Exploits

日期	标题	类型	平台	作者
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_action.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_class.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/help/base_setup_help.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_stat_alerts.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_payload.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_qry_common.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_maintenance.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_qry_alert.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_main.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_ag_main.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_logout.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/setup/setup2.php?ado_inc_PHP’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_local_rules.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_ag_main.php’ Crafted Arbitrary File Upload / Arbitrary Code Execution	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_state_common.inc.php?GLOBALS[user_session_path]’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_main.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/index.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/setup/base_conf_contents.php’ Multiple Remote File Inclusions	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_form.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/admin/base_useradmin.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_state_query.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_display.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘index.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_state_criteria.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_graph_common.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_output_query.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_db_setup.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘base_user.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Basic Analysis and Security Engine (BASE) 1.4.5 – ‘/includes/base_output_html.inc.php?base_path’ Remote File Inclusion	webapps	php	indoushka
2012-02-11	Nova CMS – ‘/includes/function/usertpl.php?conf[blockfile]’ Remote File Inclusion	webapps	php	indoushka
2012-02-10	Trendnet Camera (Multiple Products) – Remote Security Bypass	remote	hardware	console-cowboys
2012-02-10	ProWiki – ‘id’ Cross-Site Scripting	webapps	php	sonyy
2012-02-10	RabbitWiki – ‘title’ Cross-Site Scripting	webapps	php	sonyy
2012-02-10	Zen Cart 1.3.9h – ‘/path_to_admin/product.php’ Cross-Site Request Forgery	webapps	php	DisK0nn3cT
2012-02-10	CubeCart 3.0.20 – ‘switch.php?r’ Arbitrary Site Redirect	webapps	php	Aung Khant
2012-02-10	CubeCart 3.0.20 – ‘/admin/login.php?goto’ Arbitrary Site Redirect	webapps	php	Aung Khant
2012-02-10	CubeCart 3.0.20 – Multiple Script ‘redir’ Arbitrary Site Redirects	webapps	php	Aung Khant
2012-02-10	jetVideo 8.0.2 – Denial of Service	dos	windows	Senator of Pirates
2012-02-10	LxCenter Kloxo 6.1.10 – Multiple HTML Injection Vulnerabilities	webapps	java	anonymous
2012-02-10	Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion	webapps	php	Vulnerability-Lab
2012-02-10	Dolibarr ERP/CRM 3.x – ‘/adherents/fiche.php’ SQL Injection	webapps	php	Benjamin Kunz Mejri
2012-02-10	Adobe Flash Player – MP4 SequenceParameterSetNALUnit Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-02-10	Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020000 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-02-09	Apache MyFaces – ‘ln’ Information Disclosure	remote	multiple	Paul Nicolucci
2012-02-09	Sysax Multi Server 5.52 – File Rename Buffer Overflow Remote Code Execution (Egghunter)	remote	windows	Craig Freyman
2012-02-09	PeerBlock 1.1 – Blue Screen of Death	dos	windows	shinnai
2012-02-09	IBM solidDB 6.5.0.8 – ‘SELECT’ Statement ‘WHERE’ Condition Denial of Service	dos	multiple	IBM
2012-02-08	Cyberoam Central Console 2.00.2 – Remote File Inclusion	webapps	multiple	Vulnerability-Lab
2012-02-08	TORCS 1.3.2 – ‘.xml’ File Buffer Overflow /SafeSEH Evasion	local	windows	Andres Gomez & David Mora
2012-02-08	Gazelle CMS 1.0 – Update Statement SQL Injection	webapps	php	hackme