Text Exploits
31,386 exploits tracked across all sources.
BoutikOne - 'rss_top10.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_promo.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_news.php?lang' SQL Injection
by cdx.security
BoutikOne - 'rss_flash.php?lang' SQL Injection
by cdx.security
BoutikOne - 'categorie.php?path' SQL Injection
by cdx.security
Trend Micro WebReputation API 10.5 - URI SecURIty Bypass
by DcLabs Security Research Group
SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities
by Hoyt LLC Research
Constructr CMS 3.03 - Multiple Remote Vulnerabilities
by LiquidWorm
Oracle WebLogic Server Servlet Container - Confidentiality and Integrity Impact
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.
by Roberto Suggi Liverani
SmarterStats 6.0 - Multiple Vulnerabilities
by Hoyt LLC Research
WikiWig 5.01 - Cross-Site Scripting via SpellChecker Module Parameters
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.
by John Leitch
WordPress Plugin Lazyest Gallery 1.0.26 - 'image' Cross-Site Scripting
by High-Tech Bridge SA
Wikiwig 5.01 - Cross-Site Scripting / HTML Injection
by AutoSec Tools
PHP < 5.3.6 - Denial of Service via NumberFormatter::setSymbol Invalid Argument
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
by thoger
Cosmoshop 10.05.00 - Multiple Cross-Site Scripting / SQL Injections
by High-Tech Bridge SA
SmarterMail 7.1.3876 - Path Traversal
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter.
by Hoyt LLC Research
Safari < 5.0.4 - Same Origin Policy Bypass via WebKit Window Functionality
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
by Aaron Sigel
recordpress 0.3.1 - Multiple Vulnerabilities
by Khashayar Fereidani
By Source