Text Exploits
31,386 exploits tracked across all sources.
Angel Learning Management System 7.3 - 'pdaview.asp' Cross-Site Scripting
by Wesley Kerfoot
Adobe Reader and Acrobat - Remote Code Execution via Crafted PDF Document
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.
by scup
SweetRice CMS < 0.6.7.1 - Unauthenticated Password Reset via Email Parameter
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.
by High-Tech Bridge SA
eoCMS 0.9.04 - Multiple Vulnerabilities
by High-Tech Bridge SA
Avira Premium Security Suite - 'NtCreateKey' Race Condition
by Nikita Tarakanov
eLouai's Force Download Script - Arbitrary Local File Download
by v1R00Z
digiSHOP 2.0.2 - SQL Injection via cart.php id Parameter
SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1.
by Silic0n
Cisco Unified Communications Manager <8 - Command Injection
/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and CSCti74930.
by Knud Erik Hjgaard
Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting
by High-Tech Bridge SA
OnlineTechTools OWOS Professional Edition 2.10 - SQL Injection via Password Parameter
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information.
by VSN
MemHT Portal 4.0.1 - Persistent Cross-Site Scripting
by High-Tech Bridge SA
Kandidat CMS 1.4.2 - Persistent Cross-Site Scripting
by High-Tech Bridge SA
Apache Shiro < 1.1.0 and JSecurity 0.9.x - Path Traversal via URI Path Bypass
Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI.
by Luke Taylor
libfuse < 2.8.5 - Unauthenticated Arbitrary Filesystem Unmount via Symlink Attack
FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.
by halfdog
Site2Nite Vacation Rental Listings - SQL Injection via detail.asp ID Parameter
SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.
by L0rd CrusAd3r
Site2Nite Business e-Listings - SQL Injection via ID Parameter
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.
by L0rd CrusAd3r
OnlineTechTools OWOS Professional Edition 2.10 - SQL Injection via Password Parameter
SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information.
by L0rd CrusAd3r
Digger Solutions NewsLetter Open Source - SQL Injection
by L0rd CrusAd3r
By Source