Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

XchangeBoard 1.70 - 'boardID' SQL Injection

CVE-2008-3035—webappsphp

SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS little 0.0.1 - 'template' Local File Inclusion

CVE-2008-3036—webappsphp

Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Brightcode Weblinks - 'catid' SQL Injection

CVE-2008-3083—webappsphp

SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload

CVE-2008-3118—webappsphp

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Last Minute Script 4.0 - SQL Injection

CVE-2008-3125—webappsphp

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

pSys 0.7.0 Alpha - 'chatbox.php' SQL Injection

CVE-2008-3131—webappsphp

SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.3.1/1.5 - SQL Injection

CVE-2008-0255—webappsphp

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.1 (Windows) - 'blogpost' Local File Inclusion

CVE-2008-3194—webappsphp

Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCMS Portal Edition - 'id' SQL Injection

CVE-2008-3213—webappsphp

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

preCMS 1 - 'index.php' SQL Injection

CVE-2008-3254—webappsphp

SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência✓ VexDay Proof

Binn SBuilder - 'nid' Blind SQL Injection

CVE-2008-0253—webappsphp

SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.02 - 'Username' SQL Injection

CVE-2008-0254—webappsphp

SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disa

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arctic Issue Tracker 2.0.0 - 'filter' SQL Injection (2)

CVE-2008-3250—webappsphp

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3302—webappsphp

SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote aut

23RISCO

abrir ↗

Referência✓ VexDay Proof

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

CVE-2008-3307—webappsphp

SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Survey Poll - 'catid' SQL Injection

CVE-2008-3310—webappsasp

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Guestbook 3.2 - Insecure Cookie Handling

CVE-2008-3320—webappsphp

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (2)

CVE-2008-0262—webappsphp

SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ImageAlbum 2.0.0b2 - 'id' SQL Injection

CVE-2008-0288—webappsphp

Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation

CVE-2008-0310—localsco

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Uploader 4.0 - Insecure Cookie Handling

CVE-2008-3321—webappsphp

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrati

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aria 0.99-6 - 'page' Local File Inclusion

CVE-2008-0332—webappsphp

Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEcho CMS 2.0 - 'id' SQL Injection

CVE-2008-0355—webappsphp

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShopCartDx 4.30 - 'pid' SQL Injection

CVE-2008-3346—webappsphp

SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2 - 'id' SQL Injection

CVE-2008-3355—webappsphp

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg CMS 9.9.0 - 'story.php' SQL Injection

CVE-2008-3366—webappsphp

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gregarius 0.5.4 - SQL Injection

CVE-2008-3374—webappsphp

SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Browser Statistics 2.0 - Remote File Inclusion

CVE-2008-3402—webappsphp

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpLinkat 0.1 - Insecure Cookie Handling / SQL Injection

CVE-2008-3407—webappsphp

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow

CVE-2008-3408—localwindows

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.