Text Exploits
31,386 exploits tracked across all sources.
GoAhead Webserver 2.18 - Cross-Site Scripting via Group Parameter or URL Parameter
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
by Silent Dream
GoAhead Webserver 2.18 - Cross-Site Scripting via Group Parameter or URL Parameter
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
by Silent Dream
OPC Systems.NET < 4.0 - Denial of Service via Malformed .NET RPC Packet
Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723.
by Luigi Auriemma
atvise webMI2ADS < 2.0.2 - Denial of Service via HTTP Request Validation Bypass
The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service (resource consumption) via a crafted request.
by Luigi Auriemma
Roundcube Webmail 0.3.1 - Cross-Site Request Forgery / SQL Injection
by Smith Falcon
openEngine 2.0 - Multiple Blind SQL Injection Vulnerabilities
by Stefan Schurtz
Userbar plugin 2.2 for MyBB Forum - SQL Injection via image2 Parameter
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter.
by Mario_Vs
Advanced Forum Signatures 2.0.4 - SQL Injection via afs_bar_right Parameter
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.
by Mario_Vs
6KBBS 8.0 build 20101201 - Cross-Site Scripting / Information Disclosure
by labs insight
Joomla! Component com_expedition - 'id' SQL Injection
by BHG Security Center
GotoCode Online Classifieds - Multiple Vulnerabilities
by Nathaniel Carew
NexusPHP 1.5 - SQL Injection via Thanks.php ID Parameter
SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by flyh4t
Time Returns (com_timereturns) 2.0 - SQL Injection via id Parameter
SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php.
by kaMtiEz
BuzzyWall 1.3.2 - 'resolute.php' Information Disclosure
by cr4wl3r
Tsmim Lessons Library - 'show.php' SQL Injection
by M.Jock3R
Active CMS 1.2 - Cross-Site Scripting via Admin Script Mod Parameter
Cross-site scripting (XSS) vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action.
by Stefan Schurtz
By Source