Exploitdb Exploits

31,394 exploits tracked across all sources.

Sort: Activity Stars
CVE-2005-3515 EXPLOITDB text VERIFIED
chipmunk_topsites - Cross-Site Scripting via recommend.php ID Parameter
Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
by Alireza Hassani
CVE-2005-3514 EXPLOITDB text VERIFIED
chipmunk_forum - Stored Cross-Site Scripting via forumID Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php, (3) index.php, and (4) reply.php.
by Alireza Hassani
CVE-2005-3514 EXPLOITDB text VERIFIED
chipmunk_forum - Stored Cross-Site Scripting via forumID Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to (1) newtopic.php, (2) quote.php, (3) index.php, and (4) reply.php.
by Alireza Hassani
CVE-2005-3516 EXPLOITDB text VERIFIED
chipmunk_directory - Cross-Site Scripting via recommend.php entryID Parameter
Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter.
by Alireza Hassani
CVE-2005-4774 EXPLOITDB text VERIFIED
Xerver 4.17 - Cross-Site Scripting via Null Byte URI Sequence
Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI.
by Ziv Kamir
CVE-2005-3293 EXPLOITDB text VERIFIED
Xerver 4.17 - Directory Traversal and Information Disclosure via Trailing Dot and Null Character
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.
by Ziv Kamir
CVE-2005-3293 EXPLOITDB text VERIFIED
Xerver 4.17 - Directory Traversal and Information Disclosure via Trailing Dot and Null Character
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory contents via a trailing null character.
by Ziv Kamir
EIP-2026-110892 EXPLOITDB text VERIFIED
PHP-Nuke Search Module - 'modules.php' Directory Traversal
by sp3x@securityreason.com
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3520 EXPLOITDB text VERIFIED
MySource 2.14.0 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.php, (2) the stylesheet parameter in edit_table_cell_type_wysiwyg.php, and the bgcolor parameter in (3) insert_table.php, (4) edit_table_cell_props.php, (5) header.php, (6) edit_table_row_props.php, and (7) edit_table_props.php.
by Secunia Research
CVE-2005-3519 EXPLOITDB text VERIFIED
MySource 2.14.0 - Remote PHP File Inclusion via INCLUDE_PATH and SQUIZLIB_PATH Parameters
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH parameters in new_upgrade_functions.php, (3) the INCLUDE_PATH parameter in init_mysource.php, and the PEAR_PATH parameter in (4) Socket.php, (5) Request.php, (6) Mail.php, (7) Date.php, (8) Span.php, (9) mimeDecode.php, and (10) mime.php.
by Secunia Research
CVE-2005-3522 EXPLOITDB text VERIFIED
ManageEngine Netflow Analyzer 4.0.2 - Cross-Site Scripting via grDisp Parameter
Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter.
by why@nsfocus.com
By Source
All 31,394 Writeup 68,122 Exploitdb 50,106 Nomisec 23,319 Github 5,618 Metasploit 3,331 Vulncheck_xdb 1,187 Gitlab 551 Inthewild 514 Gitee 415 Patchapalooza 350
By Language
text 31,394 python 7,602 ruby 6,025 c 3,866 perl 2,849 html 2,092 php 1,348 bash 462 java 418 c++ 346 shell 289 javascript 253 go 93 typescript 32 powershell 30