Exploitdb Exploits
31,346 exploits tracked across all sources.
Mongoose 2.8 - Space String Remote File Disclosure
by Pouya Daneshmand
JDownloader - 'JDExternInterface.java' Remote Code Execution
by apoc
Uiga Business Portal - Stored Cross-Site Scripting via Comment Box Textcomment Parameter
Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) in a noentryid action. NOTE: some of these details are obtained from third party information.
by Sioma Labs
Zen Time Tracking <2.2 - SQL Injection
Multiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to (a) userlogin.php and (b) managerlogin.php. NOTE: some of these details are obtained from third party information.
by cr4wl3r
Uiga Business Portal - SQL Injection
Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.
by Sioma Labs
rostermain < 1.1 - SQL Injection via Userid or Password Parameter
Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters.
by cr4wl3r
Joomla! com_productbook 1.0.4 - SQL Injection
SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: some of these details are obtained from third party information.
by snakespc
Exponent CMS 0.96.3 - 'articlemodule' SQL Injection
by T u R c O
EncapsCMS 0.3.6 - 'config[path]' Remote File Inclusion
by cr4wl3r
Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
by Milos Zivanovic
baal_systems < 3.8 - SQL Injection via adminlogin.php Username and Password Parameters
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
by cr4wl3r
DA Mailing List System 2 - Multiple Vulnerabilities
by Phenom
SQLite Browser 2.0b1 - Local Denial of Service
by Nishant Das Patnaik
Open Bulletin Board - Multiple Blind SQL Injections
by AtT4CKxT3rR0r1ST
com_photoblog - SQL Injection via Blog Parameter
Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php. NOTE: a separate vector for the id parameter to detail.php may also exist.
by ALTBTA
ShopEx Single 4.5.1 - 'errinfo' Cross-Site Scripting
by cp77fk4r
AudiStat 1.3 - SQL Injection via mday Parameter
SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter.
by kaMtiEz
evalSMSI 2.1.03 - SQL Injection via ajax.php query parameter
SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.
by ekse
By Source