SecurityTracker > View Topics > Reported By

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Jul 1 2006	Stud.IP Include File Bugs Let Remote Users Execute Arbitrary Code
Jun 30 2006	Plume CMS Include File Flaw in 'dbinstall.php' Lets Remote Users Execute Arbitrary Code
Jun 20 2006	ASP Stats Generator 'pages.asp' Input Validation Flaw Lets Remote Users Inject SQL Commands
May 22 2006	BitZipper Directory Traversal in Processing RAR/TAR/ZIP/GZ/JAR Archives Lets Remote Users Write Files to Arbitrary Locations
May 11 2006	evoTopsites Input Validation Flaw in 'cat_id' and 'id' Parameters Permit SQL Injection Attacks
Apr 10 2006	PHPKIT Input Validation Flaw in 'contentid' Parameter Permits SQL Injection
Mar 10 2006	Nodez Input Validation Flaw in 'op' Parameter Lets Remote Users Inject PHP Code and Also Conduct Cross-Site Scripting Attacks
Mar 2 2006	PluggedOut Nexus Input Validation Flaw in 'forgotten_password.php' Permits SQL Injection
Feb 14 2006	RUNCMS Input Validation Flaw in 'pmlite.php' Permits SQL Injection Attacks
Feb 6 2006	PluggedOut Blog Input Validation Bugs Permit SQL Injection and Cross-Site Scripting Attacks
Jan 31 2006	FarsiNews Include File Bug in 'logout.php' Lets Remote Users Execute Arbitrary Code
Jan 9 2006	MegaBBS Discloses Private Messages to Other Users