Exploits

日期	标题	类型	平台	作者
2010-06-06	Joomla! Component DJ-ArtGallery 0.9.1 – Multiple Vulnerabilities	webapps	php	d0lc3
2010-06-06	JForum 2.1.8 – ‘bookmarks’ Module Multiple HTML Injection Vulnerabilities	webapps	jsp	Adam Baldwin
2010-06-06	DDLCMS 2.1 – ‘skin’ Remote File Inclusion	webapps	php	eidelweiss
2010-06-06	ReVou Twitter Clone 2.0 Beta – SQL Injection / Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-06	greeting card – Arbitrary File Upload	webapps	php	Mr.Benladen
2010-06-06	WebBiblio Subject Gateway System – Local File Inclusion	webapps	php	AntiSecurity
2010-06-06	JForum 2.1.8 – ‘Username’ Cross-Site Scripting	webapps	php	Adam Baldwin
2010-06-06	idevspot Text ads 2.08 – SQL Injection	webapps	php	Sid3^effects
2010-06-05	Apple Mac OSX EvoCam Web Server 3.6.6/3.6.7 – Remote Buffer Overflow	remote	osx	d1dn0t
2010-06-04	WordPress Plugin Gigya Socialize 1.0/1.1.x – Cross-Site Scripting	webapps	php	MustLive
2010-06-03	Motorola Surfboard Cable Modem – Directory Traversal	remote	hardware	S2 Crew
2010-06-03	PHP SETI@home Web monitor – ‘PHPsetimon’ Local/Remote File Inclusion	webapps	php	eidelweiss
2010-06-03	Advneced Management For Services Sites – File Disclosure	webapps	php	indoushka
2010-06-03	Article Management System 2.1.2 – Reinstall	webapps	php	indoushka
2010-06-03	E-book Store – Multiple Vulnerabilities	webapps	php	indoushka
2010-06-03	MoinMoin 1.x – ‘PageEditor.py’ Cross-Site Scripting	webapps	cgi	anonymous
2010-06-03	osCSS 1.2.1 – Arbitrary File Upload	webapps	php	indoushka
2010-06-03	phpBazar 2.1.1 stable – Remote File Inclusion	webapps	php	Sid3^effects
2010-06-03	Quick ‘n Easy FTP Server Lite 3.1 – Denial of Service	dos	windows	b0nd
2010-06-03	QtWeb 3.3 – Remote Crash (Denial of Service)	dos	windows	PoisonCode
2010-06-03	Member ID The Fish Index PHP – SQL Injection	webapps	php	v4lc0m87
2010-06-03	slogan design Script – SQL Injection	webapps	php	Mr.P3rfekT
2010-06-03	Joomla! Component com_lead – SQL Injection	webapps	php	ByEge
2010-06-03	log1 CMS 2.0 – Session Handling Remote Security Bypass / Remote File Inclusion	webapps	php	High-Tech Bridge SA
2010-06-03	clickartweb Design – SQL Injection	webapps	php	cyberlog
2010-06-03	K9 Kreativity Design – ‘pages.php’ SQL Injection	webapps	php	Newbie_Campuz
2010-06-02	PHP City Portal 1.3 – ‘cms_data.php’ Cross-Site Scripting	webapps	php	Red-D3v1L
2010-06-02	TPO Duyuru Scripti – Insecure Cookie Authentication Bypass	webapps	php	Septemb0x
2010-06-02	TCExam 10.1.7 – ‘/admin/code/tce_functions_tcecode_editor.php’ Arbitrary File Upload	webapps	php	John Leitch
2010-06-02	Joomla! Component com_sar_news – ‘id’ SQL Injection	webapps	php	LynX
2010-06-02	SIMM Management System (SMS) – Local File Inclusion	webapps	php	AntiSecurity
2010-06-02	Vastal I-Tech – SQL Injection	webapps	php	HELLBOY
2010-06-02	Joomla! Component ChronoForms – Blind SQL Injection	webapps	php	_mlk_
2010-06-02	Joomla! Component ChronoConnectivity – Blind SQL Injection	webapps	php	_mlk_
2010-06-01	Delivering Digital Media CMS – SQL Injection	webapps	php	Dr.0rYX & Cr3W-DZ
2010-06-01	Hexjector 1.0.7.2 – Persistent Cross-Site Scripting	webapps	php	hexon
2010-06-01	XFTP 3.0 Build 0239 – ‘Filename’ Remote Buffer Overflow	remote	windows	sinn3r
2010-06-01	Hexjector 1.0.7.2 – ‘hexjector.php’ Cross-Site Scripting	webapps	php	hexon
2010-06-01	Ticimax E-Ticaret – SQL Injection	webapps	asp	Neuromancer
2010-05-31	Patient folder (THEME ASP) – SQL Injection	webapps	asp	SA H4x0r
2010-05-31	MusicBox – SQL Injection	webapps	php	titanichacker
2010-05-31	Joomla! Component JS Jobs 1.0.5.8 – SQL Injection	webapps	php	d0lc3
2010-05-31	DM Database Server – ‘SP_DEL_BAK_EXPIRED’ Memory Corruption	dos	multiple	Shennan Wang HuaweiSymantec SRT
2010-05-31	Mediacoder 0.7.3.4672 – Local Overflow (SEH)	local	windows	Stoke
2010-05-31	wsCMS – ‘news.php’ Cross-Site Scripting	webapps	php	cyberlog
2010-05-31	Visitor Logger – ‘banned.php’ Remote File Inclusion	webapps	php	bd0rk
2010-05-31	Persian E107 – Cross-Site Scripting	webapps	php	indoushka
2010-05-31	e107 0.7.21 full – Remote File Inclusion / Cross-Site Scripting	webapps	php	indoushka
2010-05-31	QuickTalk 1.2 – Source Code Disclosure	webapps	php	indoushka
2010-05-31	ZipExplorer 7.0 – ‘.zar’ Denial of Service	dos	windows	TecR0c