Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Mybizz-Classifieds - 'cat' SQL Injection

CVE-2008-2845—webappsphp

SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

geccBBlite 2.0 - 'id' SQL Injection

CVE-2008-4517—webappsphp

SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

myEvent 1.6 - 'eventdate' SQL Injection

CVE-2008-4650—webappsphp

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aj RSS Reader - 'url' SQL Injection

CVE-2008-4753—webappsphp

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambads 1.0 RC1 Beta - SQL Injection

CVE-2008-5226—webappsphp

SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

SHOP-INET 4 - 'grid' SQL Injection

CVE-2009-0292—webappsphp

SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Script Toko Online 5.01 - SQL Injection

CVE-2009-0296—webappsphp

SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module eEmpregos - 'cid' SQL Injection

CVE-2008-0874—webappsphp

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)

CVE-2006-3904—webappsphp

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Freelancers - 'project' SQL Injection

CVE-2008-1864—webappsphp

SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

w-Agora 4.2.1 - 'cat' SQL Injection

CVE-2007-6647—webappsphp

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netious CMS 0.4 - 'pageid' SQL Injection

CVE-2008-2461—webappsphp

SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

MojoClassifieds 2.0 - Blind SQL Injection

CVE-2008-3382—webappscgi

SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Living Local Website - 'listtest.php' SQL Injection

CVE-2008-3943—webappsphp

SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Cosmetics Zone - 'cat_id' SQL Injection

CVE-2008-4466—webappsphp

SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shahrood - Blind SQL Injection

CVE-2008-5003—webappsphp

SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote File Inclusion / SQL Injection

CVE-2008-5333—webappsphp

SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDNews 2.0 - SQL Injection

CVE-2008-5820—webappsphp

SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Membership Manager Pro - Authentication Bypass

CVE-2008-6390—webappsphp

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection

CVE-2008-6989—webappsphp

SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCMS Portal Edition - 'id' SQL Injection

CVE-2008-3213—webappsphp

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AstroSPACES 1.1.1 - 'id' SQL Injection

CVE-2008-4642—webappsphp

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jamit Job Board 3.x - Blind SQL Injection

CVE-2008-5295—webappsphp

SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Number Links 1 - 'id' SQL Injection

CVE-2008-5804—webappsphp

SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Auction - Blind SQL Injection

CVE-2008-6778—webappsphp

SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6883—webappsphp

SQL injection vulnerability in the Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection

CVE-2008-4518—webappsphp

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection

CVE-2008-5166—webappsphp

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

PG Job Site - Blind SQL Injection

CVE-2008-6117—webappsphp

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB 3 - Mod Tag Board 4 Blind SQL Injection

CVE-2008-6314—webappsphp

SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.