Exploitdb Exploits

31,348 exploits tracked across all sources.

Sort: Activity Stars
EIP-2026-108456 EXPLOITDB text VERIFIED
Joomla! Component com_newsflash - 'id' SQL Injection
by EcHoLL
EIP-2026-107297 EXPLOITDB text VERIFIED
fttss 2.0 - Remote Command Execution
by dun
EIP-2026-107056 EXPLOITDB text VERIFIED
Fast Guest Book - Authentication Bypass
by Moudi
EIP-2026-106612 EXPLOITDB text VERIFIED
DZcms 3.1 - SQL Injection
by Glafkos Charalambous
EIP-2026-105500 EXPLOITDB text VERIFIED
BKWorks ProPHP 0.50b1 - Authentication Bypass
by SirGod
EIP-2026-107054 EXPLOITDB text VERIFIED
Fast FAQs System - Authentication Bypass
by x0r
EIP-2026-101380 EXPLOITDB text VERIFIED
Netgear WG102 - Leaks SNMP Write Password With Read Access
by Harm S.I. Vaittes
EIP-2026-110821 EXPLOITDB text VERIFIED
PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
by Khashayar Fereidani
CVE-2009-0120 EXPLOITDB text VERIFIED
IBM WebSphere DataPower XML Security Gateway XS40 - DoS
The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.
by Erik
EIP-2026-103215 EXPLOITDB text VERIFIED
Samba < 3.0.20 - Remote Heap Overflow
by zuc
CVE-2009-0496 EXPLOITDB text VERIFIED
Ignite Realtime Openfire 3.6.2 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin.
by Federico Muttis
CVE-2009-0497 EXPLOITDB text VERIFIED
Ignite Realtime Openfire 3.6.2 - Path Traversal
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the log parameter.
by Federico Muttis
CVE-2009-0496 EXPLOITDB text VERIFIED
Ignite Realtime Openfire 3.6.2 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin.
by Federico Muttis
CVE-2009-0496 EXPLOITDB text VERIFIED
Ignite Realtime Openfire 3.6.2 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin.
by Federico Muttis
EIP-2026-102418 EXPLOITDB text VERIFIED
PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting
by Patrick Webster
CVE-2009-0828 EXPLOITDB text VERIFIED
QuoteBook - Unauthenticated Sensitive Information Exposure via Direct Request to quotes.inc
QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request.
by Moudi
CVE-2009-0043 EXPLOITDB text VERIFIED
CA Service Metric Analysis <r11.1 SP1 - Command Injection
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
by Michel Arboi
EIP-2026-112547 EXPLOITDB text VERIFIED
tadbook2 Module for XOOPS - 'open_book.php' SQL Injection
by stylextra
CVE-2009-0829 EXPLOITDB text VERIFIED
QuoteBook - SQL Injection via MyBox, selectFavorites, QuoteName, or QuoteText Parameters
Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText parameters to (b) quotesadd.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by Moudi
CVE-2009-0831 EXPLOITDB text VERIFIED
PHP-Fusion 1.0 - Members CV (job) module - SQL Injection
SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter.
by Khashayar Fereidani
CVE-2009-0832 EXPLOITDB text VERIFIED
PHP-Fusion E-Cart 1.3 - SQL Injection
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter.
by Khashayar Fereidani
CVE-2009-0700 EXPLOITDB text VERIFIED
Plunet BusinessManager <4.1 - Auth Bypass
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.
by Matteo Ignaccolo
CVE-2009-0700 EXPLOITDB text VERIFIED
Plunet BusinessManager <4.1 - Auth Bypass
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.
by Matteo Ignaccolo
CVE-2009-0699 EXPLOITDB text VERIFIED
Plunet BusinessManager < 4.1 - Authenticated Cross-Site Scripting via QUB or Bez74 Parameters
Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters.
by Matteo Ignaccolo
CVE-2009-0104 EXPLOITDB text VERIFIED
EZpack 4.2b2 - SQL Injection via qType Parameter
SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action.
by !-BUGJACK-!