Exploitdb Exploits
31,394 exploits tracked across all sources.
E-Gold Game Series Pirates of The Caribbean - SQL Injection via x and y Parameters
Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the (1) x and (2) y parameters.
by Moudi
Smart ASP Survey - SQL Injection via showresult.asp catid Parameter
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter.
by Moudi
TotalCalendar 2.4 - SQL Injection via rss.php selectedCal Parameter
SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal parameter in a SwitchCal action.
by Moudi
PAD Site Scripts 3.6 - SQL Injection via Search or RSS Category Parameter
Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to list.php and (2) cat parameter to rss.php.
by Mr.SQL
VideoGirls BiZ - Cross-Site Scripting via Forum, Profile, and View Parameters
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php.
by Moudi
VideoGirls BiZ - Cross-Site Scripting via Forum, Profile, and View Parameters
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php.
by Moudi
VideoGirls BiZ - Cross-Site Scripting via Forum, Profile, and View Parameters
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php.
by Moudi
TotalCalendar 2.4 - Path Traversal via Box Parameter
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the box parameter.
by Moudi
Simple CMS Framework 1.0 - 'page' SQL Injection
by Red-D3v1L
phpSANE 0.5.0 - Remote Code Execution via File Save Parameter
PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the file_save parameter.
by CoBRa_21
PHP-Fusion 6.1.18 - Multiple Information Disclosure Vulnerabilities
by Inj3ct0r
PAD Site Scripts 3.6 - Cross-Site Scripting via cat Parameter
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and (2) opml.php.
by Mr.SQL
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities
by Andrew Horton
Moa Gallery < 1.2.0 - Remote Code Execution via MOA_PATH Parameter
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOA_PATH parameter to (1) _error_funcs.php, (2) _integrity_funcs.php, (3) _template_component_admin.php, (4) _template_component_gallery.php, (5) _template_parser.php, (6) mod_gallery_funcs.php, (7) mod_image_funcs.php, (8) mod_tag_funcs.php, (9) mod_tag_view.php, (10) mod_upgrade_funcs.php, (11) mod_user_funcs.php, (12) page_admin.php, (13) page_gallery_add.php, (14) page_gallery_view.php, (15) page_image_add.php, (16) page_image_view_full.php, (17) page_login.php, and (18) page_sitemap.php in sources/.
by cr4wl3r
Moa Gallery <1.2.0 - Path Traversal
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the p_filename parameter, a different issue than CVE-2009-4614.
by GoLd_M
Moa Gallery 1.2.0 - 'index.php?action' SQL Injection
by Mr.SQL
JCE-Tech SearchFeed Script - Cross-Site Scripting via Search Parameter
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter.
by Moudi
php_video_script - Cross-Site Scripting via Key Parameter
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter.
by Moudi
Crazy Star plugin 2.0 for Discuz! - Authenticated SQL Injection via fmid Parameter
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.
by ZhaoHuAn
DigiOz Guestbook 1.7.2 - Cross-Site Scripting via Search Term Parameter
Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.
by Moudi
JCE-Tech Auction RSS Content Script 3.0 - Cross-Site Scripting via id Parameter
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.
by Moudi
JCE-Tech Auction RSS Content Script 3.0 - Cross-Site Scripting via id Parameter
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.
by Moudi
IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection
by IBM
Novell Client for Windows 2000/XP - ActiveX Remote Denial of Service
by Francis Provencher
By Source