webapps

日期	标题	类别	作者
2012-05-25	DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities	webapps	KedAns-Dz
2012-05-25	SocialEngine 4.2.2 – Multiple Vulnerabilities	webapps	i4k
2012-05-25	appRain CMF – Arbitrary ‘.PHP’ File Upload (Metasploit)	webapps	Metasploit
2012-05-24	phpCollab 2.5 – Direct Request Multiple Protected Page Access	webapps	team ' & 1=1--
2012-05-24	PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload	webapps	team ' & 1=1--
2012-05-24	Jaow 2.4.5 – Blind SQL Injection	webapps	kallimero
2012-05-23	pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting	webapps	High-Tech Bridge SA
2012-05-23	pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting	webapps	High-Tech Bridge SA
2012-05-23	Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	High-Tech Bridge SA
2012-05-23	Ajaxmint Gallery 1.0 – Local File Inclusion	webapps	AkaStep
2012-05-23	phpCollab 2.5 – Database Backup Information Disclosure	webapps	team ' & 1=1--
2012-05-23	Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal	webapps	AkaStep
2012-05-23	Yellow Duck Framework 2.0 Beta1 – Local File Disclosure	webapps	L3b-r1'z
2012-05-22	Plogger Photo Gallery – SQL Injection	webapps	Eyup CELIK
2012-05-21	PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting	webapps	Eyup CELIK
2012-05-21	Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting	webapps	MustLive
2012-05-21	Acuity CMS 2.6.2 – ‘/admin/file_manager/browse.asp?path’ Traversal Arbitrary File Access	webapps	Aung Khant
2012-05-21	Acuity CMS 2.6.2 – ‘/admin/file_manager/file_upload_submit.asp’ Multiple Arbitrary File Upload / Code Executions	webapps	Aung Khant
2012-05-21	Supernews 2.6.1 – SQL Injection	webapps	WhiteCollarGroup
2012-05-21	Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting	webapps	Henry Hoggard
2012-05-21	Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting	webapps	Henry Hoggard
2012-05-20	AZ Photo Album – Cross-Site Scripting / Arbitrary File Upload	webapps	Eyup CELIK
2012-05-20	Concrete5 CMS FlashUploader – Arbitrary ‘.SWF’ File Upload	webapps	AkaStep
2012-05-20	Concrete CMS < 5.5.21 - Multiple Vulnerabilities	webapps	AkaStep