Exploitdb Exploits
31,346 exploits tracked across all sources.
Litespeed Web Server 4.0.12 - Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting
by d1dn0t
com_communitypolls < 1.5.2 - Path Traversal via Controller Parameter
Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
by kaMtiEz
Fonality Trixbox 2.2.4 - SQL Injection
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
by NorSlacker
IBM Websphere Portal 6.0.1.5 Build wp6015 - Portlet Palette Search HTML Injection
by Sjoerd Resink
Core Design Scriptegrator <1.4.1 - Path Traversal
Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.
by S2 Crew
XlentProjects SphereCMS 1.1 - SQL Injection
SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes ("%00") in the view parameter, which bypasses a protection mechanism.
by AmnPardaz Security Research Team
Subex Nikira Fraud Management System - Cross-Site Scripting via Login Prompt Message Parameter
Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter.
by thebluegenius
Open Source Classifieds 1.1.0 Alpha (OSClassi) - SQL Injection / Cross-Site Scripting / Arbitrary Admin Change
by Sioma Labs
New-CMS 1.08 - Multiple Local File Inclusion / HTML Injection Vulnerabilities
by Alberto Fontanella
Core Design Scriptegrator <1.4.1 - Path Traversal
Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) file parameter to libraries/jquery/js/ui/jsloader.php and the (2) files[] parameter to libraries/jquery/js/jsloader.php, a different vector than CVE-2010-0759. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by S2 Crew
Joomla! Component com_otzivi - Local File Inclusion
by AtT4CKxT3rR0r1ST
PortWise SSL VPN 4.6 - Cross-Site Scripting via wa/auth reloadFrame Parameter
Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter.
by George Christopoulos
git < 1.5.6 - Remote Code Execution via gitweb Shell Metacharacters
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.
by S2 Crew
Multiple File Attachments Mail Form Pro 2.0 - Arbitrary File Upload
by EgoPL
Joomla! Component com_acteammember - SQL Injection
by ALTBTA
Joomla! Component com_acstartseite - SQL Injection
by AtT4CKxT3rR0r1ST
Joomla! Component com_acprojects - SQL Injection
by AtT4CKxT3rR0r1ST
Erotik Auktionshaus - SQL Injection
SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Easy Laster
By Source