Sécurité Applications Web & Développement Applications Web

Type de vulnerabilité

CVE

Authentication Issues

110

Buffer Errors

740

Code Injection

499

Configuration

Credentials Management

Cross-Site Request Forgery (CSRF)

Cross-Site Scripting (XSS)

817

Cryptographic Issues

Design Error

300

Format String Vulnerability

Information Leak / Disclosure

175

Input Validation

377

Insufficient Information

367

Link Following

Not in CWE

Numeric Errors

143

OS Command Injections

Other

Path Traversal

355

Permissions, Privileges, and Access Control

295

Race Conditions

Resource Management Errors

168

SQL Injection

700

article.asp in Battle Blog 1.25 Build 4 and earli ...

the KeyWordsList function in _includes/inc_routin ...

Telephone Directory 2008, when magic_quotes_gpc i ...

the iJoomla News Portal (com_news_portal) compone ...

index.php in Powie pNews 2.08 and 2.10, when magi ...

comments.php in DCFM Blog 0.9.4 allows remote att ...

index.php in Insanely Simple Blog 0.5 allow remot ...

yBlog 0.2.2.2 allow remote attackers to execute a ...

catalog.php in SMEWeb 1.4b and 1.4f allow remote  ...

the Joomla! Bulletin Board (aka Joo!BB or com_joo ...

admin/journal_change_mask.inc.php in meBiblio 0.4 ...

the Bible Study (com_biblestudy) component before ...

login.php in OtomiGenX 2.2 allows remote attacker ...

index.asp in I-Pos Internet Pay Online Store 1.3  ...

the EXP JoomRadio (com_joomradio) component 1.0 f ...

the acctexp (com_acctexp) component 0.12.x and ea ...

the JooBlog (com_jb2) component 0.1.1 for Joomla! ...

the LifeType (formerly pLog) module for Drupal al ...

the eQuotes (com_equotes) component 0.9.4 for Joo ...

the IDoBlog (com_idoblog) component b24 and earli ...

comment.asp in Battle Blog 1.25 and earlier allow ...

php/leer_comentarios.php in FlashBlog allows remo ...

the EasyBook (com_easybook) component 1.1 for Joo ...

the Simple Shop Galore (com_simpleshop) component ...

PHP Address Book 3.1.5 and earlier allow remote a ...

the JotLoader (com_jotloader) component 1.2.1.a a ...

edCss.php in PowerPhlogger 2.2.5 and earlier allo ...

showpost.php in 427BB 2.3.1 allows remote attacke ...

read.php in PHP Visit Counter 0.4 and earlier all ...

index.php in EasyWay CMS allows remote attackers  ...

BP Blog 6.0 allow remote attackers to execute arb ...

cat.php in HispaH Model Search allows remote atta ...

out.php in YABSoft Advanced Image Hosting (AIH) S ...

Phoenix View CMS Pre Alpha2 and earlier allow rem ...

forum/topic_detail.php in AJ Square aj-hyip (aka  ...

Concepts & Solutions QuickUpCMS allow remote atta ...

read.php in Advanced Links Management (ALM) 1.5.2 ...

members.php in Battle.net Clan Script for PHP 1.5 ...

members.php in YABSoft Mega File Hosting Script ( ...

wp-uploadfile.php in the Upload File plugin for W ...

pwd.asp in Excuse Online allows remote attackers  ...

Simpel Side Weblosning 1 through 4 allow remote a ...

Simpel Side Netbutik 1 through 4 allow remote att ...

PHPhotoalbum 0.5 allow remote attackers to execut ...

index.php in Mambo before 4.6.4, when magic_quote ...

Campus Bulletin Board 3.4 allow remote attackers  ...

adv_cat.php in AbleSpace 1.0 allows remote attack ...

the Library for Frontend Plugins (aka sg_zfelib)  ...

index.php in MAXSITE 1.10 and earlier allows remo ...

index.php in Xomol CMS 1.20071213, when magic_quo ...

phpFix 2.0 allow remote attackers to execute arbi ...

index.php in MxBB (aka MX-System) Portal 2.7.3 al ...

index.php in Netious CMS 0.4 allows remote attack ...

faq.php in vBulletin 3.7.0 Gold allows remote att ...

jokes_category.php in PHP-Jokesite 2.0 allows rem ...

index.php in ComicShout 2.5 and earlier allows re ...

the xsstream-dm (com_xsstream-dm) component 0.01  ...

