Blog RSSExploits RSSFacebook

WEB

Date D   Description Plat. Author
2007-10-11   Joomla! Component Search 1.0.13 - SearchWord Cross-Site Scripting 19 WEB MustLive
2007-10-11   ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting 19 WEB durito
2007-10-09   phpMyAdmin 2.11.1 - 'setup.php' Cross-Site Scripting 21 WEB Omer Singer
2007-10-10   Joomla! Component WebMaster-Tips.net Joomla! RSS Feed Reader 1.0 - Remote File Inclusion 21 WEB Cyber-Crime
2007-10-09   NetWin DNews - 'Dnewsweb.exe' Multiple Cross-Site Scripting Vulnerabilities 17 WEB Doz
2007-10-08   SNewsCMS 2.1 - 'News_page.php' Cross-Site Scripting 20 WEB medconsultation.ru
2007-10-05   AfterLogic MailBee WebMail Pro 3.x - 'default.asp?mode2' Cross-Site Scripting 21 WEB Ivan Sanchez
2007-10-05   AfterLogic MailBee WebMail Pro 3.x - 'login.php?mode' Cross-Site Scripting 21 WEB Ivan Sanchez
2007-10-04   Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities 21 WEB Aria-Security Team
2007-10-04   Cart32 6.x - GetImage Arbitrary File Download 21 WEB Paul Craig
2007-10-04   GForge 4.6/4.5/3.1 - 'Verify.php' Cross-Site Scripting 20 WEB Jose Sanchez
2007-10-04   WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery 18 WEB David Kierznowski
2007-10-03   Content Builder 0.7.5 - 'postComment.php' Remote File Inclusion 20 WEB Mehrad Ansari Targhi
2007-10-03   Uebimiau Webmail 2.7.x - 'index.php' Cross-Site Scripting 20 WEB Ivan Sanches
2007-10-03   DRBGuestbook 1.1.13 - 'index.php' Cross-Site Scripting 19 WEB Gokhan
2007-10-01   ASP Product Catalog 1.0 - 'default.asp' SQL Injection 19 WEB joseph.giron13
2007-10-01   Ohesa Emlak Portal 1.0 - 'detay.asp?Emlak' SQL Injection 17 WEB GeFORC3
2007-10-01   Ohesa Emlak Portal 1.0 - 'satilik.asp?Kategori' SQL Injection 18 WEB GeFORC3
2007-10-01   Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities 22 WEB GeFORC3
2007-09-29   MD-Pro 1.0.76 - 'index.php' Firefox ID SQL Injection 19 WEB unidentified1_ is
2007-09-27   Novus 1.0 - 'Buscar.asp' Cross-Site Scripting 21 WEB Zutr4
2007-09-25   SimpNews 2.41.3 - 'backurl' Cross-Site Scripting 25 WEB Jesper Jurcenoks
2007-09-25   SimpNews 2.41.3 - 'l_username' Cross-Site Scripting 19 WEB Jesper Jurcenoks
2007-09-25   SimpGB 1.46.2 - '/admin/emoticonlist.php?l_emoticonlist' Cross-Site Scripting 18 WEB netVigilance
2007-09-25   SimpGB 1.46.2 - '/admin/?l_username' Cross-Site Scripting 20 WEB netVigilance
2007-09-25   PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion 21 WEB waraxe
2007-09-25   JSPWiki 2.5.139 - 'Diff.jsp' Multiple Cross-Site Scripting Vulnerabilities 20 WEB Jason Kratzer
2007-09-25   JSPWiki 2.5.139 - 'Login.jsp' Multiple Cross-Site Scripting Vulnerabilities 20 WEB Jason Kratzer
2007-09-25   JSPWiki 2.5.139 - 'UserPreferences.jsp' Multiple Cross-Site Scripting Vulnerabilities 18 WEB Jason Kratzer
2007-09-25   JSPWiki 2.5.139 - 'Comment.jsp' Multiple Cross-Site Scripting Vulnerabilities 18 WEB Jason Kratzer
