Category: Php

2015-07-15 GetSimpleCMS 3.3.5: XSS, Code Execution, DOS, Password Leak, Weak Authentication, Misc

2015-07-10 ZenPhoto 1.4.8: Second Order SQL Injection, Reflected XSS, Path Traversal, Function Execution

2015-07-02 WordPress File Upload Plugin 2.7.6: Code Execution, CSRF, XSS, Information Disclosure

2015-06-27 LimeSurvey 2.05+: Persistent XSS

2015-06-27 TinyWebGallery 2.3.2: Reflected XSS

2015-06-05 Beehive Forum 1.4.5: Multiple XSS and CSRF

2015-05-15 SQL Injection & Reflected XSS in Visual Form Builder 2.8.2 (WordPress Plugin)

2015-05-15 Arbitrary File Override & Reflected XSS in My Calendar 2.3.29 (WordPress Plugin)

2015-05-15 Multiple Reflected XSS in Anti-Malware and Brute-Force Security by ELI (WordPress Plugin)

2015-03-29 Bypass CSRF Protection via XSS