Exploitdb Exploits

2,814 exploits tracked across all sources.

Sort: Activity Stars
CVE-2008-4449 EXPLOITDB perl VERIFIED
Mirc - Memory Corruption
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
by securfrog
CVE-2006-0123 EXPLOITDB perl VERIFIED
Adn Forum - SQL Injection
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.
by StAkeR
CVE-2008-5666 EXPLOITDB perl VERIFIED
WinFTP FTP Server 2.3.0 - DoS
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.
by Julien Bedard
CVE-2008-4295 EXPLOITDB perl VERIFIED
Microsoft Windows Mobile - Improper Input Validation
Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
by Julien Bedard
CVE-2008-4319 EXPLOITDB perl VERIFIED
Libra File Manager Php Filemanager < 1.18 - Authentication Bypass
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.
by Pepelux
EIP-2026-109105 EXPLOITDB perl VERIFIED
Libra File Manager 1.18/2.0 - 'fileadmin.php' Local File Inclusion
by Pepelux
EIP-2026-109065 EXPLOITDB perl VERIFIED
LanSuite 3.3.2 - 'FCKeditor' Arbitrary File Upload
by Stack
CVE-2008-4244 EXPLOITDB perl VERIFIED
Rianxosencabos Cms - Authentication Bypass
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1.
by ka0x
CVE-2008-5841 EXPLOITDB perl VERIFIED
iGaming <1.5 - SQL Injection
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action.
by StAkeR
CVE-2008-4241 EXPLOITDB perl VERIFIED
CJ Ultra Plus - SQL Injection
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
by -SmoG-
CVE-2008-7014 EXPLOITDB perl VERIFIED
Fhttpd - Denial of Service
fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after the Basic value.
by Jeremy Brown
EIP-2026-104946 EXPLOITDB perl VERIFIED
Add a link 4 - Security Bypass / SQL Injection
by JosS
CVE-2008-4116 EXPLOITDB perl VERIFIED
Apple Itunes - Memory Corruption
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow.
by securfrog
CVE-2008-4203 EXPLOITDB perl VERIFIED
Czaries Czarnews < 1.20 - SQL Injection
SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie.
by StAkeR
EIP-2026-112400 EXPLOITDB perl VERIFIED
Sports Clubs Web Panel 0.0.1 - Remote Game Delete
by ka0x
CVE-2008-4345 EXPLOITDB perl VERIFIED
Webportal Cms < 0.7.4 - SQL Injection
SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.
by StAkeR
EIP-2026-111241 EXPLOITDB perl VERIFIED
PHPWebGallery 1.3.4 - Blind SQL Injection (2)
by ka0x
CVE-2008-6989 EXPLOITDB perl VERIFIED
Ezphotogallery - SQL Injection
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.
by Khashayar Fereidani
CVE-2008-6988 EXPLOITDB perl VERIFIED
Ezphotogallery - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php.
by Khashayar Fereidani
CVE-2008-4492 EXPLOITDB perl VERIFIED
Yourownbux - SQL Injection
SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie.
by Tec-n0x
CVE-2008-4072 EXPLOITDB perl VERIFIED
Phsdev Phsblog - SQL Injection
Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588.
by Khashayar Fereidani
CVE-2008-6990 EXPLOITDB perl VERIFIED
Ezphotogallery - SQL Injection
SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by Khashayar Fereidani
CVE-2008-4380 EXPLOITDB perl VERIFIED
Samsung Dvr Shr2040 - Improper Input Validation
The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.
by Alex Hernandez
CVE-2008-4164 EXPLOITDB perl VERIFIED
Memht Portal < 3.9.0 - Information Disclosure
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
by Ams
CVE-2008-4457 EXPLOITDB perl VERIFIED
Memht Portal < 3.9.0 - SQL Injection
SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php.
by Ams