Downloads   PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities 21 WEB HackXBack
2014-01-14 Exploit Code Downloads   PHPJabbers Car Rental Script - Multiple Vulnerabilities 20 WEB HackXBack
2014-01-14 Exploit Code Downloads   PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities 18 WEB HackXBack
2014-01-14 Exploit Code Downloads   PHPJabbers Job Listing Script - Multiple Vulnerabilities 18 WEB HackXBack
2014-01-14 Exploit Code Downloads   Auto Classifieds Script 2.0 - Cross-Site Request Forgery (Add Admin) 17 WEB HackXBack
2014-01-14 Exploit Code Downloads   Feixun Wireless Router FWR-604H - Remote Code Execution 19 WEB Arash Abedian
2007-12-18 Exploit Code Downloads   Mambo 4.6.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 20 WEB Beenu Arora
2007-12-17 Exploit Code Downloads   PHP Security Framework - Multiple Input Validation Vulnerabilities 16 WEB DarkFig
2007-12-17 Exploit Code Downloads   Neuron News 1.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 16 WEB hadihadi & black.shadowes
2007-12-09 Exploit Code Downloads   Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities 19 WEB KAWASHIMA Takahiro
2007-12-14 Exploit Code Downloads   Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions 19 WEB RoMaNcYxHaCkEr
2007-12-15 Exploit Code Downloads   WordPress Core 2.3.1 - Unauthorized Post Access 16 WEB Michael Brooks
2007-12-15 Exploit Code Downloads   phpRPG 0.8 - '/tmp' Directory PHPSESSID Cookie Session Hijacking 19 WEB Michael Brooks
2007-12-15 Exploit Code Downloads   phPay 2.2.1 - Windows Installations Local File Inclusion 18 WEB Michael Brooks
2007-12-13 Exploit Code Downloads   MKPortal 1.1 Gallery Module - SQL Injection 16 WEB Sw33t h4cK3r
2007-11-12 Exploit Code Downloads   XOOPS 2.2.5 - 'register.php' Cross-Site Scripting 21 WEB Omer Singer
2007-11-10 Exploit Code Downloads   PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion 18 WEB d3v1l
2007-11-10 Exploit Code Downloads   Bitweaver 1.x/2.0 - '/search/index.php?highlight' SQL Injection 17 WEB Doz
2007-11-10 Exploit Code Downloads   Bitweaver 1.x/2.0 - 'search/index.php' Cross-Site Scripting 19 WEB Doz
2007-11-10 Exploit Code Downloads   Bitweaver 1.x/2.0 - 'users/register.php' Cross-Site Scripting 17 WEB Doz
2007-11-10 Exploit Code Downloads   Roundcube Webmail 0.1 - CSS Expression Input Validation 17 WEB Tomas Kuliavas
2007-11-10 Exploit Code Downloads   Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities 21 WEB MhZ91
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/modules/arcade/index.php?gid' SQL Injection 20 WEB Lostmon
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/modules/banners/click.php?bid' SQL Injection 18 WEB Lostmon
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/myalbum/ratephoto.php?lid' SQL Injection 17 WEB Lostmon
2014-01-13 Exploit Code Downloads   DomPHP 0.83 - SQL Injection 18 WEB Houssamix
2014-01-12 Exploit Code Downloads   DomPHP 0.83 - Local Directory Traversal 15 WEB Houssamix
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/mysections/ratefile.php?lid' SQL Injection 15 WEB Lostmon
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/mydownloads/ratefile.php?lid' SQL Injection 17 WEB Lostmon
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/adresses/ratefile.php?lid' SQL Injection 17 WEB Lostmon
2007-12-10 Exploit Code Downloads   E-Xoops 1.0.5/1.0.8 - '/mylinks/ratelink.php?lid' SQL Injection 19 WEB Lostmon
2007-12-10 Exploit Code Downloads   bttlxe Forum 2.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities 15 WEB Mormoroth
2007-12-10 Exploit Code Downloads   SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Access Validation / Input Validation 19 WEB Tomas Kuliavas
2007-12-10 Exploit Code Downloads   webSPELL 4.1.2 - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities 16 WEB Brainhead
2007-12-10 Exploit Code Downloads   webSPELL 4.1.2 - 'usergallery.php?galleryID' Cross-Site Scripting 18 WEB Brainhead
2007-12-07 Exploit Code Downloads   WebDoc 3.0 - Multiple SQL Injections 18 WEB Chrysalid
2007-12-15 Exploit Code Downloads   wwwstats 3.21 - 'Clickstats.php' Multiple HTML Injection Vulnerabilities 19 WEB Jesus Olmos Gonzalez
2007-12-06 Exploit Code Downloads   OpenNewsletter 2.5 - 'Compose.php' Cross-Site Scripting 19 WEB Manu
2007-12-06 Exploit Code Downloads   Kayako SupportSuite 3.0.32 - 'PHP_SELF Trigger_Error' Function Cross-Site Scripting 20 WEB imei
2007-12-05 Exploit Code Downloads   VisualShapers EZContents 1.4.5 - File Disclosure 16 WEB p4imi0
2007-12-05 Exploit Code Downloads   Joomla! Component com_search 1.5 RC3 - 'index.php' Multiple SQL Injections 18 WEB beenudel1986
2007-12-05 Exploit Code Downloads   Joomla! Component Content 1.5 RC3 - 'view' SQL Injection 18 WEB beenudel1986
2007-12-04 Exploit Code Downloads   phpMyChat 0.14.5 - '/chat/users_popupL.php3' Multiple Cross-Site Scripting Vulnerabilities 19 WEB beenudel1986
2007-12-04 Exploit Code Downloads   phpMyChat 0.14.5 - 'chat/deluser.php3?LIMIT' Cross-Site Scripting 19 WEB beenudel1986
2007-12-04 Exploit Code Downloads   Absolute News Manager .NET 5.1 - 'getpath.aspx' Direct Request Error Message Information 16 WEB Adrian Pastor
2007-12-04 Exploit Code Downloads   Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Cross-Site Scripting 14 WEB Adrian Pastor
2007-12-04 Exploit Code Downloads   Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting 19 WEB Adrian Pastor
2007-12-04 Exploit Code Downloads   Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx' Multiple SQL Injections 14 WEB Adrian Pastor
2007-12-04 Exploit Code Downloads   Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Remote File Access 17 WEB Adrian Pastor
2007-11-30 Exploit Code Downloads   bcoos 1.0.10 - 'ratefile.php' SQL Injection 20 WEB Lostmon
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossige 18 WEB ShAy6oOoN
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/uninstall_module.php?level' Remote File Inclusio 15 WEB ShAy6oOoN
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/install_module.php?level' Remote File Inclusion 16 WEB ShAy6oOoN
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion 16 WEB ShAy6oOoN
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/uninstall_module.php?level' Remote File Inclusion 19 WEB ShAy6oOoN
2007-11-30 Exploit Code Downloads   Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/install_module.php?level' Remote File Inclusion 17 WEB ShAy6oOoN
2007-11-28 Exploit Code Downloads   bcoos 1.0.10 - 'ratelink.php' SQL Injection 18 WEB Lostmon
2007-11-28 Exploit Code Downloads   bcoos 1.0.10 - 'ratephoto.php' SQL Injection 18 WEB Lostmon
2007-11-28 Exploit Code Downloads   BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities 16 WEB Adrian Pastor