webapps

日期	标题	类别	作者
2010-09-28	AtomatiCMS – Upload Arbitrary File	webapps	Abysssec
2010-09-28	PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting	webapps	Yam Mesicka
2010-09-28	Micro CMS 1.0 – ‘name’ HTML Injection (1)	webapps	Veerendra G.G
2010-09-28	Micro CMS 1.0 b1 – Persistent Cross-Site Scripting	webapps	SecPod Research
2010-09-28	Achievo 1.4.3 – Cross-Site Request Forgery	webapps	Pablo Milano
2010-09-28	Achievo 1.4.3 – Multiple Authorisation Vulnerabilities	webapps	Pablo Milano
2010-09-27	NetArt Media Car Portal 2.0 – ‘car’ SQL Injection	webapps	RoAd_KiLlEr
2010-09-27	Horde IMP Webmail 4.3.7 – ‘fetchmailprefs.php’ HTML Injection	webapps	Moritz Naumann
2010-09-27	MySITE – SQL Injection / Cross-Site Scripting	webapps	MustLive
2010-09-27	Car Portal 2.0 – Blind SQL Injection	webapps	**RoAd_KiLlEr**
2010-09-27	Barracuda Networks Spam & Virus Firewall 4.1.1.021 – Remote Configuration Retrieval	webapps	ShadowHatesYou
2010-09-27	Allpc 2.5 osCommerce – SQL Injection / Cross-Site Scripting	webapps	**RoAd_KiLlEr**
2010-09-27	Entrans – SQL Injection	webapps	keracker
2010-09-27	ndCMS – SQL Injection	webapps	Abysssec
2010-09-27	pbboard 2.1.1 – Multiple Vulnerabilities	webapps	JIKO
2010-09-26	gokhun asp stok 1.0 – Multiple Vulnerabilities	webapps	KnocKout
2010-09-26	ZenPhoto – Config Update / Command Execution	webapps	Abysssec
2010-09-26	Blue River Mura CMS – Directory Traversal	webapps	mr_me
2010-09-26	PEEL Premium 5.71 – SQL Injection	webapps	KnocKout
2010-09-25	E-Xoopport Samsara 3.1 (eCal Module) – Blind SQL Injection	webapps	_mRkZ_
2010-09-25	VisualSite CMS 1.3 – Multiple Vulnerabilities	webapps	Abysssec
2010-09-24	Traidnt UP – Cross-Site Request Forgery (Add Admin)	webapps	John Johnz
2010-09-24	Joomla! Component Elite Experts – SQL Injection	webapps	**RoAd_KiLlEr**
2010-09-24	FreePBX 2.8.0 – Recordings Interface Allows Remote Code Execution	webapps	Trustwave's SpiderLabs