BugSearch is an information portal focused on applications security, web oriented and not. We offer our services to disclose our registered users on security alerts found on the net, in order to warn them as soon as possible on bugs, system flaws, exploits and threats afflicting applications and possible patches.

New Feature: Post New Exploit

Register now to start receiving our security alerts of your favourite applications or try our new Android App which will keep you updated everywhere you are!


Last Advisories
Quick.Cart <= 2.0 (actions_client-gallery.php) Local File Include Exploit13-11-2006
Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)13-11-2006
D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)13-11-2006
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit13-11-2006
Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability13-11-2006
Property Pro 1.0 (vir_Login.asp) Remote Login Bypass Vulnerability13-11-2006
Phpjobscheduler 3.0 (installed_config_file) File Include Vulnerabilities13-11-2006
PHPWind <= 5.0.1 (AdminUser) Remote Blind SQL Injection Exploit12-11-2006
Rama CMS <= 0.68 (Cookie: lang) Local File Include Exploit12-11-2006
Munch Pro 1.0 (switch.asp) Remote SQL Injection Exploit12-11-2006
ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit12-11-2006
UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability12-11-2006
USupport 1.0 (detail.asp) Remote SQL Injection Vulnerability12-11-2006
UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability12-11-2006
CMSmelborp Beta (user_standard.php) Remote File Include Exploit12-11-2006
StoryStream 4.0 (baseDir) Remote File Include Vulnerabilities12-11-2006
NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit11-11-2006
NuRems 1.0 (propertysdetails.asp) Remote SQL Injection Exploit11-11-2006
NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability11-11-2006
NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit11-11-2006
phpwcms <= 1.2.6 (Cookie: wcs_user_lang) Local File Include Exploit11-11-2006
MS Internet Explorer 6-7 (XML Core Services) Remote Code Exec Exploit 210-11-2006
EncapsCMS 0.3.6 (core-core.php) Remote File Include Vulnerability10-11-2006
BrewBlogger 1.3.1 (printLog.php) Remote SQL Injection Vulnerability10-11-2006
WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability10-11-2006
MS Internet Explorer 6-7 (XML Core Services) Remote Code Exec Exploit 310-11-2006
LetterIt v2 (inc-session.php) Remote File Include Vulnerability09-11-2006
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability09-11-2006
AspPired2Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit09-11-2006
MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability09-11-2006