Exploitdb Exploits

31,394 exploits tracked across all sources.

Sort: Activity Stars
CVE-2006-1701 EXPLOITDB text VERIFIED
Shadowed Portal < 5.7d2 - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.
by Liz0ziM
CVE-2006-1675 EXPLOITDB text VERIFIED
phpwebgallery 1.4.1 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) category.php, and the (4) slideshow, (5) show_metadata, and (6) start parameters to (b) picture.php, a different vulnerability than CVE-2006-1674.
by Psych0
CVE-2006-1675 EXPLOITDB text VERIFIED
phpwebgallery 1.4.1 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) category.php, and the (4) slideshow, (5) show_metadata, and (6) start parameters to (b) picture.php, a different vulnerability than CVE-2006-1674.
by Psych0
CVE-2006-1713 EXPLOITDB text VERIFIED
phpMyForum 4.0 - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
by Psych0
CVE-2006-1714 EXPLOITDB text VERIFIED
phpMyForum 4.0 - CRLF Injection via Hex-Encoded CRLF Sequences in Type Parameter
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.
by Psych0
CVE-2006-1765 EXPLOITDB text VERIFIED
JBook 1.3 - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
by Psych0
CVE-2006-1494 EXPLOITDB text VERIFIED
PHP 4.4.2 and 5.1.2 - Directory Traversal via tempnam Function
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
by Maksymilian Arciemowicz
CVE-2006-1608 EXPLOITDB text VERIFIED
PHP 4.4.2 and 5.1.2 - Local Arbitrary File Read via compress.zlib:// URI in copy Function
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
by Maksymilian Arciemowicz
EIP-2026-112174 EXPLOITDB text VERIFIED
Sire 2.0 - '/lire.php' Remote File Inclusion / Arbitrary File Upload
by simo64
CVE-2006-1710 EXPLOITDB text VERIFIED
Design Nation DNGuestbook 2.0 - SQL Injection
SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters.
by snatcher
EIP-2026-105320 EXPLOITDB text VERIFIED
autonomous lan party 0.98.1.0 - Remote File Inclusion
by Codexploder
CVE-2006-1673 EXPLOITDB text VERIFIED
Dark_Wizard vBug Tracker <3.5.1 - XSS
Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter.
by r0t
CVE-2006-1679 EXPLOITDB text VERIFIED
Jupiter CMS 1.1.5 - Cross-Site Scripting via Layout Parameter
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php.
by KaDaL-X
CVE-2006-1745 EXPLOITDB text VERIFIED
bitweaver 1.3 - Cross-Site Scripting via Login Error Parameter
Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by KaDaL-X
CVE-2006-1699 EXPLOITDB text VERIFIED
Aweb Banner Generator < 3.0 - Cross-Site Scripting via Banner Parameter
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode.
by benozor77
CVE-2006-0053 EXPLOITDB text VERIFIED
Imager < 0.50 - Denial of Service via JPEG or TGA Image Write to Scalar
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference.
by Kjetil Kjernsmo
CVE-2006-1682 EXPLOITDB text VERIFIED
TalentSoft Web+Shop 5.0 - Cross-Site Scripting via deptname Parameter
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script.
by r0t
CVE-2006-1697 EXPLOITDB text VERIFIED
matt_wright_guestbook < 2.3.1 - Cross-Site Scripting via Your Name, E-Mail, or Comments Fields
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message.
by Liz0ziM
CVE-2006-1661 EXPLOITDB text VERIFIED
skforum < 1.5 - Cross-Site Scripting via areaID, time, and userID Parameters
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.
by r0t
CVE-2006-1661 EXPLOITDB text VERIFIED
skforum < 1.5 - Cross-Site Scripting via areaID, time, and userID Parameters
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.
by r0t
CVE-2006-1661 EXPLOITDB text VERIFIED
skforum < 1.5 - Cross-Site Scripting via areaID, time, and userID Parameters
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.
by r0t
CVE-2006-1755 EXPLOITDB text VERIFIED
MD News 1 - SQL Injection via id Parameter
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Aliaksandr Hartsuyeu
CVE-2006-1676 EXPLOITDB text VERIFIED
MAXdev MDPro <1.076 - SQL Injection
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP.
by king_purba
EIP-2026-105839 EXPLOITDB text VERIFIED
Chucky A. Ivey N.T. 1.1 - 'index.php' Multiple HTML Injection Vulnerabilities
by Aliaksandr Hartsuyeu
CVE-2006-1652 EXPLOITDB text VERIFIED
UltraVNC and tabbed_viewer - Buffer Overflow via Long String on TCP Port 5900
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint.
by Luigi Auriemma