Text Exploits
31,386 exploits tracked across all sources.
Sales and Inventory System for Grocery Store 1.0 - Multiple Stored XSS
by Vijay Sachdeva
Online Learning Management System 1.0 - Multiple Stored XSS
by Aakash Madaan
Online Learning Management System 1.0 - Authentication Bypass
by Aakash Madaan
Online Learning Management System 1.0 - 'id' SQL Injection
by Aakash Madaan
Victor CMS 1.0 - Authenticated Arbitrary File Upload via Profile Image Feature
Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser.
by Mosaaed
CVSS 8.8
CSE Bookstore 1.0 - SQL Injection via pubid Parameter
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.
by Musyoka Ian
CVSS 9.8
Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)
by Matthew Aberegg
Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS
by Kislay Kumar
Library Management System 3.0 - _Add Category_ Stored XSS
by Kislay Kumar
Artworks Gallery Management System 1.0 - 'id' SQL Injection
by Vijay Sachdeva
Queue Management System 4.0.0 Stored XSS via Add User
Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user creation fields. Attackers can insert JavaScript payloads in the First Name, Last Name, and Email fields during user creation, which execute when viewing the User List page.
by Kislay Kumar
CVSS 6.4
Academy-LMS 4.3 - Stored Cross-Site Scripting in SEO Panel
Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.
by Vinicius Alves
CVSS 4.8
Spiceworks 7.5.7.0 - Open Redirect via Host Header Injection
Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
by Ramikan
CVSS 6.1
Xinuos OpenServer 5 and 6 - Reflected Cross-Site Scripting via Section Parameter
A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'.
by Ramikan
CVSS 6.1
Xinuos OpenServer 5-6 - OS Command Injection via printbook cgi-bin Parameters
Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.
by Ramikan
CVSS 9.8
Online Marriage Registration System 1.0 - SQL Injection
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection.
by Raffaele Sabato
CVSS 8.8
Flexmonster Pivot Table & Charts 2.7.17 - Cross-Site Scripting in To Remote CSV Component
Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table & Charts 2.7.17.
by Marco Nappi
CVSS 6.1
Flexmonster Pivot Table & Charts 2.7.17 - Cross-Site Scripting in To OLAP (XMLA) Component
Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17.
by Marco Nappi
CVSS 6.1
Flexmonster Pivot Table & Charts 2.7.17 - Stored Cross-Site Scripting in Remote Report Open Menu
Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17.
by Marco Nappi
CVSS 6.1
Flexmonster Pivot Table & Charts 2.7.17 - Cross-Site Scripting in Remote JSON Component
Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17.
by Marco Nappi
CVSS 6.1
By Source