Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.900exploits catalogados

35.840CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

24.458 exploits

Exploit-DB✓ VexDay Proof

News Module for Envolution - 'modules.php' Multiple SQL Injections

CVE-2005-4263—webappsphp14 dic 2005

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands v

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting

CVE-2005-4317—webappsphp14 dic 2005

Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modificat

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Netref 3.0 - 'index.php' SQL Injection

CVE-2005-4198—webappsphp14 dic 2005

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection

CVE-2005-4243—webappsphp14 dic 2005

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection

CVE-2005-4228—webappsphp13 dic 2005

Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection

CVE-2005-4251—webappsphp13 dic 2005

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - 'index.php?id' SQL Injection

CVE-2005-4246—webappsphp13 dic 2005

SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection

CVE-2005-4244—webappsphp13 dic 2005

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion

CVE-2005-4211—webappsphp13 dic 2005

PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbi

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

EncapsGallery 1.0 - 'gallery.php' SQL Injection

CVE-2005-4234—webappsphp13 dic 2005

SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitra

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections

CVE-2005-4251—webappsphp13 dic 2005

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion

CVE-2005-4250—webappsphp13 dic 2005

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via t

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Plogger Beta 2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2005-4247—webappsphp13 dic 2005

Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject ar

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access

CVE-2005-4212—webappsphp13 dic 2005

Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary loc

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection

CVE-2005-4244—webappsphp13 dic 2005

SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting

CVE-2005-4241—webappsphp13 dic 2005

Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inje

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHP JackKnife 2.21 - Cross-Site Scripting

CVE-2005-4239—webappsphp13 dic 2005

Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote at

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting

CVE-2005-4238—webappsphp13 dic 2005

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

VCD-db 0.9x - 'search.php?by' SQL Injection

CVE-2005-4240—webappsphp13 dic 2005

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL co

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection

CVE-2005-4228—webappsphp13 dic 2005

Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow

CVE-2005-3808—doslinux13 dic 2005

Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

PHPWebGallery 1.3.4/1.5.1 - 'picture.php' SQL Injection

CVE-2005-4228—webappsphp13 dic 2005

Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQ

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

EveryAuction 1.53 - Auction.pl Cross-Site Scripting

CVE-2005-4229—webappscgi13 dic 2005

Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to injec

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting

CVE-2005-4245—webappsphp13 dic 2005

Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inj

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading

CVE-2005-4206MEDIUMwebappsjsp12 dic 2005

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allow

33RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

phpCOIN 1.2.2 - 'phpcoinsessid' SQL Injection / Remote Code Execution

CVE-2005-4213—webappsphp12 dic 2005

SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via th

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 dic 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

BTGrup Admin WebController - SQL Injection

CVE-2005-4207—webappsphp12 dic 2005

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Arab Portal 2.0 - 'Link.php' SQL Injection

CVE-2005-4221—webappsphp12 dic 2005

SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection

CVE-2005-4195—webappsphp12 dic 2005

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.