Exploitdb Exploits
31,346 exploits tracked across all sources.
HASHE! Solutions - Multiple SQL Injections
by AtT4CKxT3rR0r1ST
KuwaitPHP eSmile - SQL Injection via cid Parameter
SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action.
by AtT4CKxT3rR0r1ST
Accellion Secure File Transfer Appliance <8.0.105 - Path Traversal
Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
by Tim Brown
Accellion Secure File Transfer Appliance - Privilege Escalation via Sudo Command Argument Injection
Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in /usr/local/bin/admin.pl, or a hard link attack in (2) chmod or (3) a certain cp command.
by Tim Brown
Windows Vista and Server 2008 - Remote Code Execution via ICMPv6 Router Advertisement
The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
by Sumit Gwalani
vBulletin Adsense Component - 'viewpage.php' SQL Injection
by JIKO
osTicket < 1.6 - Authenticated SQL Injection via scp/ajax.php Input Parameter
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.
by Nahuel Grisolia
fipsForum 2.6 - Unauthenticated Sensitive Information Disclosure via Direct Database Request
fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.
by ViRuSMaN
jaxCMS 1.0 - Path Traversal and Arbitrary File Execution via 'p' Parameter
Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter.
by Hamza 'MizoZ' N.
By Source