Exploitdb Exploits
31,394 exploits tracked across all sources.
CBAuthority - SQL Injection via id Parameter in view_product Action
SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_product action.
by Angela Chang
autonomous lan party 0.98.3 - Remote File Inclusion
by cr4wl3r
2WIRE Gateway - Authentication Bypass / Password Reset (2)
by bugz
Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)
by Leon Juranic
ZTE ZXDSL 831 II Modem - Arbitrary Configuration Access
by SuNHouSe2
Netgear WNR2000 - Multiple Information Disclosure Vulnerabilities
by Jean Trolleur
Linux kernel <2.6.30.4, <2.4.37.4 - Privilege Escalation
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
by Zinx
CVSS 7.8
Valve Software Source Engine - Format String
by Luigi Auriemma
RadAFFILIATE Links - 'index.php' Cross-Site Scripting
by Moudi
Freelancers 1.0 - Cross-Site Scripting via id or jobid Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php.
by Moudi
Freelancers 1.0 - Cross-Site Scripting via id or jobid Parameter
Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to placebid.php and (2) jobid parameter to post_resume.php.
by Moudi
Adobe ColdFusion < 8.0.1 - Cross-Site Scripting via startRow Parameter or Query String
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
by Alexander Polyakov
Adobe ColdFusion < 8.0.1 - Cross-Site Scripting via startRow Parameter or Query String
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
by Alexander Polyakov
Adobe ColdFusion < 8.0.1 - Cross-Site Scripting via startRow Parameter or Query String
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
by Alexander Polyakov
Adobe ColdFusion < 8.0.1 - Cross-Site Scripting via startRow Parameter or Query String
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
by Alexander Polyakov
DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass
by spymeta
2fly Gift Delivery System 6.0 - SQL Injection via gameid Parameter
SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action.
by Securitylab.ir
PHP Competition System BETA 0.84 - SQL Injection via Day or Pageno Parameter
Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php.
by Mr.SQL
Ignition 1.2 - 'comment' Remote Code Injection
by Khashayar Fereidani
DigitalSpinners DS CMS 1.0 - SQL Injection via DetailFile.php nFileId Parameter
SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter.
by Mr.tro0oqy
By Source