Exploits

日期	标题	类型	平台	作者
2012-02-18	Tiki Wiki CMS Groupware – ‘url’ Open Redirection	webapps	php	sonyy
2012-02-18	almnzm 2.4 – Cross-Site Request Forgery (Add Admin)	webapps	php	HaNniBaL KsA
2012-02-18	Joomla! Component com_xvs – ‘Controller’ Local File Inclusion	webapps	php	KedAns-Dz
2012-02-18	Joomla! Component com_xcomp – Local File Inclusion	webapps	php	KedAns-Dz
2012-02-18	Joomla! Component com_x-shop – ‘idd’ SQL Injection	webapps	php	KedAns-Dz
2012-02-17	R2/Extreme 1.65 – Stack Buffer Overflow / Directory Traversal	remote	windows	Luigi Auriemma
2012-02-17	JaWiki – ‘versionNo’ Cross-Site Scripting	webapps	java	sonyy
2012-02-17	ButorWiki 3.0 – ‘service’ Cross-Site Scripting	webapps	php	sonyy
2012-02-17	Pandora FMS 4.0.1 – ‘sec2’ Local File Inclusion	webapps	php	Ucha Gobejishvili
2012-02-17	Pandora Fms 4.0.1 – Local File Inclusion	webapps	php	Vulnerability-Lab
2012-02-17	pcAnywhere 12.5.0 build 463 – Denial of Service	dos	windows	Johnathan Norman
2012-02-17	Horde 3.3.12 – Backdoor Arbitrary PHP Code Execution (Metasploit)	remote	linux	Metasploit
2012-02-17	HP VSA – Remote Command Execution	remote	hardware	Nicolas Gregoire
2012-02-16	Novell Groupwise Messenger 2.1.0 – Arbitrary Memory Corruption	dos	windows	Luigi Auriemma
2012-02-16	SocialCMS 1.0.2 – Cross-Site Request Forgery	webapps	php	Ivano Binetti
2012-02-16	Java MixerSequencer Object – GM_Song Structure Handling (Metasploit)	remote	windows	Metasploit
2012-02-16	Impulsio CMS – ‘id’ SQL Injection	webapps	php	sonyy
2012-02-16	CMS Faethon 1.3.4 – ‘articles.php’ Multiple SQL Injections	webapps	php	tempe_mendoan
2012-02-16	Tube Ace – ‘q’ Cross-Site Scripting	webapps	php	Daniel Godoy
2012-02-16	xnview 1.98.5 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2012-02-16	Novell Groupwise Messenger Client 2.1.0 – Unicode Stack Overflow	dos	windows	Luigi Auriemma
2012-02-16	Novell Groupwise Messenger 2.1.0 – Memory Corruption	dos	windows	Luigi Auriemma
2012-02-15	LEPTON 1.1.3 – Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-02-15	11in1 CMS 1.2.1 – Cross-Site Request Forgery (Admin Password)	webapps	php	High-Tech Bridge SA
2012-02-15	11in1 CMS 1.2.1 – ‘/admin/index.php?class’ Traversal Local File Inclusion	webapps	php	High-Tech Bridge SA
2012-02-15	11in1 CMS 1.2.1 – ‘index.php?class’ Traversal Local File Inclusion	webapps	php	High-Tech Bridge SA
2012-02-13	EditWrxLite CMS – ‘wrx.cgi’ Remote Command Execution	webapps	cgi	chippy1337
2012-02-13	STHS v2 Web Portal – ‘team.php?team’ SQL Injection	webapps	php	Liyan Oz
2012-02-13	STHS v2 Web Portal – ‘prospect.php?team’ SQL Injection	webapps	php	Liyan Oz
2012-02-13	STHS v2 Web Portal – ‘prospects.php?team’ SQL Injection	webapps	php	Liyan Oz
2012-02-13	D-Link DAP-1150 1.2.94 – Cross-Site Request Forgery	remote	hardware	MustLive
2012-02-13	Zimbra – ‘view’ Cross-Site Scripting	webapps	php	sonyy
2012-02-13	Powie pFile 1.02 – ‘/pfile/file.php?id’ SQL Injection	webapps	php	indoushka
2012-02-13	Powie pFile 1.02 – ‘/pfile/kommentar.php?filecat’ Cross-Site Scripting	webapps	php	indoushka
2012-02-13	SMW+ 1.5.6 – ‘target’ HTML Injection	webapps	php	sonyy
2012-02-12	Fork CMS 3.2.4 – Local File Inclusion / Cross-Site Scripting	webapps	php	Avram Marius
2012-02-12	eFront Community++ 3.6.10 – SQL Injection / Multiple HTML Injection Vulnerabilities	webapps	php	Benjamin Kunz Mejri
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_ag_main.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_logout.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/setup/setup2.php?ado_inc_PHP’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_local_rules.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_ag_main.php’ Crafted Arbitrary File Upload / Arbitrary Code Execution	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_state_common.inc.php?GLOBALS[user_session_path]’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_main.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/index.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/setup/base_conf_contents.php’ Multiple Remote File Inclusions	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_form.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/base_useradmin.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_state_query.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_display.php?base_path’ Remote File Inclusion	webapps	php	indoushka