Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

80,184cataloged exploits
37,029CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,476Referência 23,521GitHub PoC 15,321VulnCheck XDB 8,970Nuclei 4,394Metasploit 3,502✓ verified onlyrecentpopularrisk
19,066 exploits
Exploit-DB✓ VexDay Proof
Z1Exchange 1.0 - 'id' Cross-Site Scripting
CVE-2008-6386—webappsphp02 Dec 2008
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary we
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Jbook - SQL Injection
CVE-2008-6376—webappsasp02 Dec 2008
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the passw
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Orkut Clone - 'profile_social.php?id' Cross-Site Scripting
CVE-2008-5971—webappsphp02 Dec 2008
Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Orkut Clone - 'profile_social.php?id' SQL Injection
CVE-2008-5970—webappsphp02 Dec 2008
SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to exe
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Fantastico - 'index.php' Local File Inclusion
CVE-2008-6843—webappsphp02 Dec 2008
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Z1Exchange 1.0 - 'id' SQL Injection
CVE-2008-6392—webappsphp02 Dec 2008
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IBM Rational ClearCase 7/8 - Cross-Site Scripting
CVE-2008-5330—webappsmultiple01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCa
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting
CVE-2008-6888—webappsasp01 Dec 2008
Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting
CVE-2008-6891—webappsasp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting
CVE-2008-6847—webappsasp01 Dec 2008
Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to injec
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Octeth Oempro 3.5.5 - Multiple SQL Injections
CVE-2008-3058—webappsphp01 Dec 2008
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote atta
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting
CVE-2008-5976—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection
CVE-2008-6887—webappsasp01 Dec 2008
SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
CodeToad ASP Shopping Cart Script - Cross-Site Scripting
CVE-2008-6500—webappsasp01 Dec 2008
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
E.Z. Poll 2 - Authentication Bypass
CVE-2008-3590—webappsphp01 Dec 2008
Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQ
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting
CVE-2008-6891—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Softbiz Classifieds Script - 'showcategory.php?radio' Cross-Site Scripting
CVE-2008-6325—webappsphp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbit
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'messages.asp?message_id' SQL Injection
CVE-2008-6890—webappsasp01 Dec 2008
SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL command
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP JOBWEBSITE PRO - 'adname' SQL Injection
CVE-2008-5977—webappsphp01 Dec 2008
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ASP Forum Script - 'default.asp' Query String Cross-Site Scripting
CVE-2008-6891—webappsasp01 Dec 2008
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Price Comparison 4 - 'ProductID' Blind SQL Injection
CVE-2008-5638—webappsphp30 Nov 2008
Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Price Comparison 4 - 'ProductID' Blind SQL Injection
CVE-2008-5975—webappsphp30 Nov 2008
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
KTP Computer Customer Database CMS 1.0 - Blind SQL Injection
CVE-2008-5954—webappsphp30 Nov 2008
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows re
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection
CVE-2008-5978—webappsasp29 Nov 2008
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Active Web Mail 4 - Authentication Bypass
CVE-2008-5974—webappsasp29 Nov 2008
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute ar
23RISK
open ↗
← previouspage 283 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.