webapps

日期	标题	类别	作者
2010-01-22	Joomla! Component com_gurujibook – SQL Injection	webapps	snakespc
2010-01-22	KosmosBlog 0.9.3 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery	webapps	Milos Zivanovic
2010-01-22	Joomla! Component com_avosbillets – SQL Injection	webapps	snakespc
2010-01-22	Joomla! Component com_gameserver – SQL Injection	webapps	B-HUNT3|2
2010-01-21	cPanel and WHM 11.25 – ‘failurl’ HTTP Response Splitting	webapps	Trancer
2010-01-21	jQuery Uploadify 2.1.0 – Arbitrary File Upload	webapps	k4cp3r/Ablus
2010-01-21	Blog System 1.x – ‘note’ SQL Injection	webapps	h4ck3r
2010-01-21	SHOUTcast Server 1.9.8/Win32 – Cross-Site Request Forgery	webapps	cp77fk4r
2010-01-21	Joomla! Component com_book – SQL Injection	webapps	Evil-Cod3r
2010-01-21	eWebeditor – Directory Traversal	webapps	anonymous
2010-01-21	cPanel – HTTP Response Splitting	webapps	Trancer
2010-01-20	Chipmunk NewsLetter 2.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	b0telh0
2010-01-20	kloNews 2.0 – ‘cat.php’ Cross-Site Scripting	webapps	cr4wl3r
2010-01-20	PHPMySpace Gold 8.0 – ‘gid’ SQL Injection	webapps	Ctacok
2010-01-19	AdvertisementManager 3.1 – ‘req’ Local/Remote File Inclusion	webapps	indoushka
2010-01-19	Blaze Apps 1.x – SQL Injection / HTML Injection	webapps	AmnPardaz Security Research Team
2010-01-19	VisualShapers EZContents 2.0.3 – Authentication Bypass / Multiple SQL Injections	webapps	AmnPardaz Security Research Team
2010-01-19	DataLife Engine 8.3 – ‘/engine/ajax/addcomments.php?_REQUEST[skin]’ Remote File Inclusion	webapps	indoushka
2010-01-19	DataLife Engine 8.3 – ‘/engine/ajax/pm.php?config[lang]’ Remote File Inclusion	webapps	indoushka
2010-01-19	DataLife Engine 8.3 – ‘/engine/inc/help.php?config[langs]’ Remote File Inclusion	webapps	indoushka
2010-01-19	DataLife Engine 8.3 – ‘/engine/inc/include/init.php?selected_language’ Remote File Inclusion	webapps	indoushka
2010-01-19	al3jeb script – Remote Authentication Bypass	webapps	cr4wl3r
2010-01-18	TestLink 1.8.5 – ‘order_by_login_dir’ Cross-Site Scripting	webapps	Prashant Khandelwal
2010-01-18	Soft Direct 1.05 – Multiple Vulnerabilities	webapps	indoushka