Exploitdb Exploits
31,344 exploits tracked across all sources.
Achievo 1.4.3 - Multiple Authorisation Vulnerabilities
by Pablo Milano
ALLPC 2.5 - SQL Injection
SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
by **RoAd_KiLlEr**
ALLPC 2.5 - XSS
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
by **RoAd_KiLlEr**
Fox Audio Player 0.8.0 - '.m3u' Denial of Service
by 4n0nym0us
NetArt Media Car Portal 2.0 - 'car' SQL Injection
by RoAd_KiLlEr
Horde Imp < 4.3.7 - XSS
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related to the Fetchmail configuration.
by Moritz Naumann
Entrans <0.3.2 - SQL Injection
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter.
by keracker
Mura CMS <5.1.498-5.2.2809 & Sava CMS 5-5.2 - Path Traversal
Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, allows remote attackers to read arbitrary files via a .. (dot dot) in the FILEID parameter to the default URI under tasks/render/file/.
by mr_me
Traidnt UP - Cross-Site Request Forgery (Add Admin)
by John Johnz
Mambo/Joomla! - com_elite_experts - SQL Injection
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
by **RoAd_KiLlEr**
FreePBX <2.8.0 - Path Traversal
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.
by Trustwave's SpiderLabs
Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions
by sh00t0ut
Microsoft Excel - HFPicture Record Parsing Memory Corruption
by Abysssec
By Source