Files
exploitdb/platforms/multiple/webapps
Offensive Security 897e1fa191 DB: 2016-12-24
3 new exploits

WinFTP Server 2.0.2 - (PASV) Remote Denial of Service
WinFTP Server 2.0.2 - 'PASV' Remote Denial of Service

WinFTP Server 2.3.0 - (NLST) Denial of Service
WinFTP Server 2.3.0 - 'NLST' Denial of Service

vxFtpSrv 2.0.3 - CWD command Remote Buffer Overflow (PoC)
vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)

OpenSSH < 7.4 - 'UsePrivilegeSeparation Disabled' Forwarded Unix Domain Sockets Privilege Escalation

X7 Chat 2.0.5 - lib/message.php preg_replace() PHP Code Execution (Metasploit)
X7 Chat 2.0.5 - 'message.php' PHP Code Execution (Metasploit)

OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading

X7 Chat 2.0 - (help_file) Remote Command Execution
X7 Chat 2.0 - 'help_file' Parameter Remote Command Execution
Ultimate WebBoard 3.00 - (Category) SQL Injection
PromoteWeb MySQL - 'go.php id' SQL Injection
212Cafe Board 0.07 - (view.php qID) SQL Injection
Ultimate WebBoard 3.00 - 'Category' Parameter SQL Injection
PromoteWeb MySQL - 'id' Parameter SQL Injection
212Cafe Board 0.07 - 'qID' Parameter SQL Injection
The Gemini Portal - 'lang' Remote File Inclusion
RPG.Board 0.0.8Beta2 - (showtopic) SQL Injection
ASPapp KnowledgeBase - 'catid' SQL Injection
The Gemini Portal 4.7 - 'lang' Parameter Remote File Inclusion
RPG.Board 0.0.8Beta2 - 'showtopic' Parameter SQL Injection
ASPapp KnowledgeBase - 'catid' Parameter SQL Injection

X7 Chat 2.0.1A1 - (mini.php help_file) Local File Inclusion
X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion
CoAST 0.95 - (sections_file) Remote File Inclusion
Real Estate Manager - 'cat_id' SQL Injection
LnBlog 0.9.0 - (plugin) Local File Inclusion
PlugSpace 0.1 - (index.php navi) Local File Inclusion
MyCard 1.0.2 - (gallery.php id) SQL Injection
PowerPortal 2.0.13 - 'path' Local Directory Traversal
PHP-Lance 1.52 - (show.php catid) SQL Injection
Yoxel 1.23beta - (itpm_estimate.php a) Remote Code Execution
CoAST 0.95 - 'sections_file' Parameter Remote File Inclusion
Real Estate Manager 1.01 - 'cat_id' Parameter SQL Injection
LnBlog 0.9.0 - 'plugin' Parameter Local File Inclusion
PlugSpace 0.1 - 'navi' Parameter Local File Inclusion
MyCard 1.0.2 - 'id' Parameter SQL Injection
PowerPortal 2.0.13 - 'path' Parameter Local Directory Traversal
PHP-Lance 1.52 - 'catid' Parameter SQL Injection
Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution

ZEELYRICS 2.0 - (bannerclick.php adid) SQL Injection
ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection
Pro Chat Rooms 3.0.3 - (guid) SQL Injection
Pilot Group eTraining - 'news_read.php id' SQL Injection
BbZL.php 0.92 - (lien_2) Local Directory Traversal
Pro Chat Rooms 3.0.3 - SQL Injection
Pilot Group eTraining - 'news_read.php' SQL Injection
BbZL.php 0.92 - 'lien_2' Parameter Local Directory Traversal

Arcadem Pro - 'articlecat' SQL Injection
Arcadem Pro - 'articlecat' Parameter SQL Injection
ArabCMS - 'rss.php rss' Local File Inclusion
FAQ Management Script - 'catid' SQL Injection
ArabCMS - 'rss.php' Local File Inclusion
FAQ Management Script - 'catid' Parameter SQL Injection

BookMarks Favourites Script - 'view_group.php id' SQL Injection
BookMarks Favourites Script - 'id' Parameter SQL Injection

BMForum 5.6 - (tagname) SQL Injection
BMForum 5.6 - 'tagname' Parameter SQL Injection
Crux Gallery 1.32 - (index.php theme) Local File Inclusion
phpScheduleIt 1.2.10 - (reserve.php) Remote Code Execution
RPortal 1.1 - (file_op) Remote File Inclusion
Crux Gallery 1.32 - 'theme' Parameter Local File Inclusion
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
RPortal 1.1 - 'file_op' Parameter Remote File Inclusion

