Exploitdb Exploits
31,346 exploits tracked across all sources.
PHPCityPortal - Remote Code Execution via external.php URL Parameter
PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in the url parameter.
by R3d-D3V!L
Timeclock-software Employee Timeclock Software - SQL Injection
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php.
by Secunia Research
DDL CMS 2.1 - 'blacklist.php' Cross-Site Scripting
by ITSecTeam
Campsite 3.3.5 - Cross-Site Request Forgery
by pratul agrawal
60cycleCMS - 'select.php' Multiple HTML Injection Vulnerabilities
by pratul agrawal
Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection
by Yaniv Miron
SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 - Multiple Vulnerabilities
by Luka Milkovic
Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection
by Yaniv Miron
Max Network Technology BBSMAX 4.2 - 'threadid' Cross-Site Scripting
by Liscker
SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray
by Alexey Sintsov
Lenovo Hotkey Driver 5.33 - Local Privilege Escalation
by Chilik Tamir
Uebimiau Webmail 3.2.0-2.0 - Email Disclosure
by Z3r0c0re_ R4vax
PHP File Sharing System 1.5.1 - Multiple Vulnerabilities
by blake
NUs Newssystem <1.02 - SQL Injection
SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by n3w7u
MH Products kleinanzeigenmarkt - SQL Injection
SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter.
by Easy Laster
Joomla! Component com_hezacontent 1.0 - 'id' SQL Injection
by kaMtiEz
SpamAssassin Milter Plugin <0.3.1 - RCE
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.
by kingcope
IBM ENOVIA SmarTeam - 'LoginPage.aspx' Cross-Site Scripting
by Lament
Tribisur < 2.1 - Remote File Inclusion via Theme Parameter
Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from third party information.
by cr4wl3r
DZ Auktionshaus 'V4.rgo' - 'id' news.php?SQL Injection
by Easy Laster
By Source