OSVDB: Open Sourced Vulnerability Database

Creditee: the_cyber_nuxbie

Known Contact Information:

(as of 2012-03-28)
(as of 2012-04-04)
(as of 2012-04-09)
(as of 2012-04-24)
(as of 2012-07-02)

Known Affiliations:

Inj3ct0r 1337Team (as of 2012-03-23)

Disclosed Vulnerabilities (61):

Disc. Date	OSVDB ID	Title
2012-09-25	85738	Token Manager Plugin for WordPress wp-admin/admin.php tid Parameter XSS
2012-09-22	85730	Sexy Add Template Plugin for WordPress PHP Code Execution CSRF
2012-09-21	85729	Notices Ticker Plugin for WordPress Notice Addition CSRF
2012-07-02	83526	MBB CMS Admin Addition CSRF
2012-07-02	83525	MBB CMS index.php q Parameter XSS
2012-07-02	83524	MBB CMS index.php q Parameter SQL Injection
2012-06-27	83236	Monstra CMS Arbitrary PHP Code Execution CSRF
2012-06-22	83081	Lokomedia CMS hubungi-aksi.html Multiple Parameter XSS
2012-06-22	83079	Lokomedia CMS Admin Addition CSRF
2012-06-22	83080	Lokomedia CMS adminweb/media.php halaman Parameter XSS
2012-06-19	83106	Balitbang CMS admin/admin.php nip Parameter XSS
2012-06-19	83107	Balitbang CMS member/user.php kd Parameter XSS
2012-06-19	83108	Balitbang CMS Admin Addition CSRF
2012-06-19	83109	Balitbang CMS Multiple Module XSS
2012-04-24	81540	Hispanic Digital Network CMS posts.php topic_id Parameter XSS
2012-04-24	81541	Hispanic Digital Network CMS posts.php topic_id Parameter SQL Injection
2012-04-24	81542	Hispanic Digital Network CMS clasificados.php cat Parameter XSS
2012-04-24	81543	Hispanic Digital Network CMS clasificados.php cat Parameter SQL Injection
2012-04-22	81299	The Dogma Soft CMS news.php Multiple Parameter SQL Injection
2012-04-22	81300	Cox Web shop.php Multiple Parameter SQL Injection
2012-04-22	81301	Net-Shops index.php Multiple Parameter XSS
2012-04-20	81279	Waylu CMS WebApps/products_xx.php id Parameter XSS
2012-04-20	81280	Waylu CMS WebApps/products_xx.php id Parameter SQL Injection
2012-04-20	81281	Trend Joinery subcats.php catkey Parameter SQL Injection
2012-04-20	81282	JA-Programacao CMS lerNoticia.php id Parameter SQL Injection
2012-04-20	81283	JA-Programacao CMS lerNoticia.php id Parameter XSS
2012-04-20	81284	JA-Programacao CMS produtos/ divisao Parameter SQL Injection
2012-04-20	81285	JA-Programacao CMS produtos/ divisao Parameter XSS
2012-04-20	81286	JA-Programacao CMS txtProcurar.php txtProcurar Parameter XSS
2012-04-20	81287	Script-KS CMS index.php Multiple Parameter XSS
2012-04-20	81288	Script-KS CMS index.php Multiple Parameter SQL Injection
2012-04-20	81289	MiPagina CMS validar_buscador_v2.php buscar Parameter XSS
2012-04-09	81087	Tresdepicas noticias_int.php id Parameter SQL Injection
2012-04-09	81088	Tresdepicas noticias_int.php id Parameter XSS
2012-04-09	81089	Tresdepicas testimonios_int.php id Parameter SQL Injection
2012-04-09	81090	Tresdepicas testimonios_int.php id Parameter XSS
2012-04-04	80921	ActivaDigital produtos.php id_categoria Parameter XSS
2012-04-04	80922	ActivaDigital servicos.php Multiple Parameter XSS
2012-04-04	80923	ActivaDigital empresas.php id_empresa Parameter XSS
2012-04-04	80924	CATSHOP Cart viewSector.php id Parameter XSS
2012-04-04	80925	FastWeb2 cat_prod.php category_id Parameter XSS
2012-04-04	80926	FastWeb2 fw2_landpage.php category_id Parameter XSS
2012-04-04	80927	MediaSolusi products/category/ id Parameter XSS
2012-04-04	80928	MediaSolusi products/detail/ id Parameter XSS
2012-04-04	80929	MTDCMS _produits.php id_cat Parameter XSS
2012-04-04	80930	Nor-Rec kategori.php gruppe_id Parameter XSS
2012-04-04	80931	OpenShop gongji_view.php fg_id Parameter XSS
2012-04-04	80933	SriSMS searchviewdetails.php id Parameter XSS
2012-04-04	80934	TopBusinessAdv products2.php pd_id Parameter XSS
2012-04-04	80938	Jogjacamp index.php product_id Parameter XSS
2012-04-04	80932	SolGens matter.php id Parameter XSS
2012-03-31	80914	World Graphics blog-detail.php id_post Parameter SQL Injection
2012-03-31	80916	Anden sal page.php id Parameter SQL Injection
2012-03-30	80791	WebMatter CMS subcategoria.asp id_subcat Parameter SQL Injection
2012-03-30	80792	WebMatter CMS lista_productos.asp id_cat Parameter SQL Injection
2012-03-28	80630	Serido CMS estoque_view.php Id_estoque Parameter SQL Injection
2012-03-28	80625	Vitalogy Web CMS company.php id_cat Parameter SQL Injection
2012-03-24	82315	MediaSolusi Detail Module id Parameter SQL Injection
2012-03-24	82314	MediaSolusi Category Module id Parameter SQL Injection
2012-03-23	82316	LT-Net Solucoes detalha_imovel.php id_imovel Parameter SQL Injection
2012-02-22	79469	DT Register Component for Joomla! index.php list1 Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.