webapps

日期	标题	类别	作者
2012-03-24	FreePBX 2.9.0/2.10.0 – ‘callmenum’ Remote Code Execution (Metasploit)	webapps	Metasploit
2012-03-23	Wolfcms 0.75 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	Ivano Binetti
2012-03-23	Sitecom WLM-2501 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Ivano Binetti
2012-03-23	FreePBX 2.10.0 / Elastix 2.2.0 – Remote Code Execution	webapps	muts
2012-03-23	Apache Struts 2.0 – ‘XSLTResult.java’ Arbitrary File Upload	webapps	voidloafer
2012-03-23	PHPFox 3.0.1 – ‘ajax.php’ Remote Command Execution	webapps	EgiX
2012-03-22	FreePBX 2.9.0/2.10.0 – Multiple Vulnerabilities	webapps	Martin Tschirsich
2012-03-22	phpMoneyBooks 1.0.2 – Local File Inclusion	webapps	Mark Stanislav
2012-03-22	PHP Grade Book 1.9.4 – SQL Database Export	webapps	Mark Stanislav
2012-03-22	Cyberoam UTM – Multiple Vulnerabilities	webapps	Saurabh Harit
2012-03-22	vBShout – Persistent Cross-Site Scripting	webapps	ToiL
2012-03-21	Minify 2.1.x – ‘g’ Cross-Site Scripting	webapps	Ayoub Aboukir
2012-03-21	Open Journal Systems (OJS) 2.3.6 – ‘rfiles.php’ Traversal Arbitrary File Manipulation	webapps	High-Tech Bridge
2012-03-21	Open Journal Systems (OJS) 2.3.6 – Multiple Script Arbitrary File Upload	webapps	High-Tech Bridge
2012-03-21	Open Journal Systems (OJS) 2.3.6 – ‘/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()’ Method Cross-Site Scripting	webapps	High-Tech Bridge
2012-03-21	Open Journal Systems (OJS) 2.3.6 – ‘index.php?authors[][url]’ Cross-Site Scripting	webapps	High-Tech Bridge
2012-03-21	CMSimple 3.3 – ‘index.php’ Cross-Site Scripting	webapps	Stefan Schurtz
2012-03-21	phpList 2.10.17 – SQL Injection / Cross-Site Scripting	webapps	LiquidWorm
2012-03-21	D-Link DIR-605 – Cross-Site Request Forgery	webapps	iqzer0
2012-03-20	OneForum – ‘topic.php’ SQL Injection	webapps	Red Security TEAM
2012-03-20	WebGlimpse 2.14.1/2.18.8 – ‘webglimpse.cgi’ Remote Command Injection	webapps	Kevin Perry
2012-03-20	GNUBoard 4.34.20 – ‘download.php’ HTML Injection	webapps	wh1ant
2012-03-20	OneFileCMS – Failure to Restrict URL Access	webapps	Abhi M Balakrishnan
2012-03-19	ClassifiedsGeek.com Vacation Packages – ‘listing_search’ SQL Injection	webapps	r45c4l