Exploitdb Exploits
31,394 exploits tracked across all sources.
PHPMass Real Estate - 'view_map.php' Cross-Site Scripting
by Moudi
Prime Quick Style < 1.2.3 - Authenticated SQL Injection via prime_quick_style Parameter
SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the prime_quick_style parameter to ucp.php.
by -SmoG-
KingCMS 0.6.0 - Remote Code Execution via CONFIG[AdminPath] Parameter
PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[AdminPath] parameter.
by CoBRa_21
com_gameserver 1.0 for Joomla! - SQL Injection via id Parameter
SQL injection vulnerability in the Game Server (com_gameserver) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a gamepanel action to index.php.
by v3n0m
Artetics Art Portal (com_artportal) 1.0 - SQL Injection via Portalid Parameter
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the portalid parameter to index.php.
by 599eme Man
jvitals com_agora 3.0.0b - Path Traversal via Action Parameter
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.
by ByALBAYX
DataLife Engine 8.2 - Remote Code Execution via dle_config_api Parameter
PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine (DLE) 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dle_config_api parameter.
by Kurd-Team
AOM Software Beex 3 - Cross-Site Scripting via navaction Parameter
Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to (1) news.php and (2) partneralle.php.
by Moudi
AOM Software Beex 3 - Cross-Site Scripting via navaction Parameter
Multiple cross-site scripting (XSS) vulnerabilities in AOM Software Beex 3 allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to (1) news.php and (2) partneralle.php.
by Moudi
JSFTemplating / Mojarra Scales / GlassFish - File Disclosure
by SEC Consult
Dave Robinson Rockbandcms - SQL Injection
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
by Affix
Re-Script 0.99 Beta - 'listings.php?op' SQL Injection
by Mr.SQL
MyBuxScript PTC-BUX - SQL Injection via spnews.php id Parameter
SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI. NOTE: some of these details are obtained from third party information.
by HxH
Modern Script 5.0 - 'index.php?s' SQL Injection
by Red-D3v1L
MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities
by Inj3ct0r
MKPortal 1.x (Multiple Modules) - Cross-Site Scripting
by Inj3ct0r
LiveStreet 0.2 - Cross-Site Scripting via Topic Header in Comment
Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment.
by Inj3ct0r
LiveStreet 0.2 - Cross-Site Scripting via URI Parameter
Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter.
by Inj3ct0r
Allpublication Jboard < 2.0 - SQL Injection
Multiple SQL injection vulnerabilities in Joker Board (aka JBoard) 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) core/select.php or (2) the city parameter to top_add.inc.php, reachable through sboard.php.
by Inj3ct0r
e-Soft24 PTC Script 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities
by 599eme Man
e-Soft24 Jokes Portal Script Seo 1.0 - Multiple Cross-Site Scripting Vulnerabilities
by 599eme Man
e-Soft24 Flash Games Script 1.0 - Cross-Site Scripting
by 599eme Man
e-soft24 Article Directory Script - 'q' Cross-Site Scripting
by 599eme Man
x10 MP3 Search Engine 1.6.5 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php.
by Moudi
x10 MP3 Search Engine 1.6.5 - Cross-Site Scripting via Multiple Parameters
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php.
by Moudi
By Source