Exploitdb Exploits
31,369 exploits tracked across all sources.
WP-Lytebox 1.3 - Path Traversal via pg Parameter
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter.
by TurkGuvenligi
Webradev Download Protect 1.0 - RCE
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[RootPath] parameter to (1) Framework/EmailTemplates.class.php, (2) Customers/PDPEmailReplaceConstants.class.php, and (3) Admin/ResellersManager.class.php in includes/DProtect/.
by asL-Sabia
WebMember 1.0 - Authenticated SQL Injection via formID Parameter
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID parameter.
by KIM
vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection
by Cold Zero
RoomPHPlanning 1.6 - Unauthenticated Authentication Bypass via Cookie Manipulation
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account.
by ThE g0bL!N
phpBugTracker 1.0.3 - SQL Injection via Password Parameter
SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter.
by ByALBAYX
Graphiks MyForum 1.3 - SQL Injection via Username or Password Field
Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
by ThE g0bL!N
Mole Group Adult Portal Script - SQL Injection
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
by Qabandi
minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting
by YEnH4ckEr
Kensei Board < 2.0.0b - SQL Injection via f and t Parameters
Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action.
by cOndemned
Joomla! Component com_rsgallery2 1.14.x/2.x - Remote Backdoor Access
by Jan Van Niekerk
Joomla! Component Com_Agora 3.0.0 RC1 - Arbitrary File Upload
by ByALBAYX
Boy Scout Advancement <0.3 - SQL Injection
SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php.
by YEnH4ckEr
Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure
by DarkbiteX
eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities
by sniper code
DokuWiki 2009-02-14, rc2009-02-06, rc2009-01-30 - Remote Code Execution via config_cascade Parameter
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
by Nine:Situations:Group
DokuWiki 2009-02-14, rc2009-02-06, rc2009-01-30 - Remote Code Execution via config_cascade Parameter
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
by girex
Aardvark Topsites PHP <= 5.2.1 - Cross-Site Scripting via Search q Parameter
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected.
by anonymous
Lighttpd < 1.4.23 (BSD/Solaris) - Source Code Disclosure
by venatir
K-Meleon 1.5.3 - Heap-Based Buffer Overflow via Large Precision Value in printf Format Argument
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
by Maksymilian Arciemowicz
SonicWALL Global VPN Client 4.0 - Log File Remote Format String
by lofi42
CuteSoft Components Cute Editor - Path Traversal
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
by Securitylab.ir
arcade_trade_script 1.0 beta - Cross-Site Scripting via q Parameter in gamelist Action
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action.
by SmOk3
Cisco Adaptive Security Appliance - Credential Phishing via WebVPN Login Screen Spoofing
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.
by David Byrne
By Source