Exploitdb Exploits
31,344 exploits tracked across all sources.
Paul Mcenery Php Bible Search - XSS
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.
by L0rd CrusAd3r
Customer Paradigm PageDirector CMS - SQL Injection
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the sub_catid parameter.
by v3n0m
CANDID - SQL Injection
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.
by L0rd CrusAd3r
CANDID - Cross-Site Scripting via image_id Parameter
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.
by L0rd CrusAd3r
Allomani Super MultiMedia 2.5 - Cross-Site Request Forgery (Add Admin)
by G0D-F4Th3r
Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (1)
by G0D-F4Th3r
Kryn.cms 6.0 - Cross-Site Request Forgery / HTML Injection
by TurboBorland
Ecomat CMS 5.0 - SQL Injection
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.
by High-Tech Bridge SA
Cubecart - SQL Injection
SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php.
by Core Security
Miyabi-seo Cgi Tools Seo Links - Code Injection
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information.
by Marshall Whittaker
Iatek PortalApp 3.3/4.0 - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities
by High-Tech Bridge SA
Customer Paradigm PageDirector CMS - SQL Injection
SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Tr0y-x
V-EVA Classified Script 5.1 - 'classified_img.php' SQL Injection
by Sid3^effects
Customer Paradigm PageDirector CMS - Auth Bypass
siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request.
by Tr0y-x
MySpace Clone 2010 - SQL Injection / Cross-Site Scripting
by L0rd CrusAd3r
eBay Clone Script 2010 - 'showcategory.php' SQL Injection
by L0rd CrusAd3r
Customer Paradigm PageDirector - 'id' SQL Injection
by Tr0y-x
Clix'N'Cash Clone 2010 - 'index.php' SQL Injection
by L0rd CrusAd3r
By Source