Exploits

日期	标题	类型	平台	作者
2010-06-26	Joomla! Component com_jejob – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component jeeventcalendar – Local File Inclusion	webapps	php	Sid3^effects
2010-06-26	Joomla! Component JE Media Player – Local File Inclusion	webapps	php	Sid3^effects
2010-06-25	Joomla! Component jesubmit 1.4 – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-25	snipe Gallery Script – SQL Injection	webapps	php	dev!l ghost
2010-06-25	2DayBiz B2B Portal Script – ‘selling_buy_leads1.php’ SQL Injection	webapps	php	r45c4l
2010-06-25	ARSC Really Simple Chat 3.3 – Remote File Inclusion / Cross-Site Scripting	webapps	php	Zer0 Thunder
2010-06-25	Allomani Songs & Clips 2.7.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	G0D-F4Th3rG0D-F4Th3r
2010-06-25	feh 1.7 – ‘–wget-Timestamp’ Remote Code Execution	remote	linux	anonymous
2010-06-25	2DayBiz – Multiple SQL Injections	webapps	php	Sangteamtham
2010-06-25	Cisco Adaptive Security Response – HTTP Response Splitting	remote	hardware	Daniel King
2010-06-25	2DayBiz Matrimonial Script – SQL Injection / Cross-Site Scripting	webapps	php	Sangteamtham
2010-06-25	FieldNotes 32 5.0 – Local Buffer Overflow (SEH)	local	windows	TecR0c
2010-06-25	AbleSpace 1.0 – ‘news.php’ SQL Injection	webapps	php	JaMbA
2010-06-25	WM Downloader 2.9.2 – Local Stack Buffer Overflow	local	windows	Madjix
2010-06-24	Big Forum – ‘forum.php?id’ SQL Injection	webapps	php	JaMbA
2010-06-24	UFO: Alien Invasion 2.2.1 – Arbitrary Code Execution	remote	windows	Jason Geffner
2010-06-24	OneCMS 2.6.1 – ‘search’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-06-24	Lois Software WebDB 2.0A Script – Multiple SQL Injections	webapps	asp	High-Tech Bridge SA
2010-06-24	Wincalc 2 – ‘.num’ Local Buffer Overflow (PoC)	dos	windows	Madjix
2010-06-24	Weborf HTTP Server – Denial of Service	dos	multiple	Crash
2010-06-24	OneCMS 2.6.1 – ‘cat’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-24	Big Forum 5.2 – Arbitrary File Upload / Local File Inclusion	webapps	php	Zer0 Thunder
2010-06-24	OpenEMR Electronic Medical Record Software 3.2 – Multiple Vulnerabilities	webapps	php	David Shaw
2010-06-24	Winstats – ‘.fma’ Local Buffer Overflow (PoC)	dos	windows	Madjix
2010-06-24	Novell iManager – Multiple Vulnerabilities	dos	novell	Core Security Technologies
2010-06-24	PHPortal 1.2 – ‘gunaysoft.php’ Remote File Inclusion	webapps	asp	Ma3sTr0-Dz
2010-06-24	NO-IP.com Dynamic DNS Update Client 2.2.1 – ‘Request’ Insecure Encoding Algorithm	local	windows	sinn3r
2010-06-24	2DayBiz B2B Portal Script – SQL Injection	webapps	php	JaMbA
2010-06-24	ActiveCollab 2.3.0 – Local File Inclusion / Directory Traversal	webapps	php	Jose Carlos de Arriba
2010-06-24	AbleDating script – SQL Injection	webapps	php	JaMbA
2010-06-24	2DayBiz Job Site Script – SQL Injection	webapps	php	Sangteamtham
2010-06-24	2DayBiz The Web Template Software – SQL Injection / Cross-Site Scripting	webapps	php	Sangteamtham
2010-06-24	2DayBiz Real Estate Portal – ‘viewpropertydetails.php’ SQL Injection	webapps	php	Sangteamtham
2010-06-24	Limny 2.1 – ‘q’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-24	2DayBiz Video Community Portal – ‘user-profile.php’ SQL Injection	webapps	php	Sangteamtham
2010-06-24	Joomla! Component Realtyna Translator 1.0.15 – Local File Inclusion (2)	webapps	php	MISTERFRIBO
2010-06-24	Plotwn 18 – ‘.wp2’ Local Buffer Overflow (PoC)	dos	windows	Madjix
2010-06-24	AdaptCMS 2.0.0 Beta – ‘init.php’ Remote File Inclusion	webapps	php	v3n0m
2010-06-24	Geomau 7 – ‘.wg2’ Local Buffer Overflow (PoC)	dos	windows	Madjix
2010-06-24	2DayBiz Photo Sharing Script – SQL Injection (1)	webapps	php	JaMbA
2010-06-24	OneCMS 2.6.1 – ‘short1’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-23	PreProject Multi-Vendor Shopping Malls – ‘products.php?sid’ SQL Injection	webapps	php	CoBRa_21
2010-06-23	Boat Classifieds – ‘printdetail.asp?Id’ SQL Injection	webapps	asp	CoBRa_21
2010-06-23	2DayBiz Freelance Script – SQL Injection	webapps	php	JaMbA
2010-06-23	2DayBiz Matrimonial Script – SQL Injection	webapps	php	JaMbA
2010-06-23	Apache Axis2 1.x – ‘/axis2/axis2-admin’ Session Fixation	remote	multiple	Tiago Ferreira Barbosa
2010-06-23	Custom Business Card script – SQL Injection	webapps	php	JaMbA
2010-06-23	PreProject Multi-Vendor Shopping Malls – ‘products.php’ SQL Injection	webapps	php	CoBRa_21
2010-06-23	2DayBiz MLM Script – SQL Injection	webapps	php	JaMbA