Exploitdb Exploits
31,344 exploits tracked across all sources.
Newgen OmniDocs - Auth Bypass
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.
by Sohil Garg
Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities
by MustLive
WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) - Regular Subscriber HTML Injection
by knull
S9Y Serendipity Freetag-plugin 3.23 - 'serendipity[tagview]' Cross-Site Scripting
by Stefan Schurtz
Joomla! Component Biitatemplateshop - 'groups' SQL Injection
by BHG Security Group
AdaptCMS 2.0.1 - Cross-Site Scripting / Information Disclosure
by Stefan Schurtz
Web Minimalist 200901 - XSS
Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
by SiteWatch
WordPress Trending <0.2 - XSS
Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
by SiteWatch
WordPress Theme Hybrid 0.9 - 'cpage' Cross-Site Scripting
by SiteWatch
WordPress F8 Lite <4.2.2 - XSS
Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
by SiteWatch
Cover WP <1.6.6 - XSS
Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
by jabdah
WordPress Plugin Link Library 5.2.1 - SQL Injection
by Miroslav Stampar
Adrotate < 3.6.7 - SQL Injection
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).
by Miroslav Stampar
IceWarp WebMail <10.3.3 - SSRF/Info Disclosure
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
by David Kirkpatrick
sunway ForceControl 6.1 sp3 - Multiple Vulnerabilities
by Luigi Auriemma
Zyncro 3.0.1.20 - Social Network Message Menu SQL Injection
by Ferran Pichel Llaquet
Zyncro 3.0.1.20 - Multiple HTML Injection Vulnerabilities
by Ferran Pichel Llaquet
Twiki < 5.0.1 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.
by Mesut Timur
Twiki < 5.0.1 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.
by Mesut Timur
AWStats 6.95/7.0 - 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities
by MustLive
Bluecoat Reporter - Path Traversal
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
by nitr0us
MetaServer RT 3.2.1.450 - Multiple Vulnerabilities
by Luigi Auriemma
By Source