Link Trader - 'ratelink.php lnkid' SQL Injection
Link Trader - 'lnkid' Parameter SQL Injection
OLIB 7 WebView 2.5.1.1 - (infile) Local File Inclusion
OpenX 2.6 - (ac.php bannerid) Blind SQL Injection
OLIB 7 WebView 2.5.1.1 - 'infile' Parameter Local File Inclusion
OpenX 2.6 - 'bannerid' Parameter Blind SQL Injection

X7 Chat 2.0.5 - (Authentication Bypass) SQL Injection
X7 Chat 2.0.5 - Authentication Bypass

Arcadem Pro 2.8 - (article) Blind SQL Injection
Arcadem Pro 2.8 - 'article' Parameter Blind SQL Injection

Link Trader - (lnkid) SQL Injection

phpScheduleIt PHP - reserve.php start_date Parameter Arbitrary Code Injection (Metasploit)
phpScheduleIt 1.2.10 - 'reserve.php' Arbitrary Code Injection (Metasploit)

PowerPortal 1.1/1.3 - modules.php Traversal Arbitrary Directory Listing
PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing

Atomic Photo Album 0.x/1.0 - Apa_PHPInclude.INC.php Remote File Inclusion
Atomic Photo Album 0.x/1.0 - 'Apa_PHPInclude.INC.php' Remote File Inclusion
BMForum 3.0 - topic.php Multiple Parameter Cross-Site Scripting
BMForum 3.0 - forums.php Multiple Parameter Cross-Site Scripting
BMForum 3.0 - post.php forumid Parameter Cross-Site Scripting
BMForum 3.0 - announcesys.php forumid Parameter Cross-Site Scripting
BMForum 3.0 - 'topic.php' Cross-Site Scripting
BMForum 3.0 - 'forums.php' Cross-Site Scripting
BMForum 3.0 - 'post.php' Cross-Site Scripting
BMForum 3.0 - 'announcesys.php' Cross-Site Scripting
PowerPortal 1.1/1.3 - 'index.php' search Parameter Cross-Site Scripting
PowerPortal 1.1/1.3 - search.php search Parameter Cross-Site Scripting
PowerPortal 1.1/1.3 - 'index.php' Cross-Site Scripting
PowerPortal 1.1/1.3 - 'search.php' Cross-Site Scripting
X7 Chat 2.0.4 - sources/frame.php room Parameter Cross-Site Scripting
X7 Chat 2.0.4 - upgradev1.php INSTALL_X7CHATVERSION Parameter Cross-Site Scripting
X7 Chat 2.0.4 - 'frame.php' Cross-Site Scripting
X7 Chat 2.0.4 - 'upgradev1.php' Cross-Site Scripting
BMForum 5.6 - 'index.php' outpused Parameter Cross-Site Scripting
BMForum 5.6 - newtem/footer/bsd01footer.php Multiple Parameter Cross-Site Scripting
BMForum 5.6 - newtem/header/bsd01header.php Multiple Parameter Cross-Site Scripting
BMForum 5.6 - 'index.php' Cross-Site Scripting
BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting
BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting
Pilot Group eTraining - courses_login.php cat_id Parameter Cross-Site Scripting
Pilot Group eTraining - news_read.php id Parameter Cross-Site Scripting
Pilot Group eTraining - lessons_login.php Multiple Parameter Cross-Site Scripting
Pilot Group eTraining - 'courses_login.php' Cross-Site Scripting
Pilot Group eTraining - 'news_read.php' Cross-Site Scripting
Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting

OpenX - /www/admin/plugin-index.php parent Parameter Cross-Site Scripting
OpenX 2.8.10 - 'plugin-index.php' Cross-Site Scripting

