Text Exploits
31,386 exploits tracked across all sources.
Pandora FMS 3.x - 'index.php' Cross-Site Scripting
by mehdi boukazoula
DV Cart Shopping Cart software - SQL Injection
by Eyup CELIK
Concrete 5.4.1 1 - 'rcID' Cross-Site Scripting
by Aung Khant
OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting
by mr.pr0n
WordPress Plugin UnGallery 1.5.8 - Local File Disclosure
by Miroslav Stampar
Axis Commerce (E-Commerce System) - Persistent Cross-Site Scripting
by Eyup CELIK
PHP < 5.3.7 - Denial of Service via Malloc Return Value Mismanagement
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.
by Maksymilian Arciemowicz
WordPress Plugin Menu Creator 1.1.7 - SQL Injection
by Miroslav Stampar
WordPress Plugin Global Content Blocks 1.2 - SQL Injection
by Miroslav Stampar
WordPress Plugin Forum 1.7.8 - SQL Injection
by Miroslav Stampar
WordPress Plugin DS FAQ 1.3.2 - SQL Injection
by Miroslav Stampar
WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection
by Miroslav Stampar
WordPress Plugin Ajax Gallery 3.0 - SQL Injection
by Miroslav Stampar
MantisBT < 1.2.7 - Cross-Site Scripting via Project ID Parameter
Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the project_id parameter to search.php.
by Net.Edit0r
Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting
by G.R0b1n
WordPress Plugin WP-Stats-Dashboard 2.6.5.1 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
WordPress Plugin Symposium 0.64 - SQL Injection
by Miroslav Stampar
WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection
by Miroslav Stampar
WordPress Plugin File Groups 1.1.2 - SQL Injection
by Miroslav Stampar
By Source