Text Exploits
31,386 exploits tracked across all sources.
Evaria Content Management System 1.1 - File Disclosure
by khayeye shotor
chipmunk_board 1.3 - SQL Injection via forumID Parameter
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.
by Shamus
Intellicom Netbiter webSCADA Products - 'read.cgi' Multiple Remote Security Vulnerabilities
by Eugene Salov
JE Guestbook (com_jeguestbook) 1.0 - SQL Injection
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
by Salvatore Fresta
ASPMass Shopping Cart - Arbitrary File Upload / Cross-Site Request Forgery
by Abysssec
Microsoft Office <2008 for Mac - RCE
Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record, aka "Excel Record Memory Corruption Vulnerability," a different vulnerability than CVE-2010-0824 and CVE-2010-0821.
by Abysssec
webSPELL 4.2.1 - SQL Injection via asearch.php Search Parameter
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
by silent vapor
Pluck CMS 4.6.3 - 'cont1' HTML Injection
by High-Tech Bridge SA
MyPhpAuction 2010 - SQL Injection via product_desc.php id Parameter
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by h4ck3r
MODx Revolution <2.0.2-pl - Path Traversal
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some of these details are obtained from third party information.
by John Leitch
MODx Revolution 2.0.2-pl - Cross-Site Scripting via modhash Parameter
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
by John Leitch
Aleza Portal 1.6 - Insecure SQL Injection / Cookie Handling
by KnocKout
phpmyfaq < 2.6.9 - Cross-Site Scripting via PATH_INFO to index.php
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
by Yam Mesicka
Micro CMS 1.0 b1 - Persistent Cross-Site Scripting
by SecPod Research
Achievo 1.4.3 - Multiple Authorisation Vulnerabilities
by Pablo Milano
ALLPC 2.5 - SQL Injection via products_id Parameter
SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
by **RoAd_KiLlEr**
ALLPC 2.5 - Cross-Site Scripting via Advanced Search Keywords Parameter
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
by **RoAd_KiLlEr**
Fox Audio Player 0.8.0 - '.m3u' Denial of Service
by 4n0nym0us
By Source