Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,866cataloged exploits

35,812CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,458Referência 22,573GitHub PoC 14,316VulnCheck XDB 8,722Nuclei 4,320Metasploit 3,477✓ verified onlyrecent popular risk

24,455 exploits

Exploit-DB✓ VexDay Proof

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2006-0470—webappsphp26 Dec 2005

Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject

23RISK

open ↗

Exploit-DB✓ VexDay Proof

EZ Invoice Inc. EZI 2.0 - 'Invoices.php' SQL Injection

CVE-2005-3845—webappsphp25 Dec 2005

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Exploit-DB✓ VexDay Proof

CS-Cart - Multiple SQL Injections

CVE-2005-4429—webappsphp25 Dec 2005

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_

23RISK

open ↗

Exploit-DB✓ VexDay Proof

LogicBill 1.0 - Multiple SQL Injections

CVE-2005-4430—webappsphp25 Dec 2005

SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via t

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Dev Web Management System 1.5 - 'cat' SQL Injection

CVE-2005-4554—webappsphp24 Dec 2005

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute ar

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting

CVE-2005-4574—webappscfm23 Dec 2005

Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows rem

23RISK

open ↗

Exploit-DB✓ VexDay Proof

oracle Application server discussion forum portlet - Multiple Vulnerabilities

CVE-2005-4550—webappsjsp23 Dec 2005

The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the

23RISK

open ↗

Exploit-DB✓ VexDay Proof

PHP-Fusion 6.00.3 - 'rating' SQL Injection

CVE-2005-4517—webappsphp23 Dec 2005

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Exploit-DB✓ VexDay Proof

McAfee VirusScan 8.0 - Path Specification Privilege Escalation

CVE-2005-4505—localwindows22 Dec 2005

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might al

23RISK

open ↗

Exploit-DB✓ VexDay Proof

httprint 202.0 - HTTP Response Server Field Overflow Denial of Service

CVE-2005-4503—dosmultiple22 Dec 2005

httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Tangora Portal CMS 4.0 - 'Action' Cross-Site Scripting

CVE-2005-4497—webappsasp22 Dec 2005

Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitra

23RISK

open ↗

Exploit-DB✓ VexDay Proof

MusicBox 2.3 - 'type' SQL Injection

CVE-2005-4500—webappsphp22 Dec 2005

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show a

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - KHTMLParser Remote Denial of Service

CVE-2005-4504—dososx22 Dec 2005

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safar

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Beehive Forum 0.6.2 - 'index.php' SQL Injection

CVE-2005-4461—webappsphp22 Dec 2005

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection

CVE-2005-4502—remotemultiple22 Dec 2005

Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attack

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'print.php' Multiple SQL Injections

CVE-2005-4478—webappsphp21 Dec 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4488—webappscgi21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SyntaxCMS - Search Query Cross-Site Scripting

CVE-2005-4496—webappsphp21 Dec 2005

Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Sitekit CMS 6.6 - 'registration-form.html?ClickFrom' Cross-Site Scripting

CVE-2005-4491—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbi

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'requestDemo.asp?Invalid' Cross-Site Scripting

CVE-2005-4490—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'articleSearch.asp' Cross-Site Scripting

CVE-2005-4490—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'account_login.asp' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4490—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'Guestbook.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 Dec 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities

CVE-2005-4460—webappsphp21 Dec 2005

Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'pmprojects.asp?projectid' Cross-Site Scripting

CVE-2005-4485—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Papoo 2.1.2 - 'index.php?menuid' SQL Injection

CVE-2005-4478—webappsphp21 Dec 2005

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comman

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service

CVE-2005-4466—dosmultiple21 Dec 2005

Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remo

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Commercial Interactive Media SCOOP! 2.3 - 'articleZone.asp?Invalid' Cross-Site Scripting

CVE-2005-4490—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Tolva 0.1 - 'Usermods.php' Remote File Inclusion

CVE-2005-4462—webappsphp21 Dec 2005

PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execu

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ProjectApp 3.3 - 'cat.asp?keywords' Cross-Site Scripting

CVE-2005-4485—webappsasp21 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbit

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.