php

日期	标题	类别	作者
2012-05-24	PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload	webapps	team ' & 1=1--
2012-05-24	Jaow 2.4.5 – Blind SQL Injection	webapps	kallimero
2012-05-23	Ajaxmint Gallery 1.0 – Local File Inclusion	webapps	AkaStep
2012-05-23	phpCollab 2.5 – Database Backup Information Disclosure	webapps	team ' & 1=1--
2012-05-23	Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal	webapps	AkaStep
2012-05-23	Yellow Duck Framework 2.0 Beta1 – Local File Disclosure	webapps	L3b-r1'z
2012-05-23	pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting	webapps	High-Tech Bridge SA
2012-05-23	pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting	webapps	High-Tech Bridge SA
2012-05-23	Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	High-Tech Bridge SA
2012-05-22	Plogger Photo Gallery – SQL Injection	webapps	Eyup CELIK
2012-05-21	Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting	webapps	Henry Hoggard
2012-05-21	PHP 5.4.3 – ‘com_event_sink’ Denial of Service	dos	condis
2012-05-21	PHP 5.4.3 – wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference	dos	condis
2012-05-21	PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting	webapps	Eyup CELIK
2012-05-21	Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting	webapps	MustLive
2012-05-21	Supernews 2.6.1 – SQL Injection	webapps	WhiteCollarGroup
2012-05-21	Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting	webapps	Henry Hoggard
2012-05-20	AZ Photo Album – Cross-Site Scripting / Arbitrary File Upload	webapps	Eyup CELIK
2012-05-20	Concrete5 CMS FlashUploader – Arbitrary ‘.SWF’ File Upload	webapps	AkaStep
2012-05-20	Concrete CMS < 5.5.21 - Multiple Vulnerabilities	webapps	AkaStep
2012-05-19	FreeNAC 3.02 – SQL Injection / Cross-Site Scripting	webapps	blake
2012-05-19	PHP Address Book 7.0.0 – Multiple Vulnerabilities	webapps	Stefan Schurtz
2012-05-19	Active Collab ‘chat module’ < 2.3.8 - Remote PHP Code Injection (Metasploit)	remote	Metasploit
2012-05-18	Vanilla Forums LatestComment 1.1 Plugin – Persistent Cross-Site Scripting	webapps	Henry Hoggard