Exploitdb Exploits
31,394 exploits tracked across all sources.
Easy Forum 2.5 - Cross-Site Scripting via Image Variable
Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable.
by Aliaksandr Hartsuyeu
CuteNews 1.4.1 - Cross-Site Scripting via Query String to index.php
Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query string to index.php.
by Roozbeh Afrasiabi
Multiple Routers - 'IRC Request' Disconnect Denial of Service
by Ryan Meyer
Total Ecommerce 1.0 - SQL Injection
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE.
by nukedx
Aztek Forum 4.0 - Information Disclosure via msg Parameter SQL Error
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection.
by lorenzo
Aztek Forum 4.0 - Stored Cross-Site Scripting via Message Body
Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message.
by lorenzo
vBulletin 3.0.12 and 3.5.3 - Cross-Site Scripting via Email Field
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.
by imei
Jonathan Beckett PluggedOut Nexus 0.1 - SQL Injection via Forgotten Password Email Parameter
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter.
by Hamid Ebadi
NZ Ecommerce - SQL Injection via informationID or ParentCategory Parameter
Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem
by r0t
logit 1.3 and 1.4 - Remote File Inclusion via pg Parameter
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by botan
DCI-Designs Dawaween 1.03 - SQL Injection via id Parameter
SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action.
by sherba
Aztek Forum 4.0 - Information Disclosure via Long Login Value
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message.
by lorenzo
SMartBlog 1.2 - Remote File Inclusion via index.php pg Parameter
PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.
by botan
QwikiWiki 1.4 - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
by Dr^Death
PeHePe Membership Management System 3 - Remote File Inclusion Code Execution
PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uye_klasor parameter, along with a misafir[] parameter that is set to UYE_SEVIYE.
by Yunus Emre Yilmaz
MyBulletinBoard 1.03-1.04 - SQL Injection via Cookie Parameter
SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie. NOTE: 1.04 has also been reported to be affected.
by Devil-00
Mozilla Thunderbird 1.5 - Info Disclosure
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.
by Crashfr
EJ3 TOPo 2.2.178 - Cross-Site Scripting via gTopNombre Parameter
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter.
by Yunus Emre Yilmaz
PHP - Argument Injection via Mail Function Additional Parameters
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.
by ced.clerget@free.fr
PHP - Argument Injection via mb_send_mail Additional Parameters
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.
by ced.clerget@free.fr
DirectContact 0.3b - Directory Traversal via URL
Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
by Donato Ferrante
Alt-N MDaemon 8.1.1 - Denial of Service via IMAP4rev1 Folder Name Format String
Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers.
by Nemesis
Woltlab Burning Board - Cross-Site Scripting via Username Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
by botan
Woltlab Burning Board - Cross-Site Scripting via Username Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS.
by botan
N8cms 1.1-1.2 - Cross-Site Scripting via dir, page_id, and userid Parameters
Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) dir and (2) page_id parameter to (a) index.php and (3) userid parameter to (b) mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injection.
by Liz0ziM
By Source