Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,112cataloged exploits
40,548CVEs with public exploitation
24,696lab-tested
AllReferência 26,327Exploit-DB 24,488GitHub PoC 18,072VulnCheck XDB 10,121Nuclei 4,567Metasploit 3,537✓ verified onlyrecentpopularrisk
19,067 exploits
Exploit-DB✓ VexDay Proof
FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting
CVE-2005-4365—webappsphp19 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting
CVE-2005-4516—webappsphp19 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to in
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - HTTP Request Denial of Service (2)
CVE-2005-4360—doswindows19 Dec 2005
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke
45RISK
open ↗
Exploit-DB✓ VexDay Proof
Miraserver 1.0 RC4 - 'index.php?page' SQL Injection
CVE-2005-4408—webappsphp19 Dec 2005
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL
23RISK
open ↗
Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting
CVE-2005-4374—webappsasp19 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Info-ZIP UnZip 5.x - File Name Buffer Overflow
CVE-2005-4667—remotelinux19 Dec 2005
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename c
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IHTML Merchant 2.0 - SQL Injection
CVE-2005-4331—webappsphp16 Dec 2005
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitra
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WebGlimpse 2.x - Cross-Site Scripting
CVE-2005-4328—webappscgi16 Dec 2005
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to i
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 Dec 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PHP Arena PAFileDB Extreme Edition - SQL Injection
CVE-2005-4329—webappsphp16 Dec 2005
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attacke
23RISK
open ↗
Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion
CVE-2005-4302—webappsphp16 Dec 2005
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitr
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting
CVE-2005-4307—webappscgi16 Dec 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4327—webappscgi16 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject a
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting
CVE-2005-4333—webappscgi16 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
CVE-2005-4303—webappsphp16 Dec 2005
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting
CVE-2005-4307—webappscgi16 Dec 2005
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISK
open ↗
Exploit-DB✓ VexDay Proof
IHTML Merchant Mall - SQL Injection
CVE-2005-4330—webappsphp16 Dec 2005
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL comm
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4333—webappscgi16 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISK
open ↗
Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - Remote File Inclusion
CVE-2005-4287—webappsphp15 Dec 2005
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting
CVE-2005-4293—webappscgi15 Dec 2005
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ZixForum 1.12 - 'forum.asp' Multiple SQL Injections
CVE-2005-4334—webappsasp15 Dec 2005
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID para
23RISK
open ↗
Exploit-DB✓ VexDay Proof
AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4298—webappscgi15 Dec 2005
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject ar
23RISK
open ↗
Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?id' SQL Injection
CVE-2005-4416—webappsphp15 Dec 2005
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RISK
open ↗
Exploit-DB✓ VexDay Proof
ECTOOLS Onlineshop 1.0 - Cross-Site Scripting
CVE-2005-4291—webappscgi15 Dec 2005
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to in
23RISK
open ↗
Exploit-DB✓ VexDay Proof
PPCal Shopping Cart 3.3 - Cross-Site Scripting
CVE-2005-4314—webappscgi15 Dec 2005
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers t
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Watchfire AppScan QA 5.0.x - Remote Code Execution
CVE-2005-4270—remotewindows15 Dec 2005
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an H
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting
CVE-2005-4306—webappscgi15 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4306—webappscgi15 Dec 2005
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RISK
open ↗
Exploit-DB✓ VexDay Proof
eDatCat 3.0 - EDCstore.pl Cross-Site Scripting
CVE-2005-4289—webappscgi15 Dec 2005
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web s
23RISK
open ↗
← previouspage 454 / 636next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.