24669 | Plain Old Webserver URI Traversal Arbitrary File Access | medium |
24356 | LifeType rss.php profile Parameter Traversal Arbitrary File Access | medium |
24345 | MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF) | medium |
24322 | DevTrack Web Service UserName Field SQL Injection | high |
24284 | Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass | high |
24283 | ColdFusion / JRun on IIS Double Encoded NULL Byte Request File Content Disclosure | medium |
24267 | ExoPHPDesk faq.php id Parameter SQL Injection | medium |
24266 | Drupal Comment Module comment_form_add_preview() Function Arbitrary Code Execution | medium |
24265 | Drupal Comment Function Arbitrary Code Execution | medium |
24264 | Drupal Multiple Module $_SESSION Manipulation CAPTCHA Bypass | medium |
24263 | CVSTrac Text Output Formatter SQL Injection DoS | medium |
24262 | LedgerSMB / SQL-Ledger login.pl script Parameter Arbitrary Perl Code Execution | high |
24261 | PHProxy Detection | info |
24237 | WordPress Pingback File Information Disclosure | medium |
24235 | Website Baker REMEMBER_KEY Cookie SQL Injection | medium |
24228 | Oreon lang/index.php file Parameter Remote File Inclusion | high |
24223 | WoltLab Burning Board search.php Multiple Parameter SQL Injection | high |
24014 | WordPress Trackback 'wp-trackback.php' 'tb_id' Parameter SQL Injection | high |
24011 | WordPress Trackback Charset Decoding SQL Injection | medium |
24003 | Cuyahoga FCKEditor Misconfiguration Unrestricted File Upload | medium |
24001 | phpMyFAQ < 1.6.8 Multiple SQL Injection Vulnerabilities | high |
23968 | phpBB < 2.0.22 Multiple Vulnerabilities | critical |
23966 | Ultimate PHP Board chat/login.php username Parameter Arbitrary Command Execution | high |
23965 | Jinzora Multiple Script include_path Parameter Remote File Inclusion | medium |
23964 | Cacti copy_cacti_user.php template_user Variable SQL Injection | high |
23963 | Cacti cmd.php Multiple Parameter SQL Injection Arbitrary Command Execution | high |
23934 | Mono XSP for ASP.NET Server Crafted Request Script Source Code Disclosure | medium |
23933 | TYPO3 'spell-check-logic.php' 'userUid' Parameter Arbitrary Command Execution | high |
23927 | PHP-Update blog.php Variable Overwriting Arbitrary Code Execution | high |
23843 | JBoss Application Server (jbossas) JMX Console DeploymentFileRepository Traversal Arbitrary File Manipulation | high |
23842 | JBoss JMX Console Unrestricted Access | high |
23840 | PatchLink Update /dagent/downloadreport.asp Multiple Parameter SQL Injection | high |
23785 | Seditio Detection | info |
23784 | phpWebThings core/editor.php editor_insert_bottom Parameter Remote File Inclusion | medium |
23782 | Land Down Under / Seditio polls.php id Parameter SQL Injection | medium |
23781 | JCE Admin Component for Joomla! 'plugin' Parameter Local File Include | high |
23780 | ThinClientServer Admin Account Creation Privilege Escalation | high |
23774 | PHP Easy Download admin/save.php moreinfo Parameter Code Injection | high |
23755 | MailEnable NetWebAdmin Unauthorized Access (ME-10019) | high |
23752 | Serendipity serendipity_event_bbcode.php Script serendipity[charset] Parameter Local File Inclusion | medium |
23734 | WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection | medium |
23733 | WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection | high |
23724 | Etomite CMS index.php id Parameter SQL Injection | medium |
23652 | ELOG Web LogBook global Denial of Service | medium |
23651 | Verity Ultraseek < 5.7 Multiple Vulnerabilities | critical |
23641 | MODx CMS base_path Parameter Remote File Inclusion | medium |
23640 | Exhibit Engine styles.php toroot Parameter Remote File Inclusion | medium |
23639 | IBM WebSphere snoopservlet Path Disclosure | medium |
23638 | IBM WebSphere Application Server '%20' Request Source Disclosure | medium |
23624 | e107 class2.php e107language_e107cookie Cookie Traversal Local File Inclusion | high |