Exploits

日期	标题	类型	平台	作者
2010-06-09	Joomla! Component com_jcommunity – SQL Injection	webapps	php	Sid3^effects
2010-06-09	Joomla! Component com_jtickets – SQL Injection	webapps	php	Sid3^effects
2010-06-09	SilverStripe CMS 2.4 – File Renaming Security Bypass	webapps	php	John Leitch
2010-06-09	Joomla! Component com_jstore – SQL Injection	webapps	php	Sid3^effects
2010-06-09	Joomla! Component Jreservation 1.5 – SQL Injection / Cross-Site Scripting	webapps	multiple	Sid3^effects
2010-06-09	Juniper Networks SA2000 SSL VPN Appliance – ‘welcome.cgi’ Cross-Site Scripting	remote	hardware	Richard Brain
2010-06-09	(GREEZLE) Global Real Estate Agent Login – Multiple SQL Injections	webapps	multiple	L0rd CrusAd3r
2010-06-09	Online Notebook Manager – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-09	PGAUTOPro – SQL Injection / Cross-Site Scripting (2)	webapps	php	Sid3^effects
2010-06-09	Joomla! Component cinema – SQL Injection	webapps	php	Sudden_death
2010-06-09	iClone – SQL Injection	webapps	asp	Sid3^effects
2010-06-09	BtiTracker 1.3.x < 1.4.x - SQL Injection	webapps	php	TinKode
2010-06-09	Virtual Real Estate Manager 3.5 – SQL Injection	webapps	asp	Sid3^effects
2010-06-08	EMO Realty Manager – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-08	Hotel / Resort Site Script with OnLine Reservation System – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-08	CafeEngine 2.3 – SQL Injection	webapps	php	Sid3^effects
2010-06-08	Castripper 2.50.70 – ‘.pls’ File Stack Buffer Overflow (DEP Bypass)	local	php	mr_me
2010-06-08	SureThing CD Labeler – ‘.m3u/.pls’ Unicode Stack Overflow	local	windows	mr_me
2010-06-08	Home of MCLogin System – Authentication Bypass	webapps	php	L0rd CrusAd3r
2010-06-08	Image Store – Arbitrary File Upload	webapps	php	Mr.FireStormm
2010-06-08	phpList 2.8.11 – SQL Injection	webapps	php	d3v1l
2010-06-08	Pre Web Host – SQL Injection	webapps	php	Mr.Benladen
2010-06-08	Phreebooks 2.0 – Directory Traversal	webapps	php	Gustavo Sorondo
2010-06-08	Phreebooks 2.0 – Local File Inclusion	webapps	php	Gustavo Sorondo
2010-06-08	Phreebooks 2.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	Gustavo Sorondo
2010-06-08	Motorola SB5101 – Hax0rware Event Reset Remote Overflow	dos	hardware	Dillon Beresford
2010-06-08	Motorola SB5101 Hax0rware Rajko HTTPd – Remote Denial of Service (PoC)	dos	hardware	Dillon Beresford
2010-06-08	Holiday Travel Portal – Arbitrary File Upload	webapps	php	Sid3^effects
2010-06-08	Rayzz Photoz – Arbitrary File Upload	webapps	php	Sid3^effects
2010-06-07	Audio Converter 8.1 – Local Stack Buffer Overflow ROP/WPM	local	windows	sud0
2010-06-07	CommonSense CMS – SQL Injection	webapps	php	Pokeng
2010-06-07	Easy CD-DA Recorder 2007 – Local Buffer Overflow (SEH)	local	windows	chap0
2010-06-07	McAfee Unified Threat Management Firewall 4.0.6 – ‘page’ Cross-Site Scripting	remote	windows	Adam Baldwin
2010-06-07	EA Battlefield 2 1.41 / Battlefield 2142 1.50 – Multiple Denial of Service Vulnerabilities	dos	windows	Francis Lavoie-Renaud
2010-06-07	Audio Converter 8.1 – Local Stack Buffer Overflow	local	windows	sud0
2010-06-07	VUPlayer 2.49 – ‘.m3u’ File Universal Buffer Overflow (DEP Bypass) (1)	local	windows	mr_me
2010-06-07	JForum 2.1.8 BookMarks – Cross-Site Request Forgery / Cross-Site Scripting	webapps	multiple	Adam Baldwin
2010-06-07	BoastMachine 3.1 – ‘key’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-07	cPanel 11.25 Image Manager – ‘target’ Local File Inclusion	webapps	php	AnTi SeCuRe
2010-06-06	Joomla! Component com_annonces – Arbitrary File Upload	webapps	php	Sid3^effects
2010-06-06	PHP Car Rental Complete System 1.2 – SQL Injection	webapps	php	Sid3^effects
2010-06-06	Joomla! Component Search Log 3.1.0 – SQL Injection	webapps	php	d0lc3
2010-06-06	Sphider Script – Remote Code Execution	webapps	php	XroGuE
2010-06-06	RTRandomImage – Remote File Inclusion	webapps	php	Sn!pEr.S!Te Hacker
2010-06-06	CuteSITE CMS 1.x – ‘/manage/main.php?fld_path’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-06	iScripts easybiller 1.1 – SQL Injection	webapps	php	Sid3^effects
2010-06-06	CuteSITE CMS 1.x – ‘/manage/add_user.php?user_id’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-06-06	iScripts eSwap 2.0 – SQL Injection / Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-06	WmsCMS – Cross-Site Scripting / SQL Injection	webapps	php	Ariko-Security
2010-06-06	PHP Director 0.2 – SQL Injection	webapps	php	Mr.Rat