Поиск:Автор - компьютерная безопасность: уязвимости и эксплоиты

[RU] switch to
English Version

См. так же
r0t <r0t_(at)_r00t.it>
Имя: r0t
URL: http://pridels.blogspot.com/
E-mail: krustevs_(at)_googlemail.com

DirectAdmin <= v1.33.6 XSS vuln.
activeCollab XSS and Full Path Disclosure
Dataspade xss
Wikepage XSS vuln
Minki XSS vuln.
DB Manager XSS vuln.
dbList XSS vuln.
Directory Image Gallery XSS vuln.
OdysseySuite™ Internet Banking vuln.
Freeside XSS vuln.
Urchin Multiple XSS vuln.
DirectAdmin <= v1.30.2 XSS vuln.
Storesprite XSS vuln.
phpMyAdmin multiple XSS vuln.
VisionProject Multiple XSS vuln.
Snif vuln.
OpenWebMail Multiple XSS vuln.
WebDirector XSS vuln.
2 Vuln.
DirectAdmin XSS vuln.
QuickTalk guestbook sql inj.
QuickTicket multiple sql inj.
rwAuction Pro XSS vuln.
ClickGallery Server vuln.
phpRaider sql vuln.
bosDataGrid XSS vuln.
access2asp XSS vuln.
netjukebox vuln.
Interact multiple XSS vuln.
PHPAccounts vuln.
PHP Live! Support XSS vuln.
Sporum Forum XSS vuln.
Gnats XSS vuln
CandyPress™ Store XSS vuln.
Parodia XSS vuln
ClientExec XSS vuln.
Track+ XSS vuln.
FileRun Vuln.
PHPChain vuln.
DVDdb XSS vuln.
DGNews v 1.5 File Upload Vuln.
EVA-Web <=2.1.2 vuln.
FlexChat XSS
Creative Community Portal vuln.
albinator <= 2.0.8 Remote File Inclusion Vuln and XSS
CyberBuild vuln.
SunShop XSS vuln.
Avactis Shopping Cart vuln.
RT: Request Tracker vuln.
MaxTrade sql inj.
OrbitHYIP XSS
Barracuda vuln.
Pinnacle Cart XSS
CPS <=3.4.0 XSS
Kmail <=2.3 vuln.
Open WebMail <=2.51 XSS vuln.
Cartweaver ColdFusion vuln.
QuickEStore 7.9 vuln.
ampleShop™ eCommerce Software vuln.
logMethods XSS vuln.
X-Cart SQL inj. vuln.
phpMyAdmin XSS vuln.
phpLDAPadmin multiple vuln.
IPB <= 2.1.5 SQL inj. vuln.
Portal Pack 6 XSS vuln.
Net Clubs Pro XSS vuln
Green Minute SQL inj. vuln.
W2B Online Banking vuln.
AWStats 6.5.x multiple vuln.
BannerFarm XSS vuln.
IntelliLink Pro XSS vuln.
CommuniMail XSS vuln.
Visale XSS vuln.
AWStats 6.5 vuln.
Plexum X5 SQL vuln.
PlexCart X3 SQL Injection Vulnerability
Article Publisher Pro SQL inj.
xFlow v5.x multiple vuln.
Leadhound multiple vuln.
ModernBill multiple SQL inj. vuln.
BluePay Manager v2.0 Script Insertion Vulnerability
phpLinks <= 2.1.3.1 XSS vuln.
MonsterTopList- Remote Code Execution bug
Musicbox vuln.
Shopweezle 2.0 multiple vuln.
APT-webshop-system vuln.
Papoo Multiple SQL vuln.
ecotwo Shopsystem vuln.
Web+ Shop 5.0 XSS vuln.
vBulletin 3.5.x vBug Tracker XSS vuln.
SKForum XSS vuln.
Bugzero XSS vuln.
Mantis XSS vuln.
Keystone DLS SQL vuln.
SiteSearch Indexer 3.5 XSS vuln.
Connect Daily Web Calendar Software Multiple XSS vuln.
CONTROLzx HMS - Hosting Management System vuln.
ActiveCampaign SupportTrio 2.5 vuln.
couponZONE v.4.2 Multiple vuln.
realestateZONE 4.2 Multiple XSS vuln.
classifiedZONE v1.2 XSS vuln.
phpCOIN v1.2.2 XSS vuln.
BlankOL XSS vuln.
EZHomepagePro multiple XSS vuln.
