Exploitdb Exploits
31,344 exploits tracked across all sources.
RunCMS 2.2.2 - 'register.php' SQL Injection
by High-Tech Bridge SA
ZOHO ManageEngine ADSelfService Plus <4.5 Build 4500 - RCE
accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action.
by Core Security
ZOHO ManageEngine ADSelfService Plus <4.5.4500 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action.
by Core Security
Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities
by AutoSec Tools
WordPress Plugin Enable Media Replace - Multiple Vulnerabilities
by Ulf Harnhammar
Web 2.0 Social Network Freunde Community - SQL Injection
by NoNameMT
Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection
by jonieske
Mihantools - SQL Injection
SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by WHITE_DEVIL
Auto Database System 1.0 Infusion Addon - SQL Injection
by Saif
WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection
by High-Tech Bridge SA
ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities
by AutoSec Tools
T-Content Managment System - Multiple Vulnerabilities
by Daniel Godoy
jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection
by Saif El-Sherei
Proftpd < 1.3.3 - Numeric Error
Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.
by kingcope
Multiple Check Point Endpoint Security Products - Information Disclosure
by Rapid7
By Source