Exploitdb Exploits
31,344 exploits tracked across all sources.
Drupal Module Cumulus 5.x-1.1/6.x-1.4 - 'tagcloud' Cross-Site Scripting
by MustLive
course registration management system 2.1 - Multiple Vulnerabilities
by AutoSec Tools
Bitweaver 2.8.1 - Persistent Cross-Site Scripting
by lemlajt
WordPress Plugin GD Star Rating 1.9.7 - 'wpfn' Cross-Site Scripting
by High-Tech Bridge SA
Vanilla Forums 2.0.17.x - 'p' Cross-Site Scripting
by Aung Khant
IBM Lotus Sametime - XSS
Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.
by andrew
Battlefield 2/2142 - Packet Null Pointer Dereference Remote Denial of Service
by Luigi Auriemma
iOS SideBooks 1.0 - Directory Traversal
by R3d@l3rt_ Sp@2K_ Sunlight
iOS FtpDisc 1.0 - Directory Traversal
by R3d@l3rt_ Sp@2K_ Sunlight
Woltlab Burning Board 2.3.6 Addon - 'hilfsmittel.php' SQL Injection
by Crazyball
Batavi 1.0 - Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities
by AutoSec Tools
IBM Lotus Sametime - stconf.nsf Cross-Site Scripting
by Dave Daly
IBM Lotus Sametime - XSS
Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.
by Dave Daly
Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting
by Saif El-Sherei
eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting
by Saif El-Sherei
Webmastersite Wsn Guest - SQL Injection
SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.
by Aliaksandr Hartsuyeu
User Photo - Unrestricted File Upload
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.
by ADVtools
CVSS 8.8
By Source