Exploitdb Exploits

31,394 exploits tracked across all sources.

Sort: Activity Stars
EIP-2026-105749 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'set.php?name_ig_array[]' Cross-Site Scripting
by 1dt.w0lf
EIP-2026-105748 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'set.php?name_ig_array[1]' SQL Injection
by 1dt.w0lf
EIP-2026-105747 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'search.php?text_poisk' Cross-Site Scripting
by 1dt.w0lf
EIP-2026-105746 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'reply_in.php' Multiple SQL Injections
by 1dt.w0lf
EIP-2026-105745 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'reply.php?name_ig_array1[1]' SQL Injection
by 1dt.w0lf
EIP-2026-105744 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'reply.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
EIP-2026-105743 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'new.php?name_ig_array1[1]' SQL Injection
by 1dt.w0lf
EIP-2026-105742 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
EIP-2026-105741 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'menu_tema.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
EIP-2026-105740 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'menu_header.php?table_sql' SQL Injection
by 1dt.w0lf
EIP-2026-105739 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'menu_header.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
EIP-2026-105738 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'menu_footer.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
EIP-2026-105737 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'memory.php' Multiple SQL Injections
by 1dt.w0lf
EIP-2026-105736 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'line.php' Multiple SQL Injections
by 1dt.w0lf
EIP-2026-105735 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'in.php' Multiple SQL Injections
by 1dt.w0lf
EIP-2026-105734 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'enter.php' Multiple SQL Injections
by 1dt.w0lf
EIP-2026-105733 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'edit_msg.php?name_ig_array1[1]' SQL Injection
by 1dt.w0lf
EIP-2026-105732 EXPLOITDB text VERIFIED
CarLine Forum Russian Board 4.2 - 'edit_msg.php' Multiple Cross-Site Scripting Vulnerabilities
by 1dt.w0lf
CVE-2005-2046 EXPLOITDB text VERIFIED
DUware DUamazon Pro 3.0-3.1 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
by Dedi Dwianto
CVE-2005-2046 EXPLOITDB text VERIFIED
DUware DUamazon Pro 3.0-3.1 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
by Dedi Dwianto
CVE-2005-2046 EXPLOITDB text VERIFIED
DUware DUamazon Pro 3.0-3.1 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
by Dedi Dwianto
CVE-2005-1250 EXPLOITDB text VERIFIED
IpSwitch WhatsUp Pro 2005 SP1 - SQL Injection
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).
by anonymous
CVE-2005-2199 EXPLOITDB text VERIFIED
PPA web photo gallery 0.5.6 - Remote File Inclusion via config[ppa_root_path]
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.
by Dedi Dwianto
CVE-2005-2046 EXPLOITDB text VERIFIED
DUware DUamazon Pro 3.0-3.1 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
by Dedi Dwianto
CVE-2006-6365 EXPLOITDB text VERIFIED
DUware DUpaypal <3.1 - SQL Injection
SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the iType parameter. NOTE: the iState parameter is already covered by CVE-2005-3976 and the iPro parameter is already covered by CVE-2005-2047.
by Dedi Dwianto
By Source
All 31,394 Writeup 68,154 Exploitdb 50,106 Nomisec 23,322 Github 5,626 Metasploit 3,331 Vulncheck_xdb 1,187 Gitlab 551 Inthewild 514 Gitee 415 Patchapalooza 350
By Language
text 31,394 python 7,602 ruby 6,025 c 3,867 perl 2,849 html 2,093 php 1,348 bash 462 java 418 c++ 347 shell 289 javascript 253 go 93 typescript 32 powershell 30