Exploitdb Exploits
31,346 exploits tracked across all sources.
AudiStat 1.3 - Cross-Site Scripting via Year and Mday Parameters
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by kaMtiEz
ASCET Interactive Huski Retail - Multiple SQL Injections
by Wireghoul
ManageEngine OpUtils 5.0 - SQL Injection
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter.
by Asheesh Anaconda
Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL
by sinn3r
MASA2EL Music City <1.1 - SQL Injection
SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action.
by alnjm33
Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities
by Cory Marsh
Data 1 Systems UltraBB 1.17 - 'view_post.php' Cross-Site Scripting
by s4r4d0
Samba <3.3.11, <3.4.6, <3.5.0rc3 - Path Traversal
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
by kingcope
KnowGate hipergate 4.0.12 - Multiple Cross-Site Scripting Vulnerabilities
by Nahuel Grisolia
Sterlite SAM300 AX Router - Cross-Site Scripting via Stat_Radio Parameter
Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the Stat_Radio parameter.
by Karn Ganeshen
RealAdmin - 'detail.php' Blind SQL Injection
by AtT4CKxT3rR0r1ST
eicra_car_rental-script - SQL Injection via Users and Passwords Parameters
Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters.
by Hamza 'MizoZ' N.
myBusinessAdmin - 'content.php' Blind SQL Injection
by AtT4CKxT3rR0r1ST
KubeLance 1.7.6 - Cross-Site Request Forgery (Add Admin)
by Milos Zivanovic
cityadmin - 'links.php' Blind SQL Injection
by AtT4CKxT3rR0r1ST
Hipergate 4.0.12 - Multiple Vulnerabilities
by Nahuel Grisolia
MobPartner Chat - Multiple SQL Injections
by AtT4CKxT3rR0r1ST
GCP 2.0 datasets provided as BioCASE Web services - Local File Inclusion
by R3VAN_BASTARD
Linux Kernel 2.6.x - KVM 'pit_ioport_read()' Local Denial of Service
by Marcelo Tosatti
By Source