webapps

日期	标题	类别	作者
2012-07-24	Zabbix 2.0.1 – Session Extractor	webapps	muts
2012-07-24	WordPress Plugin Front End Upload 0.5.4.4 – Arbitrary ‘.PHP’ File Upload	webapps	Chris Kellum
2012-07-24	Symantec Web Gateway 5.0.3.18 – Local/Remote File Inclusion / Remote Command Execution	webapps	muts
2012-07-23	Symantec Web Gateway 5.0.3.18 – Blind SQL Injection Backdoor via MySQL Triggers	webapps	muts
2012-07-23	Symantec Web Gateway 5.0.2 – ‘blocked.php?id’ Blind SQL Injection	webapps	muts
2012-07-23	Atmail WebAdmin and Webmail Control Panel – SQL Root Password Disclosure	webapps	Ciph3r
2012-07-23	EGallery – Arbitrary ‘.PHP’ File Upload (Metasploit)	webapps	Metasploit
2012-07-23	SpiceWorks 5.3.75941 – Persistent Cross-Site Scripting / (Authenticated) SQL Injection	webapps	dookie
2012-07-23	Alienvault Open Source SIEM (OSSIM) 3.1 – Reflected Cross-Site Scripting / Blind SQL Injection	webapps	muts
2012-07-23	MySQL Squid Access Report 2.1.4 – HTML Injection	webapps	Daniel Godoy
2012-07-22	Dell SonicWALL Scrutinizer 9.0.1 – ‘statusFilter.php?q’ SQL Injection	webapps	muts
2012-07-22	ipswitch whatsup gold 15.02 – Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution	webapps	muts
2012-07-21	WordPress Plugin chenpress – Arbitrary File Upload	webapps	Am!r
2012-07-21	SolarWinds Orion Network Performance Monitor 10.2.2 – Multiple Vulnerabilities	webapps	muts
2012-07-21	X-Cart Gold 4.5 – ‘products_map.php?symb’ Cross-Site Scripting	webapps	muts
2012-07-20	Maian Survey – ‘/index.php’ URI redirection / Local File Inclusion	webapps	PuN!Sh3r
2012-07-20	iBoutique 4.0 – ‘key’ SQL Injection	webapps	SecPod Research
2012-07-20	PHP-Nuke module (SPChat) – SQL Injection	webapps	Yakir Wizman
2012-07-19	WebKit Cross-Site Scripting Filter – ‘Cross-Site ScriptingAuditor.cpp’ Security Bypass	webapps	Tushar Dalvi
2012-07-19	CodeIgniter 2.1 – ‘xss_clean()’ Filter Security Bypass	webapps	Krzysztof Kotowicz
2012-07-19	Joomla! Component com_hello – ‘Controller’ Local File Inclusion	webapps	AJAX Security Team
2012-07-18	Nwahy Articles 2.2 – Cross-Site Request Forgery (Add Admin)	webapps	DaOne
2012-07-17	Forum Oxalis 0.1.2 – SQL Injection	webapps	Jean Pascal Pereira
2012-07-17	AVA VoIP – Multiple Vulnerabilities	webapps	Ibrahim El-Sayed