Exploitdb Exploits

31,394 exploits tracked across all sources.

Sort: Activity Stars
EIP-2026-107173 EXPLOITDB text VERIFIED
Foing 0.x - Remote File Inclusion
by Darkfire
CVE-2006-3061 EXPLOITDB text VERIFIED
five_star_review_script - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.
by Luny
CVE-2006-3061 EXPLOITDB text VERIFIED
five_star_review_script - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.
by Luny
EIP-2026-104945 EXPLOITDB text VERIFIED
Adaptive Website Framework 1.11 - Remote File Inclusion
by Federico Fazzi
CVE-2006-2995 EXPLOITDB text VERIFIED
WebprojectDB <= 0.1.3 - Remote File Inclusion via INCDIR Parameter
Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter in (1) include/nav.php and (2) include/lang.php.
by Kacper
CVE-2006-2998 EXPLOITDB text VERIFIED
QBoard <1.1 - Remote Code Execution
PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter.
by Kacper
CVE-2006-3603 EXPLOITDB text VERIFIED
FlexWATCH Network Camera <= 3.0 - Cross-Site Scripting via index.php URL Parameter
Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.
by Jaime Blasco
CVE-2006-3172 EXPLOITDB text VERIFIED
Content*Builder 0.7.5 - Remote Code Execution via PHP File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php.
by Federico Fazzi
EIP-2026-105336 EXPLOITDB text VERIFIED
AWF CMS 1.11 - 'spaw_root' Remote File Inclusion
by Federico Fazzi
EIP-2026-100417 EXPLOITDB text VERIFIED
MaxiSepet 1.0 - 'link' SQL Injection
by nukedx
EIP-2026-111177 EXPLOITDB text VERIFIED
phpOnDirectory 1.0 - Remote File Inclusion
by Kacper
CVE-2006-2962 EXPLOITDB text VERIFIED
Emergenices Personnel Information System < 2002-09-23 - Remote File Inclusion via phormationdir Parameter
PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter.
by Kacper
CVE-2006-2996 EXPLOITDB text VERIFIED
LoveCompass aePartner - Remote File Inclusion via dir[data] Parameter
PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dir[data] parameter.
by Kacper
CVE-2006-2986 EXPLOITDB text VERIFIED
Baby Katie Media vSCAL/vsREAL 1.0 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.
by Luny
CVE-2006-2986 EXPLOITDB text VERIFIED
Baby Katie Media vSCAL/vsREAL 1.0 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.
by Luny
EIP-2026-100402 EXPLOITDB text VERIFIED
MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities
by Soroush Dalili
CVE-2006-2955 EXPLOITDB text VERIFIED
kaphotoservice < 7.5 - Cross-Site Scripting via newcategory/apage/cat/albumid Parameters
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp.
by r0t
CVE-2006-2955 EXPLOITDB text VERIFIED
kaphotoservice < 7.5 - Cross-Site Scripting via newcategory/apage/cat/albumid Parameters
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp.
by r0t
CVE-2006-2955 EXPLOITDB text VERIFIED
kaphotoservice < 7.5 - Cross-Site Scripting via newcategory/apage/cat/albumid Parameters
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp.
by r0t
CVE-2006-0747 EXPLOITDB text VERIFIED
Freetype < 2.1 - Denial of Service via Integer Underflow in Blue Values Processing
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.
by Josh Bressers
CVE-2006-2982 EXPLOITDB text VERIFIED
Enterprise Timesheet and Payroll Systems <1.1 - RCE
Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in (1) footer.php and (2) admin/footer.php.
by Kacper
CVE-2006-2928 EXPLOITDB text VERIFIED
CMS-Bandits 2.5 - Remote File Inclusion via spaw_root Parameter
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter in (1) dialogs/img.php and (2) dialogs/td.php.
by Federico Fazzi
EIP-2026-105371 EXPLOITDB text VERIFIED
Back-End CMS 0.7.2.1 - 'jpcache.php' Remote File Inclusion
by Federico Fazzi
CVE-2006-2661 EXPLOITDB text VERIFIED
Freetype < 2.2 - Denial of Service via Crafted Font File
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.
by Josh Bressers
CVE-2006-2901 EXPLOITDB text VERIFIED
D-Link DWL-2100ap <2.10na - Info Disclosure
The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords.
by INTRUDERS