Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

77,772cataloged exploits

35,760CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,455Referência 22,523GitHub PoC 14,289VulnCheck XDB 8,710Nuclei 4,319Metasploit 3,476✓ verified onlyrecent popular risk

24,455 exploits

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection

CVE-2005-4195—webappsphp12 Dec 2005

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-BrowseResources.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RISK

open ↗

Exploit-DB✓ VexDay Proof

LogiSphere 0.9.9 j - URI Multiple Method Traversal Arbitrary File Access

CVE-2005-4202—remotewindows12 Dec 2005

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (

23RISK

open ↗

Exploit-DB✓ VexDay Proof

BTGrup Admin WebController - SQL Injection

CVE-2005-4207—webappsphp12 Dec 2005

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the

23RISK

open ↗

Exploit-DB✓ VexDay Proof

BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading

CVE-2005-4206MEDIUMwebappsjsp12 Dec 2005

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allow

33RISK

open ↗

Exploit-DB✓ VexDay Proof

Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting

CVE-2005-4196—webappsphp12 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attacke

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution

CVE-2005-4208—webappsphp10 Dec 2005

Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot)

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution

CVE-2005-4449—webappsphp10 Dec 2005

verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the fil

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Lyris ListManager - Read Message Attachment SQL Injection (Metasploit)

CVE-2005-4143—remotewindows09 Dec 2005

SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Magic Forum Personal - 'view_forum.cfm?ForumID' SQL Injection

CVE-2005-4071—webappscfm08 Dec 2005

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (2)

CVE-2005-4086—webappsphp08 Dec 2005

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (Suga

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Magic List Pro - 'view_archive.cfm?ListID' SQL Injection

CVE-2005-4073—webappscfm08 Dec 2005

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitra

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections

CVE-2005-4071—webappscfm08 Dec 2005

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit)

CVE-2003-0727—remotewindows08 Dec 2005

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to

50RISK

open ↗

Exploit-DB✓ VexDay Proof

MilliScripts 1.4 - 'register.php' Cross-Site Scripting

CVE-2005-4161—webappsphp08 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation

CVE-2005-4197—webappscgi08 Dec 2005

tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a para

28RISK

open ↗

Exploit-DB✓ VexDay Proof

Website Baker 2.6.0 - Authentication Bypass / Remote Code Execution

CVE-2005-4140—webappsphp08 Dec 2005

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption

CVE-2005-4131—doswindows08 Dec 2005

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allo

35RISK

open ↗

Exploit-DB✓ VexDay Proof

Mozilla Firefox 0.x/1.x - Large History File Buffer Overflow

CVE-2005-4134—dosmultiple08 Dec 2005

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of ser

28RISK

open ↗

Exploit-DB✓ VexDay Proof

CF_Nuke 4.6 - 'index.cfm' Cross-Site Scripting

CVE-2005-4075—webappscfm08 Dec 2005

Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to in

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (2)

CVE-2005-4087—webappsphp08 Dec 2005

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (

23RISK

open ↗

Exploit-DB✓ VexDay Proof

CF_Nuke 4.6 - 'index.cfm' Local File Inclusion

CVE-2005-4074—webappscfm08 Dec 2005

Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows rem

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SimpleBBS 1.1 - Remote Command Execution

CVE-2005-4135—webappsphp07 Dec 2005

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ASPMForum - 'kullanicilistesi.asp?harf' SQL Injection

CVE-2005-4141—webappsasp07 Dec 2005

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)

23RISK

open ↗

Exploit-DB✓ VexDay Proof

DRZES Hms 3.2 - 'login.php' Cross-Site Scripting

CVE-2005-4136—webappsphp07 Dec 2005

Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web s

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Thwboard Beta 2.8 - 'calendar.php?year' SQL Injection

CVE-2005-4139—webappsphp07 Dec 2005

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL co

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Appfluent Database IDS < 2.1.0.103 - Environment Variable Local Overflow

CVE-2005-4076—localsolaris07 Dec 2005

Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUE

23RISK

open ↗

Exploit-DB✓ VexDay Proof

SugarSuite Open Source 4.0beta - Remote Code Execution (1)

CVE-2005-4087—webappsphp07 Dec 2005

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (

23RISK

open ↗

Exploit-DB✓ VexDay Proof

ASPMForum - 'forum.asp?baslik' SQL Injection

CVE-2005-4141—webappsasp07 Dec 2005

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1)

23RISK

open ↗

Exploit-DB✓ VexDay Proof

Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection

CVE-2005-4139—webappsphp07 Dec 2005

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL co

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.