Exploitdb Exploits
31,346 exploits tracked across all sources.
PHP-RESIDENCE 0.7.2 - Multiple Local File Inclusions
by cr4wl3r
ITechSctipts Alibaba Clone - Multiple Vulnerabilities
by Hamza 'MizoZ' N.
Ebay Clone 2009 - SQL Injection via id or cid Parameter
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to product_desc.php, and the cid parameter to (2) showcategory.php and (3) gallery.php.
by Hamza 'MizoZ' N.
CLONEBID B2B Marketplace - Multiple Vulnerabilities
by Hamza 'MizoZ' N.
LetoDMS < 1.7.2 - Authenticated Path Traversal via Lang Parameter
Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
by D. Fabian
Multiple Media Players ((iTunes / QuickTime) - HTTP DataHandler Overflow
by Dr_IDE
stap-server <1.1 - Command Injection
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.
by Frank Ch. Eigler
DokuWiki < 2009-12-25b - Unauthenticated Privilege Escalation via ACL Manager Plugin
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
by IHTeam
Technology for Solutions 1.0 - 'id' Cross-Site Scripting
by PaL-D3v1L
codingfish com_marketplace 1.2 - Cross-Site Scripting via catid Parameter
Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.
by ViRuSMaN
com_articlemanager - SQL Injection via artid Parameter
SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the artid parameter in a display action to index.php.
by FL0RiX
DokuWiki < 2009-12-25b - Directory Traversal via ACL Manager ns Parameter
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.
by IHTeam
Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities / Security Bypass
by draic Brady
Zenoss < 2.5 - Authenticated SQL Injection via Events API Parameters
Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote authenticated users to execute arbitrary SQL commands via the (1) severity, (2) state, (3) filter, (4) offset, and (5) count parameters.
by nGenuity Information Services
OpenOffice 3.1 - '.csv' Remote Denial of Service
by Hellcode Research
StivaSoft Stiva SHOPPING CART 1.0 - 'demo.php' Cross-Site Scripting
by PaL-D3v1L
By Source