webapps

日期	标题	类别	作者
2012-02-10	LxCenter Kloxo 6.1.10 – Multiple HTML Injection Vulnerabilities	webapps	anonymous
2012-02-10	Dolibarr ERP/CRM 3.x – ‘/adherents/fiche.php’ SQL Injection	webapps	Benjamin Kunz Mejri
2012-02-10	Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion	webapps	Vulnerability-Lab
2012-02-10	ProWiki – ‘id’ Cross-Site Scripting	webapps	sonyy
2012-02-10	RabbitWiki – ‘title’ Cross-Site Scripting	webapps	sonyy
2012-02-10	Zen Cart 1.3.9h – ‘/path_to_admin/product.php’ Cross-Site Request Forgery	webapps	DisK0nn3cT
2012-02-10	CubeCart 3.0.20 – ‘switch.php?r’ Arbitrary Site Redirect	webapps	Aung Khant
2012-02-08	Cyberoam Central Console 2.00.2 – Remote File Inclusion	webapps	Vulnerability-Lab
2012-02-08	Gazelle CMS 1.0 – Update Statement SQL Injection	webapps	hackme
2012-02-07	eFront 3.6.10 – ‘administrator.php’ Cross-Site Scripting	webapps	Chokri B.A
2012-02-07	ManageEngine ADManager Plus 5.2 Build 5210 – ‘domainName’ Cross-Site Scripting	webapps	LiquidWorm
2012-02-07	ManageEngine ADManager Plus 5.2 Build 5210 – ‘Operation’ Cross-Site Scripting	webapps	LiquidWorm
2012-02-07	Simple Groupware 0.742 – ‘export’ Cross-Site Scripting	webapps	Infoserve Security Team
2012-02-07	Flyspray 0.9.9.6 – Cross-Site Request Forgery	webapps	Vaibhav Gupta
2012-02-06	Vespa 0.8.6 – ‘getid3.php’ Local File Inclusion	webapps	T0x!c
2012-02-06	XRayCMS 1.1.1 – SQL Injection	webapps	chap0
2012-02-06	Tube Ace (Adult PHP Tube Script) – SQL Injection	webapps	Daniel Godoy
2012-02-06	BASE 1.4.5 – ‘base_qry_main.php?t_view’ SQL Injection	webapps	a.kadir altan
2012-02-05	GAzie 5.20 – Cross-Site Request Forgery	webapps	Giuseppe D'Inverno
2012-02-03	PHP-Fusion 7.2.4 – ‘weblink_id’ SQL Injection	webapps	Am!r
2012-02-03	project-open 3.4.x – ‘account-closed.tcl’ Cross-Site Scripting	webapps	Michail Poultsakis
2012-02-02	Joomla! Component Currency Converter 1.0.0 – ‘from’ Cross-Site Scripting	webapps	BHG Security Center
2012-02-02	iknSupport ‘search’ Module – Cross-Site Scripting	webapps	Red Security TEAM
2012-02-02	Joomla! Component com_bnf – ‘seccion_id’ SQL Injection	webapps	Daniel Godoy