Text Exploits

31,386 exploits tracked across all sources.

Sort: Activity Stars

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) base_graph_display.php, (5) base_graph_form.php, (6) base_graph_main.php, (7) base_local_rules.php, (8) base_logout.php, (9) base_main.php, (10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.php, (15) base_stat_alerts.php, (16) base_stat_class.php, (17) base_stat_common.php, (18) base_stat_ipaddr.php, (19) base_stat_iplink.php, (20) base_stat_ports.php, (21) base_stat_sensor.php, (22) base_stat_time.php, (23) base_stat_uaddr.php, (24) base_user.php, (25) index.php, (26) admin/base_roleadmin.php, (27) admin/base_useradmin.php, (28) admin/index.php, (29) help/base_setup_help.php, (30) includes/base_action.inc.php, (31) includes/base_cache.inc.php, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_output_html.inc.php, (36) includes/base_output_query.inc.php, (37) includes/base_state_criteria.inc.php, (38) includes/base_state_query.inc.php or (39) setup/base_conf_contents.php; (40) GLOBALS[user_session_path] parameter to includes/base_state_common.inc.php; (41) BASE_Language parameter to setup/base_conf_contents.php; or (42) ado_inc_php parameter to setup/setup2.php.

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

CVE-2012-1199 EXPLOITDB text VERIFIED

Basic Analysis and Security Engine 1.4.5 - Remote Code Execution via PHP File Inclusion

by indoushka

View

EIP-2026-111660 EXPLOITDB text VERIFIED

RabbitWiki - 'title' Cross-Site Scripting

by sonyy

View

EIP-2026-111555 EXPLOITDB text VERIFIED

ProWiki - 'id' Cross-Site Scripting

by sonyy

View

CVE-2012-1225 EXPLOITDB text VERIFIED

Dolibarr < 3.2.0 - Authenticated SQL Injection via Memberslist or Rowid Parameter

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

by Benjamin Kunz Mejri

View

CVE-2012-1226 EXPLOITDB text VERIFIED

Dolibarr CMS 3.2.0 Alpha - Path Traversal & Arbitrary File Read via Document.php or Backtopage Parameter

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.

by Vulnerability-Lab

View

CVE-2012-0865 EXPLOITDB text VERIFIED

CubeCart < 3.0.20 - Open Redirect via switch.php r Parameter or admin/login.php goto Parameter

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) r parameter to switch.php or (2) goto parameter to admin/login.php.

by Aung Khant

View

CVE-2012-0865 EXPLOITDB text VERIFIED

CubeCart < 3.0.20 - Open Redirect via switch.php r Parameter or admin/login.php goto Parameter

by Aung Khant

View

CVE-2012-0865 EXPLOITDB text VERIFIED

CubeCart < 3.0.20 - Open Redirect via switch.php r Parameter or admin/login.php goto Parameter

by Aung Khant

View

EIP-2026-102397 EXPLOITDB text VERIFIED

LxCenter Kloxo 6.1.10 - Multiple HTML Injection Vulnerabilities

by anonymous

View

EIP-2026-101486 EXPLOITDB text VERIFIED

Trendnet Camera (Multiple Products) - Remote Security Bypass

by console-cowboys

View

EIP-2026-116052 EXPLOITDB text

PeerBlock 1.1 - Blue Screen of Death

by shinnai

View

CVE-2011-4367 EXPLOITDB text VERIFIED

Apache MyFaces Core <2.0.12, <2.1.6 - Path Traversal

Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) ln parameter to faces/javax.faces.resource/web.xml or (2) the PATH_INFO to faces/javax.faces.resource/.

by Paul Nicolucci

View

CVE-2012-0200 EXPLOITDB text VERIFIED

IBM solidDB < 6.5.0.8 - Authenticated Denial of Service via SELECT Statement with Redundant WHERE Condition

The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition.

by IBM

View

EIP-2026-107353 EXPLOITDB text

Gazelle CMS 1.0 - Update Statement SQL Injection

by hackme

View

CVE-2012-1047 EXPLOITDB text

Cyberoam Central Console <2.00.2 - Path Traversal

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.

by Vulnerability-Lab

View

By Source

All 31,386

By Language

text 31,386