Exploitdb Exploits
31,394 exploits tracked across all sources.
esoftpro Online Photo Pro 2.0 - SQL Injection
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.
by L0rd CrusAd3r
Esoftpro Online Guestbook Pro 5.1 - SQL Injection
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
by L0rd CrusAd3r
Esoftpro Online Contact Manager 3.0 - SQL Injection
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by L0rd CrusAd3r
Techjoomla com_socialads - SQL Injection via Ads Description Field
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php.
by Sid3^effects
Joomla! com_eventcal <1.6.4 - SQL Injection
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
by RoAd_KiLlEr
Joomla! Component com_seyret - Local File Inclusion
by Cooler_ unix
iScripts MultiCart 2.2 - Multiple SQL Injections
by Salvatore Fresta
FuseTalk 3.2/4.0 - Multiple Cross-Site Scripting Vulnerabilities
by Juan Manuel Garcia
Family Connections Who is Chatting <2.2.3 - RCE
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.
by lumut--
freeciv < 2.3.3 - Denial of Service via Crafted Packet
Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.
by Luigi Auriemma
CVSS 7.5
Ziggurat Farsi CMS - SQL Injection via main.asp grp Parameter
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter.
by Arash Saadatfar
Microsoft IIS 5.1 on Windows XP SP3 - Directory Authentication Bypass via Crafted Request
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability."
by Soroush Dalili
iScripts CyberMatch 1.0 - SQL Injection
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Salvatore Fresta
Iphone Pointter Social Network - Local File Inclusion
by Sid3^effects
Xplico 0.5.7 - 'add.ctp' Cross-Site Scripting (2)
by Marcos Garcia & Maximiliano Soler
Xplico 0.5.7 - 'add.ctp' Cross-Site Scripting (1)
by Marcos Garcia & Maximiliano Soler
Windows Vista SP1/SP2 and Server 2008 Gold/SP2 - Use-After-Free in LockProcessByClientId
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service (system crash) by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigger a failure in the LockProcessByClientId function, leading to deletion of an in-use process object, aka "Win32k Reference Count Vulnerability."
by MSRC
Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection
by John Leitch
By Source