PHP Classifieds Script allow remote attackers to  ...

the Statistics (aka ke_stats) extension 0.1.2 and ...

Meto Forum 1.1 allow remote attackers to execute  ...

products.php in the Mytipper ZoGo-shop plugin 1.1 ...

Web Group Communication Center (WGCC) 1.0.3 PreRe ...

userreg.php in CaLogic Calendars 1.2.2 allows rem ...

dpage.php in The Real Estate Script allows remote ...

index.php in FicHive 1.0 allows remote attackers  ...

index.php in Web Slider 0.6 allows remote attacke ...

showQAnswer.asp in How2ASP.net Webboard 4.1 allow ...

index.php in FicHive 1.0 allows remote attackers  ...

glossaire.php in ACGV News 0.9.1 allows remote at ...

index.php in SazCart 1.5.1 and earlier, when magi ...

thread.php in AlkalinePHP 0.80.00 beta and earlie ...

TAGWORX.CMS 3.00.02 allow remote attackers to exe ...

play.php in EntertainmentScript 1.4.0 allows remo ...

index.php in Archangel Weblog 0.90.02 and earlier ...

index.php in CMS WebManager-Pro allow remote atta ...

index.php in Turnkey Web Tools SunShop Shopping C ...

IMGallery 2.5, when magic_quotes_gpc is disabled, ...

category.php in 68 Classifieds 4.0.1 allows remot ...

W1L3D4 Philboard 0.5 allow remote attackers to ex ...

Kostenloses Linkmanagementscript allows remote at ...

axengine.exe in Symantec Altiris Deployment Solut ...

browseproject.php in Freelance Auction Script 1.0 ...

detail.php in Feedback and Rating Script 1.0 allo ...

news.php in EMO Realty Manager allows remote atta ...

linking.page.php in Automated Link Exchange Porta ...

Slashdot Like Automated Storytelling Homepage (Sl ...

index.php in gameCMS Lite 1.0 allows remote attac ...

group_posts.php in vShare YouTube Clone 2.6 allow ...

login.php in EQdkp 1.3.2f allows remote attackers ...

index.php in Maian Greeting 2.1 allows remote att ...

index.php in Maian Music 1.1 allows remote attack ...

search.php in Maian Search 1.1 allows remote atta ...

the blogwriter module 2.0 for Miniweb allows remo ...

forums.php in DeluxeBB 1.2 and earlier allows rem ...

the pnEncyclopedia module 0.2.0 and earlier for P ...

viewfaqs.php in AnServ Auction XL allows remote a ...

SMartBlog (aka SMBlog) 1.3 allow remote attackers ...

index.php in SMartBlog (aka SMBlog) 1.3 allows re ...

cpLinks 1.03, when magic_quotes_gpc is disabled,  ...

phpDirectorySource 1.1.06, when magic_quotes_gpc  ...

comments.php in Gamma Scripts BlogMe PHP 1.1 allo ...

VisualShapers ezContents 2.0.0 allow remote attac ...

step1.asp in Systementor PostcardMentor allows re ...

poll_vote.php in iGaming CMS 1.5 allows remote at ...

index.php in Galleristic 1.0, when magic_quotes_g ...

viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows ...

modules/print.asp in fipsASP fipsCMS allows remot ...

info.php in Project Alumni 1.0.9 allows remote at ...

emall/search.php in Pre Shopping Mall 1.1 allows  ...

annuaire.php in PHPEasyData 1.5.4 allows remote a ...

BackLinkSpider allows remote attackers to execute ...

index.php in the FlippingBook (com_flippingbook)  ...

article.php in the Article module for XOOPS allow ...

the Profiler (com_comprofiler) component in Commu ...

search_result.php in Softbiz Web Host Directory S ...

topics.php in the MyArticles 0.6 beta-1 module fo ...

directory.php in Prozilla Hosting Index, when mag ...

bb_admin.php in miniBB 2.2a allows remote attacke ...

jokes.php in YourFreeWorld Jokes Site Script allo ...

browse.videos.php in Joovili 3.1 allows remote at ...

