BugReport
Full Archive|Join Us|About Us|Contact Us
.:Date:. .:Title:. .:Impact:. .:Hits:. .:PoC:.
2014-04-9 Timapoo <= 1.0.0 Multiple Vulnerability High 4272-
2014-02-1 noCMS <= 2.4 Multiple Vulnerability High 8019 X
2012-05-19 PHP CGI Argument Injection Remote Exploit (PHP Version) High 17764 X
2011-08-23 JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities (Updated!) High 330364 X
2011-07-11 Ferdows CMS Pro <=1.1.0 and Ferdows CMS <=9.0.5 Multiple Vulnerabilities Medium 10259 X
2010-10-26 Microsoft Office Groove 2007 DLL Hijacking Exploit (grooveperfmon.dll) High 9199 X
2010-09-13 Adobe LiveCycle ES DLL Hijacking Exploit (.dll) High 9773 X
2010-09-5 chillyCMS Multiple Vulnerabilities Medium 6203-
2010-08-10 ACollab Multiple Vulnerabilities High 5368-
2010-04-11 AneCMS Multiple Vulnerabilities High 5362-
2010-03-13 Ananta Gazelle SQL Injection Vulnerability High 7595-
2010-02-28 1024CMS Blind SQL Injection Vulnerability Medium 10926 X
2010-02-17 SphereCMS Blind SQL Injection Vulnerability Medium 6012-
2010-02-2 Tinypug Multiple Vulnerabilities Medium 10031 X
2010-01-19 Blaze Apps Multiple Vulnerabilities Medium 5422-
2009-12-2 ezContents CMS <=2.0.3 Multiple Vulnerabilities Medium 12881-
2009-04-8 SASP CMS Multiple Vulnerabilities High 17616 X
2009-03-17 PHPRunner <= 4.2 Blind SQL Injection Medium 7143-
2009-01-27 NewsCMSlite Insecure Cookie Handling Medium 6241-
2009-01-22 KWWD SQL Injection Medium 5495-
2009-01-14 phpList <= 2.10.8 Local File inclusion High 19753 X
2008-12-20 chicomas <=2.0.4 Multiple Vulnerabilities High 6965-
2008-12-14 CFAGCMS Remote File Inclusion Medium 10610-
2008-11-8 Enthusiast <=3 Remote Code Execution High 10591-
2008-10-27 Persia BME E-Catalogue SQL Injection Vulnerability High 9728-
2008-10-4 CMME Multiple Information disclosure Medium 10921-
2008-09-23 ParsaWeb CMS SQL Injection High 6522-
2008-09-7 Masir Camp E-Shop Module <= 3.0 SQL Injection Medium 6878-
2008-09-3 TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload Medium 11976-
2008-08-5 IGES CMS <=2.0 Multiple Vulnerabilities Medium 12483 X
2008-07-20 MyBlog <=0.9.8 Multiple Vulnerabilities High 15218 X
2008-07-13 Pluck Local File inclusion Medium 11880 X
2008-06-20 Virtual Support Office-XP Multiple Vulnerabilities. High 12615 X
2008-06-20 GL-SH Deaf Forum <=6.5.5 Multiple Vulnerabilities High 16158 X
2008-06-19 eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities High 11526 X
2008-06-19 Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities Medium 9563 X
2008-06-18 doITlive CMS <=2.50 Multiple Vulnerabilities High 8483 X
2008-06-12 Pooya Site Builder (PSB) SQL Injection Vulnerabilities High 7581 X
2008-06-12 Xigla Multiple Products - Multiple Vulnerabilities Medium 3652-
2008-06-10 Realm CMS <= 2.3 Multiple Vulnerabilities. High 6302 X
2008-06-4 QuickerSite <= 1.85 Multiple Vulnerabilities High 11670 X
2008-05-30 Dot Net Nuke (DNN) <= 4.8.3 XSS Vulnerability Low 4852-
2008-04-27 MegaBBS Forum Multiple Vulnerabilities. Medium 9010 X
2008-04-20 Acidcat CMS Multiple Vulnerabilities. High 6601 X
2008-04-16 Carbon Communities forum Multiple Vulnerabilities. High 8202 X
2008-04-13 cpCommerce Multiple Vulnerabilities Medium 3966-
2008-01-28 Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS Medium 8470-
2008-01-26 [CandyPress] eCommerce suite SQL Injection + XSS + Path Disclosure in CandyPress High 6608 X
2008-01-23 Web Wiz Rich Text Editor Directory traversal + HTM/HTML file creation on the server Medium 3148-
2008-01-23 Web Wiz NewsPad Directory traversal Low 2955-
2008-01-23 Web Wiz Forums Directory traversal Low 4440-
2008-01-22 Mozilla Firefox 2.0.0.11 Hide The Source Code Low 4214-
2008-01-20 Bloofox CMS SQL Injection (Authentication bypass) , Source code disclosure Medium 3475-
2008-01-7 OneCMS Vulnerabilities High 5684 X
2008-01-2 MODx CMS Source code disclosure, local file inclusion Medium 12826-
2007-12-30 Bitweaver source code disclosure, arbitrary file upload Medium 2926-
2007-12-24 Jupiter Cms Multiple Vulnerabilities High 7934 X
2007-12-24 PHP <= 5.2.5 Safe Mode Bypass Medium 17799 X
2007-12-13 Hosting Controller 6.1 - Users can change other's host headers. Medium 2543-
2007-12-13 Hosting Controller 6.1 - Users can enable or disable all Hosting Controller forums by SQL Injection. Medium 5213 X
2007-12-13 Hosting Controller 6.1 - Users can find web site path. Medium 2166-
2007-12-13 Hosting Controller 6.1 - Users can import unwanted plan or change the plans. Medium 2470-
2007-12-13 Hosting Controller 6.1 - Users can find Hosting Controller setup directory. Medium 5603 X
2007-12-13 Hosting Controller 6.1 - Users can see all usernames in the server by Medium 4620 X
2007-12-13 Hosting Controller 6.1 - Users can enable or disable pay type. Medium 2255-
2007-12-13 Hosting Controller 6.1 - Users can delete all of gateway information. Medium 1941-
2007-12-13 Hosting Controller 6.1 - Users can uninstall other's FrontPage extensions. Medium 1974-
2007-12-13 Hosting Controller 6.1 - Users can change his credit amount or increase his discount. Medium 4477 X
2007-12-13 Hosting Controller 6.1 - SQL Injection in "/accounts/accountmanager.asp" Medium 4744 X
2007-12-13 Hosting Controller 6.1 - Remote Attacker can change all user's profiles. Medium 5066 X
2007-12-13 Hosting Controller 6.1 - Remote Users Can Make a New User High 4056 X
2007-12-13 Hosting Controller 6.1 - Remote Authenticated Users Execute a File Under Administrative Priviledge High 6119 X
2007-12-13 Hosting Controller 6.1 - Lets Remote Users Gain Admin Priviledge High 4349 X
2007-12-10 Snitz Forums 2000 Active.asp Remote SQL Injection Vulnerability High 4560 X
2007-11-25 RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit High 11588 X
2007-11-25 RunCMS <= 1.6 Local File Inclusion Vulnerability Medium 2269-
2007-11-22 SkyPortal vRC6 Multiple Remote Vulnerabilities High 3933 X
2007-11-22 bcoos 1.0.10 (LFI / SQL Injection) Multiple Remote Vulnerabilities Medium 2437-
2007-10-25 Mozilla Firefox <= 2.0.0.7 Remote Denial of Service Exploit Low 2846-

Copyright © 2007-2014 AmnPardaz