Exploitdb Exploits
31,369 exploits tracked across all sources.
Absolute Form Processor XE-V 1.5 - Authentication Bypass
by ThE g0bL!N
IBM Advanced Management Module - Cross-Site Scripting via Username or File Manager PATH Parameter
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.
by Henri Lindberg
IBM Advanced Management Module - Cross-Site Scripting via Username or File Manager PATH Parameter
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.
by Henri Lindberg
net2ftp 0.97 - Cross-Site Scripting / Request Forgery
by cicatriz
Cisco Subscriber Edge Services Manager - Cross-Site Scripting via URI
Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information.
by Usman Saeed
Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection
by ThE g0bL!N
peterConnects Web Server - Traversal Arbitrary File Access
by Bugs NotHugs
Web File Explorer 3.1 - Unauthenticated Sensitive Information Exposure via Direct Database Download
Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb.
by ByALBAYX
Joomla! - SQL Injection via MailTo Component Article Parameter
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor.
by H!tm@N
Joomla! Component Maian Music 1.2.1 - 'category' SQL Injection
by H!tm@N
Ijobid Com Cmimarketplace - Path Traversal
Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php.
by H!tm@N
Family Connections CMS 1.8.2 - Blind SQL Injection
by Salvatore Fresta
Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (2)
by DATA_SNIPER
Amaya 11.1 - XHTML Parser Remote Buffer Overflow (PoC)
by cicatriz
com_bookjoomlas 0.1 - SQL Injection via gbid Parameter
SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php.
by Salvatore Fresta
FlexCMS 2.5 - SQL Injection via ItemId Parameter
SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information.
by Lanti-Net
Gravity Board X 2.0 BETA - SQL Injection via member_id Parameter
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.
by brain[pillow]
Gravity Board X 2.0 BETA - Remote Code Injection via Configure Action
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php.
by brain[pillow]
Interspire ActiveKB - Path Traversal via Panel Parameter
Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel parameter.
by Angela Chang
By Source