Text Exploits
31,386 exploits tracked across all sources.
httpdasm 0.92 - Unauthenticated Path Traversal via URL-Encoded Backslashes
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory.
by John Leitch
QuickPHP Web Server 1.9.1 - Directory Traversal
by John Leitch
WordPress Core 3.0.3 - Persistent Cross-Site Scripting (Internet Explorer 6/7 / NS8.1)
by Saif
News Script PHP Pro - 'FCKeditor' Arbitrary File Upload
by Net.Edit0r
LoveCMS 1.6.2 - Cross-Site Request Forgery / Code Injection
by hiphop
LightNEasy 3.2.2 - Multiple Vulnerabilities
by High-Tech Bridge SA
Discovery TorrentTrader 2.6 - Multiple Vulnerabilities
by EsS4ndre
HotWeb Scripts HotWeb Rentals - 'PageId' SQL Injection
by non customers
Coppermine Photo Gallery <1.5.10 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.
by waraxe
Web@all 1.1 - Remote Admin Settings Change
by Giuseppe D'Inverno
LiveZilla 3.2.0.2 - Cross-Site Scripting via livezilla Parameter in server.php
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.
by Ulisses Castro
Sigma Portal - 'ShowObjectPicture.aspx' Denial of Service
by Pouya Daneshmand
CruxCMS 3.0 - Multiple Input Validation Vulnerabilities
by ToXiC
Vacation Rental Script 4.0 - Cross-Site Request Forgery
by OnurTURKESHAN
By Source