webapps

日期	标题	类别	作者
2011-09-14	Cogent DataHub 7.1.1.63 – Source Disclosure	webapps	Luigi Auriemma
2011-09-13	Carel PlantVisor 2.4.4 – Directory Traversal	webapps	Luigi Auriemma
2011-09-13	dotProject 2.1.5 – SQL Injection	webapps	sherl0ck_
2011-09-13	WordPress Plugin Forum Server 1.7 – SQL Injection	webapps	Miroslav Stampar
2011-09-12	Orion Network Performance Monitor 10.1.3 – ‘CustomChart.aspx’ Cross-Site Scripting	webapps	Gustavo Roberto
2011-09-12	Papoo CMS Light 4.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	Stefan Schurtz
2011-09-12	AstroCMS – Multiple Vulnerabilities	webapps	brain[pillow]
2011-09-12	Slaed CMS – Code Execution	webapps	brain[pillow]
2011-09-12	NetCat CMS – Multiple Vulnerabilities	webapps	brain[pillow]
2011-09-12	PHP Support Tickets 2.2 – Code Execution	webapps	brain[pillow]
2011-09-12	TomatoCart 1.1 – (Authenticated) Local File Inclusion	webapps	brain[pillow]
2011-09-10	WordPress Plugin Tune Library 2.17 – SQL Injection	webapps	Miroslav Stampar
2011-09-09	WordPress Plugin A to Z Category Listing 1.3 – SQL Injection	webapps	Miroslav Stampar
2011-09-09	WordPress Plugin WP-Filebase Download Manager 0.2.9 – SQL Injection	webapps	Miroslav Stampar
2011-09-09	WordPress Plugin Event Registration 5.44 – SQL Injection	webapps	serk
2011-09-09	Xataface WebAuction and Xataface Librarian DB – Multiple Vulnerabilities	webapps	SecPod Research
2011-09-09	MYRE Real Estate Software – Multiple Vulnerabilities	webapps	SecPod Research
2011-09-08	Pluck CMS 4.7 – Multiple Local File Inclusion / File Disclosure Vulnerabilities	webapps	Bl4k3
2011-09-08	In-link 2.3.4/5.1.3 RC1 – ‘cat’ SQL Injection	webapps	SubhashDasyam
2011-09-08	SkaDate – ‘blogs.php’ Cross-Site Scripting	webapps	sonyy
2011-09-08	OpenCart 1.5.1.2 – Blind SQL Injection	webapps	RiRes Walid
2011-09-08	WordPress Plugin 1 Flash Gallery 1.30 < 1.5.7a - Arbitrary File Upload (Metasploit)	webapps	Ben Schmidt
2011-09-08	AM4SS 1.2 – Cross-Site Request Forgery (Add Admin)	webapps	red virus
2011-09-08	WordPress Plugin Community Events 1.2.1 – SQL Injection	webapps	Miroslav Stampar