Angelo-Emlak 1.0 allow remote attackers to execut ...

admin/adminindex.php in Turnkey Web Tools SunShop ...

index.php in dream4 Koobi Pro 6.25 allows remote  ...

wp-download_monitor/download.php in the Download  ...

(1) setup_mysql.php and (2) setup_options.php in  ...

PD9 Software MegaBBS 2.2 allow remote attackers t ...

index.php in the pnFlashGames 1.5 through 2.5 mod ...

index.php in the PostSchedule 1.0 module for Post ...

Acidcat CMS 3.4.1 allow remote attackers to execu ...

ss_load.php in the Spreadsheet (wpSS) 0.6 and ear ...

index.php in E-RESERV 2.1 allows remote attackers ...

Cezanne 7 allow remote authenticated users to exe ...

index.php in Voice Of Web AllMyGuests 0.4.1 allow ...

one_day.php in Web Calendar Pro 4.1 and earlier a ...

W1L3D4 Philboard 1.0 allow remote attackers to ex ...

index.php in Classifieds Caffe allows remote atta ...

the Filiale 1.0.4 component for Joomla! allows re ...

commentaires.php in Crazy Goomba 1.2.1 allows rem ...

store_pages/category_list.php in 5th Avenue Shopp ...

listtest.php in YourFreeWorld Apartment Search Sc ...

submit.php in PHP-Fusion 6.01.14 and 6.00.307, wh ...

view.asp in DevWorx BlogWorx 1.0 allows remote at ...

index.php in Lasernet CMS 1.5 and 1.11, when magi ...

includes/system.php in 1024 CMS 1.4.2 beta and ea ...

comment.php in PHP Knowledge Base (PHPKB) 1.5 and ...

functions/display_page.func.php in cpCommerce 1.1 ...

Carbon Communities 2.4 and earlier allow remote a ...

the Jom Comment 2.0 build 345 component for Jooml ...

viewcat.php in XplodPHP AutoTutorials 2.1 and ear ...

index.php in Terong PHP Photo Gallery (aka Advanc ...

account/user/mail.html in Xpoze Pro 3.05 and earl ...

links.php in Scriptsagent.com Links Directory 1.1 ...

getdata.php in PIGMy-SQL 1.4.1 and earlier allows ...

Site Sift Listings allows remote attackers to exe ...

Blog Pixel Motion (aka Blog PixelMotion) allows r ...

project.php in Prozilla Freelancers allows remote ...

view_reviews.php in Prozilla Cheat Script (aka Ch ...

events.php in iScripts SocialWare allows remote a ...

index.php in 724Networks 724CMS 4.01 and earlier  ...

view.php in CoronaMatrix phpAddressBook 2.11 allo ...

cat.php in W2B phpHotResources allows remote atta ...

browse.php in W2B DatingClub (aka Dating Club) al ...

the session handling functionality in bridge/copp ...

upload.php in Coppermine Photo Gallery (CPG) 1.4. ...

BosClassifieds Classified Ads System 3.0 allows r ...

ladder.php in My Gaming Ladder 7.5 and earlier al ...

forum.php in Prozilla Forum allows remote attacke ...

directory.php in Prozilla Entertainers 1.1 and ea ...

editlink.php in Pligg 9.9.0 allows remote attacke ...

_blogadata/include/sond_result.php in Blogator-sc ...

the ConcoursPhoto module for KwsPHP allows remote ...

Integry Systems LiveCart 1.1.1 and earlier allows ...

puarcade.class.php 2.2 and earlier in the Pragmat ...

showpredictionsformatch.php in Prediction Footbal ...

KnowledgeQuest 2.6, when magic_quotes_gpc is disa ...

content/user.php in AuraCMS 2.2.1 and earlier, wh ...

show.php in FaScript FaPhoto 1.0, when magic_quot ...

permalink.php in Desi Quintans Writer's Block CMS ...

dynamicpages/index.php in EasyNews 4.0 allows rem ...

wp-download.php in the WP-Download 1.2 plugin for ...

viewlinks.php in Sava's Link Manager 2.0 allows r ...

default.asp in EfesTECH Video 5.0 allows remote a ...

jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 a ...

index.php in Neat weblog 0.2 allows remote attack ...

