Text Exploits
31,386 exploits tracked across all sources.
PBCS Technology - 'articlenav.php' SQL Injection
by Kalashinkov3
XAMPP 1.7.7 - 'PHP_SELF' Multiple Cross-Site Scripting Vulnerabilities
by Gjoko Krstic
Oracle Database Server - Authenticated Buffer Overflow in XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
by David Maman
WHMCompleteSolution 3.x-4.x - Unauthenticated Path Traversal via Template File Parameter
Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php.
by ZxH-Labs
SmartJobBoard - 'keywords' Cross-Site Scripting
by Mr.PaPaRoSSe
OrderSys <= 1.6.4 - SQL Injection via where_clause Parameter
Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the where_clause parameter to (1) index.php, (2) index_long.php, or (3) index_short.php in ordering/interface_creator/.
by muuratsalo
Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal
by Buherátor
HP Data Protector Media Operations 6.20 - Directory Traversal
by Luigi Auriemma
Microsoft Excel 2003 11.8335.8333 - Use-After-Free
by Luigi Auriemma
WordPress Theme Bonus 1.0 - 's' Cross-Site Scripting
by 3spi0n
WHMCompleteSolution 3.x.x - Path Traversal via clientarea.php templatefile Parameter
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter.
by red virus
Merethis Centreon < 2.3.2 - Authenticated Path Traversal via Command Name Parameter
Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary commands via a .. (dot dot) in the command_name parameter.
by Christophe de la Fuente
Ajax File and Image Manager < 1.1 - Remote Code Execution via PHP Code Injection in data.php
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.
by EgiX
DreamBox DM800 Firmware < 1.6 - Path Traversal via File Parameter
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
by Todor Donev
Web File Browser 0.4b14 - Authenticated Path Traversal via File Parameter
Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f (encoded dot dot) in the file parameter in a download action.
by Sangyun YOO
Serendipity < 1.6 - Cross-Site Scripting in Karma Plugin
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
by Stefan Schurtz
CVSS 6.1
Jara 1.6 - Cross-Site Scripting
Jara 1.6 has an XSS vulnerability
by Or4nG.M4N
CVSS 6.1
CmyDocument - Multiple Cross-Site Scripting Vulnerabilities
by demonalex
BestShopPro - SQL Injection via pokaz_podkat.php str Parameter
SQL injection vulnerability in pokaz_podkat.php in BestShopPro allows remote attackers to execute arbitrary SQL commands via the str parameter.
by CoBRa_21
Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution
by rgod
Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)
by Abysssec
By Source