Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

75,710cataloged exploits

34,594CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,624GitHub PoC 13,720VulnCheck XDB 8,225Nuclei 4,231Metasploit 3,467✓ verified onlyrecent popular risk

21,624 exploits

Referência✓ VexDay Proof

CMS WebManager-Pro - Multiple SQL Injections

CVE-2008-2351—webappsphp

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência✓ VexDay Proof

E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection

CVE-2008-2867—webappsphp

SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL

23RISK

open ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection

CVE-2008-4518—webappsphp

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbit

23RISK

open ↗

Referência✓ VexDay Proof

Link ADS 1 - 'linkid' SQL Injection

CVE-2008-2869—webappsphp

SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

XOOPS Module makale 0.26 - SQL Injection

CVE-2008-4653—webappsphp

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote

23RISK

open ↗

Referência✓ VexDay Proof

PHP-Fusion Mod recept - 'kat_id' SQL Injection

CVE-2008-4527—webappsphp

SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to

23RISK

open ↗

Referência✓ VexDay Proof

Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection

CVE-2008-5166—webappsphp

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm

23RISK

open ↗

Referência✓ VexDay Proof

PG Job Site - Blind SQL Injection

CVE-2008-6117—webappsphp

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

Tips Complete Website 1.2.0 - 'tipid' SQL Injection

CVE-2008-5168—webappsphp

SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência

CVE-2010-4944

CVE-2010-4944—

SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attac

23RISK

open ↗

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - Authentication Bypass

CVE-2008-6623—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta

23RISK

open ↗

Referência✓ VexDay Proof

WEBBDOMAIN Polls 1.01 - Authentication Bypass

CVE-2008-6625—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

FluentCMS - 'view.php' SQL Injection

CVE-2008-6642—webappsphp

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL com

23RISK

open ↗

Referência

CVE-2010-0764

CVE-2010-0764—

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISK

open ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISK

open ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISK

open ↗

Referência

CVE-2008-6277

CVE-2008-6277—

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote at

23RISK

open ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISK

open ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISK

open ↗

Referência

CVE-2010-1727

CVE-2010-1727—

SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência

CVE-2010-1656

CVE-2010-1656—

SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute a

23RISK

open ↗

Referência

CVE-2009-3438

CVE-2009-3438—

SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut

23RISK

open ↗

Referência

CVE-2009-3310

CVE-2009-3310—

SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência

CVE-2009-3116

CVE-2009-3116—

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência

CVE-2009-2593

CVE-2009-2593—

SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência

CVE-2008-4458

CVE-2008-4458—

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute a

23RISK

open ↗

Referência✓ VexDay Proof

XplodPHP AutoTutorials 2.1 - 'id' SQL Injection

CVE-2008-1889—webappsphp

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled,

23RISK

open ↗

Referência✓ VexDay Proof

5 star review - Cross-Site Scripting / SQL Injection

CVE-2008-3780—webappsphp

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.