webapps

日期	标题	类别	作者
2010-10-01	Tiki Wiki CMS Groupware 5.2 – Multiple Vulnerabilities	webapps	John Leitch
2010-10-01	phpMyShopping 1.0.1505 – Multiple Vulnerabilities	webapps	Metropolis
2010-10-01	jCart 1.1 – Multiple Cross-Site Scripting / Cross-Site Request Forgery/Open Redirect Vulnerabilities	webapps	p0deje
2010-10-01	Evaria Content Management System 1.1 – File Disclosure	webapps	khayeye shotor
2010-10-01	Zen Cart 1.3.9f – ‘typefilter’ Local File Inclusion	webapps	LiquidWorm
2010-10-01	zen cart 1.3.9f – Multiple Vulnerabilities	webapps	LiquidWorm
2010-10-01	Intellicom Netbiter webSCADA Products – ‘read.cgi’ Multiple Remote Security Vulnerabilities	webapps	Eugene Salov
2010-10-01	iGaming CMS 1.5 – Blind SQL Injection	webapps	plucky
2010-09-30	JomSocial 1.8.8 – Arbitrary File Upload	webapps	Jeff Channell
2010-09-30	Joomla! Component JE Directory 1.0 – SQL Injection	webapps	Easy Laster
2010-09-30	Joomla! Component JE Job – SQL Injection	webapps	Easy Laster
2010-09-30	ASPMass Shopping Cart – Arbitrary File Upload / Cross-Site Request Forgery	webapps	Abysssec
2010-09-30	Joomla! Component JE Guestbook 1.0 – Multiple Vulnerabilities	webapps	Salvatore Fresta
2010-09-29	Getsimple CMS 2.01 – ‘changedata.php’ Cross-Site Scripting	webapps	High-Tech Bridge SA
2010-09-29	Pluck CMS 4.6.3 – ‘cont1’ HTML Injection	webapps	High-Tech Bridge SA
2010-09-29	MODx 2.0.2-pl – ‘/manager/index.php?modahsh’ Cross-Site Scripting	webapps	John Leitch
2010-09-29	MODx manager – ‘/controllers/default/resource/tvs.php?class_key’ Traversal Local File Inclusion	webapps	John Leitch
2010-09-29	MyPhpAuction 2010 – ‘id’ SQL Injection	webapps	h4ck3r
2010-09-29	Webspell 4.x – safe_query Bypass	webapps	silent vapor
2010-09-29	Webspell wCMS-Clanscript4.01.02net – static Blind SQL Injection	webapps	Easy Laster
2010-09-29	Webspell 4.2.1 – ‘asearch.php’ SQL Injection	webapps	silent vapor
2010-09-28	AtomatiCMS – Upload Arbitrary File	webapps	Abysssec
2010-09-28	PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting	webapps	Yam Mesicka
2010-09-28	Micro CMS 1.0 – ‘name’ HTML Injection (1)	webapps	Veerendra G.G