Exploitdb Exploits
31,344 exploits tracked across all sources.
Idevspot Textads - SQL Injection
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.
by Sid3^effects
CuteSITE CMS <1.5.0 - XSS
Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter. NOTE: some of these details are obtained from third party information.
by High-Tech Bridge SA
CuteSITE CMS <1.5.0 - SQL Injection
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information.
by High-Tech Bridge SA
JForum 2.1.8 - 'bookmarks' Module Multiple HTML Injection Vulnerabilities
by Adam Baldwin
WordPress Plugin Gigya Socialize 1.0/1.1.x - Cross-Site Scripting
by MustLive
Smartisoft Phpbazar - Code Injection
PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.
by Sid3^effects
PHP SETI@home Web monitor - 'PHPsetimon' Local/Remote File Inclusion
by eidelweiss
K9 Kreativity Design - 'pages.php' SQL Injection
by Newbie_Campuz
Advneced Management For Services Sites - File Disclosure
by indoushka
Motorola Surfboard Sbv6120e - Path Traversal
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
by S2 Crew
MoinMoin 1.x - 'PageEditor.py' Cross-Site Scripting
by anonymous
TPO Duyuru Scripti - Insecure Cookie Authentication Bypass
by Septemb0x
Anodyne-productions Simm Management System - Path Traversal
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
by AntiSecurity
PHP City Portal 1.3 - 'cms_data.php' Cross-Site Scripting
by Red-D3v1L
By Source