d3v1l vulnerabilities and exploits

(subscribe to this query)

NA

Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote malicious users to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.

Joomlashowroom Pro Desk Support Center 1.0 Joomlashowroom Pro Desk Support Center 1.2

2 EDB exploits

NA

SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulnerable.

Wsn Links Wsn Links 2.22 Wsn Links Wsn Links 2.23

1 EDB exploit

NA

SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Wsn Links Wsn Links 2.20

1 EDB exploit

NA

Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) articles, or (4) suggest-category; or (5) sort parameter ...

Esyndicat Esyndicat Pro 2.3.05

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote malicious users to inject arbitrary web script or HTML via the apa_album_ID parameter.

Constantin Charissis Atomic Photo Album 1.1.0 Pre4

1 EDB exploit

NA

SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote malicious users to execute arbitrary SQL commands via the id parameter.

H\\&h Websoccer 2.80

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote malicious users to inject arbitrary web script or HTML via the PID parameter.

Dew-code Dew-newphplinks 2.0

1 EDB exploit

NA

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote malicious users to read arbitrary files via a .. (dot dot) in the show parameter.

Dew-code Dew-newphplinks 2.0

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter.

Mnt-tech Wp-facethumb 0.1

1 EDB exploit

NA

SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote malicious users to execute arbitrary SQL commands via the kat parameter.

Jetik Jetik-web -

1 EDB exploit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook