Exploitdb Exploits
31,346 exploits tracked across all sources.
Auktionshaus Gelb 3.0 - SQL Injection
SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
by Easy Laster
wh-em.com upload 7.0 - Insecure Cookie Authentication Bypass
by indoushka
KR MEDIA Pogodny CMS - SQL Injection via id Parameter in niusy Action
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action.
by Ariko-Security
Mambo Component 'com_acnews' - 'id' SQL Injection
by Zero Bits & Xzit3
Limny 2.0 - Cross-Site Request Forgery in User and Admin Actions
Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and (2) hijack the authentication of the administrator for requests that create a new user via the admin/modules/user/new action to limny/index.php.
by Luis Santana
Limny 2.0 - Cross-Site Request Forgery in User and Admin Actions
Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and (2) hijack the authentication of the administrator for requests that create a new user via the admin/modules/user/new action to limny/index.php.
by Luis Santana
EziScript Google Page Rank 1.1 - Cross-Site Scripting
by sarabande
BGS CMS 2.2.1 - Cross-Site Scripting via Search Parameter
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information.
Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities
by Ivan Markovic
Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities
by Roel Schouten
Copperleaf Photolog 0.16 - SQL Injection via postid Parameter
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.
by kaMtiEz
Joomla! Component com_joomportfolio - Blind Injection
by snakespc
Joomla! Component com_hdvideoshare - SQL Injection
by snakespc
Dodo Upload 1.3 - Arbitrary File Upload (Bypass)
by indoushka
Katalog Stron Hurricane 1.3.5 - SQL Injection via Index.php Get Parameter
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter.
by kaMtiEz
By Source