E-School Management System XSS vuln. and Web Quiz pro XSS vuln.
Metisware Instructor XSS vuln.
Helm Web Hosting Control Panel XSS vuln.
Absolute Image Gallery XE 2.0 XSS vuln.
Absolute Live Support XE V2.0 XSS vuln.
XSS in <= Toast Forums 1.6
SweetSuite.NET - ssCMS 2.1.x XSS vuln.
XSS vuln. in dotNetBB <= v2.4
Absolute FAQ Manager .NET XSS vuln.
AdMan v1.0.x SQL vuln
1WebCalendar v 4.x vuln.
NZ Ecommerce SQL&XSS vuln.
Primo Cart SQL inj.
BugPort Multiple vuln.
Kayako SupportSuite multiple vuln.
AdesGuestbook XSS vuln.
OoApp Guestbook XSS vuln.
iPei Guestbook XSS vuln.
CommonSpot Content Server vuln.
Fatwire UpdateEngine 6.2 multiple XSS vuln.
AlstraSoft EPay Enterprise v3.0 XSS vuln.
eggblog vuln.
Communique 4 XSS vuln.
CommonSpot Content Server vuln.
WANDSOFT e-SEARCH XSS vuln.
WAXTRAPP XSS vuln.
WebDB SQL inj vuln.
SyntaxCMS XSS vuln.
SPIP XSS vuln.
IntranetApp XSS vuln.
SiteEnable XSS vuln.
PortalApp XSS vuln.
Polopoly XSS vuln.
Text-e XSS vuln.
Tangora™ Portal CMS XSS vuln.
SpireMedia CMS SQL inj. vuln.
Speartek XSS vuln.
Sitekit CMS multiple XSS vuln.
SCOOP! Multiple XSS vuln.
Redakto WCMS multiple XSS vuln.
RAMSite R|1 CMS XSS vuln.
QP7.Enterprise SQL vuln.
ProjectApp mutliple XSS vuln.
Plexcor's(r) CMS XSS vuln.
phpSlash SQL vuln.
Papoo Multiple SQL vuln.
papaya CMS XSS vuln.
OpenEdit XSS vuln.
OpenCms XSS vuln.
NQcontent V3 XSS vuln.
Miraserver SQL vuln.
MMBase XSS vuln.
Esselbach Storyteller CMS XSS vuln.
ODFaq SQL inj. vuln.
Honeycomb Archive & Honeycomb Archive Enterprise vuln.
Mercury CMS™ vuln.
Marwel SQL inj.
Magnolia XSS vuln.
Lutece XSS vuln.
Lighthouse CMS XSS vuln.
Liferay Portal Enterprise 3.6.1 XSS
Libertas Enterprise CMS XSS vuln.
damoon(r) XSS vuln
lemoon(r) XSS vuln
Komodo CMS vuln.
Hot Banana XSS vuln.
FLIP XSS vuln.
FarCry XSS vuln.
EPiX™ Search query XSS vuln.
e-publish CMS vuln.
Direct News SQL inj.
ContentServ 3.1 SQL inj.
CONTENS "search.cfm" Multiple Input Validation Vulnerabilities
contenite XSS vuln.
Colony CMS XSS vuln.
Community Enterprise 4.x Multiple vuln.
Cofax XSS vuln.
Caravel CMS XSS
bitweaver multiple vuln.
Baseline CMS vuln.
AWF (Adaptive Website Framework) vuln.
Amaxus vuln.
Allinta 2.3.x XSS vuln.
Acuity CMS 2.6.x (ASP) XSS vuln.
RED QUEEN Path Disclosure
iHTML Merchant Mall SQL inj.
iHTML Merchant Version 2 Pro sql inj.
Webglimpse XSS vuln.
SiteNet BBS XSS vuln
bbBoard v2 XSS vuln.
DCForum XSS vuln.
ezUpload Pro vuln
phpXplorer XSS vuln.
AlmondSoft Products SQL inj.
Atlant Pro XSS vuln.
AtlantForum XSS vuln.
CommerceSQL XSS vuln.
eDatCat XSS vuln.
ECW-Cart XSS vuln.
ECTOOLS - Onlineshop XSS
PPCal Shopping Cart XSS
PlexCart X3 SQL inj. vuln.
DomainCart XSS
HostingCart XSS
StaticStore Search Engine Friendly E-Commerce XSS
ClickCartPro (CCP) XSS vuln.