Apache mod_session_crypto - Padding Oracle
2016-12-24 05:01:17 +00:00
..
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2015-05-16 05:03:20 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2015-05-15 05:02:32 +00:00
2015-05-15 05:02:32 +00:00
2015-05-15 05:02:32 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2015-05-15 05:02:32 +00:00
2015-05-15 05:02:32 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2016-10-28 11:54:09 +00:00
2013-12-03 19:44:07 +00:00
2015-05-15 05:02:32 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2016-04-09 05:02:52 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2013-12-03 19:44:07 +00:00
2015-04-20 12:44:13 +00:00
2015-04-20 12:44:13 +00:00
2013-12-03 19:44:07 +00:00
2014-01-29 04:25:13 +00:00
2016-09-03 13:13:25 +00:00
2016-05-17 05:03:19 +00:00
2016-04-09 05:02:52 +00:00
2016-09-03 13:13:25 +00:00
2014-02-18 04:28:00 +00:00
2015-04-20 12:44:13 +00:00
2014-03-02 04:29:43 +00:00
2014-03-12 04:28:49 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2014-04-02 04:33:32 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2014-04-18 04:35:42 +00:00
2014-04-18 04:35:42 +00:00
2016-09-03 13:13:25 +00:00
2014-04-18 04:35:42 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2014-05-11 04:36:48 +00:00
2014-05-17 04:36:26 +00:00
2014-05-21 04:37:01 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2014-06-13 04:39:15 +00:00
2016-09-03 13:13:25 +00:00
2014-06-16 04:38:42 +00:00
2014-06-16 04:38:42 +00:00
2014-06-16 04:38:42 +00:00
2014-06-16 04:38:42 +00:00
2015-04-20 12:44:13 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2014-07-09 04:38:20 +00:00
2014-07-09 04:38:20 +00:00
2014-07-21 04:37:32 +00:00
2016-06-24 05:06:19 +00:00
2014-07-27 04:39:52 +00:00
2016-09-03 13:13:25 +00:00
2014-08-03 04:38:16 +00:00
2015-04-20 12:44:13 +00:00
2014-08-27 04:39:23 +00:00
2014-08-28 04:39:51 +00:00
2015-04-20 12:44:13 +00:00
2014-09-03 04:43:43 +00:00
2014-09-09 04:45:07 +00:00
2014-09-10 04:44:48 +00:00
2014-10-04 04:45:25 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2014-10-08 04:44:30 +00:00
2016-09-03 13:13:25 +00:00
2014-10-11 04:45:11 +00:00
2014-10-22 04:44:36 +00:00
2014-10-29 04:45:11 +00:00
2014-11-12 04:43:24 +00:00
2014-11-18 04:48:27 +00:00
2015-04-20 12:44:13 +00:00
2014-11-18 04:48:27 +00:00
2016-09-03 13:13:25 +00:00
2014-11-16 04:49:47 +00:00
2014-11-16 04:49:47 +00:00
2014-11-18 04:48:27 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2015-01-17 08:35:34 +00:00
2015-01-28 08:35:58 +00:00
2015-01-28 08:35:58 +00:00
2015-04-20 12:44:13 +00:00
2015-01-31 08:36:01 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2016-09-03 13:13:25 +00:00
2015-04-20 12:44:13 +00:00
2015-04-22 05:02:28 +00:00
2016-04-09 05:02:52 +00:00
2015-05-19 05:03:23 +00:00
2015-06-13 05:02:28 +00:00
2015-06-20 05:02:50 +00:00
2015-06-21 05:03:06 +00:00
2015-06-27 05:02:05 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2015-07-12 05:03:09 +00:00
2015-07-12 05:03:09 +00:00
2015-07-12 05:03:09 +00:00
2015-07-25 05:02:16 +00:00
2015-07-25 05:02:16 +00:00
2015-07-28 05:02:23 +00:00
2015-08-16 05:02:57 +00:00
2015-08-16 05:02:57 +00:00
2015-08-16 05:02:57 +00:00
2015-08-17 05:01:49 +00:00
2015-08-19 05:01:48 +00:00
2016-09-03 13:13:25 +00:00
2016-09-03 13:13:25 +00:00
2015-09-15 05:03:06 +00:00
2015-09-15 05:03:06 +00:00
2015-10-01 05:02:54 +00:00
2015-10-12 05:03:25 +00:00
2016-09-03 13:13:25 +00:00
2015-11-06 05:02:38 +00:00
2015-11-06 05:02:38 +00:00
2015-11-17 05:03:43 +00:00
2015-12-02 05:02:23 +00:00
2016-01-15 05:03:56 +00:00
2016-01-15 05:03:56 +00:00
2016-09-03 13:13:25 +00:00
2016-01-29 05:03:51 +00:00
2016-02-03 05:02:35 +00:00
2016-02-03 05:02:35 +00:00
2016-02-09 05:03:34 +00:00
2016-09-03 13:13:25 +00:00
2016-02-13 05:03:17 +00:00
2016-02-17 05:01:40 +00:00
2016-02-17 05:01:40 +00:00
2016-02-18 05:01:30 +00:00
2016-03-24 05:03:51 +00:00
2016-03-29 05:02:00 +00:00
2016-04-28 05:03:01 +00:00
2016-05-18 05:02:15 +00:00
2016-07-21 05:06:28 +00:00
2016-07-21 05:06:28 +00:00
2016-07-21 05:06:28 +00:00
2016-09-08 05:08:29 +00:00
2016-12-11 05:01:17 +00:00
2016-12-20 05:01:16 +00:00
2016-12-24 05:01:17 +00:00