Exploitdb Exploits
31,346 exploits tracked across all sources.
Softbiz Jobs - 'sbad_type' Cross-Site Scripting
by pratul agrawal
php_auktion_pro - SQL Injection via news.php id Parameter
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Easy Laster
Arab Cart 1.0.2.0 - SQL Injection via showimg.php id Parameter
SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by indoushka
WampServer 2.0i - Cross-Site Scripting via Lang Parameter
Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
by Gjoko Krstic
Crawlability vBSEO <3.1.0 - Path Traversal
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.
by ViRuSMaN
Softbiz Jobs and Recruitment Script - SQL Injection via news_desc.php id Parameter
SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter.
by BAYBORA
Galerie Dezign-Box France - Multiple Vulnerabilities
by indoushka
Galerie Dezign-Box - Multiple Input Validation Vulnerabilities
by indoushka
Ero Auktion 2.0 and 2010 - SQL Injection via News.php ID Parameter
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Easy Laster
Ero Auktion 2.0 and 2010 - SQL Injection via News.php ID Parameter
SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Easy Laster
Arab Cart 1.0.2.0 - Cross-Site Scripting via showimg.php id Parameter
Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
by indoushka
Ac4p.com Gallery 1.0 - Multiple Vulnerabilities
by indoushka
BlazeDS < 3.2 - Information Disclosure via XML External Entity Injection
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.
by Roberto Suggi Liverani
CVSS 6.5
vBulletin 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities
by indoushka
Joomla! Component com_recipe - Multiple SQL Injections
by FL0RiX
FlatFile Login System - Remote Password Disclosure
by ViRuSMaN
Dynamicsoft WSC CMS 2.2 - SQL Injection
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information.
by Phenom
Social Web CMS 2 - 'index.php' Cross-Site Scripting
by GoLdeN-z3r0
By Source