webapps

日期	标题	类别	作者
2012-12-06	Kordil EDms 2.2.60rc3 – SQL Injection	webapps	Woody Hughes
2012-12-04	WordPress Theme Nest – ‘codigo’ SQL Injection	webapps	Ashiyane Digital Security Team
2012-12-04	Advantech Studio 7.0 – SCADA/HMI Directory Traversal	webapps	Nin3
2012-12-04	Sourcefabric Newscoop – ‘f_email’ SQL Injection	webapps	AkaStep
2012-12-03	FirePass SSL VPN – Local File Inclusion	webapps	SEC Consult
2012-12-03	Symantec Messaging Gateway 9.5.3-3 – Arbitrary File Download	webapps	Ben Williams
2012-12-03	Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery	webapps	Ben Williams
2012-12-03	MyBB KingChat Plugin – SQL Injection	webapps	Red_Hat
2012-12-03	SchoolCMS – Persistent Cross-Site Scripting	webapps	VipVince
2012-12-01	TinyMCPUK – ‘test’ Cross-Site Scripting	webapps	eidelweiss
2012-11-30	SilverStripe CMS 3.0.2 – (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forgery	webapps	Sense of Security
2012-11-30	SmartCMS – ‘/index.php?menuitem’ SQL Injection / Cross-Site Scripting	webapps	Yakir Wizman
2012-11-30	Free Hosting Manager 2.0 – ‘id’ SQL Injection	webapps	Yakir Wizman
2012-11-29	Elastix – ‘page’ Cross-Site Scripting	webapps	cheki
2012-11-29	WordPress Theme Toolbox – ‘mls’ SQL Injection	webapps	Ashiyane Digital Security Team
2012-11-29	WordPress Plugin Video Lead Form – ‘errMsg’ Cross-Site Scripting	webapps	Aditya Balapure
2012-11-29	FCKEditor Core ASP 2.6.8 – Arbitrary File Upload Protection Bypass	webapps	Soroush Dalili
2012-11-29	Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities	webapps	LiquidWorm
2012-11-28	gleamtech filevista/fileultimate 4.6 – Directory Traversal	webapps	Soroush Dalili
2012-11-28	BigDump 0.29b and 0.32b – Multiple Vulnerabilities	webapps	Ur0b0r0x
2012-11-27	WordPress Theme CStar Design – ‘id’ SQL Injection	webapps	Amirh03in
2012-11-26	WordPress Theme Wp-ImageZoom – ‘id’ SQL Injection	webapps	Amirh03in
2012-11-26	Forescout CounterACT – ‘a’ Open Redirection	webapps	Joseph Sheridan
2012-11-26	WordPress Plugin Ads Box – ‘count’ SQL Injection	webapps	Ashiyane Digital Security Team