Exploitdb Exploits
31,344 exploits tracked across all sources.
Remi Jean Zwii - Path Traversal
Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the set[template][value] parameter.
by Abdi Mohamed
WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities
by Charles Hooper
Tsixm Axdcms - Path Traversal
Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to execute arbitrary code via a .. (dot dot) in the aXconf[default_language] parameter.
by n0n0x
phpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure
by High-Tech Bridge SA
PHP MicroCMS 1.0.1 - Cross-Site Request Forgery / Cross-Site Scripting
by High-Tech Bridge SA
PHP MicroCMS 1.0.1 - 'page_text' Cross-Site Scripting
by High-Tech Bridge SA
Phenotype-cms Phenotype Cms - SQL Injection
SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html. NOTE: some of these details are obtained from third party information.
by High-Tech Bridge SA
Joomla! <1.0.16 - XSS
Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php.
by Aung Khant
F3Site 2011 alfa 1 - Cross-Site Scripting / Cross-Site Request Forgery
by High-Tech Bridge SA
Openfire 3.6.4 - Multiple Cross-Site Request Forgery Vulnerabilities
by Riyaz Ahemed Walikar
Lexmark X651de - Printer Ready Message Value HTML Injection
by dave b
WikLink 0.1.3 - 'getURL.php' SQL Injection
by Aliaksandr Hartsuyeu
Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities
by Walikar Riyaz Ahemed Dawalmalik
BlogEngine.NET 1.6 - Directory Traversal / Information Disclosure
by Deniz Cevik
WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting
by High-Tech Bridge SA
Openldap - Resource Management Error
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.
by Serge Dubrouski
By Source