Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Eskolar CMS 0.9.0.0 - Blind SQL Injection

CVE-2006-3727—webappsphp

Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2 - 'id' SQL Injection

CVE-2008-3355—webappsphp

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection

CVE-2008-4202—webappsphp

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drinks Complete Website 2.1.0 - 'drinkid' SQL Injection

CVE-2008-5169—webappsphp

SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easysitenetwork Jokes Complete Website 2.1.3 - 'jokeid' SQL Injection

CVE-2008-5174—webappsphp

SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ HotScripts-like Site - 'cid' SQL Injection

CVE-2008-6243—webappsphp

SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MyContent 1.1.13 - Blind SQL Injection

CVE-2008-6430—webappsphp

SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Webshop 1.02 - Authentication Bypass

CVE-2008-6627—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Dir Submit - Authentication Bypass

CVE-2009-1787—webappsphp

Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

CVE-2008-3307—webappsphp

SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection / Local File Inclusion

CVE-2007-2305—webappsphp

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection

CVE-2007-3234—webappsphp

SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Freelance Zone - 'coder_id' SQL Injection

CVE-2008-4469—webappsphp

SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Blog System - SQL Injection

CVE-2008-5311—webappsphp

SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Career - SQL Injection

CVE-2008-6867—webappsphp

SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin Mod RPG Inferno 2.4 - 'inferno.php' SQL Injection

CVE-2007-3687—webappsphp

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'lpro.php' SQL Injection

CVE-2008-5779—webappsphp

SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AskPert - Authentication Bypass

CVE-2008-6309—webappsphp

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Groone's GLink ORGanizer - 'index.php?cat' SQL Injection

CVE-2009-0299—webappsphp

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodealers CMS AutOnline - 'id' SQL Injection

CVE-2008-4074—webappsphp

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

LocazoList 2.01a beta5 - 'subcatID' SQL Injection

CVE-2007-0129—webappsasp

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

ThWboard 3.0b2.84-php5 - SQL Injection / Code Execution

CVE-2007-0340—webappsphp

SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

CVE-2008-4345—webappsphp

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightRO CMS 1.0 - 'index.php?projectid' SQL Injection

CVE-2007-0904—webappsphp

SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Injader CMS 2.1.1 - 'id' SQL Injection

CVE-2008-5890—webappsphp

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module debaser 0.92 - 'genre.php' Blind SQL Injection

CVE-2007-1805—webappsphp

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6881—webappsphp

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection

CVE-2007-2933—webappsphp

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! al

23RISCO

abrir ↗

Referência✓ VexDay Proof

PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection

CVE-2007-3584—webappsphp

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection

CVE-2007-3809—webappsphp

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.