Exploitdb Exploits
31,344 exploits tracked across all sources.
SmarterStats <5.3.3819 - XSS
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
by sqlhacker
SmarterMail 7.1.3876 - Path Traversal
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter.
by sqlhacker
Microsoft Internet Information Server - Memory Corruption
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
by kingcope
Zen Cart 1.3.9f - 'typefilter' Local File Inclusion
by LiquidWorm
Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities
by John Leitch
phpMyShopping 1.0.1505 - Multiple Vulnerabilities
by Metropolis
jCart 1.1 - Multiple Cross-Site Scripting / Cross-Site Request Forgery/Open Redirect Vulnerabilities
by p0deje
Evaria Content Management System 1.1 - File Disclosure
by khayeye shotor
Chipmunk Board 1.3 - SQL Injection
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.
by Shamus
Intellicom Netbiter webSCADA Products - 'read.cgi' Multiple Remote Security Vulnerabilities
by Eugene Salov
JE Guestbook (com_jeguestbook) 1.0 - SQL Injection
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
by Salvatore Fresta
ASPMass Shopping Cart - Arbitrary File Upload / Cross-Site Request Forgery
by Abysssec
Microsoft Office <2008 for Mac - RCE
Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
by Abysssec
webSPELL 4.2.1 - SQL Injection
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
by silent vapor
Pluck CMS 4.6.3 - 'cont1' HTML Injection
by High-Tech Bridge SA
MyPhpAuction 2010 - SQL Injection
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by h4ck3r
MODx Revolution <2.0.2-pl - Path Traversal
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some of these details are obtained from third party information.
by John Leitch
MODx Revolution 2.0.2-pl - XSS
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
by John Leitch
Aleza Portal 1.6 - Insecure SQL Injection / Cookie Handling
by KnocKout
phpMyFAQ <2.6.9 - XSS
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
by Yam Mesicka
Micro CMS 1.0 b1 - Persistent Cross-Site Scripting
by SecPod Research
By Source