Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,449cataloged exploits

35,552CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,451Referência 22,367GitHub PoC 14,225VulnCheck XDB 8,649Nuclei 4,283Metasploit 3,474✓ verified onlyrecent popular risk

24,451 exploits

Exploit-DB✓ VexDay Proof

PHP iCalendar 1.1/2.x - 'week.php' Cross-Site Scripting

CVE-2006-6824—webappsphp27 Dec 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow r

23RISK

Exploit-DB✓ VexDay Proof

PHP iCalendar 1.1/2.x - 'day.php' Cross-Site Scripting

CVE-2006-6824—webappsphp27 Dec 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow r

23RISK

Exploit-DB✓ VexDay Proof

PHP iCalendar 1.1/2.x - 'search.php' Cross-Site Scripting

CVE-2006-6824—webappsphp27 Dec 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow r

23RISK

Exploit-DB✓ VexDay Proof

PHP iCalendar 1.1/2.x - 'print.php' Cross-Site Scripting

CVE-2006-6824—webappsphp27 Dec 2006

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow r

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.http_indexer_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.layout_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.lib_indexer_universal_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'counter.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.edit_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.parser_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.cache_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'parser.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.session_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

phpCMS 1.1.7 - 'class.search_PHPcms.php' Remote File Inclusion

CVE-2006-3019—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP co

23RISK

Exploit-DB✓ VexDay Proof

Luckybot 3 - 'DIR' Multiple Remote File Inclusions

CVE-2006-6788—webappsphp26 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code vi

23RISK

Exploit-DB✓ VexDay Proof

logahead UNU edition 1.0 - Arbitrary File Upload / Code Execution

CVE-2006-6887—webappsphp25 Dec 2006

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP c

23RISK

Exploit-DB✓ VexDay Proof

Fishyshoop 0.930b - Remote Add Administrator Account

CVE-2006-6773—webappsphp25 Dec 2006

pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by

23RISK

Exploit-DB✓ VexDay Proof

Okul Merkezi Portal 1.0 - 'ataturk.php' Remote File Inclusion

CVE-2006-6793—webappsphp25 Dec 2006

PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute arb

23RISK

Exploit-DB✓ VexDay Proof

PhpbbXtra 2.0 - 'phpbb_root_path' Remote File Inclusion

CVE-2006-6789—webappsphp25 Dec 2006

PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Phpbbxtra 2.0 allows remote attackers t

23RISK

Exploit-DB✓ VexDay Proof

vBulletin 3.5.x/3.6.x - SWF Script Injection

CVE-2006-6779—webappsphp25 Dec 2006

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or

23RISK

Exploit-DB✓ VexDay Proof

Chatwm 1.0 - 'SelGruFra.asp' SQL Injection

CVE-2006-6791—webappsasp24 Dec 2006

SQL injection vulnerability in SelGruFra.asp in chatwm 1.0 allows remote attackers to execute arbitrary SQL commands via

23RISK

Exploit-DB✓ VexDay Proof

Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution

CVE-2006-6790—webappsphp24 Dec 2006

Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remote

23RISK

Exploit-DB✓ VexDay Proof

Ananda Real Estate 3.4 - 'agent' SQL Injection

CVE-2010-4782—webappsasp24 Dec 2006

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allo

23RISK

Exploit-DB✓ VexDay Proof

TimberWolf 1.2.2 - 'shownews.php' Cross-Site Scripting

CVE-2006-6778—webappsphp24 Dec 2006

Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary

23RISK

Exploit-DB✓ VexDay Proof

Future Internet - 'index.cfm' Multiple SQL Injections

CVE-2006-6776—webappscfm23 Dec 2006

Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via t

23RISK

Exploit-DB✓ VexDay Proof

Enthrallweb eHomes 1.0 - Multiple (SQL Injection / Cross-Site Scripting) Vulnerabilities

CVE-2006-6204—webappsasp23 Dec 2006

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands vi

23RISK

Exploit-DB✓ VexDay Proof

Future Internet - 'index.cfm?categoryId' Cross-Site Scripting

CVE-2006-6777—webappscfm23 Dec 2006

Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary web

23RISK

Exploit-DB✓ VexDay Proof

A-Blog 1.0 - Cross-Site Scripting

CVE-2006-6729—webappsphp22 Dec 2006

Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scri

23RISK

Exploit-DB✓ VexDay Proof

Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting

CVE-2006-6703—webappsphp22 Dec 2006

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitra

23RISK

Exploit-DB✓ VexDay Proof

KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion

CVE-2006-6763—webappsphp22 Dec 2006

Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to ex

23RISK

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.