webapps

日期	标题	类别	作者
2013-01-28	Microsoft Internet Explorer 8/9 – Steal Any Cookie	webapps	Christian Haider
2013-01-25	iCart Pro – ‘section’ SQL Injection	webapps	n3tw0rk
2013-01-25	PHPWeby Free Directory Script – ‘contact.php’ Multiple SQL Injections	webapps	AkaStep
2013-01-25	ImageCMS 4.0.0b – Multiple Vulnerabilities	webapps	High-Tech Bridge SA
2013-01-25	WordPress Plugin SolveMedia 1.1.0 – Cross-Site Request Forgery	webapps	Junaid Hussain
2013-01-24	WordPress Plugin WP-Table Reloaded – ‘id’ Cross-Site Scripting	webapps	hiphop
2013-01-24	SQLiteManager 1.2.4 – Remote PHP Code Injection	webapps	RealGame
2013-01-23	WordPress Theme Chocolate WP – Multiple Vulnerabilities	webapps	Eugene Dokukin
2013-01-23	gpEasy CMS – ‘section’ Cross-Site Scripting	webapps	High-Tech Bridge SA
2013-01-22	Perforce P4Web – Multiple Cross-Site Scripting Vulnerabilities	webapps	Christy Philip Mathew
2013-01-22	DigiLIBE – Execution-After-Redirect Information Disclosure	webapps	Robert Gilbert
2013-01-22	Adult WebMaster Script – Password Disclosure	webapps	Dshellnoi Unix
2013-01-22	WordPress Plugin Developer Formatter – Cross-Site Request Forgery	webapps	Junaid Hussain
2013-01-21	NConf 1.3 – Arbitrary File Creation	webapps	haidao
2013-01-21	NConf 1.3 – ‘/detail.php/detail_admin_items.php?id’ SQL Injection	webapps	haidao
2013-01-20	Scripts Genie Classified Ultra – SQL Injection / Cross-Site Scripting	webapps	3spi0n
2013-01-19	WordPress Plugin Ripe HD FLV Player – SQL Injection	webapps	Zikou-16
2013-01-19	Joomla! Component com_collector – Arbitrary File Upload	webapps	Red Dragon_al
2013-01-18	SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x – Remote Command Execution	webapps	Nikolas Sotiriu
2013-01-18	Linksys WRT54GL Firmware 4.30.15 build 2 – Multiple Vulnerabilities	webapps	m-1-k-3
2013-01-18	SonicWALL GMS/Viewpoint/Analyzer – Authentication Bypass	webapps	Nikolas Sotiriu
2013-01-18	PHP-Charts – Arbitrary PHP Code Execution	webapps	AkaStep
2013-01-17	Invision Gallery 2.0.5 – SQL Injection	webapps	Ashiyane Digital Security Team
2013-01-17	IP.Gallery – ‘img’ SQL Injection	webapps	Ashiyane Digital Security Team