webapps

日期	标题	类别	作者
2012-01-20	ICTimeAttendance – Authentication Bypass	webapps	v3n0m
2012-01-20	Syneto Unified Threat Management 1.3.3/1.4.2 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	Alexander Fuchs
2012-01-20	Snitz Forums 2000 – ‘TOPIC_ID’ SQL Injection	webapps	snup
2012-01-20	WhatsApp – Remote Change Status	webapps	emgent
2012-01-19	Vastal EzineShop – ‘view_mags.php’ SQL Injection	webapps	Lazmania61
2012-01-19	PostNuke pnAddressbook Module – ‘id’ SQL Injection	webapps	Robert Cooper
2012-01-19	appRain CMF 0.1.5 – ‘Uploadify.php’ Unrestricted Arbitrary File Upload	webapps	EgiX
2012-01-19	WordPress Plugin ucan post 1.0.09 – Persistent Cross-Site Scripting	webapps	Gianluca Brindisi
2012-01-19	Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting	webapps	MaXe
2012-01-18	OneOrZero AIMS – ‘index.php’ Cross-Site Scripting	webapps	High-Tech Bridge SA
2012-01-18	Freelance Zone – ‘show_code.php’ SQL Injection	webapps	Lazmania61
2012-01-18	MMORPG Zone – ‘view_news.php’ SQL Injection	webapps	Lazmania61
2012-01-18	Toner Cart – ‘show_series_ink.php’ SQL Injection	webapps	Lazmania61
2012-01-18	DZCP (deV!L`z Clanportal) 1.5.5 Moviebase Addon – Blind SQL Injection	webapps	Easy Laster
2012-01-18	DZCP (deV!L`z Clanportal) Gamebase Addon – SQL Injection	webapps	Easy Laster
2012-01-18	PHPBridges Blog System – ‘members.php’ SQL Injection	webapps	3spi0n
2012-01-18	pGB 2.12 – ‘kommentar.php’ SQL Injection	webapps	3spi0n
2012-01-17	Joomla! Component com_discussions – SQL Injection	webapps	Red Security TEAM
2012-01-16	Annuaire PHP – ‘sites_inscription.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	Atmon3r
2012-01-16	Giveaway Manager – ‘members.php’ Cross-Site Scripting	webapps	Am!r
2012-01-16	phpVideoPro 0.8.x/0.9.7 – Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz
2012-01-16	Beehive Forum 101 – Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz
2012-01-16	ATutor 2.0.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz
2012-01-16	BoltWire 3.4.16 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz