Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wp-pagenavi domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/u918112125/domains/exploit.company/public_html/wp-includes/functions.php on line 6114
Exploits 131 - exploit.company
header-logo
Suggest Exploit
explore-vulnerabilities

Explore Vulnerabilities

Version
Year

Explore all Exploits:

vacation Rental Script SQL injection Vulnerability

The exploit allows an attacker to perform an SQL injection attack by manipulating the 'rental_id' parameter in the 'CalendarView' module of the vacation Rental Script. By injecting malicious SQL code, the attacker can retrieve sensitive information such as the admin's name and password.

video games rentals Script SQL injection Vulnerability

The video games rentals Script is vulnerable to SQL injection. An attacker can exploit this vulnerability by injecting malicious SQL code into the 'pfid' parameter of the 'index.php' page. This can lead to unauthorized access, data manipulation, and potential compromise of the database.

Test DoS Page Vulnerability

This vulnerability is a DoS vulnerability that can be exploited by an attacker to cause an access violation exception in the target system. The vulnerability is caused by a flaw in the target object's ShowDlg function, which can be triggered by passing a specially crafted argument. This results in a memory read attempt at the address 0x00000020, leading to an access violation exception (0xC0000005).

SQL injection in osTicket

A vulnerability has been discovered in osTicket, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "input" parameter to ajax.php is not properly sanitized before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The vulnerability is confirmed in version 1.6 RC5. Other versions may also be affected.

Recent Exploits: