Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência✓ VexDay Proof

CMS WebManager-Pro - Multiple SQL Injections

CVE-2008-2351—webappsphp

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection

CVE-2008-2867—webappsphp

SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection

CVE-2008-4518—webappsphp

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link ADS 1 - 'linkid' SQL Injection

CVE-2008-2869—webappsphp

SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module makale 0.26 - SQL Injection

CVE-2008-4653—webappsphp

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod recept - 'kat_id' SQL Injection

CVE-2008-4527—webappsphp

SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection

CVE-2008-5166—webappsphp

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

PG Job Site - Blind SQL Injection

CVE-2008-6117—webappsphp

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tips Complete Website 1.2.0 - 'tipid' SQL Injection

CVE-2008-5168—webappsphp

SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-4944

CVE-2010-4944—

SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - Authentication Bypass

CVE-2008-6623—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Polls 1.01 - Authentication Bypass

CVE-2008-6625—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

FluentCMS - 'view.php' SQL Injection

CVE-2008-6642—webappsphp

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-0764

CVE-2010-0764—

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISCO

abrir ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISCO

abrir ↗

Referência

CVE-2008-6277

CVE-2008-6277—

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote at

23RISCO

abrir ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISCO

abrir ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISCO

abrir ↗

Referência

CVE-2010-1727

CVE-2010-1727—

SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-1656

CVE-2010-1656—

SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2009-3438

CVE-2009-3438—

SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2009-3310

CVE-2009-3310—

SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-3116

CVE-2009-3116—

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2009-2593

CVE-2009-2593—

SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2008-4458

CVE-2008-4458—

SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XplodPHP AutoTutorials 2.1 - 'id' SQL Injection

CVE-2008-1889—webappsphp

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

5 star review - Cross-Site Scripting / SQL Injection

CVE-2008-3780—webappsphp

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.