Exploits

日期	标题	类型	平台	作者
2010-06-29	Grafik CMS – ‘/admin.php’ SQL Injection / Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-29	LIOOSYS CMS – ‘news.php’ SQL Injection	webapps	multiple	GlaDiaT0R
2010-06-29	Iatek PortalApp 3.3/4.0 – ‘login.asp’ Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	High-Tech Bridge SA
2010-06-29	CubeCart PHP 4.3.x – ‘shipkey’ SQL Injection	webapps	multiple	Core Security
2010-06-29	CANDID – ‘/image/view.php?image_id’ Cross-Site Scripting	webapps	php	L0rd CrusAd3r
2010-06-29	Gekko CMS – SQL Injection	webapps	windows	[]0iZy5
2010-06-29	CANDID – ‘/image/view.php?image_id’ SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-29	PageDirector CMS – ‘result.php’ SQL Injection	webapps	php	v3n0m
2010-06-28	PageDirector CMS – Multiple Vulnerabilities	webapps	php	Tr0y-x
2010-06-28	Clix’N’Cash Clone 2010 – ‘index.php’ SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-28	PTCPay GEN4 – ‘buyupg.php’ SQL Injection	webapps	php	Dark.Man
2010-06-28	eBay Clone Script 2010 – ‘showcategory.php’ SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-28	iNet Online Community – Blind SQL Injection	webapps	php	JaMbA
2010-06-28	MySpace Clone 2010 – SQL Injection / Cross-Site Scripting	webapps	php	L0rd CrusAd3r
2010-06-28	Applicure dotDefender 4.01-3 – Persistent Cross-Site Scripting	webapps	multiple	EnableSecurity
2010-06-28	Winamp 5.571 – ‘.avi’ Denial of Service	dos	windows	Praveen Darshanam
2010-06-28	Subdreamer Pro 3.0.4 – CMS Upload	webapps	multiple	Battousai
2010-06-28	BlaherTech Placeto CMS – ‘Username’ SQL Injection	webapps	php	S.W.T
2010-06-28	MemDb – Multiple Remote Denial of Service Vulnerabilities	dos	windows	Markot
2010-06-28	D-Link DAP-1160 Wireless Access Point – DCC Protocol Security Bypass	remote	hardware	Cristofaro Mune
2010-06-28	GSM SIM Utility 5.15 – ‘.sms’ File Local Buffer Overflow (SEH)	local	windows	chap0
2010-06-28	CMSQLite / CMySQLite 1.3 – Cross-Site Request Forgery	webapps	php	ADEO Security
2010-06-28	Customer Paradigm PageDirector – ‘id’ SQL Injection	webapps	php	Tr0y-x
2010-06-28	I-net Multi User Email Script – SQL Injection	webapps	php	Sid3^effects
2010-06-28	Netartmedia iBoutique.MALL – SQL Injection	webapps	php	Sid3^effects
2010-06-28	Kingsoft Writer 2010 – Local Stack Buffer Overflow	local	windows	fl0 fl0w
2010-06-28	UFO: Alien Invasion 2.2.1 (OSX) – Remote Code Execution	remote	osx	dookie
2010-06-28	V-EVA Classified Script 5.1 – ‘classified_img.php’ SQL Injection	webapps	php	Sid3^effects
2010-06-27	Swoopo Clone 2010 – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-27	Scite Text Editor 1.76 – Local Buffer Overflow (PoC)	dos	linux	kmkz
2010-06-27	RM Downloader 3.1.3 – Local Buffer Overflow (SEH)	local	windows	Madjix
2010-06-27	I-Net MLM Script Engine – SQL Injection	webapps	php	Sid3^effects
2010-06-27	i-netsolution Job Search Engine – SQL Injection	webapps	php	Sid3^effects
2010-06-27	Bilder Upload Script Datei Upload 1.09 – Arbitrary File Upload	webapps	php	Mr.Benladen
2010-06-27	BlazeDVD 6.0 – Local Buffer Overflow (Metasploit)	local	windows	blake
2010-06-27	Ceica-GW – ‘login.php’ Cross-Site Scripting	webapps	php	indoushka
2010-06-27	2DayBiz Photo Sharing Script – SQL Injection (2)	webapps	php	Easy Laster
2010-06-27	2DayBiz ybiz Freelance Script – SQL Injection	webapps	php	Easy Laster
2010-06-27	2DayBiz ybiz Polls Script – SQL Injection	webapps	php	Easy Laster
2010-06-27	2DayBiz Matrimonial Script – ‘smartresult.php’ SQL Injection	webapps	php	Easy Laster
2010-06-27	UltraISO 9.3.6.2750 – ‘.mds’ / ‘.mdf’ Buffer Overflow (PoC)	dos	windows	fl0 fl0w
2010-06-26	Speedy 1.0 – Arbitrary File Upload	webapps	php	ViRuS Qalaa
2010-06-26	Winamp 5.572 (Windows 7) – Local Buffer Overflow (ASLR + DEP Bypass)	local	windows	Node
2010-06-26	Joomla! Component jesectionfinder – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component com_jejob – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component jeeventcalendar – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component JE Media Player – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component JE Awd Song – Persistent Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-26	PHP-Nuke 8.2 – Arbitrary File Upload	webapps	aix	Net.Edit0r
2010-06-26	WordPress Plugin Cimy Counter – Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting	webapps	php	sebug