Exploitdb Exploits

EIP-2026-112369 EXPLOITDB text

SpawCMS Editor - Arbitrary File Upload

by j4ck

View

EIP-2026-112271 EXPLOITDB text VERIFIED

Sniggabo CMS 2.21 - 'search.php' Cross-Site Scripting

by Sora

View

EIP-2026-111801 EXPLOITDB text VERIFIED

Roundcube Webmail 0.2 - Cross-Site Scripting

by j4ck & Globus

View

EIP-2026-111799 EXPLOITDB text

Roundcube Webmail - Multiple Vulnerabilities

by j4ck & Globus

View

EIP-2026-111038 EXPLOITDB text VERIFIED

PHPDug 2.0.0 - Cross-Site Scripting

by indoushka

View

EIP-2026-111033 EXPLOITDB text VERIFIED

PHPDirector Game Edition 0.1 - Local File Inclusion / SQL Injection / Cross-Site Scripting

by Zer0 Thunder

View

EIP-2026-109811 EXPLOITDB text

Myuploader - Arbitrary File Upload

by S2K9

View

EIP-2026-109534 EXPLOITDB text

MobPartner Counter - Arbitrary File Upload

by wlhaan hacker

View

EIP-2026-109472 EXPLOITDB text VERIFIED

Milonic News - 'viewnews' SQL Injection

by Err0R

View

EIP-2026-109057 EXPLOITDB text VERIFIED

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities

by Ignacio Garrido

View

EIP-2026-109048 EXPLOITDB text VERIFIED

KubeLabs PHPDug 2.0 - 'upcoming.php' Cross-Site Scripting

by indoushka

View

CVE-2010-0694 EXPLOITDB text

PerchaGallery <1.5b - SQL Injection

SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an editunidad action to index.php.

by FL0RiX

View

EIP-2026-108424 EXPLOITDB text VERIFIED

Joomla! Component com_kk - Blind SQL Injection

by Pyske

View

EIP-2026-108423 EXPLOITDB text VERIFIED

Joomla! Component com_king - Blind SQL Injection

by Pyske

View

EIP-2026-107979 EXPLOITDB text VERIFIED

ITaco Group ITaco.biz - 'view_news' SQL Injection

by Err0R

View

EIP-2026-106485 EXPLOITDB text VERIFIED

Docebo 3.6.0.2 (stable) - Local File Inclusion

by Zer0 Thunder

View

CVE-2010-1066 EXPLOITDB text VERIFIED

AR Web Content Manager (AWCM) 2.1 - Info Disclosure

AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for control/db_backup.php.

by alnjm33

View

EIP-2026-103773 EXPLOITDB text

DirectAdmin 1.33.6 - Symlink Security Bypass

by alnjm33

View

EIP-2026-102609 EXPLOITDB text VERIFIED

Gnome Panel 2.28.0 - Denial of Service (PoC)

by Pietro Oliva

View

CVE-2010-0936 EXPLOITDB text

D-LINK DKVM-IP8 - Firmware 2282_dlinkA4_p8_20071213 - XSS

Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.

by POPCORN

View

CVE-2010-0936 EXPLOITDB text VERIFIED

D-LINK DKVM-IP8 - Firmware 2282_dlinkA4_p8_20071213 - XSS

Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.

by POPCORN

View

EIP-2026-101097 EXPLOITDB text

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

by Aodrulez

View

EIP-2026-100607 EXPLOITDB text VERIFIED

VP-ASP Shopping Cart 7.0 - Database Disclosure

by indoushka

View

EIP-2026-100454 EXPLOITDB text VERIFIED

Net Gitar Shop 1.0 - Database Disclosure

by indoushka

View

CVE-2010-1065 EXPLOITDB text VERIFIED

Lebisoft Ziyaretci Defteri 7.4-7.5 - Info Disclosure

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

by indoushka

View