Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência✓ VexDay Proof

Magic News Pro 1.0.3 - 'script_path' Remote File Inclusion

CVE-2006-4823—webappsphp

PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Shadowed Portal 5.599 - 'root' Remote File Inclusion

CVE-2006-4826—webappsphp

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Downstat 1.8 - 'art' Remote File Inclusion

CVE-2006-4827—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCal Pro 2.8.001 - 'app_root' Remote File Inclusion

CVE-2006-4845—webappsphp

PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

BolinOS 4.5.5 - 'gBRootPath' Remote File Inclusion

CVE-2006-4850—webappsphp

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.5 - 'browse.asp' SQL Injection

CVE-2006-4852—webappsasp

SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Haberx 1.02 < 1.1 - 'tr' SQL Injection

CVE-2006-4853—webappsasp

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_serverstat 0.4.4 - Remote File Inclusion

CVE-2006-4858—webappsphp

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier c

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNUTURK 2G - 't_id' SQL Injection

CVE-2006-4867—webappsphp

SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpunity.postcard - 'gallery_path' Remote File Inclusion

CVE-2006-4869—webappsphp

PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

aeDating 4.1 - dir[inc] Remote File Inclusion

CVE-2006-4870—webappsphp

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMtextS 1.0 - '/users_logins/admin.txt' Credentials Disclosure

CVE-2006-4897—webappsphp

CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, whic

23RISCO

abrir ↗

Referência✓ VexDay Proof

guanxiCRM Business Solution 0.9.1 - Remote File Inclusion

CVE-2006-4898—webappsphp

PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

more.groupware 0.74 - 'new_calendarid' SQL Injection

CVE-2006-4906—webappsphp

SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP DocWriter 0.3 - 'script' Remote File Inclusion

CVE-2006-4912—webappsphp

PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft e-Friends 4.85 - Remote Command Execution

CVE-2006-4913—webappsphp

Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tekman Portal 1.0 - 'tr' SQL Injection

CVE-2006-4916—webappsasp

SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Discussion Board 0.1.0 - Remote File Inclusion

CVE-2006-4918—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Site@School 2.4.02 - Arbitrary File Upload

CVE-2006-4922—webappsphp

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProgSys 0.156 - 'RR.php' Remote File Inclusion

CVE-2006-4944—webappsphp

PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Digital WebShop 1.128 - Multiple Remote File Inclusions

CVE-2006-4945—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier al

23RISCO

abrir ↗

Referência✓ VexDay Proof

BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4946—webappsphp

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyReview 1.9.4 - 'email' SQL Injection / Code Execution

CVE-2006-4957—webappsphp

SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution

CVE-2006-4960—webappsphp

Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion

CVE-2006-4966—webappsphp

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Cart Pro - 'Home_Path' Remote File Inclusion

CVE-2006-4970—webappsphp

PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpQuiz 0.1.2 - SQL Injection / Code Execution

CVE-2006-4977—webappsphp

Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Besc

23RISCO

abrir ↗

Referência✓ VexDay Proof

pNews 1.1.0 - 'nbs' Remote File Inclusion

CVE-2006-5022—webappsphp

PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allow

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.