The CITY Shop XSS vuln.
PDEstore XSS vuln.
ezDatabase vuln.
paFileDB Extreme Edition SQL inj
ScareCrow Message Board XSS vuln.
Binary Board System XSS vuln.
ProjectForum 4.7.0 vuln.
DreamPoll SQL inj.
WHMCompleteSolution XSS vuln.
CKGOLD XSS vuln.
QuickPayPro™ 3.1 Multiple vuln.
MySQL Auction XSS vuln.
Ad Manager Pro SQL vuln.
Link Up Gold vuln.
VCD-db vuln.
WikkaWiki XSS vuln.
Jamit Job Board 2.4.x SQL inj.
Plogger SQL&XSS vuln.
Snipe Gallery SQL&XSS vuln.
EncapsGallery SQL inj. vuln.
PHP JackKnife XSS vuln.
PhpWebGallery multiple SQL inj.
Mantis bugtracking system XSS vuln.
mcGallery PRO vuln.
CF_Nuke v4.6 Multiple vuln.
A-FAQ SQL inj. vuln.
IISWorks ASP KnowledgeBase 2.x XSS vuln.
NetAuctionHelp v3.0 XSS Vuln
XcClassified v3.x XSS vuln
XcPhotoAlbum v1.x XSS vuln.
rwAuction Pro v4.0 XSS vuln.
Ideal BB.NET 1.3 XSS vuln
LocazoList Classifieds v1.03c Vuln.
saralblog v1 SQL inj. vuln.
PluggedOut Nexus SQL&XSS vuln.
PluggedOut Blog SQL vuln.
phpBB Blog 2.2.2 SQL inj. vuln.
CF_Nuke v4.6 Multiple vuln.
Magic List pro 2.5 SQL inj. vuln.
Magic Book v2.0 Professional Vuln.
Magic Forum Personal SQL&XSS vuln.
Cars Portal v1.x SQL injection.
Blog System v1.2 SQL inj. vuln.
HobSR SQL inj. vuln
KeyWord Frequency Counter v1.0 XSS vuln.
Web4Future eDating Professional v5 sql vuln.
Web4Future Portal Solutions - News Portal vuln.
Web4Future eCommerce Enterprise Edition v2.1 SQL inj. vuln.
Web4Future Affiliate Manager PRO SQL inj. vuln.
Easy Search System v1.1 XSS vuln.
1- Search XSS vuln.
Warm Links XSS vuln.
Hot Links SQL 3.x XSS vuln.
Hot Links Pro 3.x XSS vuln.
Amazon Search Directory XSS vuln.
FileLister SQL inj. vuln.
Widget Property Vuln.
Widget Imprint SQL inj. vuln.
Landshop Real Estate Commerce System Vuln.
Relative Real Estate Systems SQL inj. vuln.
coWiki 0.3.4 XSS vuln
phpYellowTM Pro Edition SQL inj. vuln.
MyTemplateSite XSS vuln.
ASPS Shopping Cart Professional and Lite XSS vuln
Solupress News XSS vuln
SiteBeater MP3 Catalog XSS vuln
Sitebeater News System XSS vuln.
Extreme Search Corporate Edition 6.x XSS vuln.
NetClassifieds all versions SQL inj. vuln
Interspire FastFind 2005 XSS vuln.
Free ClickBank Search Engine SQL inj. vuln.
QualityPPC XSS vuln.
JSE XSS vuln.
Confluence – the Enterprise Wiki, XSS vuln.
Lore SQL inj. vuln.
Instant Photo Gallery SQL inj. vuln.
phpAlbum Local file include vuln.
O-Kiraku Nikki v1.3 SQL inj. vuln.
88Script's Event Calendar v2.0 SQL inj. vuln.
Calendar Express 2 SQL inj. vuln.
FAQ System 1.1 SQL inj. vuln.
Orca Ringmaker SQL inj. vuln.
Orca Blog SQL inj. vuln.
Softbiz B2B trading Marketplace Script SQL inj
SoftBiz FAQ Script Multiple SQL vuln.
Orca Knowledgebase SQL vuln.
KBase Express SQL inj. vuln.
SocketKB 1.1.x Vuln.
Jax Calendar 1.34 vuln.
Codewalkers ltwCalendar 4.x SQL inj. vuln
Survey System 1.1 SQL inj. vuln.
phpWTF Full Path Disclosure vuln.
Nephp Publisher v4.5.x SQL inj. vuln.
