Exploitdb Exploits
31,394 exploits tracked across all sources.
Toronja CMS - HTML / Cross-Site Scripting Injection
by CoBRa_21
Realtor WebSite System E-Commerce - SQL Injection
by cyberlog
PPhlogger 2.2.5 - 'trace.php' Remote Command Execution
by Sn!pEr.S!Te Hacker
parlic Design - SQL Injection / Cross-Site Scripting / HTML Injection
by XroGuE
Joomla! Component com_mediqna 1.1 - Local File Inclusion
by kaMtiEz
Hampshire Trading Standards Script - SQL Injection
by Mr.P3rfekT
BackLinkSpider 1.3.1774 - 'cat_id' SQL Injection
by sniper ip
FreeBSD 6.4-8.1-PRERELEASE - Denial of Service or Remote Code Execution via Long Username
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.
by Maksymilian Arciemowicz
RapidWareX 2.0.1 - 'WebUI' Cross-Site Request Forgery
by l3D
Spaceacre - SQL Injection / Cross-Site Scripting / HTML Injection
by XroGuE
Spaceacre - '/index.php' SQL Injection / HTML / Cross-Site Scripting Injection
by CoBRa_21
Multi Vendor Mall - 'pages.php' SQL Injection
by Newbie_Campuz
Multi Vendor Mall - 'itemdetail.php?& shop.php' SQL Injection
by CoBRa_21
md5 Encryption Decryption PHP Script - 'index.php' Cross-Site Scripting
by indoushka
Website Design and Hosting By Netricks Inc - 'news.php' SQL Injection
by Dr.SiLnT HilL
nitro_web_gallery - SQL Injection via PictureId Parameter
SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.
by cyberlog
Microsoft Exchange Server - Cross-Site Scripting via OWA Folder IPF.Note id Parameter
Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
by Praveen Darshanam
By Source