webapps

日期	标题	类别	作者
2013-03-01	doorGets CMS – Cross-Site Request Forgery	webapps	n0pe
2013-03-01	Question2Answer – Cross-Site Request Forgery	webapps	MustLive
2013-02-27	Geeklog – Cross-Site Scripting	webapps	High-Tech Bridge
2013-02-27	WordPress Plugin Comment Rating 2.9.32 – Multiple Vulnerabilities	webapps	ebanyu
2013-02-27	Joomla! 3.0.2 – ‘highlight.php’ PHP Object Injection	webapps	EgiX
2013-02-26	JForum – ‘jforum.page’ Multiple Cross-Site Scripting Vulnerabilities	webapps	ZeroDayLab
2013-02-26	WiFilet 1.2 iPad iPhone – Multiple Vulnerabilities	webapps	Vulnerability-Lab
2013-02-26	MTP Poll 1.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	LiquidWorm
2013-02-26	MTP Guestbook 1.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	LiquidWorm
2013-02-26	MTP Image Gallery 1.0 – ‘edit_photos.php?title’ Cross-Site Scripting	webapps	LiquidWorm
2013-02-26	iOS IPMap 2.5 – Arbitrary File Upload	webapps	Vulnerability-Lab
2013-02-26	Rix4Web Portal – Blind SQL Injection	webapps	L0n3ly-H34rT
2013-02-26	Brewthology 0.1 – SQL Injection	webapps	cr4wl3r
2013-02-25	phpMyRecipes – Multiple HTML Injection Vulnerabilities	webapps	PDS
2013-02-25	WordPress Plugin Smart Flv – ‘jwplayer.swf’ Multiple Cross-Site Scripting Vulnerabilities	webapps	Henri Salo
2013-02-24	AirDrive HD 1.6 iPad iPhone – Multiple Vulnerabilities	webapps	Vulnerability-Lab
2013-02-23	File Manager – HTML Injection / Local File Inclusion	webapps	Benjamin Kunz Mejri
2013-02-21	OpenEMR – ‘site’ Cross-Site Scripting	webapps	Gjoko Krstic
2013-02-21	PHPmyGallery 1.5 – Local File Disclosure / Cross-Site Scripting	webapps	TheMirkin
2013-02-21	PHPMyRecipes 1.2.2 – ‘viewrecipe.php?r_id’ SQL Injection	webapps	cr4wl3r
2013-02-21	Alt-N MDaemon WorldClient 13.0.3 – Multiple Vulnerabilities	webapps	QSecure & Demetris Papapetrou
2013-02-21	glFusion 1.2.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	High-Tech Bridge SA
2013-02-21	RTTucson Quotations Database Script – Authentication Bypass	webapps	cr4wl3r
2013-02-21	Alt-N MDaemon 12.5.6/13.0.3 – Email Body HTML/JS Injection	webapps	QSecure & Demetris Papapetrou