OSVDB: Open Sourced Vulnerability Database

Creditee: L0n3ly-H34rT

Known Contact Information:

(as of 2011-04-25)
(as of 2012-07-31)

Known Affiliations:

sE3c (as of 2011-04-25)

Disclosed Vulnerabilities (48):

Disc. Date	OSVDB ID	Title
2013-02-26	90628	Rix4Web Portal add-site.php dir_link Parameter SQL Injection
2013-02-07	89983	Site Go /index.php Multiple Parameter XSS
2013-02-07	89982	Site Go /site-go/admin/include/phpinfo.php Direct Request Information Disclosure
2013-02-07	89964	Site Go /site-go/admin/edit_config/index.php idc Parameter Traversal Arbitrary File Access
2013-02-07	89965	Site Go /site-go/admin/extra/visitors/index.php idv Parameter Traversal Arbitrary File Access
2013-02-07	89966	Site Go /site-go/admin/extra/stylemanager/index.php ids Parameter Traversal Arbitrary File Access
2013-02-07	89967	Site Go /site-go/admin/extra/site_reports/index.php idc Parameter Traversal Arbitrary File Access
2013-02-07	89968	Site Go /site-go/admin/extra/my_tools/index.php idt Parameter Traversal Arbitrary File Access
2013-02-07	89969	Site Go /site-go/admin/extra/my_account/index.php idm Parameter Traversal Arbitrary File Access
2013-02-07	89970	Site Go /site-go/admin/extra/mysql/index.php idm Parameter Traversal Arbitrary File Access
2013-02-07	89971	Site Go /site-go/admin/extra/moderators/index.php idm Parameter Traversal Arbitrary File Access
2013-02-07	89972	Site Go /site-go/admin/extra/mainlinks/index.php idl Parameter Traversal Arbitrary File Access
2013-02-07	89973	Site Go /site-go/admin/extra/linksmanager/index.php idl Parameter Traversal Arbitrary File Access
2013-02-07	89974	Site Go /site-go/admin/extra/ipdenymanager/index.php idm Parameter Traversal Arbitrary File Access
2013-02-07	89975	Site Go /site-go/admin/extra/filesmanager/index.php idf Parameter Traversal Arbitrary File Access
2013-02-07	89976	Site Go /site-go/admin/extra/feedout/index.php idf Parameter Traversal Arbitrary File Access
2013-02-07	89977	Site Go /site-go/admin/extra/contacts/index.php idc Parameter Traversal Arbitrary File Access
2013-02-07	89978	Site Go /site-go/admin/extra/backup/index.php idb Parameter Traversal Arbitrary File Access
2013-02-07	89979	Site Go /index.php style_name Parameter Traversal Arbitrary File Access
2013-02-07	89980	Site Go /site-go/admin/extra/contacts/DownloadMailAttach.php file Parameter Traversal Arbitrary File Access
2013-02-07	89981	Site Go /site-go/admin/extra/StyleManager/EditFile.php OpenFolder Parameter Traversal Arbitrary File Access
2013-02-05	89907	ezStats Multiple Product /admin/apitest.php info Parameter Information Disclosure
2013-02-05	89906	ezStats for Battlefield 3 /ezStats2/compare.php Multiple Parameter XSS
2013-02-05	89905	ezStats Multiple Product stylesheets/style.php files Parameter Traversal Arbitrary File Access
2012-10-15	86397	PBBoard engine/Engine.class.php PowerBB_username Cookie SQL Injection
2012-10-15	86398	PBBoard engine/Engine.class.php PowerBB_username Cookie XSS
2012-10-04	86996	phpMyChat plus/users_popuph.php LastCheck Parameter SQL Injection
2012-10-04	86995	phpMyChat plus/input.php U Parameter XSS
2012-10-04	86994	phpMyChat plus/users_popuph.php LastCheck Parameter XSS
2012-10-04	86993	phpMyChat plus/install/old/install.php ChatPath Parameter Remote File Inclusion
2012-09-26	86675	ViArt Shop Evaluation /admin/admin_header.php root_folder_path Parameter Remote File Inclusion
2012-09-26	86674	ViArt Shop Evaluation /includes/previews_functions.php root_folder_path Parameter Remote File Inclusion
2012-09-26	86673	ViArt Shop Evaluation /includes/ajax_list_tree.php root_folder_path Parameter Remote File Inclusion
2012-09-20	85681	Manhali includes/download.php f Parameter Traversal Arbitrary File Access
2012-09-17	85557	LuxCal Web Calendar lcaldbc.dat Direct Request Encrypted Information Disclosure
2012-09-17	85555	LuxCal Web Calendar dloader.php fName Parameter Traversal Arbitrary File Access
2012-09-17	85556	LuxCal Web Calendar index.php cD Parameter XSS
2012-09-17	85558	LuxCal Web Calendar pages/phpinfo.php Direct Request Information Disclosure
2012-09-10	85488	Akcms Predictable Name Log File Information Disclosure
2012-09-10	85972	Site Go CMS site-go/style/green/get_templet.php MyStyle[StylePath] Parameter Remote File Inclusion
2012-09-04	85931	Support4Arabs Pages pages.php id Parameter SQL Injection
2012-09-04	85932	Support4Arabs Pages categories.php id Parameter SQL Injection
2012-09-04	85933	Support4Arabs Pages news.php id Parameter SQL Injection
2012-07-31	84425	Limny index.php q Parameter escape() Function SQL Injection
2012-07-18	84657	ProQuiz functions.php Multiple Parameter SQL Injection
2012-07-18	84655	ProQuiz my_account.php page Parameter Remote File Inclusion
2012-07-18	84656	ProQuiz my_account.php instid Parameter SQL Injection
2011-04-25	86985	phpMyChat plus/install/old/install.php Multiple Parameter Traversal Local File Inclusion

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.