Text Exploits
31,386 exploits tracked across all sources.
PHPJunkYard GBook 1.6/1.7 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Samba 3.x < 3.5.10 - Cross-Site Request Forgery in SWAT
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
by Narendra Shinde
Safari < 5.0.6 - Remote Code Execution via WebKit Memory Corruption
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
by Abysssec
Support Incident Tracker < 3.64 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
by Yuri Goltsev
Support Incident Tracker < 3.64 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
by Yuri Goltsev
Support Incident Tracker < 3.64 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
by Yuri Goltsev
Support Incident Tracker < 3.64 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
by Yuri Goltsev
OpenX Ad Server 2.8.7 - Cross-Site Request Forgery
by Narendra Shinde
ManageEngine ServiceDesk Plus 8.0.0 Build 8013 - Improper User Privileges
by Narendra Shinde
Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection
by Lazmania61
Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities
by Gjoko Krstic
Joomla! Component com_virtualmoney 1.5 - SQL Injection
by FL0RiX
CobraScripts Trading Marketplace Script - 'cid' SQL Injection
by Ehsan_Hp200
Safari < 5.0.6 - Remote Code Execution via WebKit Memory Corruption
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
by Nikita Tarakanov
vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection
by fb1h2s
Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery
by Crazy_Hacker
Tiki Wiki CMS/Groupware < 7.0 - Cross-Site Scripting via AJAX Parameter
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
by High-Tech Bridge SA
CVSS 6.1
Joomla! Component com_rsappt_pro2 - Local File Inclusion
by Don Tukulesto
Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities
by YGN Ethical Hacker Group
By Source