CuteFlow 2.10.0 allow remote authenticated users  ...

login.php in CuteFlow 1.5.0 and 2.10.0 allows rem ...

Multiple cross-site scripting (XSS) vulnerabilitie ...

eggBlog before 4.0.1 allows remote attackers to e ...

admin_view_image.php in Smoothflash allows remote ...

ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and po ...

haberoku.php in Serbay Arslanhan Bomba Haber 2.0  ...

The pnVarPrepForStore function in PostNuke 0.764 a ...

the Bernard Gilly AlphaContent (com_alphacontent) ...

account/index.php in TopperMod 2.0, when magic_qu ...

viewcat.php in the Photo 3.02 module for RunCMS a ...

Aeries Browser Interface (ABI) 3.8.3.14 in Eagle  ...

the Datsogallery (com_datsogallery) 1.3.1 module  ...

includes/dynamic_titles.php in PHP-Nuke Platinum  ...

the Matti Kiviharju rekry (aka com_rekry or rekry ...

index.php in Danneo CMS 0.5.1 and earlier, when t ...

index.php in XLPortal 2.2.4 and earlier allows re ...

EfesTech E-Kontör and earlier allows remote  ...

PEEL, possibly 3.x and earlier, allow remote atta ...

inc/module/online.php in Easy-Clanpage 2.2 allows ...

Phorum before 5.2.6, when mysql_use_ft is disable ...

the Detodas Restaurante (com_restaurante) 1.0 com ...

Gallarific Free Edition 1.1 allow remote attacker ...

the sections (Section) module in RunCMS allows re ...

the Joovideo (com_joovideo) 1.0 and 1.2.2 compone ...

links.asp in ASPapp allows remote attackers to ex ...

the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 c ...

album.asp in KAPhotoservice allows remote attacke ...

index.php in the gallery module in Easy-Clanpage  ...

includes/functions/banners-external.php in phpBP  ...

index.php in the WebChat 1.60 module for eXV2 all ...

annonces-p-f.php in the MyAnnonces 1.8 module for ...

index.php in the Viso (Industry Book) 2.04 and 2. ...

online.php in AuraCMS 2.0 through 2.2.1 allows re ...

MyIssuesView.asp in Advanced Data Solutions Virtu ...

the Tutorials 2.1b module for XOOPS allows remote ...

kb.php in Fully Modded phpBB (phpbbfm) 80220 allo ...

viewcat.php in the bamaGalerie (Bama Galerie) 3.0 ...

staticpages/easygallery/index.php in MyioSoft Eas ...

MyioSoft EasyCalendar 4.0tr and earlier allow rem ...

SearchResults.aspx in LaGarde StoreFront 6 before ...

Koobi CMS 4.2.3 through 4.3.0 allows remote attac ...

qtf_ind_search_ov.php in QT-cute QuickTalk Forum  ...

the ZClassifieds module for PHP-Nuke allows remot ...

index.php in Bloo 1.00 and earlier allow remote a ...

the Sudirman Angriawan NukeC30 3.0 module for PHP ...

filebase.php in the Filebase mod for phpBB allows ...

Hadith module for PHP-Nuke allows remote attacker ...

index.php in the eWriting (com_ewriting) 1.2.1 mo ...

archives.php in Gregory Kokanosky (aka Greg's Pla ...

BM Classifieds 20080309 and earlier allow remote  ...

the 4nChat 0.91 module for PHP-Nuke allows remote ...

the Kutub-i Sitte (KutubiSitte) 1.1 module for PH ...

shop/detail.php in Affiliate Market (affmarket) 0 ...

index.php in phpComasy 0.8 allows remote attacker ...

index.php in phpArcadeScript 1.0 through 3.0 RC2  ...

album.php in PHP WEB SCRIPT Dynamic Photo Gallery ...

phpMyAdmin before 2.11.5 accesses $_REQUEST to obt ...

the Garys Cookbook (com_garyscookbook) 1.1.1 and  ...

index.php in Koobi Pro 5.7 allows remote attacker ...

index.php in eazyPortal 1.0 and earlier allows re ...