Exploitdb Exploits

EIP-2026-109890 EXPLOITDB text VERIFIED

Netquery 3.1 - 'submit.php?portnum' Cross-Site Scripting

by rgod

View

EIP-2026-109889 EXPLOITDB text VERIFIED

Netquery 3.1 - 'portlist.php?portnum' Cross-Site Scripting

by rgod

View

EIP-2026-109888 EXPLOITDB text VERIFIED

Netquery 3.1 - 'nqports2.php' Multiple Cross-Site Scripting Vulnerabilities

by rgod

View

EIP-2026-109887 EXPLOITDB text VERIFIED

Netquery 3.1 - 'nqports.php?step' Cross-Site Scripting

by rgod

View

EIP-2026-109886 EXPLOITDB text VERIFIED

Netquery 3.1 - 'nqgeoip2.php' Multiple Cross-Site Scripting Vulnerabilities

by rgod

View

EIP-2026-109885 EXPLOITDB text VERIFIED

Netquery 3.1 - 'nqgeoip.php?step' Cross-Site Scripting

by rgod

View

EIP-2026-105280 EXPLOITDB text VERIFIED

Atomic Photo Album 0.x/1.0 - 'Apa_PHPInclude.INC.php' Remote File Inclusion

by lwdz

View

EIP-2026-103820 EXPLOITDB text VERIFIED

vim 6.3 < 6.3.082 - 'modlines' Local Command Execution

by Georgi Guninski

View

EIP-2026-103216 EXPLOITDB text VERIFIED

sap internet graphics server 6.40 - Directory Traversal

by Martin O'Neal

View

EIP-2026-101260 EXPLOITDB text VERIFIED

ECI Telecom B-FOCuS Router 312+ - Unauthorized Access

by d.is.evil

View

EIP-2026-106149 EXPLOITDB text VERIFIED

Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities

by Christopher Kunz

View

EIP-2026-105270 EXPLOITDB text VERIFIED

Asn Guestbook 1.5 - 'header.php?version' Cross-Site Scripting

by rgod

View

EIP-2026-105269 EXPLOITDB text VERIFIED

Asn Guestbook 1.5 - 'footer.php?version' Cross-Site Scripting

by rgod

View

EIP-2026-111607 EXPLOITDB text VERIFIED

Pyrox Search 1.0.5 - 'Newsearch.php' Whatdoreplace Cross-Site Scripting

by rgod

View

CVE-2005-2383 EXPLOITDB text VERIFIED

PHPNews 1.2.5 - SQL Injection via User Parameter

SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.

by GHC

View

CVE-2005-2455 EXPLOITDB text VERIFIED

Greasemonkey <0.3.5 - Info Disclosure

Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.

by Mark Pilgrim

View

EIP-2026-107189 EXPLOITDB text VERIFIED

Form Sender 1.0 - 'Processform.php3?Failed' Cross-Site Scripting

by rgod

View

EIP-2026-107078 EXPLOITDB text VERIFIED

FForm Sender 1.0 - 'Processform.php3?Name' Cross-Site Scripting

by rgod

View

EIP-2026-104039 EXPLOITDB text VERIFIED

Oracle Reports Server 6.0.8/9.0.x - XML File Disclosure

by Alexander Kornbrust

View

EIP-2026-104038 EXPLOITDB text VERIFIED

Oracle Reports Server 6.0.8/9.0.x - Unauthorized Report Execution

by Alexander Kornbrust

View

EIP-2026-104037 EXPLOITDB text VERIFIED

Oracle Reports Server 6.0.8/9.0.x - Arbitrary File Disclosure

by Alexander Kornbrust

View

EIP-2026-104036 EXPLOITDB text VERIFIED

Oracle Reports Server 10g 9.0.2 - Multiple Cross-Site Scripting Vulnerabilities

by Alexander Kornbrust

View

EIP-2026-104033 EXPLOITDB text VERIFIED

Oracle Forms 6i/9i/4.5.10/5.0/6.0.8/10g Services - Unauthorized Form Execution

by Alexander Kornbrust

View

EIP-2026-112625 EXPLOITDB text VERIFIED

tForum b0.9 - 'member.php' Cross-Site Scripting

by wannacut

View

CVE-2005-2330 EXPLOITDB text VERIFIED

osCommerce 2.2 - Directory Traversal via Readme File Parameter

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.

by Andrew Hunter

View