Exploitdb Exploits

CVE-2010-0756 EXPLOITDB text VERIFIED

WikyBlog 1.7.3 rc2 - Session Fixation

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2) index.php/Comment/Main/Home_Wiky, or (3) index.php/Edit/Main.

by indoushka

View

CVE-2010-0755 EXPLOITDB text VERIFIED

WikyBlog 1.7.3 rc2 - Remote Code Execution via LangFile Parameter

PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter.

by indoushka

View

CVE-2010-0754 EXPLOITDB text VERIFIED

WikyBlog 1.7.2 and 1.7.3 rc2 - Cross-Site Scripting via which Parameter

Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action.

by indoushka

View

EIP-2026-119078 EXPLOITDB text VERIFIED

rbot 0.9.14 - '!react' Unauthorized Access

by nks

View

CVE-2010-1114 EXPLOITDB text VERIFIED

Web Server Creator - Web Portal 0.1 - RCE

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to index.php and the (2) path parameter to news/form.php.

by indoushka

View

EIP-2026-112317 EXPLOITDB text VERIFIED

Softbiz Classifieds PLUS - Multiple SQL Injections

by Easy Laster

View

EIP-2026-112315 EXPLOITDB text VERIFIED

Softbiz Auktios Script - Multiple SQL Injections

by Easy Laster

View

EIP-2026-112034 EXPLOITDB text

ShortCMS 1.11F(B) (con) - SQL Injection

by Gamoscu

View

EIP-2026-111016 EXPLOITDB text VERIFIED

PHPCOIN 1.2.1 - 'mod.php' SQL Injection

by BAYBORA

View

EIP-2026-110507 EXPLOITDB text

PBBoard 2.0.5 - Multiple Vulnerabilities

by indoushka

View

EIP-2026-110310 EXPLOITDB text VERIFIED

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

by JIKO

View

EIP-2026-109790 EXPLOITDB text VERIFIED

MySmartBB 1.7 - Multiple Cross-Site Scripting Vulnerabilities

by indoushka

View

EIP-2026-109789 EXPLOITDB text

MySmartBB 1.0.0 - Cross-Site Scripting

by indoushka

View

EIP-2026-109354 EXPLOITDB text VERIFIED

Max's Photo Album - Arbitrary File Upload

by indoushka

View

EIP-2026-109261 EXPLOITDB text VERIFIED

Maian Uploader 4.0 - Arbitrary File Upload

by indoushka

View

EIP-2026-105240 EXPLOITDB text

Article Friendly - Cross-Site Request Forgery

by pratul agrawal

View

CVE-2010-1029 EXPLOITDB text VERIFIED

Safari - Stack Consumption Denial of Service via CSS Selector

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.

by Rad L. Sneak

View

EIP-2026-102629 EXPLOITDB text

Kojoney 0.0.4.1 - 'urllib.urlopen()' Remote Denial of Service

by Nicob

View

EIP-2026-114368 EXPLOITDB text VERIFIED

WorkSimple 1.3.2 - Multiple Vulnerabilities

by JIKO

View

EIP-2026-112745 EXPLOITDB text VERIFIED

Top Auktion - 'news.php' SQL Injection

by Easy Laster

View

EIP-2026-112718 EXPLOITDB text VERIFIED

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

by AmnPardaz

View

EIP-2026-112320 EXPLOITDB text VERIFIED

Softbiz Jobs - Multiple SQL Injections

by Easy Laster

View

EIP-2026-112319 EXPLOITDB text VERIFIED

Softbiz Jobs - Cross-Site Request Forgery

by pratul agrawal

View

EIP-2026-112318 EXPLOITDB text VERIFIED

Softbiz Jobs - 'sbad_type' Cross-Site Scripting

by pratul agrawal

View

EIP-2026-111646 EXPLOITDB text VERIFIED

QuickDev 4 PHP - Database Disclosure

by ViRuSMaN

View