Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,587cataloged exploits

35,644CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,428GitHub PoC 14,268VulnCheck XDB 8,663Nuclei 4,299Metasploit 3,474✓ verified onlyrecent popular risk

22,407 exploits

Referência✓ VexDay Proof

NMDeluxe 1.0.1 - 'footer.php?template' Local File Inclusion

CVE-2007-2303—webappsphp

Directory traversal vulnerability in includes/footer.php in News Manager Deluxe (NMDeluxe) 1.0.1 allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection / Local File Inclusion

CVE-2007-2304—webappsphp

Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote at

23RISK

open ↗

Referência✓ VexDay Proof

mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion

CVE-2007-2313—webappsphp

PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Papoo 3.02 - kontakt menuid SQL Injection

CVE-2007-2320—webappsphp

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL co

23RISK

open ↗

Referência✓ VexDay Proof

JulmaCMS 1.4 - 'file.php' Remote File Disclosure

CVE-2007-2324—webappsphp

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. (

23RISK

open ↗

Referência✓ VexDay Proof

PHPOracleView - 'include_all.inc.php?page_dir' Remote File Inclusion

CVE-2007-2340—webappsphp

Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to

35RISK

open ↗

Referência✓ VexDay Proof

CreaDirectory 1.2 - 'error.asp?id' SQL Injection

CVE-2007-2342—webappsasp

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary S

23RISK

open ↗

Referência✓ VexDay Proof

CodeWand phpBrowse - 'site_path' Remote File Inclusion

CVE-2007-2345—webappsphp

PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

burnCMS 0.2 - 'root' Remote File Inclusion

CVE-2007-2364—webappsphp

Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrar

23RISK

open ↗

Referência✓ VexDay Proof

Friendly 1.0d1 - 'friendly_path' Remote File Inclusion

CVE-2007-2569—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbit

23RISK

open ↗

Referência

CVE-2017-17596

CVE-2017-17596—

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

23RISK

open ↗

Referência✓ VexDay Proof

Wikivi5 - 'show.php?sous_rep' Remote File Inclusion

CVE-2007-2570—webappsphp

PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrar

23RISK

open ↗

Referência

CVE-2017-17596

CVE-2017-17596—

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

23RISK

open ↗

Referência✓ VexDay Proof

XOOPS Module wfquotes 1.0 - SQL Injection

CVE-2007-2571—webappsphp

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbit

23RISK

open ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'mfa_theme.php' Remote File Inclusion

CVE-2007-2572—webappsphp

PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,

23RISK

open ↗

Referência✓ VexDay Proof

PHPtree 1.3 - 'cms2.php?s_dir' Remote File Inclusion

CVE-2007-2573—webappsphp

PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

Archangel Weblog 0.90.02 - Local File Inclusion / Authentication Bypass

CVE-2007-2574—webappsphp

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fil

23RISK

open ↗

Referência

CVE-2007-2583

CVE-2007-2583—

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depen

28RISK

open ↗

Referência✓ VexDay Proof

aForum 1.32 - 'CommonAbsDir' Remote File Inclusion

CVE-2007-2596—webappsphp

PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

telltarget 1.3.3 - 'tt_docroot' Remote File Inclusion

CVE-2007-2597—webappsphp

Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary P

28RISK

open ↗

Referência✓ VexDay Proof

SimpleNews 1.0.0 FINAL - 'print.php?news_id' SQL Injection

CVE-2007-2598—webappsphp

SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2599—webappsphp

Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

TutorialCMS 1.00 - 'search.php?search' SQL Injection

CVE-2007-2600—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remo

23RISK

open ↗

Referência✓ VexDay Proof

LaVague 0.3 - 'printbar.php?views_path' Remote File Inclusion

CVE-2007-2607—webappsphp

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers t

45RISK

open ↗

Referência✓ VexDay Proof

Miplex2 - 'SmartyFU.class.php' Remote File Inclusion

CVE-2007-2608—webappsphp

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to e

23RISK

open ↗

Referência✓ VexDay Proof

PHPLojaFacil 0.1.5 - 'path_local' Remote File Inclusion

CVE-2007-2615—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbi

23RISK

open ↗

Referência✓ VexDay Proof

Original 0.11 - 'config.inc.php?x[1]' Remote File Inclusion

CVE-2007-2620—webappsphp

PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote

23RISK

open ↗

Referência✓ VexDay Proof

Monalbum 0.8.7 - Remote Code Execution

CVE-2007-2647—webappsphp

Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users

23RISK

open ↗

Referência✓ VexDay Proof

BlogMe 3.0 - 'archshow.asp?var' SQL Injection

CVE-2007-2661—webappsasp

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via

23RISK

open ↗

Referência✓ VexDay Proof

Notepad++ 4.1 (Windows x86) - '.ruby' File Processing Buffer Overflow

CVE-2007-2666—localwindows_x86

Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, all

28RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.