php

日期	标题	类别	作者
2011-11-19	Valid tiny-erp 1.6 – SQL Injection	webapps	muuratsalo
2011-11-19	Freelancer Calendar 1.01 – SQL Injection	webapps	muuratsalo
2011-11-17	WordPress Plugin Flexible Custom Post Type – ‘id’ Cross-Site Scripting	webapps	Am!r
2011-11-17	ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 – Cross-Site Scripting	webapps	James webb
2011-11-17	webERP 4.3.8 – ‘/reportwriter/FormMaker.php?ReportID’ SQL Injection	webapps	High-Tech Bridge SA
2011-11-17	webERP 4.3.8 – ‘/reportwriter/ReportMaker.php?reportid’ SQL Injection	webapps	High-Tech Bridge SA
2011-11-17	webERP 4.3.8 – Multiple Script URI Cross-Site Scripting Vulnerabilities	webapps	High-Tech Bridge SA
2011-11-16	Webistry 1.6 – ‘pid’ SQL Injection	webapps	CoBRa_21
2011-11-16	FreeWebShop 2.2.9 R2 – ‘ajax_save_name.php’ Remote Code Execution	webapps	EgiX
2011-11-15	QuiXplorer 2.3 – Bugtraq Arbitrary File Upload	webapps	PCA
2011-11-14	Pixie CMS 1.01 < 1.04 - Blind SQL Injections	webapps	Piranha
2011-11-14	WordPress Plugin AdRotate 3.6.6 – SQL Injection	webapps	Miroslav Stampar
2011-11-14	Joomla! Component Content – ‘year’ SQL Injection	webapps	E.Shahmohamadi
2011-11-13	Search Plugin for Hotaru CMS 1.4.2 – ‘admin_index.php?site_name’ Cross-Site Scripting	webapps	Gjoko Krstic
2011-11-13	WordPress Plugin Zingiri 2.2.3 – ‘ajax_save_name.php’ Remote Code Execution	webapps	EgiX
2011-11-13	Mambo 4.x – ‘Zorder’ SQL Injection	webapps	KraL BeNiM
2011-11-13	Support Incident Tracker 3.65 – Remote Command Execution (Metasploit)	webapps	Metasploit
2011-11-10	Joomla! Component com_alfcontact 1.9.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	Jose Carlos de Arriba
2011-11-09	AShop – Open Redirection / Cross-Site Scripting	webapps	Infoserve Security Team
2011-11-09	labwiki 1.1 – Multiple Vulnerabilities	webapps	muuratsalo
2011-11-09	osCSS2 – ‘_ID’ Local file Inclusion	webapps	Stefan Schurtz
2011-11-08	PBCS Technology – ‘articlenav.php’ SQL Injection	webapps	Kalashinkov3
2011-11-08	11in1 CMS 1.0.1 – ‘do.php’ CRLF Injection	webapps	LiquidWorm
2011-11-07	Admin Bot – ‘news.php’ SQL Injection	webapps	baltazar