Text Exploits

31,394 exploits tracked across all sources.

Sort: Activity Stars
CVE-2008-4461 EXPLOITDB text VERIFIED
Vastal I-Tech Dating Zone - SQL Injection via fage Parameter
SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter.
by ZoRLu
CVE-2008-6764 EXPLOITDB text VERIFIED
Silentum LoginSys 1.0.0 - Cross-Site Scripting via Message Parameter
Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
by Maximiliano Soler
CVE-2008-4183 EXPLOITDB text VERIFIED
IntegraMOD 1.4.x - Unauthenticated Sensitive Information Exposure via Backup File Download
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.
by TheJT
CVE-2008-3952 EXPLOITDB text VERIFIED
EsFaq 2.0 - SQL Injection via idcat Parameter
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter.
by SuB-ZeRo
CVE-2008-6994 EXPLOITDB text VERIFIED
Google Chrome 0.2.149.27 - Stack-Based Buffer Overflow via Long TITLE Element in SaveAs Feature
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
by SVRT
CVE-2008-4462 EXPLOITDB text VERIFIED
Vastal I-Tech Visa Zone - SQL Injection via view_news.php news_id Parameter
SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
by DeViL iRaQ
CVE-2008-4467 EXPLOITDB text VERIFIED
Vastal I-Tech Toner Cart - SQL Injection via show_series_ink.php id Parameter
SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.
by DeViL iRaQ
CVE-2008-4468 EXPLOITDB text VERIFIED
Vastal I-Tech Share Zone - SQL Injection via view_news.php id Parameter
SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter.
by DeViL iRaQ
CVE-2008-3953 EXPLOITDB text VERIFIED
Vastal I-Tech Shaadi Zone 1.0.9 - SQL Injection
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter.
by e.wiZz!
CVE-2008-4460 EXPLOITDB text VERIFIED
Vastal I-Tech MMORPG Zone - SQL Injection via game_id Parameter
SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter.
by Stack
CVE-2008-4464 EXPLOITDB text VERIFIED
Vastal I-Tech Mag Zone - SQL Injection via view_mags.php cat_id Parameter
SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
by Stack
CVE-2008-4463 EXPLOITDB text VERIFIED
Vastal I-Tech Jobs Zone - SQL Injection via view_news.php news_id Parameter
SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
by Stack
CVE-2008-4469 EXPLOITDB text VERIFIED
Vastal I-Tech Freelance Zone - SQL Injection via coder_id Parameter
SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter.
by Stack
CVE-2008-4465 EXPLOITDB text VERIFIED
Vastal I-Tech DVD Zone - SQL Injection via view_mags.php cat_id Parameter
SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
by DeViL iRaQ
CVE-2008-4466 EXPLOITDB text VERIFIED
Vastal I-Tech Cosmetics Zone - SQL Injection via cat_id Parameter
SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
by Stack
CVE-2008-3951 EXPLOITDB text VERIFIED
Vastal I-Tech Agent Zone - SQL Injection
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter.
by DeViL iRaQ
CVE-2008-6016 EXPLOITDB text VERIFIED
EsFaq 2.0 - SQL Injection via cid Parameter
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
by SuB-ZeRo
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
CVE-2008-3664 EXPLOITDB text VERIFIED
XRMS - Cross-Site Scripting via Multiple Input Parameters
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.
by Fabian Fingerle
By Source
All 31,394 Writeup 63,662 Exploitdb 50,095 Nomisec 22,706 Github 4,278 Metasploit 3,317 Vulncheck_xdb 933 Inthewild 514 Gitlab 487 Gitee 415 Patchapalooza 312
By Language
text 31,394 python 6,962 ruby 6,009 c 3,649 perl 2,849 html 2,080 php 1,335 bash 462 java 380 c++ 335 javascript 234 shell 156 go 79 typescript 26 postscript 25