Cezanne versions 6.5.1 and 7 suffer from multiple cross site scripting vulnerabilities that require a user to be logged in (which is what you want if you are stealing cookies).
e1e14a7ddd68b72ba1a764250adb739dCezanne versions 6.5.1 and 7 suffer from a cross site scripting vulnerability in the SleUserName parameter.
1a41c296ca3ba1ac476832e6b6d6a44aFones Clinic Mart suffers from a SQL injection vulnerability.
c98c0638f1e5dc2481a005b2334d4873Koobi CMS versions 4.2.4, 4.2.5, and 4.3.0 suffer from multiple remote SQL injection vulnerabilities.
25815beab0f8a5d9985a2a039cc72a3bKoobi Pro version 6.25 poll suffers from a remote SQL injection vulnerability.
0184bff7a5e6903772676f344650f828HP OpenView NNM version 7.5.1 remote buffer overflow exploit that takes advantage of a vulnerability in ovalarmsrv.exe.
8d9f57e3534aaf9d99c0d1537cb59ad3This code generates an emf file that demonstrates the Microsoft Windows GDI API stack overflow vulnerability as detailed in MS08-021. Spawns calc.exe.
7f3cc2f780f3efa06c3119aec6e31dadKwsPHP remote code execution exploit that leverages upload functionality.
d221056208fd2e321ac85c0a9e01f57fBosNews version 4.0 suffers from a remote SQL injection vulnerability.
3ef393dbfc125152741909aba2564072BosClassifieds version 3.0 suffers from a SQL injection vulnerability in index.php.
ce8cb4aab044b863cacf66df4b88291eSmallBiz eShop CMS suffers from a remote SQL injection vulnerability.
180ad8ee57217e33b63fa216f1836188SmallBiz 4 Seasons CMS suffers from a remote SQL injection vulnerability.
670f43482765a9f3a4bf7c21ccba0f9eMumbo Jumbo Media OP4 remote blind SQL injection exploit.
12ea56574653885c7cb7c88873d2ea75The Joomla extplorer component versions 2.0.0 RC2 and below suffer from a SQL injection vulnerability.
0f93cc77835a9b60b764adf8d174e80b1024 CMS versions 1.4.2 and below local file inclusion and blind SQL injection exploit.
0f0eee9b7ab45f1269cc30563e9cc575CcMail version 1.01 and below suffer from an insecure handling of cookie data.
a099015858da4fd785b318376fcc9c91Business Object Infoview XI R2 (Java version) suffers from a cross site scripting vulnerability.
c7fe440ea874c8f42354eeb63d8684abPostCard version 1.0 suffers from a remote insecure handling of cookie data.
94e707dc173d68b7c8ed0d266c749d3bcpCommerce version 1.1.0 suffers from cross site scripting, SQL injection, and local file inclusion vulnerabilities.
1f60052bf47c710d7274e7dfa07b223bPollbooth versions 2.0 and below suffer from a remote SQL injection vulnerability.
10bd768f6e8174bb5ac8517eca4b2a65phpAddressBook version 2.11 suffers from a SQL injection vulnerability in view.php.
42d16302b61da57693814d3f483a3289The Joomla joomlaXplorer component version 1.6.2 and below suffer from cross site scripting and directory traversal vulnerabilities.
d3d6e6627dbc22055d9b24f12a7e4c69XM Easy Personal FTP server version 5.4.0 PORT denial of service exploit.
8b223f49824c7b901eaff805e6bc6003XM Easy Personal FTP server version 5.4.0 XCWD denial of service exploit.
b03cda9b0d79dd383ca538d342d78472Exploit for HP OpenView Network Node Manager versions 7.53 and below that demonstrates null pointer, process termination, and denial of service vulnerabilities.
ae103749d3fcab7d8892feec6d9dede1