Lucene search
+L

225936 matches found

Nuclei
Nuclei
added 2026/08/23 2:28 a.m.45 views

Joomla! Component Archery Scores 1.0.6 - Local File Inclusion

A directory traversal vulnerability in archeryscores.php in the Archery Scores comarcheryscores component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1718 info: name: Joomla! Compone...

6.8CVSS5.7AI score0.09455EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.45 views

Schools Alert Management Script - Arbitrary File Read

Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...

7.5CVSS7.6AI score0.38988EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.72 views

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

4.3CVSS5.6AI score0.06429EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.121 views

MinIO Browser API - Server-Side Request Forgery

MinIO Browser API before version RELEASE.2021-01-30T00-20-58Z contains a server-side request forgery vulnerability. id: CVE-2021-21287 info: name: MinIO Browser API - Server-Side Request Forgery author: pikpikcu severity: high description: MinIO Browser API before version...

7.7CVSS7.5AI score0.24784EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.33 views

Joomla! Component WMI 1.5.0 - Local File Inclusion

A directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1607 info: name: Joomla!...

6.8CVSS5.7AI score0.08177EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.44 views

Joomla! Component AWDwall 1.5.4 - Local File Inclusion

A directory traversal vulnerability in the AWDwall comawdwall component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1494 info: name: Joomla! Component AWDwall 1.5.4 - Local File Inclusion author: daffain...

5CVSS5.6AI score0.167EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.36 views

Joomla! Component iF surfALERT 1.2 - Local File Inclusion

A directory traversal vulnerability in the iF surfALERT comifsurfalert component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1717 info: name: Joomla! Component i...

7.5CVSS5.8AI score0.22285EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.73 views

Joomla! Component VJDEO 1.0 - Local File Inclusion

A directory traversal vulnerability in the VJDEO comvjdeo component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1354 info: name: Joomla! Component VJDEO 1.0 - Local File Inclusion author: daffain...

5CVSS5.6AI score0.15909EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.48 views

Joomla! Component com_kp - 'Controller' Local File Inclusion

A directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2011-4804 info: name: Joomla! Component comkp - 'Controller' Local File Inclusion...

5CVSS5.6AI score0.20981EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.55 views

Joomla! Component com_cartweberp - Local File Inclusion

A directory traversal vulnerability in the CARTwebERP comcartweberp component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-0982 info: name: Joomla! Component comcartweberp - Local File Inclusion author:...

4.3CVSS5.6AI score0.06238EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.43 views

Joomla! Component JProject Manager 1.0 - Local File Inclusion

A directory traversal vulnerability in the Ternaria Informatica JProject Manager comjprojectmanager component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1469 inf...

6.8CVSS5.8AI score0.08163EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.52 views

Joomla! Component webERPcustomer - Local File Inclusion

A directory traversal vulnerability in weberpcustomer.php in the webERPcustomer comweberpcustomer component 1.2.1 and 1.x before 1.06.02 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1315 info: name: Joomla!...

5CVSS5.5AI score0.08233EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.50 views

Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion

A directory traversal vulnerability in the MT Fire Eagle commtfireeagle component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1719 info: name: Joomla! Component ...

6.8CVSS5.8AI score0.09371EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.50 views

Joomla! Component Advertising 0.25 - Local File Inclusion

A directory traversal vulnerability in the Advertising comadvertising component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1473 info: name: Joomla! Component...

6.8CVSS5.8AI score0.08163EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.105 views

Accela Civic Platform <=21.1 - Cross-Site Scripting

Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via ssoAdapter/logoutAction.do successURL. id: CVE-2021-34370 info: name: Accela Civic Platform 21.1 that includes proper input validation and sanitization. reference: - https://www.exploit-db.com/exploits/49990 -...

6.1CVSS5.7AI score0.09996EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.56 views

HotelDruid 2.3.0 - Cross-Site Scripting

HotelDruid 2.3.0 contains a cross-site scripting vulnerability affecting nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php. id: CVE-2019-8937 info: name: HotelDruid 2.3.0 - Cross-Site Scripting author: LogicalHunte...

6.1CVSS5.5AI score0.10633EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.53 views

WordPress Download Manager <2.9.94 - Cross-Site Scripting

WordPress Download Manager plugin before 2.9.94 contains a cross-site scripting vulnerability via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter. id: CVE-2019-15889 info: name: WordPress Download Manager 2.9.94 - Cross-Site Scripting author: daffainf...

6.1CVSS5.6AI score0.11375EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.56 views

Microstrategy Web 7 - Cross-Site Scripting

Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter. id: CVE-2018-18775 info: name: Microstrategy Web 7 - Cross-Site Scripting author: 0xAkoko severity: medium description: Microstrategy Web 7 does not...

6.1CVSS5.6AI score0.07905EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.103 views

openSIS Student Information System 8.0 SQL Injection

openSIS Student Information System version 8.0 is susceptible to SQL injection via the studentid and TRANSFERSCHOOL parameters in POST request sent to /TransferredOutModal.php. id: CVE-2021-41691 info: name: openSIS Student Information System 8.0 SQL Injection author: Bartu Utku SARP severity: hi...

9.8CVSS6.5AI score0.01723EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.58 views

WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting

WordPress W3 Total Cache plugin before 2.1.4 is susceptible to cross-site scripting within the extension parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This can allow an attacker to convince an authenticated admin into clicking a link to run...

6.1CVSS5.7AI score0.01905EPSS
SaveExploits2References5
Rows per page
Query Builder