Exploitdb Exploits
31,346 exploits tracked across all sources.
Erolife AjxGaleri VT - Info Disclosure
Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb.
by LionTurk
LXR Cross Referencer 0.9.5 and 0.9.6 - Cross-Site Scripting via Ident Program i Parameter
Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program.
by Dan Rosenberg
LineWeb 1.0.5 - Multiple Remote Vulnerabilities
by Ignacio Garrido
YP Portal MS-Pro Surumu 1.0 - Database Disclosure
by indoushka
Pay Per Minute Video Chat Script 2.0-2.1 - Cross-Site Scripting via id Parameter or model Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.
by R3d-D3V!L
WMNews - '/admin/wmnews.php' Cross-Site Scripting
by indoushka
Pay Per Minute Video Chat Script 2.x - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities
by R3d-D3V!L
Pay Per Minute Video Chat Script 2.0-2.1 - SQL Injection via index_ie.php page Parameter
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
by R3d-D3V!L
MercuryBoard 1.1.5 - 'index.php' Cross-Site Scripting
by indoushka
LightOpenCMS 0.1 - 'smarty.php' Remote File Inclusion
by Zer0 Thunder
com_j-projects - SQL Injection via Project Parameter
SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php.
by Pyske
Joomla! Component com_cartikads 1.0 - Arbitrary File Upload
by kaMtiEz
ImagoScripts Deviant Art Clone - SQL Injection
SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary SQL commands via the seid parameter in a forums viewcat action.
by alnjm33
Skype for Linux 2.1 Beta - Multiple Strange Behaviour Vulnerabilities
by emgent
KMSoft Guestbook 1.0 - Info Disclosure
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb.
by LionTurk
Acidcat CMS 3.5.x - Info Disclosure
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install_*.asp scripts. NOTE: the final installation screen states "Important: you must now delete all files beginning with 'install' from the root directory."
by LionTurk
WorldPay Script Shop - 'productdetail' SQL Injection
by Err0R
Smart Vision Script News - 'newsdetail.php' SQL Injection (1)
by Err0R
By Source