Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

5629 exploits

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RIESGO

abrir ↗

Referência✓ VexDay Proof

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

CVE-2008-1725—remotewindows

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator)

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BinGo News 3.01 - 'bnrep' Remote File Inclusion

CVE-2006-4648—webappsphp

PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'root' Remote File Inclusion

CVE-2008-1773—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arb

28RIESGO

abrir ↗

Referência✓ VexDay Proof

iScripts Socialware - 'id' SQL Injection

CVE-2008-1790—webappsphp

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbit

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Cheat Script 2.0 - 'id' SQL Injection

CVE-2008-1863—webappsphp

SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Dragoon 0.1 - 'lng' Local File Inclusion

CVE-2008-1798—webappsphp

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds 3.0 - 'index.php' SQL Injection

CVE-2008-1838—webappsphp

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

CVE-2008-1848—webappsphp

Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earl

23RIESGO

abrir ↗

Referência✓ VexDay Proof

LokiCMS 0.3.3 - Remote Command Execution

CVE-2008-1860—webappsphp

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Crazy Goomba 1.2.1 - 'id' SQL Injection

CVE-2008-1934—webappsphp

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Classifieds Caffe - 'cat_id' SQL Injection

CVE-2008-1936—webappsphp

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1957—webappsphp

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Aterr 0.9.1 - PHP5 Local File Inclusion

CVE-2008-1962—webappsphp

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary loca

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

CVE-2008-1973—doswindows

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Grape Statistics 0.2a - 'location' Remote File Inclusion

CVE-2008-1963—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attac

35RIESGO

abrir ↗

Referência✓ VexDay Proof

E RESERV 2.1 - 'index.php' SQL Injection

CVE-2008-1975—webappsphp

SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Referência✓ VexDay Proof

e107 module 123 flash chat 6.8.0 - Remote File Inclusion

CVE-2008-1989—webappsphp

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_g

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

CVE-2008-1990—webappsphp

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2028—webappsphp

miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2029—webappsphp

Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earli

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Angelo-Emlak 1.0 - Multiple SQL Injections

CVE-2008-2047—webappsasp

Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joovili 3.1 - 'browse.videos.php' SQL Injection

CVE-2008-2063—webappsphp

SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL command

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Web Host Directory Script - 'host_id' SQL Injection

CVE-2008-2087—webappsphp

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpDirectorySource 1.1 - Multiple SQL Injections

CVE-2008-2177—webappsphp

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote att

23RIESGO

abrir ↗

Referência✓ VexDay Proof

SmartBlog 1.3 - 'index.php' SQL Injection

CVE-2008-2183—webappsphp

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Anserv Auction XL - 'cat' SQL Injection

CVE-2008-2189—webappsphp

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL comman

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ScorpNews 1.0 - 'site' Remote File Inclusion

CVE-2008-2193—webappsphp

PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execu

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Miniweb 2.0 - 'historymonth' SQL Injection

CVE-2008-2197—webappsphp

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.