Text Exploits
31,386 exploits tracked across all sources.
Techno Dreams Articles & Papers Package 2.0 - 'ArticlesTablelist.asp' SQL Injection
by R4dc0re
Techno Dreams Job Career Package 3.0 - SQL Injection
SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter.
by R4dc0re
Techno Dreams (T-Dreams) Cars Ads Package 2.0 - SQL Injection
SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.
by R4dc0re
Dejcom Market CMS - 'showbrand.aspx' SQL Injection
by Mormoroth
ASPSiteWare Contact Directory 1.0 - SQL Injection
by R4dc0re
Alguest 1.1 - Multiple Cookie Authentication Bypass Vulnerabilities
by Aliaksandr Hartsuyeu
Easy Travel Portal 2 - 'travelbycountry.asp' SQL Injection
by Ulrik Persson
DotNetNuke 5.05.01 and 5.06.00 - Cross-Site Scripting via __VIEWSTATE Parameter
Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information.
by Richard Brain
ProFTPD 1.3.3c - Unauthenticated Remote Code Execution via Hidden FTP Command
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.
by anonymous
CVSS 9.8
Joomla! Component Annuaire - 'index.php?id' SQL Injection
by Ashiyane Digital Security Team
etomite 1.1 - Multiple Vulnerabilities
by High-Tech Bridge SA
Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Softwebs Nepal Ananda Real Estate 3.4 - SQL Injection
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.
by underground-stockholm.com
BugTracker.NET < 3.4.5 - Authenticated Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx. NOTE: some of these details are obtained from third party information.
by Core Security
Brunetton LittlePhpGallery 1.0.2 - Path Traversal via Repertoire Parameter
Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// (dot dot slash slash) in the repertoire parameter.
by kire bozorge khavarmian
By Source