Exploitdb Exploits
31,339 exploits tracked across all sources.
MGB - Multiple Cross-Site Scripting / SQL Injections
by Stefan Schurtz
Flogr - 'tag' Multiple Cross-Site Scripting Vulnerabilities
by Nafsh
Websitepanel < 1.2.1 - Improper Input Validation
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in ReturnUrl to Default.aspx.
by Anastasios Monachos
Sflog! CMS 1.0 - Authenticated RCE
Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials (admin:secret) and allows authenticated users to upload files via manage.php. The upload mechanism fails to validate file types, enabling attackers to upload a PHP backdoor into a web-accessible directory (blogs/download/uploads/). Once uploaded, the file can be executed remotely, resulting in full remote code execution.
by dun
WordPress Plugin SocialFit - 'msg' Cross-Site Scripting
by Sammy FORGIT
WordPress Plugin Knews Multilingual Newsletters - Cross-Site Scripting
by Sammy FORGIT
WordPress Plugin church_admin - 'id' Cross-Site Scripting
by Sammy FORGIT
Valarsoft Webmatic - SQL Injection
SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
by High-Tech Bridge SA
Event Script PHP 1.1 CMS - Multiple Vulnerabilities
by Vulnerability-Lab
Org.apache.sling.servlets.post < 2.1.0 - Access Control
The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP request.
by IOactive
WordPress Plugin PHPFreeChat - 'url' Cross-Site Scripting
by Sammy FORGIT
Guestbook Scripts PHP 1.5 - Multiple Vulnerabilities
by Vulnerability-Lab
Freeside SelfService CGI/API 2.3.3 - Multiple Vulnerabilities
by Vulnerability-Lab
.NET Framework - Tilde Character Denial of Service
by Soroush Dalili
WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection
by Chris Kellum
Classified Ads Script PHP - 'admin.php' Multiple SQL Injections
by snup
Photodex ProShow Producer <5.0.3256 - Buffer Overflow
Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in the installation directory, the application fails to properly validate its contents, leading to a buffer overflow when the file is parsed during startup. Exploitation requires local access to place the file and user interaction to launch the application.
by Julien Ahrens
WordPress Plugin custom tables - 'key' Cross-Site Scripting
by Sammy FORGIT
PHP MBB - Cross-Site Scripting / SQL Injection
by TheCyberNuxbie
gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting
by Carlos Mario Penagos Hollmann
By Source