Text Exploits
31,386 exploits tracked across all sources.
phpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure
by High-Tech Bridge SA
PHP MicroCMS 1.0.1 - Cross-Site Request Forgery / Cross-Site Scripting
by High-Tech Bridge SA
PHP MicroCMS 1.0.1 - 'page_text' Cross-Site Scripting
by High-Tech Bridge SA
Phenotype CMS 3.0 - SQL Injection via Crafted URI
SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html. NOTE: some of these details are obtained from third party information.
by High-Tech Bridge SA
Joomla com_search 1.0.x-1.0.15 - Cross-Site Scripting via Ordering Parameter
Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php.
by Aung Khant
F3Site 2011 alfa 1 - Cross-Site Scripting / Cross-Site Request Forgery
by High-Tech Bridge SA
Openfire 3.6.4 - Multiple Cross-Site Request Forgery Vulnerabilities
by Riyaz Ahemed Walikar
Lexmark X651de - Printer Ready Message Value HTML Injection
by dave b
WikLink 0.1.3 - 'getURL.php' SQL Injection
by Aliaksandr Hartsuyeu
Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities
by Walikar Riyaz Ahemed Dawalmalik
BlogEngine.NET 1.6 - Directory Traversal / Information Disclosure
by Deniz Cevik
WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting
by High-Tech Bridge SA
OpenLDAP 2.4.x < 2.4.24 - Denial of Service via Empty OldDN in MODRDN Operation
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.
by Serge Dubrouski
Gallarific PHP Photo Gallery script 2.1 - SQL Injection via gallery.php id Parameter
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter.
by AtT4CKxT3rR0r1ST
phpb2b < 4.1 - Cross-Site Scripting via list.php q Parameter
Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action.
by H4ckCity Security Team
Apache Axis2 - Remote Code Execution via Default Admin Credentials
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.
by rgod
By Source