webapps

日期	标题	类别	作者
2012-03-13	PBLang Bulletin Board System – Local File Inclusion	webapps	Number 7
2012-03-12	Acal Calendar 2.2.6 – Cross-Site Request Forgery	webapps	Number 7
2012-03-12	Saman Portal – Local File Inclusion	webapps	TMT
2012-03-12	Zend Server 5.6.0 – Multiple Remote Script Insertion Vulnerabilities	webapps	LiquidWorm
2012-03-12	Wikidforum 2.10 – Advanced Search Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz
2012-03-12	Wikidforum 2.10 – Search Field Cross-Site Scripting	webapps	Stefan Schurtz
2012-03-12	Wikidforum 2.10 – Advanced Search Multiple Field SQL Injections	webapps	Stefan Schurtz
2012-03-12	Synology Photo Station 5 DSM 3.2 – ‘photo_one.php’ Script Cross-Site Scripting	webapps	Simon Ganiere
2012-03-11	CreateVision CMS – ‘id’ SQL Injection	webapps	Zwierzchowski Oskar
2012-03-11	EJBCA 4.0.7 – ‘issuer’ Cross-Site Scripting	webapps	MustLive
2012-03-11	Singapore 0.10.1 – ‘gallery’ Cross-Site Scripting	webapps	T0xic
2012-03-10	PHP Address Book 6.2.12 – Multiple Vulnerabilities	webapps	Stefan Schurtz
2012-03-09	PHPMyVisites 2.4 – ‘PHPmv2/index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	AkaStep
2012-03-08	SAP Business Objects InfoView System – ‘/help/helpredir.aspx?guide’ Cross-Site Scripting	webapps	vulns@dionach.com
2012-03-08	SAP Business Objects InfoVew System – ‘listing.aspx?searchText’ Cross-Site Scripting	webapps	vulns@dionach.com
2012-03-08	Ilient SysAid 8.5.5 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	Julien Ahrens
2012-03-08	ToendaCMS 1.6.2 – ‘/setup/index.php?site’ Traversal Local File Inclusion	webapps	AkaStep
2012-03-08	LeKommerce – ‘id’ SQL Injection	webapps	Mazt0r
2012-03-08	RazorCMS 1.2.1 Stable – Cross-Site Request Forgery (Delete Web Pages)	webapps	Ivano Binetti
2012-03-08	RazorCMS 1.2.1 STABLE – Arbitrary File Upload	webapps	i2sec_Hyo jun Oh
2012-03-08	SAP Business Objects InfoView System – ‘/webi/webi_modify.aspx?id’ Cross-Site Scripting	webapps	vulns@dionach.com
2012-03-07	OSClass 2.3.x – Directory Traversal / Arbitrary File Upload	webapps	Filippo Cavallarin
2012-03-07	Exponent CMS 2.0 – ‘src’ SQL Injection	webapps	Rob Miller
2012-03-07	promise webpam 2.2.0.13 – Multiple Vulnerabilities	webapps	LiquidWorm