Exploitdb Exploits
31,344 exploits tracked across all sources.
phpcollab 2.5 - Multiple Vulnerabilities
by High-Tech Bridge SA
1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities
by QSecure & Demetris Papapetrou
FiberHome HG-110 - Cross-Site Scripting / Directory Traversal
by Zerial
S40 CMS v0.4.2 - Path Traversal
S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks.
by Osirys
vTiger CRM 5.2.1 - 'vtigerservice.php' Cross-Site Scripting
by AutoSec Tools
eGroupWare 1.8.1 - 'test.php' Cross-Site Scripting
by AutoSec Tools
Omer Portal 3.220060425 - 'arama_islem.asp' Cross-Site Scripting
by kurdish hackers team
QooxDoo 1.3 - XSS
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
by AutoSec Tools
TextPattern 4.2 - 'index.php' Cross-Site Scripting
by kurdish hackers team
Redmine <1.1.1 - XSS
Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information.
by Mesut Timur
greenpants 0.1.7 - Multiple Vulnerabilities
by Ptrace Security
QooxDoo 1.3 - Path Traversal
Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter.
by AutoSec Tools
Dream Vision Technologies Web Portal - SQL Injection
by eXeSoul
WP Custom Pages <0.5.0.1 - Path Traversal
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
by AutoSec Tools
UseBB 1.0.11 - 'admin.php' Local File Inclusion
by High-Tech Bridge SA
Open-emr Openemr - XSS
Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter.
by AutoSec Tools
Eleanor CMS - Cross-Site Scripting / Multiple SQL Injections
by High-Tech Bridge SA
Mark Pilgrim Feedparser < 4.1 - XSS
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
by fazalmajid
Yaws-Wiki 1.88-1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
by Michael Brooks
XOOPS 2.5 - 'banners.php' Multiple Local File Inclusions
by KedAns-Dz
WordPress Plugin WPwizz AdWizz Plugin 1.0 - 'link' Cross-Site Scripting
by John Leitch
Gazelle CMS 1.0 - Cross-Site Scripting / SQL Injection
by kurdish hackers team
By Source