2007-09-25   JSPWiki 2.5.139 - 'edit.jsp?edittime' Cross-Site Scripting 18 WEB Jason Kratzer
2007-09-25   JSPWiki 2.5.139 - 'NewGroup.jsp' Multiple Cross-Site Scripting Vulnerabilities 16 WEB Jason Kratzer
2007-09-24   bcoos 1.0.10 Arcade Module - 'index.php' SQL Injection 23 WEB nights shadow
2007-09-24   Urchin 5.7.x - 'session.cgi' Cross-Site Scripting 20 WEB pagvac
2007-09-22   XCMS 1.1/1.7 - 'Password' Arbitrary PHP Code Execution 27 WEB x0kster
2007-09-22   WordPress Core 2.0 - 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities 22 WEB Adrian Pastor
2007-09-20   Vigile CMS 1.8 Wiki Module - Multiple Cross-Site Scripting Vulnerabilities 18 WEB x0kster
2007-09-20   WebBatch - 'webbatch.exe?dumpinputdata' Remote Information Disclosure 17 WEB Doz
2007-09-20   WebBatch - 'webbatch.exe' Cross-Site Scripting 21 WEB Doz
2007-09-19   LevelOne WBR3404TX Broadband Router - 'RC' Cross-Site Scripting 21 WEB azizov
2007-09-17   b1gMail 6.3.1 - 'hilfe.php' Cross-Site Scripting 23 WEB malibu.r
2007-09-17   Coppermine Photo Gallery 1.4.12 - 'log' Local File Inclusion 16 WEB L4teral
2007-09-17   Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting 16 WEB L4teral
2007-09-17   Alcatel-Lucent OmniPCX Enterprise 7.1 - Remote Command Execution 20 WEB RedTeam Pentesting GmbH
2007-09-17   ewire Payment Client 1.60/1.70 - Command Execution 19 WEB anonymous
2007-09-14   Axis Communications 207W Network Camera - Web Interface '/admin/restartMessage.shtml?server' Cross-S 20 WEB Seth Fogie
2007-09-14   Axis Communications 207W Network Camera - Web Interface 'axis-cgi/admin/pwdgrp.cgi' Multiple Cross-S 16 WEB Seth Fogie
2007-09-14   Axis Communications 207W Network Camera - Web Interface axis-cgi/admin/restart.cgi Cross-Site Reques 19 WEB Seth Fogie
2007-09-14   PHP-Stats 0.1.9.2 - 'Tracking.php' Cross-Site Scripting 18 WEB root@hanicker.it
2007-09-12   CS-Guestbook 0.1 - Login Credentials Information Disclosure 19 WEB Cr@zy_King
2007-09-12   SWSoft Plesk 8.2 - 'login.php3' PLESKSESSID Cookie SQL Injection 20 WEB Nick I Merritt
2007-09-12   BOINC 5.10.20 - 'text_search_action.php?search_string' Cross-Site Scripting 17 WEB Doz
2007-09-12   BOINC 5.10.20 - 'forum_forum.php?id' Cross-Site Scripting 18 WEB Doz
2007-09-10   SisfoKampus - 'dwoprn.php' Arbitrary File Download 20 WEB PUPET
2007-09-10   PHPMyQuote 0.20 - '/index.php' SQL Injection / Cross-Site Scripting 20 WEB Yollubunlar.Org
2007-09-10   Proxy Anket 3.0.1 - 'anket.asp' SQL Injection 20 WEB Yollubunlar.Org
2007-09-08   Toms Gastebuch 1.00/1.01 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities 18 WEB hd1979
2007-09-06   Pulsewiki And Pawfaliki 0.5.1 - 'index.php' Local File Inclusion 21 WEB mafialbano
2007-09-04   E-Smart Cart 1.0 - 'login.asp' SQL Injection 23 WEB SmOk3
2007-09-04   Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting 16 WEB Tushar Vartak
2007-09-04   212Cafe WebBoard 6.30 - 'Read.php' SQL Injection 20 WEB Lopez Bran Digrap