Softbiz Resource Repository Script SQL vuln.
SourceWell SQL inj. vuln.
SearchFeed Search Engine XSS vuln.
RevenuePilot Search Engine XSS vuln.
Google API Search XSS vuln.
K-Search Multiple vuln.
edmoBBS SQL inj. vuln.
JBB SQL inj. vuln.
Ugroup 2.6.2 SQL inj. vuln.
ShockBoard SQL inj. vuln.
Netzbrett 1.5.1 SQL inj. vuln.
SimpleBBS v1.1 SQL inj. vuln.
ADC2000 NG Pro SQL inj. vuln.
PHP Doc System 1.5.1 Local file inclusion vuln.
SDMS 2.0 SQL inj. vuln.
Babe Logger V2 Sql inj. vuln.
Top Music module for PHP Nuke SQL inj. vuln
Geeklog 1.4.x Full Path Disclosure vuln.
AllWeb search SQL inj. vuln.
Omnistar KBase SQL inj, vuln.
Enterprise Connector SQL inj. vuln
Zainu 2.x SQL inj. vuln.
BedengPSP sql inj. vuln.
AltantisFAQ SQL inj. vuln.
FaqRing 3.0 SQL inj. vuln.
DRZES HMS 3.2 Multiple vuln.
Clientexec 2.x Multiple SQL inj.
EZ Invoice Inc™ v 2.0 SQL inj.
LogicBill 1.0 SQL inj.
DMANews Multiple SQL inj. vuln.
Fantastic News "category" SQL inj.
VBulletin 3.5.1 XSS vuln.
Zorum Forum 3.5 "rollid" SQL inj. vuln.
WowBB 1.65 vuln.
Amazon Shop 5.0.0 XSS vuln.
Post Affiliate Pro 2.0.x Vuln.
BosDates v4.0 SQL vuln
Entergal MX V2.0 SQL vuln.
CS-Cart SQL inj. vuln.
SMBCMS v2.1 SQL injection.
Helpdesk Issue Manager v0.9 SQL inj.
OKBSYS Lite 1.0 "search.asp" XSS vuln.
OASYS Lite 1.0 "search.asp" XSS vuln.
OWOS Lite 3.0 SQL inj.
Kayako SupportSuite v3.00.x Full path Disclosure .
sNews 1.3 SQL injection.
phpWordPress 3.0 SQL inj.
HelpDeskPoint Free Help Desk Software SQL inj.
iSupport 1.x "include_file" SQL inj.
cSupport "pg" SQL inj.
AgileBill 1.4.x "id" sql injection.
pdjk-support suite sql inj.
Systems Panel v1.0.x Multiple SQL inj.
DapperDesk 3.0.x "page" SQL inj.
Softbiz Web Host Directory Script Multiple vuln.
Orca forum 4.3.x "msg" Sql inj.
freeForum 1.x "cat" "thread" SQL inj.
Zina SQL injection vulnerability.
ActiveCampaign KnowledgeBuilder Vuln.
VUBB Forum SQL and XSS vuln.
OvBB SQL vulnerabilities.
ActiveCampaign SupportTrio SQL inj.
DeskLance Vuln.
iDesk "cat_id" SQL inj.
IsolSoft Support Center SQL inj.
Vote! Pro 4.x "poll_id" Sql inj.
Vote Caster 3.x SQL Inj. Vuln.
1-2-3 music store "AlbumID" Sql injection.
Commodity Rentals 2.x "user_id" Sql inj.
digiSHOP 3.x SQL injection vuln.
Affcommerce Multiple Sql inj.
ezyhelpdesk Multiple Sql inj
Omnistar Live "id" and "category_id" SQL inj.
SupportPRO Supportdesk XSS vuln.
Survey Wizard "sid" SQL injection vuln.
Top Auction Multiple SQL Vuln.
kPlaylist XSS vuln.
Tunez SQL and XSS vuln.
XSS in HydroBB
WSN Forum "id" SQL Injection Vulnerability
AlstraSoft EPay Pro "pmodule" SQL Injection Vulnerability
phpComasy "id" SQL Injection Vulnerability
eazyCMS "page_id" SQL Injection Vulnerability
Multiple SQL Injection Vulnerabilities in class-1 Forum Software (v 0.24.4)
class-1 Poll Software Multiple SQL Injection Vulnerabilities.
Sql injection in 3CFR
PEEL 2.x sql injection
iCMS Remote File Include Vulnerability