webapps

日期	标题	类别	作者
2011-12-07	Family Connections CMS 2.7.1 – ‘less.php’ Remote Command Execution (Metasploit)	webapps	Metasploit
2011-12-06	Simple Machines Forum (SMF) 1.1.15 – ‘fckeditor’ Arbitrary File Upload	webapps	HELLBOY
2011-12-06	WordPress Plugin Pretty Link 1.5.2 – ‘pretty-bar.php’ Cross-Site Scripting	webapps	Am!r
2011-12-06	Alstrasoft EPay Enterprise 4.0 – Blind SQL Injection	webapps	Don
2011-12-05	Elxis CMS 2009 – ‘administrator/index.php’ URI Cross-Site Scripting	webapps	Ewerson Guimaraes
2011-12-05	Elxis CMS 2009 – ‘index.php?task’ Cross-Site Scripting	webapps	Ewerson Guimaraes
2011-12-05	Meditate Web Content Editor ‘username_input’ – SQL Injection	webapps	Stefan Schurtz
2011-12-04	Family Connections CMS 2.5.0/2.7.1 – ‘less.php’ Remote Command Execution	webapps	mr_me
2011-12-02	Joomla! Component com_jobprofile – SQL Injection	webapps	kaMtiEz
2011-12-02	WSN Classifieds 6.2.12/6.2.18 – Multiple Vulnerabilities	webapps	d3v1l
2011-12-01	Hero 3.69 – ‘month’ Cross-Site Scripting	webapps	Gjoko Krstic
2011-12-01	AtMail 1.04 – ‘func’ Multiple Cross-Site Scripting Vulnerabilities	webapps	Dognædis
2011-12-01	Muster Render Farm Management System – Arbitrary File Download	webapps	Nick Freeman
2011-11-30	SugarCRM Community Edition 6.3.0RC1 – ‘index.php’ Multiple SQL Injections	webapps	High-Tech Bridge SA
2011-11-30	WordPress Plugin flash-album-gallery – ‘facebook.php’ Cross-Site Scripting	webapps	Am!r
2011-11-30	WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 – Cross-Site Scripting	webapps	Am!r
2011-11-30	OrangeHRM 2.6.11 – ‘/lib/controllers/CentralController.php?id’ SQL Injection	webapps	High-Tech Bridge SA
2011-11-30	OrangeHRM 2.6.11 – ‘lib/controllers/CentralController.php’ URI Cross-Site Scripting	webapps	High-Tech Bridge SA
2011-11-30	OrangeHRM 2.6.11 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	High-Tech Bridge SA
2011-11-30	WikkaWiki 1.3.2 – Multiple Vulnerabilities	webapps	EgiX
2011-11-29	Virtual Vertex Muster 6.1.6 – Web Interface Directory Traversal	webapps	Nick Freeman
2011-11-28	Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	LiquidWorm
2011-11-28	WordPress Plugin Skysa App Bar – ‘idnews’ Cross-Site Scripting	webapps	Amir
2011-11-28	JQuery-Real-Person plugin – Bypass Captcha	webapps	Alberto_García_Illera