2007-09-03   Claroline 1.x - '/admin/campusProblem.php?view' Cross-Site Scripting 20 WEB Fernando Munoz
2007-09-03   Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting 21 WEB Fernando Munoz
2007-09-03   Claroline 1.x - '/admin/adminusers.php?dir' Cross-Site Scripting 19 WEB Fernando Munoz
2007-09-03   Claroline 1.x - '/inc/lib/language.lib.php?language' Traversal Local File Inclusion 20 WEB Fernando Munoz
2007-09-03   MKPortal 1.0/1.1 - 'admin.php' Authentication Bypass 20 WEB Demential
2007-09-07   Toms Gästebuch 1.00 - '/admin/header.php' Multiple Cross-Site Scripting Vulnerabilities 19 WEB cod3in
2007-09-07   Toms Gästebuch 1.00 - 'form.php' Multiple Cross-Site Scripting Vulnerabilities 16 WEB cod3in
2013-12-28   D-Link DSL-2750u ME_1.09 - Cross-Site Request Forgery 22 WEB FIGHTERx war
2007-08-30   Absolute Poll Manager XE 4.1 - 'xlaapmview.asp' Cross-Site Scripting 15 WEB Richard Brain
2007-08-29   Cisco CallManager 4.2 / CUCM 4.2 - Logon Page 'lang' SQL Injection 18 WEB anonymous
2007-08-28   ACG News 1.0 - 'index.php' Multiple SQL Injections 18 WEB SmOk3
2007-08-27   PHPGedView 4.1 - 'login.php' Cross-Site Scripting 24 WEB Joshua Morin
2007-08-27   Dale Mooney Calendar Events - 'Viewevent.php' SQL Injection 16 WEB s0cratex
2007-08-27   AutoIndex PHP Script 2.2.1 - 'index.php' Cross-Site Scripting 21 WEB d3hydr8
2007-08-24   Arcadem 2.01 - 'index.php' Remote File Inclusion 23 WEB sm0k3
2007-08-13   WordPress Core 1.0.7 - 'Pool index.php' Cross-Site Scripting 20 WEB MustLive
2007-08-22   Ripe Website Manager 0.8.x - '/pages/delete_page.php?id' SQL Injection 19 WEB Nagendra Kumar G
2007-08-21   m-phorum 0.3 - 'index.php' Cross-Site Scripting 22 WEB CodeXpLoder'tq
2007-08-21   coWiki - 'index.php' Cross-Site Scripting 23 WEB MustLive
2007-08-21   ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting 19 WEB MustLive
2007-08-20   Gurur Haber 2.0 - 'Uyeler2.php' SQL Injection 21 WEB dumenci
2007-08-20   Firesoft - 'Class_TPL.php' Remote File Inclusion 18 WEB DarKdewiL
2007-08-20   Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion 21 WEB DarKdewiL
2007-08-17   Text File Search Classic - 'TextFileSearch.asp' Cross-Site Scripting 19 WEB GeFORC3
2007-07-16   Olate Download 3.4.1 - 'admin.php' Remote Authentication Bypass 19 WEB imei
2007-07-09   Systeme de vote pour site Web 1.0 - Multiple Remote File Inclusions 19 WEB Crackers_Child
2007-07-13   SkilMatch Systems JobLister3 - 'index.php' SQL Injection 16 WEB joseph.giron13
2007-08-11   Openads (PHPAdsNew) < 2.0.8 - 'lib-remotehost.inc.php' Remote File Inclusion 23 WEB Ma$tEr-0F-De$a$t0r
2007-08-11   Haudenschilt Family Connections 0.8 - 'index.php' Authentication Bypass 18 WEB ilker Kandemir
2007-08-11   PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting 17 WEB vasodipandora
2007-08-11   Lib2 PHP Library 0.2 - 'My_Statistics.php' Remote File Inclusion 16 WEB ilker Kandemir
2007-08-09   Web News 1.1 - 'news.php?config[root_ordner]' Remote File Inclusion 17 WEB Rizgar
2007-08-09   Web News 1.1 - 'feed.php?config[root_ordner]' Remote File Inclusion 19 WEB Rizgar
2007-08-09   Web News 1.1 - 'index.php?config[root_ordner]' Remote File Inclusion 20 WEB Rizgar
2007-08-09   Bilder Galerie 1.0 - 'index.php' Remote File Inclusion 19 WEB Rizgar
2007-08-09   Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion 21 WEB Rizgar
2013-12-24   PHP MBB CMS 004 - Multiple Vulnerabilities 18 WEB cr4wl3r
2013-12-24   Song Exporter 2.1.1 RS iOS - Local File Inclusion 19 WEB Vulnerability-Lab
2013-12-24   Synology DSM 4.3-3810 - Directory Traversal 20 WEB Andrea Fabrizi
2013-12-24   Zimbra Collaboration Server 7.2.2/8.0.2 - Local File Inclusion (Metasploit) 19 WEB Metasploit
2007-08-09   File Uploader 1.1 - 'datei.php?config[root_ordner]' Remote File Inclusion 15 WEB Rizgar
2007-08-09   File Uploader 1.1 - 'index.php?config[root_ordner]' Remote File Inclusion 18 WEB Rizgar
2007-08-09   Mapos-Scripts.de Gastebuch 1.5 - 'index.php' Remote File Inclusion 17 WEB Rizgar
2007-08-08   Coppermine Photo Gallery 1.3/1.4 - 'YABBSE.INC.php' Remote File Inclusion 21 WEB Ma$tEr-0F-De$a$t0r
2007-08-07   VietPHP - 'index.php?language' Remote File Inclusion 21 WEB master-of-desastor
2007-08-07   VietPHP - '/admin/index.php?language' Remote File Inclusion 19 WEB master-of-desastor
2007-08-07   VietPHP - '_functions.php?dirpath' Remote File Inclusion 19 WEB master-of-desastor
2007-08-06   snif 1.5.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities 22 WEB r0t
2007-08-04   J! Reactions 1.8.1 - comPath Remote File Inclusion 20 WEB Yollubunlar.Org
2007-08-03   Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections 19 WEB Aria-Security Team
2007-08-03   Lanius CMS 1.2.14 GALLERY Module - 'gid' SQL Injection 17 WEB k1tk4t
2007-08-03   Lanius CMS 1.2.14 EZSHOPINGCART Module - 'cid' SQL Injection 22 WEB k1tk4t
2007-08-03   Lanius CMS 1.2.14 FAQ Module - 'mid' SQL Injection 25 WEB k1tk4t
2007-08-02   Hunkaray Okul Portali 1.1 - 'Duyuruoku.asp' SQL Injection 19 WEB Yollubunlar.Org
2007-08-02   Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion 20 WEB Yollubunlar.Org
2013-12-23   WordPress Theme Persuasion 2.x - Arbitrary File Download / File Deletion 16 WEB Interference Security
2007-08-01   WebDirector - 'index.php' Cross-Site Scripting 19 WEB r0t
2007-07-31   WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting 18 WEB d3hydr8
2007-07-30   Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion 20 WEB ilker Kandemir
2007-07-30   Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion 18 WEB ilker Kandemir
2007-07-30   Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion 18 WEB ilker Kandemir
2007-07-30   IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting 19 WEB Aria-Security Team
2007-07-30   IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting 22 WEB Aria-Security Team
2007-07-30   IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting 20 WEB Aria-Security Team