Exploitdb Exploits
31,344 exploits tracked across all sources.
Wikiwig - XSS
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.
by AutoSec Tools
pointter PHP content management system 1.2 - Multiple Vulnerabilities
by LiquidWorm
LotusCMS 3.0.3 - Multiple Vulnerabilities
by High-Tech Bridge SA
Sugarcrm < 6.1.2 - Improper Input Validation
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.
by RedTeam Pentesting GmbH
BoutikOne - 'search.php' Multiple SQL Injections
by cdx.security
BoutikOne - 'rss_top10.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_promo.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_news.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_flash.php?lang' SQL Injection
by cdx.security
BoutikOne - 'categorie.php?path' SQL Injection
by cdx.security
Trend Micro WebReputation API 10.5 - URI SecURIty Bypass
by DcLabs Security Research Group
SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities
by Hoyt LLC Research
Constructr CMS 3.03 - Multiple Remote Vulnerabilities
by LiquidWorm
Oracle WebLogic Server - Unknown Vuln
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
by Roberto Suggi Liverani
SmarterStats 6.0 - Multiple Vulnerabilities
by Hoyt LLC Research
Wikiwig - XSS
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.
by John Leitch
WordPress Plugin Lazyest Gallery 1.0.26 - 'image' Cross-Site Scripting
by High-Tech Bridge SA
Wikiwig 5.01 - Cross-Site Scripting / HTML Injection
by AutoSec Tools
By Source