Exploitdb Exploits
31,394 exploits tracked across all sources.
allinta < 2.3.2 - Cross-Site Scripting via FAQ or Search Parameters
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp.
by r0t3d3Vil
allinta < 2.3.2 - Cross-Site Scripting via FAQ or Search Parameters
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery parameter to search.asp.
by r0t3d3Vil
acidcat <= 2.1.13 - SQL Injection via ID Parameter
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.
by admin@hamid.ir
acidcat <= 2.1.13 - Unauthenticated Sensitive Information Exposure via Database File Access
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb.
by admin@hamid.ir
Round Cube Webmail 0.1 -20051021 - Full Path Disclosure
by king_purba
PHP Arena paFileDB Extreme Edition <RC 5 - SQL Injection
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter.
by r0t3d3Vil
iHTML Merchant Mall - SQL Injection
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters.
by r0t3d3Vil
iHTML Merchant Version 2 Pro - SQL Injection
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters.
by r0t3d3Vil
ezDatabase < 2.1.2 - Directory Traversal via p Parameter
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter.
by r0t3d3Vil
ezDatabase < 2.1.2 - SQL Injection via db_id Parameter
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter.
by r0t3d3Vil
Webglimpse <= 2.14.1 - Cross-Site Scripting via ID Parameter
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
by r0t3d3Vil
Michael Arndt WebCal 1.11-3.04 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.
by Stan Bubrouski
ScareCrow < 2.13 - Cross-Site Scripting via Forum or User Parameter
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.
by r0t3d3Vil
ScareCrow < 2.13 - Cross-Site Scripting via Forum or User Parameter
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.
by r0t3d3Vil
ScareCrow < 2.13 - Cross-Site Scripting via Forum or User Parameter
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3) the user parameter to profile.cgi.
by r0t3d3Vil
Binary Board System < 0.2.5 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl.
by r0t3d3Vil
Binary Board System < 0.2.5 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl.
by r0t3d3Vil
Binary Board System < 0.2.5 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl.
by r0t3d3Vil
TML CMS 0.5 - SQL Injection via Index.php ID Parameter
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by X1ngBox
TML CMS 0.5 - Cross-Site Scripting via Form Parameter
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter.
by X1ngBox
MarmaraWeb E-commerce - Remote File Inclusion via Page Parameter
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php.
by B3g0k
marmaraweb_e-commerce - Cross-Site Scripting via Page Parameter
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287.
by B3g0k
dcscripts dcforum - Cross-Site Scripting via dcboard.php Page Parameter
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.
by r0t3d3Vil
ECW-Cart < 2.03 - Cross-Site Scripting via kword, max, min, comp, or f Parameters
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters.
by r0t3d3Vil
SiteNet BBS < 2.0 - Cross-Site Scripting via netboardr.cgi and search.cgi Parameters
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pg, (2) tid, (3) cid, and (4) fid parameters to netboardr.cgi, or (5) cid parameter to search.cgi.
by r0t3d3Vil
By Source